/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7054 by white, Sun Oct 21 15:02:04 2007 UTC revision 14719 by geissert, Fri May 21 00:52:22 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16  silc-toolkit:          that add real value)
17  silc-client (uses libsilc and libsilcclient)  sort: static (linking statically against a lib)
18          embed (embeds a copy of the library into another source package)
19  dietlibc:        modified-embed (embeds a code copy that differs from upstream code)
20  ccontrol (links statically)        fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22  libiax:  
23  iaxmodem  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
26  dpkg  Everything up to the next line is ignored.
27  rsync (somehow derived code base)  ---BEGIN
28  mozilla(?)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  Linux kernels          NOTE: Fixed packages link to poppler library unless otherwise noted
30  pvpgn (links dynamically since 1.7.8-2)          - pdftohtml <unknown>
31  mrtg (links dynamically since 2.12.2-1)          [sarge] - pdftohtml <unfixed>
32  rpm          [etch] - pdftohtml <unfixed>
33            NOTE: has been replaced by poppler-utils
34  libbz2:          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35  dpkg (statically linked)          - texlive-base 3.0-12 (embed)
36            - texlive-bin 2007-1 (embed)
37  libgadu/ekg:          NOTE: links to poppler
38  centericq          - koffice <unfixed> (embed; bug #436163)
39  gaim          - libextractor 0.5.12-1 (embed)
40  kopete (ships the code, but links dynamically in the Debian package)          NOTE: libextractor is using its own pdf decoder now
41  kadu (not packaged in Debian)          - ipe <unfixed> (embed)
42  GNU gadu (not yet packaged in Debian)          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43            - ruby-gnome2 <unknown> (embed)
44  xmlrpc: (which package is the "origin" of this code?)          NOTE: copy only present in source but links to poppler
45  drupal          - pdfedit <unfixed> (embed; bug #510794)
46  phpgroupware          - swftools <removed> (embed; bug #551293)
47  egroupware          - poppler <unfixable> (fork)
48  phpwiki  
49  php4 (php-pear, IIRC this was reorganized some weeks ago?)  ppmd
50  tikiwiki          - libcomplearn-mod-ppmd <unfixed> (fork)
51            NOTE: discussion in #458152
52  shtool: (affects build-time only)  
53  mysql-ocaml  libevent
54  php4          - transmission 1.71-1 (embed; bug #529372)
55    
56  mozilla:  lrmi
57  mozilla-firefox          - read-edid 2.0.0-1 (embed; bug #495131)
58  mozilla-thunderbird          - s3switch <unfixed> (embed)
59  firefox (to be removed)          - xresprobe <unfixed> (embed)
60  thunderbird (to be removed)          - zhcon <unfixed> (embed)
61  iceweasel  
62  iceape  peercast
63  icedove          - gnome-peercast <removed> (embed)
64  xulrunner          [etch] - gnome-peercast <unfixed> (embed)
65  nvu (no longer in Debian)  
66    silc-toolkit
67  xli:          - silc-client 1.1~beta6-1 (embed)
68  xloadimage  
69    icclib
70  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          - ghostscript <unfixed> (embed)
71  openmotif          - argyll <unfixed> (embed)
72  xfree86/xorg (in libxpm)  
73    libusb
74  kerberized apps with BSD origin:          - argyll <unfixed> (embed)
75  krb4  
76  krb5  dietlibc
77  heimdal          - ccontrol 0.9.1+20071204-1 (static)
78    
79  grip: (which pkg is the origin?)  libmikmod
80  libcdaudio          - sdl-mixer1.2 <unfixed> (embed)
81  grip          TODO: report bug
82  gnome-vfs (vfs2 as well?)  
83    libiax
84  fudforum:          - iaxmodem <unfixable> (embed; bug #548885)
85  phpgroupware-fudforum  
86  egroupware-fudforum (removed from egroupware after sarge)  spandsp
87            - iaxmodem <unfixable> (embed; bug #548885)
88  cvs:  
89  gcvs (at least an additional script is included, check if there's more)  python-paramiko
90            - fabric 0.9.0-2 (embed; bug #561398)
91  pcre:  
92  all pythons  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
93  php4 (src included, but Debian package links dynamically)          - dpkg 1.15.6 (static)
94  analog (src included, but Debian package links dynamically)          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
95  libgoffice-1          - rsync <unfixed> (embed)
96  vfu          - cherokee <unfixed> (embed)
97  tf5 (since 5.0beta7 the Debian package links dynamically)          NOTE: somehow derived code base
98  monotone          - mono <unfixed> (embed)
99            TODO: check mozilla
100  tiff:          - Linux kernels <unfixed> (embed)
101  wxpythongtk (check, which debian pkg this is in)          - pvpgn 1.7.8-2 (embed)
102  older kdegraphics/kpdf releases < 3.3 embedded a copy          - mrtg 2.12.2-1 (embed)
103            - rpm <unknown> (embed)
104  uudeview:          NOTE: pinged anibal since when rpm was fixed
105  libconvert-uulib-perl          - tuxcmd-modules <unfixed> (embed)
106            - zsync <unfixed>
107  sqlite: (not affected by security vulnerabilities so far)          - tra <unfixed>
108  amarok          - sash <unfixed>
109  monotone          - nsis <unfixed>
110            - mseide-msegui <unfixed>
111  util-linux/mount:          NOTE: mseide
112  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - mirrordir <unfixed>
113            - poco <unfixed>
114  webmin:          - klibc <unfixed>
115  usermin (only in sarge)          - ghostscript <unfixed>
116            - freeimage <unfixed>
117            - clamav <unfixed> (fork)
118            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
119            - tuxonice-userui <unfixed> (static)
120            - plt-scheme <unfixed>
121            - perl <unfixed>
122            - paraview <unfixed>
123            - velvet 0.7.56~nozlibcopy-1
124            - gcvs <unfixed>
125            - dump <unfixed>
126            - aide <unfixed> (static)
127            - dar <unfixed> (static)
128            - avfs <unfixed>
129            - fpc <unfixed>
130            - winff <unfixed>
131            NOTE: inherited from fpc, see #472304
132            - lazarus <unfixed>
133            NOTE: inherited from fpc, see #472304
134            - erlang <unfixed> (embed)
135            - gamera 3.2.3-1 (embed)
136            - python2.4 <unfixed> (embed; bug #553403)
137            - python2.5 <unfixed> (embed; bug #553403)
138            - texlive-bin <unknown> (embed)
139    
140    dulwich
141            - hg-git 0.1.0-1 (embed; bug #541996)
142    
143    libvigraimpex
144            - hugin <unfixed> (embed; bug #542259)
145            - enblend-enfuse <unfixed> (embed; bug #542258)
146            - gamera 3.2.3-1 (embed)
147    
148    libbz2
149            - dpkg 1.15.6 (static)
150            - amd64-libs <unfixed> (static)
151            NOTE: let's call it "static"
152            - dar <unfixed> (static)
153            - dump <unfixed> (static)
154            - unalz <unfixed> (embed)
155            NOTE: has code, by the maint, to use the system version but links against the internal copy
156    
157    libyahoo2
158            - centerim <unfixed> (embed; bug #559783)
159    
160    libmsn
161            - centerim <unfixed> (embed; bug #559783)
162    
163    libgadu
164            - centerim <unfixed> (embed; bug #559783)
165            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
166            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
167            - kdenetwork 4:3.3.2-5 (embed)
168            NOTE: from kdenetwork: kopete
169            - ekg 1:1.8~rc0-1 (embed)
170            - kadu 0.6.0.2-3 (embed; bug #504430)
171            - gadu <itp> (embed)
172    
173    xmlrpc (which package is the "origin" of this code?)
174            - drupal <unfixed> (embed)
175            - phpgroupware <unfixed> (embed)
176            - egroupware <unfixed> (embed)
177            - phpwiki <unfixed> (embed)
178            - php4 <removed> (embed)
179            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
180    
181    shtool (affects build-time only)
182            - mysql-ocaml <unfixed> (embed)
183            - php4 <removed> (embed)
184            - php5 <unfixed> (embed)
185    
186  sylpheed:  xulrunner
187  sylpheed-claws          - iceape <unfixed> (embed; bug #561749)
188            - iceweasel 2.0.0.19 (embed)
189  phpsysinfo:          - icedove <unfixed> (embed; bug #561750)
190  egroupware          - kompozer <unfixed> (embed; bug #532168)
191  phpgroupware          - galeon 2.0.2-4 (embed)
192            - epiphany-browser 2.14.3-8 (embed)
193  phpldapadmin:          - conkeror 0.9~git080629-2 (embed)
194  egroupware (removed from egroupware after sarge)          - kazehakase 0.4.2-1 (embed)
195    
196  chmlib:  xli
197  kchmviewer (not packaged in Debian)          - xloadimage <unfixed> (embed)
198    
199  libavcodec/libavformat:  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
200  ffmpeg          - openmotif <unfixed> (embed)
201  xine-lib          - libxpm <unfixed> (embed; bug #575750)
202  xvidcap  
203  kino (links statically, does not include code)  kerberized apps with BSD origin
204  vlc (links statically, does not include code)          - krb4 <removed> (embed)
205  smilutils (links statically, does not include code)          - krb5 <unfixed> (embed)
206  motion (links statically, does not include code)          - heimdal <unfixed> (embed)
207  gst-ffmpeg  
208  gstreamer0.10-ffmpeg  grip (which pkg is the origin?)
209  xmovie          - libcdaudio <unfixed>
210            - grip <unfixed>
211  mad MPEG decoding lib:          - gnome-vfs <unfixed>
212  mad          TODO: check vfs2 as well
213  xine-lib  
214    fudforum
215            [etch] - phpgroupware <unfixed> (embed)
216            NOTE: phpgroupware-fudforum
217            [sarge] - egroupware-fudforum <removed> (embed)
218    
219    libbsd
220            - rdate 1:1.2-3 (embed)
221            - atheme-services <unfixed>
222            - libbsd-arc4random-perl <unfixed>
223            - isakmpd <unfixed>
224            - bsdgames <unfixed> (embed)
225            - bsd-mailx <unfixed> (embed)
226            - netcat-openbsd <unfixed> (embed; bug #550611)
227            - openssh <unfixed> (embed)
228            - unworkable <unfixed> (embed)
229    
230    cvs
231            - gcvs <unfixed> (embed)
232            NOTE: see cvsunix/src in tarball
233    
234    pcre3
235            - php4 <removed> (embed)
236            - analog 2:5.23-0woody1 (embed)
237            - goffice <unfixed> (embed)
238            NOTE: libgoffice-*
239            - vfu 4.06-4.1 (embed; bug #450754)
240            - tf5 5.0beta7-1 (embed)
241            - monotone 0.43-1 (embed)
242            NOTE: this only affects versions >= 0.37
243            - glib2.0 2.15.2-1 (embed)
244            - apache2 2.0.53-4 (embed)
245            - exim4 4.10-0.srh20.12 (embed)
246            - yacas <unfixed> (embed)
247            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
248            - gtamsanalyzer.app 0.42-5 (embed)
249            - tin 980117-1 (embed)
250            - kazehakase 0.5.2-1
251            - webkit 1.0.1-1 (embed)
252            - qt4-x11 <unfixed> (embed)
253            NOTE: embedded via webkit copy
254            - erlang <unfixed> (embed)
255            - ssed <unfixed> (embed)
256            - ircd-hybrid <unfixed> (static)
257            - emboss <unfixd>
258            - cherokee <unfixed> (embed)
259            - oftc-hybrid <unfixed> (embed)
260            - ratbox-services <unfixed> (embed)
261            - squeak-vm <unfixed> (embed)
262            - tinymux <unfixed> (embed)
263    
264    tiff
265            - wxwindows2.4 2.2.1 (embed)
266            - gamera 3.2.3-1 (embed)
267            - freeimage <unfixed> (embed)
268            - libtk-img <unfixed> (embed)
269            NOTE: there are two copies, one under tiff/ other under libtiff/
270            - gdal <unfixed>
271    
272    uudeview
273            - libconvert-uulib-perl <unfixed> (embed)
274            - pan <unfixed> (embed)
275    
276    sqlite (not affected by security vulnerabilities so far)
277            - amarok <unfixed> (embed)
278            - monotone 0.43-1 (embed)
279            - iceweasel <unfixed> (embed)
280            - heimdal <unfixed> (embed; bug #559616)
281    
282    util-linux/mount
283            - loop-aes-utils <unfixed> (embed)
284            NOTE: contains code from util-linux' mount in the mount-aes-udeb
285    
286    sylpheed
287            - sylpheed-claws <unfixed> (fork)
288    
289    phpsysinfo
290            - egroupware <unfixed> (embed)
291            - phpgroupware <unfixed> (embed)
292    
293    phpldapadmin
294            [sarge] - egroupware <unfixed> (embed)
295            NOTE: removed from egroupware after sarge
296    
297    chmlib
298            - kchmviewer <unknown> (embed)
299    
300    ffmpeg (libavcodec/libavformat)
301            - mplayer 1.0~rc2-14 (embed; bug #395252)
302            - kino 1.0.0-1
303            - vlc <not-affected> (Links dynamically since initial release)
304            - smilutils 0.3.0-10
305            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
306            - motion 3.1.19-1
307            - gstreamer0.10-ffmpeg 0.10.3-2
308            - xmovie <removed> (static)
309            TODO: gimp-gap (potentially using ffmpeg code as well)
310            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
311            - audacity 1.3.7-2 (embed; bug #512278)
312    
313    faad2
314            - mplayer 1.0~rc2-20 (embed)
315            - avifile <unfixed> (embed; bug #538750)
316            - ffmpeg-debian <removed> (embed)
317    
318    libmad (MPEG decoding lib)
319            - xine-lib <unfixed> (embed)
320            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
321            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
322    
 libdts:  
323  libdts  libdts
324  xine-lib          - xine-lib <unfixed> (embed)
325    
 flac:  
326  flac  flac
327  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
328    
329  curl:  liba52
330  wget (code for NTLM authentication)          - a52dec <unfixed> (embed)
331            - xine-lib <unfixed> (embed)
332    
333    mpeg2dec (libmpeg2)
334            - xine-lib <unfixed> (embed)
335    
336    libmpeg3
337            - squeak-vm <unfixed> (embed)
338    
339    libntlm
340            - wget <unfixed> (fork; bug #550436)
341            - curl <unfixed> (fork; bug #550437)
342            - cntlm <unfixed> (fork; bug #550438)
343    
344    uw-imap
345            - pine <unfixed> (embed)
346            - alpine <unfixed> (embed)
347    
348    imagemagick
349            - graphicsmagick <unfixed> (fork)
350    
351    python-urlgrabber
352            - mercurial <unfixed> (embed; bug #531062)
353            - w3af <unfixed> (embed; bug #555372)
354            [experimental] - harvestman <unfixed> (embed; bug #555373)
355    
356    beautifulsoup
357            - python-mechanize <unfixed> (embed; bug #555349)
358            - zope2.11 <removed> (embed; bug #555350)
359            - twill <unknown> (embed)
360    
361    halibut
362            - nsis <unfixed> (fork)
363    
364    libghttp
365            - hotway <unfixed> (embed)
366    
367    libsndfile
368            - ardour 1:2.7.1-1 (embed)
369    
370    glibmm2.4
371            - ardour 1:2.7.1-1 (embed)
372    
373    libgnomecanvasmm2.6
374            - ardour 1:2.7.1-1 (embed)
375    
376    libsigc++-2.0
377            - ardour 1:2.7.1-1 (embed)
378    
379    soundtouch
380            - ardour 1:2.7.1-1 (embed)
381    
382    libmms
383            - xine-lib <unfixed> (embed)
384            - mimms <unfixed> (embed)
385    
386    fckeditor
387            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
388            - moin 1.8.2-2 (embed; bug #452599)
389            - karrigell <removed> (embed; bug #452598)
390            - gforge 4.6.99+svn6225-1 (embed)
391            - request-tracker3.8 <unfixed> (embed)
392            - otrs2 <unfixed> (embed)
393    
394    ipatlas (not packaged in Debian)
395            - moodle <unfixed> (embed; bug #507185)
396    
397    libphp-phpmailer
398            - moodle <unfixed> (embed; bug #507185)
399            - mahara <unfixed> (embed)
400            - symfony <unfixed> (embed; bug #566778)
401            [etch] - phpgroupware <unfixed> (embed)
402            NOTE: phpgroupware-felamimail is only in etch
403            - egroupware <unfixed> (embed; bug #504283)
404            - glpi <unfixed>
405    
406    htmlArea (not packaged in Debian)
407            - moodle <unfixed> (embed)
408    
409    giflib
410            - wine <unfixed> (embed; bug #466181)
411    
412    bennu (not packaged in Debian, http://bennu.sourceforge.net)
413            - moodle <unfixed> (embed)
414    
415    smarty
416            - moodle 1.8.2-2 (embed; bug #471158)
417            - gallery2 2.2.5-2 (embed; bug #471160)
418            - mahara 0.9.2-2 (embed; bug #471201)
419            - gosa 2.4beta1-1 (embed; bug #471200)
420    
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
   
 libsndfile:  
 ardour  
   
 glibmm2.4:  
 ardour  
   
 libgnomecanvasmm2.6:  
 ardour  
   
 libsigc++-2.0:  
 ardour  
   
 soundtouch:  
 ardour  
   
 libmms:  
 xine-lib  
 mimms  
   
 FCKeditor:  
 knowledgeroot  
 moin  
 karrigell  
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
421  TinyMCE  TinyMCE
422  bennu          - wordpress 2.5.1-3 (embed; bug #478257)
423            - moodle <unfixed> (embed; bug #507185)
424  TinyMCE:          - knowledgeroot <unfixed> (embed)
425  wordpress          - joomla <itp> (bug #326398)
426  moodle  
427  knowledgeroot  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
428  joomla (ITP)          - scite <unfixed> (embed)
429            - qscintilla <unfixed> (embed)
430  scintilla:          - qscintilla2 <unfixed> (embed)
431  scite          - geany <unfixed> (fork)
432  qscintilla          - anjuta <unfixed> (embed)
433  geany  
434    libphp-adodb
435  libphp-adodb:          - moodle <unfixed> (embed; bug #507185)
436  gallery2          NOTE: also AdoDB-XML Schema
437  phppgadmin          - gallery2 <unfixed> (embed)
438  egroupware          - phppgadmin <unfixed> (embed)
439  phpwiki          - egroupware <unfixed> (embed)
440  moodle          - phpwiki <unfixed> (embed)
441  cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)          - torrentflux 2.0beta1-2 (embed)
442            - ipplan <unfixed> (embed)
443            - typo3-src <unfixed> (embed)
444            - cacti <unknown> (embed)
445            [sarge] - cacti <unfixed> (embed)
446            NOTE: dependency exists, but internal version is used
447            - gforge 4.7~rc2-6 (embed)
448            - mahara <unfixed> (embed)
449    
450    gzip
451            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
452            - klibc <unfixed> (embed)
453            NOTE: based on linux-kernel gzip code
454            - busybox <unfixed> (embed)
455            - pristine-tar <unfixed> (modified-embed)
456            NOTE: compression code only, not uncompression
457    
458    neon
459            - cadaver 0.22.3+debian-1 (embed; bug #188381)
460            - gnome-vfs2 <unfixed> (embed; bug #395874)
461            [etch] - litmus <unfixed> (embed; #395875)
462            - litmus <removed> (embed; #395875)
463            [sarge] - screem <unfixed> (embed)
464            - sitecopy 1:0.16.0-1 (embed; bug #395876)
465            [etch] - tla <unfixed> (embed; bug #395877)
466            [sarge] - tla <unfixed> (embed; bug #395877)
467    
468    libmodplug
469            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
470    
471    libvncserver
472            - vino <unfixed> (embed)
473    
474    putty
475            - filezilla <unfixed> (embed)
476    
477    tinyxml (not packaged in Debian; itp bug #531968)
478            - filezilla <unfixed>
479            - crystalspace <unfixed> (embed)
480            - libwfut <unfixed> (embed)
481            - rarian <unfixed> (embed)
482            - bulletml <unfixed> (embed)
483            - pokerth <unfixed> (embed)
484            - qutecom <unfixed> (embed)
485            - sofa-framework <unfixed> (embed)
486            - yate <unfixed> (embed)
487            - antigrav <unfixed> (embed)
488            - balder2d <unfixed> (embed)
489            - cal3d <unfixed> (embed)
490            - criticalmass <unfixed> (embed)
491            - ember <unfixed> (embed)
492            - epiphany <unfixed> (embed)
493            - gambit <unfixed> (embed)
494            - noiz2sa <unfixed> (embed)
495            - ogre <unfixed> (embed)
496            - opencity <unfixed> (embed)
497            - openmovieeditor <unfixed> (embed)
498            - pouetchess <unfixed> (embed)
499            - tecnoballz <unfixed> (embed)
500            - trigger-rally <unfixed> (embed)
501            - xmoto <unfixed> (embed)
502            - mapnik <unknown> (embed)
503            NOTE: uses a different XML parser by default
504            - rrootage 0.23a-6 <embed>
505            NOTE: links to libbulltetml
506            - boson <unknown> (embed)
507            NOTE: the embedded code is unused
508    
509    gv
510            - evince <unfixed> (embed)
511            NOTE: ps/ tree from gv 3.5.8
512            NOTE: evince-gtk is affected (a component of evince source package)
513    
514    libXbae
515            - paw <removed> (embed)
516            [etch] - paw <unfixed> (embed)
517    
518    libgtkhtml
519            - claws-mail-extra-plugins <unfixed> (fork)
520    
521    libXaw
522            - paw <removed> (embed)
523            [etch] - paw <unfixed> (embed)
524            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
525    
526    libgd2
527            - graphviz <unfixed> (embed)
528            NOTE: lib/gd seems to be 2.0.33
529            - wml 2.0.11ds2-1 (embed)
530            - libwmf <unfixed> (embed)
531            NOTE: derived from gd 1.6.3
532            - texlive-bin <unfixed> (embed)
533    
534    rar
535            - unrar-nonfree <unfixed> (embed)
536    
537    unrar-free (maybe this code is derived from the original rar, too?)
538            - clamav <unfixed> (embed)
539            NOTE: seems to be disabled in default config
540    
541    mplayer (DirectMedia Object loader)
542            - xine-lib <unfixed> (embed)
543            NOTE: src/libw32dll/
544            - vlc <unfixed> (embed)
545            NOTE: modules/codec/dmo/
546            - mplayer 1.0~rc2-20 (embed)
547    
548    libwpd (WordPerfect converter)
549            - openoffice.org <unfixed> (embed)
550    
551    fsplib (http://sourceforge.net/projects/fsp/)
552            - gftp <unfixed> (embed)
553            NOTE: lib/fsplib version 0.3
554    
555    sprng
556            - tree-puzzle <unfixed> (embed)
557    
558    librpcsecgss
559            - krb5 <unfixed> (embed)
560    
561    jasper
562            - ghostscript 8.64~dfsg-2 (embed)
563    
564    libiris
565            - psi <unfixed> (embed)
566            - kdenetwork <unfixed> (embed)
567            NOTE: kopete embeds libiris but links dynamically to libidn
568            - kdegames <unfixed> (embed)
569            NOTE: ksirk/kde4
570    
571    libidn
572            - monotone 0.43-1 (embed)
573            - psi <unfixed> (embed)
574            NOTE: psi embeds libiris which embeds libidn
575            - kdegames <unfixed> (embed)
576            NOTE: kdegames/kde4 embeds libiris which embeds libidn
577    
578    lua5.1
579            - monotone 0.43-1 (embed)
580            - nmap 5.00-1 (embed; bug #527997)
581            [lenny] - nmap <unfixed> (embed; bug #527997)
582            - ocropus <unfixed> (embed)
583            - enigma <unfixed> (embed)
584            NOTE: requires lua built with C++
585            - freeciv <unfixed> (embed)
586            - spring <unfixed> (embed)
587    
588  gzip:  libbotan
589  linux-kernel (lib/inflate.c)          - monotone 0.43-1 (embed)
 klibc (based on linux-kernel gzip code)  
 busybox  
590    
591  ffmpeg:  NetXX
592  mplayer (#395252)          - monotone 0.43-1 (embed)
593    
594  neon:  libgc
595  cadaver (all, but being worked on: #188381)          - mono <unfixed> (embed)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
596    
597  libmodplug:  lzma
598  gst-plugins-bad0.10          - p7zip <unfixed> (embed)
599            - xz-utils <unfixed> (fork)
600    
601    lzo
602            - grub2 <unfixed> (embed)
603    
604    yassl
605            - mysql-dfsg-5.0 <unfixed> (embed)
606            - mysql-dfsg-5.1 <unfixed> (embed)
607    
608    pax code
609            - tar <unfixed> (embed)
610            - cpio <unfixed> (embed)
611    
612    t1lib
613            - tetex-bin 2.0.2-1 (embed)
614            - texlive-bin <unknown> (embed)
615    
616    guichan
617            - boswars <unfixed> (embed)
618            NOTE: maintainer notified us, working on it
619    
620    tolua
621            - boswars <unfixed> (embed)
622            NOTE: maintainer notified us, working on it
623            NOTE: actually tolua++
624            - ocropus <unfixed> (embed)
625            NOTE: actually tolua++
626            - freeciv <unfixed> (embed)
627            NOTE: actually tolua++
628            - enigma <unfixed> (embed)
629    
630  libvncserver:  asio-dev
631  vino          - luxrender <removed> (embed)
632    
633  putty:  xine-lib
634  filezilla          - vlc <unfixed> (embed)
635            NOTE: only parts included in modules/access/rtsp
636    
637  tinyxml (not packaged in Debian):  netpbm
638  filezilla          - tcl8.3 <unfixed> (embed)
639            - tcl8.4 <unfixed> (embed)
640            - tcl8.5 <unfixed> (embed)
641            NOTE: generic/tkImgGIF.c
642    
643    tk8.5
644            - tk8.0 <removed> (old-version)
645            - tk8.3 <unfixed> (old-version)
646            - tk8.4 <unfixed> (old-version)
647            - perl-tk <unfixable> (fork)
648    
649    samba
650            - mc 2:4.6.2~git20080311-1 (embed)
651            NOTE: maintainer is aware of this, currently searching a solution
652    
653    plib1.8.4c2
654            - boson <unfixed> (fork)
655            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
656    
657    fribidi
658            - quesoglc <unfixed> (embed)
659            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
660    
661    glew
662            - quesoglc <unfixed> (embed; bug #489341)
663            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
664            - trigger 0.5.2.1-2 (embed)
665            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
666            - trigger-rally 0.5.2.1-2 (embed)
667            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
668    
669    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
670            - transcend <unfixed> (embed)
671            - cultivation <unfixed> (embed)
672            - passage <unfixed> (embed)
673            - gravitation <unfixed> (embed)
674    
675    tar
676            - libarchive <unfixed> (embed)
677            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
678    
679    cpio
680            - libarchive <unfixed> (embed)
681            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
682    
683    kde4libs
684            - kdelibs <unfixable> (old-version)
685    
686    webkit
687            - qt4-x11 <unfixed> (embed; bug #479851)
688            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
689            - kde4libs <unfixable> (fork)
690            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
691            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
692    
693    ftgl
694            - blender 2.46+dfsg-1 (embed)
695    
696    wv
697            - abiword <unfixed>
698    
699    qemu
700            - kvm <removed> (embed; bug #543159)
701            - qemu-kvm <unfixed> (embed; bug #560853)
702            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
703            - xen-3 3.4.2-2 (embed; bug #560856)
704            - xen-unstable <unfixed> (embed; bug #560856)
705    
706    vgabios
707            - kvm <removed> (embed; bug #489442)
708            - qemu-kvm <unfixed> (embed)
709    
710    bochs
711            - kvm <removed> (embed; bug #489442)
712            - qemu-kvm <unfixed> (embed)
713    
714    speex
715            - vorbis-tools <unfixed> (embed)
716            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
717            - gst-plugins-good0.10 <unfixed> (embed)
718            - xine-lib <unfixed> (embed)
719            - libfishsound <unfixed> (embed)
720            - libannodex <removed> (embed)
721            - vlc <unfixed> (embed)
722            - xmms-speex <unfixed> (embed)
723            - libsdl-sound1.2 <unfixed> (embed)
724            - sweep <unfixed> (embed)
725    
726    libreadline
727            - magic <itp> (old-version)
728    
729    opcode
730            - ode <unfixed> (embed)
731            NOTE: opcode is not a package in debian, it is just embedded
732            NOTE: http://www.codercorner.com/Opcode.htm
733    
734    gimpact
735            - ode <unfixed> (embed)
736            NOTE: gimpact is not a package in debian, it is just embedded
737            NOTE: http://gimpact.sf.net
738    
739    mochikit
740            - mahara <unfixed> (embed)
741            NOTE: they require extra patches, still unmerged upstream
742            - ntop <unfixed> (embed)
743            - coherence 0.6.2-1 (embed)
744            - paste <unfixed> (embed)
745            - turbogears <unfixed> (embed)
746            - plone3 <removed> (embed)
747            - xulrunner <unfixed> (embed)
748            - libjifty-plugin-chart-perl <unfixed> (embed)
749            - sabnzbdplus <unfixed> (embed)
750            - tgmochikit <unfixed> (embed)
751    
752    prototypejs
753            - netbeans-ide 6.0.1+dfsg-2 (embed)
754            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
755            - webcit <unfixed> (embed; bug #555219)
756            - asterisk 1:1.6.2.0~rc3-1 (embed)
757            - libjson-ruby 1.1.4-1 (embed; bug #555224)
758            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
759            - horde3 <unfixed> (embed)
760            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
761            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
762            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
763            - ebug-http <removed> (embed; bug #555236)
764            - libaws 2.7-1 (embed; bug #555222)
765            - phpgedview <removed> (embed)
766            - poker-network 1.7.6-1 (embed; bug #555238)
767            - rails 2.1.0-6 (embed)
768            - wordpress 2.5.0-2 (embed; bug #555243)
769            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
770            TODO: search through all of the other zope packages
771            - ampache 3.4.1-2 (embed)
772            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
773            - hobix 0.5~svn20070319-4 (embed; bug #555247)
774            - zabbix 1.6.6-4 (embed; bug #555250)
775            - chora2 <unfixed> (embed; bug #555253)
776            - gollem <unfixed> (embed; bug # 555254)
777            - jscropperui 1.2.1-1 (embed; bug #555257)
778            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
779            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
780            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
781            - activeldap <unfixed> (embed)
782            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
783            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
784            - otrs2 2.3.4-6 (embed; bug #555267)
785            - webcalendar 1.2~b1-2 (embed; bug #555269)
786            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
787            - jifty 0.90519-1 (embed; bug #555271)
788            - jquery 1.4-1 (embed; bug #555272)
789            - passenger 2.2.5debian1-1 (embed; bug #555273)
790            - plone3 <removed> (embed; bug #555275)
791            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
792            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
793            - xulrunner <unfixed> (embed)
794            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
795    
796    gdb
797            - insight <unfixed> (embed)
798    
799    e2fsprogs
800            - ldiskfsprogs <unfixable> (fork)
801    
802    quazip (not packaged in Debian)
803            - qcake <unfixed> (embed)
804            NOTE: starting with upstream version 0.6.4
805    
806    exo
807            - pcmanfm <unfixed> (embed; bug #499677)
808            NOTE: slightly modified source code
809    
810    java
811            - openjdk-6 <unfixed>
812            - sun-java5 <unfixed>
813            - sun-java6 <unfixed>
814    
815    libphp-snoopy
816            - ampache 3.4.1-2 (embed; bug #504169)
817            - gforge 4.6.99+svn6094-2 (embed)
818            - mahara 1.0.5-2 (embed; bug #504170)
819            - pixelpost 1.7.1-5 (embed; bug #504171)
820            - mediamate 0.9.3.6-5 (embed; bug #504172)
821            - opendb <removed> (embed; bug #504173)
822            [etch] - opendb <unfixed> (embed; bug #504173)
823            - wordpress 2.5.1-9 (embed; bug #443948)
824            - moodle <unfixed> (embed; bug #507185)
825            [etch] - phpgroupware <unfixed> (embed)
826            NOTE: phpgroupware-felamimail
827            - magpierss 0.72-3 (embed; bug #431089)
828    
829    jquery
830            - zekr <unfixed> (embed)
831            - wordpress <unknown> (embed)
832            - yocto-reader <unfixed> (embed)
833            - textpattern <unfixed> (embed)
834            - genshi 0.5.1-1 (embed)
835            NOTE: compressed file under examples/ dir
836            - prewikka <unfixed> (embed)
837            - libramaze-ruby <unfixed> (embed)
838            - drupal5 <unfixed> (embed)
839            - b2evolution <unfixed> (embed)
840            - wesnoth <unfixed> (embed)
841    
842    tablesorter (jquery plugin, not packaged yet)
843            - wesnoth <unfixed> (embed)
844    
845    kses
846            - wordpress <unfixed> (embed; bug #504242)
847            NOTE: their copy has all methods renamed to wp_<foo>
848            NOTE: kses isn't in Debian, RFP: #504240
849            - moodle <unfixed> (embed; bug #507185)
850            - egroupware <unfixed> (embed)
851    
852    magpierss
853            - wordpress <unfixed> (embed; bug #504242)
854            - moodle <unfixed>
855    
856    php-gettext
857            - wordpress 2.8.4-1 (embed; bug #504242)
858            - docbookwiki <unfixed> (embed)
859            - knowledgeroot 0.9.9.5-1
860            NOTE: non-free
861    
862    libphp-ixr (name may change, it is the Incutio XML-RPC)
863            - wordpress <unfixed> (embed; bug #504242)
864            NOTE: libphp-ixr isn't in Debian, RFP: #504236
865            - dokuwiki <unfixed> (embed)
866            - textpattern <unfixed> (embed)
867    
868    libphp-cas
869            - glpi <unfixed> (embed)
870            - moodle <unfixed> (embed; bug #505984)
871    
872    scriptaculous (prototype.js is among the embeds in the following)
873            - glpi <unfixed> (embed)
874            - libaws <unfixed> (embed; bug #555222)
875            - op-panel <unfixed> (embed)
876            - symfony <unfixed> (embed)
877            NOTE: maintainer says there are extra incompatible changes required
878            - pixelpost 1.7.1-6 (embed)
879            - webhelpers <unfixed> (embed)
880            - qwik <removed> (embed; bug #555241)
881            - smokeping <unfixed> (embed)
882            - turba2 <unfixed> (embed)
883            - typo3-src 4.2.3-1 (embed)
884            - request-tracker3.6 <unfixed> (embed)
885            - request-tracker3.8 <unfixed> (embed)
886            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
887            - wordpress 2.5.0-2 (embed)
888            - libhtml-prototype-perl 1.48-3 (embed)
889    
890    libmarkdown-php
891            - moodle <unfixed> (embed; bug #507185)
892            - pixelpost 1.7.1-6 (embed)
893    
894    php-openid
895            - wordpress-openid <itp> (embed)
896    
897    geshi
898            - dokuwiki 0.0.20080505-3.1 (embed)
899            - pgfouine 1.0-1.1 (embed)
900            - websvn 2.1.0-1 (embed)
901    
902    webcalendar
903            - gforge 4.7~rc2-6 (embed; bug #504758)
904    
905    libical
906            - kdepim <unknown> (fork)
907            NOTE: fixed at some point during 4.0
908            - kdepimlibs 4.2.0-1 (fork)
909            - claws-mail-extra-plugins <unfixed> (fork)
910    
911    harfbuzz
912            - qt4-x11 <unfixed> (embed)
913            - pango1.0 <unfixed> (embed)
914            - fontmatrix <unfixed> (embed)
915    
916    libzip
917            - php5 <unfixable> (modified-embed)
918            - odt2txt <unfixed> (embed; bug #523808)
919    
920    json.php (not packaged; should be replaced with php's built-in functions)
921            - moodle <unfixed>
922            - yui <unfixed>
923            - gallery2 <unfixed>
924            - dokuwiki <unfixed>
925            - typo3-src <unfixed>
926    
927    php-fpdf
928            - tcpdf <itp> (fork)
929            - moodle <unfixed>
930            - phpwiki <unfixed>
931            - egroupware <unfixed>
932            - ldap-account-manager <unfixed> (fork)
933    
934    tcpdf (itp: #495985)
935            - moodle <unfixed>
936            - phpmyadmin <unfixed>
937    
938    typo3
939            - moodle <unfixed>
940    
941    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
942            - moodle <unfixed>
943            - gosa <unfixed>
944    
945    php-ole (itp: #487558)
946            - moodle <unfixed>
947    
948    pieforms (http://www.catalyst.net.nz)
949            - mahara <unfixed>
950    
951    savant2 (http://phpsavant.com)
952            - egroupware <unfixed>
953    
954    rssparser (http://nwow.org)
955            - egroupware <unfixed>
956            - phpgroupware <unfixed>
957    
958    lcms
959            - openjdk-6 <unfixed> (fork)
960            - gimp 2.4.0~rc2-2
961    
962    libphp-phplayersmenu
963            - diogenes <unfixed>
964            - phpldapadmin <unfixed>
965    
966    libphp-pclzip
967            - docvert <unfixed>
968            - moodle <unfixed>
969            - egroupware <unfixed>
970    
971    libphp-simplepie
972            - dokuwiki <unfixed>
973            - wordpress <unfixed>
974    
975    libphp-jpgraph
976            - egroupware <unfixed>
977    
978    php-simpletest
979            - moodle <unfixed>
980    
981    libpng
982            - iceweasel <not-affected> (uses xulrunner)
983            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
984            - iceape 1.0.13~pre080614i-0etch1 (embed)
985            - xulrunner 1.9.0.13-1 (embed)
986            [lenny] - xulrunner 1.9.0.11-0lenny1
987            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
988            - gamera 3.2.3-1 (embed)
989            - freeimage <unfixed> (embed)
990            - tuxonice-userui (static)
991    
992    irssi
993            - silc-client <unfixed> (embed)
994            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
995    
996    extc
997            - mtasc <unfixed> (embed)
998            - haxe <unfixed> (embed)
999    
1000    swflib
1001            - mtasc <unfixed> (embed)
1002            - haxe <unfixed> (embed)
1003    
1004    libitext-java
1005            - bouncycastle 2.1.4-1 (embed)
1006    
1007    python-ply
1008            - pyke <unfixed> (embed; bug #555363)
1009            - pywbem 0.7.0-4 (embed; bug #555364)
1010            - sepolgen <unfixed> (embed; bug #555365)
1011            - zope-textindexng3 <unknown> (embed)
1012            - iceweasel <not-affected> (uses xulrunner)
1013            - xulrunner <unknown> (embed)
1014            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1015    
1016    libdumbnet (libdnet upstream)
1017            - nmap <unfixed> (fork)
1018    
1019    gcc-4.4
1020            - gcc-mingw32 <unfixed> (embed)
1021    
1022    camlimages
1023            - advi <unfixed> (static; bug #550441)
1024    
1025    memcached
1026            - memcachedb <unfixed> (embed)
1027    
1028    yajl
1029            - argyll <unfixed> (embed; bug #544223)
1030            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1031    
1032    nusoap
1033            - gforge 4.8.2-1 (embed)
1034            - ampache <unfixed> (embed)
1035            - poker-network <unfixed> (embed)
1036            - moodle <unfixed> (embed)
1037            NOTE: code is not used when running under php5 and soap is enabled
1038            - phpwiki <unfixed> (embed)
1039            - gallery2 <unfixed> (embed)
1040            - typo3-src <unfixed> (embed)
1041    
1042    libept
1043            - adept <unfixed> (embed; bug #540649)
1044    
1045    libvorbis
1046            - iceweasel <not-affected> (uses xulrunner)
1047            - xulrunner <unfixed> (embed; bug #540959)
1048            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1049            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1050            - iceape <unfixed> (embed)
1051            [etch] - iceape <not-affected> (introduced in 2.0)
1052            [lenny] - iceape <not-affected> (introduced in 2.0)
1053    
1054    cairo
1055            - iceweasel <not-affected> (uses xulrunner)
1056            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1057    
1058    liboggz
1059            - iceweasel <not-affected> (uses xulrunner)
1060            - xulrunner <unfixed> (embed; bug #540959)
1061            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1062            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1063            - iceape <unfixed> (embed)
1064            [etch] - iceape <not-affected> (introduced in 2.0)
1065            [lenny] - iceape <not-affected> (introduced in 2.0)
1066    
1067    liboggplay
1068            - iceweasel <not-affected> (uses xulrunner)
1069            - xulrunner <unfixed> (embed; bug #540959)
1070            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1071            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1072            - iceape <unfixed> (embed)
1073            [etch] - iceape <not-affected> (introduced in 2.0)
1074            [lenny] - iceape <not-affected> (introduced in 2.0)
1075    
1076    php-net-dnsbl
1077            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1078    
1079    php-onyx-rss
1080            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1081    
1082    php-text-wiki
1083            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1084    
1085    php-xml-rpc
1086            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1087    
1088    polarssl (does not have a shared library)
1089            - pdkim <itp> (embed; bug #543150)
1090            - xyssl <unfixed> (old-version)
1091    
1092    pidgin (libpurple)
1093            - gaim <removed> (old-version)
1094            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1095    
1096    icu
1097            - webkit 1.0.1-1 (embed; bug #547214)
1098            - texlive-bin <unfixed> (fork)
1099            NOTE: texlive upstream working with icu upstream to merge their changes
1100    
1101    cyrus-imapd-2.2
1102            - kolab-cyrus-imapd <unfixed> (fork)
1103            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1104    
1105    python-cxx-dev
1106            - freecad 0.9.2646.3-1 (embed; bug #547936)
1107    
1108    zipios++
1109            - freecad 0.9.2646.3-1 (embed; bug #547941)
1110            - enigma 0.92.3-3 (embed)
1111            NOTE: likely fixed earlier, marking etch's version as fixed
1112    
1113    linux-2.6
1114            - kvm <removed> (embed; bug #549973) [./kernel/*]
1115            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1116            - kernel-source-2.6.8 <removed> (old-version)
1117            - kernel-source-2.4.27 <removed> (old-version)
1118            - kernel-source-2.4.24 <removed> (old-version)
1119            - kernel-source-2.2.25 <removed> (old-version)
1120            - kernel-source-2.2.20 <removed> (old-version)
1121    
1122    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1123            - kvm <removed> (embed) [./libfdt/*]
1124            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1125    
1126    qweb (not packaged)
1127            - ajaxterm <unfixed>
1128    
1129    opensaml2
1130            - opensaml <removed> (old-version)
1131    
1132    shibboleth-sp2
1133            - shibboleth-sp <removed> (old-version)
1134    
1135    tuxonice-userui
1136            - suspend2-userui <removed> (old-version)
1137    
1138    expat
1139            - w3c-libwww <removed> (embed; bug #551941)
1140            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1141            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1142            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1143            - python2.4 <unfixable> (embed; bug #553403)
1144            - python-4suite <unfixed> (embed; bug #516935)
1145            - wxwindows2.4 <removed> (embed)
1146            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1147            - wxwidgets2.8 2.8.10.1-2 (embed)
1148            - celementtree 1.0.5-8 (embed)
1149            NOTE: Maybe that was fixed even earlier
1150            - audacity 1.3.2-1 (embed)
1151            - matanza <unfixed> (embed)
1152            - tdom 0.8.3~20080525-1 (embed)
1153            - udunits 2.1.8-4 (embed)
1154            - apr-util 1.2 (embed)
1155            - ayttm <unfxed> (embed; bug #561006)
1156            - cableswig <unfixed> (embed)
1157            - cadaver <unfixed> (embed)
1158            - cmake 2.6.0-6 (embed)
1159            - coin3 <unfixed> (embed)
1160            - gdcm 2.0.14-2 (embed)
1161            - ghostscript 8.71~dfsg-2 (embed)
1162            - grmonitor <removed> (embed)
1163            - iceape <unfixed> (embed)
1164            - insighttoolkit 3.16.0-1 (embed)
1165            NOTE: insighttoolkit might've been fixed earlier
1166            - libparagui1.1 1.0.2-1 (embed)
1167            - paraview 3.6.2-1 (embed)
1168            - poco 1.3.6p1-1 (embed)
1169            - simgear <unfixed> (embed)
1170            - sitecopy 1:0.16.0-1
1171            - smart <unfixed> (embed)
1172            NOTE: smart embeds celementree, and it includes expat
1173            - swish-e <not-affected> (Linked against libxml, which is used instead)
1174            - tla 1.3.5+dfsg-15 (embed)
1175            - vtk 4.1.20030227-1 (embed)
1176            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1177            - xmlrpc-c <unfixed> (embed)
1178            - iceweasel <unfixed> (embed)
1179            - kompozer <unfixed> (embed)
1180            - vxl 1.13.0-2 (embed)
1181            - xulrunner <unfixed> (embed)
1182            - apache2 2.2 (embed)
1183            - texlive-bin <not-affected> (Embedded code not compiled in)
1184            - vnc4 <unfixed> (embed)
1185            - xotcl 1.6.6-1 (embed)
1186    
1187    xerces-c
1188            - xerces-c2 <unfixed> (old-version)
1189            - xerces27 <removed> (old-version)
1190    
1191    md5 (RSA's version; not the gnu version provided by coreutils)
1192            - w3c-libwww <removed> (embed; bug #551942)
1193            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1194    
1195    libparagui1.1
1196            - asc <unfixable> (fork)
1197    
1198    enet
1199            - sauerbraten <unfixed> (embed; #497194)
1200    
1201    eglibc
1202            - glibc <removed> (old-version)
1203    
1204    galib
1205            - gamera 3.2.3-1 (embed)
1206    
1207    configobj
1208            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1209            - elisa <unfixed> (embed; bug #555337)
1210            - gaupol <unfixed> (embed; bug #555338)
1211            - ipython <unfixed> (embed; bug #555339)
1212            - pida <unfixed> (embed; bug #555340)
1213            - psychopy <unfixed> (embed; bug #555341)
1214            - rest2web <unfixed> (embed; bug #555342)
1215            - auth2db <unknown> (embed)
1216            - dynagen <unknown> (embed)
1217            - iceweasel <unknown> (embed)
1218            - sabnzbdplus <unknown> (embed)
1219            - xulrunner <unknown> (embed)
1220            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1221    
1222    python-clientform
1223            - bibus <unfixed> (embed; bug #555332)
1224            - zope2.10 <unfixed> (embed; bug #555333)
1225            - zope2.11 <removed> (embed; bug #555334)
1226            - python-mechanize <unknown> (embed)
1227            - twill <unknown> (embed)
1228    
1229    python-mechanize
1230            - zope2.10 <unfixed> (embed; bug #555337)
1231            - zope2.11 <removed> (embed; bug #555338)
1232            - twill <unknown> (embed; bug #555339)
1233    
1234    pexpect
1235            - duplicity 0.6.06-1 (embed; bug #555361)
1236            - hplip <unfixed> (embed; bug #555362)
1237            - smart <unfixed> (embed; bug #555363)
1238    
1239    pyparsing
1240            - bauble <unfixed> (embed; bug #555366)
1241            - boa-constructor 0.6.1-8 (embed; bug #555367)
1242            - calibre <unfixed> (embed; bug #555368)
1243            - matplotlib <unfixed> (embed; bug #531024)
1244            - zhpy 1.7.3.1-1 (embed; bug #555370)
1245            - polybori <unknown> (embed)
1246            - python-whoosh <unknown> (embed)
1247            - twill <unknown> (embed)
1248            - zope-textindexng3 <unknown> (embed)
1249    
1250    python-pysqlite2
1251            - python2.4 <unfixed> (embed; bug #553403)
1252            - python2.5 <unfixed> (embed; bug #553403)
1253    
1254    celementtree
1255            - python2.5 <unfixed> (embed)
1256            - smart <unfixed> (embed)
1257    
1258    elementtree
1259            - python2.5 <unfixed> (embed)
1260            - python2.6 <unfixed> (embed)
1261            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1262            - gedit 2.28.2-1 (embed; bug #555344)
1263            - smart <unfixed> (embed)
1264            - solfege <unfixed> (embed; bug #555345)
1265            - w3af <unfixed> (embed; bug #555346)
1266            - python-qt4 <unknown> (embed)
1267            - sphinx <unknown> (embed)
1268            - python-nltk <itp> (embed)
1269    
1270    python2.5
1271            - python2.4 <unfixed> (old-version)
1272            - jython <unfixed> (embed)
1273            NOTE: embeds many stdlib modules
1274            - python-django <unfixed> (embed; bug #555419)
1275            NOTE: embeds stdlib modules: doctest, decimal
1276            - gamera 3.2.3-1 (embed)
1277            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1278            - boa-constructor <unfixed> (embed; bug #555426)
1279            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1280            - nicotine <unfixed> (embed; bug #555427)
1281            NOTE: embeds stdlib modules: ConfigParser
1282            - museek+ <unfixed> (embed; bug #555428)
1283            NOTE: embeds stdlib modules: ConfigParser
1284            - vegastrike-data <unfixed> (embed)
1285            NOTE: embeds many stdlib modules
1286            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1287            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1288            - config-manager <unfixed> (embed; bug #555423)
1289            NOTE: embeds stdlib modules: optparse
1290            - jhbuild 2.28.0-1 (embed; bug #555421)
1291            NOTE: embeds stdlib modules: optparse, subprocess
1292            - smart <unfixed> (embed; bug #555432)
1293            NOTE: embeds stdlib modules: optparse
1294            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1295            NOTE: embeds stdlib modules: doctest
1296            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1297            NOTE: embeds stdlib modules: doctest
1298            - distribute <unfixed> (embed)
1299            NOTE: embeds stdlib modules: doctest
1300            - python-setuptools <unfixed> (embed; bug #555435)
1301            NOTE: embeds stdlib modules: doctest
1302            - zope.testing <unfixed> (embed; bug #555436)
1303            NOTE: embeds stdlib modules: doctest
1304            - translate-toolkit <unfixed> (embed; bug #555422)
1305            NOTE: embeds stdlib modules: textwrap, contextlib
1306            - libtpclient-py <unfixed> (embed; bug #555424)
1307            NOTE: embeds stdlib modules: subprocess
1308            - grass <unfixed> (embed; bug #555425)
1309            NOTE: embeds stdlib modules: subprocess
1310            - coherence <unfixed> (embed; bug #555429)
1311            NOTE: embeds stdlib modules: uuid
1312            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1313            NOTE: embeds stdlib modules: uuid
1314            - setroubleshoot <unfixed> (embed; bug #555431)
1315            NOTE: embeds stdlib modules: uuid
1316            - linkchecker <unfixed> (embed; bug #555414)
1317            NOTE: embeds msgfmt.py script
1318            - imdbpy <unfixed> (embed)
1319            NOTE: embeds msgfmt.py script
1320            - kiwi <unfixed> (embed)
1321            NOTE: embeds msgfmt.py script
1322            - moin <unfixed> (embed)
1323            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1324            - plone3 <removed> (embed)
1325            NOTE: embeds msgfmt.py script
1326            - roundup <unfixed> (embed)
1327            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1328            - rednotebook <unfixed> (embed; bug #555415)
1329            NOTE: embeds msgfmt.py script
1330            - turbogears <unfixed> (embed)
1331            NOTE: embeds msgfmt.py script
1332            - elisa <unfixed> (embed)
1333            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1334            - calibre <unfixed> (embed)
1335            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1336            - mailman 1:2.1.13-1 (embed; #555416)
1337            NOTE: embeds msgfmt.py script
1338            - python-docutils <unknown> (embed)
1339            NOTE: embeds stdlib modules: optparse, textwrap
1340            - python-imaging <unknown> (embed)
1341            NOTE: embeds stdlib modules: doctest
1342            - python-mechanize <unknown> (embed)
1343            NOTE: embeds stdlib modules: doctest
1344            - twill <unknown> (embed)
1345            NOTE: embeds stdlib modules: subprocess
1346            - zeroc-ice <unknown> (embed)
1347            NOTE: embeds stdlib modules: subprocess
1348            - wxwidgets2.8 <unknown> (embed)
1349            NOTE: embeds stdlib modules: subprocess
1350            - cycle <unknown> (embed)
1351            NOTE: embeds msgfmt.py script
1352            - deluge <unknown> (embed)
1353            NOTE: embeds msgfmt.py script
1354            - opendict <unknown> (embed)
1355            NOTE: embeds msgfmt.py script
1356            - openerp-client <unknown> (embed)
1357            NOTE: embeds msgfmt.py script
1358            - rapidsvn <unknown> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - wammu <unknown> (embed)
1361            NOTE: embeds msgfmt.py script
1362            - gaphor <unknown> (embed)
1363            NOTE: embeds msgfmt.py script
1364            - pida <unknown> (embed)
1365            NOTE: embeds msgfmt.py script
1366            - python-formencode <unknown> (embed)
1367            NOTE: embeds msgfmt.py script
1368            - duplicity <unfixed> (embed)
1369            NOTE: embeds stdlib module: urlparse, tarfile
1370            - pygopherd <unfixed> (embed)
1371            NOTE: embeds stdlib module: zipfile
1372    
1373    argparse
1374            - twill <unfixed> (embed; bug #555347)
1375            - ipython <unfixed> (embed; bug #555348)
1376    
1377    coherence
1378            - elisa <unfixed> (embed; bug #555335)
1379    
1380    simpletal
1381            - plastex <unfixed> (embed; bug #555371)
1382    
1383    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1384            - postr <unfixed> (embed)
1385            - elisa <unfixed> (embed)
1386    
1387    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1388            - apertium-tolk <unfixed> (embed)
1389            - ipython <unfixed> (embed)
1390            - virtaal <unfixed> (embed)
1391    
1392    distribute
1393            - setuptools <removed> (old-version)
1394    
1395    rails
1396            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1397            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1398            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1399            - thin <unfixed> (embed) [./spec/rails_app/*]
1400            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1401            NOTE: be dangerous if developers are naively basing their code off of the examples
1402            NOTE: prototype.js is among the example files
1403    
1404    lucene2 (prototype.js is among the embeds in the following)
1405            - lucene <unfixed> (old-version)
1406            - pylucene <unfixed> (embed)
1407            - libpdfbox-java <unfixed> (embed)
1408            - libfontbox-java <unfixed> (embed)
1409            - libjempbox-java <unfixed> (embed)
1410            - solr <unfixed> (embed)
1411    
1412    unicode-data
1413            - syslinux <unfixed> (embed)
1414            - camomile <unfixed> (embed)
1415            - fribidi <unfixed> (embed)
1416            - m17n-db <unfixed> (embed)
1417            - sbcl <unfixed> (embed)
1418            - heimdal <unfixed> (embed)
1419            - icu <unfixed> (embed)
1420            - icu4j <unfixed> (embed)
1421            - krb5 <unfixed> (embed)
1422            - moodle <unfixed> (embed)
1423            - openldap <unfixed> (embed)
1424            - pike7.6 <unfixed> (embed)
1425            - samba <unfixed> (embed)
1426            - samba4 <unfixed> (embed)
1427            - cmucl <unfixed> (embed)
1428            - typo3-src <unfixed> (embed)
1429            - mauve <unfixed> (embed)
1430            - texlive-bin <unfixed> (embed)
1431            - ypsilon <unfixed> (embed)
1432            - jeuclid <unfixed> (embed)
1433            - charmap.app <unfixed> (embed)
1434            - clisp <unfixed> (embed)
1435            - gnulib <unfixed> (embed)
1436            - opensrs-client <unfixed> (embed)
1437            - saxonb <unfixed> (embed)
1438            - rails <unfixed> (embed)
1439    
1440    feedparser
1441            - rawdog <unfixed> (embed; bug #383422)
1442            - miro <unfixed> (embed; bug #555351)
1443            - calibre <unfixed> (embed; bug #555352)
1444            - freevo <unfixed> (embed; bug #555353)
1445            - pida <unfixed> (embed; bug #555354)
1446            - planet-venus <unfixed> (embed; bug #555355)
1447            - plone3 <removed> (embed; bug #555356)
1448            - exaile 0.2.14+debian-1 (embed)
1449            - screenlets 0.1.2-3 (embed)
1450            NOTE: included twice
1451    
1452    agg:
1453            - matplotlib <unfixed> (embed: bug #377271)
1454            - contextfree <unfixed> (embed)
1455            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1456            - exactimage <unfixed> (embed)
1457            - python-enable <unfixed> (embed)
1458            - mapnik 0.5.1-3 (embed)
1459            NOTE: links statically to agg, but shared library is not available (bug #377271)
1460    
1461    vtk
1462            - paraview <unfixable> (embed; bug #495426)
1463    
1464    txt2tags
1465            - rednotebook <unfixed> (embed)
1466    
1467    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1468            - gajim <unfixed> (embed)
1469            - emesene <unfixed> (embed)
1470            - convirt <unfixed> (embed)
1471            - pida <unfixed> (embed)
1472            - rednotebook <unfixed> (embed)
1473    
1474    horde3 (prototype.js is among the embeds in the following)
1475            - mnemo2 <unfixed> (embed)
1476            - nag2 <unfixed> (embed)
1477            - wordpress <unfixed> (embed)
1478            NOTE: Text_Diff (wp-includes/Text/Diff*)
1479    
1480    cimg
1481            - gmic <itp> (embed)
1482    
1483    mootools
1484            - gmic <itp> (embed)
1485    
1486    openldap
1487            - openldap2.3 <removed> (old-version)
1488    
1489    grub2
1490            - grub <unfixed> (old-version)
1491    
1492    gnupginterface
1493            - duplicity <unfixed> (embed)
1494    
1495    python-dateutil
1496            - awn-extras-applets <unfixed> (embed)
1497            - matplotlib <unknown> (embed)
1498    
1499    cups
1500            - cupsys <removed> (old-version)
1501    
1502    yui
1503            - bcfg2 <not-affected> (present in source but not included in any binary files)
1504            - serendipity 1.5.3-1 (embed; bug #557746)
1505            - moodle 1.8.2.dfsg-5 (embed)
1506            - jifty 0.91117-1 (embed; bug #557748)
1507            - webgui 7.7.26-1 (embed)
1508            - loggerhead 1.17-1 (embed)
1509    
1510    quake3 (vanilla source not packaged in debian)
1511            - openarena <unfixable> (fork)
1512    
1513    quake2 (vanilla source not packaged in debian)
1514            - alien-arena <unfixable> (fork)
1515            - warsow <unfixable> (fork)
1516    
1517    libtheora
1518            - iceweasel <not-affected> (uses xulrunner)
1519            - xulrunner <unfixed> (embed; bug #540959)
1520            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1521            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1522            - iceape <unfixed> (embed; bug #559276)
1523            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1524            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1525    
1526    dtoa
1527            - bfilter <unfixed> (embed)
1528            - cacao <unfixed> (embed)
1529            - cdrdao <unfixed> (embed)
1530            - classpath <unfixed> (embed)
1531            - freej <unfixed> (embed)
1532            - iceape <unfixed> (embed)
1533            - iceweasel <unfixed> (embed)
1534            - jscoverage <unfixed> (embed)
1535            - kde4libs <unfixed> (embed)
1536            - kdelibs <unfixed> (embed)
1537            - kompozer <unfixed> (embed)
1538            - libv8 <unfixed> (embed)
1539            - mono <unfixed> (embed)
1540            - newlib <unfixed> (embed)
1541            - nspr <unfixed> (embed)
1542            - php5 <unfixed> (embed)
1543            - polyml <unfixed> (embed)
1544            - qt4-x11 <unfixed> (embed)
1545            - rhino <unfixed> (embed)
1546            NOTE: code translated to Java
1547            - ruby1.8 <unfixed> (embed)
1548            - ruby1.9 <unfixed> (embed)
1549            - ruby1.9.1 <unfixed> (embed)
1550            - sdd <unfixed> (embed)
1551            - sfind <unfixed> (embed)
1552            - star <unfixed> (embed)
1553            - tinymux <unfixed> (embed)
1554            - virtualbox-ose <unfixed> (embed)
1555            - webkit <unfixed> (embed)
1556            - xulrunner <unfixed> (embed)
1557    
1558    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1559            - firegpg <unfixed> (embed)
1560            - enigmail <unfixed> (embed)
1561    
1562    ptmalloc (not packaged in Debian)
1563            - crystalspace <unfixed> (embed)
1564            - qt4-x11 <unfixed> (embed)
1565    
1566    svgalib
1567            - usplash <unfixed> (embed)
1568    
1569    bogl
1570            - usplash <unfixed> (embed)
1571    
1572    taglist
1573            - usplash <unfixed> (embed)
1574    
1575    portaudio
1576            - audacity <unfixed> (embed; bug #323711)
1577    
1578    nyquist
1579            - audacity <unfixed> (embed)
1580            NOTE: embeds a forked nyquist with support for a shared library
1581    
1582  gv:  vamp-plugin-sdk
1583  evince (ps/ tree from gv 3.5.8)          - audacity <unfixed> (embed)
 evince-gtk (not packaged in Debian)  
1584    
1585  libXbae:  wordpress
1586  libpawlib2-lesstif package (from Cernlib)          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1587            - wordpress-mu <removed> (fork)
1588    
1589  libXaw:  php5
1590  libpawlib2-lesstif package (from Cernlib)          - php4 <removed> (old-version)
1591    
1592  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  classpath
1593            - libgnucrypto-java <removed> (embed; bug #559788)
1594    
1595  libgd2:  libtool
1596  graphviz (lib/gd seems to be 2.0.33)          - apr <unfixed> (static; bug #489625)
1597            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1598            - arts <unfixed> (embed)
1599            - bochs 2.4.2-1 (embed; bug #560884)
1600            - camserv <unfixed> (embed)
1601            - collectd 4.8.2-1 (embed)
1602            - courier-authlib 0.58-4 (embed)
1603            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1604            - cvsnt 2.5.04.3236-1.2 (embed)
1605            - dico <not-affected> (Uses the system copy of ltdl)
1606            - freeradius 0.1+20010527-1 (embed)
1607            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1608            - ggobi 2.1.9~20091212-1 (embed)
1609            - glame 2.0.1-4 (embed)
1610            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1611            - gnash 0.8.7-2 (embed)
1612            - gnu-smalltalk <unfixed> (embed; bug #566777)
1613            - google-gadgets 0.10.5-0.3 (embed)
1614            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1615            - graphicsmagick 1.3.5-6 (embed)
1616            - graphviz 2.8-3 (embed)
1617            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1618            - guile-1.6 1.6.8-7 (embed)
1619            - hamlib <unfixed> (embed)
1620            - hercules 3.06-1.2 (embed)
1621            - jags 1.0.4-3 (embed; bug #560864)
1622            - kdelibs <unfixed> (embed)
1623            - libannodex <removed> (embed)
1624            - libextractor 0.5.23+dfsg-4 (embed)
1625            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1626            - libtunepimp 0.5.3-7.3 (embed)
1627            - mp4h 1.3.1-4.1 (embed)
1628            - naim <removed> (embed)
1629            - parser-mysql <unfixed> (embed)
1630            - pinball 0.3.1-11 (embed)
1631            - redland <unfixed> (embed)
1632            - siproxd <unfixed> (embed)
1633            - ski <unfixed> (embed)
1634            - synfig 0.62.00-1 (embed)
1635            - unixodbc 2.2.4-5 (embed)
1636            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1637            - clamav 0.95+dfsg-1 (embed)
1638            - imagemagick 6:6.2.3.1-1 (embed)
1639            - hypre 2.4.0b-5 (embed)
1640            - lam <unfixed> (embed)
1641            - openmpi <unfixable> (embed; bug #559386)
1642            - parser <unfixed> (embed)
1643            - pdsh 2.18-5 (embed; bug #560892)
1644            - sbnc 1.2-8 (embed)
1645            - sdcc <unfixed> (embed)
1646            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1647            - proftpd-dfsg <unfixed> (embed; bug #561748)
1648            - babel 1.4.0.dfsg-5 (embed)
1649            - libprelude 0.9.14-2 (embed)
1650            - heartbeat 2.1.4-7 (embed)
1651            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1652            NOTE: might've been fixed earlier
1653            - gcc-* <unknown> (embed)
1654    
1655    ocamlgsl
1656            - orpie 1.5.1-7.1 (embed; bug #550058)
1657    
1658    xdotool
1659            - keynav <unfixed> (embed; bug #560103)
1660    
1661    bulletphysics (not packaged; http://www.bulletphysics.org/)
1662            - supertuxkart <unfixed> (embed)
1663            - blender <unfixed> (embed)
1664    
1665  rar:  ghostscript
1666  unrar-nonfree          - gs-gpl <removed> (old-version)
1667    
1668  unrar-free: (maybe this code is derived from the original rar, too?)  icedove
1669  clamav (seems to be disabled in default config)          - thunderbird <removed> (old-version)
1670    
1671  mplayer (DirectMedia Object loader):  sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1672  xine-lib (src/libw32dll/)          - jquery <unfixed> (embed)
 vlc (modules/codec/dmo/)  
1673    
1674  libwpd (WordPerfect converter):  sed
1675  openoffice.org          - ssed <unfixed> (fork)
1676    
1677  fsplib (http://sourceforge.net/projects/fsp/):  phpatomlib (http://code.google.com/p/phpatomlib)
1678  gftp (lib/fsplib version 0.3)          - wordpress <unfixed> (embed)
1679    
1680    Services_JSON (http://pear.php.net/package/Services_JSON)
1681            - wordpress <unfixed> (embed)
1682    
1683    phpass (http://www.openwall.com/phpass/)
1684            - gallery2 <unfixed> (embed)
1685            - wordpress <unfixed> (embed)
1686            - typo3-src <unfixed> (modified-embed)
1687            NOTE: file refers to drupal, maybe there's a copy somewhere there
1688            NOTE: a copyright owner search didn't match anything
1689            - libauthen-passphrase-perl <unfixable> (fork)
1690            NOTE: perl implementation of phpass
1691    
1692    squirrelmail
1693            - wordpress <unfixed> (embed)
1694            NOTE: class-pop3.php
1695    
1696    ezSQL (http://www.woyano.com/jv/ezsql)
1697            - wordpress <unfixable> (fork)
1698            NOTE: wp-db.php
1699    
1700    Diff.php (Clay Loveless' version/killersoft.com)
1701            - php-versioncontrol-svn <unfixed>
1702    
1703    libm (provided by libc)
1704            - spring <unfixed> (embed)
1705            NOTE: embedded by embedded copy of streflop
1706            - aide <unfixed> (static)
1707            - busybox <unfixed> (static)
1708            - mindi-busybox <unfixed> (static)
1709            - qemu <unfixed> (static)
1710            NOTE: qemu-user-static
1711            - tuxonice-userui <unfixed> (static)
1712            - zsh <unfixed> (static)
1713            NOTE: zsh-static
1714    
1715    streflop
1716            - spring <unfixed> (embed)
1717    
1718    minizip
1719            - spring <unfixed> (embed)
1720    
1721    oscpack
1722            - spring <unfixed> (embed)
1723    
1724    hpiutil2
1725            - spring <unfixed> (embed)
1726    
1727    p7zip
1728            - spring <unfixed> (embed)
1729    
1730    pythonqt (doesn't seem to be python-qtN, unknown source)
1731            - fontmatrix <unfixed> (embed)
1732            - elmerfem <unfixed> (embed)
1733    
1734    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1735            - docvert <unfixed> (embed)
1736            - jifty <unfixed> (embed)
1737            - kdenetwork <unfixed> (embed)
1738            - mediatomb <unfixed> (embed)
1739            - plastex <unfixed> (embed)
1740            - plone3 <removed> (embed)
1741            - python-chaco <unfixed> (embed)
1742            - python-docutils <unfixed> (embed)
1743            - s5 <unfixed> (embed)
1744            - zope2.10 <unfixed> (embed)
1745            - zope2.11 <removed> (embed)
1746            - cython <not-affcted> (embed)
1747            NOTE: part of documentation, which is not installed into the binary package
1748    
1749    python-docutils
1750            - zope2.10 <unfixed> (embed)
1751            - zope2.11 <removed> (embed)
1752    
1753    tesseract
1754            - ocropus <unfixed> (static)
1755    
1756    antlr
1757            - kdevelop <unfixed> (embed)
1758    
1759    libxerces2
1760            - openjdk-6 <unfixed> (embed)
1761    
1762    kfreebsd-8
1763            - kfreebsd-7 <unfixed> (old-version)
1764            - kfreebsd-6 <removed> (old-version)
1765    
1766    ruby1.9.1
1767            - ruby1.9 <unfixed> (old-version)
1768            - ruby1.8 <unfixed> (old-version)
1769    
1770    maildrop
1771            - courier <unfixed> (embed) [./maildrop]
1772    
1773    glee
1774            - warzone2100 <unfixed> (embed)
1775    
1776    phing
1777            - symfony <unfixed> (embed)
1778    
1779    pake
1780            - symfony <unfixed> (embed)
1781    
1782    propel
1783            - symfony <unfixed> (embed)
1784    
1785    creole
1786            - symfony <unfixed> (embed)
1787    
1788    hfsutils
1789            - cdrkit <unfixed> (embed; bug #570187)
1790            NOTE: embeds hfsutils code in genisoimage
1791    
1792    cdrkit
1793            - grub2 <unfixed> (embed; bug #570156)
1794            NOTE: genisoimage imported into grub-mkisofs
1795    
1796    kdebase-workspace
1797            - kdebase <unfixed> (old-version)
1798    
1799    file
1800            - php5 <unfixable> (modified-embed)
1801            [lenny] - php5 <not-affected>
1802    
1803    cdb
1804            - php5 <unfixed> (embed)
1805    
1806    libmbfl (itp: #570708)
1807            - php5 <unfixed> (embed)
1808            NOTE: PHP is actually the current upstream, ITP is of that code
1809    
1810    libonig
1811            - php5 5.3.2-1 (embed)
1812    
1813    xmlrpc-epi
1814            - php5 <unfixed> (embed)
1815    
1816    swt-gtk
1817            - eclipse <unfixed> (embed; bug #538808)
1818    
1819    txt2html
1820            - wml 2.0.11ds2-1 (embed)
1821    
1822    ca-certificates
1823            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1824    
1825    openexr
1826            - freeimage <unfixed> (embed)
1827    
1828    libmng
1829            - freeimage <unfixed> (embed)
1830    
1831    openjpeg
1832            - freeimage <unfixed> (embed)
1833    
1834    libjpeg6b
1835            - freeimage <unfixed> (embed)
1836    
1837    libjpeg (don't know what exact version)
1838            - dcmtk <unfixed>
1839            - gdcm <unfixed>
1840            - insighttoolkit <unfixed>
1841            - openarena <unfixed>
1842            - outguess <unfixed>
1843            - squeak-vm <unfixed> (embed)
1844            - tremulous <unfixed>
1845            - tuxonice-userui <unfixed> (static)
1846            - fpc <unfixed> (static)
1847            - lazarus <unfixed> (static)
1848            NOTE: inherited from fpc, see #472304
1849            - mseide-msegui <unfixed> (static)
1850            NOTE: inherited from fpc, see #472304
1851            - easymp3gain <unfixed> (static)
1852            NOTE: inherited from fpc, see #472304
1853            - winff <unfixed> (static)
1854            NOTE: inherited from fpc, see #472304
1855            - texlive-bin <unfixed> (embed)
1856    
1857    libfile-copy-recursive-perl
1858            - r-base <unfixed> (embed; bug #577427)
1859            - r-base-core-ra <unfixed> (embed; bug #577429)
1860    
1861    delimmatch
1862            - r-base <unfixed> (embed; bug #577433)
1863            - r-base-core-ra <unfixed> (embed; bug #577434)
1864    
1865    libsmf (ITP: #572558)
1866            - denemo <unfixed> (embed)
1867            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1868    
1869    libselinux
1870            - dpkg 1.15.6 (static)
1871    
1872    xinha (ITP: #479708)
1873            - horde3 <unfixed>
1874            - serendipity <unfixed>
1875            - openacs <unfixed>
1876            - dotlrn <unfixed>
1877    
1878    dvipng
1879            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1880    
1881    dvipdfmx
1882            - texlive-bin <unfixed> (embed)
1883    
1884    lcdf-typetools
1885            - texlive-bin <unfixed> (embed)
1886    
1887    tex4ht
1888            - texlive-bin <unfixed> (embed)
1889    
1890    freetype
1891            - texlive-bin <unfixed> (embed)
1892    
1893  librpcsecgss:  freetype2
1894  krb5          - texlive-bin <unfixed> (embed)
1895    
1896  jasper:  silgraphite
1897  ghostscript          - texlive-bin <unfixed> (embed)
 gs-gpl  
1898    
1899  monotone embeds lots of things:  unzip
1900  liblua          - texlive-bin <unfixed> (embed)
 libidn  
 libsqlite3  
 libbotan  
 NetXX  
 pcre (starting from 0.37)  
Legend:
Removed from v.7054  
changed lines
  Added in v.14719
  ViewVC Help
Powered by ViewVC 1.1.5