/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 6249 by jmm-guest, Mon Aug 6 19:17:15 2007 UTC revision 13845 by jmm-guest, Sun Jan 17 11:52:36 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (upstream is working on using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)          that add real value)
17  dpkg  sort: static (linking statically against a lib)
18  rsync (somehow derived code base)        embed (embeds a copy of the library into another source package)
19  mozilla(?)        modified-embed (embeds a code copy that differs from upstream code)
20  Linux kernels        fork (a full-blown fork of another source package)
21  pvpgn (links dynamically since 1.7.8-2)        old-version (an older version of essentially the same code)
22  mrtg (links dynamically since 2.12.2-1)  
23  rpm  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25  libbz2:  
26  dpkg (statically linked)  Everything up to the next line is ignored.
27    ---BEGIN
28  libgadu/ekg:  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  centericq          NOTE: Fixed packages link to poppler library unless otherwise noted
30  gaim          - pdftohtml <unknown>
31  kopete (ships the code, but links dynamically in the Debian package)          [sarge] - pdftohtml <unfixed>
32  kadu (not packaged in Debian)          [etch] - pdftohtml <unfixed>
33  GNU gadu (not yet packaged in Debian)          NOTE: has been replaced by poppler-utils
34            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35  xmlrpc: (which package is the "origin" of this code?)          - texlive-base 3.0-12 (embed)
36  drupal          - texlive-bin 2007-1 (embed)
37  phpgroupware          NOTE: links to poppler
38  egroupware          - koffice <unfixed> (embed; bug #436163)
39  phpwiki          - libextractor 0.5.12-1 (embed)
40  php4 (php-pear, IIRC this was reorganized some weeks ago?)          NOTE: libextractor is using its own pdf decoder now
41  tikiwiki          - ipe <unfixed> (embed)
42            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43  shtool: (affects build-time only)          - ruby-gnome2 <unknown> (embed)
44  mysql-ocaml          NOTE: copy only present in source but links to poppler
45  php4          - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <unfixed> (embed; bug #551293)
47  mozilla:          - poppler <unfixable> (fork)
48  mozilla-firefox  
49  mozilla-thunderbird  ppmd
50  firefox (to be removed)          - libcomplearn-mod-ppmd <unfixed> (fork)
51  thunderbird (to be removed)          NOTE: discussion in #458152
52  iceweasel  
53  iceape  libevent
54  icedove          - transmission 1.71-1 (embed; bug #529372)
55  xulrunner  
56  nvu (no longer in Debian)  lrmi
57            - read-edid 2.0.0-1 (embed; bug #495131)
58  xli:          - s3switch <unfixed> (embed)
59  xloadimage          - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
62  openmotif  peercast
63  xfree86/xorg (in libxpm)          - gnome-peercast <removed> (embed)
64            [etch] - gnome-peercast <unfixed> (embed)
65  kerberized apps with BSD origin:  
66  krb4  silc-toolkit
67  krb5          - silc-client 1.1~beta6-1 (embed)
68  heimdal  
69    icclib
70  grip: (which pkg is the origin?)          - ghostscript <unfixed> (embed)
71  libcdaudio          - argyll <unfixed> (embed)
72  grip  
73  gnome-vfs (vfs2 as well?)  dietlibc
74            - ccontrol 0.9.1+20071204-1 (static)
75  fudforum:  
76  phpgroupware-fudforum  libmikmod
77  egroupware-fudforum (removed from egroupware after sarge)          - sdl-mixer1.2 <unfixed> (embed)
78            TODO: report bug
79  cvs:  
80  gcvs (at least an additional script is included, check if there's more)  libiax
81            - iaxmodem <unfixable> (embed; bug #548885)
82  pcre:  
83  all pythons  spandsp
84  php4 (src included, but Debian package links dynamically)          - iaxmodem <unfixable> (embed; bug #548885)
85  analog (src included, but Debian package links dynamically)  
86  libgoffice-1  python-paramiko
87  tf5 (since 5.0beta7 the Debian package links dynamically)          - fabric 0.9.0-2 (embed; bug #561398)
88    
89  tiff:  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
90  wxpythongtk (check, which debian pkg this is in)          - dpkg <unfixed> (static)
91  older kdegraphics/kpdf releases < 3.3 embedded a copy          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
92            - rsync <unfixed> (embed)
93  uudeview:          - cherokee <unfixed> (embed)
94  libconvert-uulib-perl          NOTE: somehow derived code base
95            - mono <unfixed> (embed)
96  sqlite: (not affected by security vulnerabilities so far)          TODO: check mozilla
97  amarok          - Linux kernels <unfixed> (embed)
98            - pvpgn 1.7.8-2 (embed)
99  util-linux/mount:          - mrtg 2.12.2-1 (embed)
100  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - rpm <unknown> (embed)
101            NOTE: pinged anibal since when rpm was fixed
102  webmin:          - tuxcmd-modules <unfixed> (embed)
103  usermin (only in sarge)          - zsync <unfixed>
104            - tra <unfixed>
105  sylpheed:          - sash <unfixed>
106  sylpheed-claws          - nsis <unfixed>
107            - mseide-msegui <unfixed>
108  phpsysinfo:          NOTE: mseide
109  egroupware          - mirrordir <unfixed>
110  phpgroupware          - poco <unfixed>
111            - klibc <unfixed>
112            - ghostscript <unfixed>
113            - freeimage <unfixed>
114            - clamav <unfixed> (fork)
115            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
116            - tuxonice-userui <unfixed>
117            - plt-scheme <unfixed>
118            - perl <unfixed>
119            - paraview <unfixed>
120            - gcvs <unfixed>
121            - dump <unfixed>
122            - aide <unfixed> (static)
123            - dar <unfixed> (static)
124            - avfs <unfixed>
125            - fpc <unfixed>
126            - winff <unfixed>
127            NOTE: inherited from fpc, see #472304
128            - lazarus <unfixed>
129            NOTE: inherited from fpc, see #472304
130            - erlang <unfixed> (embed)
131            - gamera 3.2.3-1 (embed)
132            - python2.4 <unfixed> (embed; bug #553403)
133            - python2.5 <unfixed> (embed; bug #553403)
134    
135    dulwich
136            - hg-git 0.1.0-1 (embed; bug #541996)
137    
138    libvigraimpex
139            - hugin <unfixed> (embed; bug #542259)
140            - enblend-enfuse <unfixed> (embed; bug #542258)
141            - gamera 3.2.3-1 (embed)
142    
143    libbz2
144            - dpkg <unfixed> (static)
145    
146    libyahoo2
147            - centerim <unfixed> (embed; bug #559783)
148    
149    libmsn
150            - centerim <unfixed> (embed; bug #559783)
151    
152    libgadu
153            - centerim <unfixed> (embed; bug #559783)
154            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
155            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
156            - kdenetwork 4:3.3.2-5 (embed)
157            NOTE: from kdenetwork: kopete
158            - ekg 1:1.8~rc0-1 (embed)
159            - kadu 0.6.0.2-3 (embed; bug #504430)
160            - gadu <itp> (embed)
161    
162    xmlrpc (which package is the "origin" of this code?)
163            - drupal <unfixed> (embed)
164            - phpgroupware <unfixed> (embed)
165            - egroupware <unfixed> (embed)
166            - phpwiki <unfixed> (embed)
167            - php4 <unfixed> (embed)
168            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
169    
170    shtool (affects build-time only)
171            - mysql-ocaml <unfixed> (embed)
172            - php4 <unfixed> (embed)
173    
174  phpldapadmin:  xulrunner
175  egroupware (removed from egroupware after sarge)          - iceape <unfixed> (embed; bug #561749)
176            - iceweasel 2.0.0.19 (embed)
177            - icedove <unfixed> (embed; bug #561750)
178            - kompozer <unfixed> (embed; bug #532168)
179            - galeon 2.0.2-4 (embed)
180            - epiphany-browser 2.14.3-8 (embed)
181            - conkeror 0.9~git080629-2 (embed)
182            - kazehakase 0.4.2-1 (embed)
183    
184    xli
185            - xloadimage <unfixed> (embed)
186    
187    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
188            - openmotif <unfixed> (embed)
189            - libxpm <unfixed> (embed)
190    
191    kerberized apps with BSD origin
192            - krb4 <removed> (embed)
193            - krb5 <unfixed> (embed)
194            - heimdal <unfixed> (embed)
195    
196    grip (which pkg is the origin?)
197            - libcdaudio <unfixed>
198            - grip <unfixed>
199            - gnome-vfs <unfixed>
200            TODO: check vfs2 as well
201    
202    fudforum
203            [etch] - phpgroupware <unfixed> (embed)
204            NOTE: phpgroupware-fudforum
205            [sarge] - egroupware-fudforum <removed> (embed)
206    
207    libbsd
208            - rdate 1:1.2-3 (embed)
209            - atheme-services <unfixed>
210            - libbsd-arc4random-perl <unfixed>
211            - isakmpd <unfixed>
212            - bsdgames <unfixed> (embed)
213            - bsd-mailx <unfixed> (embed)
214            - netcat-openbsd <unfixed> (embed; bug #550611)
215            - openssh <unfixed> (embed)
216            - unworkable <unfixed> (embed)
217    
218    cvs
219            - gcvs <unfixed> (embed)
220            NOTE: see cvsunix/src in tarball
221    
222    pcre3
223            - php4 <unknown> (embed)
224            - analog 2:5.23-0woody1 (embed)
225            - goffice <unfixed> (embed)
226            NOTE: libgoffice-*
227            - vfu 4.06-4.1 (embed; bug #450754)
228            - tf5 5.0beta7-1 (embed)
229            - monotone 0.43-1 (embed)
230            NOTE: this only affects versions >= 0.37
231            - glib2.0 2.15.2-1 (embed)
232            - apache2 2.0.53-4 (embed)
233            - exim4 4.10-0.srh20.12 (embed)
234            - yacas <unfixed> (embed)
235            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
236            - gtamsanalyzer.app 0.42-5 (embed)
237            - tin 980117-1 (embed)
238            - kazehakase 0.5.2-1
239            - webkit 1.0.1-1 (embed)
240            - qt4-x11 <unfixed> (embed)
241            NOTE: embedded via webkit copy
242            - erlang <unfixed> (embed)
243            - ssed <unfixed> (embed)
244    
245    tiff
246            - wxwindows2.4 2.2.1 (embed)
247            - gamera 3.2.3-1 (embed)
248    
249    uudeview
250            - libconvert-uulib-perl <unfixed> (embed)
251            - pan <unfixed> (embed)
252    
253    sqlite (not affected by security vulnerabilities so far)
254            - amarok <unfixed> (embed)
255            - monotone 0.43-1 (embed)
256            - iceweasel <unfixed> (embed)
257            - heimdal <unfixed> (embed; bug #559616)
258    
259    util-linux/mount
260            - loop-aes-utils <unfixed> (embed)
261            NOTE: contains code from util-linux' mount in the mount-aes-udeb
262    
263    sylpheed
264            - sylpheed-claws <unfixed> (fork)
265    
266    phpsysinfo
267            - egroupware <unfixed> (embed)
268            - phpgroupware <unfixed> (embed)
269    
270    phpldapadmin
271            [sarge] - egroupware <unfixed> (embed)
272            NOTE: removed from egroupware after sarge
273    
274    chmlib
275            - kchmviewer <unknown> (embed)
276    
277    ffmpeg (libavcodec/libavformat)
278            - mplayer 1.0~rc2-14 (embed; bug #395252)
279            - kino 1.0.0-1
280            - vlc <not-affected> (Links dynamically since initial release)
281            - smilutils 0.3.0-10
282            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
283            - motion 3.1.19-1
284            - gstreamer0.10-ffmpeg 0.10.3-2
285            - xmovie <removed> (static)
286            TODO: gimp-gap (potentially using ffmpeg code as well)
287            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
288            - audacity 1.3.7-2 (embed; bug #512278)
289    
290    faad2
291            - mplayer 1.0~rc2-20 (embed)
292            - avifile <unfixed> (embed; bug #538750)
293            - ffmpeg-debian <removed> (old-version)
294    
295    libmad (MPEG decoding lib)
296            - xine-lib <unfixed> (embed)
297            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
298            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
299    
300  chmlib:  libdts
301  kchmviewer (not packaged in Debian)          - xine-lib <unfixed> (embed)
302    
303  libavcodec/libavformat:  flac
304  ffmpeg          - xine-lib <unfixed> (embed)
 xine-lib  
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
305    
306  mad MPEG decoding lib:  liba52
307  mad          - a52dec <unfixed> (embed)
308  xine-lib          - xine-lib <unfixed> (embed)
309    
310    libmpeg2
311            - mpeg2dec <unfixed> (embed)
312            - xine-lib <unfixed> (embed)
313    
314    libntlm
315            - wget <unfixed> (fork; bug #550436)
316            - curl <unfixed> (fork; bug #550437)
317            - cntlm <unfixed> (fork; bug #550438)
318    
319    uw-imap
320            - pine <unfixed> (embed)
321            - alpine <unfixed> (embed)
322    
323    imagemagick
324            - graphicsmagick <unfixed> (fork)
325    
326    python-urlgrabber
327            - mercurial <unfixed> (embed; bug #531062)
328            - w3af <unfixed> (embed; bug #555372)
329            [experimental] - harvestman <unfixed> (embed; bug #555373)
330    
331    beautifulsoup
332            - python-mechanize <unfixed> (embed; bug #555349)
333            - zope2.11 <removed> (embed; bug #555350)
334            - twill <unknown> (embed)
335    
336    halibut
337            - nsis <unfixed> (fork)
338    
339    libghttp
340            - hotway <unfixed> (embed)
341    
342    libsndfile
343            - ardour 1:2.7.1-1 (embed)
344    
345    glibmm2.4
346            - ardour 1:2.7.1-1 (embed)
347    
348    libgnomecanvasmm2.6
349            - ardour 1:2.7.1-1 (embed)
350    
351    libsigc++-2.0
352            - ardour 1:2.7.1-1 (embed)
353    
354    soundtouch
355            - ardour 1:2.7.1-1 (embed)
356    
357    libmms
358            - xine-lib <unfixed> (embed)
359            - mimms <unfixed> (embed)
360    
361    fckeditor
362            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
363            - moin 1.8.2-2 (embed; bug #452599)
364            - karrigell <removed> (embed; bug #452598)
365            - gforge 4.6.99+svn6225-1 (embed)
366            - request-tracker3.8 <unfixed> (embed)
367            - otrs2 <unfixed> (embed)
368    
369    ipatlas (not packaged in Debian)
370            - moodle <unfixed> (embed; bug #507185)
371    
372    libphp-phpmailer
373            - moodle <unfixed> (embed; bug #507185)
374            - mahara <unfixed> (embed)
375            - symfony <unfixed> (embed)
376            [etch] - phpgroupware <unfixed> (embed)
377            NOTE: phpgroupware-felamimail is only in etch
378            - egroupware <unfixed> (embed; bug #504283)
379            - glpi <unfixed>
380    
381    htmlArea (not packaged in Debian)
382            - moodle <unfixed> (embed)
383    
384    giflib
385            - wine <unfixed> (embed; bug #466181)
386    
387    bennu (not packaged in Debian, http://bennu.sourceforge.net)
388            - moodle <unfixed> (embed)
389    
390    smarty
391            - moodle 1.8.2-2 (embed; bug #471158)
392            - gallery2 2.2.5-2 (embed; bug #471160)
393            - mahara 0.9.2-2 (embed; bug #471201)
394            - gosa 2.4beta1-1 (embed; bug #471200)
395    
396  libdts:  TinyMCE
397  libdts          - wordpress 2.5.1-3 (embed; bug #478257)
398  xine-lib          - moodle <unfixed> (embed; bug #507185)
399            - knowledgeroot <unfixed> (embed)
400            - joomla <itp> (bug #326398)
401    
402    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
403            - scite <unfixed> (embed)
404            - qscintilla <unfixed> (embed)
405            - qscintilla2 <unfixed> (embed)
406            - geany <unfixed> (fork)
407            - anjuta <unfixed> (embed)
408    
409    libphp-adodb
410            - moodle <unfixed> (embed; bug #507185)
411            NOTE: also AdoDB-XML Schema
412            - gallery2 <unfixed> (embed)
413            - phppgadmin <unfixed> (embed)
414            - egroupware <unfixed> (embed)
415            - phpwiki <unfixed> (embed)
416            - torrentflux 2.0beta1-2 (embed)
417            - ipplan <unfixed> (embed)
418            - typo3-src <unfixed> (embed)
419            - cacti <unknown> (embed)
420            [sarge] - cacti <unfixed> (embed)
421            NOTE: dependency exists, but internal version is used
422            - gforge 4.7~rc2-6 (embed)
423            - mahara <unfixed> (embed)
424    
425    gzip
426            - linux-kernel <unfixed> (embed)
427            NOTE: lib/inflate.c
428            - klibc <unfixed> (embed)
429            NOTE: based on linux-kernel gzip code
430            - busybox <unfixed> (embed)
431    
432    neon
433            - cadaver 0.22.3+debian-1 (embed; bug #188381)
434            - gnome-vfs2 <unfixed> (embed; bug #395874)
435            [etch] - litmus <unfixed> (embed; #395875)
436            - litmus <removed> (embed; #395875)
437            [sarge] - screem <unfixed> (embed)
438            - sitecopy 1:0.16.0-1 (embed; bug #395876)
439            [etch] - tla <unfixed> (embed; bug #395877)
440            [sarge] - tla <unfixed> (embed; bug #395877)
441    
442    libmodplug
443            - gst-plugins-bad0.10 <unfixed> (embed)
444    
445    libvncserver
446            - vino <unfixed> (embed)
447    
448    putty
449            - filezilla <unfixed> (embed)
450    
451    tinyxml (not packaged in Debian; itp bug #531968)
452            - filezilla <unfixed>
453            - crystalspace <unfixed> (embed)
454            - libwfut <unfixed> (embed)
455            - rarian <unfixed> (embed)
456            - bulletml <unfixed> (embed)
457            - pokerth <unfixed> (embed)
458            - qutecom <unfixed> (embed)
459            - sofa-framework <unfixed> (embed)
460            - yate <unfixed> (embed)
461            - antigrav <unfixed> (embed)
462            - balder2d <unfixed> (embed)
463            - cal3d <unfixed> (embed)
464            - criticalmass <unfixed> (embed)
465            - ember <unfixed> (embed)
466            - epiphany <unfixed> (embed)
467            - gambit <unfixed> (embed)
468            - noiz2sa <unfixed> (embed)
469            - ogre <unfixed> (embed)
470            - opencity <unfixed> (embed)
471            - openmovieeditor <unfixed> (embed)
472            - pouetchess <unfixed> (embed)
473            - tecnoballz <unfixed> (embed)
474            - trigger-rally <unfixed> (embed)
475            - xmoto <unfixed> (embed)
476            - mapnik <unknown> (embed)
477            NOTE: uses a different XML parser by default
478            - rrootage 0.23a-6 <embed>
479            NOTE: links to libbulltetml
480            - boson <unknown> (embed)
481            NOTE: the embedded code is unused
482    
483    gv
484            - evince <unfixed> (embed)
485            NOTE: ps/ tree from gv 3.5.8
486            NOTE: evince-gtk is affected (a component of evince source package)
487    
488    libXbae
489            - paw <removed> (embed)
490            [etch] - paw <unfixed> (embed)
491    
492    libgtkhtml
493            - claws-mail-extra-plugins <unfixed> (fork)
494    
495    libXaw
496            - paw <removed> (embed)
497            [etch] - paw <unfixed> (embed)
498            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
499    
500    libgd2
501            - graphviz <unfixed> (embed)
502            NOTE: lib/gd seems to be 2.0.33
503            - wml <unfixed> (embed)
504            - libwmf <unfixed> (embed)
505            NOTE: derived from gd 1.6.3
506    
507    rar
508            - unrar-nonfree <unfixed> (embed)
509    
510    unrar-free (maybe this code is derived from the original rar, too?)
511            - clamav <unfixed> (embed)
512            NOTE: seems to be disabled in default config
513    
514    mplayer (DirectMedia Object loader)
515            - xine-lib <unfixed> (embed)
516            NOTE: src/libw32dll/
517            - vlc <unfixed> (embed)
518            NOTE: modules/codec/dmo/
519            - mplayer 1.0~rc2-20 (embed)
520    
521    libwpd (WordPerfect converter)
522            - openoffice.org <unfixed> (embed)
523    
524    fsplib (http://sourceforge.net/projects/fsp/)
525            - gftp <unfixed> (embed)
526            NOTE: lib/fsplib version 0.3
527    
528    sprng
529            - tree-puzzle <unfixed> (embed)
530    
531    librpcsecgss
532            - krb5 <unfixed> (embed)
533    
534    jasper
535            - ghostscript 8.64~dfsg-2 (embed)
536    
537    libiris
538            - psi <unfixed> (embed)
539            - kdenetwork <unfixed> (embed)
540            NOTE: kopete embeds libiris but links dynamically to libidn
541            - kdegames <unfixed> (embed)
542            NOTE: ksirk/kde4
543    
544    libidn
545            - monotone 0.43-1 (embed)
546            - psi <unfixed> (embed)
547            NOTE: psi embeds libiris which embeds libidn
548            - kdegames <unfixed> (embed)
549            NOTE: kdegames/kde4 embeds libiris which embeds libidn
550    
551    lua5.1
552            - monotone 0.43-1 (embed)
553            - nmap 5.00-1 (embed; bug #527997)
554            [lenny] - nmap <unfixed> (embed; bug #527997)
555            - ocropus <unfixed> (embed)
556            - enigma <unfixed> (embed)
557            NOTE: requires lua built with C++
558            - freeciv <unfixed> (embed)
559            - spring <unfixed> (embed)
560    
561    libbotan
562            - monotone 0.43-1 (embed)
563    
564    NetXX
565            - monotone 0.43-1 (embed)
566    
567    libgc
568            - mono <unfixed> (embed)
569    
570    lzma
571            - p7zip <unfixed> (embed)
572            - xz-utils <unfixed> (fork)
573    
574    lzo
575            - grub2 <unfixed> (embed)
576    
577    yassl
578            - mysql-dfsg-5.0 <unfixed> (embed)
579    
580    pax code
581            - tar <unfixed> (embed)
582            - cpio <unfixed> (embed)
583    
584    t1lib
585            - tetex-bin 2.0.2-1 (embed)
586            - texlive-bin <unknown> (embed)
587    
588    guichan
589            - boswars <unfixed> (embed)
590            NOTE: maintainer notified us, working on it
591    
592    tolua
593            - boswars <unfixed> (embed)
594            NOTE: maintainer notified us, working on it
595            NOTE: actually tolua++
596            - ocropus <unfixed> (embed)
597            NOTE: actually tolua++
598            - freeciv <unfixed> (embed)
599            NOTE: actually tolua++
600            - enigma <unfixed> (embed)
601    
602  flac:  asio-dev
603  flac          - luxrender <removed> (embed)
 xine-lib  
604    
 liba52:  
 a52dec  
605  xine-lib  xine-lib
606            - vlc <unfixed> (embed)
607            NOTE: only parts included in modules/access/rtsp
608    
609  libmpeg2:  netpbm
610  mpeg2dec          - tcl8.3 <unfixed> (embed)
611  xine-lib          - tcl8.4 <unfixed> (embed)
612            - tcl8.5 <unfixed> (embed)
613            NOTE: generic/tkImgGIF.c
614    
615    tk8.5
616            - tk8.0 <removed> (old-version)
617            - tk8.3 <unfixed> (old-version)
618            - tk8.4 <unfixed> (old-version)
619            - perl-tk <unfixable> (fork)
620    
621    samba
622            - mc 2:4.6.2~git20080311-1 (embed)
623            NOTE: maintainer is aware of this, currently searching a solution
624    
625    plib1.8.4c2
626            - boson <unfixed> (fork)
627            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
628    
629    fribidi
630            - quesoglc <unfixed> (embed)
631            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
632    
633    glew
634            - quesoglc <unfixed> (embed; bug #489341)
635            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
636            - trigger <unfixed> (embed)
637            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
638            - trigger-rally <unfixed> (embed)
639            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
640    
641    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
642            - transcend <unfixed> (embed)
643            - cultivation <unfixed> (embed)
644            - passage <unfixed> (embed)
645            - gravitation <unfixed> (embed)
646    
647    tar
648            - libarchive <unfixed> (embed)
649            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
650    
651    cpio
652            - libarchive <unfixed> (embed)
653            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
654    
655    kde4libs
656            - kdelibs <unfixable> (old-version)
657    
658    webkit
659            - qt4-x11 <unfixed> (embed; bug #479851)
660            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
661            [lenny] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
662            - kde4libs <unfixable> (fork)
663            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
664            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
665    
666    ftgl
667            - blender 2.46+dfsg-1 (embed)
668    
669    wv
670            - abiword <unfixed>
671    
672    qemu
673            - kvm <unfixed> (embed; bug #543159)
674            NOTE: the kvm package will be removed from sid and squeeze soon (after
675            NOTE: which it will only be in experimental). superceded by qemu-kvm.
676            - qemu-kvm <unfixed> (embed; bug #560853)
677            - xen-3 3.4.2-2 (embed; bug #560856)
678            - xen-unstable <unfixed> (embed; bug #560856)
679    
680    vgabios
681            - kvm <unfixed> (embed; bug #489442)
682    
683    bochs
684            - kvm <unfixed> (embed; bug #489442)
685    
686    speex
687            - vorbis-tools <unfixed> (embed)
688            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
689            - gst-plugins-good0.10 <unfixed> (embed)
690            - xine-lib <unfixed> (embed)
691            - libfishsound <unfixed> (embed)
692            - libannodex <removed> (embed)
693            - vlc <unfixed> (embed)
694            - xmms-speex <unfixed> (embed)
695            - libsdl-sound1.2 <unfixed> (embed)
696            - sweep <unfixed> (embed)
697    
698    libreadline
699            - magic <itp> (old-version)
700    
701    opcode
702            - ode <unfixed> (embed)
703            NOTE: opcode is not a package in debian, it is just embedded
704            NOTE: http://www.codercorner.com/Opcode.htm
705    
706    gimpact
707            - ode <unfixed> (embed)
708            NOTE: gimpact is not a package in debian, it is just embedded
709            NOTE: http://gimpact.sf.net
710    
711    mochikit
712            - mahara <unfixed> (embed)
713            NOTE: they require extra patches, still unmerged upstream
714            - ntop <unfixed> (embed)
715            - coherence 0.6.2-1 (embed)
716            - paste <unfixed> (embed)
717            - turbogears <unfixed> (embed)
718            - plone3 <removed> (embed)
719            - xulrunner <unfixed> (embed)
720            - libjifty-plugin-chart-perl <unfixed> (embed)
721            - sabnzbdplus <unfixed> (embed)
722            - tgmochikit <unfixed> (embed)
723    
724    prototypejs
725            - netbeans-ide 6.0.1+dfsg-2 (embed)
726            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
727            - webcit <unfixed> (embed; bug #555219)
728            - asterisk 1:1.6.2.0~rc3-1 (embed)
729            - libjson-ruby 1.1.4-1 (embed; bug #555224)
730            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
731            - horde3 <unfixed> (embed)
732            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
733            - mediatomb <unfixed> (embed; bug #555233)
734            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
735            - ebug-http <removed> (embed; bug #555236)
736            - libaws 2.7-1 (embed; bug #555222)
737            - phpgedview <removed> (embed)
738            - poker-network <removed> (embed; bug #555238)
739            - rails 2.1.0-6 (embed)
740            - wordpress 2.5.0-2 (embed; bug #555243)
741            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
742            TODO: search through all of the other zope packages
743            - ampache 3.4.1-2 (embed)
744            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
745            - hobix 0.5~svn20070319-4 (embed; bug #555247)
746            - zabbix 1.6.6-4 (embed; bug #555250)
747            - chora2 <unfixed> (embed; bug #555253)
748            - gollem <unfixed> (embed; bug # 555254)
749            - jscropperui 1.2.1-1 (embed; bug #555257)
750            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
751            - ingo1 <unfixed> (embed; bug #555261)
752            - kronolith2 <unfixed> (embed; bug #555262)
753            - activeldap <unfixed> (embed)
754            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
755            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
756            - otrs2 2.3.4-6 (embed; bug #555267)
757            - webcalendar <unfixed> (embed; bug #555269)
758            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
759            - jifty 0.90519-1 (embed; bug #555271)
760            - jquery 1.4-1 (embed; bug #555272)
761            - passenger 2.2.5debian1-1 (embed; bug #555273)
762            - plone3 <removed> (embed; bug #555275)
763            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
764            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
765            - xulrunner <unfixed> (embed)
766            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
767    
768    gdb
769            - insight <unfixed> (embed)
770    
771    e2fsprogs
772            - ldiskfsprogs <unfixable> (fork)
773    
774    quazip (not packaged in Debian)
775            - qcake <unfixed> (embed)
776            NOTE: starting with upstream version 0.6.4
777    
778    exo
779            - pcmanfm <unfixed> (embed; bug #499677)
780            NOTE: slightly modified source code
781    
782    java
783            - openjdk-6 <unfixed>
784            - sun-java5 <unfixed>
785            - sun-java6 <unfixed>
786    
787    libphp-snoopy
788            - ampache 3.4.1-2 (embed; bug #504169)
789            - gforge 4.6.99+svn6094-2 (embed)
790            - mahara 1.0.5-2 (embed; bug #504170)
791            - pixelpost 1.7.1-5 (embed; bug #504171)
792            - mediamate 0.9.3.6-5 (embed; bug #504172)
793            - opendb <removed> (embed; bug #504173)
794            [etch] - opendb <unfixed> (embed; bug #504173)
795            - wordpress 2.5.1-9 (embed; bug #443948)
796            - moodle <unfixed> (embed; bug #507185)
797            [etch] - phpgroupware <unfixed> (embed)
798            NOTE: phpgroupware-felamimail
799            - magpierss 0.72-3 (embed; bug #431089)
800    
801    jquery
802            - zekr <unfixed> (embed)
803            - wordpress <unknown> (embed)
804            - yocto-reader <unfixed> (embed)
805            - textpattern <unfixed> (embed)
806            - genshi 0.5.1-1 (embed)
807            NOTE: compressed file under examples/ dir
808            - prewikka <unfixed> (embed)
809            - libramaze-ruby <unfixed> (embed)
810            - drupal5 <unfixed> (embed)
811            - b2evolution <unfixed> (embed)
812            - wesnoth <unfixed> (embed)
813    
814    tablesorter (jquery plugin, not packaged yet)
815            - wesnoth <unfixed> (embed)
816    
817    kses
818            - wordpress <unfixed> (embed; bug #504242)
819            NOTE: their copy has all methods renamed to wp_<foo>
820            NOTE: kses isn't in Debian, RFP: #504240
821            - moodle <unfixed> (embed; bug #507185)
822            - egroupware <unfixed> (embed)
823    
824    magpierss
825            - wordpress <unfixed> (embed; bug #504242)
826            - moodle <unfixed>
827    
828    php-gettext
829            - wordpress 2.8.4-1 (embed; bug #504242)
830            - docbookwiki <unfixed> (embed)
831            - knowledgeroot 0.9.9.5-1
832            NOTE: non-free
833    
834    libphp-ixr (name may change, it is the Incutio XML-RPC)
835            - wordpress <unfixed> (embed; bug #504242)
836            NOTE: libphp-ixr isn't in Debian, RFP: #504236
837            - dokuwiki <unfixed> (embed)
838            - textpattern <unfixed> (embed)
839    
840    libphp-cas
841            - glpi <unfixed> (embed)
842            - moodle <unfixed> (embed; bug #505984)
843    
844    scriptaculous (prototype.js is among the embeds in the following)
845            - glpi <unfixed> (embed)
846            - libaws <unfixed> (embed; bug #555222)
847            - op-panel <unfixed> (embed)
848            - symfony <unfixed> (embed)
849            NOTE: maintainer says there are extra incompatible changes required
850            - pixelpost 1.7.1-6 (embed)
851            - webhelpers <unfixed> (embed)
852            - qwik <removed> (embed; bug #555241)
853            - smokeping <unfixed> (embed)
854            - turba2 <unfixed> (embed)
855            - typo3-src 4.2.3-1 (embed)
856            - request-tracker3.6 <unfixed> (embed)
857            - request-tracker3.8 <unfixed> (embed)
858            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
859            - wordpress 2.5.0-2 (embed)
860            - libhtml-prototype-perl 1.48-3 (embed)
861    
862    libmarkdown-php
863            - moodle <unfixed> (embed; bug #507185)
864            - pixelpost 1.7.1-6 (embed)
865    
866    php-openid
867            - wordpress-openid <itp> (embed)
868    
869    geshi
870            - dokuwiki 0.0.20080505-3.1 (embed)
871            - pgfouine 1.0-1.1 (embed)
872            - websvn 2.1.0-1 (embed)
873    
874    webcalendar
875            - gforge 4.7~rc2-6 (embed; bug #504758)
876    
877    libical
878            - kdepim <unknown> (fork)
879            NOTE: fixed at some point during 4.0
880            - kdepimlibs 4.2.0-1 (fork)
881            - claws-mail-extra-plugins <unfixed> (fork)
882    
883    libltdl3
884            - kdelibs <unfixed> (embed)
885            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
886            - synfig <unfixed> (embed)
887    
888    harfbuzz
889            - qt4-x11 <unfixed> (embed)
890            - pango1.0 <unfixed> (embed)
891            - fontmatrix <unfixed> (embed)
892    
893    libzip
894            - php5 <unfixable> (modified-embed)
895            - odt2txt <unfixed> (embed; bug #523808)
896    
897    json.php (not packaged; should be replaced with php's built-in functions)
898            - moodle <unfixed>
899            - yui <unfixed>
900            - gallery2 <unfixed>
901            - dokuwiki <unfixed>
902            - typo3-src <unfixed>
903    
904    php-fpdf
905            - tcpdf <itp> (fork)
906            - moodle <unfixed>
907            - phpwiki <unfixed>
908            - egroupware <unfixed>
909            - ldap-account-manager <unfixed> (fork)
910    
911    tcpdf (itp: #495985)
912            - moodle <unfixed>
913            - phpmyadmin <unfixed>
914    
915    typo3
916            - moodle <unfixed>
917    
918    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
919            - moodle <unfixed>
920            - gosa <unfixed>
921    
922    php-ole (itp: #487558)
923            - moodle <unfixed>
924    
925    pieforms (http://www.catalyst.net.nz)
926            - mahara <unfixed>
927    
928    savant2 (http://phpsavant.com)
929            - egroupware <unfixed>
930    
931    rssparser (http://nwow.org)
932            - egroupware <unfixed>
933            - phpgroupware <unfixed>
934    
935    lcms
936            - openjdk-6 <unfixed> (fork)
937    
938    libphp-phplayersmenu
939            - diogenes <unfixed>
940            - phpldapadmin <unfixed>
941    
942    libphp-pclzip
943            - docvert <unfixed>
944            - moodle <unfixed>
945            - egroupware <unfixed>
946    
947    libphp-simplepie
948            - dokuwiki <unfixed>
949            - wordpress <unfixed>
950    
951    libphp-jpgraph
952            - egroupware <unfixed>
953    
954    php-simpletest
955            - moodle <unfixed>
956    
957    libpng
958            - iceweasel <not-affected> (uses xulrunner)
959            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
960            - iceape 1.0.13~pre080614i-0etch1 (embed)
961            - xulrunner 1.9.0.13-1 (embed)
962            [lenny] - xulrunner 1.9.0.11-0lenny1
963            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
964            - gamera 3.2.3-1 (embed)
965    
966    irssi
967            - silc-client <unfixed> (embed)
968            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
969    
970    extc
971            - mtasc <unfixed> (embed)
972            - haxe <unfixed> (embed)
973    
974    swflib
975            - mtasc <unfixed> (embed)
976            - haxe <unfixed> (embed)
977    
978    libitext-java
979            - bouncycastle 2.1.4-1 (embed)
980    
981    python-ply
982            - pyke <unfixed> (embed; bug #555363)
983            - pywbem 0.7.0-4 (embed; bug #555364)
984            - sepolgen <unfixed> (embed; bug #555365)
985            - zope-textindexng3 <unknown> (embed)
986            - iceweasel <not-affected> (uses xulrunner)
987            - xulrunner <unknown> (embed)
988            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
989    
990    libdumbnet (libdnet upstream)
991            - nmap <unfixed> (fork)
992    
993    gcc-4.4
994            - gcc-mingw32 <unfixed> (embed)
995    
996    camlimages
997            - advi <unfixed> (static; bug #550441)
998    
999    memcached
1000            - memcachedb <unfixed> (embed)
1001    
1002    yajl
1003            - argyll <unfixed> (embed; bug #544223)
1004            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1005    
1006    nusoap
1007            - gforge 4.8.2-1 (embed)
1008            - ampache <unfixed> (embed)
1009            - poker-network <unfixed> (old-version)
1010            - moodle <unfixed> (old-version)
1011            NOTE: code is not used when running under php5 and soap is enabled
1012            - phpwiki <unfixed> (old-version)
1013            - gallery2 <unfixed> (old-version)
1014            - typo3-src <unfixed> (old-version)
1015    
1016    libept
1017            - adept <unfixed> (embed; bug #540649)
1018    
1019    libvorbis
1020            - iceweasel <not-affected> (uses xulrunner)
1021            - xulrunner <unfixed> (embed; bug #540959)
1022            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1023            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1024            - iceape <unfixed> (embed)
1025            [etch] - iceape <not-affected> (introduced in 2.0)
1026            [lenny] - iceape <not-affected> (introduced in 2.0)
1027    
1028    cairo
1029            - iceweasel <not-affected> (uses xulrunner)
1030            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1031    
1032    liboggz
1033            - iceweasel <not-affected> (uses xulrunner)
1034            - xulrunner <unfixed> (embed; bug #540959)
1035            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1036            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1037            - iceape <unfixed> (embed)
1038            [etch] - iceape <not-affected> (introduced in 2.0)
1039            [lenny] - iceape <not-affected> (introduced in 2.0)
1040    
1041    liboggplay
1042            - iceweasel <not-affected> (uses xulrunner)
1043            - xulrunner <unfixed> (embed; bug #540959)
1044            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1045            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1046            - iceape <unfixed> (embed)
1047            [etch] - iceape <not-affected> (introduced in 2.0)
1048            [lenny] - iceape <not-affected> (introduced in 2.0)
1049    
1050    php-net-dnsbl
1051            - serendipity <unfixed> (embed; bug #541740)
1052    
1053    php-onyx-rss
1054            - serendipity <unfixed> (embed; bug #541740)
1055    
1056    php-text-wiki
1057            - serendipity <unfixed> (embed; bug #541740)
1058    
1059    php-xml-rpc
1060            - serendipity <unfixed> (embed; bug #541740)
1061    
1062    polarssl (does not have a shared library)
1063            - pdkim <itp> (embed; bug #543150)
1064            - xyssl <unfixed> (old-version)
1065    
1066    pidgin
1067            - gaim <removed> (old-version)
1068            - qutecom <unfixed> (embed; bug #559785)
1069    
1070    icu
1071            - webkit 1.0.1-1 (embed; bug #547214)
1072            - texlive-bin <unfixed> (fork)
1073            NOTE: texlive upstream working with icu upstream to merge their changes
1074    
1075    cyrus-imapd-2.2
1076            - kolab-cyrus-imapd <unfixed> (fork)
1077            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1078    
1079    python-cxx-dev
1080            - freecad 0.9.2646.3-1 (embed; bug #547936)
1081    
1082    zipios++
1083            - freecad 0.9.2646.3-1 (embed; bug #547941)
1084            - enigma 0.92.3-3 (embed)
1085            NOTE: likely fixed earlier, marking etch's version as fixed
1086    
1087    linux-2.6
1088            - kvm <removed> (embed; bug #549973) [./kernel/*]
1089            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1090            - kernel-source-2.6.8 <removed> (old-version)
1091            - kernel-source-2.4.27 <removed> (old-version)
1092            - kernel-source-2.4.24 <removed> (old-version)
1093            - kernel-source-2.2.25 <removed> (old-version)
1094            - kernel-source-2.2.20 <removed> (old-version)
1095    
1096    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1097            - kvm <removed> (embed) [./libfdt/*]
1098            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1099    
1100    qweb (not packaged)
1101            - ajaxterm <unfixed>
1102    
1103    opensaml2
1104            - opensaml <removed> (old-version)
1105    
1106    shibboleth-sp2
1107            - shibboleth-sp <removed> (old-version)
1108    
1109    tuxonice-userui
1110            - suspend2-userui <removed> (old-version)
1111    
1112    expat
1113            - w3c-libwww <removed> (embed; bug #551941)
1114            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1115            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1116            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1117            - python2.4 <unfixable> (embed; bug #553403)
1118            - python-4suite <unfixed> (embed; bug #516935)
1119            - wxwindows2.4 <removed> (embed)
1120            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1121            - wxwidgets2.8 2.8.10.1-2 (embed)
1122            - celementtree 1.0.5-8 (embed)
1123            NOTE: Maybe that was fixed even earlier
1124            - audacity 1.3.2-1 (embed)
1125            - matanza <unfixed> (embed)
1126            - tdom 0.8.3~20080525-1 (embed)
1127            - udunits 2.1.8-4 (embed)
1128            - apr-util 1.2 (embed)
1129            - ayttm <unfxed> (embed; bug #561006)
1130            - cableswig <unfixed> (embed)
1131            - cadaver <unfixed> (embed)
1132            - cmake 2.6.0-6 (embed)
1133            - coin3 <unfixed> (embed)
1134            - gdcm 2.0.14-2 (embed)
1135            - ghostscript <unfixed> (embed)
1136            - grmonitor <removed> (embed)
1137            - iceape <unfixed> (embed)
1138            - insighttoolkit 3.16.0-1 (embed)
1139            NOTE: insighttoolkit might've been fixed earlier
1140            - libparagui1.1 1.0.2-1 (embed)
1141            - paraview <unfixed> (embed)
1142            - poco <unfixed> (embed)
1143            - simgear <unfixed> (embed)
1144            - sitecopy 1:0.16.0-1
1145            - smart 1.0-1 (embed)
1146            - swish-e <not-affected> (Linked against libxml, which is used instead)
1147            - tla 1.3.5+dfsg-15 (embed)
1148            - vtk 4.1.20030227-1 (embed)
1149            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1150            - xmlrpc-c <unfixed> (embed)
1151            - iceweasel <unfixed> (embed)
1152            - kompozer <unfixed> (embed)
1153            - vxl 1.13.0-2 (embed)
1154            - xulrunner <unfixed> (embed)
1155            - apache2 2.2 (embed)
1156            - texlive-bin <not-affected> (Embedded code not compiled in)
1157            - vnc4 <unfixed> (embed)
1158            - xotcl <unfixed> (embed)
1159    
1160    xerces-c
1161            - xerces-c2 <unfixed> (old-version)
1162            - xerces27 <removed> (old-version)
1163    
1164    md5 (RSA's version; not the gnu version provided by coreutils)
1165            - w3c-libwww <removed> (embed; bug #551942)
1166            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1167    
1168    libparagui1.1
1169            - asc <unfixable> (fork)
1170    
1171    enet
1172            - sauerbraten <unfixed> (embed; #497194)
1173    
1174    eglibc
1175            - glibc <removed> (old-version)
1176    
1177    galib
1178            - gamera 3.2.3-1 (embed)
1179    
1180    configobj
1181            - bzr <unfixed> (embed; bug #555336)
1182            - elisa <unfixed> (embed; bug #555337)
1183            - gaupol <unfixed> (embed; bug #555338)
1184            - ipython <unfixed> (embed; bug #555339)
1185            - pida <unfixed> (embed; bug #555340)
1186            - psychopy <unfixed> (embed; bug #555341)
1187            - rest2web <unfixed> (embed; bug #555342)
1188            - auth2db <unknown> (embed)
1189            - dynagen <unknown> (embed)
1190            - iceweasel <unknown> (embed)
1191            - sabnzbdplus <unknown> (embed)
1192            - xulrunner <unknown> (embed)
1193            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1194    
1195    python-clientform
1196            - bibus <unfixed> (embed; bug #555332)
1197            - zope2.10 <unfixed> (embed; bug #555333)
1198            - zope2.11 <removed> (embed; bug #555334)
1199            - python-mechanize <unknown> (embed)
1200            - twill <unknown> (embed)
1201    
1202    python-mechanize
1203            - zope2.10 <unfixed> (embed; bug #555337)
1204            - zope2.11 <removed> (embed; bug #555338)
1205            - twill <unknown> (embed; bug #555339)
1206    
1207    pexpect
1208            - duplicity 0.6.06-1 (embed; bug #555361)
1209            - hplip <unfixed> (embed; bug #555362)
1210            - smart <unfixed> (embed; bug #555363)
1211    
1212    pyparsing
1213            - bauble <unfixed> (embed; bug #555366)
1214            - boa-constructor 0.6.1-8 (embed; bug #555367)
1215            - calibre <unfixed> (embed; bug #555368)
1216            - matplotlib <unfixed> (embed; bug #531024)
1217            - zhpy 1.7.3.1-1 (embed; bug #555370)
1218            - polybori <unknown> (embed)
1219            - python-whoosh <unknown> (embed)
1220            - twill <unknown> (embed)
1221            - zope-textindexng3 <unknown> (embed)
1222    
1223    python-pysqlite2
1224            - python2.4 <unfixed> (embed; bug #553403)
1225            - python2.5 <unfixed> (embed; bug #553403)
1226    
1227    celementtree
1228            - python2.5 <unfixed> (embed)
1229            - smart 1.0-1 (embed)
1230            [etch] - smart <unfixed> (embed)
1231    
1232    elementtree
1233            - python2.5 <unfixed> (embed)
1234            - bzr <unfixed> (embed; bug #555343)
1235            - gedit 2.28.2-1 (embed; bug #555344)
1236            - smart 1.0-1 (embed)
1237            [etch] - smart <unfixed> (embed)
1238            - solfege <unfixed> (embed; bug #555345)
1239            - w3af <unfixed> (embed; bug #555346)
1240            - python-qt4 <unknown> (embed)
1241            - sphinx <unknown> (embed)
1242            - python-nltk <itp> (embed)
1243    
1244    python2.5
1245            - python2.4 <unfixed> (old-version)
1246            - jython <unfixed> (embed)
1247            NOTE: embeds many stdlib modules
1248            - python-django <unfixed> (embed; bug #555419)
1249            NOTE: embeds stdlib modules: doctest, decimal
1250            - gamera 3.2.3-1 (embed)
1251            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1252            - boa-constructor <unfixed> (embed; bug #555426)
1253            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1254            - nicotine <unfixed> (embed; bug #555427)
1255            NOTE: embeds stdlib modules: ConfigParser
1256            - museek+ <unfixed> (embed; bug #555428)
1257            NOTE: embeds stdlib modules: ConfigParser
1258            - vegastrike-data <unfixed> (embed)
1259            NOTE: embeds many stdlib modules
1260            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1261            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1262            - config-manager <unfixed> (embed; bug #555423)
1263            NOTE: embeds stdlib modules: optparse
1264            - jhbuild 2.28.0-1 (embed; bug #555421)
1265            NOTE: embeds stdlib modules: optparse, subprocess
1266            - smart <unfixed> (embed; bug #555432)
1267            NOTE: embeds stdlib modules: optparse
1268            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1269            NOTE: embeds stdlib modules: doctest
1270            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1271            NOTE: embeds stdlib modules: doctest
1272            - distribute <unfixed> (embed)
1273            NOTE: embeds stdlib modules: doctest
1274            - python-setuptools <unfixed> (embed; bug #555435)
1275            NOTE: embeds stdlib modules: doctest
1276            - zope.testing <unfixed> (embed; bug #555436)
1277            NOTE: embeds stdlib modules: doctest
1278            - translate-toolkit <unfixed> (embed; bug #555422)
1279            NOTE: embeds stdlib modules: textwrap, contextlib
1280            - libtpclient-py <unfixed> (embed; bug #555424)
1281            NOTE: embeds stdlib modules: subprocess
1282            - grass <unfixed> (embed; bug #555425)
1283            NOTE: embeds stdlib modules: subprocess
1284            - coherence <unfixed> (embed; bug #555429)
1285            NOTE: embeds stdlib modules: uuid
1286            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1287            NOTE: embeds stdlib modules: uuid
1288            - setroubleshoot <unfixed> (embed; bug #555431)
1289            NOTE: embeds stdlib modules: uuid
1290            - linkchecker <unfixed> (embed; bug #555414)
1291            NOTE: embeds msgfmt.py script
1292            - imdbpy <unfixed> (embed)
1293            NOTE: embeds msgfmt.py script
1294            - kiwi <unfixed> (embed)
1295            NOTE: embeds msgfmt.py script
1296            - moin <unfixed> (embed)
1297            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1298            - plone3 <removed> (embed)
1299            NOTE: embeds msgfmt.py script
1300            - roundup <unfixed> (embed)
1301            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1302            - rednotebook <unfixed> (embed; bug #555415)
1303            NOTE: embeds msgfmt.py script
1304            - turbogears <unfixed> (embed)
1305            NOTE: embeds msgfmt.py script
1306            - elisa <unfixed> (embed)
1307            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1308            - calibre <unfixed> (embed)
1309            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1310            - mailman 1:2.1.13-1 (embed; #555416)
1311            NOTE: embeds msgfmt.py script
1312            - python-docutils <unknown> (embed)
1313            NOTE: embeds stdlib modules: optparse, textwrap
1314            - python-imaging <unknown> (embed)
1315            NOTE: embeds stdlib modules: doctest
1316            - python-mechanize <unknown> (embed)
1317            NOTE: embeds stdlib modules: doctest
1318            - twill <unknown> (embed)
1319            NOTE: embeds stdlib modules: subprocess
1320            - zeroc-ice <unknown> (embed)
1321            NOTE: embeds stdlib modules: subprocess
1322            - wxwidgets2.8 <unknown> (embed)
1323            NOTE: embeds stdlib modules: subprocess
1324            - cycle <unknown> (embed)
1325            NOTE: embeds msgfmt.py script
1326            - deluge <unknown> (embed)
1327            NOTE: embeds msgfmt.py script
1328            - opendict <unknown> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - openerp-client <unknown> (embed)
1331            NOTE: embeds msgfmt.py script
1332            - rapidsvn <unknown> (embed)
1333            NOTE: embeds msgfmt.py script
1334            - wammu <unknown> (embed)
1335            NOTE: embeds msgfmt.py script
1336            - gaphor <unknown> (embed)
1337            NOTE: embeds msgfmt.py script
1338            - pida <unknown> (embed)
1339            NOTE: embeds msgfmt.py script
1340            - python-formencode <unknown> (embed)
1341            NOTE: embeds msgfmt.py script
1342            - duplicity <unfixed> (embed)
1343            NOTE: embeds stdlib module: urlparse, tarfile
1344            - pygopherd <unfixed> (embed)
1345            NOTE: embeds stdlib module: zipfile
1346    
1347    argparse
1348            - twill <unfixed> (embed; bug #555347)
1349            - ipython <unfixed> (embed; bug #555348)
1350    
1351    coherence
1352            - elisa <unfixed> (embed; bug #555335)
1353    
1354    simpletal
1355            - plastex <unfixed> (embed; bug #555371)
1356    
1357    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1358            - postr <unfixed> (embed)
1359            - elisa <unfixed> (embed)
1360    
1361    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1362            - apertium-tolk <unfixed> (embed)
1363            - ipython <unfixed> (embed)
1364            - virtaal <unfixed> (embed)
1365    
1366    distribute
1367            - setuptools <removed> (old-version)
1368    
1369    rails
1370            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1371            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1372            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1373            - thin <unfixed> (embed) [./spec/rails_app/*]
1374            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1375            NOTE: be dangerous if developers are naively basing their code off of the examples
1376            NOTE: prototype.js is among the example files
1377    
1378    lucene2 (prototype.js is among the embeds in the following)
1379            - lucene <unfixed> (old-version)
1380            - pylucene <unfixed> (embed)
1381            - libpdfbox-java <unfixed> (embed)
1382            - libfontbox-java <unfixed> (embed)
1383            - libjempbox-java <unfixed> (embed)
1384            - solr <unfixed> (embed)
1385    
1386    unicode-data
1387            - syslinux <unfixed> (embed)
1388            - camomile <unfixed> (embed)
1389            - fribidi <unfixed> (embed)
1390            - m17n-db <unfixed> (embed)
1391            - sbcl <unfixed> (embed)
1392            - heimdal <unfixed> (embed)
1393            - icu <unfixed> (embed)
1394            - icu4j <unfixed> (embed)
1395            - krb5 <unfixed> (embed)
1396            - moodle <unfixed> (embed)
1397            - openldap <unfixed> (embed)
1398            - pike7.6 <unfixed> (embed)
1399            - samba <unfixed> (embed)
1400            - samba4 <unfixed> (embed)
1401            - cmucl <unfixed> (embed)
1402            - typo3-src <unfixed> (embed)
1403            - mauve <unfixed> (embed)
1404            - texlive-bin <unfixed> (embed)
1405            - ypsilon <unfixed> (embed)
1406            - jeuclid <unfixed> (embed)
1407            - charmap.app <unfixed> (embed)
1408            - clisp <unfixed> (embed)
1409            - gnulib <unfixed> (embed)
1410            - opensrs-client <unfixed> (embed)
1411            - saxonb <unfixed> (embed)
1412            - rails <unfixed> (embed)
1413    
1414    feedparser
1415            - rawdog <unfixed> (embed; bug #383422)
1416            - miro <unfixed> (embed; bug #555351)
1417            - calibre <unfixed> (embed; bug #555352)
1418            - freevo <unfixed> (embed; bug #555353)
1419            - pida <unfixed> (embed; bug #555354)
1420            - planet-venus <unfixed> (embed; bug #555355)
1421            - plone3 <removed> (embed; bug #555356)
1422            - exaile 0.2.14+debian-1 (embed)
1423            - screenlets 0.1.2-3 (embed)
1424            NOTE: included twice
1425    
1426    agg:
1427            - matplotlib <unfixed> (embed: bug #377271)
1428            - contextfree <unfixed> (embed)
1429            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1430            - exactimage <unfixed> (embed)
1431            - python-enable <unfixed> (embed)
1432            - mapnik 0.5.1-3 (embed)
1433            NOTE: links statically to agg, but shared library is not available (bug #377271)
1434    
1435    vtk
1436            - paraview <unfixable> (embed; bug #495426)
1437    
1438    txt2tags
1439            - rednotebook <unfixed> (embed)
1440    
1441    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1442            - gajim <unfixed> (embed)
1443            - emesene <unfixed> (embed)
1444            - convirt <unfixed> (embed)
1445            - pida <unfixed> (embed)
1446            - rednotebook <unfixed> (embed)
1447    
1448    horde3 (prototype.js is among the embeds in the following)
1449            - mnemo2 <unfixed> (embed)
1450            - nag2 <unfixed> (embed)
1451            - wordpress <unfixed> (embed)
1452            NOTE: Text_Diff (wp-includes/Text/Diff*)
1453    
1454    cimg
1455            - gmic <itp> (embed)
1456    
1457    mootools
1458            - gmic <itp> (embed)
1459    
1460    openldap
1461            - openldap2.3 <removed> (old-version)
1462    
1463    grub2
1464            - grub <unfixed> (old-version)
1465    
1466    gnupginterface
1467            - duplicity <unfixed> (embed)
1468    
1469    python-dateutil
1470            - awn-extras-applets <unfixed> (embed)
1471            - matplotlib <unknown> (embed)
1472    
1473    cups
1474            - cupsys <removed> (old-version)
1475    
1476    yui
1477            - bcfg2 <not-affected> (present in source but not included in any binary files)
1478            - serendipity <unfixed> (embed; bug #557746)
1479            - moodle 1.8.2.dfsg-5 (embed)
1480            - jifty 0.91117-1 (embed; bug #557748)
1481            - webgui 7.7.26-1 (embed)
1482            - loggerhead 1.17-1 (embed)
1483    
1484    quake3 (vanilla source not packaged in debian)
1485            - openarena <unfixable> (fork)
1486    
1487    quake2 (vanilla source not packaged in debian)
1488            - alien-arena <unfixable> (fork)
1489            - warsow <unfixable> (fork)
1490    
1491    libtheora
1492            - iceweasel <not-affected> (uses xulrunner)
1493            - xulrunner <unfixed> (embed; bug #540959)
1494            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1495            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1496            - iceape <unfixed> (embed; bug #559276)
1497            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1498            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1499    
1500    dtoa
1501            - bfilter <unfixed> (embed)
1502            - cacao <unfixed> (embed)
1503            - cdrdao <unfixed> (embed)
1504            - classpath <unfixed> (embed)
1505            - freej <unfixed> (embed)
1506            - iceape <unfixed> (embed)
1507            - iceweasel <unfixed> (embed)
1508            - jscoverage <unfixed> (embed)
1509            - kde4libs <unfixed> (embed)
1510            - kdelibs <unfixed> (embed)
1511            - kompozer <unfixed> (embed)
1512            - libv8 <unfixed> (embed)
1513            - mono <unfixed> (embed)
1514            - newlib <unfixed> (embed)
1515            - nspr <unfixed> (embed)
1516            - php5 <unfixed> (embed)
1517            - polyml <unfixed> (embed)
1518            - qt4-x11 <unfixed> (embed)
1519            - rhino <unfixed> (embed)
1520            NOTE: code translated to Java
1521            - ruby1.8 <unfixed> (embed)
1522            - ruby1.9 <unfixed> (embed)
1523            - ruby1.9.1 <unfixed> (embed)
1524            - sdd <unfixed> (embed)
1525            - sfind <unfixed> (embed)
1526            - star <unfixed> (embed)
1527            - tinymux <unfixed> (embed)
1528            - virtualbox-ose <unfixed> (embed)
1529            - webkit <unfixed> (embed)
1530            - xulrunner <unfixed> (embed)
1531    
1532    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1533            - firegpg <unfixed> (embed)
1534            - enigmail <unfixed> (embed)
1535    
1536    ptmalloc (not packaged in Debian)
1537            - crystalspace <unfixed> (embed)
1538            - qt4-x11 <unfixed> (embed)
1539    
1540    svgalib
1541            - usplash <unfixed> (embed)
1542    
1543    bogl
1544            - usplash <unfixed> (embed)
1545    
1546    taglist
1547            - usplash <unfixed> (embed)
1548    
1549    portaudio
1550            - audacity <unfixed> (embed; bug #323711)
1551    
1552    nyquist
1553            - audacity <unfixed> (embed)
1554            NOTE: embeds a forked nyquist with support for a shared library
1555    
1556  curl:  vamp-plugin-sdk
1557  wget (code for NTLM authentication)          - audacity <unfixed> (embed)
1558    
1559  TODO evaluate:  wordpress
1560  gimp-gap (potentially using ffmpeg code as well)          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1561    
1562  uw-imap:  php5
1563  pine          - php4 <removed> (old-version)
1564    
1565  imagemagick:  classpath
1566  graphicsmagick          - libgnucrypto-java <unfixed> (embed; bug #559788)
1567    
1568  halibut:  libtool
1569  nsis          - apr <unfixed> (static; bug #489625)
1570            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1571            - arts <unfixed> (embed)
1572            - bochs 2.4.2-1 (embed; bug #560884)
1573            - camserv <unfixed> (embed)
1574            - collectd <unfixed> (embed)
1575            - courier-authlib 0.58-4 (embed)
1576            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1577            - cvsnt <unfixed> (embed)
1578            - dico <not-affected> (Uses the system copy of ltdl)
1579            - freeradius 0.1+20010527-1 (embed)
1580            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1581            - ggobi 2.1.9~20091212-1 (embed)
1582            - glame 2.0.1-4 (embed)
1583            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1584            - gnash <unfixed> (embed)
1585            - gnu-smalltalk <unfixed> (embed)
1586            - google-gadgets 0.10.5-0.3 (embed)
1587            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1588            - graphicsmagick 1.3.5-6 (embed)
1589            - graphviz 2.8-3 (embed)
1590            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1591            - guile-1.6 1.6.8-7 (embed)
1592            - hamlib <unfixed> (embed)
1593            - hercules <unfixed> (embed)
1594            - jags 1.0.4-3 (embed; bug #560864)
1595            - kdelibs <unfixed> (embed)
1596            - libannodex <removed> (embed)
1597            - libextractor <unfixed> (embed)
1598            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1599            - libtunepimp <unfixed> (embed)
1600            - mp4h <unfixed> (embed)
1601            - naim <unfixed> (embed)
1602            - parser-mysql <unfixed> (embed)
1603            - pinball 0.3.1-11 (embed)
1604            - redland <unfixed> (embed)
1605            - siproxd <unfixed> (embed)
1606            - ski <unfixed> (embed)
1607            - synfig <unfixed> (embed)
1608            - unixodbc 2.2.4-5 (embed)
1609            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1610            - clamav 0.95+dfsg-1 (embed)
1611            - imagemagick 6:6.2.3.1-1 (embed)
1612            - hypre 2.4.0b-5 (embed)
1613            - lam <unfixed> (embed)
1614            - openmpi <unfixable> (embed; bug #559386)
1615            - parser <unfixed> (embed)
1616            - pdsh 2.18-5 (embed; bug #560892)
1617            - sbnc 1.2-8 (embed)
1618            - sdcc <unfixed> (embed)
1619            - wml <unfixed> (embed)
1620            - proftpd-dfsg <unfixed> (embed; bug #561748)
1621            - babel 1.4.0.dfsg-5 (embed)
1622            - libprelude 0.9.14-2 (embed)
1623            - heartbeat 2.1.4-7 (embed)
1624            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1625            NOTE: might've been fixed earlier
1626            - gcc-* <unknown> (embed)
1627    
1628    ocamlgsl
1629            - orpie 1.5.1-7.1 (embed; bug #550058)
1630    
1631    xdotool
1632            - keynav <unfixed> (embed; bug #560103)
1633    
1634    bulletphysics (not packaged; http://www.bulletphysics.org/)
1635            - supertuxkart <unfixed> (embed)
1636            - blender <unfixed> (embed)
1637    
1638  libghttp:  ghostscript
1639  hotway          - gs-gpl <removed> (old-version)
1640    
1641  etl-dev (will be renamed to libetl-dev soon):  icedove
1642  synfig          - thunderbird <removed> (old-version)
1643    
1644  libmms:  sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1645  xine-lib          - jquery <unfixed> (embed)
 mimms  
1646    
1647  FCKeditor:  sed
1648  knowledgeroot          - ssed <unfixed> (fork)
1649    
1650  Moodle contains lots of things:  phpatomlib (http://code.google.com/p/phpatomlib)
1651  AdoDB          - wordpress <unfixed> (embed)
1652  AdoDB-XML Schema  
1653  ipatlas  Services_JSON (http://pear.php.net/package/Services_JSON)
1654  PHPMailer          - wordpress <unfixed> (embed)
1655  Smarty  
1656  htmlArea  phpass (http://www.openwall.com/phpass/)
1657  TinyMCE          - gallery2 <unfixed> (embed)
1658  bennu          - wordpress <unfixed> (embed)
1659            - typo3-src <unfixed> (fork)
1660            NOTE: file refers to drupal, maybe there's a copy somewhere there
1661            NOTE: a copyright owner search didn't match anything
1662            - libauthen-passphrase-perl <unfixable> (fork)
1663            NOTE: perl implementation of phpass
1664    
1665    squirrelmail
1666            - wordpress <unfixed> (embed)
1667            NOTE: class-pop3.php
1668    
1669    ezSQL (http://www.woyano.com/jv/ezsql)
1670            - wordpress <unfixable> (fork)
1671            NOTE: wp-db.php
1672    
1673    Diff.php (Clay Loveless' version/killersoft.com)
1674            - php-versioncontrol-svn <unfixed>
1675    
1676    libm
1677            - spring <unfixed> (embed)
1678            NOTE: embedded by embedded copy of streflop
1679    
1680    streflop
1681            - spring <unfixed> (embed)
1682    
1683    minizip
1684            - spring <unfixed> (embed)
1685    
1686    oscpack
1687            - spring <unfixed> (embed)
1688    
1689    hpiutil2
1690            - spring <unfixed> (embed)
1691    
1692    p7zip
1693            - spring <unfixed> (embed)
1694    
1695    pythonqt (doesn't seem to be python-qtN, unknown source)
1696            - fontmatrix <unfixed> (embed)
1697            - elmerfem <unfixed> (embed)
1698    
1699    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1700            - docvert <unfixed> (embed)
1701            - jifty <unfixed> (embed)
1702            - kdenetwork <unfixed> (embed)
1703            - mediatomb <unfixed> (embed)
1704            - plastex <unfixed> (embed)
1705            - plone3 <removed> (embed)
1706            - python-chaco <unfixed> (embed)
1707            - python-docutils <unfixed> (embed)
1708            - s5 <unfixed> (embed)
1709            - zope2.10 <unfixed> (embed)
1710            - zope2.11 <removed> (embed)
1711            - cython <not-affcted> (embed)
1712            NOTE: part of documentation, which is not installed into the binary package
1713    
1714    python-docutils
1715            - zope2.10 <unfixed> (embed)
1716            - zope2.11 <removed> (embed)
1717    
1718  TinyMCE:  tesseract
1719  wordpress          - ocropus <unfixed> (static)
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
 busybox  
   
 ffmpeg:  
 mplayer (#395252)  
   
 neon:  
 cadaver (all, but being worked on: #188381)  
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
   
 libmodplug:  
 gst-plugins-bad0.10  
   
 libvncserver:  
 vino  
   
 putty:  
 filezilla  
   
 tinyxml (not packaged in Debian):  
 filezilla  
   
 gv:  
 evince (ps/ tree from gv 3.5.8)  
 evince-gtk (not packaged in Debian)  
   
 libXbae:  
 libpawlib2-lesstif package (from Cernlib)  
   
 libXaw:  
 libpawlib2-lesstif package (from Cernlib)  
   
 (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  
   
 libgd2:  
 graphviz (lib/gd seems to be 2.0.33)  
   
 rar:  
 unrar-nonfree  
   
 unrar-free: (maybe this code is derived from the original rar, too?)  
 clamav (seems to be disabled in default config)  
   
 mplayer (DirectMedia Object loader):  
 xine-lib (src/libw32dll/)  
 vlc (modules/codec/dmo/)  
1720    
1721  libwpd (WordPerfect converter):  antlr
1722  openoffice.org          - kdevelop <unfixed> (embed)

Legend:
Removed from v.6249  
changed lines
  Added in v.13845

  ViewVC Help
Powered by ViewVC 1.1.5