/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1755 by jmm-guest, Thu Sep 1 12:43:22 2005 UTC revision 14744 by gilbert-guest, Tue May 25 03:38:24 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
7  kdegraphics/kpdf  
8  tetex-bin  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embeds a copy of the library into another source package)
19          modified-embed (embeds a code copy that differs from upstream code)
20          fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30            - pdftohtml <unknown>
31            [sarge] - pdftohtml <unfixed>
32            [etch] - pdftohtml <unfixed>
33            NOTE: has been replaced by poppler-utils
34            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35            - texlive-base 3.0-12 (embed)
36            - texlive-bin 2007-1 (embed)
37            - koffice 1:2.0.0-1 (embed; bug #436163)
38            - libextractor 0.5.12-1 (embed)
39            NOTE: libextractor is using its own pdf decoder now
40            - ipe <unfixed> (embed)
41            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
42            - ruby-gnome2 <unknown> (embed)
43            - pdfedit <unfixed> (embed; bug #510794)
44            - swftools <removed> (embed; bug #551293)
45            - poppler <unfixable> (fork)
46    
47    ppmd
48            - libcomplearn-mod-ppmd <unfixed> (fork)
49            NOTE: discussion in #458152
50    
51    libevent
52            - transmission 1.71-1 (embed; bug #529372)
53    
54    lrmi
55            - read-edid 2.0.0-1 (embed; bug #495131)
56            - s3switch <unfixed> (embed)
57            - xresprobe <unfixed> (embed)
58            - zhcon <unfixed> (embed)
59    
60    peercast
61            - gnome-peercast <removed> (embed)
62            [etch] - gnome-peercast <unfixed> (embed)
63    
64    silc-toolkit
65            - silc-client 1.1~beta6-1 (embed)
66    
67    icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71    libusb
72            - argyll <unfixed> (embed)
73    
74    dietlibc
75            - ccontrol 0.9.1+20071204-1 (static)
76    
77    libmikmod
78            - sdl-mixer1.2 <unfixed> (embed)
79            TODO: report bug
80    
81    libiax
82            - iaxmodem <unfixable> (embed; bug #548885)
83    
84    spandsp
85            - iaxmodem <unfixable> (embed; bug #548885)
86    
87    python-paramiko
88            - fabric 0.9.0-2 (embed; bug #561398)
89    
90    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
91            - dpkg 1.15.6 (static)
92            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
93            - rsync <unfixed> (embed)
94            - cherokee <unfixed> (embed)
95            NOTE: somehow derived code base
96            - mono <unfixed> (embed)
97            TODO: check mozilla
98            - Linux kernels <unfixed> (embed)
99            - pvpgn 1.7.8-2 (embed)
100            - mrtg 2.12.2-1 (embed)
101            - rpm <unknown> (embed)
102            NOTE: pinged anibal since when rpm was fixed
103            - tuxcmd-modules <unfixed> (embed)
104            - zsync <unfixed>
105            - tra <unfixed>
106            - sash <unfixed>
107            - nsis <unfixed>
108            - mseide-msegui <unfixed>
109            NOTE: mseide
110            - mirrordir <unfixed>
111            - poco <unfixed>
112            - klibc <unfixed>
113            - ghostscript <unfixed>
114            - freeimage <unfixed>
115            - clamav <unfixed> (fork)
116            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
117            - tuxonice-userui <unfixed> (static)
118            - plt-scheme <unfixed>
119            - perl <unfixed>
120            - paraview <unfixed>
121            - velvet 0.7.56~nozlibcopy-1
122            - gcvs <unfixed>
123            - dump <unfixed>
124            - aide <unfixed> (static)
125            - dar <unfixed> (static)
126            - avfs <unfixed>
127            - fpc <unfixed>
128            - winff <unfixed>
129            NOTE: inherited from fpc, see #472304
130            - lazarus <unfixed>
131            NOTE: inherited from fpc, see #472304
132            - erlang <unfixed> (embed)
133            - gamera 3.2.3-1 (embed)
134            - python2.4 <unfixed> (embed; bug #553403)
135            - python2.5 <unfixed> (embed; bug #553403)
136            - texlive-bin <unknown> (embed)
137    
138    dulwich
139            - hg-git 0.1.0-1 (embed; bug #541996)
140    
141    libvigraimpex
142            - hugin <unfixed> (embed; bug #542259)
143            - enblend-enfuse <unfixed> (embed; bug #542258)
144            - gamera 3.2.3-1 (embed)
145    
146    libbz2
147            - dpkg 1.15.6 (static)
148            - amd64-libs <unfixed> (static)
149            NOTE: let's call it "static"
150            - dar <unfixed> (static)
151            - dump <unfixed> (static)
152            - unalz <unfixed> (embed)
153            NOTE: has code, by the maint, to use the system version but links against the internal copy
154    
155    libyahoo2
156            - centerim <unfixed> (embed; bug #559783)
157    
158    libmsn
159            - centerim <unfixed> (embed; bug #559783)
160    
161    libgadu
162            - centerim <unfixed> (embed; bug #559783)
163            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
164            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
165            - kdenetwork 4:3.3.2-5 (embed)
166            NOTE: from kdenetwork: kopete
167            - ekg 1:1.8~rc0-1 (embed)
168            - kadu 0.6.0.2-3 (embed; bug #504430)
169            - gadu <itp> (embed)
170    
171    xmlrpc (which package is the "origin" of this code?)
172            - drupal <unfixed> (embed)
173            - phpgroupware <unfixed> (embed)
174            - egroupware <unfixed> (embed)
175            - phpwiki <unfixed> (embed)
176            - php4 <removed> (embed)
177            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
178    
179    shtool (affects build-time only)
180            - mysql-ocaml <unfixed> (embed)
181            - php4 <removed> (embed)
182            - php5 <unfixed> (embed)
183    
184    xulrunner
185            - iceape <unfixed> (embed; bug #561749)
186            - iceweasel 2.0.0.19 (embed)
187            - icedove <unfixed> (embed; bug #561750)
188            - kompozer <unfixed> (embed; bug #532168)
189            - galeon 2.0.2-4 (embed)
190            - epiphany-browser 2.14.3-8 (embed)
191            - conkeror 0.9~git080629-2 (embed)
192            - kazehakase 0.4.2-1 (embed)
193    
194    xli
195            - xloadimage <unfixed> (embed)
196    
197    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
198            - openmotif <unfixed> (embed)
199            - libxpm <unfixed> (embed; bug #575750)
200    
201    kerberized apps with BSD origin
202            - krb4 <removed> (embed)
203            - krb5 <unfixed> (embed)
204            - heimdal <unfixed> (embed)
205    
206    grip (which pkg is the origin?)
207            - libcdaudio <unfixed>
208            - grip <unfixed>
209            - gnome-vfs <unfixed>
210            TODO: check vfs2 as well
211    
212    fudforum
213            [etch] - phpgroupware <unfixed> (embed)
214            NOTE: phpgroupware-fudforum
215            [sarge] - egroupware-fudforum <removed> (embed)
216    
217    libbsd
218            - rdate 1:1.2-3 (embed)
219            - atheme-services <unfixed>
220            - libbsd-arc4random-perl <unfixed>
221            - isakmpd <unfixed>
222            - bsdgames <unfixed> (embed)
223            - bsd-mailx <unfixed> (embed)
224            - netcat-openbsd <unfixed> (embed; bug #550611)
225            - openssh <unfixed> (embed)
226            - unworkable <unfixed> (embed)
227    
228    cvs
229            - gcvs <unfixed> (embed)
230            NOTE: see cvsunix/src in tarball
231    
232    pcre3
233            - php4 <removed> (embed)
234            - analog 2:5.23-0woody1 (embed)
235            - goffice <unfixed> (embed)
236            NOTE: libgoffice-*
237            - vfu 4.06-4.1 (embed; bug #450754)
238            - tf5 5.0beta7-1 (embed)
239            - monotone 0.43-1 (embed)
240            NOTE: this only affects versions >= 0.37
241            - glib2.0 2.15.2-1 (embed)
242            - apache2 2.0.53-4 (embed)
243            - exim4 4.10-0.srh20.12 (embed)
244            - yacas <unfixed> (embed)
245            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
246            - gtamsanalyzer.app 0.42-5 (embed)
247            - tin 980117-1 (embed)
248            - kazehakase 0.5.2-1
249            - webkit 1.0.1-1 (embed)
250            - qt4-x11 <unfixed> (embed)
251            NOTE: embedded via webkit copy
252            - erlang <unfixed> (embed)
253            - ssed <unfixed> (embed)
254            - ircd-hybrid <unfixed> (static)
255            - emboss <unfixd>
256            - cherokee <unfixed> (embed)
257            - oftc-hybrid <unfixed> (embed)
258            - ratbox-services <unfixed> (embed)
259            - squeak-vm <unfixed> (embed)
260            - tinymux <unfixed> (embed)
261    
262    tiff
263            - wxwindows2.4 2.2.1 (embed)
264            - gamera 3.2.3-1 (embed)
265            - freeimage <unfixed> (embed)
266            - libtk-img <unfixed> (embed)
267            NOTE: there are two copies, one under tiff/ other under libtiff/
268            - gdal <unfixed>
269    
270    uudeview
271            - libconvert-uulib-perl <unfixed> (embed)
272            - pan <unfixed> (embed)
273    
274    sqlite (not affected by security vulnerabilities so far)
275            - amarok <unfixed> (embed)
276            - monotone 0.43-1 (embed)
277            - iceweasel <unfixed> (embed)
278            - heimdal <unfixed> (embed; bug #559616)
279    
280    util-linux/mount
281            - loop-aes-utils <unfixed> (embed)
282            NOTE: contains code from util-linux' mount in the mount-aes-udeb
283    
284    sylpheed
285            - sylpheed-claws <unfixed> (fork)
286    
287    phpsysinfo
288            - egroupware <unfixed> (embed)
289            - phpgroupware <unfixed> (embed)
290    
291    phpldapadmin
292            [sarge] - egroupware <unfixed> (embed)
293            NOTE: removed from egroupware after sarge
294    
295    chmlib
296            - kchmviewer <unknown> (embed)
297    
298    ffmpeg (libavcodec/libavformat)
299            - mplayer 1.0~rc2-14 (embed; bug #395252)
300            - kino 1.0.0-1
301            - vlc <not-affected> (Links dynamically since initial release)
302            - smilutils 0.3.0-10
303            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
304            - motion 3.1.19-1
305            - gstreamer0.10-ffmpeg 0.10.3-2
306            - xmovie <removed> (static)
307            TODO: gimp-gap (potentially using ffmpeg code as well)
308            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
309            - audacity 1.3.7-2 (embed; bug #512278)
310    
311    faad2
312            - mplayer 1.0~rc2-20 (embed)
313            - avifile <unfixed> (embed; bug #538750)
314            - ffmpeg-debian <removed> (embed)
315    
316    libmad (MPEG decoding lib)
317            - xine-lib <unfixed> (embed)
318            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
319            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
320    
321    libdts
322            - xine-lib <unfixed> (embed)
323    
324    flac
325            - xine-lib <unfixed> (embed)
326    
327    liba52
328            - a52dec <unfixed> (embed)
329            - xine-lib <unfixed> (embed)
330    
331    mpeg2dec (libmpeg2)
332            - xine-lib <unfixed> (embed)
333    
334    libmpeg3
335            - squeak-vm <unfixed> (embed)
336    
337    libntlm
338            - wget <unfixed> (fork; bug #550436)
339            - curl <unfixed> (fork; bug #550437)
340            - cntlm <unfixed> (fork; bug #550438)
341    
342    uw-imap
343            - pine <unfixed> (embed)
344            - alpine <unfixed> (embed)
345    
346    imagemagick
347            - graphicsmagick <unfixed> (fork)
348    
349    python-urlgrabber
350            - mercurial <unfixed> (embed; bug #531062)
351            - w3af <unfixed> (embed; bug #555372)
352            [experimental] - harvestman <unfixed> (embed; bug #555373)
353    
354    beautifulsoup
355            - python-mechanize <unfixed> (embed; bug #555349)
356            - zope2.11 <removed> (embed; bug #555350)
357            - twill <unknown> (embed)
358    
359    halibut
360            - nsis <unfixed> (fork)
361    
362    libghttp
363            - hotway <unfixed> (embed)
364    
365    libsndfile
366            - ardour 1:2.7.1-1 (embed)
367    
368    glibmm2.4
369            - ardour 1:2.7.1-1 (embed)
370    
371    libgnomecanvasmm2.6
372            - ardour 1:2.7.1-1 (embed)
373    
374    libsigc++-2.0
375            - ardour 1:2.7.1-1 (embed)
376    
377    soundtouch
378            - ardour 1:2.7.1-1 (embed)
379    
380    libmms
381            - xine-lib <unfixed> (embed)
382            - mimms <unfixed> (embed)
383    
384    fckeditor
385            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
386            - moin 1.8.2-2 (embed; bug #452599)
387            - karrigell <removed> (embed; bug #452598)
388            - gforge 4.6.99+svn6225-1 (embed)
389            - request-tracker3.8 <unfixed> (embed)
390            - otrs2 <unfixed> (embed)
391    
392    ipatlas (not packaged in Debian)
393            - moodle <unfixed> (embed; bug #507185)
394    
395    libphp-phpmailer
396            - moodle <unfixed> (embed; bug #507185)
397            - mahara <unfixed> (embed)
398            - symfony <unfixed> (embed; bug #566778)
399            [etch] - phpgroupware <unfixed> (embed)
400            NOTE: phpgroupware-felamimail is only in etch
401            - egroupware <unfixed> (embed; bug #504283)
402            - glpi <unfixed>
403    
404    htmlArea (not packaged in Debian)
405            - moodle <unfixed> (embed)
406    
407    giflib
408            - wine <unfixed> (embed; bug #466181)
409    
410    bennu (not packaged in Debian, http://bennu.sourceforge.net)
411            - moodle <unfixed> (embed)
412    
413    smarty
414            - moodle 1.8.2-2 (embed; bug #471158)
415            - gallery2 2.2.5-2 (embed; bug #471160)
416            - mahara 0.9.2-2 (embed; bug #471201)
417            - gosa 2.4beta1-1 (embed; bug #471200)
418    
419    TinyMCE
420            - wordpress 2.5.1-3 (embed; bug #478257)
421            - moodle <unfixed> (embed; bug #507185)
422            - knowledgeroot <unfixed> (embed)
423            - joomla <itp> (bug #326398)
424    
425    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
426            - scite <unfixed> (embed)
427            - qscintilla <unfixed> (embed)
428            - qscintilla2 <unfixed> (embed)
429            - geany <unfixed> (fork)
430            - anjuta <unfixed> (embed)
431    
432    libphp-adodb
433            - moodle <unfixed> (embed; bug #507185)
434            NOTE: also AdoDB-XML Schema
435            - gallery2 <unfixed> (embed)
436            - phppgadmin <unfixed> (embed)
437            - egroupware <unfixed> (embed)
438            - phpwiki <unfixed> (embed)
439            - torrentflux 2.0beta1-2 (embed)
440            - ipplan <unfixed> (embed)
441            - typo3-src <unfixed> (embed)
442            - cacti <unknown> (embed)
443            [sarge] - cacti <unfixed> (embed)
444            NOTE: dependency exists, but internal version is used
445            - gforge 4.7~rc2-6 (embed)
446            - mahara <unfixed> (embed)
447    
448    gzip
449            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
450            - klibc <unfixed> (embed)
451            NOTE: based on linux-kernel gzip code
452            - busybox <unfixed> (embed)
453            - pristine-tar <unfixed> (modified-embed)
454            NOTE: compression code only, not uncompression
455    
456    neon
457            - cadaver 0.22.3+debian-1 (embed; bug #188381)
458            - gnome-vfs2 <unfixed> (embed; bug #395874)
459            [etch] - litmus <unfixed> (embed; #395875)
460            - litmus <removed> (embed; #395875)
461            [sarge] - screem <unfixed> (embed)
462            - sitecopy 1:0.16.0-1 (embed; bug #395876)
463            [etch] - tla <unfixed> (embed; bug #395877)
464            [sarge] - tla <unfixed> (embed; bug #395877)
465    
466    libmodplug
467            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
468    
469    libvncserver
470            - vino <unfixed> (embed)
471    
472    putty
473            - filezilla <unfixed> (embed)
474    
475    tinyxml (not packaged in Debian; itp bug #531968)
476            - filezilla <unfixed>
477            - crystalspace <unfixed> (embed)
478            - libwfut <unfixed> (embed)
479            - rarian <unfixed> (embed)
480            - bulletml <unfixed> (embed)
481            - pokerth <unfixed> (embed)
482            - qutecom <unfixed> (embed)
483            - sofa-framework <unfixed> (embed)
484            - yate <unfixed> (embed)
485            - antigrav <unfixed> (embed)
486            - balder2d <unfixed> (embed)
487            - cal3d <unfixed> (embed)
488            - criticalmass <unfixed> (embed)
489            - ember <unfixed> (embed)
490            - epiphany <unfixed> (embed)
491            - gambit <unfixed> (embed)
492            - noiz2sa <unfixed> (embed)
493            - ogre <unfixed> (embed)
494            - opencity <unfixed> (embed)
495            - openmovieeditor <unfixed> (embed)
496            - pouetchess <unfixed> (embed)
497            - tecnoballz <unfixed> (embed)
498            - trigger-rally <unfixed> (embed)
499            - xmoto <unfixed> (embed)
500            - mapnik <unknown> (embed)
501            NOTE: uses a different XML parser by default
502            - rrootage 0.23a-6 <embed>
503            NOTE: links to libbulltetml
504            - boson <unknown> (embed)
505            NOTE: the embedded code is unused
506    
507    gv
508            - evince <unfixed> (embed)
509            NOTE: ps/ tree from gv 3.5.8
510            NOTE: evince-gtk is affected (a component of evince source package)
511    
512    libXbae
513            - paw <removed> (embed)
514            [etch] - paw <unfixed> (embed)
515    
516    libgtkhtml
517            - claws-mail-extra-plugins <unfixed> (fork)
518    
519    libXaw
520            - paw <removed> (embed)
521            [etch] - paw <unfixed> (embed)
522            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
523    
524    libgd2
525            - graphviz <unfixed> (embed)
526            NOTE: lib/gd seems to be 2.0.33
527            - wml 2.0.11ds2-1 (embed)
528            - libwmf <unfixed> (embed)
529            NOTE: derived from gd 1.6.3
530            - texlive-bin 2009-1 (embed)
531    
532    rar
533            - unrar-nonfree <unfixed> (embed)
534    
535    unrar-free (maybe this code is derived from the original rar, too?)
536            - clamav <unfixed> (embed)
537            NOTE: seems to be disabled in default config
538    
539    mplayer (DirectMedia Object loader)
540            - xine-lib <unfixed> (embed)
541            NOTE: src/libw32dll/
542            - vlc <unfixed> (embed)
543            NOTE: modules/codec/dmo/
544            - mplayer 1.0~rc2-20 (embed)
545    
546    libwpd (WordPerfect converter)
547            - openoffice.org <unfixed> (embed)
548    
549    fsplib (http://sourceforge.net/projects/fsp/)
550            - gftp <unfixed> (embed)
551            NOTE: lib/fsplib version 0.3
552    
553    sprng
554            - tree-puzzle <unfixed> (embed)
555    
556    librpcsecgss
557            - krb5 <unfixed> (embed)
558    
559    jasper
560            - ghostscript 8.64~dfsg-2 (embed)
561    
562    libiris
563            - psi <unfixed> (embed)
564            - kdenetwork <unfixed> (embed)
565            NOTE: kopete embeds libiris but links dynamically to libidn
566            - kdegames <unfixed> (embed)
567            NOTE: ksirk/kde4
568    
569    libidn
570            - monotone 0.43-1 (embed)
571            - psi <unfixed> (embed)
572            NOTE: psi embeds libiris which embeds libidn
573            - kdegames <unfixed> (embed)
574            NOTE: kdegames/kde4 embeds libiris which embeds libidn
575    
576    lua5.1
577            - monotone 0.43-1 (embed)
578            - nmap 5.00-1 (embed; bug #527997)
579            [lenny] - nmap <unfixed> (embed; bug #527997)
580            - ocropus <unfixed> (embed)
581            - enigma <unfixed> (embed)
582            NOTE: requires lua built with C++
583            - freeciv <unfixed> (embed)
584            - spring <unfixed> (embed)
585    
586    libbotan
587            - monotone 0.43-1 (embed)
588    
589    NetXX
590            - monotone 0.43-1 (embed)
591    
592    libgc
593            - mono <unfixed> (embed)
594    
595    lzma
596            - p7zip <unfixed> (embed)
597            - xz-utils <unfixed> (fork)
598    
599    lzo
600            - grub2 <unfixed> (embed)
601    
602    yassl
603            - mysql-dfsg-5.0 <unfixed> (embed)
604            - mysql-dfsg-5.1 <unfixed> (embed)
605    
606    pax code
607            - tar <unfixed> (embed)
608            - cpio <unfixed> (embed)
609    
610    t1lib
611            - tetex-bin 2.0.2-1 (embed)
612            - texlive-bin <unknown> (embed)
613    
614    guichan
615            - boswars <unfixed> (embed)
616            NOTE: maintainer notified us, working on it
617    
618    tolua
619            - boswars <unfixed> (embed)
620            NOTE: maintainer notified us, working on it
621            NOTE: actually tolua++
622            - ocropus <unfixed> (embed)
623            NOTE: actually tolua++
624            - freeciv <unfixed> (embed)
625            NOTE: actually tolua++
626            - enigma <unfixed> (embed)
627    
628    asio-dev
629            - luxrender <removed> (embed)
630    
631    xine-lib
632            - vlc <unfixed> (embed)
633            NOTE: only parts included in modules/access/rtsp
634    
635    netpbm
636            - tcl8.3 <unfixed> (embed)
637            - tcl8.4 <unfixed> (embed)
638            - tcl8.5 <unfixed> (embed)
639            NOTE: generic/tkImgGIF.c
640    
641    tk8.5
642            - tk8.0 <removed> (old-version)
643            - tk8.3 <unfixed> (old-version)
644            - tk8.4 <unfixed> (old-version)
645            - perl-tk <unfixable> (fork)
646    
647    samba
648            - mc 2:4.6.2~git20080311-1 (embed)
649            NOTE: maintainer is aware of this, currently searching a solution
650    
651    plib1.8.4c2
652            - boson <unfixed> (fork)
653            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
654    
655    fribidi
656            - quesoglc <unfixed> (embed)
657            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
658    
659    glew
660            - quesoglc <unfixed> (embed; bug #489341)
661            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
662            - trigger 0.5.2.1-2 (embed)
663            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
664            - trigger-rally 0.5.2.1-2 (embed)
665            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
666    
667    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
668            - transcend <unfixed> (embed)
669            - cultivation <unfixed> (embed)
670            - passage <unfixed> (embed)
671            - gravitation <unfixed> (embed)
672    
673    tar
674            - libarchive <unfixed> (embed)
675            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
676    
677    cpio
678            - libarchive <unfixed> (embed)
679            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
680    
681    kde4libs
682            - kdelibs <unfixable> (old-version)
683    
684    webkit
685            - qt4-x11 <unfixed> (embed; bug #479851)
686            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
687            - kde4libs <unfixable> (fork)
688            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
689            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
690    
691    ftgl
692            - blender 2.46+dfsg-1 (embed)
693    
694    wv
695            - abiword <unfixed>
696    
697    qemu
698            - kvm <removed> (embed; bug #543159)
699            - qemu-kvm <unfixed> (embed; bug #560853)
700            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
701            - xen-3 3.4.2-2 (embed; bug #560856)
702            - xen-unstable <unfixed> (embed; bug #560856)
703    
704    vgabios
705            - kvm <removed> (embed; bug #489442)
706            - qemu-kvm <unfixed> (embed)
707    
708    bochs
709            - kvm <removed> (embed; bug #489442)
710            - qemu-kvm <unfixed> (embed)
711    
712    speex
713            - vorbis-tools <unfixed> (embed)
714            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
715            - gst-plugins-good0.10 <unfixed> (embed)
716            - xine-lib <unfixed> (embed)
717            - libfishsound <unfixed> (embed)
718            - libannodex <removed> (embed)
719            - vlc <unfixed> (embed)
720            - xmms-speex <unfixed> (embed)
721            - libsdl-sound1.2 <unfixed> (embed)
722            - sweep <unfixed> (embed)
723    
724    libreadline
725            - magic <itp> (old-version)
726    
727    opcode
728            - ode <unfixed> (embed)
729            NOTE: opcode is not a package in debian, it is just embedded
730            NOTE: http://www.codercorner.com/Opcode.htm
731    
732    gimpact
733            - ode <unfixed> (embed)
734            NOTE: gimpact is not a package in debian, it is just embedded
735            NOTE: http://gimpact.sf.net
736    
737    mochikit
738            - mahara <unfixed> (embed)
739            NOTE: they require extra patches, still unmerged upstream
740            - ntop <unfixed> (embed)
741            - coherence 0.6.2-1 (embed)
742            - paste <unfixed> (embed)
743            - turbogears <unfixed> (embed)
744            - plone3 <removed> (embed)
745            - xulrunner <unfixed> (embed)
746            - libjifty-plugin-chart-perl <unfixed> (embed)
747            - sabnzbdplus <unfixed> (embed)
748            - tgmochikit <unfixed> (embed)
749    
750    prototypejs
751            - netbeans-ide 6.0.1+dfsg-2 (embed)
752            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
753            - webcit <unfixed> (embed; bug #555219)
754            - asterisk 1:1.6.2.0~rc3-1 (embed)
755            - libjson-ruby 1.1.4-1 (embed; bug #555224)
756            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
757            - horde3 <unfixed> (embed)
758            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
759            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
760            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
761            - ebug-http <removed> (embed; bug #555236)
762            - libaws 2.7-1 (embed; bug #555222)
763            - phpgedview <removed> (embed)
764            - poker-network 1.7.6-1 (embed; bug #555238)
765            - rails 2.1.0-6 (embed)
766            - wordpress 2.5.0-2 (embed; bug #555243)
767            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
768            TODO: search through all of the other zope packages
769            - ampache 3.4.1-2 (embed)
770            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
771            - hobix 0.5~svn20070319-4 (embed; bug #555247)
772            - zabbix 1.6.6-4 (embed; bug #555250)
773            - chora2 <unfixed> (embed; bug #555253)
774            - gollem <unfixed> (embed; bug # 555254)
775            - jscropperui 1.2.1-1 (embed; bug #555257)
776            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
777            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
778            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
779            - activeldap <unfixed> (embed)
780            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
781            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
782            - otrs2 2.3.4-6 (embed; bug #555267)
783            - webcalendar 1.2~b1-2 (embed; bug #555269)
784            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
785            - jifty 0.90519-1 (embed; bug #555271)
786            - jquery 1.4-1 (embed; bug #555272)
787            - passenger 2.2.5debian1-1 (embed; bug #555273)
788            - plone3 <removed> (embed; bug #555275)
789            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
790            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
791            - xulrunner <unfixed> (embed)
792            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
793    
794    gdb
795            - insight <unfixed> (embed)
796    
797    e2fsprogs
798            - ldiskfsprogs <unfixable> (fork)
799    
800    quazip (not packaged in Debian)
801            - qcake <unfixed> (embed)
802            NOTE: starting with upstream version 0.6.4
803    
804    exo
805            - pcmanfm <unfixed> (embed; bug #499677)
806            NOTE: slightly modified source code
807    
808    java
809            - openjdk-6 <unfixed>
810            - sun-java5 <unfixed>
811            - sun-java6 <unfixed>
812    
813    libphp-snoopy
814            - ampache 3.4.1-2 (embed; bug #504169)
815            - gforge 4.6.99+svn6094-2 (embed)
816            - mahara 1.0.5-2 (embed; bug #504170)
817            - pixelpost 1.7.1-5 (embed; bug #504171)
818            - mediamate 0.9.3.6-5 (embed; bug #504172)
819            - opendb <removed> (embed; bug #504173)
820            [etch] - opendb <unfixed> (embed; bug #504173)
821            - wordpress 2.5.1-9 (embed; bug #443948)
822            - moodle <unfixed> (embed; bug #507185)
823            [etch] - phpgroupware <unfixed> (embed)
824            NOTE: phpgroupware-felamimail
825            - magpierss 0.72-3 (embed; bug #431089)
826    
827    jquery
828            - zekr <unfixed> (embed)
829            - wordpress <unknown> (embed)
830            - yocto-reader <unfixed> (embed)
831            - textpattern <unfixed> (embed)
832            - genshi 0.5.1-1 (embed)
833            NOTE: compressed file under examples/ dir
834            - prewikka <unfixed> (embed)
835            - libramaze-ruby <unfixed> (embed)
836            - drupal5 <unfixed> (embed)
837            - b2evolution <unfixed> (embed)
838            - wesnoth <unfixed> (embed)
839    
840    tablesorter (jquery plugin, not packaged yet)
841            - wesnoth <unfixed> (embed)
842    
843    kses
844            - wordpress <unfixed> (embed; bug #504242)
845            NOTE: their copy has all methods renamed to wp_<foo>
846            NOTE: kses isn't in Debian, RFP: #504240
847            - moodle <unfixed> (embed; bug #507185)
848            - egroupware <unfixed> (embed)
849    
850    magpierss
851            - wordpress <unfixed> (embed; bug #504242)
852            - moodle <unfixed>
853    
854    php-gettext
855            - wordpress 2.8.4-1 (embed; bug #504242)
856            - docbookwiki <unfixed> (embed)
857            - knowledgeroot 0.9.9.5-1
858            NOTE: non-free
859    
860    libphp-ixr (name may change, it is the Incutio XML-RPC)
861            - wordpress <unfixed> (embed; bug #504242)
862            NOTE: libphp-ixr isn't in Debian, RFP: #504236
863            - dokuwiki <unfixed> (embed)
864            - textpattern <unfixed> (embed)
865    
866    libphp-cas
867            - glpi <unfixed> (embed)
868            - moodle <unfixed> (embed; bug #505984)
869    
870    scriptaculous (prototype.js is among the embeds in the following)
871            - glpi <unfixed> (embed)
872            - libaws <unfixed> (embed; bug #555222)
873            - op-panel <unfixed> (embed)
874            - symfony <unfixed> (embed)
875            NOTE: maintainer says there are extra incompatible changes required
876            - pixelpost 1.7.1-6 (embed)
877            - webhelpers <unfixed> (embed)
878            - qwik <removed> (embed; bug #555241)
879            - smokeping <unfixed> (embed)
880            - turba2 <unfixed> (embed)
881            - typo3-src 4.2.3-1 (embed)
882            - request-tracker3.6 <unfixed> (embed)
883            - request-tracker3.8 <unfixed> (embed)
884            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
885            - wordpress 2.5.0-2 (embed)
886            - libhtml-prototype-perl 1.48-3 (embed)
887    
888    libmarkdown-php
889            - moodle <unfixed> (embed; bug #507185)
890            - pixelpost 1.7.1-6 (embed)
891    
892    php-openid
893            - wordpress-openid <itp> (embed)
894    
895    geshi
896            - dokuwiki 0.0.20080505-3.1 (embed)
897            - pgfouine 1.0-1.1 (embed)
898            - websvn 2.1.0-1 (embed)
899    
900    webcalendar
901            - gforge 4.7~rc2-6 (embed; bug #504758)
902    
903    libical
904            - kdepim <unknown> (fork)
905            NOTE: fixed at some point during 4.0
906            - kdepimlibs 4.2.0-1 (fork)
907            - claws-mail-extra-plugins <unfixed> (fork)
908    
909    harfbuzz
910            - qt4-x11 <unfixed> (embed)
911            - pango1.0 <unfixed> (embed)
912            - fontmatrix <unfixed> (embed)
913    
914    libzip
915            - php5 <unfixable> (modified-embed)
916            - odt2txt <unfixed> (embed; bug #523808)
917    
918    json.php (not packaged; should be replaced with php's built-in functions)
919            - moodle <unfixed>
920            - yui <unfixed>
921            - gallery2 <unfixed>
922            - dokuwiki <unfixed>
923            - typo3-src <unfixed>
924    
925    php-fpdf
926            - tcpdf <itp> (fork)
927            - moodle <unfixed>
928            - phpwiki <unfixed>
929            - egroupware <unfixed>
930            - ldap-account-manager <unfixed> (fork)
931    
932    tcpdf (itp: #495985)
933            - moodle <unfixed>
934            - phpmyadmin <unfixed>
935    
936    typo3
937            - moodle <unfixed>
938    
939    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
940            - moodle <unfixed>
941            - gosa <unfixed>
942    
943    php-ole (itp: #487558)
944            - moodle <unfixed>
945    
946    pieforms (http://www.catalyst.net.nz)
947            - mahara <unfixed>
948    
949    savant2 (http://phpsavant.com)
950            - egroupware <unfixed>
951    
952    rssparser (http://nwow.org)
953            - egroupware <unfixed>
954            - phpgroupware <unfixed>
955    
956    lcms
957            - openjdk-6 <unfixed> (fork)
958            - gimp 2.4.0~rc2-2
959    
960    libphp-phplayersmenu
961            - diogenes <unfixed>
962            - phpldapadmin <unfixed>
963    
964    libphp-pclzip
965            - docvert <unfixed>
966            - moodle <unfixed>
967            - egroupware <unfixed>
968    
969    libphp-simplepie
970            - dokuwiki <unfixed>
971            - wordpress <unfixed>
972    
973    libphp-jpgraph
974            - egroupware <unfixed>
975    
976    php-simpletest
977            - moodle <unfixed>
978    
979    libpng
980            - iceweasel <not-affected> (uses xulrunner)
981            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
982            - iceape 1.0.13~pre080614i-0etch1 (embed)
983            - xulrunner 1.9.0.13-1 (embed)
984            [lenny] - xulrunner 1.9.0.11-0lenny1
985            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
986            - gamera 3.2.3-1 (embed)
987            - freeimage <unfixed> (embed)
988            - tuxonice-userui (static)
989    
990    irssi
991            - silc-client <unfixed> (embed)
992            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
993    
994    extc
995            - mtasc <unfixed> (embed)
996            - haxe <unfixed> (embed)
997    
998    swflib
999            - mtasc <unfixed> (embed)
1000            - haxe <unfixed> (embed)
1001    
1002    libitext-java
1003            - bouncycastle 2.1.4-1 (embed)
1004    
1005    python-ply
1006            - pyke <unfixed> (embed; bug #555363)
1007            - pywbem 0.7.0-4 (embed; bug #555364)
1008            - sepolgen <unfixed> (embed; bug #555365)
1009            - zope-textindexng3 <unknown> (embed)
1010            - iceweasel <not-affected> (uses xulrunner)
1011            - xulrunner <unknown> (embed)
1012            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1013    
1014    libdumbnet (libdnet upstream)
1015            - nmap <unfixed> (fork)
1016    
1017    gcc-4.4
1018            - gcc-mingw32 <unfixed> (embed)
1019    
1020    camlimages
1021            - advi <unfixed> (static; bug #550441)
1022    
1023    memcached
1024            - memcachedb <unfixed> (embed)
1025    
1026    yajl
1027            - argyll <unfixed> (embed; bug #544223)
1028            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1029    
1030    nusoap
1031            - gforge 4.8.2-1 (embed)
1032            - ampache <unfixed> (embed)
1033            - poker-network <unfixed> (embed)
1034            - moodle <unfixed> (embed)
1035            NOTE: code is not used when running under php5 and soap is enabled
1036            - phpwiki <unfixed> (embed)
1037            - gallery2 <unfixed> (embed)
1038            - typo3-src <unfixed> (embed)
1039    
1040    libept
1041            - adept <unfixed> (embed; bug #540649)
1042    
1043    libvorbis
1044            - iceweasel <not-affected> (uses xulrunner)
1045            - xulrunner <unfixed> (embed; bug #540959)
1046            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1047            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1048            - iceape <unfixed> (embed)
1049            [etch] - iceape <not-affected> (introduced in 2.0)
1050            [lenny] - iceape <not-affected> (introduced in 2.0)
1051    
1052    cairo
1053            - iceweasel <not-affected> (uses xulrunner)
1054            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1055    
1056    liboggz
1057            - iceweasel <not-affected> (uses xulrunner)
1058            - xulrunner <unfixed> (embed; bug #540959)
1059            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1060            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1061            - iceape <unfixed> (embed)
1062            [etch] - iceape <not-affected> (introduced in 2.0)
1063            [lenny] - iceape <not-affected> (introduced in 2.0)
1064    
1065    liboggplay
1066            - iceweasel <not-affected> (uses xulrunner)
1067            - xulrunner <unfixed> (embed; bug #540959)
1068            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1069            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1070            - iceape <unfixed> (embed)
1071            [etch] - iceape <not-affected> (introduced in 2.0)
1072            [lenny] - iceape <not-affected> (introduced in 2.0)
1073    
1074    php-net-dnsbl
1075            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1076    
1077    php-onyx-rss
1078            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1079    
1080    php-text-wiki
1081            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1082    
1083    php-xml-rpc
1084            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1085    
1086    polarssl (does not have a shared library)
1087            - pdkim <itp> (embed; bug #543150)
1088            - xyssl <unfixed> (old-version)
1089    
1090    pidgin (libpurple)
1091            - gaim <removed> (old-version)
1092            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1093    
1094    icu
1095            - webkit 1.0.1-1 (embed; bug #547214)
1096            - texlive-bin <unfixed> (fork)
1097            NOTE: texlive upstream working with icu upstream to merge their changes
1098    
1099    cyrus-imapd-2.2
1100            - kolab-cyrus-imapd <unfixed> (fork)
1101            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1102    
1103    python-cxx-dev
1104            - freecad 0.9.2646.3-1 (embed; bug #547936)
1105    
1106    zipios++
1107            - freecad 0.9.2646.3-1 (embed; bug #547941)
1108            - enigma 0.92.3-3 (embed)
1109            NOTE: likely fixed earlier, marking etch's version as fixed
1110    
1111    linux-2.6
1112            - kvm <removed> (embed; bug #549973) [./kernel/*]
1113            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1114            - kernel-source-2.6.8 <removed> (old-version)
1115            - kernel-source-2.4.27 <removed> (old-version)
1116            - kernel-source-2.4.24 <removed> (old-version)
1117            - kernel-source-2.2.25 <removed> (old-version)
1118            - kernel-source-2.2.20 <removed> (old-version)
1119    
1120    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1121            - kvm <removed> (embed) [./libfdt/*]
1122            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1123    
1124    qweb (not packaged)
1125            - ajaxterm <unfixed>
1126    
1127    opensaml2
1128            - opensaml <removed> (old-version)
1129    
1130    shibboleth-sp2
1131            - shibboleth-sp <removed> (old-version)
1132    
1133    tuxonice-userui
1134            - suspend2-userui <removed> (old-version)
1135    
1136    expat
1137            - w3c-libwww <removed> (embed; bug #551941)
1138            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1139            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1140            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1141            - python2.4 <unfixable> (embed; bug #553403)
1142            - python-4suite <unfixed> (embed; bug #516935)
1143            - wxwindows2.4 <removed> (embed)
1144            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1145            - wxwidgets2.8 2.8.10.1-2 (embed)
1146            - celementtree 1.0.5-8 (embed)
1147            NOTE: Maybe that was fixed even earlier
1148            - audacity 1.3.2-1 (embed)
1149            - matanza <unfixed> (embed)
1150            - tdom 0.8.3~20080525-1 (embed)
1151            - udunits 2.1.8-4 (embed)
1152            - apr-util 1.2 (embed)
1153            - ayttm <unfxed> (embed; bug #561006)
1154            - cableswig <unfixed> (embed)
1155            - cadaver <unfixed> (embed)
1156            - cmake 2.6.0-6 (embed)
1157            - coin3 <unfixed> (embed)
1158            - gdcm 2.0.14-2 (embed)
1159            - ghostscript 8.71~dfsg-2 (embed)
1160            - grmonitor <removed> (embed)
1161            - iceape <unfixed> (embed)
1162            - insighttoolkit 3.16.0-1 (embed)
1163            NOTE: insighttoolkit might've been fixed earlier
1164            - libparagui1.1 1.0.2-1 (embed)
1165            - paraview 3.6.2-1 (embed)
1166            - poco 1.3.6p1-1 (embed)
1167            - simgear <unfixed> (embed)
1168            - sitecopy 1:0.16.0-1
1169            - smart <unfixed> (embed)
1170            NOTE: smart embeds celementree, and it includes expat
1171            - swish-e <not-affected> (Linked against libxml, which is used instead)
1172            - tla 1.3.5+dfsg-15 (embed)
1173            - vtk 4.1.20030227-1 (embed)
1174            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1175            - xmlrpc-c <unfixed> (embed)
1176            - iceweasel <unfixed> (embed)
1177            - kompozer <unfixed> (embed)
1178            - vxl 1.13.0-2 (embed)
1179            - xulrunner <unfixed> (embed)
1180            - apache2 2.2 (embed)
1181            - texlive-bin <not-affected> (Embedded code not compiled in)
1182            - vnc4 <unfixed> (embed)
1183            - xotcl 1.6.6-1 (embed)
1184    
1185    xerces-c
1186            - xerces-c2 <unfixed> (old-version)
1187            - xerces27 <removed> (old-version)
1188    
1189    md5 (RSA's version; not the gnu version provided by coreutils)
1190            - w3c-libwww <removed> (embed; bug #551942)
1191            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1192    
1193    libparagui1.1
1194            - asc <unfixable> (fork)
1195    
1196    enet
1197            - sauerbraten <unfixed> (embed; #497194)
1198    
1199    eglibc
1200            - glibc <removed> (old-version)
1201    
1202    galib
1203            - gamera 3.2.3-1 (embed)
1204    
1205    configobj
1206            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1207            - elisa <unfixed> (embed; bug #555337)
1208            - gaupol <unfixed> (embed; bug #555338)
1209            - ipython <unfixed> (embed; bug #555339)
1210            - pida <unfixed> (embed; bug #555340)
1211            - psychopy <unfixed> (embed; bug #555341)
1212            - rest2web <unfixed> (embed; bug #555342)
1213            - auth2db <unknown> (embed)
1214            - dynagen <unknown> (embed)
1215            - iceweasel <unknown> (embed)
1216            - sabnzbdplus <unknown> (embed)
1217            - xulrunner <unknown> (embed)
1218            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1219    
1220    python-clientform
1221            - bibus <unfixed> (embed; bug #555332)
1222            - zope2.10 <unfixed> (embed; bug #555333)
1223            - zope2.11 <removed> (embed; bug #555334)
1224            - python-mechanize <unknown> (embed)
1225            - twill <unknown> (embed)
1226    
1227    python-mechanize
1228            - zope2.10 <unfixed> (embed; bug #555337)
1229            - zope2.11 <removed> (embed; bug #555338)
1230            - twill <unknown> (embed; bug #555339)
1231    
1232    pexpect
1233            - duplicity 0.6.06-1 (embed; bug #555361)
1234            - hplip <unfixed> (embed; bug #555362)
1235            - smart <unfixed> (embed; bug #555363)
1236    
1237    pyparsing
1238            - bauble <unfixed> (embed; bug #555366)
1239            - boa-constructor 0.6.1-8 (embed; bug #555367)
1240            - calibre <unfixed> (embed; bug #555368)
1241            - matplotlib <unfixed> (embed; bug #531024)
1242            - zhpy 1.7.3.1-1 (embed; bug #555370)
1243            - polybori <unknown> (embed)
1244            - python-whoosh <unknown> (embed)
1245            - twill <unknown> (embed)
1246            - zope-textindexng3 <unknown> (embed)
1247    
1248    python-pysqlite2
1249            - python2.4 <unfixed> (embed; bug #553403)
1250            - python2.5 <unfixed> (embed; bug #553403)
1251    
1252    celementtree
1253            - python2.5 <unfixed> (embed)
1254            - smart <unfixed> (embed)
1255    
1256    elementtree
1257            - python2.5 <unfixed> (embed)
1258            - python2.6 <unfixed> (embed)
1259            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1260            - gedit 2.28.2-1 (embed; bug #555344)
1261            - smart <unfixed> (embed)
1262            - solfege <unfixed> (embed; bug #555345)
1263            - w3af <unfixed> (embed; bug #555346)
1264            - python-qt4 <unknown> (embed)
1265            - sphinx <unknown> (embed)
1266            - python-nltk <itp> (embed)
1267    
1268    python2.5
1269            - python2.4 <unfixed> (old-version)
1270            - jython <unfixed> (embed)
1271            NOTE: embeds many stdlib modules
1272            - python-django <unfixed> (embed; bug #555419)
1273            NOTE: embeds stdlib modules: doctest, decimal
1274            - gamera 3.2.3-1 (embed)
1275            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1276            - boa-constructor <unfixed> (embed; bug #555426)
1277            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1278            - nicotine <unfixed> (embed; bug #555427)
1279            NOTE: embeds stdlib modules: ConfigParser
1280            - museek+ <unfixed> (embed; bug #555428)
1281            NOTE: embeds stdlib modules: ConfigParser
1282            - vegastrike-data <unfixed> (embed)
1283            NOTE: embeds many stdlib modules
1284            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1285            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1286            - config-manager <unfixed> (embed; bug #555423)
1287            NOTE: embeds stdlib modules: optparse
1288            - jhbuild 2.28.0-1 (embed; bug #555421)
1289            NOTE: embeds stdlib modules: optparse, subprocess
1290            - smart <unfixed> (embed; bug #555432)
1291            NOTE: embeds stdlib modules: optparse
1292            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1293            NOTE: embeds stdlib modules: doctest
1294            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1295            NOTE: embeds stdlib modules: doctest
1296            - distribute <unfixed> (embed)
1297            NOTE: embeds stdlib modules: doctest
1298            - python-setuptools <unfixed> (embed; bug #555435)
1299            NOTE: embeds stdlib modules: doctest
1300            - zope.testing <unfixed> (embed; bug #555436)
1301            NOTE: embeds stdlib modules: doctest
1302            - translate-toolkit <unfixed> (embed; bug #555422)
1303            NOTE: embeds stdlib modules: textwrap, contextlib
1304            - libtpclient-py <unfixed> (embed; bug #555424)
1305            NOTE: embeds stdlib modules: subprocess
1306            - grass <unfixed> (embed; bug #555425)
1307            NOTE: embeds stdlib modules: subprocess
1308            - coherence <unfixed> (embed; bug #555429)
1309            NOTE: embeds stdlib modules: uuid
1310            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1311            NOTE: embeds stdlib modules: uuid
1312            - setroubleshoot <unfixed> (embed; bug #555431)
1313            NOTE: embeds stdlib modules: uuid
1314            - linkchecker <unfixed> (embed; bug #555414)
1315            NOTE: embeds msgfmt.py script
1316            - imdbpy <unfixed> (embed)
1317            NOTE: embeds msgfmt.py script
1318            - kiwi <unfixed> (embed)
1319            NOTE: embeds msgfmt.py script
1320            - moin <unfixed> (embed)
1321            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1322            - plone3 <removed> (embed)
1323            NOTE: embeds msgfmt.py script
1324            - roundup <unfixed> (embed)
1325            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1326            - rednotebook <unfixed> (embed; bug #555415)
1327            NOTE: embeds msgfmt.py script
1328            - turbogears <unfixed> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - elisa <unfixed> (embed)
1331            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1332            - calibre <unfixed> (embed)
1333            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1334            - mailman 1:2.1.13-1 (embed; #555416)
1335            NOTE: embeds msgfmt.py script
1336            - python-docutils <unknown> (embed)
1337            NOTE: embeds stdlib modules: optparse, textwrap
1338            - python-imaging <unknown> (embed)
1339            NOTE: embeds stdlib modules: doctest
1340            - python-mechanize <unknown> (embed)
1341            NOTE: embeds stdlib modules: doctest
1342            - twill <unknown> (embed)
1343            NOTE: embeds stdlib modules: subprocess
1344            - zeroc-ice <unknown> (embed)
1345            NOTE: embeds stdlib modules: subprocess
1346            - wxwidgets2.8 <unknown> (embed)
1347            NOTE: embeds stdlib modules: subprocess
1348            - cycle <unknown> (embed)
1349            NOTE: embeds msgfmt.py script
1350            - deluge <unknown> (embed)
1351            NOTE: embeds msgfmt.py script
1352            - opendict <unknown> (embed)
1353            NOTE: embeds msgfmt.py script
1354            - openerp-client <unknown> (embed)
1355            NOTE: embeds msgfmt.py script
1356            - rapidsvn <unknown> (embed)
1357            NOTE: embeds msgfmt.py script
1358            - wammu <unknown> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - gaphor <unknown> (embed)
1361            NOTE: embeds msgfmt.py script
1362            - pida <unknown> (embed)
1363            NOTE: embeds msgfmt.py script
1364            - python-formencode <unknown> (embed)
1365            NOTE: embeds msgfmt.py script
1366            - duplicity <unfixed> (embed)
1367            NOTE: embeds stdlib module: urlparse, tarfile
1368            - pygopherd <unfixed> (embed)
1369            NOTE: embeds stdlib module: zipfile
1370    
1371    argparse
1372            - twill <unfixed> (embed; bug #555347)
1373            - ipython <unfixed> (embed; bug #555348)
1374    
1375    coherence
1376            - elisa <unfixed> (embed; bug #555335)
1377    
1378    simpletal
1379            - plastex <unfixed> (embed; bug #555371)
1380    
1381    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1382            - postr <unfixed> (embed)
1383            - elisa <unfixed> (embed)
1384    
1385    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1386            - apertium-tolk <unfixed> (embed)
1387            - ipython <unfixed> (embed)
1388            - virtaal <unfixed> (embed)
1389    
1390    distribute
1391            - setuptools <removed> (old-version)
1392    
1393    rails
1394            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1395            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1396            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1397            - thin <unfixed> (embed) [./spec/rails_app/*]
1398            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1399            NOTE: be dangerous if developers are naively basing their code off of the examples
1400            NOTE: prototype.js is among the example files
1401    
1402    lucene2 (prototype.js is among the embeds in the following)
1403            - lucene <unfixed> (old-version)
1404            - pylucene <unfixed> (embed)
1405            - libpdfbox-java <unfixed> (embed)
1406            - libfontbox-java <unfixed> (embed)
1407            - libjempbox-java <unfixed> (embed)
1408            - solr <unfixed> (embed)
1409    
1410    unicode-data
1411            - syslinux <unfixed> (embed)
1412            - camomile <unfixed> (embed)
1413            - fribidi <unfixed> (embed)
1414            - m17n-db <unfixed> (embed)
1415            - sbcl <unfixed> (embed)
1416            - heimdal <unfixed> (embed)
1417            - icu <unfixed> (embed)
1418            - icu4j <unfixed> (embed)
1419            - krb5 <unfixed> (embed)
1420            - moodle <unfixed> (embed)
1421            - openldap <unfixed> (embed)
1422            - pike7.6 <unfixed> (embed)
1423            - samba <unfixed> (embed)
1424            - samba4 <unfixed> (embed)
1425            - cmucl <unfixed> (embed)
1426            - typo3-src <unfixed> (embed)
1427            - mauve <unfixed> (embed)
1428            - texlive-bin <unfixed> (embed)
1429            - ypsilon <unfixed> (embed)
1430            - jeuclid <unfixed> (embed)
1431            - charmap.app <unfixed> (embed)
1432            - clisp <unfixed> (embed)
1433            - gnulib <unfixed> (embed)
1434            - opensrs-client <unfixed> (embed)
1435            - saxonb <unfixed> (embed)
1436            - rails <unfixed> (embed)
1437    
1438    feedparser
1439            - rawdog <unfixed> (embed; bug #383422)
1440            - miro <unfixed> (embed; bug #555351)
1441            - calibre <unfixed> (embed; bug #555352)
1442            - freevo <unfixed> (embed; bug #555353)
1443            - pida <unfixed> (embed; bug #555354)
1444            - planet-venus <unfixed> (embed; bug #555355)
1445            - plone3 <removed> (embed; bug #555356)
1446            - exaile 0.2.14+debian-1 (embed)
1447            - screenlets 0.1.2-3 (embed)
1448            NOTE: included twice
1449    
1450    agg:
1451            - matplotlib <unfixed> (embed: bug #377271)
1452            - contextfree <unfixed> (embed)
1453            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1454            - exactimage <unfixed> (embed)
1455            - python-enable <unfixed> (embed)
1456            - mapnik 0.5.1-3 (embed)
1457            NOTE: links statically to agg, but shared library is not available (bug #377271)
1458    
1459    vtk
1460            - paraview <unfixable> (embed; bug #495426)
1461    
1462    txt2tags
1463            - rednotebook <unfixed> (embed)
1464    
1465    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1466            - gajim <unfixed> (embed)
1467            - emesene <unfixed> (embed)
1468            - convirt <unfixed> (embed)
1469            - pida <unfixed> (embed)
1470            - rednotebook <unfixed> (embed)
1471    
1472    horde3 (prototype.js is among the embeds in the following)
1473            - mnemo2 <unfixed> (embed)
1474            - nag2 <unfixed> (embed)
1475            - wordpress <unfixed> (embed)
1476            NOTE: Text_Diff (wp-includes/Text/Diff*)
1477    
1478    cimg
1479            - gmic <itp> (embed)
1480    
1481    mootools
1482            - gmic <itp> (embed)
1483    
1484    openldap
1485            - openldap2.3 <removed> (old-version)
1486    
1487    grub2
1488            - grub <unfixed> (old-version)
1489    
1490    gnupginterface
1491            - duplicity <unfixed> (embed)
1492    
1493    python-dateutil
1494            - awn-extras-applets <unfixed> (embed)
1495            - matplotlib <unknown> (embed)
1496    
1497    cups
1498            - cupsys <removed> (old-version)
1499    
1500    yui
1501            - bcfg2 <not-affected> (present in source but not included in any binary files)
1502            - serendipity 1.5.3-1 (embed; bug #557746)
1503            - moodle 1.8.2.dfsg-5 (embed)
1504            - jifty 0.91117-1 (embed; bug #557748)
1505            - webgui 7.7.26-1 (embed)
1506            - loggerhead 1.17-1 (embed)
1507    
1508    quake3 (vanilla source not packaged in debian)
1509            - openarena <unfixable> (fork)
1510    
1511    quake2 (vanilla source not packaged in debian)
1512            - alien-arena <unfixable> (fork)
1513            - warsow <unfixable> (fork)
1514    
1515    libtheora
1516            - iceweasel <not-affected> (uses xulrunner)
1517            - xulrunner <unfixed> (embed; bug #540959)
1518            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1519            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1520            - iceape <unfixed> (embed; bug #559276)
1521            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1522            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1523    
1524    dtoa
1525            - bfilter <unfixed> (embed)
1526            - cacao <unfixed> (embed)
1527            - cdrdao <unfixed> (embed)
1528            - classpath <unfixed> (embed)
1529            - freej <unfixed> (embed)
1530            - iceape <unfixed> (embed)
1531            - iceweasel <unfixed> (embed)
1532            - jscoverage <unfixed> (embed)
1533            - kde4libs <unfixed> (embed)
1534            - kdelibs <unfixed> (embed)
1535            - kompozer <unfixed> (embed)
1536            - libv8 <unfixed> (embed)
1537            - mono <unfixed> (embed)
1538            - newlib <unfixed> (embed)
1539            - nspr <unfixed> (embed)
1540            - php5 <unfixed> (embed)
1541            - polyml <unfixed> (embed)
1542            - qt4-x11 <unfixed> (embed)
1543            - rhino <unfixed> (embed)
1544            NOTE: code translated to Java
1545            - ruby1.8 <unfixed> (embed)
1546            - ruby1.9 <unfixed> (embed)
1547            - ruby1.9.1 <unfixed> (embed)
1548            - sdd <unfixed> (embed)
1549            - sfind <unfixed> (embed)
1550            - star <unfixed> (embed)
1551            - tinymux <unfixed> (embed)
1552            - virtualbox-ose <unfixed> (embed)
1553            - webkit <unfixed> (embed)
1554            - xulrunner <unfixed> (embed)
1555    
1556    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1557            - firegpg <unfixed> (embed)
1558            - enigmail <unfixed> (embed)
1559    
1560    ptmalloc (not packaged in Debian)
1561            - crystalspace <unfixed> (embed)
1562            - qt4-x11 <unfixed> (embed)
1563    
1564    svgalib
1565            - usplash <unfixed> (embed)
1566    
1567    bogl
1568            - usplash <unfixed> (embed)
1569    
1570    taglist
1571            - usplash <unfixed> (embed)
1572    
1573    portaudio
1574            - audacity <unfixed> (embed; bug #323711)
1575    
1576    nyquist
1577            - audacity <unfixed> (embed)
1578            NOTE: embeds a forked nyquist with support for a shared library
1579    
1580    vamp-plugin-sdk
1581            - audacity <unfixed> (embed)
1582    
1583    wordpress
1584            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1585            - wordpress-mu <removed> (fork)
1586    
1587    php5
1588            - php4 <removed> (old-version)
1589    
1590    classpath
1591            - libgnucrypto-java <removed> (embed; bug #559788)
1592    
1593    libtool
1594            - apr <unfixed> (static; bug #489625)
1595            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1596            - arts <unfixed> (embed)
1597            - bochs 2.4.2-1 (embed; bug #560884)
1598            - camserv <unfixed> (embed)
1599            - collectd 4.8.2-1 (embed)
1600            - courier-authlib 0.58-4 (embed)
1601            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1602            - cvsnt 2.5.04.3236-1.2 (embed)
1603            - dico <not-affected> (Uses the system copy of ltdl)
1604            - freeradius 0.1+20010527-1 (embed)
1605            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1606            - ggobi 2.1.9~20091212-1 (embed)
1607            - glame 2.0.1-4 (embed)
1608            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1609            - gnash 0.8.7-2 (embed)
1610            - gnu-smalltalk <unfixed> (embed; bug #566777)
1611            - google-gadgets 0.10.5-0.3 (embed)
1612            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1613            - graphicsmagick 1.3.5-6 (embed)
1614            - graphviz 2.8-3 (embed)
1615            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1616            - guile-1.6 1.6.8-7 (embed)
1617            - hamlib <unfixed> (embed)
1618            - hercules 3.06-1.2 (embed)
1619            - jags 1.0.4-3 (embed; bug #560864)
1620            - kdelibs <unfixed> (embed)
1621            - libannodex <removed> (embed)
1622            - libextractor 0.5.23+dfsg-4 (embed)
1623            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1624            - libtunepimp 0.5.3-7.3 (embed)
1625            - mp4h 1.3.1-4.1 (embed)
1626            - naim <removed> (embed)
1627            - parser-mysql <unfixed> (embed)
1628            - pinball 0.3.1-11 (embed)
1629            - redland <unfixed> (embed)
1630            - siproxd <unfixed> (embed)
1631            - ski <unfixed> (embed)
1632            - synfig 0.62.00-1 (embed)
1633            - unixodbc 2.2.4-5 (embed)
1634            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1635            - clamav 0.95+dfsg-1 (embed)
1636            - imagemagick 6:6.2.3.1-1 (embed)
1637            - hypre 2.4.0b-5 (embed)
1638            - lam <unfixed> (embed)
1639            - openmpi <unfixable> (embed; bug #559386)
1640            - parser <unfixed> (embed)
1641            - pdsh 2.18-5 (embed; bug #560892)
1642            - sbnc 1.2-8 (embed)
1643            - sdcc <unfixed> (embed)
1644            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1645            - proftpd-dfsg <unfixed> (embed; bug #561748)
1646            - babel 1.4.0.dfsg-5 (embed)
1647            - libprelude 0.9.14-2 (embed)
1648            - heartbeat 2.1.4-7 (embed)
1649            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1650            NOTE: might've been fixed earlier
1651            - gcc-* <unknown> (embed)
1652    
1653    ocamlgsl
1654            - orpie 1.5.1-7.1 (embed; bug #550058)
1655    
1656    xdotool
1657            - keynav <unfixed> (embed; bug #560103)
1658    
1659    bulletphysics (not packaged; http://www.bulletphysics.org/)
1660            - supertuxkart <unfixed> (embed)
1661            - blender <unfixed> (embed)
1662    
1663    ghostscript
1664            - gs-gpl <removed> (old-version)
1665    
1666    icedove
1667            - thunderbird <removed> (old-version)
1668    
1669    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1670            - jquery <unfixed> (embed)
1671    
1672    sed
1673            - ssed <unfixed> (fork)
1674    
1675    phpatomlib (http://code.google.com/p/phpatomlib)
1676            - wordpress <unfixed> (embed)
1677    
1678    Services_JSON (http://pear.php.net/package/Services_JSON)
1679            - wordpress <unfixed> (embed)
1680    
1681    phpass (http://www.openwall.com/phpass/)
1682            - gallery2 <unfixed> (embed)
1683            - wordpress <unfixed> (embed)
1684            - typo3-src <unfixed> (modified-embed)
1685            NOTE: file refers to drupal, maybe there's a copy somewhere there
1686            NOTE: a copyright owner search didn't match anything
1687            - libauthen-passphrase-perl <unfixable> (fork)
1688            NOTE: perl implementation of phpass
1689    
1690    squirrelmail
1691            - wordpress <unfixed> (embed)
1692            NOTE: class-pop3.php
1693    
1694    ezSQL (http://www.woyano.com/jv/ezsql)
1695            - wordpress <unfixable> (fork)
1696            NOTE: wp-db.php
1697    
1698    Diff.php (Clay Loveless' version/killersoft.com)
1699            - php-versioncontrol-svn <unfixed>
1700    
1701    libm (provided by libc)
1702            - spring <unfixed> (embed)
1703            NOTE: embedded by embedded copy of streflop
1704            - aide <unfixed> (static)
1705            - busybox <unfixed> (static)
1706            - mindi-busybox <unfixed> (static)
1707            - qemu <unfixed> (static)
1708            NOTE: qemu-user-static
1709            - tuxonice-userui <unfixed> (static)
1710            - zsh <unfixed> (static)
1711            NOTE: zsh-static
1712    
1713    streflop
1714            - spring <unfixed> (embed)
1715    
1716    minizip
1717            - spring <unfixed> (embed)
1718    
1719    oscpack
1720            - spring <unfixed> (embed)
1721    
1722    hpiutil2
1723            - spring <unfixed> (embed)
1724    
1725    p7zip
1726            - spring <unfixed> (embed)
1727    
1728    pythonqt (doesn't seem to be python-qtN, unknown source)
1729            - fontmatrix <unfixed> (embed)
1730            - elmerfem <unfixed> (embed)
1731    
1732    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1733            - docvert <unfixed> (embed)
1734            - jifty <unfixed> (embed)
1735            - kdenetwork <unfixed> (embed)
1736            - mediatomb <unfixed> (embed)
1737            - plastex <unfixed> (embed)
1738            - plone3 <removed> (embed)
1739            - python-chaco <unfixed> (embed)
1740            - python-docutils <unfixed> (embed)
1741            - s5 <unfixed> (embed)
1742            - zope2.10 <unfixed> (embed)
1743            - zope2.11 <removed> (embed)
1744            - cython <not-affcted> (embed)
1745            NOTE: part of documentation, which is not installed into the binary package
1746    
1747    python-docutils
1748            - zope2.10 <unfixed> (embed)
1749            - zope2.11 <removed> (embed)
1750    
1751    tesseract
1752            - ocropus <unfixed> (static)
1753    
1754    antlr
1755            - kdevelop <unfixed> (embed)
1756    
1757    libxerces2
1758            - openjdk-6 <unfixed> (embed)
1759    
1760    kfreebsd-8
1761            - kfreebsd-7 <unfixed> (old-version)
1762            - kfreebsd-6 <removed> (old-version)
1763    
1764    ruby1.9.1
1765            - ruby1.9 <unfixed> (old-version)
1766            - ruby1.8 <unfixed> (old-version)
1767    
1768    maildrop
1769            - courier <unfixed> (embed) [./maildrop]
1770    
1771    glee
1772            - warzone2100 <unfixed> (embed)
1773    
1774    phing
1775            - symfony <unfixed> (embed)
1776    
1777    pake
1778            - symfony <unfixed> (embed)
1779    
1780    propel
1781            - symfony <unfixed> (embed)
1782    
1783    creole
1784            - symfony <unfixed> (embed)
1785    
1786    hfsutils
1787            - cdrkit <unfixed> (embed; bug #570187)
1788            NOTE: embeds hfsutils code in genisoimage
1789    
1790    cdrkit
1791            - grub2 <unfixed> (embed; bug #570156)
1792            NOTE: genisoimage imported into grub-mkisofs
1793    
1794    kdebase-workspace
1795            - kdebase <unfixed> (old-version)
1796    
1797    file
1798            - php5 <unfixable> (modified-embed)
1799            [lenny] - php5 <not-affected>
1800    
1801    cdb
1802            - php5 <unfixed> (embed)
1803    
1804    libmbfl (itp: #570708)
1805            - php5 <unfixed> (embed)
1806            NOTE: PHP is actually the current upstream, ITP is of that code
1807    
1808    libonig
1809            - php5 5.3.2-1 (embed)
1810    
1811    xmlrpc-epi
1812            - php5 <unfixed> (embed)
1813    
1814    swt-gtk
1815            - eclipse <unfixed> (embed; bug #538808)
1816    
1817    txt2html
1818            - wml 2.0.11ds2-1 (embed)
1819    
1820    ca-certificates
1821            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1822    
1823    openexr
1824            - freeimage <unfixed> (embed)
1825    
1826    libmng
1827            - freeimage <unfixed> (embed)
1828    
1829    openjpeg
1830            - freeimage <unfixed> (embed)
1831    
1832    libjpeg6b
1833            - freeimage <unfixed> (embed)
1834    
1835    libjpeg (don't know what exact version)
1836            - dcmtk <unfixed>
1837            - gdcm <unfixed>
1838            - insighttoolkit <unfixed>
1839            - openarena <unfixed>
1840            - outguess <unfixed>
1841            - squeak-vm <unfixed> (embed)
1842            - tremulous <unfixed>
1843            - tuxonice-userui <unfixed> (static)
1844            - fpc <unfixed> (static)
1845            - lazarus <unfixed> (static)
1846            NOTE: inherited from fpc, see #472304
1847            - mseide-msegui <unfixed> (static)
1848            NOTE: inherited from fpc, see #472304
1849            - easymp3gain <unfixed> (static)
1850            NOTE: inherited from fpc, see #472304
1851            - winff <unfixed> (static)
1852            NOTE: inherited from fpc, see #472304
1853            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1854    
1855    libfile-copy-recursive-perl
1856            - r-base <unfixed> (embed; bug #577427)
1857            - r-base-core-ra <unfixed> (embed; bug #577429)
1858    
1859    delimmatch
1860            - r-base <unfixed> (embed; bug #577433)
1861            - r-base-core-ra <unfixed> (embed; bug #577434)
1862    
1863    libsmf (ITP: #572558)
1864            - denemo <unfixed> (embed)
1865            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1866    
1867    libselinux
1868            - dpkg 1.15.6 (static)
1869    
1870    xinha (ITP: #479708)
1871            - horde3 <unfixed>
1872            - serendipity <unfixed>
1873            - openacs <unfixed>
1874            - dotlrn <unfixed>
1875    
1876    dvipng
1877            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1878    
1879    dvipdfmx
1880            - texlive-bin <unfixed> (embed)
1881            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1882    
1883    lcdf-typetools
1884            - texlive-bin 2009-1 (embed)
1885    
1886    tex4ht
1887            - texlive-bin 2009-1 (embed)
1888    
1889    freetype
1890            - texlive-bin 2009-1 (embed)
1891    
1892  zlib code: (separate between 1.2 and 1.1)  freetype2
1893  dpkg          - texlive-bin 2009-1 (embed)
 rsync  
 mozilla-firefox  
 mozilla(?)  
 Linux kernels  
1894    
1895    silgraphite
1896            - texlive-bin <unfixed> (embed)
1897    
1898  libgadu/ekg:  unzip
1899  centericq          - texlive-bin 2009-1 (embed)
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm, still the case with x.org?  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 gnumeric(?)  
 python  

Legend:
Removed from v.1755  
changed lines
  Added in v.14744

  ViewVC Help
Powered by ViewVC 1.1.5