/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7828 by nion, Fri Jan 4 15:00:17 2008 UTC revision 13911 by gilbert-guest, Mon Jan 25 02:07:26 2010 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and thus might share parts of the source code)        modified-embed (embeds a code copy that differs from upstream code)
20          fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22    
23  The srcpkg might be some string to identify the code if there is no specific source package.  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
30          - pdftohtml <unknown>          - pdftohtml <unknown>
31          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
32          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
33          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
34          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
36          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
37          NOTE: links to poppler          NOTE: links to poppler
38          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
39          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
40          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
41          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
42          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
44          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <unfixed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48    
49  ppmd  ppmd
50          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
51            NOTE: discussion in #458152
52    
53    libevent
54            - transmission 1.71-1 (embed; bug #529372)
55    
56    lrmi
57            - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59            - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61    
62    peercast
63            - gnome-peercast <removed> (embed)
64            [etch] - gnome-peercast <unfixed> (embed)
65    
66  silc-toolkit  silc-toolkit
67          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
68    
69    icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    libusb
74            - argyll <unfixed> (embed)
75    
76  dietlibc  dietlibc
77          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
78    
79    libmikmod
80            - sdl-mixer1.2 <unfixed> (embed)
81            TODO: report bug
82    
83  libiax  libiax
84          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
85    
86    spandsp
87            - iaxmodem <unfixable> (embed; bug #548885)
88    
89    python-paramiko
90            - fabric 0.9.0-2 (embed; bug #561398)
91    
92  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
93          - dpkg <unfixed> (embed)          - dpkg <unfixed> (static)
94          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
95          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
96            - cherokee <unfixed> (embed)
97          NOTE: somehow derived code base          NOTE: somehow derived code base
98          - mono <unfixed> (embed)          - mono <unfixed> (embed)
99          TODO: check mozilla          TODO: check mozilla
# Line 64  zlib (lots of apps embed a copy, but lin Line 101  zlib (lots of apps embed a copy, but lin
101          - pvpgn 1.7.8-2 (embed)          - pvpgn 1.7.8-2 (embed)
102          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
103          - rpm <unknown> (embed)          - rpm <unknown> (embed)
104          NOTE: pinged joeyh since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
105            - tuxcmd-modules <unfixed> (embed)
106            - zsync <unfixed>
107            - tra <unfixed>
108            - sash <unfixed>
109            - nsis <unfixed>
110            - mseide-msegui <unfixed>
111            NOTE: mseide
112            - mirrordir <unfixed>
113            - poco <unfixed>
114            - klibc <unfixed>
115            - ghostscript <unfixed>
116            - freeimage <unfixed>
117            - clamav <unfixed> (fork)
118            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
119            - tuxonice-userui <unfixed>
120            - plt-scheme <unfixed>
121            - perl <unfixed>
122            - paraview <unfixed>
123            - gcvs <unfixed>
124            - dump <unfixed>
125            - aide <unfixed> (static)
126            - dar <unfixed> (static)
127            - avfs <unfixed>
128            - fpc <unfixed>
129            - winff <unfixed>
130            NOTE: inherited from fpc, see #472304
131            - lazarus <unfixed>
132            NOTE: inherited from fpc, see #472304
133            - erlang <unfixed> (embed)
134            - gamera 3.2.3-1 (embed)
135            - python2.4 <unfixed> (embed; bug #553403)
136            - python2.5 <unfixed> (embed; bug #553403)
137    
138    dulwich
139            - hg-git 0.1.0-1 (embed; bug #541996)
140    
141    libvigraimpex
142            - hugin <unfixed> (embed; bug #542259)
143            - enblend-enfuse <unfixed> (embed; bug #542258)
144            - gamera 3.2.3-1 (embed)
145    
146  libbz2  libbz2
147          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
148    
149  ekg  libyahoo2
150          - centericq <unfixed> (embed)          - centerim <unfixed> (embed; bug #559783)
151          - gaim <unfixed> (embed)  
152          - pigdin <unfixed> (embed)(links dynamically against libgadu)  libmsn
153          - kopete 4:3.3.2-5 (embed)          - centerim <unfixed> (embed; bug #559783)
154          - kadu <unfixed> (embed)  
155          - gadu <unfixed> (embed)  libgadu
156          NOTE: g/kadu not packaged in Debian yet          - centerim <unfixed> (embed; bug #559783)
157            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
158            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
159            - kdenetwork 4:3.3.2-5 (embed)
160            NOTE: from kdenetwork: kopete
161            - ekg 1:1.8~rc0-1 (embed)
162            - kadu 0.6.0.2-3 (embed; bug #504430)
163            - gadu <itp> (embed)
164    
165  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
166          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
167          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
168          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
169          - phpwiki (embed)          - phpwiki <unfixed> (embed)
170          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
171          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
172    
# Line 90  shtool (affects build-time only) Line 174  shtool (affects build-time only)
174          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
175          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
176    
177  mozilla source code  xulrunner
178          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
179          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
180          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
181          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
182          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
183          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
184          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
185          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
186    
187  xli  xli
188          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
189    
190  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
191          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
192          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed)
         NOTE: in libxpm  
193    
194  kerberized apps with BSD origin  kerberized apps with BSD origin
195          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
196          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
197          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
198    
199  grip (which pkg is the origin?)  grip (which pkg is the origin?)
200          - libcdaudio          - libcdaudio <unfixed>
201          - grip          - grip <unfixed>
202          - gnome-vfs          - gnome-vfs <unfixed>
203          TODO: check vfs2 as well          TODO: check vfs2 as well
204    
205  fudforum  fudforum
206          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
207          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
208          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
209    
210    libbsd
211            - rdate 1:1.2-3 (embed)
212            - atheme-services <unfixed>
213            - libbsd-arc4random-perl <unfixed>
214            - isakmpd <unfixed>
215            - bsdgames <unfixed> (embed)
216            - bsd-mailx <unfixed> (embed)
217            - netcat-openbsd <unfixed> (embed; bug #550611)
218            - openssh <unfixed> (embed)
219            - unworkable <unfixed> (embed)
220    
221  cvs  cvs
222          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
223          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
224    
225  pcre  pcre3
         - python* <unfixed> (embed)  
226          - php4 <unknown> (embed)          - php4 <unknown> (embed)
227          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
228          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
229            NOTE: libgoffice-*
230          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
231          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
232          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
233          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
234          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
235          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
236          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
237          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
238          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
239          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
240            - tin 980117-1 (embed)
241            - kazehakase 0.5.2-1
242            - webkit 1.0.1-1 (embed)
243            - qt4-x11 <unfixed> (embed)
244            NOTE: embedded via webkit copy
245            - erlang <unfixed> (embed)
246            - ssed <unfixed> (embed)
247    
248  tiff  tiff
249          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
250          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
251    
252  uudeview  uudeview
253          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
254            - pan <unfixed> (embed)
255    
256  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
257          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
258          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
259          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
260            - heimdal <unfixed> (embed; bug #559616)
261    
262  util-linux/mount  util-linux/mount
263          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
264          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
265    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
266  sylpheed  sylpheed
267          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
268    
# Line 175  phpsysinfo Line 270  phpsysinfo
270          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
271          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
272    
273  phpldapadmin:  phpldapadmin
274  egroupware (removed from egroupware after sarge)          [sarge] - egroupware <unfixed> (embed)
275            NOTE: removed from egroupware after sarge
276    
277    chmlib
278            - kchmviewer <unknown> (embed)
279    
280    ffmpeg (libavcodec/libavformat)
281            - mplayer 1.0~rc2-14 (embed; bug #395252)
282            - kino 1.0.0-1
283            - vlc <not-affected> (Links dynamically since initial release)
284            - smilutils 0.3.0-10
285            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
286            - motion 3.1.19-1
287            - gstreamer0.10-ffmpeg 0.10.3-2
288            - xmovie <removed> (static)
289            TODO: gimp-gap (potentially using ffmpeg code as well)
290            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
291            - audacity 1.3.7-2 (embed; bug #512278)
292    
293    faad2
294            - mplayer 1.0~rc2-20 (embed)
295            - avifile <unfixed> (embed; bug #538750)
296            - ffmpeg-debian <removed> (old-version)
297    
298    libmad (MPEG decoding lib)
299            - xine-lib <unfixed> (embed)
300            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
301            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
302    
303  chmlib:  libdts
304  kchmviewer (ships the code but links dynamically)          - xine-lib <unfixed> (embed)
305    
306  libavcodec/libavformat (source: ffmpeg):  flac
307  mplayer (#395252)          - xine-lib <unfixed> (embed)
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
308    
309  mad MPEG decoding lib:  liba52
310  mad          - a52dec <unfixed> (embed)
311  xine-lib          - xine-lib <unfixed> (embed)
312    
313    libmpeg2
314            - mpeg2dec <unfixed> (embed)
315            - xine-lib <unfixed> (embed)
316    
317    libntlm
318            - wget <unfixed> (fork; bug #550436)
319            - curl <unfixed> (fork; bug #550437)
320            - cntlm <unfixed> (fork; bug #550438)
321    
322    uw-imap
323            - pine <unfixed> (embed)
324            - alpine <unfixed> (embed)
325    
326    imagemagick
327            - graphicsmagick <unfixed> (fork)
328    
329    python-urlgrabber
330            - mercurial <unfixed> (embed; bug #531062)
331            - w3af <unfixed> (embed; bug #555372)
332            [experimental] - harvestman <unfixed> (embed; bug #555373)
333    
334    beautifulsoup
335            - python-mechanize <unfixed> (embed; bug #555349)
336            - zope2.11 <removed> (embed; bug #555350)
337            - twill <unknown> (embed)
338    
339    halibut
340            - nsis <unfixed> (fork)
341    
342    libghttp
343            - hotway <unfixed> (embed)
344    
345    libsndfile
346            - ardour 1:2.7.1-1 (embed)
347    
348    glibmm2.4
349            - ardour 1:2.7.1-1 (embed)
350    
351    libgnomecanvasmm2.6
352            - ardour 1:2.7.1-1 (embed)
353    
354    libsigc++-2.0
355            - ardour 1:2.7.1-1 (embed)
356    
357    soundtouch
358            - ardour 1:2.7.1-1 (embed)
359    
360    libmms
361            - xine-lib <unfixed> (embed)
362            - mimms <unfixed> (embed)
363    
364    fckeditor
365            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
366            - moin 1.8.2-2 (embed; bug #452599)
367            - karrigell <removed> (embed; bug #452598)
368            - gforge 4.6.99+svn6225-1 (embed)
369            - request-tracker3.8 <unfixed> (embed)
370            - otrs2 <unfixed> (embed)
371    
372    ipatlas (not packaged in Debian)
373            - moodle <unfixed> (embed; bug #507185)
374    
375    libphp-phpmailer
376            - moodle <unfixed> (embed; bug #507185)
377            - mahara <unfixed> (embed)
378            - symfony <unfixed> (embed)
379            [etch] - phpgroupware <unfixed> (embed)
380            NOTE: phpgroupware-felamimail is only in etch
381            - egroupware <unfixed> (embed; bug #504283)
382            - glpi <unfixed>
383    
384    htmlArea (not packaged in Debian)
385            - moodle <unfixed> (embed)
386    
387    giflib
388            - wine <unfixed> (embed; bug #466181)
389    
390    bennu (not packaged in Debian, http://bennu.sourceforge.net)
391            - moodle <unfixed> (embed)
392    
393    smarty
394            - moodle 1.8.2-2 (embed; bug #471158)
395            - gallery2 2.2.5-2 (embed; bug #471160)
396            - mahara 0.9.2-2 (embed; bug #471201)
397            - gosa 2.4beta1-1 (embed; bug #471200)
398    
399  libdts:  TinyMCE
400  libdts          - wordpress 2.5.1-3 (embed; bug #478257)
401  xine-lib          - moodle <unfixed> (embed; bug #507185)
402            - knowledgeroot <unfixed> (embed)
403            - joomla <itp> (bug #326398)
404    
405    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
406            - scite <unfixed> (embed)
407            - qscintilla <unfixed> (embed)
408            - qscintilla2 <unfixed> (embed)
409            - geany <unfixed> (fork)
410            - anjuta <unfixed> (embed)
411    
412    libphp-adodb
413            - moodle <unfixed> (embed; bug #507185)
414            NOTE: also AdoDB-XML Schema
415            - gallery2 <unfixed> (embed)
416            - phppgadmin <unfixed> (embed)
417            - egroupware <unfixed> (embed)
418            - phpwiki <unfixed> (embed)
419            - torrentflux 2.0beta1-2 (embed)
420            - ipplan <unfixed> (embed)
421            - typo3-src <unfixed> (embed)
422            - cacti <unknown> (embed)
423            [sarge] - cacti <unfixed> (embed)
424            NOTE: dependency exists, but internal version is used
425            - gforge 4.7~rc2-6 (embed)
426            - mahara <unfixed> (embed)
427    
428    gzip
429            - linux-kernel <unfixed> (embed)
430            NOTE: lib/inflate.c
431            - klibc <unfixed> (embed)
432            NOTE: based on linux-kernel gzip code
433            - busybox <unfixed> (embed)
434    
435    neon
436            - cadaver 0.22.3+debian-1 (embed; bug #188381)
437            - gnome-vfs2 <unfixed> (embed; bug #395874)
438            [etch] - litmus <unfixed> (embed; #395875)
439            - litmus <removed> (embed; #395875)
440            [sarge] - screem <unfixed> (embed)
441            - sitecopy 1:0.16.0-1 (embed; bug #395876)
442            [etch] - tla <unfixed> (embed; bug #395877)
443            [sarge] - tla <unfixed> (embed; bug #395877)
444    
445    libmodplug
446            - gst-plugins-bad0.10 <unfixed> (embed)
447    
448    libvncserver
449            - vino <unfixed> (embed)
450    
451    putty
452            - filezilla <unfixed> (embed)
453    
454    tinyxml (not packaged in Debian; itp bug #531968)
455            - filezilla <unfixed>
456            - crystalspace <unfixed> (embed)
457            - libwfut <unfixed> (embed)
458            - rarian <unfixed> (embed)
459            - bulletml <unfixed> (embed)
460            - pokerth <unfixed> (embed)
461            - qutecom <unfixed> (embed)
462            - sofa-framework <unfixed> (embed)
463            - yate <unfixed> (embed)
464            - antigrav <unfixed> (embed)
465            - balder2d <unfixed> (embed)
466            - cal3d <unfixed> (embed)
467            - criticalmass <unfixed> (embed)
468            - ember <unfixed> (embed)
469            - epiphany <unfixed> (embed)
470            - gambit <unfixed> (embed)
471            - noiz2sa <unfixed> (embed)
472            - ogre <unfixed> (embed)
473            - opencity <unfixed> (embed)
474            - openmovieeditor <unfixed> (embed)
475            - pouetchess <unfixed> (embed)
476            - tecnoballz <unfixed> (embed)
477            - trigger-rally <unfixed> (embed)
478            - xmoto <unfixed> (embed)
479            - mapnik <unknown> (embed)
480            NOTE: uses a different XML parser by default
481            - rrootage 0.23a-6 <embed>
482            NOTE: links to libbulltetml
483            - boson <unknown> (embed)
484            NOTE: the embedded code is unused
485    
486    gv
487            - evince <unfixed> (embed)
488            NOTE: ps/ tree from gv 3.5.8
489            NOTE: evince-gtk is affected (a component of evince source package)
490    
491    libXbae
492            - paw <removed> (embed)
493            [etch] - paw <unfixed> (embed)
494    
495    libgtkhtml
496            - claws-mail-extra-plugins <unfixed> (fork)
497    
498    libXaw
499            - paw <removed> (embed)
500            [etch] - paw <unfixed> (embed)
501            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
502    
503    libgd2
504            - graphviz <unfixed> (embed)
505            NOTE: lib/gd seems to be 2.0.33
506            - wml <unfixed> (embed)
507            - libwmf <unfixed> (embed)
508            NOTE: derived from gd 1.6.3
509    
510    rar
511            - unrar-nonfree <unfixed> (embed)
512    
513    unrar-free (maybe this code is derived from the original rar, too?)
514            - clamav <unfixed> (embed)
515            NOTE: seems to be disabled in default config
516    
517    mplayer (DirectMedia Object loader)
518            - xine-lib <unfixed> (embed)
519            NOTE: src/libw32dll/
520            - vlc <unfixed> (embed)
521            NOTE: modules/codec/dmo/
522            - mplayer 1.0~rc2-20 (embed)
523    
524    libwpd (WordPerfect converter)
525            - openoffice.org <unfixed> (embed)
526    
527    fsplib (http://sourceforge.net/projects/fsp/)
528            - gftp <unfixed> (embed)
529            NOTE: lib/fsplib version 0.3
530    
531  flac:  sprng
532  flac          - tree-puzzle <unfixed> (embed)
 xine-lib  
533    
534  liba52:  librpcsecgss
535  a52dec          - krb5 <unfixed> (embed)
 xine-lib  
536    
537  libmpeg2:  jasper
538  mpeg2dec          - ghostscript 8.64~dfsg-2 (embed)
 xine-lib  
539    
540  curl:  libiris
541  wget (code for NTLM authentication)          - psi <unfixed> (embed)
542            - kdenetwork <unfixed> (embed)
543            NOTE: kopete embeds libiris but links dynamically to libidn
544            - kdegames <unfixed> (embed)
545            NOTE: ksirk/kde4
546    
547    libidn
548            - monotone 0.43-1 (embed)
549            - psi <unfixed> (embed)
550            NOTE: psi embeds libiris which embeds libidn
551            - kdegames <unfixed> (embed)
552            NOTE: kdegames/kde4 embeds libiris which embeds libidn
553    
554    lua5.1
555            - monotone 0.43-1 (embed)
556            - nmap 5.00-1 (embed; bug #527997)
557            [lenny] - nmap <unfixed> (embed; bug #527997)
558            - ocropus <unfixed> (embed)
559            - enigma <unfixed> (embed)
560            NOTE: requires lua built with C++
561            - freeciv <unfixed> (embed)
562            - spring <unfixed> (embed)
563    
564  TODO evaluate:  libbotan
565  gimp-gap (potentially using ffmpeg code as well)          - monotone 0.43-1 (embed)
566    
567  uw-imap:  NetXX
568  pine          - monotone 0.43-1 (embed)
 alpine  
569    
570  imagemagick:  libgc
571  graphicsmagick          - mono <unfixed> (embed)
572    
573  halibut:  lzma
574  nsis          - p7zip <unfixed> (embed)
575            - xz-utils <unfixed> (fork)
576    
577    lzo
578            - grub2 <unfixed> (embed)
579    
580    yassl
581            - mysql-dfsg-5.0 <unfixed> (embed)
582    
583    pax code
584            - tar <unfixed> (embed)
585            - cpio <unfixed> (embed)
586    
587    t1lib
588            - tetex-bin 2.0.2-1 (embed)
589            - texlive-bin <unknown> (embed)
590    
591    guichan
592            - boswars <unfixed> (embed)
593            NOTE: maintainer notified us, working on it
594    
595    tolua
596            - boswars <unfixed> (embed)
597            NOTE: maintainer notified us, working on it
598            NOTE: actually tolua++
599            - ocropus <unfixed> (embed)
600            NOTE: actually tolua++
601            - freeciv <unfixed> (embed)
602            NOTE: actually tolua++
603            - enigma <unfixed> (embed)
604    
605  libghttp:  asio-dev
606  hotway          - luxrender <removed> (embed)
607    
608  libsndfile:  xine-lib
609  ardour          - vlc <unfixed> (embed)
610            NOTE: only parts included in modules/access/rtsp
611    
612  glibmm2.4:  netpbm
613  ardour          - tcl8.3 <unfixed> (embed)
614            - tcl8.4 <unfixed> (embed)
615            - tcl8.5 <unfixed> (embed)
616            NOTE: generic/tkImgGIF.c
617    
618    tk8.5
619            - tk8.0 <removed> (old-version)
620            - tk8.3 <unfixed> (old-version)
621            - tk8.4 <unfixed> (old-version)
622            - perl-tk <unfixable> (fork)
623    
624    samba
625            - mc 2:4.6.2~git20080311-1 (embed)
626            NOTE: maintainer is aware of this, currently searching a solution
627    
628    plib1.8.4c2
629            - boson <unfixed> (fork)
630            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
631    
632    fribidi
633            - quesoglc <unfixed> (embed)
634            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
635    
636    glew
637            - quesoglc <unfixed> (embed; bug #489341)
638            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
639            - trigger <unfixed> (embed)
640            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
641            - trigger-rally <unfixed> (embed)
642            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
643    
644    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
645            - transcend <unfixed> (embed)
646            - cultivation <unfixed> (embed)
647            - passage <unfixed> (embed)
648            - gravitation <unfixed> (embed)
649    
650  libgnomecanvasmm2.6:  tar
651  ardour          - libarchive <unfixed> (embed)
652            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
653    
654  libsigc++-2.0:  cpio
655  ardour          - libarchive <unfixed> (embed)
656            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
657    
658  soundtouch:  kde4libs
659  ardour          - kdelibs <unfixable> (old-version)
660    
661  libmms:  webkit
662  xine-lib          - qt4-x11 <unfixed> (embed; bug #479851)
663  mimms          [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
664            [lenny] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
665            - kde4libs <unfixable> (fork)
666            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
667            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
668    
669    ftgl
670            - blender 2.46+dfsg-1 (embed)
671    
672    wv
673            - abiword <unfixed>
674    
675    qemu
676            - kvm <unfixed> (embed; bug #543159)
677            NOTE: the kvm package will be removed from sid and squeeze soon (after
678            NOTE: which it will only be in experimental). superceded by qemu-kvm.
679            - qemu-kvm <unfixed> (embed; bug #560853)
680            - xen-3 3.4.2-2 (embed; bug #560856)
681            - xen-unstable <unfixed> (embed; bug #560856)
682    
683    vgabios
684            - kvm <unfixed> (embed; bug #489442)
685    
686    bochs
687            - kvm <unfixed> (embed; bug #489442)
688    
689    speex
690            - vorbis-tools <unfixed> (embed)
691            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
692            - gst-plugins-good0.10 <unfixed> (embed)
693            - xine-lib <unfixed> (embed)
694            - libfishsound <unfixed> (embed)
695            - libannodex <removed> (embed)
696            - vlc <unfixed> (embed)
697            - xmms-speex <unfixed> (embed)
698            - libsdl-sound1.2 <unfixed> (embed)
699            - sweep <unfixed> (embed)
700    
701    libreadline
702            - magic <itp> (old-version)
703    
704    opcode
705            - ode <unfixed> (embed)
706            NOTE: opcode is not a package in debian, it is just embedded
707            NOTE: http://www.codercorner.com/Opcode.htm
708    
709    gimpact
710            - ode <unfixed> (embed)
711            NOTE: gimpact is not a package in debian, it is just embedded
712            NOTE: http://gimpact.sf.net
713    
714    mochikit
715            - mahara <unfixed> (embed)
716            NOTE: they require extra patches, still unmerged upstream
717            - ntop <unfixed> (embed)
718            - coherence 0.6.2-1 (embed)
719            - paste <unfixed> (embed)
720            - turbogears <unfixed> (embed)
721            - plone3 <removed> (embed)
722            - xulrunner <unfixed> (embed)
723            - libjifty-plugin-chart-perl <unfixed> (embed)
724            - sabnzbdplus <unfixed> (embed)
725            - tgmochikit <unfixed> (embed)
726    
727    prototypejs
728            - netbeans-ide 6.0.1+dfsg-2 (embed)
729            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
730            - webcit <unfixed> (embed; bug #555219)
731            - asterisk 1:1.6.2.0~rc3-1 (embed)
732            - libjson-ruby 1.1.4-1 (embed; bug #555224)
733            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
734            - horde3 <unfixed> (embed)
735            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
736            - mediatomb <unfixed> (embed; bug #555233)
737            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
738            - ebug-http <removed> (embed; bug #555236)
739            - libaws 2.7-1 (embed; bug #555222)
740            - phpgedview <removed> (embed)
741            - poker-network 1.7.6-1 (embed; bug #555238)
742            - rails 2.1.0-6 (embed)
743            - wordpress 2.5.0-2 (embed; bug #555243)
744            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
745            TODO: search through all of the other zope packages
746            - ampache 3.4.1-2 (embed)
747            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
748            - hobix 0.5~svn20070319-4 (embed; bug #555247)
749            - zabbix 1.6.6-4 (embed; bug #555250)
750            - chora2 <unfixed> (embed; bug #555253)
751            - gollem <unfixed> (embed; bug # 555254)
752            - jscropperui 1.2.1-1 (embed; bug #555257)
753            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
754            - ingo1 <unfixed> (embed; bug #555261)
755            - kronolith2 <unfixed> (embed; bug #555262)
756            - activeldap <unfixed> (embed)
757            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
758            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
759            - otrs2 2.3.4-6 (embed; bug #555267)
760            - webcalendar 1.2~b1-2 (embed; bug #555269)
761            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
762            - jifty 0.90519-1 (embed; bug #555271)
763            - jquery 1.4-1 (embed; bug #555272)
764            - passenger 2.2.5debian1-1 (embed; bug #555273)
765            - plone3 <removed> (embed; bug #555275)
766            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
767            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
768            - xulrunner <unfixed> (embed)
769            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
770    
771  FCKeditor: (packaged as fckeditor)  gdb
772  knowledgeroot          - insight <unfixed> (embed)
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
773    
774    e2fsprogs
775            - ldiskfsprogs <unfixable> (fork)
776    
777    quazip (not packaged in Debian)
778            - qcake <unfixed> (embed)
779            NOTE: starting with upstream version 0.6.4
780    
781    exo
782            - pcmanfm <unfixed> (embed; bug #499677)
783            NOTE: slightly modified source code
784    
785    java
786            - openjdk-6 <unfixed>
787            - sun-java5 <unfixed>
788            - sun-java6 <unfixed>
789    
790    libphp-snoopy
791            - ampache 3.4.1-2 (embed; bug #504169)
792            - gforge 4.6.99+svn6094-2 (embed)
793            - mahara 1.0.5-2 (embed; bug #504170)
794            - pixelpost 1.7.1-5 (embed; bug #504171)
795            - mediamate 0.9.3.6-5 (embed; bug #504172)
796            - opendb <removed> (embed; bug #504173)
797            [etch] - opendb <unfixed> (embed; bug #504173)
798            - wordpress 2.5.1-9 (embed; bug #443948)
799            - moodle <unfixed> (embed; bug #507185)
800            [etch] - phpgroupware <unfixed> (embed)
801            NOTE: phpgroupware-felamimail
802            - magpierss 0.72-3 (embed; bug #431089)
803    
804    jquery
805            - zekr <unfixed> (embed)
806            - wordpress <unknown> (embed)
807            - yocto-reader <unfixed> (embed)
808            - textpattern <unfixed> (embed)
809            - genshi 0.5.1-1 (embed)
810            NOTE: compressed file under examples/ dir
811            - prewikka <unfixed> (embed)
812            - libramaze-ruby <unfixed> (embed)
813            - drupal5 <unfixed> (embed)
814            - b2evolution <unfixed> (embed)
815            - wesnoth <unfixed> (embed)
816    
817    tablesorter (jquery plugin, not packaged yet)
818            - wesnoth <unfixed> (embed)
819    
820    kses
821            - wordpress <unfixed> (embed; bug #504242)
822            NOTE: their copy has all methods renamed to wp_<foo>
823            NOTE: kses isn't in Debian, RFP: #504240
824            - moodle <unfixed> (embed; bug #507185)
825            - egroupware <unfixed> (embed)
826    
827  Moodle contains lots of things:  magpierss
828  AdoDB          - wordpress <unfixed> (embed; bug #504242)
829  AdoDB-XML Schema          - moodle <unfixed>
830  ipatlas  
831  PHPMailer  php-gettext
832  Smarty          - wordpress 2.8.4-1 (embed; bug #504242)
833  htmlArea          - docbookwiki <unfixed> (embed)
834  TinyMCE          - knowledgeroot 0.9.9.5-1
835  bennu          NOTE: non-free
836    
837    libphp-ixr (name may change, it is the Incutio XML-RPC)
838            - wordpress <unfixed> (embed; bug #504242)
839            NOTE: libphp-ixr isn't in Debian, RFP: #504236
840            - dokuwiki <unfixed> (embed)
841            - textpattern <unfixed> (embed)
842    
843    libphp-cas
844            - glpi <unfixed> (embed)
845            - moodle <unfixed> (embed; bug #505984)
846    
847    scriptaculous (prototype.js is among the embeds in the following)
848            - glpi <unfixed> (embed)
849            - libaws <unfixed> (embed; bug #555222)
850            - op-panel <unfixed> (embed)
851            - symfony <unfixed> (embed)
852            NOTE: maintainer says there are extra incompatible changes required
853            - pixelpost 1.7.1-6 (embed)
854            - webhelpers <unfixed> (embed)
855            - qwik <removed> (embed; bug #555241)
856            - smokeping <unfixed> (embed)
857            - turba2 <unfixed> (embed)
858            - typo3-src 4.2.3-1 (embed)
859            - request-tracker3.6 <unfixed> (embed)
860            - request-tracker3.8 <unfixed> (embed)
861            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
862            - wordpress 2.5.0-2 (embed)
863            - libhtml-prototype-perl 1.48-3 (embed)
864    
865    libmarkdown-php
866            - moodle <unfixed> (embed; bug #507185)
867            - pixelpost 1.7.1-6 (embed)
868    
869    php-openid
870            - wordpress-openid <itp> (embed)
871    
872    geshi
873            - dokuwiki 0.0.20080505-3.1 (embed)
874            - pgfouine 1.0-1.1 (embed)
875            - websvn 2.1.0-1 (embed)
876    
877    webcalendar
878            - gforge 4.7~rc2-6 (embed; bug #504758)
879    
880    libical
881            - kdepim <unknown> (fork)
882            NOTE: fixed at some point during 4.0
883            - kdepimlibs 4.2.0-1 (fork)
884            - claws-mail-extra-plugins <unfixed> (fork)
885    
886    harfbuzz
887            - qt4-x11 <unfixed> (embed)
888            - pango1.0 <unfixed> (embed)
889            - fontmatrix <unfixed> (embed)
890    
891    libzip
892            - php5 <unfixable> (modified-embed)
893            - odt2txt <unfixed> (embed; bug #523808)
894    
895    json.php (not packaged; should be replaced with php's built-in functions)
896            - moodle <unfixed>
897            - yui <unfixed>
898            - gallery2 <unfixed>
899            - dokuwiki <unfixed>
900            - typo3-src <unfixed>
901    
902    php-fpdf
903            - tcpdf <itp> (fork)
904            - moodle <unfixed>
905            - phpwiki <unfixed>
906            - egroupware <unfixed>
907            - ldap-account-manager <unfixed> (fork)
908    
909    tcpdf (itp: #495985)
910            - moodle <unfixed>
911            - phpmyadmin <unfixed>
912    
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
913  typo3  typo3
914  moodle          - moodle <unfixed>
915  cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
916    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
917            - moodle <unfixed>
918            - gosa <unfixed>
919    
920    php-ole (itp: #487558)
921            - moodle <unfixed>
922    
923    pieforms (http://www.catalyst.net.nz)
924            - mahara <unfixed>
925    
926    savant2 (http://phpsavant.com)
927            - egroupware <unfixed>
928    
929    rssparser (http://nwow.org)
930            - egroupware <unfixed>
931            - phpgroupware <unfixed>
932    
933    lcms
934            - openjdk-6 <unfixed> (fork)
935    
936    libphp-phplayersmenu
937            - diogenes <unfixed>
938            - phpldapadmin <unfixed>
939    
940    libphp-pclzip
941            - docvert <unfixed>
942            - moodle <unfixed>
943            - egroupware <unfixed>
944    
945    libphp-simplepie
946            - dokuwiki <unfixed>
947            - wordpress <unfixed>
948    
949    libphp-jpgraph
950            - egroupware <unfixed>
951    
952    php-simpletest
953            - moodle <unfixed>
954    
955    libpng
956            - iceweasel <not-affected> (uses xulrunner)
957            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
958            - iceape 1.0.13~pre080614i-0etch1 (embed)
959            - xulrunner 1.9.0.13-1 (embed)
960            [lenny] - xulrunner 1.9.0.11-0lenny1
961            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
962            - gamera 3.2.3-1 (embed)
963    
964    irssi
965            - silc-client <unfixed> (embed)
966            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
967    
968    extc
969            - mtasc <unfixed> (embed)
970            - haxe <unfixed> (embed)
971    
972    swflib
973            - mtasc <unfixed> (embed)
974            - haxe <unfixed> (embed)
975    
976    libitext-java
977            - bouncycastle 2.1.4-1 (embed)
978    
979    python-ply
980            - pyke <unfixed> (embed; bug #555363)
981            - pywbem 0.7.0-4 (embed; bug #555364)
982            - sepolgen <unfixed> (embed; bug #555365)
983            - zope-textindexng3 <unknown> (embed)
984            - iceweasel <not-affected> (uses xulrunner)
985            - xulrunner <unknown> (embed)
986            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
987    
988    libdumbnet (libdnet upstream)
989            - nmap <unfixed> (fork)
990    
991    gcc-4.4
992            - gcc-mingw32 <unfixed> (embed)
993    
994    camlimages
995            - advi <unfixed> (static; bug #550441)
996    
997    memcached
998            - memcachedb <unfixed> (embed)
999    
1000    yajl
1001            - argyll <unfixed> (embed; bug #544223)
1002            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1003    
1004    nusoap
1005            - gforge 4.8.2-1 (embed)
1006            - ampache <unfixed> (embed)
1007            - poker-network <unfixed> (old-version)
1008            - moodle <unfixed> (old-version)
1009            NOTE: code is not used when running under php5 and soap is enabled
1010            - phpwiki <unfixed> (old-version)
1011            - gallery2 <unfixed> (old-version)
1012            - typo3-src <unfixed> (old-version)
1013    
1014    libept
1015            - adept <unfixed> (embed; bug #540649)
1016    
1017    libvorbis
1018            - iceweasel <not-affected> (uses xulrunner)
1019            - xulrunner <unfixed> (embed; bug #540959)
1020            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1021            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1022            - iceape <unfixed> (embed)
1023            [etch] - iceape <not-affected> (introduced in 2.0)
1024            [lenny] - iceape <not-affected> (introduced in 2.0)
1025    
1026    cairo
1027            - iceweasel <not-affected> (uses xulrunner)
1028            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1029    
1030    liboggz
1031            - iceweasel <not-affected> (uses xulrunner)
1032            - xulrunner <unfixed> (embed; bug #540959)
1033            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1034            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1035            - iceape <unfixed> (embed)
1036            [etch] - iceape <not-affected> (introduced in 2.0)
1037            [lenny] - iceape <not-affected> (introduced in 2.0)
1038    
1039    liboggplay
1040            - iceweasel <not-affected> (uses xulrunner)
1041            - xulrunner <unfixed> (embed; bug #540959)
1042            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1043            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1044            - iceape <unfixed> (embed)
1045            [etch] - iceape <not-affected> (introduced in 2.0)
1046            [lenny] - iceape <not-affected> (introduced in 2.0)
1047    
1048    php-net-dnsbl
1049            - serendipity <unfixed> (embed; bug #541740)
1050    
1051    php-onyx-rss
1052            - serendipity <unfixed> (embed; bug #541740)
1053    
1054    php-text-wiki
1055            - serendipity <unfixed> (embed; bug #541740)
1056    
1057    php-xml-rpc
1058            - serendipity <unfixed> (embed; bug #541740)
1059    
1060    polarssl (does not have a shared library)
1061            - pdkim <itp> (embed; bug #543150)
1062            - xyssl <unfixed> (old-version)
1063    
1064    pidgin
1065            - gaim <removed> (old-version)
1066            - qutecom <unfixed> (embed; bug #559785)
1067    
1068    icu
1069            - webkit 1.0.1-1 (embed; bug #547214)
1070            - texlive-bin <unfixed> (fork)
1071            NOTE: texlive upstream working with icu upstream to merge their changes
1072    
1073    cyrus-imapd-2.2
1074            - kolab-cyrus-imapd <unfixed> (fork)
1075            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1076    
1077    python-cxx-dev
1078            - freecad 0.9.2646.3-1 (embed; bug #547936)
1079    
1080    zipios++
1081            - freecad 0.9.2646.3-1 (embed; bug #547941)
1082            - enigma 0.92.3-3 (embed)
1083            NOTE: likely fixed earlier, marking etch's version as fixed
1084    
1085    linux-2.6
1086            - kvm <removed> (embed; bug #549973) [./kernel/*]
1087            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1088            - kernel-source-2.6.8 <removed> (old-version)
1089            - kernel-source-2.4.27 <removed> (old-version)
1090            - kernel-source-2.4.24 <removed> (old-version)
1091            - kernel-source-2.2.25 <removed> (old-version)
1092            - kernel-source-2.2.20 <removed> (old-version)
1093    
1094    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1095            - kvm <removed> (embed) [./libfdt/*]
1096            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1097    
1098    qweb (not packaged)
1099            - ajaxterm <unfixed>
1100    
1101    opensaml2
1102            - opensaml <removed> (old-version)
1103    
1104    shibboleth-sp2
1105            - shibboleth-sp <removed> (old-version)
1106    
1107    tuxonice-userui
1108            - suspend2-userui <removed> (old-version)
1109    
1110    expat
1111            - w3c-libwww <removed> (embed; bug #551941)
1112            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1113            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1114            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1115            - python2.4 <unfixable> (embed; bug #553403)
1116            - python-4suite <unfixed> (embed; bug #516935)
1117            - wxwindows2.4 <removed> (embed)
1118            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1119            - wxwidgets2.8 2.8.10.1-2 (embed)
1120            - celementtree 1.0.5-8 (embed)
1121            NOTE: Maybe that was fixed even earlier
1122            - audacity 1.3.2-1 (embed)
1123            - matanza <unfixed> (embed)
1124            - tdom 0.8.3~20080525-1 (embed)
1125            - udunits 2.1.8-4 (embed)
1126            - apr-util 1.2 (embed)
1127            - ayttm <unfxed> (embed; bug #561006)
1128            - cableswig <unfixed> (embed)
1129            - cadaver <unfixed> (embed)
1130            - cmake 2.6.0-6 (embed)
1131            - coin3 <unfixed> (embed)
1132            - gdcm 2.0.14-2 (embed)
1133            - ghostscript <unfixed> (embed)
1134            - grmonitor <removed> (embed)
1135            - iceape <unfixed> (embed)
1136            - insighttoolkit 3.16.0-1 (embed)
1137            NOTE: insighttoolkit might've been fixed earlier
1138            - libparagui1.1 1.0.2-1 (embed)
1139            - paraview 3.6.2-1 (embed)
1140            - poco <unfixed> (embed)
1141            - simgear <unfixed> (embed)
1142            - sitecopy 1:0.16.0-1
1143            - smart 1.0-1 (embed)
1144            - swish-e <not-affected> (Linked against libxml, which is used instead)
1145            - tla 1.3.5+dfsg-15 (embed)
1146            - vtk 4.1.20030227-1 (embed)
1147            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1148            - xmlrpc-c <unfixed> (embed)
1149            - iceweasel <unfixed> (embed)
1150            - kompozer <unfixed> (embed)
1151            - vxl 1.13.0-2 (embed)
1152            - xulrunner <unfixed> (embed)
1153            - apache2 2.2 (embed)
1154            - texlive-bin <not-affected> (Embedded code not compiled in)
1155            - vnc4 <unfixed> (embed)
1156            - xotcl <unfixed> (embed)
1157    
1158    xerces-c
1159            - xerces-c2 <unfixed> (old-version)
1160            - xerces27 <removed> (old-version)
1161    
1162    md5 (RSA's version; not the gnu version provided by coreutils)
1163            - w3c-libwww <removed> (embed; bug #551942)
1164            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1165    
1166    libparagui1.1
1167            - asc <unfixable> (fork)
1168    
1169    enet
1170            - sauerbraten <unfixed> (embed; #497194)
1171    
1172    eglibc
1173            - glibc <removed> (old-version)
1174    
1175    galib
1176            - gamera 3.2.3-1 (embed)
1177    
1178    configobj
1179            - bzr <unfixed> (embed; bug #555336)
1180            - elisa <unfixed> (embed; bug #555337)
1181            - gaupol <unfixed> (embed; bug #555338)
1182            - ipython <unfixed> (embed; bug #555339)
1183            - pida <unfixed> (embed; bug #555340)
1184            - psychopy <unfixed> (embed; bug #555341)
1185            - rest2web <unfixed> (embed; bug #555342)
1186            - auth2db <unknown> (embed)
1187            - dynagen <unknown> (embed)
1188            - iceweasel <unknown> (embed)
1189            - sabnzbdplus <unknown> (embed)
1190            - xulrunner <unknown> (embed)
1191            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1192    
1193    python-clientform
1194            - bibus <unfixed> (embed; bug #555332)
1195            - zope2.10 <unfixed> (embed; bug #555333)
1196            - zope2.11 <removed> (embed; bug #555334)
1197            - python-mechanize <unknown> (embed)
1198            - twill <unknown> (embed)
1199    
1200    python-mechanize
1201            - zope2.10 <unfixed> (embed; bug #555337)
1202            - zope2.11 <removed> (embed; bug #555338)
1203            - twill <unknown> (embed; bug #555339)
1204    
1205    pexpect
1206            - duplicity 0.6.06-1 (embed; bug #555361)
1207            - hplip <unfixed> (embed; bug #555362)
1208            - smart <unfixed> (embed; bug #555363)
1209    
1210    pyparsing
1211            - bauble <unfixed> (embed; bug #555366)
1212            - boa-constructor 0.6.1-8 (embed; bug #555367)
1213            - calibre <unfixed> (embed; bug #555368)
1214            - matplotlib <unfixed> (embed; bug #531024)
1215            - zhpy 1.7.3.1-1 (embed; bug #555370)
1216            - polybori <unknown> (embed)
1217            - python-whoosh <unknown> (embed)
1218            - twill <unknown> (embed)
1219            - zope-textindexng3 <unknown> (embed)
1220    
1221    python-pysqlite2
1222            - python2.4 <unfixed> (embed; bug #553403)
1223            - python2.5 <unfixed> (embed; bug #553403)
1224    
1225    celementtree
1226            - python2.5 <unfixed> (embed)
1227            - smart 1.0-1 (embed)
1228            [etch] - smart <unfixed> (embed)
1229    
1230    elementtree
1231            - python2.5 <unfixed> (embed)
1232            - bzr <unfixed> (embed; bug #555343)
1233            - gedit 2.28.2-1 (embed; bug #555344)
1234            - smart 1.0-1 (embed)
1235            [etch] - smart <unfixed> (embed)
1236            - solfege <unfixed> (embed; bug #555345)
1237            - w3af <unfixed> (embed; bug #555346)
1238            - python-qt4 <unknown> (embed)
1239            - sphinx <unknown> (embed)
1240            - python-nltk <itp> (embed)
1241    
1242    python2.5
1243            - python2.4 <unfixed> (old-version)
1244            - jython <unfixed> (embed)
1245            NOTE: embeds many stdlib modules
1246            - python-django <unfixed> (embed; bug #555419)
1247            NOTE: embeds stdlib modules: doctest, decimal
1248            - gamera 3.2.3-1 (embed)
1249            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1250            - boa-constructor <unfixed> (embed; bug #555426)
1251            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1252            - nicotine <unfixed> (embed; bug #555427)
1253            NOTE: embeds stdlib modules: ConfigParser
1254            - museek+ <unfixed> (embed; bug #555428)
1255            NOTE: embeds stdlib modules: ConfigParser
1256            - vegastrike-data <unfixed> (embed)
1257            NOTE: embeds many stdlib modules
1258            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1259            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1260            - config-manager <unfixed> (embed; bug #555423)
1261            NOTE: embeds stdlib modules: optparse
1262            - jhbuild 2.28.0-1 (embed; bug #555421)
1263            NOTE: embeds stdlib modules: optparse, subprocess
1264            - smart <unfixed> (embed; bug #555432)
1265            NOTE: embeds stdlib modules: optparse
1266            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1267            NOTE: embeds stdlib modules: doctest
1268            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1269            NOTE: embeds stdlib modules: doctest
1270            - distribute <unfixed> (embed)
1271            NOTE: embeds stdlib modules: doctest
1272            - python-setuptools <unfixed> (embed; bug #555435)
1273            NOTE: embeds stdlib modules: doctest
1274            - zope.testing <unfixed> (embed; bug #555436)
1275            NOTE: embeds stdlib modules: doctest
1276            - translate-toolkit <unfixed> (embed; bug #555422)
1277            NOTE: embeds stdlib modules: textwrap, contextlib
1278            - libtpclient-py <unfixed> (embed; bug #555424)
1279            NOTE: embeds stdlib modules: subprocess
1280            - grass <unfixed> (embed; bug #555425)
1281            NOTE: embeds stdlib modules: subprocess
1282            - coherence <unfixed> (embed; bug #555429)
1283            NOTE: embeds stdlib modules: uuid
1284            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1285            NOTE: embeds stdlib modules: uuid
1286            - setroubleshoot <unfixed> (embed; bug #555431)
1287            NOTE: embeds stdlib modules: uuid
1288            - linkchecker <unfixed> (embed; bug #555414)
1289            NOTE: embeds msgfmt.py script
1290            - imdbpy <unfixed> (embed)
1291            NOTE: embeds msgfmt.py script
1292            - kiwi <unfixed> (embed)
1293            NOTE: embeds msgfmt.py script
1294            - moin <unfixed> (embed)
1295            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1296            - plone3 <removed> (embed)
1297            NOTE: embeds msgfmt.py script
1298            - roundup <unfixed> (embed)
1299            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1300            - rednotebook <unfixed> (embed; bug #555415)
1301            NOTE: embeds msgfmt.py script
1302            - turbogears <unfixed> (embed)
1303            NOTE: embeds msgfmt.py script
1304            - elisa <unfixed> (embed)
1305            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1306            - calibre <unfixed> (embed)
1307            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1308            - mailman 1:2.1.13-1 (embed; #555416)
1309            NOTE: embeds msgfmt.py script
1310            - python-docutils <unknown> (embed)
1311            NOTE: embeds stdlib modules: optparse, textwrap
1312            - python-imaging <unknown> (embed)
1313            NOTE: embeds stdlib modules: doctest
1314            - python-mechanize <unknown> (embed)
1315            NOTE: embeds stdlib modules: doctest
1316            - twill <unknown> (embed)
1317            NOTE: embeds stdlib modules: subprocess
1318            - zeroc-ice <unknown> (embed)
1319            NOTE: embeds stdlib modules: subprocess
1320            - wxwidgets2.8 <unknown> (embed)
1321            NOTE: embeds stdlib modules: subprocess
1322            - cycle <unknown> (embed)
1323            NOTE: embeds msgfmt.py script
1324            - deluge <unknown> (embed)
1325            NOTE: embeds msgfmt.py script
1326            - opendict <unknown> (embed)
1327            NOTE: embeds msgfmt.py script
1328            - openerp-client <unknown> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - rapidsvn <unknown> (embed)
1331            NOTE: embeds msgfmt.py script
1332            - wammu <unknown> (embed)
1333            NOTE: embeds msgfmt.py script
1334            - gaphor <unknown> (embed)
1335            NOTE: embeds msgfmt.py script
1336            - pida <unknown> (embed)
1337            NOTE: embeds msgfmt.py script
1338            - python-formencode <unknown> (embed)
1339            NOTE: embeds msgfmt.py script
1340            - duplicity <unfixed> (embed)
1341            NOTE: embeds stdlib module: urlparse, tarfile
1342            - pygopherd <unfixed> (embed)
1343            NOTE: embeds stdlib module: zipfile
1344    
1345    argparse
1346            - twill <unfixed> (embed; bug #555347)
1347            - ipython <unfixed> (embed; bug #555348)
1348    
1349    coherence
1350            - elisa <unfixed> (embed; bug #555335)
1351    
1352    simpletal
1353            - plastex <unfixed> (embed; bug #555371)
1354    
1355    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1356            - postr <unfixed> (embed)
1357            - elisa <unfixed> (embed)
1358    
1359    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1360            - apertium-tolk <unfixed> (embed)
1361            - ipython <unfixed> (embed)
1362            - virtaal <unfixed> (embed)
1363    
1364    distribute
1365            - setuptools <removed> (old-version)
1366    
1367    rails
1368            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1369            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1370            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1371            - thin <unfixed> (embed) [./spec/rails_app/*]
1372            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1373            NOTE: be dangerous if developers are naively basing their code off of the examples
1374            NOTE: prototype.js is among the example files
1375    
1376    lucene2 (prototype.js is among the embeds in the following)
1377            - lucene <unfixed> (old-version)
1378            - pylucene <unfixed> (embed)
1379            - libpdfbox-java <unfixed> (embed)
1380            - libfontbox-java <unfixed> (embed)
1381            - libjempbox-java <unfixed> (embed)
1382            - solr <unfixed> (embed)
1383    
1384    unicode-data
1385            - syslinux <unfixed> (embed)
1386            - camomile <unfixed> (embed)
1387            - fribidi <unfixed> (embed)
1388            - m17n-db <unfixed> (embed)
1389            - sbcl <unfixed> (embed)
1390            - heimdal <unfixed> (embed)
1391            - icu <unfixed> (embed)
1392            - icu4j <unfixed> (embed)
1393            - krb5 <unfixed> (embed)
1394            - moodle <unfixed> (embed)
1395            - openldap <unfixed> (embed)
1396            - pike7.6 <unfixed> (embed)
1397            - samba <unfixed> (embed)
1398            - samba4 <unfixed> (embed)
1399            - cmucl <unfixed> (embed)
1400            - typo3-src <unfixed> (embed)
1401            - mauve <unfixed> (embed)
1402            - texlive-bin <unfixed> (embed)
1403            - ypsilon <unfixed> (embed)
1404            - jeuclid <unfixed> (embed)
1405            - charmap.app <unfixed> (embed)
1406            - clisp <unfixed> (embed)
1407            - gnulib <unfixed> (embed)
1408            - opensrs-client <unfixed> (embed)
1409            - saxonb <unfixed> (embed)
1410            - rails <unfixed> (embed)
1411    
1412    feedparser
1413            - rawdog <unfixed> (embed; bug #383422)
1414            - miro <unfixed> (embed; bug #555351)
1415            - calibre <unfixed> (embed; bug #555352)
1416            - freevo <unfixed> (embed; bug #555353)
1417            - pida <unfixed> (embed; bug #555354)
1418            - planet-venus <unfixed> (embed; bug #555355)
1419            - plone3 <removed> (embed; bug #555356)
1420            - exaile 0.2.14+debian-1 (embed)
1421            - screenlets 0.1.2-3 (embed)
1422            NOTE: included twice
1423    
1424    agg:
1425            - matplotlib <unfixed> (embed: bug #377271)
1426            - contextfree <unfixed> (embed)
1427            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1428            - exactimage <unfixed> (embed)
1429            - python-enable <unfixed> (embed)
1430            - mapnik 0.5.1-3 (embed)
1431            NOTE: links statically to agg, but shared library is not available (bug #377271)
1432    
1433    vtk
1434            - paraview <unfixable> (embed; bug #495426)
1435    
1436    txt2tags
1437            - rednotebook <unfixed> (embed)
1438    
1439    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1440            - gajim <unfixed> (embed)
1441            - emesene <unfixed> (embed)
1442            - convirt <unfixed> (embed)
1443            - pida <unfixed> (embed)
1444            - rednotebook <unfixed> (embed)
1445    
1446    horde3 (prototype.js is among the embeds in the following)
1447            - mnemo2 <unfixed> (embed)
1448            - nag2 <unfixed> (embed)
1449            - wordpress <unfixed> (embed)
1450            NOTE: Text_Diff (wp-includes/Text/Diff*)
1451    
1452    cimg
1453            - gmic <itp> (embed)
1454    
1455  gzip:  mootools
1456  linux-kernel (lib/inflate.c)          - gmic <itp> (embed)
 klibc (based on linux-kernel gzip code)  
 busybox  
1457    
1458  neon:  openldap
1459  cadaver (all, but being worked on: #188381)          - openldap2.3 <removed> (old-version)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
1460    
1461  libmodplug:  grub2
1462  gst-plugins-bad0.10          - grub <unfixed> (old-version)
1463    
1464  libvncserver:  gnupginterface
1465  vino          - duplicity <unfixed> (embed)
1466    
1467  putty:  python-dateutil
1468  filezilla          - awn-extras-applets <unfixed> (embed)
1469            - matplotlib <unknown> (embed)
1470    
1471    cups
1472            - cupsys <removed> (old-version)
1473    
1474    yui
1475            - bcfg2 <not-affected> (present in source but not included in any binary files)
1476            - serendipity <unfixed> (embed; bug #557746)
1477            - moodle 1.8.2.dfsg-5 (embed)
1478            - jifty 0.91117-1 (embed; bug #557748)
1479            - webgui 7.7.26-1 (embed)
1480            - loggerhead 1.17-1 (embed)
1481    
1482    quake3 (vanilla source not packaged in debian)
1483            - openarena <unfixable> (fork)
1484    
1485    quake2 (vanilla source not packaged in debian)
1486            - alien-arena <unfixable> (fork)
1487            - warsow <unfixable> (fork)
1488    
1489    libtheora
1490            - iceweasel <not-affected> (uses xulrunner)
1491            - xulrunner <unfixed> (embed; bug #540959)
1492            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1493            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1494            - iceape <unfixed> (embed; bug #559276)
1495            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1496            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1497    
1498    dtoa
1499            - bfilter <unfixed> (embed)
1500            - cacao <unfixed> (embed)
1501            - cdrdao <unfixed> (embed)
1502            - classpath <unfixed> (embed)
1503            - freej <unfixed> (embed)
1504            - iceape <unfixed> (embed)
1505            - iceweasel <unfixed> (embed)
1506            - jscoverage <unfixed> (embed)
1507            - kde4libs <unfixed> (embed)
1508            - kdelibs <unfixed> (embed)
1509            - kompozer <unfixed> (embed)
1510            - libv8 <unfixed> (embed)
1511            - mono <unfixed> (embed)
1512            - newlib <unfixed> (embed)
1513            - nspr <unfixed> (embed)
1514            - php5 <unfixed> (embed)
1515            - polyml <unfixed> (embed)
1516            - qt4-x11 <unfixed> (embed)
1517            - rhino <unfixed> (embed)
1518            NOTE: code translated to Java
1519            - ruby1.8 <unfixed> (embed)
1520            - ruby1.9 <unfixed> (embed)
1521            - ruby1.9.1 <unfixed> (embed)
1522            - sdd <unfixed> (embed)
1523            - sfind <unfixed> (embed)
1524            - star <unfixed> (embed)
1525            - tinymux <unfixed> (embed)
1526            - virtualbox-ose <unfixed> (embed)
1527            - webkit <unfixed> (embed)
1528            - xulrunner <unfixed> (embed)
1529    
1530  tinyxml (not packaged in Debian):  ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1531  filezilla          - firegpg <unfixed> (embed)
1532            - enigmail <unfixed> (embed)
1533    
1534  gv:  ptmalloc (not packaged in Debian)
1535  evince (ps/ tree from gv 3.5.8)          - crystalspace <unfixed> (embed)
1536  evince-gtk (not packaged in Debian)          - qt4-x11 <unfixed> (embed)
1537    
1538  libXbae:  svgalib
1539  libpawlib2-lesstif package (from Cernlib)          - usplash <unfixed> (embed)
1540    
1541  libXaw:  bogl
1542  libpawlib2-lesstif package (from Cernlib)          - usplash <unfixed> (embed)
1543    
1544  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  taglist
1545            - usplash <unfixed> (embed)
1546    
1547  libgd2:  portaudio
1548  graphviz (lib/gd seems to be 2.0.33)          - audacity <unfixed> (embed; bug #323711)
1549    
1550  rar:  nyquist
1551  unrar-nonfree          - audacity <unfixed> (embed)
1552            NOTE: embeds a forked nyquist with support for a shared library
1553    
1554  unrar-free: (maybe this code is derived from the original rar, too?)  vamp-plugin-sdk
1555  clamav (seems to be disabled in default config)          - audacity <unfixed> (embed)
1556    
1557  mplayer (DirectMedia Object loader):  wordpress
1558  xine-lib (src/libw32dll/)          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1559  vlc (modules/codec/dmo/)          - wordpress-mu <unfixed> (fork)
1560    
1561  libwpd (WordPerfect converter):  php5
1562  openoffice.org          - php4 <removed> (old-version)
1563    
1564  fsplib (http://sourceforge.net/projects/fsp/):  classpath
1565  gftp (lib/fsplib version 0.3)          - libgnucrypto-java <removed> (embed; bug #559788)
1566    
1567  librpcsecgss:  libtool
1568  krb5          - apr <unfixed> (static; bug #489625)
1569            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1570            - arts <unfixed> (embed)
1571            - bochs 2.4.2-1 (embed; bug #560884)
1572            - camserv <unfixed> (embed)
1573            - collectd <unfixed> (embed)
1574            - courier-authlib 0.58-4 (embed)
1575            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1576            - cvsnt <unfixed> (embed)
1577            - dico <not-affected> (Uses the system copy of ltdl)
1578            - freeradius 0.1+20010527-1 (embed)
1579            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1580            - ggobi 2.1.9~20091212-1 (embed)
1581            - glame 2.0.1-4 (embed)
1582            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1583            - gnash <unfixed> (embed)
1584            - gnu-smalltalk <unfixed> (embed)
1585            - google-gadgets 0.10.5-0.3 (embed)
1586            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1587            - graphicsmagick 1.3.5-6 (embed)
1588            - graphviz 2.8-3 (embed)
1589            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1590            - guile-1.6 1.6.8-7 (embed)
1591            - hamlib <unfixed> (embed)
1592            - hercules 3.06-1.2 (embed)
1593            - jags 1.0.4-3 (embed; bug #560864)
1594            - kdelibs <unfixed> (embed)
1595            - libannodex <removed> (embed)
1596            - libextractor <unfixed> (embed)
1597            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1598            - libtunepimp <unfixed> (embed)
1599            - mp4h <unfixed> (embed)
1600            - naim <unfixed> (embed)
1601            - parser-mysql <unfixed> (embed)
1602            - pinball 0.3.1-11 (embed)
1603            - redland <unfixed> (embed)
1604            - siproxd <unfixed> (embed)
1605            - ski <unfixed> (embed)
1606            - synfig 0.62.00-1 (embed)
1607            - unixodbc 2.2.4-5 (embed)
1608            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1609            - clamav 0.95+dfsg-1 (embed)
1610            - imagemagick 6:6.2.3.1-1 (embed)
1611            - hypre 2.4.0b-5 (embed)
1612            - lam <unfixed> (embed)
1613            - openmpi <unfixable> (embed; bug #559386)
1614            - parser <unfixed> (embed)
1615            - pdsh 2.18-5 (embed; bug #560892)
1616            - sbnc 1.2-8 (embed)
1617            - sdcc <unfixed> (embed)
1618            - wml <unfixed> (embed)
1619            - proftpd-dfsg <unfixed> (embed; bug #561748)
1620            - babel 1.4.0.dfsg-5 (embed)
1621            - libprelude 0.9.14-2 (embed)
1622            - heartbeat 2.1.4-7 (embed)
1623            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1624            NOTE: might've been fixed earlier
1625            - gcc-* <unknown> (embed)
1626    
1627    ocamlgsl
1628            - orpie 1.5.1-7.1 (embed; bug #550058)
1629    
1630    xdotool
1631            - keynav <unfixed> (embed; bug #560103)
1632    
1633    bulletphysics (not packaged; http://www.bulletphysics.org/)
1634            - supertuxkart <unfixed> (embed)
1635            - blender <unfixed> (embed)
1636    
 jasper:  
1637  ghostscript  ghostscript
1638  gs-gpl          - gs-gpl <removed> (old-version)
1639    
1640  libidn:  icedove
1641  monotone          - thunderbird <removed> (old-version)
1642    
1643  liblua:  sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1644  monotone          - jquery <unfixed> (embed)
1645    
1646  libbotan:  sed
1647  montone          - ssed <unfixed> (fork)
1648    
1649  NetXX:  phpatomlib (http://code.google.com/p/phpatomlib)
1650  monotone          - wordpress <unfixed> (embed)
1651    
1652  libgc:  Services_JSON (http://pear.php.net/package/Services_JSON)
1653  mono          - wordpress <unfixed> (embed)
1654    
1655  lzma:  phpass (http://www.openwall.com/phpass/)
1656  p7zip          - gallery2 <unfixed> (embed)
1657            - wordpress <unfixed> (embed)
1658            - typo3-src <unfixed> (fork)
1659            NOTE: file refers to drupal, maybe there's a copy somewhere there
1660            NOTE: a copyright owner search didn't match anything
1661            - libauthen-passphrase-perl <unfixable> (fork)
1662            NOTE: perl implementation of phpass
1663    
1664  lzo:  squirrelmail
1665  grub2          - wordpress <unfixed> (embed)
1666            NOTE: class-pop3.php
1667    
1668  pax code:  ezSQL (http://www.woyano.com/jv/ezsql)
1669  tar          - wordpress <unfixable> (fork)
1670  cpio          NOTE: wp-db.php
1671    
1672    Diff.php (Clay Loveless' version/killersoft.com)
1673            - php-versioncontrol-svn <unfixed>
1674    
1675    libm
1676            - spring <unfixed> (embed)
1677            NOTE: embedded by embedded copy of streflop
1678    
1679    streflop
1680            - spring <unfixed> (embed)
1681    
1682  t1lib:  minizip
1683  tetex-bin (links to system t1lib since 2.0.2)          - spring <unfixed> (embed)
1684  texlive-bin (links to system t1lib)  
1685    oscpack
1686            - spring <unfixed> (embed)
1687    
1688    hpiutil2
1689            - spring <unfixed> (embed)
1690    
1691    p7zip
1692            - spring <unfixed> (embed)
1693    
1694    pythonqt (doesn't seem to be python-qtN, unknown source)
1695            - fontmatrix <unfixed> (embed)
1696            - elmerfem <unfixed> (embed)
1697    
1698    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1699            - docvert <unfixed> (embed)
1700            - jifty <unfixed> (embed)
1701            - kdenetwork <unfixed> (embed)
1702            - mediatomb <unfixed> (embed)
1703            - plastex <unfixed> (embed)
1704            - plone3 <removed> (embed)
1705            - python-chaco <unfixed> (embed)
1706            - python-docutils <unfixed> (embed)
1707            - s5 <unfixed> (embed)
1708            - zope2.10 <unfixed> (embed)
1709            - zope2.11 <removed> (embed)
1710            - cython <not-affcted> (embed)
1711            NOTE: part of documentation, which is not installed into the binary package
1712    
1713    python-docutils
1714            - zope2.10 <unfixed> (embed)
1715            - zope2.11 <removed> (embed)
1716    
1717    tesseract
1718            - ocropus <unfixed> (static)
1719    
1720    antlr
1721            - kdevelop <unfixed> (embed)
1722    
1723    libxerces2
1724            - openjdk-6 <unfixed> (embed)
1725    
1726    kfreebsd-8
1727            - kfreebsd-7 <unfixed> (old-version)
1728            - kfreebsd-6 <removed> (old-version)
1729    
1730    ruby1.9.1
1731            - ruby1.9 <unfixed> (old-version)
1732            - ruby1.8 <unfixed> (old-version)
Legend:
Removed from v.7828  
changed lines
  Added in v.13911
  ViewVC Help
Powered by ViewVC 1.1.5