/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 4835 by neilm, Mon Oct 9 20:39:54 2006 UTC revision 14719 by geissert, Fri May 21 00:52:22 2010 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embeds a copy of the library into another source package)
19          modified-embed (embeds a code copy that differs from upstream code)
20          fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30            - pdftohtml <unknown>
31            [sarge] - pdftohtml <unfixed>
32            [etch] - pdftohtml <unfixed>
33            NOTE: has been replaced by poppler-utils
34            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35            - texlive-base 3.0-12 (embed)
36            - texlive-bin 2007-1 (embed)
37            NOTE: links to poppler
38            - koffice <unfixed> (embed; bug #436163)
39            - libextractor 0.5.12-1 (embed)
40            NOTE: libextractor is using its own pdf decoder now
41            - ipe <unfixed> (embed)
42            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43            - ruby-gnome2 <unknown> (embed)
44            NOTE: copy only present in source but links to poppler
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48    
49    ppmd
50            - libcomplearn-mod-ppmd <unfixed> (fork)
51            NOTE: discussion in #458152
52    
53    libevent
54            - transmission 1.71-1 (embed; bug #529372)
55    
56    lrmi
57            - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59            - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61    
62    peercast
63            - gnome-peercast <removed> (embed)
64            [etch] - gnome-peercast <unfixed> (embed)
65    
66    silc-toolkit
67            - silc-client 1.1~beta6-1 (embed)
68    
69    icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    libusb
74            - argyll <unfixed> (embed)
75    
76    dietlibc
77            - ccontrol 0.9.1+20071204-1 (static)
78    
79    libmikmod
80            - sdl-mixer1.2 <unfixed> (embed)
81            TODO: report bug
82    
83    libiax
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86    spandsp
87            - iaxmodem <unfixable> (embed; bug #548885)
88    
89    python-paramiko
90            - fabric 0.9.0-2 (embed; bug #561398)
91    
92    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
93            - dpkg 1.15.6 (static)
94            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
95            - rsync <unfixed> (embed)
96            - cherokee <unfixed> (embed)
97            NOTE: somehow derived code base
98            - mono <unfixed> (embed)
99            TODO: check mozilla
100            - Linux kernels <unfixed> (embed)
101            - pvpgn 1.7.8-2 (embed)
102            - mrtg 2.12.2-1 (embed)
103            - rpm <unknown> (embed)
104            NOTE: pinged anibal since when rpm was fixed
105            - tuxcmd-modules <unfixed> (embed)
106            - zsync <unfixed>
107            - tra <unfixed>
108            - sash <unfixed>
109            - nsis <unfixed>
110            - mseide-msegui <unfixed>
111            NOTE: mseide
112            - mirrordir <unfixed>
113            - poco <unfixed>
114            - klibc <unfixed>
115            - ghostscript <unfixed>
116            - freeimage <unfixed>
117            - clamav <unfixed> (fork)
118            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
119            - tuxonice-userui <unfixed> (static)
120            - plt-scheme <unfixed>
121            - perl <unfixed>
122            - paraview <unfixed>
123            - velvet 0.7.56~nozlibcopy-1
124            - gcvs <unfixed>
125            - dump <unfixed>
126            - aide <unfixed> (static)
127            - dar <unfixed> (static)
128            - avfs <unfixed>
129            - fpc <unfixed>
130            - winff <unfixed>
131            NOTE: inherited from fpc, see #472304
132            - lazarus <unfixed>
133            NOTE: inherited from fpc, see #472304
134            - erlang <unfixed> (embed)
135            - gamera 3.2.3-1 (embed)
136            - python2.4 <unfixed> (embed; bug #553403)
137            - python2.5 <unfixed> (embed; bug #553403)
138            - texlive-bin <unknown> (embed)
139    
140    dulwich
141            - hg-git 0.1.0-1 (embed; bug #541996)
142    
143    libvigraimpex
144            - hugin <unfixed> (embed; bug #542259)
145            - enblend-enfuse <unfixed> (embed; bug #542258)
146            - gamera 3.2.3-1 (embed)
147    
148    libbz2
149            - dpkg 1.15.6 (static)
150            - amd64-libs <unfixed> (static)
151            NOTE: let's call it "static"
152            - dar <unfixed> (static)
153            - dump <unfixed> (static)
154            - unalz <unfixed> (embed)
155            NOTE: has code, by the maint, to use the system version but links against the internal copy
156    
157    libyahoo2
158            - centerim <unfixed> (embed; bug #559783)
159    
160    libmsn
161            - centerim <unfixed> (embed; bug #559783)
162    
163    libgadu
164            - centerim <unfixed> (embed; bug #559783)
165            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
166            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
167            - kdenetwork 4:3.3.2-5 (embed)
168            NOTE: from kdenetwork: kopete
169            - ekg 1:1.8~rc0-1 (embed)
170            - kadu 0.6.0.2-3 (embed; bug #504430)
171            - gadu <itp> (embed)
172    
173    xmlrpc (which package is the "origin" of this code?)
174            - drupal <unfixed> (embed)
175            - phpgroupware <unfixed> (embed)
176            - egroupware <unfixed> (embed)
177            - phpwiki <unfixed> (embed)
178            - php4 <removed> (embed)
179            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
180    
181    shtool (affects build-time only)
182            - mysql-ocaml <unfixed> (embed)
183            - php4 <removed> (embed)
184            - php5 <unfixed> (embed)
185    
186    xulrunner
187            - iceape <unfixed> (embed; bug #561749)
188            - iceweasel 2.0.0.19 (embed)
189            - icedove <unfixed> (embed; bug #561750)
190            - kompozer <unfixed> (embed; bug #532168)
191            - galeon 2.0.2-4 (embed)
192            - epiphany-browser 2.14.3-8 (embed)
193            - conkeror 0.9~git080629-2 (embed)
194            - kazehakase 0.4.2-1 (embed)
195    
196    xli
197            - xloadimage <unfixed> (embed)
198    
199    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
200            - openmotif <unfixed> (embed)
201            - libxpm <unfixed> (embed; bug #575750)
202    
203    kerberized apps with BSD origin
204            - krb4 <removed> (embed)
205            - krb5 <unfixed> (embed)
206            - heimdal <unfixed> (embed)
207    
208    grip (which pkg is the origin?)
209            - libcdaudio <unfixed>
210            - grip <unfixed>
211            - gnome-vfs <unfixed>
212            TODO: check vfs2 as well
213    
214    fudforum
215            [etch] - phpgroupware <unfixed> (embed)
216            NOTE: phpgroupware-fudforum
217            [sarge] - egroupware-fudforum <removed> (embed)
218    
219    libbsd
220            - rdate 1:1.2-3 (embed)
221            - atheme-services <unfixed>
222            - libbsd-arc4random-perl <unfixed>
223            - isakmpd <unfixed>
224            - bsdgames <unfixed> (embed)
225            - bsd-mailx <unfixed> (embed)
226            - netcat-openbsd <unfixed> (embed; bug #550611)
227            - openssh <unfixed> (embed)
228            - unworkable <unfixed> (embed)
229    
230    cvs
231            - gcvs <unfixed> (embed)
232            NOTE: see cvsunix/src in tarball
233    
234    pcre3
235            - php4 <removed> (embed)
236            - analog 2:5.23-0woody1 (embed)
237            - goffice <unfixed> (embed)
238            NOTE: libgoffice-*
239            - vfu 4.06-4.1 (embed; bug #450754)
240            - tf5 5.0beta7-1 (embed)
241            - monotone 0.43-1 (embed)
242            NOTE: this only affects versions >= 0.37
243            - glib2.0 2.15.2-1 (embed)
244            - apache2 2.0.53-4 (embed)
245            - exim4 4.10-0.srh20.12 (embed)
246            - yacas <unfixed> (embed)
247            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
248            - gtamsanalyzer.app 0.42-5 (embed)
249            - tin 980117-1 (embed)
250            - kazehakase 0.5.2-1
251            - webkit 1.0.1-1 (embed)
252            - qt4-x11 <unfixed> (embed)
253            NOTE: embedded via webkit copy
254            - erlang <unfixed> (embed)
255            - ssed <unfixed> (embed)
256            - ircd-hybrid <unfixed> (static)
257            - emboss <unfixd>
258            - cherokee <unfixed> (embed)
259            - oftc-hybrid <unfixed> (embed)
260            - ratbox-services <unfixed> (embed)
261            - squeak-vm <unfixed> (embed)
262            - tinymux <unfixed> (embed)
263    
264    tiff
265            - wxwindows2.4 2.2.1 (embed)
266            - gamera 3.2.3-1 (embed)
267            - freeimage <unfixed> (embed)
268            - libtk-img <unfixed> (embed)
269            NOTE: there are two copies, one under tiff/ other under libtiff/
270            - gdal <unfixed>
271    
272    uudeview
273            - libconvert-uulib-perl <unfixed> (embed)
274            - pan <unfixed> (embed)
275    
276    sqlite (not affected by security vulnerabilities so far)
277            - amarok <unfixed> (embed)
278            - monotone 0.43-1 (embed)
279            - iceweasel <unfixed> (embed)
280            - heimdal <unfixed> (embed; bug #559616)
281    
282    util-linux/mount
283            - loop-aes-utils <unfixed> (embed)
284            NOTE: contains code from util-linux' mount in the mount-aes-udeb
285    
286    sylpheed
287            - sylpheed-claws <unfixed> (fork)
288    
289    phpsysinfo
290            - egroupware <unfixed> (embed)
291            - phpgroupware <unfixed> (embed)
292    
293    phpldapadmin
294            [sarge] - egroupware <unfixed> (embed)
295            NOTE: removed from egroupware after sarge
296    
297    chmlib
298            - kchmviewer <unknown> (embed)
299    
300    ffmpeg (libavcodec/libavformat)
301            - mplayer 1.0~rc2-14 (embed; bug #395252)
302            - kino 1.0.0-1
303            - vlc <not-affected> (Links dynamically since initial release)
304            - smilutils 0.3.0-10
305            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
306            - motion 3.1.19-1
307            - gstreamer0.10-ffmpeg 0.10.3-2
308            - xmovie <removed> (static)
309            TODO: gimp-gap (potentially using ffmpeg code as well)
310            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
311            - audacity 1.3.7-2 (embed; bug #512278)
312    
313    faad2
314            - mplayer 1.0~rc2-20 (embed)
315            - avifile <unfixed> (embed; bug #538750)
316            - ffmpeg-debian <removed> (embed)
317    
318    libmad (MPEG decoding lib)
319            - xine-lib <unfixed> (embed)
320            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
321            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
322    
 xpdf code: (some use xpdf 2, some xpdf 3)  
 gpdf (will be replaced by evince in Gnome 2.12)  
 pdftohtml (current poppler source package has a ported version, pinged maintainer)  
 kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
 tetex-bin (links to poppler since 3.0-12)  
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
 poppler  
 koffice (upstream is working on using poppler, probably not in time for Etch)  
 libextractor (uses internal pdf decoder since 0.5.12-1)  
 pdfkit.framework (links to poppler since 0.8-4)  
   
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
323  libdts  libdts
324  xine-lib          - xine-lib <unfixed> (embed)
325    
 flac:  
326  flac  flac
327  xine-lib          - xine-lib <unfixed> (embed)
328    
329  liba52:  liba52
330  a52dec          - a52dec <unfixed> (embed)
331  xine-lib          - xine-lib <unfixed> (embed)
332    
333    mpeg2dec (libmpeg2)
334            - xine-lib <unfixed> (embed)
335    
336    libmpeg3
337            - squeak-vm <unfixed> (embed)
338    
339    libntlm
340            - wget <unfixed> (fork; bug #550436)
341            - curl <unfixed> (fork; bug #550437)
342            - cntlm <unfixed> (fork; bug #550438)
343    
344    uw-imap
345            - pine <unfixed> (embed)
346            - alpine <unfixed> (embed)
347    
348    imagemagick
349            - graphicsmagick <unfixed> (fork)
350    
351    python-urlgrabber
352            - mercurial <unfixed> (embed; bug #531062)
353            - w3af <unfixed> (embed; bug #555372)
354            [experimental] - harvestman <unfixed> (embed; bug #555373)
355    
356    beautifulsoup
357            - python-mechanize <unfixed> (embed; bug #555349)
358            - zope2.11 <removed> (embed; bug #555350)
359            - twill <unknown> (embed)
360    
361    halibut
362            - nsis <unfixed> (fork)
363    
364    libghttp
365            - hotway <unfixed> (embed)
366    
367    libsndfile
368            - ardour 1:2.7.1-1 (embed)
369    
370    glibmm2.4
371            - ardour 1:2.7.1-1 (embed)
372    
373    libgnomecanvasmm2.6
374            - ardour 1:2.7.1-1 (embed)
375    
376    libsigc++-2.0
377            - ardour 1:2.7.1-1 (embed)
378    
379    soundtouch
380            - ardour 1:2.7.1-1 (embed)
381    
382    libmms
383            - xine-lib <unfixed> (embed)
384            - mimms <unfixed> (embed)
385    
386    fckeditor
387            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
388            - moin 1.8.2-2 (embed; bug #452599)
389            - karrigell <removed> (embed; bug #452598)
390            - gforge 4.6.99+svn6225-1 (embed)
391            - request-tracker3.8 <unfixed> (embed)
392            - otrs2 <unfixed> (embed)
393    
394    ipatlas (not packaged in Debian)
395            - moodle <unfixed> (embed; bug #507185)
396    
397    libphp-phpmailer
398            - moodle <unfixed> (embed; bug #507185)
399            - mahara <unfixed> (embed)
400            - symfony <unfixed> (embed; bug #566778)
401            [etch] - phpgroupware <unfixed> (embed)
402            NOTE: phpgroupware-felamimail is only in etch
403            - egroupware <unfixed> (embed; bug #504283)
404            - glpi <unfixed>
405    
406    htmlArea (not packaged in Debian)
407            - moodle <unfixed> (embed)
408    
409    giflib
410            - wine <unfixed> (embed; bug #466181)
411    
412    bennu (not packaged in Debian, http://bennu.sourceforge.net)
413            - moodle <unfixed> (embed)
414    
415    smarty
416            - moodle 1.8.2-2 (embed; bug #471158)
417            - gallery2 2.2.5-2 (embed; bug #471160)
418            - mahara 0.9.2-2 (embed; bug #471201)
419            - gosa 2.4beta1-1 (embed; bug #471200)
420    
421    TinyMCE
422            - wordpress 2.5.1-3 (embed; bug #478257)
423            - moodle <unfixed> (embed; bug #507185)
424            - knowledgeroot <unfixed> (embed)
425            - joomla <itp> (bug #326398)
426    
427    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
428            - scite <unfixed> (embed)
429            - qscintilla <unfixed> (embed)
430            - qscintilla2 <unfixed> (embed)
431            - geany <unfixed> (fork)
432            - anjuta <unfixed> (embed)
433    
434    libphp-adodb
435            - moodle <unfixed> (embed; bug #507185)
436            NOTE: also AdoDB-XML Schema
437            - gallery2 <unfixed> (embed)
438            - phppgadmin <unfixed> (embed)
439            - egroupware <unfixed> (embed)
440            - phpwiki <unfixed> (embed)
441            - torrentflux 2.0beta1-2 (embed)
442            - ipplan <unfixed> (embed)
443            - typo3-src <unfixed> (embed)
444            - cacti <unknown> (embed)
445            [sarge] - cacti <unfixed> (embed)
446            NOTE: dependency exists, but internal version is used
447            - gforge 4.7~rc2-6 (embed)
448            - mahara <unfixed> (embed)
449    
450    gzip
451            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
452            - klibc <unfixed> (embed)
453            NOTE: based on linux-kernel gzip code
454            - busybox <unfixed> (embed)
455            - pristine-tar <unfixed> (modified-embed)
456            NOTE: compression code only, not uncompression
457    
458    neon
459            - cadaver 0.22.3+debian-1 (embed; bug #188381)
460            - gnome-vfs2 <unfixed> (embed; bug #395874)
461            [etch] - litmus <unfixed> (embed; #395875)
462            - litmus <removed> (embed; #395875)
463            [sarge] - screem <unfixed> (embed)
464            - sitecopy 1:0.16.0-1 (embed; bug #395876)
465            [etch] - tla <unfixed> (embed; bug #395877)
466            [sarge] - tla <unfixed> (embed; bug #395877)
467    
468    libmodplug
469            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
470    
471    libvncserver
472            - vino <unfixed> (embed)
473    
474    putty
475            - filezilla <unfixed> (embed)
476    
477    tinyxml (not packaged in Debian; itp bug #531968)
478            - filezilla <unfixed>
479            - crystalspace <unfixed> (embed)
480            - libwfut <unfixed> (embed)
481            - rarian <unfixed> (embed)
482            - bulletml <unfixed> (embed)
483            - pokerth <unfixed> (embed)
484            - qutecom <unfixed> (embed)
485            - sofa-framework <unfixed> (embed)
486            - yate <unfixed> (embed)
487            - antigrav <unfixed> (embed)
488            - balder2d <unfixed> (embed)
489            - cal3d <unfixed> (embed)
490            - criticalmass <unfixed> (embed)
491            - ember <unfixed> (embed)
492            - epiphany <unfixed> (embed)
493            - gambit <unfixed> (embed)
494            - noiz2sa <unfixed> (embed)
495            - ogre <unfixed> (embed)
496            - opencity <unfixed> (embed)
497            - openmovieeditor <unfixed> (embed)
498            - pouetchess <unfixed> (embed)
499            - tecnoballz <unfixed> (embed)
500            - trigger-rally <unfixed> (embed)
501            - xmoto <unfixed> (embed)
502            - mapnik <unknown> (embed)
503            NOTE: uses a different XML parser by default
504            - rrootage 0.23a-6 <embed>
505            NOTE: links to libbulltetml
506            - boson <unknown> (embed)
507            NOTE: the embedded code is unused
508    
509    gv
510            - evince <unfixed> (embed)
511            NOTE: ps/ tree from gv 3.5.8
512            NOTE: evince-gtk is affected (a component of evince source package)
513    
514    libXbae
515            - paw <removed> (embed)
516            [etch] - paw <unfixed> (embed)
517    
518    libgtkhtml
519            - claws-mail-extra-plugins <unfixed> (fork)
520    
521    libXaw
522            - paw <removed> (embed)
523            [etch] - paw <unfixed> (embed)
524            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
525    
526    libgd2
527            - graphviz <unfixed> (embed)
528            NOTE: lib/gd seems to be 2.0.33
529            - wml 2.0.11ds2-1 (embed)
530            - libwmf <unfixed> (embed)
531            NOTE: derived from gd 1.6.3
532            - texlive-bin <unfixed> (embed)
533    
534    rar
535            - unrar-nonfree <unfixed> (embed)
536    
537    unrar-free (maybe this code is derived from the original rar, too?)
538            - clamav <unfixed> (embed)
539            NOTE: seems to be disabled in default config
540    
541    mplayer (DirectMedia Object loader)
542            - xine-lib <unfixed> (embed)
543            NOTE: src/libw32dll/
544            - vlc <unfixed> (embed)
545            NOTE: modules/codec/dmo/
546            - mplayer 1.0~rc2-20 (embed)
547    
548    libwpd (WordPerfect converter)
549            - openoffice.org <unfixed> (embed)
550    
551    fsplib (http://sourceforge.net/projects/fsp/)
552            - gftp <unfixed> (embed)
553            NOTE: lib/fsplib version 0.3
554    
555    sprng
556            - tree-puzzle <unfixed> (embed)
557    
558    librpcsecgss
559            - krb5 <unfixed> (embed)
560    
561    jasper
562            - ghostscript 8.64~dfsg-2 (embed)
563    
564    libiris
565            - psi <unfixed> (embed)
566            - kdenetwork <unfixed> (embed)
567            NOTE: kopete embeds libiris but links dynamically to libidn
568            - kdegames <unfixed> (embed)
569            NOTE: ksirk/kde4
570    
571    libidn
572            - monotone 0.43-1 (embed)
573            - psi <unfixed> (embed)
574            NOTE: psi embeds libiris which embeds libidn
575            - kdegames <unfixed> (embed)
576            NOTE: kdegames/kde4 embeds libiris which embeds libidn
577    
578    lua5.1
579            - monotone 0.43-1 (embed)
580            - nmap 5.00-1 (embed; bug #527997)
581            [lenny] - nmap <unfixed> (embed; bug #527997)
582            - ocropus <unfixed> (embed)
583            - enigma <unfixed> (embed)
584            NOTE: requires lua built with C++
585            - freeciv <unfixed> (embed)
586            - spring <unfixed> (embed)
587    
588    libbotan
589            - monotone 0.43-1 (embed)
590    
591    NetXX
592            - monotone 0.43-1 (embed)
593    
594    libgc
595            - mono <unfixed> (embed)
596    
597    lzma
598            - p7zip <unfixed> (embed)
599            - xz-utils <unfixed> (fork)
600    
601    lzo
602            - grub2 <unfixed> (embed)
603    
604    yassl
605            - mysql-dfsg-5.0 <unfixed> (embed)
606            - mysql-dfsg-5.1 <unfixed> (embed)
607    
608    pax code
609            - tar <unfixed> (embed)
610            - cpio <unfixed> (embed)
611    
612    t1lib
613            - tetex-bin 2.0.2-1 (embed)
614            - texlive-bin <unknown> (embed)
615    
616    guichan
617            - boswars <unfixed> (embed)
618            NOTE: maintainer notified us, working on it
619    
620    tolua
621            - boswars <unfixed> (embed)
622            NOTE: maintainer notified us, working on it
623            NOTE: actually tolua++
624            - ocropus <unfixed> (embed)
625            NOTE: actually tolua++
626            - freeciv <unfixed> (embed)
627            NOTE: actually tolua++
628            - enigma <unfixed> (embed)
629    
630  libmpeg2:  asio-dev
631  mpeg2dec          - luxrender <removed> (embed)
 xine-lib  
632    
633  curl:  xine-lib
634  wget (code for NTLM authentication)          - vlc <unfixed> (embed)
635            NOTE: only parts included in modules/access/rtsp
636    
637  TODO evaluate:  netpbm
638  gimp-gap (potentially using ffmpeg code as well)          - tcl8.3 <unfixed> (embed)
639            - tcl8.4 <unfixed> (embed)
640            - tcl8.5 <unfixed> (embed)
641            NOTE: generic/tkImgGIF.c
642    
643    tk8.5
644            - tk8.0 <removed> (old-version)
645            - tk8.3 <unfixed> (old-version)
646            - tk8.4 <unfixed> (old-version)
647            - perl-tk <unfixable> (fork)
648    
649    samba
650            - mc 2:4.6.2~git20080311-1 (embed)
651            NOTE: maintainer is aware of this, currently searching a solution
652    
653    plib1.8.4c2
654            - boson <unfixed> (fork)
655            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
656    
657    fribidi
658            - quesoglc <unfixed> (embed)
659            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
660    
661    glew
662            - quesoglc <unfixed> (embed; bug #489341)
663            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
664            - trigger 0.5.2.1-2 (embed)
665            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
666            - trigger-rally 0.5.2.1-2 (embed)
667            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
668    
669    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
670            - transcend <unfixed> (embed)
671            - cultivation <unfixed> (embed)
672            - passage <unfixed> (embed)
673            - gravitation <unfixed> (embed)
674    
675    tar
676            - libarchive <unfixed> (embed)
677            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
678    
679    cpio
680            - libarchive <unfixed> (embed)
681            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
682    
683    kde4libs
684            - kdelibs <unfixable> (old-version)
685    
686    webkit
687            - qt4-x11 <unfixed> (embed; bug #479851)
688            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
689            - kde4libs <unfixable> (fork)
690            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
691            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
692    
693    ftgl
694            - blender 2.46+dfsg-1 (embed)
695    
696    wv
697            - abiword <unfixed>
698    
699    qemu
700            - kvm <removed> (embed; bug #543159)
701            - qemu-kvm <unfixed> (embed; bug #560853)
702            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
703            - xen-3 3.4.2-2 (embed; bug #560856)
704            - xen-unstable <unfixed> (embed; bug #560856)
705    
706    vgabios
707            - kvm <removed> (embed; bug #489442)
708            - qemu-kvm <unfixed> (embed)
709    
710    bochs
711            - kvm <removed> (embed; bug #489442)
712            - qemu-kvm <unfixed> (embed)
713    
714    speex
715            - vorbis-tools <unfixed> (embed)
716            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
717            - gst-plugins-good0.10 <unfixed> (embed)
718            - xine-lib <unfixed> (embed)
719            - libfishsound <unfixed> (embed)
720            - libannodex <removed> (embed)
721            - vlc <unfixed> (embed)
722            - xmms-speex <unfixed> (embed)
723            - libsdl-sound1.2 <unfixed> (embed)
724            - sweep <unfixed> (embed)
725    
726    libreadline
727            - magic <itp> (old-version)
728    
729    opcode
730            - ode <unfixed> (embed)
731            NOTE: opcode is not a package in debian, it is just embedded
732            NOTE: http://www.codercorner.com/Opcode.htm
733    
734    gimpact
735            - ode <unfixed> (embed)
736            NOTE: gimpact is not a package in debian, it is just embedded
737            NOTE: http://gimpact.sf.net
738    
739    mochikit
740            - mahara <unfixed> (embed)
741            NOTE: they require extra patches, still unmerged upstream
742            - ntop <unfixed> (embed)
743            - coherence 0.6.2-1 (embed)
744            - paste <unfixed> (embed)
745            - turbogears <unfixed> (embed)
746            - plone3 <removed> (embed)
747            - xulrunner <unfixed> (embed)
748            - libjifty-plugin-chart-perl <unfixed> (embed)
749            - sabnzbdplus <unfixed> (embed)
750            - tgmochikit <unfixed> (embed)
751    
752    prototypejs
753            - netbeans-ide 6.0.1+dfsg-2 (embed)
754            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
755            - webcit <unfixed> (embed; bug #555219)
756            - asterisk 1:1.6.2.0~rc3-1 (embed)
757            - libjson-ruby 1.1.4-1 (embed; bug #555224)
758            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
759            - horde3 <unfixed> (embed)
760            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
761            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
762            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
763            - ebug-http <removed> (embed; bug #555236)
764            - libaws 2.7-1 (embed; bug #555222)
765            - phpgedview <removed> (embed)
766            - poker-network 1.7.6-1 (embed; bug #555238)
767            - rails 2.1.0-6 (embed)
768            - wordpress 2.5.0-2 (embed; bug #555243)
769            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
770            TODO: search through all of the other zope packages
771            - ampache 3.4.1-2 (embed)
772            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
773            - hobix 0.5~svn20070319-4 (embed; bug #555247)
774            - zabbix 1.6.6-4 (embed; bug #555250)
775            - chora2 <unfixed> (embed; bug #555253)
776            - gollem <unfixed> (embed; bug # 555254)
777            - jscropperui 1.2.1-1 (embed; bug #555257)
778            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
779            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
780            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
781            - activeldap <unfixed> (embed)
782            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
783            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
784            - otrs2 2.3.4-6 (embed; bug #555267)
785            - webcalendar 1.2~b1-2 (embed; bug #555269)
786            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
787            - jifty 0.90519-1 (embed; bug #555271)
788            - jquery 1.4-1 (embed; bug #555272)
789            - passenger 2.2.5debian1-1 (embed; bug #555273)
790            - plone3 <removed> (embed; bug #555275)
791            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
792            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
793            - xulrunner <unfixed> (embed)
794            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
795    
796    gdb
797            - insight <unfixed> (embed)
798    
799    e2fsprogs
800            - ldiskfsprogs <unfixable> (fork)
801    
802    quazip (not packaged in Debian)
803            - qcake <unfixed> (embed)
804            NOTE: starting with upstream version 0.6.4
805    
806    exo
807            - pcmanfm <unfixed> (embed; bug #499677)
808            NOTE: slightly modified source code
809    
810    java
811            - openjdk-6 <unfixed>
812            - sun-java5 <unfixed>
813            - sun-java6 <unfixed>
814    
815    libphp-snoopy
816            - ampache 3.4.1-2 (embed; bug #504169)
817            - gforge 4.6.99+svn6094-2 (embed)
818            - mahara 1.0.5-2 (embed; bug #504170)
819            - pixelpost 1.7.1-5 (embed; bug #504171)
820            - mediamate 0.9.3.6-5 (embed; bug #504172)
821            - opendb <removed> (embed; bug #504173)
822            [etch] - opendb <unfixed> (embed; bug #504173)
823            - wordpress 2.5.1-9 (embed; bug #443948)
824            - moodle <unfixed> (embed; bug #507185)
825            [etch] - phpgroupware <unfixed> (embed)
826            NOTE: phpgroupware-felamimail
827            - magpierss 0.72-3 (embed; bug #431089)
828    
829    jquery
830            - zekr <unfixed> (embed)
831            - wordpress <unknown> (embed)
832            - yocto-reader <unfixed> (embed)
833            - textpattern <unfixed> (embed)
834            - genshi 0.5.1-1 (embed)
835            NOTE: compressed file under examples/ dir
836            - prewikka <unfixed> (embed)
837            - libramaze-ruby <unfixed> (embed)
838            - drupal5 <unfixed> (embed)
839            - b2evolution <unfixed> (embed)
840            - wesnoth <unfixed> (embed)
841    
842    tablesorter (jquery plugin, not packaged yet)
843            - wesnoth <unfixed> (embed)
844    
845    kses
846            - wordpress <unfixed> (embed; bug #504242)
847            NOTE: their copy has all methods renamed to wp_<foo>
848            NOTE: kses isn't in Debian, RFP: #504240
849            - moodle <unfixed> (embed; bug #507185)
850            - egroupware <unfixed> (embed)
851    
852    magpierss
853            - wordpress <unfixed> (embed; bug #504242)
854            - moodle <unfixed>
855    
856    php-gettext
857            - wordpress 2.8.4-1 (embed; bug #504242)
858            - docbookwiki <unfixed> (embed)
859            - knowledgeroot 0.9.9.5-1
860            NOTE: non-free
861    
862    libphp-ixr (name may change, it is the Incutio XML-RPC)
863            - wordpress <unfixed> (embed; bug #504242)
864            NOTE: libphp-ixr isn't in Debian, RFP: #504236
865            - dokuwiki <unfixed> (embed)
866            - textpattern <unfixed> (embed)
867    
868    libphp-cas
869            - glpi <unfixed> (embed)
870            - moodle <unfixed> (embed; bug #505984)
871    
872    scriptaculous (prototype.js is among the embeds in the following)
873            - glpi <unfixed> (embed)
874            - libaws <unfixed> (embed; bug #555222)
875            - op-panel <unfixed> (embed)
876            - symfony <unfixed> (embed)
877            NOTE: maintainer says there are extra incompatible changes required
878            - pixelpost 1.7.1-6 (embed)
879            - webhelpers <unfixed> (embed)
880            - qwik <removed> (embed; bug #555241)
881            - smokeping <unfixed> (embed)
882            - turba2 <unfixed> (embed)
883            - typo3-src 4.2.3-1 (embed)
884            - request-tracker3.6 <unfixed> (embed)
885            - request-tracker3.8 <unfixed> (embed)
886            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
887            - wordpress 2.5.0-2 (embed)
888            - libhtml-prototype-perl 1.48-3 (embed)
889    
890    libmarkdown-php
891            - moodle <unfixed> (embed; bug #507185)
892            - pixelpost 1.7.1-6 (embed)
893    
894    php-openid
895            - wordpress-openid <itp> (embed)
896    
897    geshi
898            - dokuwiki 0.0.20080505-3.1 (embed)
899            - pgfouine 1.0-1.1 (embed)
900            - websvn 2.1.0-1 (embed)
901    
902    webcalendar
903            - gforge 4.7~rc2-6 (embed; bug #504758)
904    
905    libical
906            - kdepim <unknown> (fork)
907            NOTE: fixed at some point during 4.0
908            - kdepimlibs 4.2.0-1 (fork)
909            - claws-mail-extra-plugins <unfixed> (fork)
910    
911    harfbuzz
912            - qt4-x11 <unfixed> (embed)
913            - pango1.0 <unfixed> (embed)
914            - fontmatrix <unfixed> (embed)
915    
916    libzip
917            - php5 <unfixable> (modified-embed)
918            - odt2txt <unfixed> (embed; bug #523808)
919    
920    json.php (not packaged; should be replaced with php's built-in functions)
921            - moodle <unfixed>
922            - yui <unfixed>
923            - gallery2 <unfixed>
924            - dokuwiki <unfixed>
925            - typo3-src <unfixed>
926    
927    php-fpdf
928            - tcpdf <itp> (fork)
929            - moodle <unfixed>
930            - phpwiki <unfixed>
931            - egroupware <unfixed>
932            - ldap-account-manager <unfixed> (fork)
933    
934    tcpdf (itp: #495985)
935            - moodle <unfixed>
936            - phpmyadmin <unfixed>
937    
938    typo3
939            - moodle <unfixed>
940    
941    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
942            - moodle <unfixed>
943            - gosa <unfixed>
944    
945    php-ole (itp: #487558)
946            - moodle <unfixed>
947    
948    pieforms (http://www.catalyst.net.nz)
949            - mahara <unfixed>
950    
951    savant2 (http://phpsavant.com)
952            - egroupware <unfixed>
953    
954    rssparser (http://nwow.org)
955            - egroupware <unfixed>
956            - phpgroupware <unfixed>
957    
958    lcms
959            - openjdk-6 <unfixed> (fork)
960            - gimp 2.4.0~rc2-2
961    
962    libphp-phplayersmenu
963            - diogenes <unfixed>
964            - phpldapadmin <unfixed>
965    
966    libphp-pclzip
967            - docvert <unfixed>
968            - moodle <unfixed>
969            - egroupware <unfixed>
970    
971    libphp-simplepie
972            - dokuwiki <unfixed>
973            - wordpress <unfixed>
974    
975    libphp-jpgraph
976            - egroupware <unfixed>
977    
978    php-simpletest
979            - moodle <unfixed>
980    
981    libpng
982            - iceweasel <not-affected> (uses xulrunner)
983            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
984            - iceape 1.0.13~pre080614i-0etch1 (embed)
985            - xulrunner 1.9.0.13-1 (embed)
986            [lenny] - xulrunner 1.9.0.11-0lenny1
987            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
988            - gamera 3.2.3-1 (embed)
989            - freeimage <unfixed> (embed)
990            - tuxonice-userui (static)
991    
992    irssi
993            - silc-client <unfixed> (embed)
994            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
995    
996    extc
997            - mtasc <unfixed> (embed)
998            - haxe <unfixed> (embed)
999    
1000    swflib
1001            - mtasc <unfixed> (embed)
1002            - haxe <unfixed> (embed)
1003    
1004    libitext-java
1005            - bouncycastle 2.1.4-1 (embed)
1006    
1007    python-ply
1008            - pyke <unfixed> (embed; bug #555363)
1009            - pywbem 0.7.0-4 (embed; bug #555364)
1010            - sepolgen <unfixed> (embed; bug #555365)
1011            - zope-textindexng3 <unknown> (embed)
1012            - iceweasel <not-affected> (uses xulrunner)
1013            - xulrunner <unknown> (embed)
1014            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1015    
1016    libdumbnet (libdnet upstream)
1017            - nmap <unfixed> (fork)
1018    
1019    gcc-4.4
1020            - gcc-mingw32 <unfixed> (embed)
1021    
1022    camlimages
1023            - advi <unfixed> (static; bug #550441)
1024    
1025    memcached
1026            - memcachedb <unfixed> (embed)
1027    
1028    yajl
1029            - argyll <unfixed> (embed; bug #544223)
1030            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1031    
1032    nusoap
1033            - gforge 4.8.2-1 (embed)
1034            - ampache <unfixed> (embed)
1035            - poker-network <unfixed> (embed)
1036            - moodle <unfixed> (embed)
1037            NOTE: code is not used when running under php5 and soap is enabled
1038            - phpwiki <unfixed> (embed)
1039            - gallery2 <unfixed> (embed)
1040            - typo3-src <unfixed> (embed)
1041    
1042    libept
1043            - adept <unfixed> (embed; bug #540649)
1044    
1045    libvorbis
1046            - iceweasel <not-affected> (uses xulrunner)
1047            - xulrunner <unfixed> (embed; bug #540959)
1048            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1049            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1050            - iceape <unfixed> (embed)
1051            [etch] - iceape <not-affected> (introduced in 2.0)
1052            [lenny] - iceape <not-affected> (introduced in 2.0)
1053    
1054    cairo
1055            - iceweasel <not-affected> (uses xulrunner)
1056            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1057    
1058    liboggz
1059            - iceweasel <not-affected> (uses xulrunner)
1060            - xulrunner <unfixed> (embed; bug #540959)
1061            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1062            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1063            - iceape <unfixed> (embed)
1064            [etch] - iceape <not-affected> (introduced in 2.0)
1065            [lenny] - iceape <not-affected> (introduced in 2.0)
1066    
1067    liboggplay
1068            - iceweasel <not-affected> (uses xulrunner)
1069            - xulrunner <unfixed> (embed; bug #540959)
1070            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1071            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1072            - iceape <unfixed> (embed)
1073            [etch] - iceape <not-affected> (introduced in 2.0)
1074            [lenny] - iceape <not-affected> (introduced in 2.0)
1075    
1076    php-net-dnsbl
1077            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1078    
1079    php-onyx-rss
1080            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1081    
1082    php-text-wiki
1083            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1084    
1085    php-xml-rpc
1086            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1087    
1088    polarssl (does not have a shared library)
1089            - pdkim <itp> (embed; bug #543150)
1090            - xyssl <unfixed> (old-version)
1091    
1092    pidgin (libpurple)
1093            - gaim <removed> (old-version)
1094            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1095    
1096    icu
1097            - webkit 1.0.1-1 (embed; bug #547214)
1098            - texlive-bin <unfixed> (fork)
1099            NOTE: texlive upstream working with icu upstream to merge their changes
1100    
1101    cyrus-imapd-2.2
1102            - kolab-cyrus-imapd <unfixed> (fork)
1103            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1104    
1105    python-cxx-dev
1106            - freecad 0.9.2646.3-1 (embed; bug #547936)
1107    
1108    zipios++
1109            - freecad 0.9.2646.3-1 (embed; bug #547941)
1110            - enigma 0.92.3-3 (embed)
1111            NOTE: likely fixed earlier, marking etch's version as fixed
1112    
1113    linux-2.6
1114            - kvm <removed> (embed; bug #549973) [./kernel/*]
1115            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1116            - kernel-source-2.6.8 <removed> (old-version)
1117            - kernel-source-2.4.27 <removed> (old-version)
1118            - kernel-source-2.4.24 <removed> (old-version)
1119            - kernel-source-2.2.25 <removed> (old-version)
1120            - kernel-source-2.2.20 <removed> (old-version)
1121    
1122    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1123            - kvm <removed> (embed) [./libfdt/*]
1124            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1125    
1126    qweb (not packaged)
1127            - ajaxterm <unfixed>
1128    
1129    opensaml2
1130            - opensaml <removed> (old-version)
1131    
1132    shibboleth-sp2
1133            - shibboleth-sp <removed> (old-version)
1134    
1135    tuxonice-userui
1136            - suspend2-userui <removed> (old-version)
1137    
1138    expat
1139            - w3c-libwww <removed> (embed; bug #551941)
1140            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1141            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1142            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1143            - python2.4 <unfixable> (embed; bug #553403)
1144            - python-4suite <unfixed> (embed; bug #516935)
1145            - wxwindows2.4 <removed> (embed)
1146            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1147            - wxwidgets2.8 2.8.10.1-2 (embed)
1148            - celementtree 1.0.5-8 (embed)
1149            NOTE: Maybe that was fixed even earlier
1150            - audacity 1.3.2-1 (embed)
1151            - matanza <unfixed> (embed)
1152            - tdom 0.8.3~20080525-1 (embed)
1153            - udunits 2.1.8-4 (embed)
1154            - apr-util 1.2 (embed)
1155            - ayttm <unfxed> (embed; bug #561006)
1156            - cableswig <unfixed> (embed)
1157            - cadaver <unfixed> (embed)
1158            - cmake 2.6.0-6 (embed)
1159            - coin3 <unfixed> (embed)
1160            - gdcm 2.0.14-2 (embed)
1161            - ghostscript 8.71~dfsg-2 (embed)
1162            - grmonitor <removed> (embed)
1163            - iceape <unfixed> (embed)
1164            - insighttoolkit 3.16.0-1 (embed)
1165            NOTE: insighttoolkit might've been fixed earlier
1166            - libparagui1.1 1.0.2-1 (embed)
1167            - paraview 3.6.2-1 (embed)
1168            - poco 1.3.6p1-1 (embed)
1169            - simgear <unfixed> (embed)
1170            - sitecopy 1:0.16.0-1
1171            - smart <unfixed> (embed)
1172            NOTE: smart embeds celementree, and it includes expat
1173            - swish-e <not-affected> (Linked against libxml, which is used instead)
1174            - tla 1.3.5+dfsg-15 (embed)
1175            - vtk 4.1.20030227-1 (embed)
1176            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1177            - xmlrpc-c <unfixed> (embed)
1178            - iceweasel <unfixed> (embed)
1179            - kompozer <unfixed> (embed)
1180            - vxl 1.13.0-2 (embed)
1181            - xulrunner <unfixed> (embed)
1182            - apache2 2.2 (embed)
1183            - texlive-bin <not-affected> (Embedded code not compiled in)
1184            - vnc4 <unfixed> (embed)
1185            - xotcl 1.6.6-1 (embed)
1186    
1187    xerces-c
1188            - xerces-c2 <unfixed> (old-version)
1189            - xerces27 <removed> (old-version)
1190    
1191    md5 (RSA's version; not the gnu version provided by coreutils)
1192            - w3c-libwww <removed> (embed; bug #551942)
1193            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1194    
1195    libparagui1.1
1196            - asc <unfixable> (fork)
1197    
1198    enet
1199            - sauerbraten <unfixed> (embed; #497194)
1200    
1201    eglibc
1202            - glibc <removed> (old-version)
1203    
1204    galib
1205            - gamera 3.2.3-1 (embed)
1206    
1207    configobj
1208            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1209            - elisa <unfixed> (embed; bug #555337)
1210            - gaupol <unfixed> (embed; bug #555338)
1211            - ipython <unfixed> (embed; bug #555339)
1212            - pida <unfixed> (embed; bug #555340)
1213            - psychopy <unfixed> (embed; bug #555341)
1214            - rest2web <unfixed> (embed; bug #555342)
1215            - auth2db <unknown> (embed)
1216            - dynagen <unknown> (embed)
1217            - iceweasel <unknown> (embed)
1218            - sabnzbdplus <unknown> (embed)
1219            - xulrunner <unknown> (embed)
1220            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1221    
1222    python-clientform
1223            - bibus <unfixed> (embed; bug #555332)
1224            - zope2.10 <unfixed> (embed; bug #555333)
1225            - zope2.11 <removed> (embed; bug #555334)
1226            - python-mechanize <unknown> (embed)
1227            - twill <unknown> (embed)
1228    
1229    python-mechanize
1230            - zope2.10 <unfixed> (embed; bug #555337)
1231            - zope2.11 <removed> (embed; bug #555338)
1232            - twill <unknown> (embed; bug #555339)
1233    
1234    pexpect
1235            - duplicity 0.6.06-1 (embed; bug #555361)
1236            - hplip <unfixed> (embed; bug #555362)
1237            - smart <unfixed> (embed; bug #555363)
1238    
1239    pyparsing
1240            - bauble <unfixed> (embed; bug #555366)
1241            - boa-constructor 0.6.1-8 (embed; bug #555367)
1242            - calibre <unfixed> (embed; bug #555368)
1243            - matplotlib <unfixed> (embed; bug #531024)
1244            - zhpy 1.7.3.1-1 (embed; bug #555370)
1245            - polybori <unknown> (embed)
1246            - python-whoosh <unknown> (embed)
1247            - twill <unknown> (embed)
1248            - zope-textindexng3 <unknown> (embed)
1249    
1250    python-pysqlite2
1251            - python2.4 <unfixed> (embed; bug #553403)
1252            - python2.5 <unfixed> (embed; bug #553403)
1253    
1254    celementtree
1255            - python2.5 <unfixed> (embed)
1256            - smart <unfixed> (embed)
1257    
1258    elementtree
1259            - python2.5 <unfixed> (embed)
1260            - python2.6 <unfixed> (embed)
1261            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1262            - gedit 2.28.2-1 (embed; bug #555344)
1263            - smart <unfixed> (embed)
1264            - solfege <unfixed> (embed; bug #555345)
1265            - w3af <unfixed> (embed; bug #555346)
1266            - python-qt4 <unknown> (embed)
1267            - sphinx <unknown> (embed)
1268            - python-nltk <itp> (embed)
1269    
1270    python2.5
1271            - python2.4 <unfixed> (old-version)
1272            - jython <unfixed> (embed)
1273            NOTE: embeds many stdlib modules
1274            - python-django <unfixed> (embed; bug #555419)
1275            NOTE: embeds stdlib modules: doctest, decimal
1276            - gamera 3.2.3-1 (embed)
1277            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1278            - boa-constructor <unfixed> (embed; bug #555426)
1279            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1280            - nicotine <unfixed> (embed; bug #555427)
1281            NOTE: embeds stdlib modules: ConfigParser
1282            - museek+ <unfixed> (embed; bug #555428)
1283            NOTE: embeds stdlib modules: ConfigParser
1284            - vegastrike-data <unfixed> (embed)
1285            NOTE: embeds many stdlib modules
1286            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1287            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1288            - config-manager <unfixed> (embed; bug #555423)
1289            NOTE: embeds stdlib modules: optparse
1290            - jhbuild 2.28.0-1 (embed; bug #555421)
1291            NOTE: embeds stdlib modules: optparse, subprocess
1292            - smart <unfixed> (embed; bug #555432)
1293            NOTE: embeds stdlib modules: optparse
1294            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1295            NOTE: embeds stdlib modules: doctest
1296            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1297            NOTE: embeds stdlib modules: doctest
1298            - distribute <unfixed> (embed)
1299            NOTE: embeds stdlib modules: doctest
1300            - python-setuptools <unfixed> (embed; bug #555435)
1301            NOTE: embeds stdlib modules: doctest
1302            - zope.testing <unfixed> (embed; bug #555436)
1303            NOTE: embeds stdlib modules: doctest
1304            - translate-toolkit <unfixed> (embed; bug #555422)
1305            NOTE: embeds stdlib modules: textwrap, contextlib
1306            - libtpclient-py <unfixed> (embed; bug #555424)
1307            NOTE: embeds stdlib modules: subprocess
1308            - grass <unfixed> (embed; bug #555425)
1309            NOTE: embeds stdlib modules: subprocess
1310            - coherence <unfixed> (embed; bug #555429)
1311            NOTE: embeds stdlib modules: uuid
1312            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1313            NOTE: embeds stdlib modules: uuid
1314            - setroubleshoot <unfixed> (embed; bug #555431)
1315            NOTE: embeds stdlib modules: uuid
1316            - linkchecker <unfixed> (embed; bug #555414)
1317            NOTE: embeds msgfmt.py script
1318            - imdbpy <unfixed> (embed)
1319            NOTE: embeds msgfmt.py script
1320            - kiwi <unfixed> (embed)
1321            NOTE: embeds msgfmt.py script
1322            - moin <unfixed> (embed)
1323            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1324            - plone3 <removed> (embed)
1325            NOTE: embeds msgfmt.py script
1326            - roundup <unfixed> (embed)
1327            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1328            - rednotebook <unfixed> (embed; bug #555415)
1329            NOTE: embeds msgfmt.py script
1330            - turbogears <unfixed> (embed)
1331            NOTE: embeds msgfmt.py script
1332            - elisa <unfixed> (embed)
1333            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1334            - calibre <unfixed> (embed)
1335            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1336            - mailman 1:2.1.13-1 (embed; #555416)
1337            NOTE: embeds msgfmt.py script
1338            - python-docutils <unknown> (embed)
1339            NOTE: embeds stdlib modules: optparse, textwrap
1340            - python-imaging <unknown> (embed)
1341            NOTE: embeds stdlib modules: doctest
1342            - python-mechanize <unknown> (embed)
1343            NOTE: embeds stdlib modules: doctest
1344            - twill <unknown> (embed)
1345            NOTE: embeds stdlib modules: subprocess
1346            - zeroc-ice <unknown> (embed)
1347            NOTE: embeds stdlib modules: subprocess
1348            - wxwidgets2.8 <unknown> (embed)
1349            NOTE: embeds stdlib modules: subprocess
1350            - cycle <unknown> (embed)
1351            NOTE: embeds msgfmt.py script
1352            - deluge <unknown> (embed)
1353            NOTE: embeds msgfmt.py script
1354            - opendict <unknown> (embed)
1355            NOTE: embeds msgfmt.py script
1356            - openerp-client <unknown> (embed)
1357            NOTE: embeds msgfmt.py script
1358            - rapidsvn <unknown> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - wammu <unknown> (embed)
1361            NOTE: embeds msgfmt.py script
1362            - gaphor <unknown> (embed)
1363            NOTE: embeds msgfmt.py script
1364            - pida <unknown> (embed)
1365            NOTE: embeds msgfmt.py script
1366            - python-formencode <unknown> (embed)
1367            NOTE: embeds msgfmt.py script
1368            - duplicity <unfixed> (embed)
1369            NOTE: embeds stdlib module: urlparse, tarfile
1370            - pygopherd <unfixed> (embed)
1371            NOTE: embeds stdlib module: zipfile
1372    
1373    argparse
1374            - twill <unfixed> (embed; bug #555347)
1375            - ipython <unfixed> (embed; bug #555348)
1376    
1377    coherence
1378            - elisa <unfixed> (embed; bug #555335)
1379    
1380    simpletal
1381            - plastex <unfixed> (embed; bug #555371)
1382    
1383    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1384            - postr <unfixed> (embed)
1385            - elisa <unfixed> (embed)
1386    
1387    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1388            - apertium-tolk <unfixed> (embed)
1389            - ipython <unfixed> (embed)
1390            - virtaal <unfixed> (embed)
1391    
1392    distribute
1393            - setuptools <removed> (old-version)
1394    
1395    rails
1396            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1397            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1398            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1399            - thin <unfixed> (embed) [./spec/rails_app/*]
1400            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1401            NOTE: be dangerous if developers are naively basing their code off of the examples
1402            NOTE: prototype.js is among the example files
1403    
1404    lucene2 (prototype.js is among the embeds in the following)
1405            - lucene <unfixed> (old-version)
1406            - pylucene <unfixed> (embed)
1407            - libpdfbox-java <unfixed> (embed)
1408            - libfontbox-java <unfixed> (embed)
1409            - libjempbox-java <unfixed> (embed)
1410            - solr <unfixed> (embed)
1411    
1412    unicode-data
1413            - syslinux <unfixed> (embed)
1414            - camomile <unfixed> (embed)
1415            - fribidi <unfixed> (embed)
1416            - m17n-db <unfixed> (embed)
1417            - sbcl <unfixed> (embed)
1418            - heimdal <unfixed> (embed)
1419            - icu <unfixed> (embed)
1420            - icu4j <unfixed> (embed)
1421            - krb5 <unfixed> (embed)
1422            - moodle <unfixed> (embed)
1423            - openldap <unfixed> (embed)
1424            - pike7.6 <unfixed> (embed)
1425            - samba <unfixed> (embed)
1426            - samba4 <unfixed> (embed)
1427            - cmucl <unfixed> (embed)
1428            - typo3-src <unfixed> (embed)
1429            - mauve <unfixed> (embed)
1430            - texlive-bin <unfixed> (embed)
1431            - ypsilon <unfixed> (embed)
1432            - jeuclid <unfixed> (embed)
1433            - charmap.app <unfixed> (embed)
1434            - clisp <unfixed> (embed)
1435            - gnulib <unfixed> (embed)
1436            - opensrs-client <unfixed> (embed)
1437            - saxonb <unfixed> (embed)
1438            - rails <unfixed> (embed)
1439    
1440    feedparser
1441            - rawdog <unfixed> (embed; bug #383422)
1442            - miro <unfixed> (embed; bug #555351)
1443            - calibre <unfixed> (embed; bug #555352)
1444            - freevo <unfixed> (embed; bug #555353)
1445            - pida <unfixed> (embed; bug #555354)
1446            - planet-venus <unfixed> (embed; bug #555355)
1447            - plone3 <removed> (embed; bug #555356)
1448            - exaile 0.2.14+debian-1 (embed)
1449            - screenlets 0.1.2-3 (embed)
1450            NOTE: included twice
1451    
1452    agg:
1453            - matplotlib <unfixed> (embed: bug #377271)
1454            - contextfree <unfixed> (embed)
1455            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1456            - exactimage <unfixed> (embed)
1457            - python-enable <unfixed> (embed)
1458            - mapnik 0.5.1-3 (embed)
1459            NOTE: links statically to agg, but shared library is not available (bug #377271)
1460    
1461    vtk
1462            - paraview <unfixable> (embed; bug #495426)
1463    
1464    txt2tags
1465            - rednotebook <unfixed> (embed)
1466    
1467    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1468            - gajim <unfixed> (embed)
1469            - emesene <unfixed> (embed)
1470            - convirt <unfixed> (embed)
1471            - pida <unfixed> (embed)
1472            - rednotebook <unfixed> (embed)
1473    
1474    horde3 (prototype.js is among the embeds in the following)
1475            - mnemo2 <unfixed> (embed)
1476            - nag2 <unfixed> (embed)
1477            - wordpress <unfixed> (embed)
1478            NOTE: Text_Diff (wp-includes/Text/Diff*)
1479    
1480    cimg
1481            - gmic <itp> (embed)
1482    
1483    mootools
1484            - gmic <itp> (embed)
1485    
1486    openldap
1487            - openldap2.3 <removed> (old-version)
1488    
1489    grub2
1490            - grub <unfixed> (old-version)
1491    
1492    gnupginterface
1493            - duplicity <unfixed> (embed)
1494    
1495    python-dateutil
1496            - awn-extras-applets <unfixed> (embed)
1497            - matplotlib <unknown> (embed)
1498    
1499    cups
1500            - cupsys <removed> (old-version)
1501    
1502    yui
1503            - bcfg2 <not-affected> (present in source but not included in any binary files)
1504            - serendipity 1.5.3-1 (embed; bug #557746)
1505            - moodle 1.8.2.dfsg-5 (embed)
1506            - jifty 0.91117-1 (embed; bug #557748)
1507            - webgui 7.7.26-1 (embed)
1508            - loggerhead 1.17-1 (embed)
1509    
1510    quake3 (vanilla source not packaged in debian)
1511            - openarena <unfixable> (fork)
1512    
1513    quake2 (vanilla source not packaged in debian)
1514            - alien-arena <unfixable> (fork)
1515            - warsow <unfixable> (fork)
1516    
1517    libtheora
1518            - iceweasel <not-affected> (uses xulrunner)
1519            - xulrunner <unfixed> (embed; bug #540959)
1520            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1521            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1522            - iceape <unfixed> (embed; bug #559276)
1523            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1524            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1525    
1526    dtoa
1527            - bfilter <unfixed> (embed)
1528            - cacao <unfixed> (embed)
1529            - cdrdao <unfixed> (embed)
1530            - classpath <unfixed> (embed)
1531            - freej <unfixed> (embed)
1532            - iceape <unfixed> (embed)
1533            - iceweasel <unfixed> (embed)
1534            - jscoverage <unfixed> (embed)
1535            - kde4libs <unfixed> (embed)
1536            - kdelibs <unfixed> (embed)
1537            - kompozer <unfixed> (embed)
1538            - libv8 <unfixed> (embed)
1539            - mono <unfixed> (embed)
1540            - newlib <unfixed> (embed)
1541            - nspr <unfixed> (embed)
1542            - php5 <unfixed> (embed)
1543            - polyml <unfixed> (embed)
1544            - qt4-x11 <unfixed> (embed)
1545            - rhino <unfixed> (embed)
1546            NOTE: code translated to Java
1547            - ruby1.8 <unfixed> (embed)
1548            - ruby1.9 <unfixed> (embed)
1549            - ruby1.9.1 <unfixed> (embed)
1550            - sdd <unfixed> (embed)
1551            - sfind <unfixed> (embed)
1552            - star <unfixed> (embed)
1553            - tinymux <unfixed> (embed)
1554            - virtualbox-ose <unfixed> (embed)
1555            - webkit <unfixed> (embed)
1556            - xulrunner <unfixed> (embed)
1557    
1558    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1559            - firegpg <unfixed> (embed)
1560            - enigmail <unfixed> (embed)
1561    
1562    ptmalloc (not packaged in Debian)
1563            - crystalspace <unfixed> (embed)
1564            - qt4-x11 <unfixed> (embed)
1565    
1566    svgalib
1567            - usplash <unfixed> (embed)
1568    
1569    bogl
1570            - usplash <unfixed> (embed)
1571    
1572    taglist
1573            - usplash <unfixed> (embed)
1574    
1575    portaudio
1576            - audacity <unfixed> (embed; bug #323711)
1577    
1578    nyquist
1579            - audacity <unfixed> (embed)
1580            NOTE: embeds a forked nyquist with support for a shared library
1581    
1582  uw-imap:  vamp-plugin-sdk
1583  pine          - audacity <unfixed> (embed)
1584    
1585  imagemagick:  wordpress
1586  graphicsmagick          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1587            - wordpress-mu <removed> (fork)
1588    
1589  halibut:  php5
1590  nsis          - php4 <removed> (old-version)
1591    
1592  libghttp:  classpath
1593  hotway          - libgnucrypto-java <removed> (embed; bug #559788)
1594    
1595  etl-dev (will be renamed to libetl-dev soon):  libtool
1596  synfig          - apr <unfixed> (static; bug #489625)
1597            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1598            - arts <unfixed> (embed)
1599            - bochs 2.4.2-1 (embed; bug #560884)
1600            - camserv <unfixed> (embed)
1601            - collectd 4.8.2-1 (embed)
1602            - courier-authlib 0.58-4 (embed)
1603            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1604            - cvsnt 2.5.04.3236-1.2 (embed)
1605            - dico <not-affected> (Uses the system copy of ltdl)
1606            - freeradius 0.1+20010527-1 (embed)
1607            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1608            - ggobi 2.1.9~20091212-1 (embed)
1609            - glame 2.0.1-4 (embed)
1610            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1611            - gnash 0.8.7-2 (embed)
1612            - gnu-smalltalk <unfixed> (embed; bug #566777)
1613            - google-gadgets 0.10.5-0.3 (embed)
1614            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1615            - graphicsmagick 1.3.5-6 (embed)
1616            - graphviz 2.8-3 (embed)
1617            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1618            - guile-1.6 1.6.8-7 (embed)
1619            - hamlib <unfixed> (embed)
1620            - hercules 3.06-1.2 (embed)
1621            - jags 1.0.4-3 (embed; bug #560864)
1622            - kdelibs <unfixed> (embed)
1623            - libannodex <removed> (embed)
1624            - libextractor 0.5.23+dfsg-4 (embed)
1625            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1626            - libtunepimp 0.5.3-7.3 (embed)
1627            - mp4h 1.3.1-4.1 (embed)
1628            - naim <removed> (embed)
1629            - parser-mysql <unfixed> (embed)
1630            - pinball 0.3.1-11 (embed)
1631            - redland <unfixed> (embed)
1632            - siproxd <unfixed> (embed)
1633            - ski <unfixed> (embed)
1634            - synfig 0.62.00-1 (embed)
1635            - unixodbc 2.2.4-5 (embed)
1636            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1637            - clamav 0.95+dfsg-1 (embed)
1638            - imagemagick 6:6.2.3.1-1 (embed)
1639            - hypre 2.4.0b-5 (embed)
1640            - lam <unfixed> (embed)
1641            - openmpi <unfixable> (embed; bug #559386)
1642            - parser <unfixed> (embed)
1643            - pdsh 2.18-5 (embed; bug #560892)
1644            - sbnc 1.2-8 (embed)
1645            - sdcc <unfixed> (embed)
1646            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1647            - proftpd-dfsg <unfixed> (embed; bug #561748)
1648            - babel 1.4.0.dfsg-5 (embed)
1649            - libprelude 0.9.14-2 (embed)
1650            - heartbeat 2.1.4-7 (embed)
1651            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1652            NOTE: might've been fixed earlier
1653            - gcc-* <unknown> (embed)
1654    
1655    ocamlgsl
1656            - orpie 1.5.1-7.1 (embed; bug #550058)
1657    
1658    xdotool
1659            - keynav <unfixed> (embed; bug #560103)
1660    
1661    bulletphysics (not packaged; http://www.bulletphysics.org/)
1662            - supertuxkart <unfixed> (embed)
1663            - blender <unfixed> (embed)
1664    
1665    ghostscript
1666            - gs-gpl <removed> (old-version)
1667    
1668    icedove
1669            - thunderbird <removed> (old-version)
1670    
1671    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1672            - jquery <unfixed> (embed)
1673    
1674    sed
1675            - ssed <unfixed> (fork)
1676    
1677    phpatomlib (http://code.google.com/p/phpatomlib)
1678            - wordpress <unfixed> (embed)
1679    
1680    Services_JSON (http://pear.php.net/package/Services_JSON)
1681            - wordpress <unfixed> (embed)
1682    
1683    phpass (http://www.openwall.com/phpass/)
1684            - gallery2 <unfixed> (embed)
1685            - wordpress <unfixed> (embed)
1686            - typo3-src <unfixed> (modified-embed)
1687            NOTE: file refers to drupal, maybe there's a copy somewhere there
1688            NOTE: a copyright owner search didn't match anything
1689            - libauthen-passphrase-perl <unfixable> (fork)
1690            NOTE: perl implementation of phpass
1691    
1692    squirrelmail
1693            - wordpress <unfixed> (embed)
1694            NOTE: class-pop3.php
1695    
1696    ezSQL (http://www.woyano.com/jv/ezsql)
1697            - wordpress <unfixable> (fork)
1698            NOTE: wp-db.php
1699    
1700    Diff.php (Clay Loveless' version/killersoft.com)
1701            - php-versioncontrol-svn <unfixed>
1702    
1703    libm (provided by libc)
1704            - spring <unfixed> (embed)
1705            NOTE: embedded by embedded copy of streflop
1706            - aide <unfixed> (static)
1707            - busybox <unfixed> (static)
1708            - mindi-busybox <unfixed> (static)
1709            - qemu <unfixed> (static)
1710            NOTE: qemu-user-static
1711            - tuxonice-userui <unfixed> (static)
1712            - zsh <unfixed> (static)
1713            NOTE: zsh-static
1714    
1715    streflop
1716            - spring <unfixed> (embed)
1717    
1718    minizip
1719            - spring <unfixed> (embed)
1720    
1721    oscpack
1722            - spring <unfixed> (embed)
1723    
1724    hpiutil2
1725            - spring <unfixed> (embed)
1726    
1727    p7zip
1728            - spring <unfixed> (embed)
1729    
1730    pythonqt (doesn't seem to be python-qtN, unknown source)
1731            - fontmatrix <unfixed> (embed)
1732            - elmerfem <unfixed> (embed)
1733    
1734    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1735            - docvert <unfixed> (embed)
1736            - jifty <unfixed> (embed)
1737            - kdenetwork <unfixed> (embed)
1738            - mediatomb <unfixed> (embed)
1739            - plastex <unfixed> (embed)
1740            - plone3 <removed> (embed)
1741            - python-chaco <unfixed> (embed)
1742            - python-docutils <unfixed> (embed)
1743            - s5 <unfixed> (embed)
1744            - zope2.10 <unfixed> (embed)
1745            - zope2.11 <removed> (embed)
1746            - cython <not-affcted> (embed)
1747            NOTE: part of documentation, which is not installed into the binary package
1748    
1749    python-docutils
1750            - zope2.10 <unfixed> (embed)
1751            - zope2.11 <removed> (embed)
1752    
1753    tesseract
1754            - ocropus <unfixed> (static)
1755    
1756    antlr
1757            - kdevelop <unfixed> (embed)
1758    
1759    libxerces2
1760            - openjdk-6 <unfixed> (embed)
1761    
1762    kfreebsd-8
1763            - kfreebsd-7 <unfixed> (old-version)
1764            - kfreebsd-6 <removed> (old-version)
1765    
1766    ruby1.9.1
1767            - ruby1.9 <unfixed> (old-version)
1768            - ruby1.8 <unfixed> (old-version)
1769    
1770    maildrop
1771            - courier <unfixed> (embed) [./maildrop]
1772    
1773    glee
1774            - warzone2100 <unfixed> (embed)
1775    
1776    phing
1777            - symfony <unfixed> (embed)
1778    
1779    pake
1780            - symfony <unfixed> (embed)
1781    
1782    propel
1783            - symfony <unfixed> (embed)
1784    
1785    creole
1786            - symfony <unfixed> (embed)
1787    
1788    hfsutils
1789            - cdrkit <unfixed> (embed; bug #570187)
1790            NOTE: embeds hfsutils code in genisoimage
1791    
1792    cdrkit
1793            - grub2 <unfixed> (embed; bug #570156)
1794            NOTE: genisoimage imported into grub-mkisofs
1795    
1796    kdebase-workspace
1797            - kdebase <unfixed> (old-version)
1798    
1799    file
1800            - php5 <unfixable> (modified-embed)
1801            [lenny] - php5 <not-affected>
1802    
1803    cdb
1804            - php5 <unfixed> (embed)
1805    
1806    libmbfl (itp: #570708)
1807            - php5 <unfixed> (embed)
1808            NOTE: PHP is actually the current upstream, ITP is of that code
1809    
1810    libonig
1811            - php5 5.3.2-1 (embed)
1812    
1813    xmlrpc-epi
1814            - php5 <unfixed> (embed)
1815    
1816    swt-gtk
1817            - eclipse <unfixed> (embed; bug #538808)
1818    
1819    txt2html
1820            - wml 2.0.11ds2-1 (embed)
1821    
1822    ca-certificates
1823            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1824    
1825    openexr
1826            - freeimage <unfixed> (embed)
1827    
1828    libmng
1829            - freeimage <unfixed> (embed)
1830    
1831    openjpeg
1832            - freeimage <unfixed> (embed)
1833    
1834    libjpeg6b
1835            - freeimage <unfixed> (embed)
1836    
1837    libjpeg (don't know what exact version)
1838            - dcmtk <unfixed>
1839            - gdcm <unfixed>
1840            - insighttoolkit <unfixed>
1841            - openarena <unfixed>
1842            - outguess <unfixed>
1843            - squeak-vm <unfixed> (embed)
1844            - tremulous <unfixed>
1845            - tuxonice-userui <unfixed> (static)
1846            - fpc <unfixed> (static)
1847            - lazarus <unfixed> (static)
1848            NOTE: inherited from fpc, see #472304
1849            - mseide-msegui <unfixed> (static)
1850            NOTE: inherited from fpc, see #472304
1851            - easymp3gain <unfixed> (static)
1852            NOTE: inherited from fpc, see #472304
1853            - winff <unfixed> (static)
1854            NOTE: inherited from fpc, see #472304
1855            - texlive-bin <unfixed> (embed)
1856    
1857    libfile-copy-recursive-perl
1858            - r-base <unfixed> (embed; bug #577427)
1859            - r-base-core-ra <unfixed> (embed; bug #577429)
1860    
1861    delimmatch
1862            - r-base <unfixed> (embed; bug #577433)
1863            - r-base-core-ra <unfixed> (embed; bug #577434)
1864    
1865    libsmf (ITP: #572558)
1866            - denemo <unfixed> (embed)
1867            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1868    
1869    libselinux
1870            - dpkg 1.15.6 (static)
1871    
1872    xinha (ITP: #479708)
1873            - horde3 <unfixed>
1874            - serendipity <unfixed>
1875            - openacs <unfixed>
1876            - dotlrn <unfixed>
1877    
1878    dvipng
1879            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1880    
1881    dvipdfmx
1882            - texlive-bin <unfixed> (embed)
1883    
1884    lcdf-typetools
1885            - texlive-bin <unfixed> (embed)
1886    
1887    tex4ht
1888            - texlive-bin <unfixed> (embed)
1889    
1890    freetype
1891            - texlive-bin <unfixed> (embed)
1892    
1893  libmms:  freetype2
1894  xine-lib          - texlive-bin <unfixed> (embed)
 mimms  
1895    
1896  FCKeditor:  silgraphite
1897  knowledgeroot          - texlive-bin <unfixed> (embed)
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
 busybox  
1898    
1899    unzip
1900            - texlive-bin <unfixed> (embed)

Legend:
Removed from v.4835  
changed lines
  Added in v.14719

  ViewVC Help
Powered by ViewVC 1.1.5