/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7827 by nion, Fri Jan 4 14:24:59 2008 UTC revision 14811 by pabs, Sun Jun 6 01:10:03 2010 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy
14  sort: static (linking statically against a lib), embed (embedding a copy of the library into another source package)          <unfixed> if the issue is not yet fixed
15  The srcpkg might be some string to identify the code if there is no specific source package.          <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26    The srcpkg might be some string to identify the code if there is no
27    specific source package.
28    
29    Everything up to the next line is ignored.
30    ---BEGIN
31  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
32          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
33          - pdftohtml <unknown>          - pdftohtml <unknown>
34          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
35          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
36          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
37          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
39          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
40          NOTE: links to poppler          - koffice 1:2.0.0-1 (embed; bug #436163)
         - koffice <unfixed> (embed; bug #436163)  
41          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
42          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
43          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
44          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
46          NOTE: copy only present in source but links to poppler          - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <removed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50  ppmd  ppmd
51          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59            - s3switch <unfixed> (embed)
60            - xresprobe <unfixed> (embed)
61            - zhcon <unfixed> (embed)
62    
63    peercast
64            - gnome-peercast <removed> (embed)
65            [etch] - gnome-peercast <unfixed> (embed)
66    
67  silc-toolkit  silc-toolkit
68          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
69    
70    icclib
71            - ghostscript <unfixed> (embed)
72            - argyll <unfixed> (embed)
73    
74    libusb
75            - argyll <unfixed> (embed)
76    
77  dietlibc  dietlibc
78          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
79    
80    libmikmod
81            - sdl-mixer1.2 <unfixed> (embed)
82            TODO: report bug
83    
84  libiax  libiax
85          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
86    
87    spandsp
88            - iaxmodem <unfixable> (embed; bug #548885)
89    
90    python-paramiko
91            - fabric 0.9.0-2 (embed; bug #561398)
92    
93  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
94          - dpkg <unfixed> (embed)          - dpkg 1.15.6 (static)
95          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
96          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
97            - cherokee <unfixed> (embed)
98          NOTE: somehow derived code base          NOTE: somehow derived code base
99          - mono <unfixed> (embed)          - mono <unfixed> (embed)
100          TODO: check mozilla          TODO: check mozilla
# Line 61  zlib (lots of apps embed a copy, but lin Line 102  zlib (lots of apps embed a copy, but lin
102          - pvpgn 1.7.8-2 (embed)          - pvpgn 1.7.8-2 (embed)
103          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
104          - rpm <unknown> (embed)          - rpm <unknown> (embed)
105          NOTE: pinged joeyh since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
106            - tuxcmd-modules <unfixed> (embed)
107            - zsync <unfixed>
108            - tra <unfixed>
109            - sash <unfixed>
110            - nsis <unfixed>
111            - mseide-msegui <unfixed>
112            NOTE: mseide
113            - mirrordir <unfixed>
114            - poco <unfixed>
115            - klibc <unfixed>
116            - emboss <unfixed>
117            - ghostscript <unfixed>
118            - freeimage <unfixed>
119            - clamav <unfixed> (fork)
120            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
121            - tuxonice-userui <unfixed> (static)
122            - plt-scheme <unfixed>
123            - perl <unfixed>
124            - paraview <unfixed>
125            - velvet 0.7.56~nozlibcopy-1
126            - gcvs <unfixed>
127            - dump <unfixed>
128            - aide <unfixed> (static)
129            - dar <unfixed> (static)
130            - avfs <unfixed>
131            - fpc <unfixed>
132            - winff <unfixed>
133            NOTE: inherited from fpc, see #472304
134            - lazarus <unfixed>
135            NOTE: inherited from fpc, see #472304
136            - erlang <unfixed> (embed)
137            - gamera 3.2.3-1 (embed)
138            - python2.4 <unfixed> (embed; bug #553403)
139            - python2.5 <unfixed> (embed; bug #553403)
140            - texlive-bin <unknown> (embed)
141    
142    dulwich
143            - hg-git 0.1.0-1 (embed; bug #541996)
144    
145    libvigraimpex
146            - hugin <unfixed> (embed; bug #542259)
147            - enblend-enfuse <unfixed> (embed; bug #542258)
148            - gamera 3.2.3-1 (embed)
149    
150  libbz2  libbz2
151          - dpkg <unfixed> (static)          - dpkg 1.15.6 (static)
152            - amd64-libs <unfixed> (static)
153  ekg          NOTE: let's call it "static"
154          - centericq <unfixed> (embed)          - dar <unfixed> (static)
155          - gaim <unfixed> (embed)          - dump <unfixed> (static)
156          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - unalz <unfixed> (embed)
157          - kopete 4:3.3.2-5 (embed)          NOTE: has code, by the maint, to use the system version but links against the internal copy
158          - kadu <unfixed> (embed)  
159          - gadu <unfixed> (embed)  libyahoo2
160          NOTE: g/kadu not packaged in Debian yet          - centerim <unfixed> (embed; bug #559783)
161    
162    libmsn
163            - centerim <unfixed> (embed; bug #559783)
164    
165    libgadu
166            - centerim <unfixed> (embed; bug #559783)
167            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
168            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
169            - kdenetwork 4:3.3.2-5 (embed)
170            NOTE: from kdenetwork: kopete
171            - ekg 1:1.8~rc0-1 (embed)
172            - kadu 0.6.0.2-3 (embed; bug #504430)
173            - gadu <itp> (embed)
174    
175  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
176          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
177          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
178          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
179          - phpwiki (embed)          - phpwiki <unfixed> (embed)
180          - php4 <unfixed> (embed)          - php4 <removed> (embed)
181          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
182    
183  shtool (affects build-time only)  shtool (affects build-time only)
184          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
185          - php4 <unfixed> (embed)          - php4 <removed> (embed)
186            - php5 <unfixed> (embed)
187    
188  mozilla source code  xulrunner
189          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
190          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
191          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
192          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
193          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
194          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
195          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
196          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
197    
198  xli  xli
199          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
200    
201  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
202          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
203          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed; bug #575750)
         NOTE: in libxpm  
204    
205  kerberized apps with BSD origin  kerberized apps with BSD origin
206          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
207          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
208          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
209    
210  grip (which pkg is the origin?)  grip (which pkg is the origin?)
211          - libcdaudio          - libcdaudio <unfixed>
212          - grip          - grip <unfixed>
213          - gnome-vfs          - gnome-vfs <unfixed>
214          TODO: check vfs2 as well          TODO: check vfs2 as well
215    
216  fudforum  fudforum
217          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
218          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
219          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
220    
221    libbsd
222            - rdate 1:1.2-3 (embed)
223            - atheme-services <unfixed>
224            - libbsd-arc4random-perl <unfixed>
225            - isakmpd <unfixed>
226            - bsdgames <unfixed> (embed)
227            - bsd-mailx <unfixed> (embed)
228            - netcat-openbsd <unfixed> (embed; bug #550611)
229            - openssh <unfixed> (embed)
230            - unworkable <unfixed> (embed)
231    
232  cvs  cvs
233          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
234          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
235    
236  pcre  pcre3
237          - python* <unfixed> (embed)          - php4 <removed> (embed)
         - php4 <unknown> (embed)  
238          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
239          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
240            NOTE: libgoffice-*
241          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
242          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
243          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
244          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
245          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
246          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
247          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
248          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
249          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
250          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
251            - tin 980117-1 (embed)
252            - kazehakase 0.5.2-1
253            - webkit 1.0.1-1 (embed)
254            - qt4-x11 <unfixed> (embed)
255            NOTE: embedded via webkit copy
256            - erlang <unfixed> (embed)
257            - ssed <unfixed> (embed)
258            - ircd-hybrid <unfixed> (static)
259            - emboss <unfixd>
260            - cherokee <unfixed> (embed)
261            - oftc-hybrid <unfixed> (embed)
262            - ratbox-services <unfixed> (embed)
263            - squeak-vm <unfixed> (embed)
264            - tinymux <unfixed> (embed)
265    
266  tiff  tiff
267          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
268          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
269            - freeimage <unfixed> (embed)
270            - libtk-img <unfixed> (embed)
271            NOTE: there are two copies, one under tiff/ other under libtiff/
272            - gdal <unfixed>
273    
274  uudeview  uudeview
275          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
276            - pan <unfixed> (embed)
277    
278  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
279          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
280          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
281          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
282            - heimdal <unfixed> (embed; bug #559616)
283    
284  util-linux/mount  util-linux/mount
285          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
286          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
287    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
288  sylpheed  sylpheed
289          - sylpheed-claws <unfixed> (embed)          - sylpheed-claws <unfixed> (fork)
290    
291  phpsysinfo  phpsysinfo
292          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
293          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
294    
295  phpldapadmin:  phpldapadmin
296  egroupware (removed from egroupware after sarge)          [sarge] - egroupware <unfixed> (embed)
297            NOTE: removed from egroupware after sarge
298    
299    chmlib
300            - kchmviewer <unknown> (embed)
301    
302    ffmpeg (libavcodec/libavformat)
303            - mplayer 1.0~rc2-14 (embed; bug #395252)
304            - kino 1.0.0-1
305            - vlc <not-affected> (Links dynamically since initial release)
306            - smilutils 0.3.0-10
307            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
308            - motion 3.1.19-1
309            - gstreamer0.10-ffmpeg 0.10.3-2
310            - xmovie <removed> (static)
311            TODO: gimp-gap (potentially using ffmpeg code as well)
312            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
313            - audacity 1.3.7-2 (embed; bug #512278)
314    
315    faad2
316            - mplayer 1.0~rc2-20 (embed)
317            - avifile <unfixed> (embed; bug #538750)
318            - ffmpeg-debian <removed> (embed)
319    
320    libmad (MPEG decoding lib)
321            - xine-lib <unfixed> (embed)
322            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
323            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
324    
325  chmlib:  libdts
326  kchmviewer (ships the code but links dynamically)          - xine-lib <unfixed> (embed)
327    
328  libavcodec/libavformat (source: ffmpeg):  flac
329  mplayer (#395252)          - xine-lib <unfixed> (embed)
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
330    
331  mad MPEG decoding lib:  liba52
332  mad          - a52dec <unfixed> (embed)
333  xine-lib          - xine-lib <unfixed> (embed)
334    
335    mpeg2dec (libmpeg2)
336            - xine-lib <unfixed> (embed)
337    
338    libmpeg3
339            - squeak-vm <unfixed> (embed)
340    
341    libntlm
342            - wget <unfixed> (fork; bug #550436)
343            - curl <unfixed> (fork; bug #550437)
344            - cntlm <unfixed> (fork; bug #550438)
345    
346    uw-imap
347            - pine <unfixed> (embed)
348            - alpine <unfixed> (embed)
349    
350    imagemagick
351            - graphicsmagick <unfixed> (fork)
352    
353    python-urlgrabber
354            - mercurial <unfixed> (embed; bug #531062)
355            - w3af <unfixed> (embed; bug #555372)
356            [experimental] - harvestman <unfixed> (embed; bug #555373)
357    
358    beautifulsoup
359            - python-mechanize <unfixed> (embed; bug #555349)
360            - zope2.11 <removed> (embed; bug #555350)
361            - twill <unknown> (embed)
362    
363    halibut
364            - nsis <unfixed> (fork)
365    
366    libghttp
367            - hotway <unfixed> (embed)
368    
369    libsndfile
370            - ardour 1:2.7.1-1 (embed)
371    
372    glibmm2.4
373            - ardour 1:2.7.1-1 (embed)
374    
375    libgnomecanvasmm2.6
376            - ardour 1:2.7.1-1 (embed)
377    
378    libsigc++-2.0
379            - ardour 1:2.7.1-1 (embed)
380    
381    soundtouch
382            - ardour 1:2.7.1-1 (embed)
383    
384    libmms
385            - xine-lib <unfixed> (embed)
386            - mimms <unfixed> (embed)
387    
388    fckeditor
389            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
390            - moin 1.8.2-2 (embed; bug #452599)
391            - karrigell <removed> (embed; bug #452598)
392            - gforge 4.6.99+svn6225-1 (embed)
393            - request-tracker3.8 <unfixed> (embed)
394            - otrs2 <unfixed> (embed)
395    
396    ipatlas (not packaged in Debian)
397            - moodle <unfixed> (embed; bug #507185)
398    
399    libphp-phpmailer
400            - moodle <unfixed> (embed; bug #507185)
401            - mahara <unfixed> (embed)
402            - symfony <unfixed> (embed; bug #566778)
403            [etch] - phpgroupware <unfixed> (embed)
404            NOTE: phpgroupware-felamimail is only in etch
405            - egroupware <unfixed> (embed; bug #504283)
406            - glpi <unfixed>
407    
408    htmlArea (not packaged in Debian)
409            - moodle <unfixed> (embed)
410    
411    giflib
412            - wine <unfixed> (embed; bug #466181)
413    
414    bennu (not packaged in Debian, http://bennu.sourceforge.net)
415            - moodle <unfixed> (embed)
416    
417    smarty
418            - moodle 1.8.2-2 (embed; bug #471158)
419            - gallery2 2.2.5-2 (embed; bug #471160)
420            - mahara 0.9.2-2 (embed; bug #471201)
421            - gosa 2.4beta1-1 (embed; bug #471200)
422    
423  libdts:  TinyMCE
424  libdts          - wordpress 2.5.1-3 (embed; bug #478257)
425  xine-lib          - moodle <unfixed> (embed; bug #507185)
426            - knowledgeroot <unfixed> (embed)
427            - joomla <itp> (bug #326398)
428    
429    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
430            - scite <unfixed> (embed)
431            - qscintilla <unfixed> (embed)
432            - qscintilla2 <unfixed> (embed)
433            - geany <unfixed> (fork)
434            - anjuta <unfixed> (embed)
435    
436    libphp-adodb
437            - moodle <unfixed> (embed; bug #507185)
438            NOTE: also AdoDB-XML Schema
439            - gallery2 <unfixed> (embed)
440            - phppgadmin <unfixed> (embed)
441            - egroupware <unfixed> (embed)
442            - phpwiki <unfixed> (embed)
443            - torrentflux 2.0beta1-2 (embed)
444            - ipplan <unfixed> (embed)
445            - typo3-src <unfixed> (embed)
446            - cacti <unknown> (embed)
447            [sarge] - cacti <unfixed> (embed)
448            NOTE: dependency exists, but internal version is used
449            - gforge 4.7~rc2-6 (embed)
450            - mahara <unfixed> (embed)
451    
452    gzip
453            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
454            - klibc <unfixed> (embed)
455            NOTE: based on linux-kernel gzip code
456            - busybox <unfixed> (embed)
457            - pristine-tar <unfixed> (modified-embed)
458            NOTE: compression code only, not uncompression
459    
460    neon
461            - cadaver 0.22.3+debian-1 (embed; bug #188381)
462            - gnome-vfs2 <unfixed> (embed; bug #395874)
463            [etch] - litmus <unfixed> (embed; #395875)
464            - litmus <removed> (embed; #395875)
465            [sarge] - screem <unfixed> (embed)
466            - sitecopy 1:0.16.0-1 (embed; bug #395876)
467            [etch] - tla <unfixed> (embed; bug #395877)
468            [sarge] - tla <unfixed> (embed; bug #395877)
469    
470    libmodplug
471            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
472    
473    libvncserver
474            - vino <unfixed> (embed)
475    
476    putty
477            - filezilla <unfixed> (embed)
478    
479    tinyxml (not packaged in Debian; itp bug #531968)
480            - filezilla <unfixed>
481            - crystalspace <unfixed> (embed)
482            - libwfut <unfixed> (embed)
483            - rarian <unfixed> (embed)
484            - bulletml <unfixed> (embed)
485            - pokerth <unfixed> (embed)
486            - qutecom <unfixed> (embed)
487            - sofa-framework <unfixed> (embed)
488            - yate <unfixed> (embed)
489            - antigrav <unfixed> (embed)
490            - balder2d <unfixed> (embed)
491            - cal3d <unfixed> (embed)
492            - criticalmass <unfixed> (embed)
493            - ember <unfixed> (embed)
494            - epiphany <unfixed> (embed)
495            - gambit <unfixed> (embed)
496            - noiz2sa <unfixed> (embed)
497            - ogre <unfixed> (embed)
498            - opencity <unfixed> (embed)
499            - openmovieeditor <unfixed> (embed)
500            - pouetchess <unfixed> (embed)
501            - tecnoballz <unfixed> (embed)
502            - trigger-rally <unfixed> (embed)
503            - xmoto <unfixed> (embed)
504            - mapnik <unknown> (embed)
505            NOTE: uses a different XML parser by default
506            - rrootage 0.23a-6 <embed>
507            NOTE: links to libbulltetml
508            - boson <unknown> (embed)
509            NOTE: the embedded code is unused
510    
511    gv
512            - evince <unfixed> (embed)
513            NOTE: ps/ tree from gv 3.5.8
514            NOTE: evince-gtk is affected (a component of evince source package)
515    
516    libXbae
517            - paw <removed> (embed)
518            [etch] - paw <unfixed> (embed)
519    
520    libgtkhtml
521            - claws-mail-extra-plugins <unfixed> (fork)
522    
523    libXaw
524            - paw <removed> (embed)
525            [etch] - paw <unfixed> (embed)
526            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
527    
528    libgd2
529            - graphviz <unfixed> (embed)
530            NOTE: lib/gd seems to be 2.0.33
531            - wml 2.0.11ds2-1 (embed)
532            - libwmf <unfixed> (embed)
533            NOTE: derived from gd 1.6.3
534            - texlive-bin 2009-1 (embed)
535    
536    rar
537            - unrar-nonfree <unfixed> (embed)
538    
539    unrar-free (maybe this code is derived from the original rar, too?)
540            - clamav <unfixed> (embed)
541            NOTE: seems to be disabled in default config
542    
543    mplayer (DirectMedia Object loader)
544            - xine-lib <unfixed> (embed)
545            NOTE: src/libw32dll/
546            - vlc <unfixed> (embed)
547            NOTE: modules/codec/dmo/
548            - mplayer 1.0~rc2-20 (embed)
549    
550    libwpd (WordPerfect converter)
551            - openoffice.org <unfixed> (embed)
552    
553    fsplib (http://sourceforge.net/projects/fsp/)
554            - gftp <unfixed> (embed)
555            NOTE: lib/fsplib version 0.3
556    
557  flac:  sprng
558  flac          - tree-puzzle <unfixed> (embed)
 xine-lib  
559    
560  liba52:  librpcsecgss
561  a52dec          - krb5 <unfixed> (embed)
 xine-lib  
562    
563  libmpeg2:  jasper
564  mpeg2dec          - ghostscript 8.64~dfsg-2 (embed)
 xine-lib  
565    
566  curl:  libiris
567  wget (code for NTLM authentication)          - psi <unfixed> (embed)
568            - kdenetwork <unfixed> (embed)
569            NOTE: kopete embeds libiris but links dynamically to libidn
570            - kdegames <unfixed> (embed)
571            NOTE: ksirk/kde4
572    
573    libidn
574            - monotone 0.43-1 (embed)
575            - psi <unfixed> (embed)
576            NOTE: psi embeds libiris which embeds libidn
577            - kdegames <unfixed> (embed)
578            NOTE: kdegames/kde4 embeds libiris which embeds libidn
579    
580    lua5.1
581            - monotone 0.43-1 (embed)
582            - nmap 5.00-1 (embed; bug #527997)
583            [lenny] - nmap <unfixed> (embed; bug #527997)
584            - ocropus <unfixed> (embed)
585            - enigma <unfixed> (embed)
586            NOTE: requires lua built with C++
587            - freeciv <unfixed> (embed)
588            - spring <unfixed> (embed)
589    
590  TODO evaluate:  libbotan
591  gimp-gap (potentially using ffmpeg code as well)          - monotone 0.43-1 (embed)
592    
593  uw-imap:  NetXX
594  pine          - monotone 0.43-1 (embed)
 alpine  
595    
596  imagemagick:  libgc
597  graphicsmagick          - mono <unfixed> (embed)
598    
599  halibut:  lzma
600  nsis          - p7zip <unfixed> (embed)
601            - xz-utils <unfixed> (fork)
602    
603    lzo
604            - grub2 <unfixed> (embed)
605    
606    yassl
607            - mysql-dfsg-5.0 <unfixed> (embed)
608            - mysql-dfsg-5.1 <unfixed> (embed)
609    
610    pax code
611            - tar <unfixed> (embed)
612            - cpio <unfixed> (embed)
613    
614    t1lib
615            - tetex-bin 2.0.2-1 (embed)
616            - texlive-bin <unknown> (embed)
617    
618    guichan
619            - boswars <unfixed> (embed)
620            NOTE: maintainer notified us, working on it
621    
622    tolua
623            - boswars <unfixed> (embed)
624            NOTE: maintainer notified us, working on it
625            NOTE: actually tolua++
626            - ocropus <unfixed> (embed)
627            NOTE: actually tolua++
628            - freeciv <unfixed> (embed)
629            NOTE: actually tolua++
630            - enigma <unfixed> (embed)
631    
632  libghttp:  asio-dev
633  hotway          - luxrender <removed> (embed)
634    
635  libsndfile:  xine-lib
636  ardour          - vlc <unfixed> (embed)
637            NOTE: only parts included in modules/access/rtsp
638    
639  glibmm2.4:  netpbm
640  ardour          - tcl8.3 <unfixed> (embed)
641            - tcl8.4 <unfixed> (embed)
642            - tcl8.5 <unfixed> (embed)
643            NOTE: generic/tkImgGIF.c
644    
645    tk8.5
646            - tk8.0 <removed> (old-version)
647            - tk8.3 <unfixed> (old-version)
648            - tk8.4 <unfixed> (old-version)
649            - perl-tk <unfixable> (fork)
650    
651    samba
652            - mc 2:4.6.2~git20080311-1 (embed)
653            NOTE: maintainer is aware of this, currently searching a solution
654    
655    plib1.8.4c2
656            - boson <unfixed> (fork)
657            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
658    
659    fribidi
660            - quesoglc <unfixed> (embed)
661            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
662    
663    glew
664            - quesoglc <unfixed> (embed; bug #489341)
665            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
666            - trigger 0.5.2.1-2 (embed)
667            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
668            - trigger-rally 0.5.2.1-2 (embed)
669            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
670    
671    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
672            - transcend <unfixed> (embed)
673            - cultivation <unfixed> (embed)
674            - passage <unfixed> (embed)
675            - gravitation <unfixed> (embed)
676    
677  libgnomecanvasmm2.6:  tar
678  ardour          - libarchive <unfixed> (embed)
679            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
680    
681  libsigc++-2.0:  cpio
682  ardour          - libarchive <unfixed> (embed)
683            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
684    
685  soundtouch:  kde4libs
686  ardour          - kdelibs <unfixable> (old-version)
687    
688  libmms:  webkit
689  xine-lib          - qt4-x11 <unfixed> (embed; bug #479851)
690  mimms          [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
691            - kde4libs <unfixable> (fork)
692            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
693            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
694    
695    ftgl
696            - blender 2.46+dfsg-1 (embed)
697    
698    wv
699            - abiword <unfixed>
700    
701    qemu
702            - kvm <removed> (embed; bug #543159)
703            - qemu-kvm <unfixed> (embed; bug #560853)
704            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
705            - xen-3 3.4.2-2 (embed; bug #560856)
706            - xen-unstable <unfixed> (embed; bug #560856)
707    
708    vgabios
709            - kvm <removed> (embed; bug #489442)
710            - qemu-kvm <unfixed> (embed)
711    
712    bochs
713            - kvm <removed> (embed; bug #489442)
714            - qemu-kvm <unfixed> (embed)
715    
716    speex
717            - vorbis-tools <unfixed> (embed)
718            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
719            - gst-plugins-good0.10 <unfixed> (embed)
720            - xine-lib <unfixed> (embed)
721            - libfishsound <unfixed> (embed)
722            - libannodex <removed> (embed)
723            - vlc <unfixed> (embed)
724            - xmms-speex <unfixed> (embed)
725            - libsdl-sound1.2 <unfixed> (embed)
726            - sweep <unfixed> (embed)
727    
728    libreadline
729            - magic <itp> (old-version)
730    
731    opcode
732            - ode <unfixed> (embed)
733            NOTE: opcode is not a package in debian, it is just embedded
734            NOTE: http://www.codercorner.com/Opcode.htm
735    
736    gimpact
737            - ode <unfixed> (embed)
738            NOTE: gimpact is not a package in debian, it is just embedded
739            NOTE: http://gimpact.sf.net
740    
741    mochikit
742            - mahara <unfixed> (embed)
743            NOTE: they require extra patches, still unmerged upstream
744            - ntop <unfixed> (embed)
745            - coherence 0.6.2-1 (embed)
746            - paste <unfixed> (embed)
747            - turbogears <unfixed> (embed)
748            - plone3 <removed> (embed)
749            - xulrunner <unfixed> (embed)
750            - libjifty-plugin-chart-perl <unfixed> (embed)
751            - sabnzbdplus <unfixed> (embed)
752            - tgmochikit <unfixed> (embed)
753    
754    prototypejs
755            - netbeans-ide 6.0.1+dfsg-2 (embed)
756            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
757            - webcit <unfixed> (embed; bug #555219)
758            - asterisk 1:1.6.2.0~rc3-1 (embed)
759            - libjson-ruby 1.1.4-1 (embed; bug #555224)
760            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
761            - horde3 <unfixed> (embed)
762            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
763            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
764            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
765            - ebug-http <removed> (embed; bug #555236)
766            - libaws 2.7-1 (embed; bug #555222)
767            - phpgedview <removed> (embed)
768            - poker-network 1.7.6-1 (embed; bug #555238)
769            - rails 2.1.0-6 (embed)
770            - wordpress 2.5.0-2 (embed; bug #555243)
771            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
772            TODO: search through all of the other zope packages
773            - ampache 3.4.1-2 (embed)
774            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
775            - hobix 0.5~svn20070319-4 (embed; bug #555247)
776            - zabbix 1.6.6-4 (embed; bug #555250)
777            - chora2 <unfixed> (embed; bug #555253)
778            - gollem <unfixed> (embed; bug # 555254)
779            - jscropperui 1.2.1-1 (embed; bug #555257)
780            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
781            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
782            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
783            - activeldap <unfixed> (embed)
784            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
785            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
786            - otrs2 2.3.4-6 (embed; bug #555267)
787            - webcalendar 1.2~b1-2 (embed; bug #555269)
788            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
789            - jifty 0.90519-1 (embed; bug #555271)
790            - jquery 1.4-1 (embed; bug #555272)
791            - passenger 2.2.5debian1-1 (embed; bug #555273)
792            - plone3 <removed> (embed; bug #555275)
793            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
794            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
795            - xulrunner <unfixed> (embed)
796            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
797    
798  FCKeditor: (packaged as fckeditor)  gdb
799  knowledgeroot          - insight <unfixed> (embed)
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
800    
801    e2fsprogs
802            - ldiskfsprogs <unfixable> (fork)
803    
804    quazip (not packaged in Debian)
805            - qcake <unfixed> (embed)
806            NOTE: starting with upstream version 0.6.4
807    
808    exo
809            - pcmanfm <unfixed> (embed; bug #499677)
810            NOTE: slightly modified source code
811    
812    java
813            - openjdk-6 <unfixed>
814            - sun-java5 <unfixed>
815            - sun-java6 <unfixed>
816    
817    libphp-snoopy
818            - ampache 3.4.1-2 (embed; bug #504169)
819            - gforge 4.6.99+svn6094-2 (embed)
820            - mahara 1.0.5-2 (embed; bug #504170)
821            - pixelpost 1.7.1-5 (embed; bug #504171)
822            - mediamate 0.9.3.6-5 (embed; bug #504172)
823            - opendb <removed> (embed; bug #504173)
824            [etch] - opendb <unfixed> (embed; bug #504173)
825            - wordpress 2.5.1-9 (embed; bug #443948)
826            - moodle <unfixed> (embed; bug #507185)
827            [etch] - phpgroupware <unfixed> (embed)
828            NOTE: phpgroupware-felamimail
829            - magpierss 0.72-3 (embed; bug #431089)
830    
831    jquery
832            - zekr <unfixed> (embed)
833            - wordpress <unknown> (embed)
834            - yocto-reader <unfixed> (embed)
835            - textpattern <unfixed> (embed)
836            - genshi 0.5.1-1 (embed)
837            NOTE: compressed file under examples/ dir
838            - prewikka <unfixed> (embed)
839            - libramaze-ruby <unfixed> (embed)
840            - drupal5 <unfixed> (embed)
841            - b2evolution <unfixed> (embed)
842            - wesnoth <unfixed> (embed)
843    
844    tablesorter (jquery plugin, not packaged yet)
845            - wesnoth <unfixed> (embed)
846    
847    kses
848            - wordpress <unfixed> (embed; bug #504242)
849            NOTE: their copy has all methods renamed to wp_<foo>
850            NOTE: kses isn't in Debian, RFP: #504240
851            - moodle <unfixed> (embed; bug #507185)
852            - egroupware <unfixed> (embed)
853    
854  Moodle contains lots of things:  magpierss
855  AdoDB          - wordpress <unfixed> (embed; bug #504242)
856  AdoDB-XML Schema          - moodle <unfixed>
857  ipatlas  
858  PHPMailer  php-gettext
859  Smarty          - wordpress 2.8.4-1 (embed; bug #504242)
860  htmlArea          - docbookwiki <unfixed> (embed)
861  TinyMCE          - knowledgeroot 0.9.9.5-1
862  bennu          NOTE: non-free
863    
864    libphp-ixr (name may change, it is the Incutio XML-RPC)
865            - wordpress <unfixed> (embed; bug #504242)
866            NOTE: libphp-ixr isn't in Debian, RFP: #504236
867            - dokuwiki <unfixed> (embed)
868            - textpattern <unfixed> (embed)
869    
870    libphp-cas
871            - glpi <unfixed> (embed)
872            - moodle <unfixed> (embed; bug #505984)
873    
874    scriptaculous (prototype.js is among the embeds in the following)
875            - glpi <unfixed> (embed)
876            - libaws <unfixed> (embed; bug #555222)
877            - op-panel <unfixed> (embed)
878            - symfony <unfixed> (embed)
879            NOTE: maintainer says there are extra incompatible changes required
880            - pixelpost 1.7.1-6 (embed)
881            - webhelpers <unfixed> (embed)
882            - qwik <removed> (embed; bug #555241)
883            - smokeping <unfixed> (embed)
884            - turba2 <unfixed> (embed)
885            - typo3-src 4.2.3-1 (embed)
886            - request-tracker3.6 <unfixed> (embed)
887            - request-tracker3.8 <unfixed> (embed)
888            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
889            - wordpress 2.5.0-2 (embed)
890            - libhtml-prototype-perl 1.48-3 (embed)
891    
892    libmarkdown-php
893            - moodle <unfixed> (embed; bug #507185)
894            - pixelpost 1.7.1-6 (embed)
895    
896    php-openid
897            - wordpress-openid <itp> (embed)
898    
899    geshi
900            - dokuwiki 0.0.20080505-3.1 (embed)
901            - pgfouine 1.0-1.1 (embed)
902            - websvn 2.1.0-1 (embed)
903    
904    webcalendar
905            - gforge 4.7~rc2-6 (embed; bug #504758)
906    
907    libical
908            - kdepim <unknown> (fork)
909            NOTE: fixed at some point during 4.0
910            - kdepimlibs 4.2.0-1 (fork)
911            - claws-mail-extra-plugins <unfixed> (fork)
912    
913    harfbuzz
914            - qt4-x11 <unfixed> (embed)
915            - pango1.0 <unfixed> (embed)
916            - fontmatrix <unfixed> (embed)
917    
918    libzip
919            - php5 <unfixable> (modified-embed)
920            - odt2txt <unfixed> (embed; bug #523808)
921    
922    json.php (not packaged; should be replaced with php's built-in functions)
923            - moodle <unfixed>
924            - yui <unfixed>
925            - gallery2 <unfixed>
926            - dokuwiki <unfixed>
927            - typo3-src <unfixed>
928    
929    php-fpdf
930            - tcpdf <itp> (fork)
931            - moodle <unfixed>
932            - phpwiki <unfixed>
933            - egroupware <unfixed>
934            - ldap-account-manager <unfixed> (fork)
935    
936    tcpdf (itp: #495985)
937            - moodle <unfixed>
938            - phpmyadmin <unfixed>
939    
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
940  typo3  typo3
941  moodle          - moodle <unfixed>
942  cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
943    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
944            - moodle <unfixed>
945            - gosa <unfixed>
946    
947    php-ole (itp: #487558)
948            - moodle <unfixed>
949    
950    pieforms (http://www.catalyst.net.nz)
951            - mahara <unfixed>
952    
953    savant2 (http://phpsavant.com)
954            - egroupware <unfixed>
955    
956    rssparser (http://nwow.org)
957            - egroupware <unfixed>
958            - phpgroupware <unfixed>
959    
960    lcms
961            - openjdk-6 <unfixed> (fork)
962            - gimp 2.4.0~rc2-2
963    
964    libphp-phplayersmenu
965            - diogenes <unfixed>
966            - phpldapadmin <unfixed>
967    
968    libphp-pclzip
969            - docvert <unfixed>
970            - moodle <unfixed>
971            - egroupware <unfixed>
972    
973    libphp-simplepie
974            - dokuwiki <unfixed>
975            - wordpress <unfixed>
976    
977    libphp-jpgraph
978            - egroupware <unfixed>
979    
980    php-simpletest
981            - moodle <unfixed>
982    
983    libpng
984            - iceweasel <not-affected> (uses xulrunner)
985            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
986            - iceape 1.0.13~pre080614i-0etch1 (embed)
987            - xulrunner 1.9.0.13-1 (embed)
988            [lenny] - xulrunner 1.9.0.11-0lenny1
989            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
990            - gamera 3.2.3-1 (embed)
991            - freeimage <unfixed> (embed)
992            - tuxonice-userui (static)
993    
994    irssi
995            - silc-client <unfixed> (embed)
996            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
997    
998    extc
999            - mtasc <unfixed> (embed)
1000            - haxe <unfixed> (embed)
1001    
1002    swflib
1003            - mtasc <unfixed> (embed)
1004            - haxe <unfixed> (embed)
1005    
1006    libitext-java
1007            - bouncycastle 2.1.4-1 (embed)
1008    
1009    python-ply
1010            - pyke <unfixed> (embed; bug #555363)
1011            - pywbem 0.7.0-4 (embed; bug #555364)
1012            - sepolgen <unfixed> (embed; bug #555365)
1013            - zope-textindexng3 <unknown> (embed)
1014            - iceweasel <not-affected> (uses xulrunner)
1015            - xulrunner <unknown> (embed)
1016            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1017    
1018    libdumbnet (libdnet upstream)
1019            - nmap <unfixed> (fork)
1020    
1021    gcc-4.4
1022            - gcc-mingw32 <unfixed> (embed)
1023    
1024    camlimages
1025            - advi <unfixed> (static; bug #550441)
1026    
1027    memcached
1028            - memcachedb <unfixed> (embed)
1029    
1030    yajl
1031            - argyll <unfixed> (embed; bug #544223)
1032            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1033    
1034    nusoap
1035            - gforge 4.8.2-1 (embed)
1036            - ampache <unfixed> (embed)
1037            - poker-network <unfixed> (embed)
1038            - moodle <unfixed> (embed)
1039            NOTE: code is not used when running under php5 and soap is enabled
1040            - phpwiki <unfixed> (embed)
1041            - gallery2 <unfixed> (embed)
1042            - typo3-src <unfixed> (embed)
1043    
1044    libept
1045            - adept <unfixed> (embed; bug #540649)
1046    
1047    libvorbis
1048            - iceweasel <not-affected> (uses xulrunner)
1049            - xulrunner <unfixed> (embed; bug #540959)
1050            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1051            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1052            - iceape <unfixed> (embed)
1053            [etch] - iceape <not-affected> (introduced in 2.0)
1054            [lenny] - iceape <not-affected> (introduced in 2.0)
1055    
1056    cairo
1057            - iceweasel <not-affected> (uses xulrunner)
1058            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1059    
1060    liboggz
1061            - iceweasel <not-affected> (uses xulrunner)
1062            - xulrunner <unfixed> (embed; bug #540959)
1063            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1064            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1065            - iceape <unfixed> (embed)
1066            [etch] - iceape <not-affected> (introduced in 2.0)
1067            [lenny] - iceape <not-affected> (introduced in 2.0)
1068    
1069    liboggplay
1070            - iceweasel <not-affected> (uses xulrunner)
1071            - xulrunner <unfixed> (embed; bug #540959)
1072            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1073            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1074            - iceape <unfixed> (embed)
1075            [etch] - iceape <not-affected> (introduced in 2.0)
1076            [lenny] - iceape <not-affected> (introduced in 2.0)
1077    
1078    php-net-dnsbl
1079            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1080    
1081    php-onyx-rss
1082            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1083    
1084    php-text-wiki
1085            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1086    
1087    php-xml-rpc
1088            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1089    
1090    polarssl (does not have a shared library)
1091            - pdkim <itp> (embed; bug #543150)
1092            - xyssl <unfixed> (old-version)
1093    
1094    pidgin (libpurple)
1095            - gaim <removed> (old-version)
1096            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1097    
1098    icu
1099            - webkit 1.0.1-1 (embed; bug #547214)
1100            - texlive-bin <unfixed> (fork)
1101            NOTE: texlive upstream working with icu upstream to merge their changes
1102    
1103    cyrus-imapd-2.2
1104            - kolab-cyrus-imapd <unfixed> (fork)
1105            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1106    
1107    python-cxx-dev
1108            - freecad 0.9.2646.3-1 (embed; bug #547936)
1109    
1110    zipios++
1111            - freecad 0.9.2646.3-1 (embed; bug #547941)
1112            - enigma 0.92.3-3 (embed)
1113            NOTE: likely fixed earlier, marking etch's version as fixed
1114    
1115    linux-2.6
1116            - kvm <removed> (embed; bug #549973) [./kernel/*]
1117            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1118            - kernel-source-2.6.8 <removed> (old-version)
1119            - kernel-source-2.4.27 <removed> (old-version)
1120            - kernel-source-2.4.24 <removed> (old-version)
1121            - kernel-source-2.2.25 <removed> (old-version)
1122            - kernel-source-2.2.20 <removed> (old-version)
1123    
1124    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1125            - kvm <removed> (embed) [./libfdt/*]
1126            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1127    
1128    qweb (not packaged)
1129            - ajaxterm <unfixed>
1130    
1131    opensaml2
1132            - opensaml <removed> (old-version)
1133    
1134    shibboleth-sp2
1135            - shibboleth-sp <removed> (old-version)
1136    
1137    tuxonice-userui
1138            - suspend2-userui <removed> (old-version)
1139    
1140    expat
1141            - w3c-libwww <removed> (embed; bug #551941)
1142            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1143            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1144            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1145            - python2.4 <unfixable> (embed; bug #553403)
1146            - python-4suite <unfixed> (embed; bug #516935)
1147            - wxwindows2.4 <removed> (embed)
1148            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1149            - wxwidgets2.8 2.8.10.1-2 (embed)
1150            - celementtree 1.0.5-8 (embed)
1151            NOTE: Maybe that was fixed even earlier
1152            - audacity 1.3.2-1 (embed)
1153            - matanza <unfixed> (embed)
1154            - tdom 0.8.3~20080525-1 (embed)
1155            - udunits 2.1.8-4 (embed)
1156            - apr-util 1.2 (embed)
1157            - ayttm <unfxed> (embed; bug #561006)
1158            - cableswig <unfixed> (embed)
1159            - cadaver <unfixed> (embed)
1160            - cmake 2.6.0-6 (embed)
1161            - coin3 <unfixed> (embed)
1162            - gdcm 2.0.14-2 (embed)
1163            - ghostscript 8.71~dfsg-2 (embed)
1164            - grmonitor <removed> (embed)
1165            - iceape <unfixed> (embed)
1166            - insighttoolkit 3.16.0-1 (embed)
1167            NOTE: insighttoolkit might've been fixed earlier
1168            - libparagui1.1 1.0.2-1 (embed)
1169            - paraview 3.6.2-1 (embed)
1170            - poco 1.3.6p1-1 (embed)
1171            - simgear <unfixed> (embed)
1172            - sitecopy 1:0.16.0-1
1173            - smart <unfixed> (embed)
1174            NOTE: smart embeds celementree, and it includes expat
1175            - swish-e <not-affected> (Linked against libxml, which is used instead)
1176            - tla 1.3.5+dfsg-15 (embed)
1177            - vtk 4.1.20030227-1 (embed)
1178            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1179            - xmlrpc-c <unfixed> (embed)
1180            - iceweasel <unfixed> (embed)
1181            - kompozer <unfixed> (embed)
1182            - vxl 1.13.0-2 (embed)
1183            - xulrunner <unfixed> (embed)
1184            - apache2 2.2 (embed)
1185            - texlive-bin <not-affected> (Embedded code not compiled in)
1186            - vnc4 <unfixed> (embed)
1187            - xotcl 1.6.6-1 (embed)
1188    
1189    xerces-c
1190            - xerces-c2 <unfixed> (old-version)
1191            - xerces27 <removed> (old-version)
1192    
1193    md5 (RSA's version; not the gnu version provided by coreutils)
1194            - w3c-libwww <removed> (embed; bug #551942)
1195            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1196    
1197    libparagui1.1
1198            - asc <unfixable> (fork)
1199    
1200    enet
1201            - sauerbraten <unfixed> (embed; #497194)
1202    
1203    eglibc
1204            - glibc <removed> (old-version)
1205    
1206    galib
1207            - gamera 3.2.3-1 (embed)
1208    
1209    configobj
1210            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1211            - elisa <unfixed> (embed; bug #555337)
1212            - gaupol <unfixed> (embed; bug #555338)
1213            - ipython <unfixed> (embed; bug #555339)
1214            - pida <unfixed> (embed; bug #555340)
1215            - psychopy <unfixed> (embed; bug #555341)
1216            - rest2web <unfixed> (embed; bug #555342)
1217            - auth2db <unknown> (embed)
1218            - dynagen <unknown> (embed)
1219            - iceweasel <unknown> (embed)
1220            - sabnzbdplus <unknown> (embed)
1221            - xulrunner <unknown> (embed)
1222            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1223    
1224    python-clientform
1225            - bibus <unfixed> (embed; bug #555332)
1226            - zope2.10 <unfixed> (embed; bug #555333)
1227            - zope2.11 <removed> (embed; bug #555334)
1228            - python-mechanize <unknown> (embed)
1229            - twill <unknown> (embed)
1230    
1231    python-mechanize
1232            - zope2.10 <unfixed> (embed; bug #555337)
1233            - zope2.11 <removed> (embed; bug #555338)
1234            - twill <unknown> (embed; bug #555339)
1235    
1236    pexpect
1237            - duplicity 0.6.06-1 (embed; bug #555361)
1238            - hplip <unfixed> (embed; bug #555362)
1239            - smart <unfixed> (embed; bug #555363)
1240    
1241    pyparsing
1242            - bauble <unfixed> (embed; bug #555366)
1243            - boa-constructor 0.6.1-8 (embed; bug #555367)
1244            - calibre <unfixed> (embed; bug #555368)
1245            - matplotlib <unfixed> (embed; bug #531024)
1246            - zhpy 1.7.3.1-1 (embed; bug #555370)
1247            - polybori <unknown> (embed)
1248            - python-whoosh <unknown> (embed)
1249            - twill <unknown> (embed)
1250            - zope-textindexng3 <unknown> (embed)
1251    
1252    python-pysqlite2
1253            - python2.4 <unfixed> (embed; bug #553403)
1254            - python2.5 <unfixed> (embed; bug #553403)
1255    
1256    celementtree
1257            - python2.5 <unfixed> (embed)
1258            - smart <unfixed> (embed)
1259    
1260    elementtree
1261            - python2.5 <unfixed> (embed)
1262            - python2.6 <unfixed> (embed)
1263            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1264            - gedit 2.28.2-1 (embed; bug #555344)
1265            - smart <unfixed> (embed)
1266            - solfege <unfixed> (embed; bug #555345)
1267            - w3af <unfixed> (embed; bug #555346)
1268            - python-qt4 <unknown> (embed)
1269            - sphinx <unknown> (embed)
1270            - python-nltk <itp> (embed)
1271    
1272    python2.5
1273            - python2.4 <unfixed> (old-version)
1274            - jython <unfixed> (embed)
1275            NOTE: embeds many stdlib modules
1276            - python-django <unfixed> (embed; bug #555419)
1277            NOTE: embeds stdlib modules: doctest, decimal
1278            - gamera 3.2.3-1 (embed)
1279            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1280            - boa-constructor <unfixed> (embed; bug #555426)
1281            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1282            - nicotine <unfixed> (embed; bug #555427)
1283            NOTE: embeds stdlib modules: ConfigParser
1284            - museek+ <unfixed> (embed; bug #555428)
1285            NOTE: embeds stdlib modules: ConfigParser
1286            - vegastrike-data <unfixed> (embed)
1287            NOTE: embeds many stdlib modules
1288            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1289            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1290            - config-manager <unfixed> (embed; bug #555423)
1291            NOTE: embeds stdlib modules: optparse
1292            - jhbuild 2.28.0-1 (embed; bug #555421)
1293            NOTE: embeds stdlib modules: optparse, subprocess
1294            - smart <unfixed> (embed; bug #555432)
1295            NOTE: embeds stdlib modules: optparse
1296            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1297            NOTE: embeds stdlib modules: doctest
1298            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1299            NOTE: embeds stdlib modules: doctest
1300            - distribute <unfixed> (embed)
1301            NOTE: embeds stdlib modules: doctest
1302            - python-setuptools <unfixed> (embed; bug #555435)
1303            NOTE: embeds stdlib modules: doctest
1304            - zope.testing <unfixed> (embed; bug #555436)
1305            NOTE: embeds stdlib modules: doctest
1306            - translate-toolkit <unfixed> (embed; bug #555422)
1307            NOTE: embeds stdlib modules: textwrap, contextlib
1308            - libtpclient-py <unfixed> (embed; bug #555424)
1309            NOTE: embeds stdlib modules: subprocess
1310            - grass <unfixed> (embed; bug #555425)
1311            NOTE: embeds stdlib modules: subprocess
1312            - coherence <unfixed> (embed; bug #555429)
1313            NOTE: embeds stdlib modules: uuid
1314            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1315            NOTE: embeds stdlib modules: uuid
1316            - setroubleshoot <unfixed> (embed; bug #555431)
1317            NOTE: embeds stdlib modules: uuid
1318            - linkchecker <unfixed> (embed; bug #555414)
1319            NOTE: embeds msgfmt.py script
1320            - imdbpy <unfixed> (embed)
1321            NOTE: embeds msgfmt.py script
1322            - kiwi <unfixed> (embed)
1323            NOTE: embeds msgfmt.py script
1324            - moin <unfixed> (embed)
1325            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1326            - plone3 <removed> (embed)
1327            NOTE: embeds msgfmt.py script
1328            - roundup <unfixed> (embed)
1329            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1330            - rednotebook <unfixed> (embed; bug #555415)
1331            NOTE: embeds msgfmt.py script
1332            - turbogears <unfixed> (embed)
1333            NOTE: embeds msgfmt.py script
1334            - elisa <unfixed> (embed)
1335            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1336            - calibre <unfixed> (embed)
1337            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1338            - mailman 1:2.1.13-1 (embed; #555416)
1339            NOTE: embeds msgfmt.py script
1340            - python-docutils <unknown> (embed)
1341            NOTE: embeds stdlib modules: optparse, textwrap
1342            - python-imaging <unknown> (embed)
1343            NOTE: embeds stdlib modules: doctest
1344            - python-mechanize <unknown> (embed)
1345            NOTE: embeds stdlib modules: doctest
1346            - twill <unknown> (embed)
1347            NOTE: embeds stdlib modules: subprocess
1348            - zeroc-ice <unknown> (embed)
1349            NOTE: embeds stdlib modules: subprocess
1350            - wxwidgets2.8 <unknown> (embed)
1351            NOTE: embeds stdlib modules: subprocess
1352            - cycle <unknown> (embed)
1353            NOTE: embeds msgfmt.py script
1354            - deluge <unknown> (embed)
1355            NOTE: embeds msgfmt.py script
1356            - opendict <unknown> (embed)
1357            NOTE: embeds msgfmt.py script
1358            - openerp-client <unknown> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - rapidsvn <unknown> (embed)
1361            NOTE: embeds msgfmt.py script
1362            - wammu <unknown> (embed)
1363            NOTE: embeds msgfmt.py script
1364            - gaphor <unknown> (embed)
1365            NOTE: embeds msgfmt.py script
1366            - pida <unknown> (embed)
1367            NOTE: embeds msgfmt.py script
1368            - python-formencode <unknown> (embed)
1369            NOTE: embeds msgfmt.py script
1370            - duplicity <unfixed> (embed)
1371            NOTE: embeds stdlib module: urlparse, tarfile
1372            - pygopherd <unfixed> (embed)
1373            NOTE: embeds stdlib module: zipfile
1374    
1375    argparse
1376            - twill <unfixed> (embed; bug #555347)
1377            - ipython <unfixed> (embed; bug #555348)
1378    
1379    coherence
1380            - elisa <unfixed> (embed; bug #555335)
1381    
1382    simpletal
1383            - plastex <unfixed> (embed; bug #555371)
1384    
1385    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1386            - postr <unfixed> (embed)
1387            - elisa <unfixed> (embed)
1388    
1389    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1390            - apertium-tolk <unfixed> (embed)
1391            - ipython <unfixed> (embed)
1392            - virtaal <unfixed> (embed)
1393    
1394    distribute
1395            - setuptools <removed> (old-version)
1396    
1397    rails
1398            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1399            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1400            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1401            - thin <unfixed> (embed) [./spec/rails_app/*]
1402            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1403            NOTE: be dangerous if developers are naively basing their code off of the examples
1404            NOTE: prototype.js is among the example files
1405    
1406    lucene2 (prototype.js is among the embeds in the following)
1407            - lucene <unfixed> (old-version)
1408            - pylucene <unfixed> (embed)
1409            - libpdfbox-java <unfixed> (embed)
1410            - libfontbox-java <unfixed> (embed)
1411            - libjempbox-java <unfixed> (embed)
1412            - solr <unfixed> (embed)
1413    
1414    unicode-data
1415            - syslinux <unfixed> (embed)
1416            - camomile <unfixed> (embed)
1417            - fribidi <unfixed> (embed)
1418            - m17n-db <unfixed> (embed)
1419            - sbcl <unfixed> (embed)
1420            - heimdal <unfixed> (embed)
1421            - icu <unfixed> (embed)
1422            - icu4j <unfixed> (embed)
1423            - krb5 <unfixed> (embed)
1424            - moodle <unfixed> (embed)
1425            - openldap <unfixed> (embed)
1426            - pike7.6 <unfixed> (embed)
1427            - samba <unfixed> (embed)
1428            - samba4 <unfixed> (embed)
1429            - cmucl <unfixed> (embed)
1430            - typo3-src <unfixed> (embed)
1431            - mauve <unfixed> (embed)
1432            - texlive-bin <unfixed> (embed)
1433            - ypsilon <unfixed> (embed)
1434            - jeuclid <unfixed> (embed)
1435            - charmap.app <unfixed> (embed)
1436            - clisp <unfixed> (embed)
1437            - gnulib <unfixed> (embed)
1438            - opensrs-client <unfixed> (embed)
1439            - saxonb <unfixed> (embed)
1440            - rails <unfixed> (embed)
1441    
1442    feedparser
1443            - rawdog <unfixed> (embed; bug #383422)
1444            - miro <unfixed> (embed; bug #555351)
1445            - calibre <unfixed> (embed; bug #555352)
1446            - freevo <unfixed> (embed; bug #555353)
1447            - pida <unfixed> (embed; bug #555354)
1448            - planet-venus <unfixed> (embed; bug #555355)
1449            - plone3 <removed> (embed; bug #555356)
1450            - exaile 0.2.14+debian-1 (embed)
1451            - screenlets 0.1.2-3 (embed)
1452            NOTE: included twice
1453    
1454    agg:
1455            - matplotlib <unfixed> (embed: bug #377271)
1456            - contextfree <unfixed> (embed)
1457            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1458            - exactimage <unfixed> (embed)
1459            - python-enable <unfixed> (embed)
1460            - mapnik 0.5.1-3 (embed)
1461            NOTE: links statically to agg, but shared library is not available (bug #377271)
1462    
1463    vtk
1464            - paraview <unfixable> (embed; bug #495426)
1465    
1466    txt2tags
1467            - rednotebook <unfixed> (embed)
1468    
1469    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1470            - gajim <unfixed> (embed)
1471            - emesene <unfixed> (embed)
1472            - convirt <unfixed> (embed)
1473            - pida <unfixed> (embed)
1474            - rednotebook <unfixed> (embed)
1475    
1476    horde3 (prototype.js is among the embeds in the following)
1477            - mnemo2 <unfixed> (embed)
1478            - nag2 <unfixed> (embed)
1479            - wordpress <unfixed> (embed)
1480            NOTE: Text_Diff (wp-includes/Text/Diff*)
1481    
1482  gzip:  cimg
1483  linux-kernel (lib/inflate.c)          - gmic <itp> (embed)
 klibc (based on linux-kernel gzip code)  
 busybox  
1484    
1485  neon:  mootools
1486  cadaver (all, but being worked on: #188381)          - gmic <itp> (embed)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
1487    
1488  libmodplug:  openldap
1489  gst-plugins-bad0.10          - openldap2.3 <removed> (old-version)
1490    
1491  libvncserver:  grub2
1492  vino          - grub <unfixed> (old-version)
1493    
1494  putty:  gnupginterface
1495  filezilla          - duplicity <unfixed> (embed)
1496    
1497  tinyxml (not packaged in Debian):  python-dateutil
1498  filezilla          - awn-extras-applets <unfixed> (embed)
1499            - matplotlib <unknown> (embed)
1500    
1501    cups
1502            - cupsys <removed> (old-version)
1503    
1504    yui
1505            - bcfg2 <not-affected> (present in source but not included in any binary files)
1506            - serendipity 1.5.3-1 (embed; bug #557746)
1507            - moodle 1.8.2.dfsg-5 (embed)
1508            - jifty 0.91117-1 (embed; bug #557748)
1509            - webgui 7.7.26-1 (embed)
1510            - loggerhead 1.17-1 (embed)
1511    
1512    quake3 (vanilla source not packaged in debian)
1513            - openarena <unfixable> (fork)
1514    
1515    quake2 (vanilla source not packaged in debian)
1516            - alien-arena <unfixable> (fork)
1517            - warsow <unfixable> (fork)
1518    
1519    libtheora
1520            - iceweasel <not-affected> (uses xulrunner)
1521            - xulrunner <unfixed> (embed; bug #540959)
1522            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1523            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1524            - iceape <unfixed> (embed; bug #559276)
1525            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1526            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1527    
1528    dtoa
1529            - bfilter <unfixed> (embed)
1530            - cacao <unfixed> (embed)
1531            - cdrdao <unfixed> (embed)
1532            - classpath <unfixed> (embed)
1533            - freej <unfixed> (embed)
1534            - iceape <unfixed> (embed)
1535            - iceweasel <unfixed> (embed)
1536            - jscoverage <unfixed> (embed)
1537            - kde4libs <unfixed> (embed)
1538            - kdelibs <unfixed> (embed)
1539            - kompozer <unfixed> (embed)
1540            - libv8 <unfixed> (embed)
1541            - mono <unfixed> (embed)
1542            - newlib <unfixed> (embed)
1543            - nspr <unfixed> (embed)
1544            - php5 <unfixed> (embed)
1545            - polyml <unfixed> (embed)
1546            - qt4-x11 <unfixed> (embed)
1547            - rhino <unfixed> (embed)
1548            NOTE: code translated to Java
1549            - ruby1.8 <unfixed> (embed)
1550            - ruby1.9 <unfixed> (embed)
1551            - ruby1.9.1 <unfixed> (embed)
1552            - sdd <unfixed> (embed)
1553            - sfind <unfixed> (embed)
1554            - star <unfixed> (embed)
1555            - tinymux <unfixed> (embed)
1556            - virtualbox-ose <unfixed> (embed)
1557            - webkit <unfixed> (embed)
1558            - xulrunner <unfixed> (embed)
1559    
1560    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1561            - firegpg <unfixed> (embed)
1562            - enigmail <unfixed> (embed)
1563    
1564  gv:  ptmalloc (not packaged in Debian)
1565  evince (ps/ tree from gv 3.5.8)          - crystalspace <unfixed> (embed)
1566  evince-gtk (not packaged in Debian)          - qt4-x11 <unfixed> (embed)
1567    
1568  libXbae:  svgalib
1569  libpawlib2-lesstif package (from Cernlib)          - usplash <unfixed> (embed)
1570    
1571  libXaw:  bogl
1572  libpawlib2-lesstif package (from Cernlib)          - usplash <unfixed> (embed)
1573    
1574  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  taglist
1575            - usplash <unfixed> (embed)
1576    
1577  libgd2:  portaudio
1578  graphviz (lib/gd seems to be 2.0.33)          - audacity <unfixed> (embed; bug #323711)
1579    
1580  rar:  nyquist
1581  unrar-nonfree          - audacity <unfixed> (embed)
1582            NOTE: embeds a forked nyquist with support for a shared library
1583    
1584  unrar-free: (maybe this code is derived from the original rar, too?)  vamp-plugin-sdk
1585  clamav (seems to be disabled in default config)          - audacity <unfixed> (embed)
1586    
1587  mplayer (DirectMedia Object loader):  wordpress
1588  xine-lib (src/libw32dll/)          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1589  vlc (modules/codec/dmo/)          - wordpress-mu <removed> (fork)
1590    
1591  libwpd (WordPerfect converter):  php5
1592  openoffice.org          - php4 <removed> (old-version)
1593    
1594  fsplib (http://sourceforge.net/projects/fsp/):  classpath
1595  gftp (lib/fsplib version 0.3)          - libgnucrypto-java <removed> (embed; bug #559788)
1596    
1597  librpcsecgss:  libtool
1598  krb5          - apr <unfixed> (static; bug #489625)
1599            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1600            - arts <unfixed> (embed)
1601            - bochs 2.4.2-1 (embed; bug #560884)
1602            - camserv <unfixed> (embed)
1603            - collectd 4.8.2-1 (embed)
1604            - courier-authlib 0.58-4 (embed)
1605            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1606            - cvsnt 2.5.04.3236-1.2 (embed)
1607            - dico <not-affected> (Uses the system copy of ltdl)
1608            - freeradius 0.1+20010527-1 (embed)
1609            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1610            - ggobi 2.1.9~20091212-1 (embed)
1611            - glame 2.0.1-4 (embed)
1612            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1613            - gnash 0.8.7-2 (embed)
1614            - gnu-smalltalk <unfixed> (embed; bug #566777)
1615            - google-gadgets 0.10.5-0.3 (embed)
1616            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1617            - graphicsmagick 1.3.5-6 (embed)
1618            - graphviz 2.8-3 (embed)
1619            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1620            - guile-1.6 1.6.8-7 (embed)
1621            - hamlib <unfixed> (embed)
1622            - hercules 3.06-1.2 (embed)
1623            - jags 1.0.4-3 (embed; bug #560864)
1624            - kdelibs <unfixed> (embed)
1625            - libannodex <removed> (embed)
1626            - libextractor 0.5.23+dfsg-4 (embed)
1627            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1628            - libtunepimp 0.5.3-7.3 (embed)
1629            - mp4h 1.3.1-4.1 (embed)
1630            - naim <removed> (embed)
1631            - parser-mysql <unfixed> (embed)
1632            - pinball 0.3.1-11 (embed)
1633            - redland <unfixed> (embed)
1634            - siproxd <unfixed> (embed)
1635            - ski <unfixed> (embed)
1636            - synfig 0.62.00-1 (embed)
1637            - unixodbc 2.2.4-5 (embed)
1638            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1639            - clamav 0.95+dfsg-1 (embed)
1640            - imagemagick 6:6.2.3.1-1 (embed)
1641            - hypre 2.4.0b-5 (embed)
1642            - lam <unfixed> (embed)
1643            - openmpi <unfixable> (embed; bug #559386)
1644            - parser <unfixed> (embed)
1645            - pdsh 2.18-5 (embed; bug #560892)
1646            - sbnc 1.2-8 (embed)
1647            - sdcc <unfixed> (embed)
1648            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1649            - proftpd-dfsg <unfixed> (embed; bug #561748)
1650            - babel 1.4.0.dfsg-5 (embed)
1651            - libprelude 0.9.14-2 (embed)
1652            - heartbeat 2.1.4-7 (embed)
1653            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1654            NOTE: might've been fixed earlier
1655            - gcc-* <unknown> (embed)
1656    
1657    ocamlgsl
1658            - orpie 1.5.1-7.1 (embed; bug #550058)
1659    
1660    xdotool
1661            - keynav <unfixed> (embed; bug #560103)
1662    
1663    bulletphysics (not packaged; http://www.bulletphysics.org/)
1664            - supertuxkart <unfixed> (embed)
1665            - blender <unfixed> (embed)
1666    
 jasper:  
1667  ghostscript  ghostscript
1668  gs-gpl          - gs-gpl <removed> (old-version)
1669    
1670    icedove
1671            - thunderbird <removed> (old-version)
1672    
1673  libidn:  sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1674  monotone          - jquery <unfixed> (embed)
1675    
1676  liblua:  sed
1677  monotone          - ssed <unfixed> (fork)
1678    
1679    phpatomlib (http://code.google.com/p/phpatomlib)
1680            - wordpress <unfixed> (embed)
1681    
1682    Services_JSON (http://pear.php.net/package/Services_JSON)
1683            - wordpress <unfixed> (embed)
1684    
1685    phpass (http://www.openwall.com/phpass/)
1686            - gallery2 <unfixed> (embed)
1687            - wordpress <unfixed> (embed)
1688            - typo3-src <unfixed> (modified-embed)
1689            NOTE: file refers to drupal, maybe there's a copy somewhere there
1690            NOTE: a copyright owner search didn't match anything
1691            - libauthen-passphrase-perl <unfixable> (fork)
1692            NOTE: perl implementation of phpass
1693    
1694    squirrelmail
1695            - wordpress <unfixed> (embed)
1696            NOTE: class-pop3.php
1697    
1698    ezSQL (http://www.woyano.com/jv/ezsql)
1699            - wordpress <unfixable> (fork)
1700            NOTE: wp-db.php
1701    
1702    Diff.php (Clay Loveless' version/killersoft.com)
1703            - php-versioncontrol-svn <unfixed>
1704    
1705    libm (provided by libc)
1706            - spring <unfixed> (embed)
1707            NOTE: embedded by embedded copy of streflop
1708            - aide <unfixed> (static)
1709            - busybox <unfixed> (static)
1710            - mindi-busybox <unfixed> (static)
1711            - qemu <unfixed> (static)
1712            NOTE: qemu-user-static
1713            - tuxonice-userui <unfixed> (static)
1714            - zsh <unfixed> (static)
1715            NOTE: zsh-static
1716    
1717    streflop
1718            - spring <unfixed> (embed)
1719    
1720  libbotan:  minizip
1721  montone          - spring <unfixed> (embed)
1722    
1723  NetXX:  oscpack
1724  monotone          - spring <unfixed> (embed)
1725    
1726  libgc:  hpiutil2
1727  mono          - spring <unfixed> (embed)
1728    
 lzma:  
1729  p7zip  p7zip
1730            - spring <unfixed> (embed)
1731    
1732  lzo:  pythonqt (doesn't seem to be python-qtN, unknown source)
1733  grub2          - fontmatrix <unfixed> (embed)
1734            - elmerfem <unfixed> (embed)
1735    
1736    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1737            - docvert <unfixed> (embed)
1738            - jifty <unfixed> (embed)
1739            - kdenetwork <unfixed> (embed)
1740            - mediatomb <unfixed> (embed)
1741            - plastex <unfixed> (embed)
1742            - plone3 <removed> (embed)
1743            - python-chaco <unfixed> (embed)
1744            - python-docutils <unfixed> (embed)
1745            - s5 <unfixed> (embed)
1746            - zope2.10 <unfixed> (embed)
1747            - zope2.11 <removed> (embed)
1748            - cython <not-affcted> (embed)
1749            NOTE: part of documentation, which is not installed into the binary package
1750    
1751    python-docutils
1752            - zope2.10 <unfixed> (embed)
1753            - zope2.11 <removed> (embed)
1754    
1755    tesseract
1756            - ocropus <unfixed> (static)
1757    
1758    antlr
1759            - kdevelop <unfixed> (embed)
1760    
1761    libxerces2
1762            - openjdk-6 <unfixed> (embed)
1763    
1764    kfreebsd-8
1765            - kfreebsd-7 <unfixed> (old-version)
1766            - kfreebsd-6 <removed> (old-version)
1767    
1768    ruby1.9.1
1769            - ruby1.9 <unfixed> (old-version)
1770            - ruby1.8 <unfixed> (old-version)
1771    
1772    maildrop
1773            - courier <unfixed> (embed) [./maildrop]
1774    
1775    glee
1776            - warzone2100 <unfixed> (embed)
1777    
1778    phing
1779            - symfony <unfixed> (embed)
1780    
1781    pake
1782            - symfony <unfixed> (embed)
1783    
1784    propel
1785            - symfony <unfixed> (embed)
1786    
1787    creole
1788            - symfony <unfixed> (embed)
1789    
1790    hfsutils
1791            - cdrkit <unfixed> (embed; bug #570187)
1792            NOTE: embeds hfsutils code in genisoimage
1793    
1794    cdrkit
1795            - grub2 <unfixed> (embed; bug #570156)
1796            NOTE: genisoimage imported into grub-mkisofs
1797    
1798    kdebase-workspace
1799            - kdebase <unfixed> (old-version)
1800    
1801    file
1802            - php5 <unfixable> (modified-embed)
1803            [lenny] - php5 <not-affected>
1804    
1805    cdb
1806            - php5 <unfixed> (embed)
1807    
1808    libmbfl (itp: #570708)
1809            - php5 <unfixed> (embed)
1810            NOTE: PHP is actually the current upstream, ITP is of that code
1811    
1812    libonig
1813            - php5 5.3.2-1 (embed)
1814    
1815    xmlrpc-epi
1816            - php5 <unfixed> (embed)
1817    
1818    swt-gtk
1819            - eclipse <unfixed> (embed; bug #538808)
1820    
1821    txt2html
1822            - wml 2.0.11ds2-1 (embed)
1823    
1824    ca-certificates
1825            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1826    
1827    openexr
1828            - freeimage <unfixed> (embed)
1829    
1830    libmng
1831            - freeimage <unfixed> (embed)
1832    
1833    openjpeg
1834            - freeimage <unfixed> (embed)
1835    
1836    libjpeg6b
1837            - freeimage <unfixed> (embed)
1838    
1839    libjpeg (don't know what exact version)
1840            - dcmtk <unfixed>
1841            - gdcm <unfixed>
1842            - insighttoolkit <unfixed>
1843            - openarena <unfixed>
1844            - outguess <unfixed>
1845            - squeak-vm <unfixed> (embed)
1846            - tremulous <unfixed>
1847            - tuxonice-userui <unfixed> (static)
1848            - fpc <unfixed> (static)
1849            - lazarus <unfixed> (static)
1850            NOTE: inherited from fpc, see #472304
1851            - mseide-msegui <unfixed> (static)
1852            NOTE: inherited from fpc, see #472304
1853            - easymp3gain <unfixed> (static)
1854            NOTE: inherited from fpc, see #472304
1855            - winff <unfixed> (static)
1856            NOTE: inherited from fpc, see #472304
1857            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1858    
1859    libfile-copy-recursive-perl
1860            - r-base <unfixed> (embed; bug #577427)
1861            - r-base-core-ra <unfixed> (embed; bug #577429)
1862    
1863    delimmatch
1864            - r-base <unfixed> (embed; bug #577433)
1865            - r-base-core-ra <unfixed> (embed; bug #577434)
1866    
1867    libsmf (ITP: #572558)
1868            - denemo <unfixed> (embed)
1869            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1870    
1871    libselinux
1872            - dpkg 1.15.6 (static)
1873    
1874    xinha (ITP: #479708)
1875            - horde3 <unfixed>
1876            - serendipity <unfixed>
1877            - openacs <unfixed>
1878            - dotlrn <unfixed>
1879    
1880    dvipng
1881            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1882    
1883    dvipdfmx
1884            - texlive-bin <unfixed> (embed)
1885            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1886    
1887    lcdf-typetools
1888            - texlive-bin 2009-1 (embed)
1889    
1890    tex4ht
1891            - texlive-bin 2009-1 (embed)
1892    
1893    freetype
1894            - texlive-bin 2009-1 (embed)
1895    
1896    freetype2
1897            - texlive-bin 2009-1 (embed)
1898    
1899  pax code:  silgraphite
1900  tar          - texlive-bin <unfixed> (embed)
 cpio  
1901    
1902  t1lib:  unzip
1903  tetex-bin (links to system t1lib since 2.0.2)          - texlive-bin 2009-1 (embed)
 texlive-bin (links to system t1lib)  
1904    
1905    jbig2dec
1906            - ghostscript 8.71~dfsg2-1 (embed)
Legend:
Removed from v.7827  
changed lines
  Added in v.14811
  ViewVC Help
Powered by ViewVC 1.1.5