/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7463 by jmm-guest, Sun Dec 2 13:11:25 2007 UTC revision 14667 by gilbert-guest, Mon May 10 23:33:03 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp>, <not-affected>, <unknown> if the version number can not
15  ruby-gnome2 (has a copy of poppler but links against the shared lib)          be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  silc-toolkit:  sort: static (linking statically against a lib)
18  silc-client (uses libsilc and libsilcclient)        embed (embeds a copy of the library into another source package)
19          modified-embed (embeds a code copy that differs from upstream code)
20  dietlibc:        fork (a full-blown fork of another source package)
21  ccontrol (links statically)        old-version (an older version of essentially the same code)
22    
23  libiax:  The srcpkg might be some string to identify the code if there is no
24  iaxmodem  specific source package.
25    
26  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  Everything up to the next line is ignored.
27  dpkg  ---BEGIN
28  rsync (somehow derived code base)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  mono          NOTE: Fixed packages link to poppler library unless otherwise noted
30  mozilla(?)          - pdftohtml <unknown>
31  Linux kernels          [sarge] - pdftohtml <unfixed>
32  pvpgn (links dynamically since 1.7.8-2)          [etch] - pdftohtml <unfixed>
33  mrtg (links dynamically since 2.12.2-1)          NOTE: has been replaced by poppler-utils
34  rpm          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35            - texlive-base 3.0-12 (embed)
36  libbz2:          - texlive-bin 2007-1 (embed)
37  dpkg (statically linked)          NOTE: links to poppler
38            - koffice <unfixed> (embed; bug #436163)
39  libgadu/ekg:          - libextractor 0.5.12-1 (embed)
40  centericq          NOTE: libextractor is using its own pdf decoder now
41  gaim          - ipe <unfixed> (embed)
42  pigdin (links dynamically against libgadu)          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43  kopete (ships the code, but links dynamically in the Debian package)          - ruby-gnome2 <unknown> (embed)
44  kadu (not packaged in Debian)          NOTE: copy only present in source but links to poppler
45  GNU gadu (not yet packaged in Debian)          - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47  xmlrpc: (which package is the "origin" of this code?)          - poppler <unfixable> (fork)
48  drupal  
49  phpgroupware  ppmd
50  egroupware          - libcomplearn-mod-ppmd <unfixed> (fork)
51  phpwiki          NOTE: discussion in #458152
52  php4 (php-pear, IIRC this was reorganized some weeks ago?)  
53    libevent
54  shtool: (affects build-time only)          - transmission 1.71-1 (embed; bug #529372)
55  mysql-ocaml  
56  php4  lrmi
57            - read-edid 2.0.0-1 (embed; bug #495131)
58  mozilla:          - s3switch <unfixed> (embed)
59  mozilla-firefox          - xresprobe <unfixed> (embed)
60  mozilla-thunderbird          - zhcon <unfixed> (embed)
61  firefox (to be removed)  
62  thunderbird (to be removed)  peercast
63  iceweasel          - gnome-peercast <removed> (embed)
64  iceape          [etch] - gnome-peercast <unfixed> (embed)
65  icedove  
66  xulrunner  silc-toolkit
67  nvu (no longer in Debian)          - silc-client 1.1~beta6-1 (embed)
68    
69  xli:  icclib
70  xloadimage          - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    libusb
74            - argyll <unfixed> (embed)
75    
76    dietlibc
77            - ccontrol 0.9.1+20071204-1 (static)
78    
79    libmikmod
80            - sdl-mixer1.2 <unfixed> (embed)
81            TODO: report bug
82    
83    libiax
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86    spandsp
87            - iaxmodem <unfixable> (embed; bug #548885)
88    
89    python-paramiko
90            - fabric 0.9.0-2 (embed; bug #561398)
91    
92    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
93            - dpkg 1.15.6 (static)
94            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
95            - rsync <unfixed> (embed)
96            - cherokee <unfixed> (embed)
97            NOTE: somehow derived code base
98            - mono <unfixed> (embed)
99            TODO: check mozilla
100            - Linux kernels <unfixed> (embed)
101            - pvpgn 1.7.8-2 (embed)
102            - mrtg 2.12.2-1 (embed)
103            - rpm <unknown> (embed)
104            NOTE: pinged anibal since when rpm was fixed
105            - tuxcmd-modules <unfixed> (embed)
106            - zsync <unfixed>
107            - tra <unfixed>
108            - sash <unfixed>
109            - nsis <unfixed>
110            - mseide-msegui <unfixed>
111            NOTE: mseide
112            - mirrordir <unfixed>
113            - poco <unfixed>
114            - klibc <unfixed>
115            - ghostscript <unfixed>
116            - freeimage <unfixed>
117            - clamav <unfixed> (fork)
118            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
119            - tuxonice-userui <unfixed> (static)
120            - plt-scheme <unfixed>
121            - perl <unfixed>
122            - paraview <unfixed>
123            - velvet 0.7.56~nozlibcopy-1
124            - gcvs <unfixed>
125            - dump <unfixed>
126            - aide <unfixed> (static)
127            - dar <unfixed> (static)
128            - avfs <unfixed>
129            - fpc <unfixed>
130            - winff <unfixed>
131            NOTE: inherited from fpc, see #472304
132            - lazarus <unfixed>
133            NOTE: inherited from fpc, see #472304
134            - erlang <unfixed> (embed)
135            - gamera 3.2.3-1 (embed)
136            - python2.4 <unfixed> (embed; bug #553403)
137            - python2.5 <unfixed> (embed; bug #553403)
138    
139    dulwich
140            - hg-git 0.1.0-1 (embed; bug #541996)
141    
142    libvigraimpex
143            - hugin <unfixed> (embed; bug #542259)
144            - enblend-enfuse <unfixed> (embed; bug #542258)
145            - gamera 3.2.3-1 (embed)
146    
147    libbz2
148            - dpkg 1.15.6 (static)
149            - amd64-libs <unfixed> (static)
150            NOTE: let's call it "static"
151            - dar <unfixed> (static)
152            - dump <unfixed> (static)
153            - unalz <unfixed> (embed)
154            NOTE: has code, by the maint, to use the system version but links against the internal copy
155    
156    libyahoo2
157            - centerim <unfixed> (embed; bug #559783)
158    
159    libmsn
160            - centerim <unfixed> (embed; bug #559783)
161    
162    libgadu
163            - centerim <unfixed> (embed; bug #559783)
164            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
165            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
166            - kdenetwork 4:3.3.2-5 (embed)
167            NOTE: from kdenetwork: kopete
168            - ekg 1:1.8~rc0-1 (embed)
169            - kadu 0.6.0.2-3 (embed; bug #504430)
170            - gadu <itp> (embed)
171    
172    xmlrpc (which package is the "origin" of this code?)
173            - drupal <unfixed> (embed)
174            - phpgroupware <unfixed> (embed)
175            - egroupware <unfixed> (embed)
176            - phpwiki <unfixed> (embed)
177            - php4 <removed> (embed)
178            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
179    
180    shtool (affects build-time only)
181            - mysql-ocaml <unfixed> (embed)
182            - php4 <removed> (embed)
183            - php5 <unfixed> (embed)
184    
185  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  xulrunner
186  openmotif          - iceape <unfixed> (embed; bug #561749)
187  xfree86/xorg (in libxpm)          - iceweasel 2.0.0.19 (embed)
188            - icedove <unfixed> (embed; bug #561750)
189  kerberized apps with BSD origin:          - kompozer <unfixed> (embed; bug #532168)
190  krb4          - galeon 2.0.2-4 (embed)
191  krb5          - epiphany-browser 2.14.3-8 (embed)
192  heimdal          - conkeror 0.9~git080629-2 (embed)
193            - kazehakase 0.4.2-1 (embed)
194  grip: (which pkg is the origin?)  
195  libcdaudio  xli
196  grip          - xloadimage <unfixed> (embed)
197  gnome-vfs (vfs2 as well?)  
198    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
199  fudforum:          - openmotif <unfixed> (embed)
200  phpgroupware-fudforum          - libxpm <unfixed> (embed; bug #575750)
201  egroupware-fudforum (removed from egroupware after sarge)  
202    kerberized apps with BSD origin
203  cvs:          - krb4 <removed> (embed)
204  gcvs (at least an additional script is included, check if there's more)          - krb5 <unfixed> (embed)
205            - heimdal <unfixed> (embed)
206  pcre:  
207  all pythons  grip (which pkg is the origin?)
208  php4 (src included, but Debian package links dynamically)          - libcdaudio <unfixed>
209  analog (src included, but Debian package links dynamically)          - grip <unfixed>
210  libgoffice-1          - gnome-vfs <unfixed>
211  vfu (#450754)          TODO: check vfs2 as well
212  tf5 (since 5.0beta7 the Debian package links dynamically)  
213  monotone (including this starting from 0.37)  fudforum
214  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          [etch] - phpgroupware <unfixed> (embed)
215  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)          NOTE: phpgroupware-fudforum
216  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)          [sarge] - egroupware-fudforum <removed> (embed)
217    
218  tiff:  libbsd
219  wxpythongtk (check, which debian pkg this is in)          - rdate 1:1.2-3 (embed)
220  older kdegraphics/kpdf releases < 3.3 embedded a copy          - atheme-services <unfixed>
221            - libbsd-arc4random-perl <unfixed>
222  uudeview:          - isakmpd <unfixed>
223  libconvert-uulib-perl          - bsdgames <unfixed> (embed)
224            - bsd-mailx <unfixed> (embed)
225  sqlite: (not affected by security vulnerabilities so far)          - netcat-openbsd <unfixed> (embed; bug #550611)
226  amarok          - openssh <unfixed> (embed)
227  monotone          - unworkable <unfixed> (embed)
228  iceweasel  
229    cvs
230  util-linux/mount:          - gcvs <unfixed> (embed)
231  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          NOTE: see cvsunix/src in tarball
232    
233  webmin:  pcre3
234  usermin (only in sarge)          - php4 <removed> (embed)
235            - analog 2:5.23-0woody1 (embed)
236  sylpheed:          - goffice <unfixed> (embed)
237  sylpheed-claws          NOTE: libgoffice-*
238            - vfu 4.06-4.1 (embed; bug #450754)
239  phpsysinfo:          - tf5 5.0beta7-1 (embed)
240  egroupware          - monotone 0.43-1 (embed)
241  phpgroupware          NOTE: this only affects versions >= 0.37
242            - glib2.0 2.15.2-1 (embed)
243  phpldapadmin:          - apache2 2.0.53-4 (embed)
244  egroupware (removed from egroupware after sarge)          - exim4 4.10-0.srh20.12 (embed)
245            - yacas <unfixed> (embed)
246  chmlib:          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
247  kchmviewer (ships the code but links dynamically)          - gtamsanalyzer.app 0.42-5 (embed)
248            - tin 980117-1 (embed)
249  libavcodec/libavformat (source: ffmpeg):          - kazehakase 0.5.2-1
250  mplayer (#395252)          - webkit 1.0.1-1 (embed)
251  xvidcap          - qt4-x11 <unfixed> (embed)
252  kino (links statically, does not include code)          NOTE: embedded via webkit copy
253  vlc (links statically, does not include code)          - erlang <unfixed> (embed)
254  smilutils (links statically, does not include code)          - ssed <unfixed> (embed)
255  motion (links statically, does not include code)          - ircd-hybrid <unfixed> (static)
256  gst-ffmpeg          - emboss <unfixd>
257  gstreamer0.10-ffmpeg          - cherokee <unfixed> (embed)
258  xmovie          - oftc-hybrid <unfixed> (embed)
259            - ratbox-services <unfixed> (embed)
260  mad MPEG decoding lib:          - squeak-vm <unfixed> (embed)
261  mad          - tinymux <unfixed> (embed)
262  xine-lib  
263    tiff
264            - wxwindows2.4 2.2.1 (embed)
265            - gamera 3.2.3-1 (embed)
266            - freeimage <unfixed> (embed)
267            - libtk-img <unfixed> (embed)
268            NOTE: there are two copies, one under tiff/ other under libtiff/
269            - gdal <unfixed>
270    
271    uudeview
272            - libconvert-uulib-perl <unfixed> (embed)
273            - pan <unfixed> (embed)
274    
275    sqlite (not affected by security vulnerabilities so far)
276            - amarok <unfixed> (embed)
277            - monotone 0.43-1 (embed)
278            - iceweasel <unfixed> (embed)
279            - heimdal <unfixed> (embed; bug #559616)
280    
281    util-linux/mount
282            - loop-aes-utils <unfixed> (embed)
283            NOTE: contains code from util-linux' mount in the mount-aes-udeb
284    
285    sylpheed
286            - sylpheed-claws <unfixed> (fork)
287    
288    phpsysinfo
289            - egroupware <unfixed> (embed)
290            - phpgroupware <unfixed> (embed)
291    
292    phpldapadmin
293            [sarge] - egroupware <unfixed> (embed)
294            NOTE: removed from egroupware after sarge
295    
296    chmlib
297            - kchmviewer <unknown> (embed)
298    
299    ffmpeg (libavcodec/libavformat)
300            - mplayer 1.0~rc2-14 (embed; bug #395252)
301            - kino 1.0.0-1
302            - vlc <not-affected> (Links dynamically since initial release)
303            - smilutils 0.3.0-10
304            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
305            - motion 3.1.19-1
306            - gstreamer0.10-ffmpeg 0.10.3-2
307            - xmovie <removed> (static)
308            TODO: gimp-gap (potentially using ffmpeg code as well)
309            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
310            - audacity 1.3.7-2 (embed; bug #512278)
311    
312    faad2
313            - mplayer 1.0~rc2-20 (embed)
314            - avifile <unfixed> (embed; bug #538750)
315            - ffmpeg-debian <removed> (embed)
316    
317    libmad (MPEG decoding lib)
318            - xine-lib <unfixed> (embed)
319            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
320            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
321    
 libdts:  
322  libdts  libdts
323  xine-lib          - xine-lib <unfixed> (embed)
324    
 flac:  
325  flac  flac
326  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
   
 libsndfile:  
 ardour  
327    
328  glibmm2.4:  liba52
329  ardour          - a52dec <unfixed> (embed)
330            - xine-lib <unfixed> (embed)
331    
332    mpeg2dec (libmpeg2)
333            - xine-lib <unfixed> (embed)
334    
335    libmpeg3
336            - squeak-vm <unfixed> (embed)
337    
338    libntlm
339            - wget <unfixed> (fork; bug #550436)
340            - curl <unfixed> (fork; bug #550437)
341            - cntlm <unfixed> (fork; bug #550438)
342    
343    uw-imap
344            - pine <unfixed> (embed)
345            - alpine <unfixed> (embed)
346    
347    imagemagick
348            - graphicsmagick <unfixed> (fork)
349    
350    python-urlgrabber
351            - mercurial <unfixed> (embed; bug #531062)
352            - w3af <unfixed> (embed; bug #555372)
353            [experimental] - harvestman <unfixed> (embed; bug #555373)
354    
355    beautifulsoup
356            - python-mechanize <unfixed> (embed; bug #555349)
357            - zope2.11 <removed> (embed; bug #555350)
358            - twill <unknown> (embed)
359    
360    halibut
361            - nsis <unfixed> (fork)
362    
363    libghttp
364            - hotway <unfixed> (embed)
365    
366    libsndfile
367            - ardour 1:2.7.1-1 (embed)
368    
369    glibmm2.4
370            - ardour 1:2.7.1-1 (embed)
371    
372    libgnomecanvasmm2.6
373            - ardour 1:2.7.1-1 (embed)
374    
375    libsigc++-2.0
376            - ardour 1:2.7.1-1 (embed)
377    
378    soundtouch
379            - ardour 1:2.7.1-1 (embed)
380    
381    libmms
382            - xine-lib <unfixed> (embed)
383            - mimms <unfixed> (embed)
384    
385    fckeditor
386            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
387            - moin 1.8.2-2 (embed; bug #452599)
388            - karrigell <removed> (embed; bug #452598)
389            - gforge 4.6.99+svn6225-1 (embed)
390            - request-tracker3.8 <unfixed> (embed)
391            - otrs2 <unfixed> (embed)
392    
393    ipatlas (not packaged in Debian)
394            - moodle <unfixed> (embed; bug #507185)
395    
396    libphp-phpmailer
397            - moodle <unfixed> (embed; bug #507185)
398            - mahara <unfixed> (embed)
399            - symfony <unfixed> (embed; bug #566778)
400            [etch] - phpgroupware <unfixed> (embed)
401            NOTE: phpgroupware-felamimail is only in etch
402            - egroupware <unfixed> (embed; bug #504283)
403            - glpi <unfixed>
404    
405    htmlArea (not packaged in Debian)
406            - moodle <unfixed> (embed)
407    
408    giflib
409            - wine <unfixed> (embed; bug #466181)
410    
411    bennu (not packaged in Debian, http://bennu.sourceforge.net)
412            - moodle <unfixed> (embed)
413    
414    smarty
415            - moodle 1.8.2-2 (embed; bug #471158)
416            - gallery2 2.2.5-2 (embed; bug #471160)
417            - mahara 0.9.2-2 (embed; bug #471201)
418            - gosa 2.4beta1-1 (embed; bug #471200)
419    
420  libgnomecanvasmm2.6:  TinyMCE
421  ardour          - wordpress 2.5.1-3 (embed; bug #478257)
422            - moodle <unfixed> (embed; bug #507185)
423  libsigc++-2.0:          - knowledgeroot <unfixed> (embed)
424  ardour          - joomla <itp> (bug #326398)
425    
426    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
427            - scite <unfixed> (embed)
428            - qscintilla <unfixed> (embed)
429            - qscintilla2 <unfixed> (embed)
430            - geany <unfixed> (fork)
431            - anjuta <unfixed> (embed)
432    
433    libphp-adodb
434            - moodle <unfixed> (embed; bug #507185)
435            NOTE: also AdoDB-XML Schema
436            - gallery2 <unfixed> (embed)
437            - phppgadmin <unfixed> (embed)
438            - egroupware <unfixed> (embed)
439            - phpwiki <unfixed> (embed)
440            - torrentflux 2.0beta1-2 (embed)
441            - ipplan <unfixed> (embed)
442            - typo3-src <unfixed> (embed)
443            - cacti <unknown> (embed)
444            [sarge] - cacti <unfixed> (embed)
445            NOTE: dependency exists, but internal version is used
446            - gforge 4.7~rc2-6 (embed)
447            - mahara <unfixed> (embed)
448    
449    gzip
450            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
451            - klibc <unfixed> (embed)
452            NOTE: based on linux-kernel gzip code
453            - busybox <unfixed> (embed)
454            - pristine-tar <unfixed> (modified-embed)
455            NOTE: compression code only, not uncompression
456    
457    neon
458            - cadaver 0.22.3+debian-1 (embed; bug #188381)
459            - gnome-vfs2 <unfixed> (embed; bug #395874)
460            [etch] - litmus <unfixed> (embed; #395875)
461            - litmus <removed> (embed; #395875)
462            [sarge] - screem <unfixed> (embed)
463            - sitecopy 1:0.16.0-1 (embed; bug #395876)
464            [etch] - tla <unfixed> (embed; bug #395877)
465            [sarge] - tla <unfixed> (embed; bug #395877)
466    
467    libmodplug
468            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
469    
470    libvncserver
471            - vino <unfixed> (embed)
472    
473    putty
474            - filezilla <unfixed> (embed)
475    
476    tinyxml (not packaged in Debian; itp bug #531968)
477            - filezilla <unfixed>
478            - crystalspace <unfixed> (embed)
479            - libwfut <unfixed> (embed)
480            - rarian <unfixed> (embed)
481            - bulletml <unfixed> (embed)
482            - pokerth <unfixed> (embed)
483            - qutecom <unfixed> (embed)
484            - sofa-framework <unfixed> (embed)
485            - yate <unfixed> (embed)
486            - antigrav <unfixed> (embed)
487            - balder2d <unfixed> (embed)
488            - cal3d <unfixed> (embed)
489            - criticalmass <unfixed> (embed)
490            - ember <unfixed> (embed)
491            - epiphany <unfixed> (embed)
492            - gambit <unfixed> (embed)
493            - noiz2sa <unfixed> (embed)
494            - ogre <unfixed> (embed)
495            - opencity <unfixed> (embed)
496            - openmovieeditor <unfixed> (embed)
497            - pouetchess <unfixed> (embed)
498            - tecnoballz <unfixed> (embed)
499            - trigger-rally <unfixed> (embed)
500            - xmoto <unfixed> (embed)
501            - mapnik <unknown> (embed)
502            NOTE: uses a different XML parser by default
503            - rrootage 0.23a-6 <embed>
504            NOTE: links to libbulltetml
505            - boson <unknown> (embed)
506            NOTE: the embedded code is unused
507    
508    gv
509            - evince <unfixed> (embed)
510            NOTE: ps/ tree from gv 3.5.8
511            NOTE: evince-gtk is affected (a component of evince source package)
512    
513    libXbae
514            - paw <removed> (embed)
515            [etch] - paw <unfixed> (embed)
516    
517    libgtkhtml
518            - claws-mail-extra-plugins <unfixed> (fork)
519    
520    libXaw
521            - paw <removed> (embed)
522            [etch] - paw <unfixed> (embed)
523            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
524    
525    libgd2
526            - graphviz <unfixed> (embed)
527            NOTE: lib/gd seems to be 2.0.33
528            - wml 2.0.11ds2-1 (embed)
529            - libwmf <unfixed> (embed)
530            NOTE: derived from gd 1.6.3
531    
532    rar
533            - unrar-nonfree <unfixed> (embed)
534    
535    unrar-free (maybe this code is derived from the original rar, too?)
536            - clamav <unfixed> (embed)
537            NOTE: seems to be disabled in default config
538    
539    mplayer (DirectMedia Object loader)
540            - xine-lib <unfixed> (embed)
541            NOTE: src/libw32dll/
542            - vlc <unfixed> (embed)
543            NOTE: modules/codec/dmo/
544            - mplayer 1.0~rc2-20 (embed)
545    
546    libwpd (WordPerfect converter)
547            - openoffice.org <unfixed> (embed)
548    
549    fsplib (http://sourceforge.net/projects/fsp/)
550            - gftp <unfixed> (embed)
551            NOTE: lib/fsplib version 0.3
552    
553    sprng
554            - tree-puzzle <unfixed> (embed)
555    
556    librpcsecgss
557            - krb5 <unfixed> (embed)
558    
559    jasper
560            - ghostscript 8.64~dfsg-2 (embed)
561    
562    libiris
563            - psi <unfixed> (embed)
564            - kdenetwork <unfixed> (embed)
565            NOTE: kopete embeds libiris but links dynamically to libidn
566            - kdegames <unfixed> (embed)
567            NOTE: ksirk/kde4
568    
569    libidn
570            - monotone 0.43-1 (embed)
571            - psi <unfixed> (embed)
572            NOTE: psi embeds libiris which embeds libidn
573            - kdegames <unfixed> (embed)
574            NOTE: kdegames/kde4 embeds libiris which embeds libidn
575    
576    lua5.1
577            - monotone 0.43-1 (embed)
578            - nmap 5.00-1 (embed; bug #527997)
579            [lenny] - nmap <unfixed> (embed; bug #527997)
580            - ocropus <unfixed> (embed)
581            - enigma <unfixed> (embed)
582            NOTE: requires lua built with C++
583            - freeciv <unfixed> (embed)
584            - spring <unfixed> (embed)
585    
586    libbotan
587            - monotone 0.43-1 (embed)
588    
589    NetXX
590            - monotone 0.43-1 (embed)
591    
592    libgc
593            - mono <unfixed> (embed)
594    
595    lzma
596            - p7zip <unfixed> (embed)
597            - xz-utils <unfixed> (fork)
598    
599    lzo
600            - grub2 <unfixed> (embed)
601    
602    yassl
603            - mysql-dfsg-5.0 <unfixed> (embed)
604            - mysql-dfsg-5.1 <unfixed> (embed)
605    
606    pax code
607            - tar <unfixed> (embed)
608            - cpio <unfixed> (embed)
609    
610    t1lib
611            - tetex-bin 2.0.2-1 (embed)
612            - texlive-bin <unknown> (embed)
613    
614    guichan
615            - boswars <unfixed> (embed)
616            NOTE: maintainer notified us, working on it
617    
618    tolua
619            - boswars <unfixed> (embed)
620            NOTE: maintainer notified us, working on it
621            NOTE: actually tolua++
622            - ocropus <unfixed> (embed)
623            NOTE: actually tolua++
624            - freeciv <unfixed> (embed)
625            NOTE: actually tolua++
626            - enigma <unfixed> (embed)
627    
628  soundtouch:  asio-dev
629  ardour          - luxrender <removed> (embed)
630    
 libmms:  
631  xine-lib  xine-lib
632  mimms          - vlc <unfixed> (embed)
633            NOTE: only parts included in modules/access/rtsp
 FCKeditor: (packaged as fckeditor)  
 knowledgeroot  
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
634    
635    netpbm
636            - tcl8.3 <unfixed> (embed)
637            - tcl8.4 <unfixed> (embed)
638            - tcl8.5 <unfixed> (embed)
639            NOTE: generic/tkImgGIF.c
640    
641    tk8.5
642            - tk8.0 <removed> (old-version)
643            - tk8.3 <unfixed> (old-version)
644            - tk8.4 <unfixed> (old-version)
645            - perl-tk <unfixable> (fork)
646    
647    samba
648            - mc 2:4.6.2~git20080311-1 (embed)
649            NOTE: maintainer is aware of this, currently searching a solution
650    
651    plib1.8.4c2
652            - boson <unfixed> (fork)
653            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
654    
655    fribidi
656            - quesoglc <unfixed> (embed)
657            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
658    
659    glew
660            - quesoglc <unfixed> (embed; bug #489341)
661            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
662            - trigger 0.5.2.1-2 (embed)
663            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
664            - trigger-rally 0.5.2.1-2 (embed)
665            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
666    
667    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
668            - transcend <unfixed> (embed)
669            - cultivation <unfixed> (embed)
670            - passage <unfixed> (embed)
671            - gravitation <unfixed> (embed)
672    
673    tar
674            - libarchive <unfixed> (embed)
675            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
676    
677  Moodle contains lots of things:  cpio
678  AdoDB          - libarchive <unfixed> (embed)
679  AdoDB-XML Schema          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
680    
681  gzip:  kde4libs
682  linux-kernel (lib/inflate.c)          - kdelibs <unfixable> (old-version)
 klibc (based on linux-kernel gzip code)  
 busybox  
683    
684  neon:  webkit
685  cadaver (all, but being worked on: #188381)          - qt4-x11 <unfixed> (embed; bug #479851)
686  gnome-vfs2 (#395874)          [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
687  litmus (#395875)          - kde4libs <unfixable> (fork)
688  screem (sarge only)          NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
689  sitecopy (#395876)          NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
690  tla (etch/sid only: #395877)  
691    ftgl
692            - blender 2.46+dfsg-1 (embed)
693    
694    wv
695            - abiword <unfixed>
696    
697    qemu
698            - kvm <removed> (embed; bug #543159)
699            - qemu-kvm <unfixed> (embed; bug #560853)
700            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
701            - xen-3 3.4.2-2 (embed; bug #560856)
702            - xen-unstable <unfixed> (embed; bug #560856)
703    
704    vgabios
705            - kvm <removed> (embed; bug #489442)
706            - qemu-kvm <unfixed> (embed)
707    
708    bochs
709            - kvm <removed> (embed; bug #489442)
710            - qemu-kvm <unfixed> (embed)
711    
712    speex
713            - vorbis-tools <unfixed> (embed)
714            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
715            - gst-plugins-good0.10 <unfixed> (embed)
716            - xine-lib <unfixed> (embed)
717            - libfishsound <unfixed> (embed)
718            - libannodex <removed> (embed)
719            - vlc <unfixed> (embed)
720            - xmms-speex <unfixed> (embed)
721            - libsdl-sound1.2 <unfixed> (embed)
722            - sweep <unfixed> (embed)
723    
724    libreadline
725            - magic <itp> (old-version)
726    
727    opcode
728            - ode <unfixed> (embed)
729            NOTE: opcode is not a package in debian, it is just embedded
730            NOTE: http://www.codercorner.com/Opcode.htm
731    
732    gimpact
733            - ode <unfixed> (embed)
734            NOTE: gimpact is not a package in debian, it is just embedded
735            NOTE: http://gimpact.sf.net
736    
737    mochikit
738            - mahara <unfixed> (embed)
739            NOTE: they require extra patches, still unmerged upstream
740            - ntop <unfixed> (embed)
741            - coherence 0.6.2-1 (embed)
742            - paste <unfixed> (embed)
743            - turbogears <unfixed> (embed)
744            - plone3 <removed> (embed)
745            - xulrunner <unfixed> (embed)
746            - libjifty-plugin-chart-perl <unfixed> (embed)
747            - sabnzbdplus <unfixed> (embed)
748            - tgmochikit <unfixed> (embed)
749    
750    prototypejs
751            - netbeans-ide 6.0.1+dfsg-2 (embed)
752            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
753            - webcit <unfixed> (embed; bug #555219)
754            - asterisk 1:1.6.2.0~rc3-1 (embed)
755            - libjson-ruby 1.1.4-1 (embed; bug #555224)
756            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
757            - horde3 <unfixed> (embed)
758            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
759            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
760            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
761            - ebug-http <removed> (embed; bug #555236)
762            - libaws 2.7-1 (embed; bug #555222)
763            - phpgedview <removed> (embed)
764            - poker-network 1.7.6-1 (embed; bug #555238)
765            - rails 2.1.0-6 (embed)
766            - wordpress 2.5.0-2 (embed; bug #555243)
767            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
768            TODO: search through all of the other zope packages
769            - ampache 3.4.1-2 (embed)
770            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
771            - hobix 0.5~svn20070319-4 (embed; bug #555247)
772            - zabbix 1.6.6-4 (embed; bug #555250)
773            - chora2 <unfixed> (embed; bug #555253)
774            - gollem <unfixed> (embed; bug # 555254)
775            - jscropperui 1.2.1-1 (embed; bug #555257)
776            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
777            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
778            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
779            - activeldap <unfixed> (embed)
780            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
781            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
782            - otrs2 2.3.4-6 (embed; bug #555267)
783            - webcalendar 1.2~b1-2 (embed; bug #555269)
784            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
785            - jifty 0.90519-1 (embed; bug #555271)
786            - jquery 1.4-1 (embed; bug #555272)
787            - passenger 2.2.5debian1-1 (embed; bug #555273)
788            - plone3 <removed> (embed; bug #555275)
789            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
790            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
791            - xulrunner <unfixed> (embed)
792            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
793    
794    gdb
795            - insight <unfixed> (embed)
796    
797    e2fsprogs
798            - ldiskfsprogs <unfixable> (fork)
799    
800    quazip (not packaged in Debian)
801            - qcake <unfixed> (embed)
802            NOTE: starting with upstream version 0.6.4
803    
804    exo
805            - pcmanfm <unfixed> (embed; bug #499677)
806            NOTE: slightly modified source code
807    
808    java
809            - openjdk-6 <unfixed>
810            - sun-java5 <unfixed>
811            - sun-java6 <unfixed>
812    
813    libphp-snoopy
814            - ampache 3.4.1-2 (embed; bug #504169)
815            - gforge 4.6.99+svn6094-2 (embed)
816            - mahara 1.0.5-2 (embed; bug #504170)
817            - pixelpost 1.7.1-5 (embed; bug #504171)
818            - mediamate 0.9.3.6-5 (embed; bug #504172)
819            - opendb <removed> (embed; bug #504173)
820            [etch] - opendb <unfixed> (embed; bug #504173)
821            - wordpress 2.5.1-9 (embed; bug #443948)
822            - moodle <unfixed> (embed; bug #507185)
823            [etch] - phpgroupware <unfixed> (embed)
824            NOTE: phpgroupware-felamimail
825            - magpierss 0.72-3 (embed; bug #431089)
826    
827    jquery
828            - zekr <unfixed> (embed)
829            - wordpress <unknown> (embed)
830            - yocto-reader <unfixed> (embed)
831            - textpattern <unfixed> (embed)
832            - genshi 0.5.1-1 (embed)
833            NOTE: compressed file under examples/ dir
834            - prewikka <unfixed> (embed)
835            - libramaze-ruby <unfixed> (embed)
836            - drupal5 <unfixed> (embed)
837            - b2evolution <unfixed> (embed)
838            - wesnoth <unfixed> (embed)
839    
840    tablesorter (jquery plugin, not packaged yet)
841            - wesnoth <unfixed> (embed)
842    
843    kses
844            - wordpress <unfixed> (embed; bug #504242)
845            NOTE: their copy has all methods renamed to wp_<foo>
846            NOTE: kses isn't in Debian, RFP: #504240
847            - moodle <unfixed> (embed; bug #507185)
848            - egroupware <unfixed> (embed)
849    
850    magpierss
851            - wordpress <unfixed> (embed; bug #504242)
852            - moodle <unfixed>
853    
854    php-gettext
855            - wordpress 2.8.4-1 (embed; bug #504242)
856            - docbookwiki <unfixed> (embed)
857            - knowledgeroot 0.9.9.5-1
858            NOTE: non-free
859    
860    libphp-ixr (name may change, it is the Incutio XML-RPC)
861            - wordpress <unfixed> (embed; bug #504242)
862            NOTE: libphp-ixr isn't in Debian, RFP: #504236
863            - dokuwiki <unfixed> (embed)
864            - textpattern <unfixed> (embed)
865    
866    libphp-cas
867            - glpi <unfixed> (embed)
868            - moodle <unfixed> (embed; bug #505984)
869    
870    scriptaculous (prototype.js is among the embeds in the following)
871            - glpi <unfixed> (embed)
872            - libaws <unfixed> (embed; bug #555222)
873            - op-panel <unfixed> (embed)
874            - symfony <unfixed> (embed)
875            NOTE: maintainer says there are extra incompatible changes required
876            - pixelpost 1.7.1-6 (embed)
877            - webhelpers <unfixed> (embed)
878            - qwik <removed> (embed; bug #555241)
879            - smokeping <unfixed> (embed)
880            - turba2 <unfixed> (embed)
881            - typo3-src 4.2.3-1 (embed)
882            - request-tracker3.6 <unfixed> (embed)
883            - request-tracker3.8 <unfixed> (embed)
884            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
885            - wordpress 2.5.0-2 (embed)
886            - libhtml-prototype-perl 1.48-3 (embed)
887    
888    libmarkdown-php
889            - moodle <unfixed> (embed; bug #507185)
890            - pixelpost 1.7.1-6 (embed)
891    
892    php-openid
893            - wordpress-openid <itp> (embed)
894    
895    geshi
896            - dokuwiki 0.0.20080505-3.1 (embed)
897            - pgfouine 1.0-1.1 (embed)
898            - websvn 2.1.0-1 (embed)
899    
900    webcalendar
901            - gforge 4.7~rc2-6 (embed; bug #504758)
902    
903    libical
904            - kdepim <unknown> (fork)
905            NOTE: fixed at some point during 4.0
906            - kdepimlibs 4.2.0-1 (fork)
907            - claws-mail-extra-plugins <unfixed> (fork)
908    
909    harfbuzz
910            - qt4-x11 <unfixed> (embed)
911            - pango1.0 <unfixed> (embed)
912            - fontmatrix <unfixed> (embed)
913    
914    libzip
915            - php5 <unfixable> (modified-embed)
916            - odt2txt <unfixed> (embed; bug #523808)
917    
918    json.php (not packaged; should be replaced with php's built-in functions)
919            - moodle <unfixed>
920            - yui <unfixed>
921            - gallery2 <unfixed>
922            - dokuwiki <unfixed>
923            - typo3-src <unfixed>
924    
925    php-fpdf
926            - tcpdf <itp> (fork)
927            - moodle <unfixed>
928            - phpwiki <unfixed>
929            - egroupware <unfixed>
930            - ldap-account-manager <unfixed> (fork)
931    
932    tcpdf (itp: #495985)
933            - moodle <unfixed>
934            - phpmyadmin <unfixed>
935    
936  libmodplug:  typo3
937  gst-plugins-bad0.10          - moodle <unfixed>
938    
939  libvncserver:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
940  vino          - moodle <unfixed>
941            - gosa <unfixed>
942    
943    php-ole (itp: #487558)
944            - moodle <unfixed>
945    
946    pieforms (http://www.catalyst.net.nz)
947            - mahara <unfixed>
948    
949    savant2 (http://phpsavant.com)
950            - egroupware <unfixed>
951    
952    rssparser (http://nwow.org)
953            - egroupware <unfixed>
954            - phpgroupware <unfixed>
955    
956    lcms
957            - openjdk-6 <unfixed> (fork)
958            - gimp 2.4.0~rc2-2
959    
960    libphp-phplayersmenu
961            - diogenes <unfixed>
962            - phpldapadmin <unfixed>
963    
964    libphp-pclzip
965            - docvert <unfixed>
966            - moodle <unfixed>
967            - egroupware <unfixed>
968    
969    libphp-simplepie
970            - dokuwiki <unfixed>
971            - wordpress <unfixed>
972    
973    libphp-jpgraph
974            - egroupware <unfixed>
975    
976    php-simpletest
977            - moodle <unfixed>
978    
979    libpng
980            - iceweasel <not-affected> (uses xulrunner)
981            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
982            - iceape 1.0.13~pre080614i-0etch1 (embed)
983            - xulrunner 1.9.0.13-1 (embed)
984            [lenny] - xulrunner 1.9.0.11-0lenny1
985            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
986            - gamera 3.2.3-1 (embed)
987            - freeimage <unfixed> (embed)
988            - tuxonice-userui (static)
989    
990    irssi
991            - silc-client <unfixed> (embed)
992            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
993    
994    extc
995            - mtasc <unfixed> (embed)
996            - haxe <unfixed> (embed)
997    
998    swflib
999            - mtasc <unfixed> (embed)
1000            - haxe <unfixed> (embed)
1001    
1002    libitext-java
1003            - bouncycastle 2.1.4-1 (embed)
1004    
1005    python-ply
1006            - pyke <unfixed> (embed; bug #555363)
1007            - pywbem 0.7.0-4 (embed; bug #555364)
1008            - sepolgen <unfixed> (embed; bug #555365)
1009            - zope-textindexng3 <unknown> (embed)
1010            - iceweasel <not-affected> (uses xulrunner)
1011            - xulrunner <unknown> (embed)
1012            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1013    
1014    libdumbnet (libdnet upstream)
1015            - nmap <unfixed> (fork)
1016    
1017    gcc-4.4
1018            - gcc-mingw32 <unfixed> (embed)
1019    
1020    camlimages
1021            - advi <unfixed> (static; bug #550441)
1022    
1023    memcached
1024            - memcachedb <unfixed> (embed)
1025    
1026    yajl
1027            - argyll <unfixed> (embed; bug #544223)
1028            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1029    
1030    nusoap
1031            - gforge 4.8.2-1 (embed)
1032            - ampache <unfixed> (embed)
1033            - poker-network <unfixed> (embed)
1034            - moodle <unfixed> (embed)
1035            NOTE: code is not used when running under php5 and soap is enabled
1036            - phpwiki <unfixed> (embed)
1037            - gallery2 <unfixed> (embed)
1038            - typo3-src <unfixed> (embed)
1039    
1040    libept
1041            - adept <unfixed> (embed; bug #540649)
1042    
1043    libvorbis
1044            - iceweasel <not-affected> (uses xulrunner)
1045            - xulrunner <unfixed> (embed; bug #540959)
1046            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1047            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1048            - iceape <unfixed> (embed)
1049            [etch] - iceape <not-affected> (introduced in 2.0)
1050            [lenny] - iceape <not-affected> (introduced in 2.0)
1051    
1052    cairo
1053            - iceweasel <not-affected> (uses xulrunner)
1054            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1055    
1056    liboggz
1057            - iceweasel <not-affected> (uses xulrunner)
1058            - xulrunner <unfixed> (embed; bug #540959)
1059            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1060            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1061            - iceape <unfixed> (embed)
1062            [etch] - iceape <not-affected> (introduced in 2.0)
1063            [lenny] - iceape <not-affected> (introduced in 2.0)
1064    
1065    liboggplay
1066            - iceweasel <not-affected> (uses xulrunner)
1067            - xulrunner <unfixed> (embed; bug #540959)
1068            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1069            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1070            - iceape <unfixed> (embed)
1071            [etch] - iceape <not-affected> (introduced in 2.0)
1072            [lenny] - iceape <not-affected> (introduced in 2.0)
1073    
1074    php-net-dnsbl
1075            - serendipity <unfixed> (embed; bug #541740)
1076    
1077    php-onyx-rss
1078            - serendipity <unfixed> (embed; bug #541740)
1079    
1080    php-text-wiki
1081            - serendipity <unfixed> (embed; bug #541740)
1082    
1083    php-xml-rpc
1084            - serendipity <unfixed> (embed; bug #541740)
1085    
1086    polarssl (does not have a shared library)
1087            - pdkim <itp> (embed; bug #543150)
1088            - xyssl <unfixed> (old-version)
1089    
1090    pidgin (libpurple)
1091            - gaim <removed> (old-version)
1092            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1093    
1094    icu
1095            - webkit 1.0.1-1 (embed; bug #547214)
1096            - texlive-bin <unfixed> (fork)
1097            NOTE: texlive upstream working with icu upstream to merge their changes
1098    
1099    cyrus-imapd-2.2
1100            - kolab-cyrus-imapd <unfixed> (fork)
1101            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1102    
1103    python-cxx-dev
1104            - freecad 0.9.2646.3-1 (embed; bug #547936)
1105    
1106    zipios++
1107            - freecad 0.9.2646.3-1 (embed; bug #547941)
1108            - enigma 0.92.3-3 (embed)
1109            NOTE: likely fixed earlier, marking etch's version as fixed
1110    
1111    linux-2.6
1112            - kvm <removed> (embed; bug #549973) [./kernel/*]
1113            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1114            - kernel-source-2.6.8 <removed> (old-version)
1115            - kernel-source-2.4.27 <removed> (old-version)
1116            - kernel-source-2.4.24 <removed> (old-version)
1117            - kernel-source-2.2.25 <removed> (old-version)
1118            - kernel-source-2.2.20 <removed> (old-version)
1119    
1120    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1121            - kvm <removed> (embed) [./libfdt/*]
1122            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1123    
1124    qweb (not packaged)
1125            - ajaxterm <unfixed>
1126    
1127    opensaml2
1128            - opensaml <removed> (old-version)
1129    
1130    shibboleth-sp2
1131            - shibboleth-sp <removed> (old-version)
1132    
1133    tuxonice-userui
1134            - suspend2-userui <removed> (old-version)
1135    
1136    expat
1137            - w3c-libwww <removed> (embed; bug #551941)
1138            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1139            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1140            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1141            - python2.4 <unfixable> (embed; bug #553403)
1142            - python-4suite <unfixed> (embed; bug #516935)
1143            - wxwindows2.4 <removed> (embed)
1144            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1145            - wxwidgets2.8 2.8.10.1-2 (embed)
1146            - celementtree 1.0.5-8 (embed)
1147            NOTE: Maybe that was fixed even earlier
1148            - audacity 1.3.2-1 (embed)
1149            - matanza <unfixed> (embed)
1150            - tdom 0.8.3~20080525-1 (embed)
1151            - udunits 2.1.8-4 (embed)
1152            - apr-util 1.2 (embed)
1153            - ayttm <unfxed> (embed; bug #561006)
1154            - cableswig <unfixed> (embed)
1155            - cadaver <unfixed> (embed)
1156            - cmake 2.6.0-6 (embed)
1157            - coin3 <unfixed> (embed)
1158            - gdcm 2.0.14-2 (embed)
1159            - ghostscript 8.71~dfsg-2 (embed)
1160            - grmonitor <removed> (embed)
1161            - iceape <unfixed> (embed)
1162            - insighttoolkit 3.16.0-1 (embed)
1163            NOTE: insighttoolkit might've been fixed earlier
1164            - libparagui1.1 1.0.2-1 (embed)
1165            - paraview 3.6.2-1 (embed)
1166            - poco 1.3.6p1-1 (embed)
1167            - simgear <unfixed> (embed)
1168            - sitecopy 1:0.16.0-1
1169            - smart <unfixed> (embed)
1170            NOTE: smart embeds celementree, and it includes expat
1171            - swish-e <not-affected> (Linked against libxml, which is used instead)
1172            - tla 1.3.5+dfsg-15 (embed)
1173            - vtk 4.1.20030227-1 (embed)
1174            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1175            - xmlrpc-c <unfixed> (embed)
1176            - iceweasel <unfixed> (embed)
1177            - kompozer <unfixed> (embed)
1178            - vxl 1.13.0-2 (embed)
1179            - xulrunner <unfixed> (embed)
1180            - apache2 2.2 (embed)
1181            - texlive-bin <not-affected> (Embedded code not compiled in)
1182            - vnc4 <unfixed> (embed)
1183            - xotcl 1.6.6-1 (embed)
1184    
1185    xerces-c
1186            - xerces-c2 <unfixed> (old-version)
1187            - xerces27 <removed> (old-version)
1188    
1189    md5 (RSA's version; not the gnu version provided by coreutils)
1190            - w3c-libwww <removed> (embed; bug #551942)
1191            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1192    
1193    libparagui1.1
1194            - asc <unfixable> (fork)
1195    
1196    enet
1197            - sauerbraten <unfixed> (embed; #497194)
1198    
1199    eglibc
1200            - glibc <removed> (old-version)
1201    
1202    galib
1203            - gamera 3.2.3-1 (embed)
1204    
1205    configobj
1206            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1207            - elisa <unfixed> (embed; bug #555337)
1208            - gaupol <unfixed> (embed; bug #555338)
1209            - ipython <unfixed> (embed; bug #555339)
1210            - pida <unfixed> (embed; bug #555340)
1211            - psychopy <unfixed> (embed; bug #555341)
1212            - rest2web <unfixed> (embed; bug #555342)
1213            - auth2db <unknown> (embed)
1214            - dynagen <unknown> (embed)
1215            - iceweasel <unknown> (embed)
1216            - sabnzbdplus <unknown> (embed)
1217            - xulrunner <unknown> (embed)
1218            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1219    
1220    python-clientform
1221            - bibus <unfixed> (embed; bug #555332)
1222            - zope2.10 <unfixed> (embed; bug #555333)
1223            - zope2.11 <removed> (embed; bug #555334)
1224            - python-mechanize <unknown> (embed)
1225            - twill <unknown> (embed)
1226    
1227    python-mechanize
1228            - zope2.10 <unfixed> (embed; bug #555337)
1229            - zope2.11 <removed> (embed; bug #555338)
1230            - twill <unknown> (embed; bug #555339)
1231    
1232    pexpect
1233            - duplicity 0.6.06-1 (embed; bug #555361)
1234            - hplip <unfixed> (embed; bug #555362)
1235            - smart <unfixed> (embed; bug #555363)
1236    
1237    pyparsing
1238            - bauble <unfixed> (embed; bug #555366)
1239            - boa-constructor 0.6.1-8 (embed; bug #555367)
1240            - calibre <unfixed> (embed; bug #555368)
1241            - matplotlib <unfixed> (embed; bug #531024)
1242            - zhpy 1.7.3.1-1 (embed; bug #555370)
1243            - polybori <unknown> (embed)
1244            - python-whoosh <unknown> (embed)
1245            - twill <unknown> (embed)
1246            - zope-textindexng3 <unknown> (embed)
1247    
1248    python-pysqlite2
1249            - python2.4 <unfixed> (embed; bug #553403)
1250            - python2.5 <unfixed> (embed; bug #553403)
1251    
1252    celementtree
1253            - python2.5 <unfixed> (embed)
1254            - smart <unfixed> (embed)
1255    
1256    elementtree
1257            - python2.5 <unfixed> (embed)
1258            - python2.6 <unfixed> (embed)
1259            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1260            - gedit 2.28.2-1 (embed; bug #555344)
1261            - smart <unfixed> (embed)
1262            - solfege <unfixed> (embed; bug #555345)
1263            - w3af <unfixed> (embed; bug #555346)
1264            - python-qt4 <unknown> (embed)
1265            - sphinx <unknown> (embed)
1266            - python-nltk <itp> (embed)
1267    
1268    python2.5
1269            - python2.4 <unfixed> (old-version)
1270            - jython <unfixed> (embed)
1271            NOTE: embeds many stdlib modules
1272            - python-django <unfixed> (embed; bug #555419)
1273            NOTE: embeds stdlib modules: doctest, decimal
1274            - gamera 3.2.3-1 (embed)
1275            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1276            - boa-constructor <unfixed> (embed; bug #555426)
1277            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1278            - nicotine <unfixed> (embed; bug #555427)
1279            NOTE: embeds stdlib modules: ConfigParser
1280            - museek+ <unfixed> (embed; bug #555428)
1281            NOTE: embeds stdlib modules: ConfigParser
1282            - vegastrike-data <unfixed> (embed)
1283            NOTE: embeds many stdlib modules
1284            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1285            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1286            - config-manager <unfixed> (embed; bug #555423)
1287            NOTE: embeds stdlib modules: optparse
1288            - jhbuild 2.28.0-1 (embed; bug #555421)
1289            NOTE: embeds stdlib modules: optparse, subprocess
1290            - smart <unfixed> (embed; bug #555432)
1291            NOTE: embeds stdlib modules: optparse
1292            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1293            NOTE: embeds stdlib modules: doctest
1294            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1295            NOTE: embeds stdlib modules: doctest
1296            - distribute <unfixed> (embed)
1297            NOTE: embeds stdlib modules: doctest
1298            - python-setuptools <unfixed> (embed; bug #555435)
1299            NOTE: embeds stdlib modules: doctest
1300            - zope.testing <unfixed> (embed; bug #555436)
1301            NOTE: embeds stdlib modules: doctest
1302            - translate-toolkit <unfixed> (embed; bug #555422)
1303            NOTE: embeds stdlib modules: textwrap, contextlib
1304            - libtpclient-py <unfixed> (embed; bug #555424)
1305            NOTE: embeds stdlib modules: subprocess
1306            - grass <unfixed> (embed; bug #555425)
1307            NOTE: embeds stdlib modules: subprocess
1308            - coherence <unfixed> (embed; bug #555429)
1309            NOTE: embeds stdlib modules: uuid
1310            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1311            NOTE: embeds stdlib modules: uuid
1312            - setroubleshoot <unfixed> (embed; bug #555431)
1313            NOTE: embeds stdlib modules: uuid
1314            - linkchecker <unfixed> (embed; bug #555414)
1315            NOTE: embeds msgfmt.py script
1316            - imdbpy <unfixed> (embed)
1317            NOTE: embeds msgfmt.py script
1318            - kiwi <unfixed> (embed)
1319            NOTE: embeds msgfmt.py script
1320            - moin <unfixed> (embed)
1321            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1322            - plone3 <removed> (embed)
1323            NOTE: embeds msgfmt.py script
1324            - roundup <unfixed> (embed)
1325            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1326            - rednotebook <unfixed> (embed; bug #555415)
1327            NOTE: embeds msgfmt.py script
1328            - turbogears <unfixed> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - elisa <unfixed> (embed)
1331            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1332            - calibre <unfixed> (embed)
1333            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1334            - mailman 1:2.1.13-1 (embed; #555416)
1335            NOTE: embeds msgfmt.py script
1336            - python-docutils <unknown> (embed)
1337            NOTE: embeds stdlib modules: optparse, textwrap
1338            - python-imaging <unknown> (embed)
1339            NOTE: embeds stdlib modules: doctest
1340            - python-mechanize <unknown> (embed)
1341            NOTE: embeds stdlib modules: doctest
1342            - twill <unknown> (embed)
1343            NOTE: embeds stdlib modules: subprocess
1344            - zeroc-ice <unknown> (embed)
1345            NOTE: embeds stdlib modules: subprocess
1346            - wxwidgets2.8 <unknown> (embed)
1347            NOTE: embeds stdlib modules: subprocess
1348            - cycle <unknown> (embed)
1349            NOTE: embeds msgfmt.py script
1350            - deluge <unknown> (embed)
1351            NOTE: embeds msgfmt.py script
1352            - opendict <unknown> (embed)
1353            NOTE: embeds msgfmt.py script
1354            - openerp-client <unknown> (embed)
1355            NOTE: embeds msgfmt.py script
1356            - rapidsvn <unknown> (embed)
1357            NOTE: embeds msgfmt.py script
1358            - wammu <unknown> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - gaphor <unknown> (embed)
1361            NOTE: embeds msgfmt.py script
1362            - pida <unknown> (embed)
1363            NOTE: embeds msgfmt.py script
1364            - python-formencode <unknown> (embed)
1365            NOTE: embeds msgfmt.py script
1366            - duplicity <unfixed> (embed)
1367            NOTE: embeds stdlib module: urlparse, tarfile
1368            - pygopherd <unfixed> (embed)
1369            NOTE: embeds stdlib module: zipfile
1370    
1371    argparse
1372            - twill <unfixed> (embed; bug #555347)
1373            - ipython <unfixed> (embed; bug #555348)
1374    
1375    coherence
1376            - elisa <unfixed> (embed; bug #555335)
1377    
1378    simpletal
1379            - plastex <unfixed> (embed; bug #555371)
1380    
1381    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1382            - postr <unfixed> (embed)
1383            - elisa <unfixed> (embed)
1384    
1385    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1386            - apertium-tolk <unfixed> (embed)
1387            - ipython <unfixed> (embed)
1388            - virtaal <unfixed> (embed)
1389    
1390    distribute
1391            - setuptools <removed> (old-version)
1392    
1393    rails
1394            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1395            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1396            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1397            - thin <unfixed> (embed) [./spec/rails_app/*]
1398            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1399            NOTE: be dangerous if developers are naively basing their code off of the examples
1400            NOTE: prototype.js is among the example files
1401    
1402    lucene2 (prototype.js is among the embeds in the following)
1403            - lucene <unfixed> (old-version)
1404            - pylucene <unfixed> (embed)
1405            - libpdfbox-java <unfixed> (embed)
1406            - libfontbox-java <unfixed> (embed)
1407            - libjempbox-java <unfixed> (embed)
1408            - solr <unfixed> (embed)
1409    
1410    unicode-data
1411            - syslinux <unfixed> (embed)
1412            - camomile <unfixed> (embed)
1413            - fribidi <unfixed> (embed)
1414            - m17n-db <unfixed> (embed)
1415            - sbcl <unfixed> (embed)
1416            - heimdal <unfixed> (embed)
1417            - icu <unfixed> (embed)
1418            - icu4j <unfixed> (embed)
1419            - krb5 <unfixed> (embed)
1420            - moodle <unfixed> (embed)
1421            - openldap <unfixed> (embed)
1422            - pike7.6 <unfixed> (embed)
1423            - samba <unfixed> (embed)
1424            - samba4 <unfixed> (embed)
1425            - cmucl <unfixed> (embed)
1426            - typo3-src <unfixed> (embed)
1427            - mauve <unfixed> (embed)
1428            - texlive-bin <unfixed> (embed)
1429            - ypsilon <unfixed> (embed)
1430            - jeuclid <unfixed> (embed)
1431            - charmap.app <unfixed> (embed)
1432            - clisp <unfixed> (embed)
1433            - gnulib <unfixed> (embed)
1434            - opensrs-client <unfixed> (embed)
1435            - saxonb <unfixed> (embed)
1436            - rails <unfixed> (embed)
1437    
1438    feedparser
1439            - rawdog <unfixed> (embed; bug #383422)
1440            - miro <unfixed> (embed; bug #555351)
1441            - calibre <unfixed> (embed; bug #555352)
1442            - freevo <unfixed> (embed; bug #555353)
1443            - pida <unfixed> (embed; bug #555354)
1444            - planet-venus <unfixed> (embed; bug #555355)
1445            - plone3 <removed> (embed; bug #555356)
1446            - exaile 0.2.14+debian-1 (embed)
1447            - screenlets 0.1.2-3 (embed)
1448            NOTE: included twice
1449    
1450    agg:
1451            - matplotlib <unfixed> (embed: bug #377271)
1452            - contextfree <unfixed> (embed)
1453            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1454            - exactimage <unfixed> (embed)
1455            - python-enable <unfixed> (embed)
1456            - mapnik 0.5.1-3 (embed)
1457            NOTE: links statically to agg, but shared library is not available (bug #377271)
1458    
1459    vtk
1460            - paraview <unfixable> (embed; bug #495426)
1461    
1462    txt2tags
1463            - rednotebook <unfixed> (embed)
1464    
1465    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1466            - gajim <unfixed> (embed)
1467            - emesene <unfixed> (embed)
1468            - convirt <unfixed> (embed)
1469            - pida <unfixed> (embed)
1470            - rednotebook <unfixed> (embed)
1471    
1472    horde3 (prototype.js is among the embeds in the following)
1473            - mnemo2 <unfixed> (embed)
1474            - nag2 <unfixed> (embed)
1475            - wordpress <unfixed> (embed)
1476            NOTE: Text_Diff (wp-includes/Text/Diff*)
1477    
1478  putty:  cimg
1479  filezilla          - gmic <itp> (embed)
1480    
1481  tinyxml (not packaged in Debian):  mootools
1482  filezilla          - gmic <itp> (embed)
1483    
1484  gv:  openldap
1485  evince (ps/ tree from gv 3.5.8)          - openldap2.3 <removed> (old-version)
 evince-gtk (not packaged in Debian)  
1486    
1487  libXbae:  grub2
1488  libpawlib2-lesstif package (from Cernlib)          - grub <unfixed> (old-version)
1489    
1490  libXaw:  gnupginterface
1491  libpawlib2-lesstif package (from Cernlib)          - duplicity <unfixed> (embed)
1492    
1493  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  python-dateutil
1494            - awn-extras-applets <unfixed> (embed)
1495            - matplotlib <unknown> (embed)
1496    
1497    cups
1498            - cupsys <removed> (old-version)
1499    
1500    yui
1501            - bcfg2 <not-affected> (present in source but not included in any binary files)
1502            - serendipity <unfixed> (embed; bug #557746)
1503            - moodle 1.8.2.dfsg-5 (embed)
1504            - jifty 0.91117-1 (embed; bug #557748)
1505            - webgui 7.7.26-1 (embed)
1506            - loggerhead 1.17-1 (embed)
1507    
1508    quake3 (vanilla source not packaged in debian)
1509            - openarena <unfixable> (fork)
1510    
1511    quake2 (vanilla source not packaged in debian)
1512            - alien-arena <unfixable> (fork)
1513            - warsow <unfixable> (fork)
1514    
1515    libtheora
1516            - iceweasel <not-affected> (uses xulrunner)
1517            - xulrunner <unfixed> (embed; bug #540959)
1518            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1519            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1520            - iceape <unfixed> (embed; bug #559276)
1521            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1522            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1523    
1524    dtoa
1525            - bfilter <unfixed> (embed)
1526            - cacao <unfixed> (embed)
1527            - cdrdao <unfixed> (embed)
1528            - classpath <unfixed> (embed)
1529            - freej <unfixed> (embed)
1530            - iceape <unfixed> (embed)
1531            - iceweasel <unfixed> (embed)
1532            - jscoverage <unfixed> (embed)
1533            - kde4libs <unfixed> (embed)
1534            - kdelibs <unfixed> (embed)
1535            - kompozer <unfixed> (embed)
1536            - libv8 <unfixed> (embed)
1537            - mono <unfixed> (embed)
1538            - newlib <unfixed> (embed)
1539            - nspr <unfixed> (embed)
1540            - php5 <unfixed> (embed)
1541            - polyml <unfixed> (embed)
1542            - qt4-x11 <unfixed> (embed)
1543            - rhino <unfixed> (embed)
1544            NOTE: code translated to Java
1545            - ruby1.8 <unfixed> (embed)
1546            - ruby1.9 <unfixed> (embed)
1547            - ruby1.9.1 <unfixed> (embed)
1548            - sdd <unfixed> (embed)
1549            - sfind <unfixed> (embed)
1550            - star <unfixed> (embed)
1551            - tinymux <unfixed> (embed)
1552            - virtualbox-ose <unfixed> (embed)
1553            - webkit <unfixed> (embed)
1554            - xulrunner <unfixed> (embed)
1555    
1556    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1557            - firegpg <unfixed> (embed)
1558            - enigmail <unfixed> (embed)
1559    
1560    ptmalloc (not packaged in Debian)
1561            - crystalspace <unfixed> (embed)
1562            - qt4-x11 <unfixed> (embed)
1563    
1564    svgalib
1565            - usplash <unfixed> (embed)
1566    
1567    bogl
1568            - usplash <unfixed> (embed)
1569    
1570    taglist
1571            - usplash <unfixed> (embed)
1572    
1573    portaudio
1574            - audacity <unfixed> (embed; bug #323711)
1575    
1576    nyquist
1577            - audacity <unfixed> (embed)
1578            NOTE: embeds a forked nyquist with support for a shared library
1579    
1580  libgd2:  vamp-plugin-sdk
1581  graphviz (lib/gd seems to be 2.0.33)          - audacity <unfixed> (embed)
1582    
1583  rar:  wordpress
1584  unrar-nonfree          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1585            - wordpress-mu <removed> (fork)
1586    
1587  unrar-free: (maybe this code is derived from the original rar, too?)  php5
1588  clamav (seems to be disabled in default config)          - php4 <removed> (old-version)
1589    
1590  mplayer (DirectMedia Object loader):  classpath
1591  xine-lib (src/libw32dll/)          - libgnucrypto-java <removed> (embed; bug #559788)
 vlc (modules/codec/dmo/)  
1592    
1593  libwpd (WordPerfect converter):  libtool
1594  openoffice.org          - apr <unfixed> (static; bug #489625)
1595            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1596            - arts <unfixed> (embed)
1597            - bochs 2.4.2-1 (embed; bug #560884)
1598            - camserv <unfixed> (embed)
1599            - collectd 4.8.2-1 (embed)
1600            - courier-authlib 0.58-4 (embed)
1601            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1602            - cvsnt 2.5.04.3236-1.2 (embed)
1603            - dico <not-affected> (Uses the system copy of ltdl)
1604            - freeradius 0.1+20010527-1 (embed)
1605            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1606            - ggobi 2.1.9~20091212-1 (embed)
1607            - glame 2.0.1-4 (embed)
1608            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1609            - gnash 0.8.7-2 (embed)
1610            - gnu-smalltalk <unfixed> (embed; bug #566777)
1611            - google-gadgets 0.10.5-0.3 (embed)
1612            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1613            - graphicsmagick 1.3.5-6 (embed)
1614            - graphviz 2.8-3 (embed)
1615            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1616            - guile-1.6 1.6.8-7 (embed)
1617            - hamlib <unfixed> (embed)
1618            - hercules 3.06-1.2 (embed)
1619            - jags 1.0.4-3 (embed; bug #560864)
1620            - kdelibs <unfixed> (embed)
1621            - libannodex <removed> (embed)
1622            - libextractor 0.5.23+dfsg-4 (embed)
1623            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1624            - libtunepimp 0.5.3-7.3 (embed)
1625            - mp4h 1.3.1-4.1 (embed)
1626            - naim <removed> (embed)
1627            - parser-mysql <unfixed> (embed)
1628            - pinball 0.3.1-11 (embed)
1629            - redland <unfixed> (embed)
1630            - siproxd <unfixed> (embed)
1631            - ski <unfixed> (embed)
1632            - synfig 0.62.00-1 (embed)
1633            - unixodbc 2.2.4-5 (embed)
1634            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1635            - clamav 0.95+dfsg-1 (embed)
1636            - imagemagick 6:6.2.3.1-1 (embed)
1637            - hypre 2.4.0b-5 (embed)
1638            - lam <unfixed> (embed)
1639            - openmpi <unfixable> (embed; bug #559386)
1640            - parser <unfixed> (embed)
1641            - pdsh 2.18-5 (embed; bug #560892)
1642            - sbnc 1.2-8 (embed)
1643            - sdcc <unfixed> (embed)
1644            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1645            - proftpd-dfsg <unfixed> (embed; bug #561748)
1646            - babel 1.4.0.dfsg-5 (embed)
1647            - libprelude 0.9.14-2 (embed)
1648            - heartbeat 2.1.4-7 (embed)
1649            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1650            NOTE: might've been fixed earlier
1651            - gcc-* <unknown> (embed)
1652    
1653    ocamlgsl
1654            - orpie 1.5.1-7.1 (embed; bug #550058)
1655    
1656    xdotool
1657            - keynav <unfixed> (embed; bug #560103)
1658    
1659    bulletphysics (not packaged; http://www.bulletphysics.org/)
1660            - supertuxkart <unfixed> (embed)
1661            - blender <unfixed> (embed)
1662    
1663  fsplib (http://sourceforge.net/projects/fsp/):  ghostscript
1664  gftp (lib/fsplib version 0.3)          - gs-gpl <removed> (old-version)
1665    
1666  librpcsecgss:  icedove
1667  krb5          - thunderbird <removed> (old-version)
1668    
1669  jasper:  sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1670  ghostscript          - jquery <unfixed> (embed)
 gs-gpl  
1671    
1672  libidn:  sed
1673  monotone          - ssed <unfixed> (fork)
1674    
1675  liblua:  phpatomlib (http://code.google.com/p/phpatomlib)
1676  monotone          - wordpress <unfixed> (embed)
1677    
1678    Services_JSON (http://pear.php.net/package/Services_JSON)
1679            - wordpress <unfixed> (embed)
1680    
1681    phpass (http://www.openwall.com/phpass/)
1682            - gallery2 <unfixed> (embed)
1683            - wordpress <unfixed> (embed)
1684            - typo3-src <unfixed> (modified-embed)
1685            NOTE: file refers to drupal, maybe there's a copy somewhere there
1686            NOTE: a copyright owner search didn't match anything
1687            - libauthen-passphrase-perl <unfixable> (fork)
1688            NOTE: perl implementation of phpass
1689    
1690    squirrelmail
1691            - wordpress <unfixed> (embed)
1692            NOTE: class-pop3.php
1693    
1694    ezSQL (http://www.woyano.com/jv/ezsql)
1695            - wordpress <unfixable> (fork)
1696            NOTE: wp-db.php
1697    
1698    Diff.php (Clay Loveless' version/killersoft.com)
1699            - php-versioncontrol-svn <unfixed>
1700    
1701    libm (provided by libc)
1702            - spring <unfixed> (embed)
1703            NOTE: embedded by embedded copy of streflop
1704            - aide <unfixed> (static)
1705            - busybox <unfixed> (static)
1706            - mindi-busybox <unfixed> (static)
1707            - qemu <unfixed> (static)
1708            NOTE: qemu-user-static
1709            - tuxonice-userui <unfixed> (static)
1710            - zsh <unfixed> (static)
1711            NOTE: zsh-static
1712    
1713    streflop
1714            - spring <unfixed> (embed)
1715    
1716  libbotan:  minizip
1717  montone          - spring <unfixed> (embed)
1718    
1719  NetXX:  oscpack
1720  monotone          - spring <unfixed> (embed)
1721    
1722  libgc:  hpiutil2
1723  mono          - spring <unfixed> (embed)
1724    
 lzma:  
1725  p7zip  p7zip
1726            - spring <unfixed> (embed)
1727    
1728  lzo:  pythonqt (doesn't seem to be python-qtN, unknown source)
1729  grub2          - fontmatrix <unfixed> (embed)
1730            - elmerfem <unfixed> (embed)
1731    
1732    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1733            - docvert <unfixed> (embed)
1734            - jifty <unfixed> (embed)
1735            - kdenetwork <unfixed> (embed)
1736            - mediatomb <unfixed> (embed)
1737            - plastex <unfixed> (embed)
1738            - plone3 <removed> (embed)
1739            - python-chaco <unfixed> (embed)
1740            - python-docutils <unfixed> (embed)
1741            - s5 <unfixed> (embed)
1742            - zope2.10 <unfixed> (embed)
1743            - zope2.11 <removed> (embed)
1744            - cython <not-affcted> (embed)
1745            NOTE: part of documentation, which is not installed into the binary package
1746    
1747    python-docutils
1748            - zope2.10 <unfixed> (embed)
1749            - zope2.11 <removed> (embed)
1750    
1751    tesseract
1752            - ocropus <unfixed> (static)
1753    
1754    antlr
1755            - kdevelop <unfixed> (embed)
1756    
1757    libxerces2
1758            - openjdk-6 <unfixed> (embed)
1759    
1760    kfreebsd-8
1761            - kfreebsd-7 <unfixed> (old-version)
1762            - kfreebsd-6 <removed> (old-version)
1763    
1764    ruby1.9.1
1765            - ruby1.9 <unfixed> (old-version)
1766            - ruby1.8 <unfixed> (old-version)
1767    
1768    maildrop
1769            - courier <unfixed> (embed) [./maildrop]
1770    
1771    glee
1772            - warzone2100 <unfixed> (embed)
1773    
1774    phing
1775            - symfony <unfixed> (embed)
1776    
1777    pake
1778            - symfony <unfixed> (embed)
1779    
1780    propel
1781            - symfony <unfixed> (embed)
1782    
1783    creole
1784            - symfony <unfixed> (embed)
1785    
1786    hfsutils
1787            - cdrkit <unfixed> (embed; bug #570187)
1788            NOTE: embeds hfsutils code in genisoimage
1789    
1790    cdrkit
1791            - grub2 <unfixed> (embed; bug #570156)
1792            NOTE: genisoimage imported into grub-mkisofs
1793    
1794    kdebase-workspace
1795            - kdebase <unfixed> (old-version)
1796    
1797    file
1798            - php5 <unfixable> (modified-embed)
1799            [lenny] - php5 <not-affected>
1800    
1801    cdb
1802            - php5 <unfixed> (embed)
1803    
1804    libmbfl (itp: #570708)
1805            - php5 <unfixed> (embed)
1806            NOTE: PHP is actually the current upstream, ITP is of that code
1807    
1808    libonig
1809            - php5 5.3.2-1 (embed)
1810    
1811    xmlrpc-epi
1812            - php5 <unfixed> (embed)
1813    
1814    swt-gtk
1815            - eclipse <unfixed> (embed; bug #538808)
1816    
1817    txt2html
1818            - wml 2.0.11ds2-1 (embed)
1819    
1820    ca-certificates
1821            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1822    
1823    openexr
1824            - freeimage <unfixed> (embed)
1825    
1826    libmng
1827            - freeimage <unfixed> (embed)
1828    
1829    openjpeg
1830            - freeimage <unfixed> (embed)
1831    
1832    libjpeg6b
1833            - freeimage <unfixed> (embed)
1834    
1835    libjpeg (don't know what exact version)
1836            - dcmtk <unfixed>
1837            - gdcm <unfixed>
1838            - insighttoolkit <unfixed>
1839            - openarena <unfixed>
1840            - outguess <unfixed>
1841            - squeak-vm <unfixed> (embed)
1842            - tremulous <unfixed>
1843            - tuxonice-userui <unfixed> (static)
1844            - fpc <unfixed> (static)
1845            - lazarus <unfixed> (static)
1846            NOTE: inherited from fpc, see #472304
1847            - mseide-msegui <unfixed> (static)
1848            NOTE: inherited from fpc, see #472304
1849            - easymp3gain <unfixed> (static)
1850            NOTE: inherited from fpc, see #472304
1851            - winff <unfixed> (static)
1852            NOTE: inherited from fpc, see #472304
1853    
1854    libfile-copy-recursive-perl
1855            - r-base <unfixed> (embed; bug #577427)
1856            - r-base-core-ra <unfixed> (embed; bug #577429)
1857    
1858    delimmatch
1859            - r-base <unfixed> (embed; bug #577433)
1860            - r-base-core-ra <unfixed> (embed; bug #577434)
1861    
1862    libsmf (ITP: #572558)
1863            - denemo <unfixed> (embed)
1864            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1865    
1866  pax code:  libselinux
1867  tar          - dpkg 1.15.6 (static)
 cpio  
Legend:
Removed from v.7463  
changed lines
  Added in v.14667
  ViewVC Help
Powered by ViewVC 1.1.5