/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 12061 by jmm-guest, Sat Jun 6 20:30:55 2009 UTC revision 15001 by iuculano, Mon Jul 19 13:15:44 2010 UTC
# Line 10  Format: Line 10  Format:
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>,  status: version number fixing the embedded copy
14          <itp> or <unknown> if the version number can not be determined          <unfixed> if the issue is not yet fixed
15          <unfixable> for unavoidable cases (e.g., forks that add real value)          <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
21        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
22        fork (the package is not just embedding code but it is a fork and        modified-embed (embeds a code copy that differs from upstream code)
23              thus might share parts of the source code)        fork (a full-blown fork of another source package)
24        old-version (the package is an older version of essentially        old-version (an older version of essentially the same code)
                    the same code)  
25    
26  The srcpkg might be some string to identify the code if there is no  The srcpkg might be some string to identify the code if there is no
27  specific source package.  specific source package.
# Line 27  Everything up to the next line is ignore Line 30  Everything up to the next line is ignore
30  ---BEGIN  ---BEGIN
31  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
32          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
33          - pdftohtml <unknown>          - pdftohtml <unknown>
34          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
35          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
# Line 37  xpdf (some srcpkgs use xpdf2 code, some Line 37  xpdf (some srcpkgs use xpdf2 code, some
37          - kdegraphics 4:4.2.2-1 (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38          - texlive-base 3.0-12 (embed)          - texlive-base 3.0-12 (embed)
39          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
40          NOTE: links to poppler          - koffice 1:2.0.0-1 (embed; bug #436163)
         - koffice <unfixed> (embed; bug #436163)  
41          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
42          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - pdfkit.framework 0.8-4 (embed)  
43          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
44          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
         NOTE: copy only present in source but links to poppler  
46          - pdfedit <unfixed> (embed; bug #510794)          - pdfedit <unfixed> (embed; bug #510794)
47          - swftools <unfixed> (embed)          - swftools <removed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50  ppmd  ppmd
51          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56            - chromium-browser 5.0.375.29~r46008-1
57    
58    lrmi
59            - read-edid 2.0.0-1 (embed; bug #495131)
60            - s3switch <unfixed> (embed)
61            - xresprobe <unfixed> (embed)
62            - zhcon <unfixed> (embed)
63    
64    php-htmlpurifier
65            - mahara 1.2.5-1 (embed)
66            - knowledgeroot <unfixed> (embed)
67            - moodle <unfixed> (embed)
68    
69  peercast  peercast
70          - gnome-peercast <unfixed> (embed)          - gnome-peercast <removed> (embed)
71          NOTE: gnome-peercast may better be removed, see #466539          [etch] - gnome-peercast <unfixed> (embed)
72    
73  silc-toolkit  silc-toolkit
74          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
# Line 63  icclib Line 77  icclib
77          - ghostscript <unfixed> (embed)          - ghostscript <unfixed> (embed)
78          - argyll <unfixed> (embed)          - argyll <unfixed> (embed)
79    
80    libusb
81            - argyll <unfixed> (embed)
82    
83  dietlibc  dietlibc
84          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
85    
# Line 71  libmikmod Line 88  libmikmod
88          TODO: report bug          TODO: report bug
89    
90  libiax  libiax
91          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
92    
93    spandsp
94            - iaxmodem <unfixable> (embed; bug #548885)
95    
96    python-paramiko
97            - fabric 0.9.0-2 (embed; bug #561398)
98    
99  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
100          - dpkg <unfixed> (embed)          - dpkg 1.15.6 (static)
101          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
102          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
103            - cherokee <unfixed> (embed)
104          NOTE: somehow derived code base          NOTE: somehow derived code base
105          - mono <unfixed> (embed)          - mono <unfixed> (embed)
106          TODO: check mozilla          TODO: check mozilla
# Line 90  zlib (lots of apps embed a copy, but lin Line 114  zlib (lots of apps embed a copy, but lin
114          - tra <unfixed>          - tra <unfixed>
115          - sash <unfixed>          - sash <unfixed>
116          - nsis <unfixed>          - nsis <unfixed>
117            - pyfits 1:2.3.1-1
118          - mseide-msegui <unfixed>          - mseide-msegui <unfixed>
119          NOTE: mseide          NOTE: mseide
120          - mirrordir <unfixed>          - mirrordir <unfixed>
121          - poco <unfixed>          - poco <unfixed>
122          - klibc <unfixed>          - klibc <unfixed>
123            - emboss <unfixed>
124          - ghostscript <unfixed>          - ghostscript <unfixed>
125          - freeimage <unfixed>          - freeimage <unfixed>
126          - clamav <unfixed> (fork)          - clamav <unfixed> (fork)
127          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
128          - tuxonice-userui <unfixed>          - tuxonice-userui <unfixed> (static)
129          - plt-scheme <unfixed>          - plt-scheme <unfixed>
130          - perl <unfixed>          - perl <unfixed>
131          - paraview <unfixed>          - paraview <unfixed>
132            - velvet 0.7.56~nozlibcopy-1
133          - gcvs <unfixed>          - gcvs <unfixed>
         - erlang <unfixed>  
134          - dump <unfixed>          - dump <unfixed>
135          - aide <unfixed> (static)          - aide <unfixed> (static)
136          - dar <unfixed> (static)          - dar <unfixed> (static)
# Line 114  zlib (lots of apps embed a copy, but lin Line 140  zlib (lots of apps embed a copy, but lin
140          NOTE: inherited from fpc, see #472304          NOTE: inherited from fpc, see #472304
141          - lazarus <unfixed>          - lazarus <unfixed>
142          NOTE: inherited from fpc, see #472304          NOTE: inherited from fpc, see #472304
143            - erlang <unfixed> (embed)
144            - gamera 3.2.3-1 (embed)
145            - python2.4 <unfixed> (embed; bug #553403)
146            - python2.5 <unfixed> (embed; bug #553403)
147            - texlive-bin <unknown> (embed)
148    
149    dulwich
150            - hg-git 0.1.0-1 (embed; bug #541996)
151    
152    libvigraimpex
153            - hugin <unfixed> (embed; bug #542259)
154            - enblend-enfuse <unfixed> (embed; bug #542258)
155            - gamera 3.2.3-1 (embed)
156    
157  libbz2  libbz2
158          - dpkg <unfixed> (static)          - dpkg 1.15.6 (static)
159            - amd64-libs <unfixed> (static)
160  libgadu:          NOTE: let's call it "static"
161          - centericq <unfixed> (embed)          - dar <unfixed> (static)
162          - gaim <unfixed> (embed)          - dump <unfixed> (static)
163          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)          - unalz <unfixed> (embed)
164            NOTE: has code, by the maint, to use the system version but links against the internal copy
165    
166    libyahoo2
167            - centerim <unfixed> (embed; bug #559783)
168    
169    libmsn
170            - centerim <unfixed> (embed; bug #559783)
171    
172    libgadu
173            - centerim <unfixed> (embed; bug #559783)
174            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
175            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
176          - kdenetwork 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
177          NOTE: from kdenetwork: kopete          NOTE: from kdenetwork: kopete
         - gadu <unfixed> (embed)  
178          - ekg 1:1.8~rc0-1 (embed)          - ekg 1:1.8~rc0-1 (embed)
179          - kadu 0.6.0.2-3 (embed; bug #504430)          - kadu 0.6.0.2-3 (embed; bug #504430)
180          NOTE: gadu not packaged in Debian yet          - gadu <itp> (embed)
181    
182  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
183          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
184          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
185          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
186          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
187          - php4 <unfixed> (embed)          - php4 <removed> (embed)
188          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
189    
190  shtool (affects build-time only)  shtool (affects build-time only)
191          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
192          - php4 <unfixed> (embed)          - php4 <removed> (embed)
193            - php5 <unfixed> (embed)
194    
195  mozilla source code  xulrunner
196          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
197          - mozilla-thunderbird <unfixed>          - iceweasel 2.0.0.19 (embed)
198          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
199          - thunderbird <removed>          - kompozer <unfixed> (embed; bug #532168)
200          - iceweasel <unfixed> (embed)          - galeon 2.0.2-4 (embed)
201          - iceape <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
202          - icedove <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
203          - xulrunner <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - nvu <removed> (embed)  
204    
205  xli  xli
206          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
207    
208  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
209          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
210          - libxpm <unfixed> (embed)  
211    libxpm
212            - lesstif <unfixed> (embed; bug #575750)
213    
214  kerberized apps with BSD origin  kerberized apps with BSD origin
215          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
216          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
217          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
218    
# Line 175  fudforum Line 227  fudforum
227          NOTE: phpgroupware-fudforum          NOTE: phpgroupware-fudforum
228          [sarge] - egroupware-fudforum <removed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
229    
230    libbsd
231            - rdate 1:1.2-3 (embed)
232            - atheme-services <unfixed>
233            - libbsd-arc4random-perl <unfixed>
234            - isakmpd <unfixed>
235            - bsdgames <unfixed> (embed)
236            - bsd-mailx <unfixed> (embed)
237            - netcat-openbsd <unfixed> (embed; bug #550611)
238            - openssh <unfixed> (embed)
239            - unworkable <unfixed> (embed)
240    
241  cvs  cvs
242          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
243          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
244    
245  pcre  pcre3
246          - python* <unfixed> (embed)          - php4 <removed> (embed)
         - php4 <unknown> (embed)  
247          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
248          - goffice <unfixed> (embed)          - goffice <unfixed> (embed)
249          NOTE: libgoffice-*          NOTE: libgoffice-*
# Line 195  pcre Line 257  pcre
257          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
258          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
259          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
260          - tin <unknown> (embed)          - tin 980117-1 (embed)
261          - kazehakase 0.5.2-1          - kazehakase 0.5.2-1
262          - webkit <unfixed> (embed)          - webkit 1.0.1-1 (embed)
263          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
264          NOTE: embedded via webkit copy          NOTE: embedded via webkit copy
265            - erlang <unfixed> (embed)
266            - ssed <unfixed> (embed)
267            - ircd-hybrid <unfixed> (static)
268            - emboss <unfixd>
269            - cherokee <unfixed> (embed)
270            - oftc-hybrid <unfixed> (embed)
271            - ratbox-services <unfixed> (embed)
272            - squeak-vm <unfixed> (embed)
273            - tinymux <unfixed> (embed)
274    
275  tiff  tiff
276          - wxwindows2.4 2.2.1 (embed)          - wxwindows2.4 2.2.1 (embed)
277            - gamera 3.2.3-1 (embed)
278            - freeimage <unfixed> (embed)
279            - libtk-img <unfixed> (embed)
280            NOTE: there are two copies, one under tiff/ other under libtiff/
281            - gdal <unfixed>
282    
283  uudeview  uudeview
284          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
# Line 212  sqlite (not affected by security vulnera Line 288  sqlite (not affected by security vulnera
288          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
289          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
290          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
291            - heimdal <unfixed> (embed; bug #559616)
292    
293  util-linux/mount  util-linux/mount
294          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
295          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
296    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
297  sylpheed  sylpheed
298          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
299    
# Line 235  phpldapadmin Line 308  phpldapadmin
308  chmlib  chmlib
309          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
310    
311  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
312          - mplayer 1.0~rc2-14 (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
313          - kino 1.0.0-1          - kino 1.0.0-1
314          - vlc <not-affected> (Links dynamically since initial release)          - vlc <not-affected> (Links dynamically since initial release)
# Line 243  libavcodec/libavformat (source: ffmpeg) Line 316  libavcodec/libavformat (source: ffmpeg)
316          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
317          - motion 3.1.19-1          - motion 3.1.19-1
318          - gstreamer0.10-ffmpeg 0.10.3-2          - gstreamer0.10-ffmpeg 0.10.3-2
319          - xmovie <unfixed>          - xmovie <removed> (static)
320          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
321            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
322            - audacity 1.3.7-2 (embed; bug #512278)
323            - chromium-browser <unfixed> (fork)
324    
325  faad2  faad2
326          - mplayer 1.0~rc2-20 (embed)          - mplayer 1.0~rc2-20 (embed)
327            - avifile <unfixed> (embed; bug #538750)
328            - ffmpeg-debian <removed> (embed)
329    
330  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
331          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
332            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
333            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
334    
335  libdts  libdts
336          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 263  liba52 Line 342  liba52
342          - a52dec <unfixed> (embed)          - a52dec <unfixed> (embed)
343          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
344    
345  libmpeg2  mpeg2dec (libmpeg2)
         - mpeg2dec <unfixed> (embed)  
346          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
347    
348  curl  libmpeg3
349          - wget <unfixed> (embed)          - squeak-vm <unfixed> (embed)
350          NOTE: code for NTLM authentication  
351    libntlm
352            - wget <unfixed> (fork; bug #550436)
353            - curl <unfixed> (fork; bug #550437)
354            - cntlm <unfixed> (fork; bug #550438)
355    
356  uw-imap  uw-imap
357          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 278  uw-imap Line 360  uw-imap
360  imagemagick  imagemagick
361          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
362    
363    python-urlgrabber
364            - mercurial <unfixed> (embed; bug #531062)
365            - w3af <unfixed> (embed; bug #555372)
366            [experimental] - harvestman <unfixed> (embed; bug #555373)
367    
368    beautifulsoup
369            - python-mechanize <unfixed> (embed; bug #555349)
370            - zope2.11 <removed> (embed; bug #555350)
371            - twill <unknown> (embed)
372    
373  halibut  halibut
374          - nsis <unfixed> (fork)          - nsis <unfixed> (fork)
375    
# Line 308  fckeditor Line 400  fckeditor
400          - moin 1.8.2-2 (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
401          - karrigell <removed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
402          - gforge 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
403            - request-tracker3.8 <unfixed> (embed)
404            - otrs2 <unfixed> (embed)
405    
406  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
407          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
# Line 315  ipatlas (not packaged in Debian) Line 409  ipatlas (not packaged in Debian)
409  libphp-phpmailer  libphp-phpmailer
410          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
411          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
412          - symfony <unfixed> (embed)          - symfony <unfixed> (embed; bug #566778)
413          [etch] - phpgroupware <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
414          NOTE: phpgroupware-felamimail is only in etch          NOTE: phpgroupware-felamimail is only in etch
415          - egroupware <unfixed> (embed; bug #504283)          - egroupware <unfixed> (embed; bug #504283)
# Line 324  libphp-phpmailer Line 418  libphp-phpmailer
418  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
419          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
420    
421  giflib:  giflib
422          - wine <unfixed> (embed; bug #466181)          - wine <unfixed> (embed; bug #466181)
423    
424  bennu (not packaged in Debian, http://bennu.sourceforge.net)  bennu (not packaged in Debian, http://bennu.sourceforge.net)
425          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
426    
427  smarty:  smarty
428          - moodle 1.8.2-2 (embed; bug #471158)          - moodle 1.8.2-2 (embed; bug #471158)
429          - gallery2 2.2.5-2 (embed; bug #471160)          - gallery2 2.2.5-2 (embed; bug #471160)
430          - mahara 0.9.2-2 (embed; bug #471201)          - mahara 0.9.2-2 (embed; bug #471201)
# Line 366  libphp-adodb Line 460  libphp-adodb
460          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
461    
462  gzip  gzip
463          - linux-kernel <unfixed> (embed)          - linux-2.6 <unfixed> (embed) [lib/inflate.c]
         NOTE: lib/inflate.c  
464          - klibc <unfixed> (embed)          - klibc <unfixed> (embed)
465          NOTE: based on linux-kernel gzip code          NOTE: based on linux-kernel gzip code
466          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
467            - pristine-tar <unfixed> (modified-embed)
468            NOTE: compression code only, not uncompression
469            - ncompress <unfixed> (old-version)
470    
471  neon  neon
472          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
473          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
474          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
475            - litmus <removed> (embed; #395875)
476          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
477          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
478          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
479          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
480    
481  libmodplug  libmodplug
482          - gst-plugins-bad0.10 <unfixed> (embed)          - gst-plugins-bad0.10 0.10.10.2-1 (embed)
483    
484  libvncserver  libvncserver
485          - vino <unfixed> (embed)          - vino <unfixed> (embed)
# Line 390  libvncserver Line 487  libvncserver
487  putty  putty
488          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
489    
490  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
491          - filezilla <unfixed>          - filezilla <unfixed>
492            - crystalspace <unfixed> (embed)
493            - libwfut <unfixed> (embed)
494            - rarian <unfixed> (embed)
495            - bulletml <unfixed> (embed)
496            - pokerth <unfixed> (embed)
497            - qutecom <unfixed> (embed)
498            - sofa-framework <unfixed> (embed)
499            - yate <unfixed> (embed)
500            - antigrav <unfixed> (embed)
501            - balder2d <unfixed> (embed)
502            - cal3d <unfixed> (embed)
503            - criticalmass <unfixed> (embed)
504            - ember <unfixed> (embed)
505            - epiphany <unfixed> (embed)
506            - gambit <unfixed> (embed)
507            - noiz2sa <unfixed> (embed)
508            - ogre <unfixed> (embed)
509            - opencity <unfixed> (embed)
510            - openmovieeditor <unfixed> (embed)
511            - pouetchess <unfixed> (embed)
512            - tecnoballz <unfixed> (embed)
513            - trigger-rally <unfixed> (embed)
514            - xmoto <unfixed> (embed)
515            - mapnik <unknown> (embed)
516            NOTE: uses a different XML parser by default
517            - rrootage 0.23a-6 <embed>
518            NOTE: links to libbulltetml
519            - boson <unknown> (embed)
520            NOTE: the embedded code is unused
521    
522  gv  gv
523          - evince <unfixed> (embed)          - evince <unfixed> (embed)
524          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
525          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
526    
527  libXbae  libXbae
528          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
529          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
530    
531    libgtkhtml
532            - claws-mail-extra-plugins <unfixed> (fork)
533    
534  libXaw  libXaw
535          [etch] - libpawlib2-lesstif <unfixed>          - paw <removed> (embed)
536          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
537          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
538    
539  libgd2  libgd2
540          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
541          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
542          - wml <unfixed> (embed)          - wml 2.0.11ds2-1 (embed)
543          - libwmf <unfixed> (embed)          - libwmf <unfixed> (embed)
544          NOTE: derived from gd 1.6.3          NOTE: derived from gd 1.6.3
545            - texlive-bin 2009-1 (embed)
546    
547  rar  rar
548          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 443  librpcsecgss Line 572  librpcsecgss
572          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
573    
574  jasper  jasper
575          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
576    
577  libiris  libiris
578          - psi <unfixed> (embed)          - psi <unfixed> (embed)
# Line 460  libidn Line 588  libidn
588          - kdegames <unfixed> (embed)          - kdegames <unfixed> (embed)
589          NOTE: kdegames/kde4 embeds libiris which embeds libidn          NOTE: kdegames/kde4 embeds libiris which embeds libidn
590    
591  liblua  lua5.1
592          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
593          - nmap <unfixed> (embed; bug #527997)          - nmap 5.00-1 (embed; bug #527997)
594          NOTE: fixed upstream as of nmap svn rev13336.          [lenny] - nmap <unfixed> (embed; bug #527997)
595            - ocropus <unfixed> (embed)
596            - enigma <unfixed> (embed)
597            NOTE: requires lua built with C++
598            - freeciv <unfixed> (embed)
599            - spring <unfixed> (embed)
600    
601  libbotan  libbotan
602          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
# Line 476  libgc Line 609  libgc
609    
610  lzma  lzma
611          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
612            - xz-utils <unfixed> (fork)
613    
614  lzo  lzo
615          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
616    
617  yassl  yassl
618          - mysql-dfsg-5.0 <unfixed> (embed)          - mysql-dfsg-5.0 <unfixed> (embed)
619            - mysql-dfsg-5.1 <unfixed> (embed)
620    
621  pax code  pax code
622          - tar <unfixed> (embed)          - tar <unfixed> (embed)
# Line 498  guichan Line 633  guichan
633  tolua  tolua
634          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
635          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
636            NOTE: actually tolua++
637            - ocropus <unfixed> (embed)
638            NOTE: actually tolua++
639            - freeciv <unfixed> (embed)
640            NOTE: actually tolua++
641            - enigma <unfixed> (embed)
642    
643  asio-dev  asio-dev
644          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
645    
646  xine-lib  xine-lib
647          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 529  plib1.8.4c2 Line 668  plib1.8.4c2
668          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
669    
670  fribidi  fribidi
671          - quesoglc <unfixed> (embed)          - quesoglc 0.7.2-2 (embed)
         NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system  
672    
673  glew  glew
674          - quesoglc <unfixed> (embed; bug #489341)          - quesoglc <unfixed> (embed; bug #489341)
675          NOTE: waiting on GLEW_MX version of glew (see bug #474488)          NOTE: waiting on GLEW_MX version of glew (see bug #474488)
676            - trigger 0.5.2.1-2 (embed)
677            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
678            - trigger-rally 0.5.2.1-2 (embed)
679            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
680            - chromium-browser 5.0.375.70~r48679-2
681    
682  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
683          - transcend <unfixed> (embed)          - transcend <unfixed> (embed)
# Line 550  cpio Line 693  cpio
693          - libarchive <unfixed> (embed)          - libarchive <unfixed> (embed)
694          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
695    
696    kde4libs
697            - kdelibs <unfixable> (old-version)
698    
699  webkit  webkit
700          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed; bug #479851)
701            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
702            - kde4libs <unfixable> (fork)
703            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
704            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
705            - chromium-browser <unfixed> (fork)
706    
707  ftgl  ftgl
708          - blender 2.46+dfsg-1 (embed)          - blender 2.46+dfsg-1 (embed)
# Line 560  wv Line 711  wv
711          - abiword <unfixed>          - abiword <unfixed>
712    
713  qemu  qemu
714          - kvm <unfixed> (embed)          - kvm <removed> (embed; bug #543159)
715          - xen-3 <unfixed> (embed)          - qemu-kvm <unfixed> (embed; bug #560853)
716          - xen-unstable <unfixed> (embed)          NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
717            - xen-3 3.4.2-2 (embed; bug #560856)
718            - xen-unstable <unfixed> (embed; bug #560856)
719    
720  vgabios  vgabios
721          - kvm <unfixed> (embed; bug #489442)          - kvm <removed> (embed; bug #489442)
722            - qemu-kvm <unfixed> (embed)
723    
724  bochs  bochs
725          - kvm <unfixed> (embed; bug #489442)          - kvm <removed> (embed; bug #489442)
726            - qemu-kvm <unfixed> (embed)
727    
728  speex  speex
729          - vorbis-tools <unfixed> (embed)          - vorbis-tools <unfixed> (embed)
# Line 576  speex Line 731  speex
731          - gst-plugins-good0.10 <unfixed> (embed)          - gst-plugins-good0.10 <unfixed> (embed)
732          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
733          - libfishsound <unfixed> (embed)          - libfishsound <unfixed> (embed)
734          - libannodex <unfixed> (embed)          - libannodex <removed> (embed)
735          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
736          - xmms-speex <unfixed> (embed)          - xmms-speex <unfixed> (embed)
737          - libsdl-sound1.2 <unfixed> (embed)          - libsdl-sound1.2 <unfixed> (embed)
738          - sweep <unfixed> (embed)          - sweep <unfixed> (embed)
739    
740  libreadline  libreadline
741          - magic <unfixed> (old-version)          - magic <itp> (old-version)
         NOTE: magic is currently an RFS  
742    
743  opcode  opcode
744          - ode <unfixed> (embed)          - ode <unfixed> (embed)
# Line 600  mochikit Line 754  mochikit
754          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
755          NOTE: they require extra patches, still unmerged upstream          NOTE: they require extra patches, still unmerged upstream
756          - ntop <unfixed> (embed)          - ntop <unfixed> (embed)
757          - coherence <unfixed> (embed)          - coherence 0.6.2-1 (embed)
         NOTE: python-coherence  
758          - paste <unfixed> (embed)          - paste <unfixed> (embed)
         NOTE: python-paste  
759          - turbogears <unfixed> (embed)          - turbogears <unfixed> (embed)
760          NOTE: python-turbogears          - plone3 <removed> (embed)
761          - plone3 <unfixed> (embed)          - xulrunner <unfixed> (embed)
762          NOTE: zope-plone3          - libjifty-plugin-chart-perl <unfixed> (embed)
763            - sabnzbdplus <unfixed> (embed)
764  prototype          - tgmochikit <unfixed> (embed)
765          - netbeans-ide <unfixed> (embed)  
766          - auth2db-frontend <unfixed> (embed)  prototypejs
767          - webcit <unfixed> (embed)          - netbeans-ide 6.0.1+dfsg-2 (embed)
768          NOTE: citadel-webcit          - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
769          - asterisk <unfixed> (embed)          - webcit <unfixed> (embed; bug #555219)
770          - doc-iana <unfixed> (embed)          - asterisk 1:1.6.2.0~rc3-1 (embed)
771          - libaws <unfixed> (embed)          - libjson-ruby 1.1.4-1 (embed; bug #555224)
772          NOTE: libaws-doc          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
773          - libgettext-ruby <unfixed> (embed)          - horde3 <unfixed> (embed)
774          NOTE: libgettext-ruby-data          - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
775          - libjson-ruby <unfixed> (embed)          - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
776          NOTE: libjson-ruby-doc          - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
777          - lucene2 <unfixed> (embed)          - ebug-http <removed> (embed; bug #555236)
778          NOTE: liblucene2-java-doc          - libaws 2.7-1 (embed; bug #555222)
         - libopenid-ruby <unfixed> (embed)  
         - solr <unfixed> (embed)  
         NOTE: solr-common  
         - glpi <unfixed> (embed)  
         - hobbix <unfixed> (embed)  
         - mnemo2 <unfixed> (embed)  
         - nag2 <unfixed> (embed)  
         - knowledgeroot <unfixed> (embed)  
         - mediatomb <unfixed> (embed)  
         NOTE: mediatomb-common  
         - mt-daapd <unfixed> (embed)  
         - op-panel <unfixed> (embed)  
         - ebug-http <unfixed> (embed)  
779          - phpgedview <removed> (embed)          - phpgedview <removed> (embed)
780          - poker-network <unfixed> (embed)          - poker-network 1.7.6-1 (embed; bug #555238)
781          NOTE: poker-web          - rails 2.1.0-6 (embed)
782          - webhelpers <unfixed> (embed)          - wordpress 2.5.0-2 (embed; bug #555243)
783          NOTE: python-webhelpers          - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
784          - qwik <unfixed> (embed)          TODO: search through all of the other zope packages
         - rails <unfixed> (embed)  
         - typo3-src <unfixed> (embed)  
         - wordpress <unfixed> (embed)  
         - zope <unfixed> (embed)  
         NOTE: zope-plone3  
         - smokeping <unfixed> (embed)  
785          - ampache 3.4.1-2 (embed)          - ampache 3.4.1-2 (embed)
786          - exaile <unfixed> (embed)          - exaile 0.2.14+debian-2.1 (embed; bug #555245)
787          - hobix <unfixed> (embed)          - hobix 0.5~svn20070319-4 (embed; bug #555247)
788          - pixelpost <unfixed> (embed)          - zabbix 1.6.6-4 (embed; bug #555250)
789          - symfony <unfixed> (embed)          - chora2 <unfixed> (embed; bug #555253)
790          NOTE: it's been said that there are custom changes          - gollem <unfixed> (embed; bug # 555254)
791          - zabbix <unfixed> (embed)          - jscropperui 1.2.1-1 (embed; bug #555257)
792          NOTE: zabbix-frontend-php          - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
793          - turba2 <unfixed> (embed)          - ingo1 1.2.3+debian0-1 (embed; bug #555261)
794            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
795            - activeldap 1.2.1-1 (embed)
796            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
797            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
798            - otrs2 2.3.4-6 (embed; bug #555267)
799            - webcalendar 1.2~b1-2 (embed; bug #555269)
800            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
801            - jifty 0.90519-1 (embed; bug #555271)
802            - jquery 1.4-1 (embed; bug #555272)
803            - passenger 2.2.5debian1-1 (embed; bug #555273)
804            - plone3 <removed> (embed; bug #555275)
805            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
806            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
807            - xulrunner <unfixed> (embed)
808            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
809    
810  gdb  gdb
811          - insight <unfixed> (embed)          - insight <unfixed> (embed)
# Line 680  java Line 828  java
828    
829  libphp-snoopy  libphp-snoopy
830          - ampache 3.4.1-2 (embed; bug #504169)          - ampache 3.4.1-2 (embed; bug #504169)
831            - gforge 4.6.99+svn6094-2 (embed)
832          - mahara 1.0.5-2 (embed; bug #504170)          - mahara 1.0.5-2 (embed; bug #504170)
833          - pixelpost <unfixed> (embed; bug #504171)          - pixelpost 1.7.1-5 (embed; bug #504171)
834          - mediamate 0.9.3.6-5 (embed; bug #504172)          - mediamate 0.9.3.6-5 (embed; bug #504172)
835          - opendb <unfixed> (embed; bug #504173)          - opendb <removed> (embed; bug #504173)
836            [etch] - opendb <unfixed> (embed; bug #504173)
837          - wordpress 2.5.1-9 (embed; bug #443948)          - wordpress 2.5.1-9 (embed; bug #443948)
838          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
839          [etch] - phpgroupware <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
# Line 692  libphp-snoopy Line 842  libphp-snoopy
842    
843  jquery  jquery
844          - zekr <unfixed> (embed)          - zekr <unfixed> (embed)
845          - wordpress <unfixed> (embed)          - wordpress <unknown> (embed)
846          - yocto-reader <unfixed> (embed)          - yocto-reader <unfixed> (embed)
847          - textpattern <unfixed> (embed)          - textpattern <unfixed> (embed)
848          - genshi 0.5.1-1 (embed)          - genshi 0.5.1-1 (embed)
# Line 709  tablesorter (jquery plugin, not packaged Line 859  tablesorter (jquery plugin, not packaged
859  kses  kses
860          - wordpress <unfixed> (embed; bug #504242)          - wordpress <unfixed> (embed; bug #504242)
861          NOTE: their copy has all methods renamed to wp_<foo>          NOTE: their copy has all methods renamed to wp_<foo>
862            NOTE: kses isn't in Debian, RFP: #504240
863          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
864          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
865    
# Line 717  magpierss Line 868  magpierss
868          - moodle <unfixed>          - moodle <unfixed>
869    
870  php-gettext  php-gettext
871          - wordpress <unfixed> (embed; bug #504242)          - wordpress 2.8.4-1 (embed; bug #504242)
872            - docbookwiki <unfixed> (embed)
873            - knowledgeroot 0.9.9.5-1
874            NOTE: non-free
875    
876  libphp-ixr (name may change, it is the Incutio XML-RPC)  libphp-ixr (name may change, it is the Incutio XML-RPC)
877          - wordpress <unfixed> (embed; bug #504242)          - wordpress <unfixed> (embed; bug #504242)
878            NOTE: libphp-ixr isn't in Debian, RFP: #504236
879          - dokuwiki <unfixed> (embed)          - dokuwiki <unfixed> (embed)
880          - textpattern <unfixed> (embed)          - textpattern <unfixed> (embed)
881    
882  libphp-cas  libphp-cas
883          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
884          - moodle <unfixed> (embed; bug #496069)          - moodle <unfixed> (embed; bug #505984)
885    
886  scriptaculous  scriptaculous (prototype.js is among the embeds in the following)
887          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
888          - libaws <unfixed> (embed)          - libaws <unfixed> (embed; bug #555222)
         NOTE: libaws-doc  
889          - op-panel <unfixed> (embed)          - op-panel <unfixed> (embed)
890          - symfony <unfixed> (embed)          - symfony <unfixed> (embed)
891          NOTE: maintainer says there are extra incompatible changes required          NOTE: maintainer says there are extra incompatible changes required
892          - pixelpost <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
893          - webhelpers <unfixed> (embed)          - webhelpers <unfixed> (embed)
894          NOTE: python-webhelpers          - qwik <removed> (embed; bug #555241)
         - qwik <unfixed> (embed)  
895          - smokeping <unfixed> (embed)          - smokeping <unfixed> (embed)
896          - turba2 <unfixed> (embed)          - turba2 <unfixed> (embed)
897          - typo3-src 4.2.3-1 (embed)          - typo3-src 4.2.3-1 (embed)
898            - request-tracker3.6 <unfixed> (embed)
899            - request-tracker3.8 <unfixed> (embed)
900            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
901            - wordpress 2.5.0-2 (embed)
902            - libhtml-prototype-perl 1.48-3 (embed)
903    
904  libmarkdown-php  libmarkdown-php
905          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
906          - pixelpost <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
907    
908  php-openid  php-openid
909          - wordpress-openid <itp> (embed)          - wordpress-openid <itp> (embed)
# Line 756  geshi Line 914  geshi
914          - websvn 2.1.0-1 (embed)          - websvn 2.1.0-1 (embed)
915    
916  webcalendar  webcalendar
917          - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)          - gforge 4.7~rc2-6 (embed; bug #504758)
918    
919  libical  libical
920          - kdepim <unfixed> (fork)          - kdepim <unknown> (fork)
921          - kdepimlibs <unfixed> (fork)          NOTE: fixed at some point during 4.0
922          NOTE: fixed in KDE4 post 4.1.x series          - kdepimlibs 4.2.0-1 (fork)
923            - claws-mail-extra-plugins <unfixed> (fork)
 libltdl3  
         - kdelibs <unfixed> (embed)  
         NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it  
         - synfig <unfixed> (embed)  
924    
925  harfbuzz  harfbuzz
926          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
927            - pango1.0 <unfixed> (embed)
928            - fontmatrix <unfixed> (embed)
929    
930  libzip  libzip
931          - php5 <unfixed> (fork)          - php5 <unfixable> (modified-embed)
932          - odt2txt <unfixed> (embed; bug #523808)          - odt2txt <unfixed> (embed; bug #523808)
933    
934  json.php (not packaged; should be replaced with php's built-in functions)  json.php (not packaged; should be replaced with php's built-in functions)
# Line 815  rssparser (http://nwow.org) Line 971  rssparser (http://nwow.org)
971    
972  lcms  lcms
973          - openjdk-6 <unfixed> (fork)          - openjdk-6 <unfixed> (fork)
974            - gimp 2.4.0~rc2-2
975    
976  libphp-phplayersmenu  libphp-phplayersmenu
977          - diogenes <unfixed>          - diogenes <unfixed>
# Line 827  libphp-pclzip Line 984  libphp-pclzip
984    
985  libphp-simplepie  libphp-simplepie
986          - dokuwiki <unfixed>          - dokuwiki <unfixed>
987            - wordpress <unfixed>
988    
989  libphp-jpgraph  libphp-jpgraph
990          - egroupware <unfixed>          - egroupware <unfixed>
# Line 835  php-simpletest Line 993  php-simpletest
993          - moodle <unfixed>          - moodle <unfixed>
994    
995  libpng  libpng
996          - iceweasel <unfixed> (embed)          - iceweasel <not-affected> (uses xulrunner)
997          NOTE: 3.0 uses embedded copy, 2.0 uses system libpng          - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
         - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)  
998          - iceape 1.0.13~pre080614i-0etch1 (embed)          - iceape 1.0.13~pre080614i-0etch1 (embed)
999          - xulrunner <unfixed> (embed)          - xulrunner 1.9.0.13-1 (embed)
1000          NOTE: Debian 1.9.0.6 uses embedded copy          [lenny] - xulrunner 1.9.0.11-0lenny1
1001          NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng          [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1002          - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)          - gamera 3.2.3-1 (embed)
1003          NOTE: Ubuntu only          - freeimage <unfixed> (embed)
1004          - firefox-3.0 <unfixed> (embed)          - tuxonice-userui (static)
         NOTE: Ubuntu only  
         - firefox-3.1 <unfixed> (embed)  
         NOTE: Ubuntu only  
         - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)  
         NOTE: Ubuntu only  
         - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)  
         NOTE: Ubuntu only  
         - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)  
         NOTE: Ubuntu only  
1005    
1006  irssi  irssi
1007          - silc-client <unfixed> (embed)          - silc-client <unfixed> (embed)
# Line 871  libitext-java Line 1019  libitext-java
1019          - bouncycastle 2.1.4-1 (embed)          - bouncycastle 2.1.4-1 (embed)
1020    
1021  python-ply  python-ply
1022          - pyke <unfixed> (embed)          - pyke <unfixed> (embed; bug #555363)
1023            - pywbem 0.7.0-4 (embed; bug #555364)
1024            - sepolgen <unfixed> (embed; bug #555365)
1025            - zope-textindexng3 <unknown> (embed)
1026            - iceweasel <not-affected> (uses xulrunner)
1027            - xulrunner <unknown> (embed)
1028            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1029    
1030  libdumbnet (libdnet upstream)  libdumbnet (libdnet upstream)
1031          - nmap <unfixed> (fork)          - nmap <unfixed> (fork)
1032    
1033    gcc-4.4
1034            - gcc-mingw32 <unfixed> (embed)
1035    
1036    camlimages
1037            - advi <unfixed> (static; bug #550441)
1038    
1039    memcached
1040            - memcachedb <unfixed> (embed)
1041    
1042    yajl
1043            - argyll <unfixed> (embed; bug #544223)
1044            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1045    
1046    nusoap
1047            - gforge 4.8.2-1 (embed)
1048            - ampache <unfixed> (embed)
1049            - poker-network <unfixed> (embed)
1050            - moodle <unfixed> (embed)
1051            NOTE: code is not used when running under php5 and soap is enabled
1052            - phpwiki <unfixed> (embed)
1053            - gallery2 <unfixed> (embed)
1054            - typo3-src <unfixed> (embed)
1055    
1056    libept
1057            - adept <unfixed> (embed; bug #540649)
1058    
1059    libvorbis
1060            - iceweasel <not-affected> (uses xulrunner)
1061            - xulrunner <unfixed> (embed; bug #540959)
1062            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1063            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1064            - iceape <unfixed> (embed)
1065            [etch] - iceape <not-affected> (introduced in 2.0)
1066            [lenny] - iceape <not-affected> (introduced in 2.0)
1067    
1068    cairo
1069            - iceweasel <not-affected> (uses xulrunner)
1070            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1071    
1072    liboggz
1073            - iceweasel <not-affected> (uses xulrunner)
1074            - xulrunner <unfixed> (embed; bug #540959)
1075            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1076            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1077            - iceape <unfixed> (embed)
1078            [etch] - iceape <not-affected> (introduced in 2.0)
1079            [lenny] - iceape <not-affected> (introduced in 2.0)
1080    
1081    liboggplay
1082            - iceweasel <not-affected> (uses xulrunner)
1083            - xulrunner <unfixed> (embed; bug #540959)
1084            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1085            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1086            - iceape <unfixed> (embed)
1087            [etch] - iceape <not-affected> (introduced in 2.0)
1088            [lenny] - iceape <not-affected> (introduced in 2.0)
1089    
1090    php-net-dnsbl
1091            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1092    
1093    php-onyx-rss
1094            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1095    
1096    php-text-wiki
1097            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1098    
1099    php-xml-rpc
1100            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1101    
1102    polarssl (does not have a shared library)
1103            - pdkim <itp> (embed; bug #543150)
1104            - xyssl <unfixed> (old-version)
1105    
1106    pidgin (libpurple)
1107            - gaim <removed> (old-version)
1108            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1109    
1110    icu
1111            - webkit 1.0.1-1 (embed; bug #547214)
1112            - texlive-bin <unfixed> (fork)
1113            NOTE: texlive upstream working with icu upstream to merge their changes
1114            - chromium-browser 5.0.375.29~r46008-3
1115    
1116    cyrus-imapd-2.2
1117            - kolab-cyrus-imapd <unfixed> (fork)
1118            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1119    
1120    python-cxx-dev
1121            - freecad 0.9.2646.3-1 (embed; bug #547936)
1122    
1123    zipios++
1124            - freecad 0.9.2646.3-1 (embed; bug #547941)
1125            - enigma 0.92.3-3 (embed)
1126            NOTE: likely fixed earlier, marking etch's version as fixed
1127    
1128    linux-2.6
1129            - kvm <removed> (embed; bug #549973) [./kernel/*]
1130            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1131            - kernel-source-2.6.8 <removed> (old-version)
1132            - kernel-source-2.4.27 <removed> (old-version)
1133            - kernel-source-2.4.24 <removed> (old-version)
1134            - kernel-source-2.2.25 <removed> (old-version)
1135            - kernel-source-2.2.20 <removed> (old-version)
1136    
1137    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1138            - kvm <removed> (embed) [./libfdt/*]
1139            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1140    
1141    qweb (not packaged)
1142            - ajaxterm <unfixed>
1143    
1144    opensaml2
1145            - opensaml <removed> (old-version)
1146    
1147    shibboleth-sp2
1148            - shibboleth-sp <removed> (old-version)
1149    
1150    tuxonice-userui
1151            - suspend2-userui <removed> (old-version)
1152    
1153    expat
1154            - w3c-libwww <removed> (embed; bug #551941)
1155            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1156            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1157            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1158            - python2.4 <unfixable> (embed; bug #553403)
1159            - python-4suite <unfixed> (embed; bug #516935)
1160            - wxwindows2.4 <removed> (embed)
1161            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1162            - wxwidgets2.8 2.8.10.1-2 (embed)
1163            - celementtree 1.0.5-8 (embed)
1164            NOTE: Maybe that was fixed even earlier
1165            - audacity 1.3.2-1 (embed)
1166            - matanza <unfixed> (embed)
1167            - tdom 0.8.3~20080525-1 (embed)
1168            - udunits 2.1.8-4 (embed)
1169            - apr-util 1.2 (embed)
1170            - ayttm <unfxed> (embed; bug #561006)
1171            - cableswig <unfixed> (embed)
1172            - cadaver <unfixed> (embed)
1173            - cmake 2.6.0-6 (embed)
1174            - coin3 <unfixed> (embed)
1175            - gdcm 2.0.14-2 (embed)
1176            - ghostscript 8.71~dfsg-2 (embed)
1177            - grmonitor <removed> (embed)
1178            - iceape <unfixed> (embed)
1179            - insighttoolkit 3.16.0-1 (embed)
1180            NOTE: insighttoolkit might've been fixed earlier
1181            - libparagui1.1 1.0.2-1 (embed)
1182            - paraview 3.6.2-1 (embed)
1183            - poco 1.3.6p1-1 (embed)
1184            - simgear <unfixed> (embed)
1185            - sitecopy 1:0.16.0-1
1186            - smart <unfixed> (embed)
1187            NOTE: smart embeds celementree, and it includes expat
1188            - swish-e <not-affected> (Linked against libxml, which is used instead)
1189            - tla 1.3.5+dfsg-15 (embed)
1190            - vtk 4.1.20030227-1 (embed)
1191            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1192            - xmlrpc-c <unfixed> (embed)
1193            - iceweasel <unfixed> (embed)
1194            - kompozer <unfixed> (embed)
1195            - vxl 1.13.0-2 (embed)
1196            - xulrunner <unfixed> (embed)
1197            - apache2 2.2 (embed)
1198            - texlive-bin <not-affected> (Embedded code not compiled in)
1199            - vnc4 <unfixed> (embed)
1200            - xotcl 1.6.6-1 (embed)
1201            - chromium-browser 5.0.375.29~r46008-3
1202    
1203    xerces-c
1204            - xerces-c2 <unfixed> (old-version)
1205            - xerces27 <removed> (old-version)
1206    
1207    md5 (RSA's version; not the gnu version provided by coreutils)
1208            - w3c-libwww <removed> (embed; bug #551942)
1209            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1210    
1211    libparagui1.1
1212            - asc <unfixable> (fork)
1213    
1214    enet
1215            - sauerbraten <unfixed> (embed; #497194)
1216    
1217    eglibc
1218            - glibc <removed> (old-version)
1219    
1220    galib
1221            - gamera 3.2.3-1 (embed)
1222    
1223    configobj
1224            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1225            - elisa <unfixed> (embed; bug #555337)
1226            - gaupol <unfixed> (embed; bug #555338)
1227            - ipython <unfixed> (embed; bug #555339)
1228            - pida <unfixed> (embed; bug #555340)
1229            - psychopy <unfixed> (embed; bug #555341)
1230            - rest2web <unfixed> (embed; bug #555342)
1231            - auth2db <unknown> (embed)
1232            - dynagen <unknown> (embed)
1233            - iceweasel <unknown> (embed)
1234            - sabnzbdplus <unknown> (embed)
1235            - xulrunner <unknown> (embed)
1236            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1237    
1238    python-clientform
1239            - bibus <unfixed> (embed; bug #555332)
1240            - zope2.10 <unfixed> (embed; bug #555333)
1241            - zope2.11 <removed> (embed; bug #555334)
1242            - python-mechanize <unknown> (embed)
1243            - twill <unknown> (embed)
1244    
1245    python-mechanize
1246            - zope2.10 <unfixed> (embed; bug #555337)
1247            - zope2.11 <removed> (embed; bug #555338)
1248            - twill <unknown> (embed; bug #555339)
1249    
1250    pexpect
1251            - duplicity 0.6.06-1 (embed; bug #555361)
1252            - hplip <unfixed> (embed; bug #555362)
1253            - smart <unfixed> (embed; bug #555363)
1254    
1255    pyparsing
1256            - bauble <unfixed> (embed; bug #555366)
1257            - boa-constructor 0.6.1-8 (embed; bug #555367)
1258            - calibre <unfixed> (embed; bug #555368)
1259            - matplotlib <unfixed> (embed; bug #531024)
1260            - zhpy 1.7.3.1-1 (embed; bug #555370)
1261            - polybori <unknown> (embed)
1262            - python-whoosh <unknown> (embed)
1263            - twill <unknown> (embed)
1264            - zope-textindexng3 <unknown> (embed)
1265    
1266    python-pysqlite2
1267            - python2.4 <unfixed> (embed; bug #553403)
1268            - python2.5 <unfixed> (embed; bug #553403)
1269    
1270    celementtree
1271            - python2.5 <unfixed> (embed)
1272            - smart <unfixed> (embed)
1273    
1274    elementtree
1275            - python2.5 <unfixed> (embed)
1276            - python2.6 <unfixed> (embed)
1277            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1278            - gedit 2.28.2-1 (embed; bug #555344)
1279            - smart <unfixed> (embed)
1280            - solfege <unfixed> (embed; bug #555345)
1281            - w3af <unfixed> (embed; bug #555346)
1282            - python-qt4 <unknown> (embed)
1283            - sphinx <unknown> (embed)
1284            - python-nltk <itp> (embed)
1285    
1286    python2.5
1287            - python2.4 <unfixed> (old-version)
1288            - jython <unfixed> (embed)
1289            NOTE: embeds many stdlib modules
1290            - python-django <unfixed> (embed; bug #555419)
1291            NOTE: embeds stdlib modules: doctest, decimal
1292            - gamera 3.2.3-1 (embed)
1293            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1294            - boa-constructor <unfixed> (embed; bug #555426)
1295            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1296            - nicotine <unfixed> (embed; bug #555427)
1297            NOTE: embeds stdlib modules: ConfigParser
1298            - museek+ <unfixed> (embed; bug #555428)
1299            NOTE: embeds stdlib modules: ConfigParser
1300            - vegastrike-data <unfixed> (embed)
1301            NOTE: embeds many stdlib modules
1302            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1303            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1304            - config-manager <unfixed> (embed; bug #555423)
1305            NOTE: embeds stdlib modules: optparse
1306            - jhbuild 2.28.0-1 (embed; bug #555421)
1307            NOTE: embeds stdlib modules: optparse, subprocess
1308            - smart <unfixed> (embed; bug #555432)
1309            NOTE: embeds stdlib modules: optparse
1310            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1311            NOTE: embeds stdlib modules: doctest
1312            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1313            NOTE: embeds stdlib modules: doctest
1314            - distribute <unfixed> (embed)
1315            NOTE: embeds stdlib modules: doctest
1316            - python-setuptools <unfixed> (embed; bug #555435)
1317            NOTE: embeds stdlib modules: doctest
1318            - zope.testing <unfixed> (embed; bug #555436)
1319            NOTE: embeds stdlib modules: doctest
1320            - translate-toolkit <unfixed> (embed; bug #555422)
1321            NOTE: embeds stdlib modules: textwrap, contextlib
1322            - libtpclient-py <unfixed> (embed; bug #555424)
1323            NOTE: embeds stdlib modules: subprocess
1324            - grass <unfixed> (embed; bug #555425)
1325            NOTE: embeds stdlib modules: subprocess
1326            - coherence <unfixed> (embed; bug #555429)
1327            NOTE: embeds stdlib modules: uuid
1328            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1329            NOTE: embeds stdlib modules: uuid
1330            - setroubleshoot <unfixed> (embed; bug #555431)
1331            NOTE: embeds stdlib modules: uuid
1332            - linkchecker <unfixed> (embed; bug #555414)
1333            NOTE: embeds msgfmt.py script
1334            - imdbpy <unfixed> (embed)
1335            NOTE: embeds msgfmt.py script
1336            - kiwi <unfixed> (embed)
1337            NOTE: embeds msgfmt.py script
1338            - moin <unfixed> (embed)
1339            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1340            - plone3 <removed> (embed)
1341            NOTE: embeds msgfmt.py script
1342            - roundup <unfixed> (embed)
1343            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1344            - rednotebook <unfixed> (embed; bug #555415)
1345            NOTE: embeds msgfmt.py script
1346            - turbogears <unfixed> (embed)
1347            NOTE: embeds msgfmt.py script
1348            - elisa <unfixed> (embed)
1349            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1350            - calibre <unfixed> (embed)
1351            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1352            - mailman 1:2.1.13-1 (embed; #555416)
1353            NOTE: embeds msgfmt.py script
1354            - python-docutils <unknown> (embed)
1355            NOTE: embeds stdlib modules: optparse, textwrap
1356            - python-imaging <unknown> (embed)
1357            NOTE: embeds stdlib modules: doctest
1358            - python-mechanize <unknown> (embed)
1359            NOTE: embeds stdlib modules: doctest
1360            - twill <unknown> (embed)
1361            NOTE: embeds stdlib modules: subprocess
1362            - zeroc-ice <unknown> (embed)
1363            NOTE: embeds stdlib modules: subprocess
1364            - wxwidgets2.8 <unknown> (embed)
1365            NOTE: embeds stdlib modules: subprocess
1366            - cycle <unknown> (embed)
1367            NOTE: embeds msgfmt.py script
1368            - deluge <unknown> (embed)
1369            NOTE: embeds msgfmt.py script
1370            - opendict <unknown> (embed)
1371            NOTE: embeds msgfmt.py script
1372            - openerp-client <unknown> (embed)
1373            NOTE: embeds msgfmt.py script
1374            - rapidsvn <unknown> (embed)
1375            NOTE: embeds msgfmt.py script
1376            - wammu <unknown> (embed)
1377            NOTE: embeds msgfmt.py script
1378            - gaphor <unknown> (embed)
1379            NOTE: embeds msgfmt.py script
1380            - pida <unknown> (embed)
1381            NOTE: embeds msgfmt.py script
1382            - python-formencode <unknown> (embed)
1383            NOTE: embeds msgfmt.py script
1384            - duplicity <unfixed> (embed)
1385            NOTE: embeds stdlib module: urlparse, tarfile
1386            - pygopherd <unfixed> (embed)
1387            NOTE: embeds stdlib module: zipfile
1388    
1389    argparse
1390            - twill <unfixed> (embed; bug #555347)
1391            - ipython <unfixed> (embed; bug #555348)
1392    
1393    coherence
1394            - elisa <unfixed> (embed; bug #555335)
1395    
1396    simpletal
1397            - plastex <unfixed> (embed; bug #555371)
1398    
1399    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1400            - postr <unfixed> (embed)
1401            - elisa <unfixed> (embed)
1402    
1403    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1404            - apertium-tolk <unfixed> (embed)
1405            - ipython <unfixed> (embed)
1406            - virtaal <unfixed> (embed)
1407    
1408    distribute
1409            - setuptools <removed> (old-version)
1410    
1411    rails
1412            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1413            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1414            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1415            - thin <unfixed> (embed) [./spec/rails_app/*]
1416            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1417            NOTE: be dangerous if developers are naively basing their code off of the examples
1418            NOTE: prototype.js is among the example files
1419    
1420    lucene2 (prototype.js is among the embeds in the following)
1421            - lucene <unfixed> (old-version)
1422            - pylucene <unfixed> (embed)
1423            - libpdfbox-java <unfixed> (embed)
1424            - libfontbox-java <unfixed> (embed)
1425            - libjempbox-java <unfixed> (embed)
1426            - solr <unfixed> (embed)
1427    
1428    unicode-data
1429            - syslinux <unfixed> (embed)
1430            - camomile <unfixed> (embed)
1431            - fribidi <unfixed> (embed)
1432            - m17n-db <unfixed> (embed)
1433            - sbcl <unfixed> (embed)
1434            - heimdal <unfixed> (embed)
1435            - icu <unfixed> (embed)
1436            - icu4j <unfixed> (embed)
1437            - krb5 <unfixed> (embed)
1438            - moodle <unfixed> (embed)
1439            - openldap <unfixed> (embed)
1440            - pike7.6 <unfixed> (embed)
1441            - samba <unfixed> (embed)
1442            - samba4 <unfixed> (embed)
1443            - cmucl <unfixed> (embed)
1444            - typo3-src <unfixed> (embed)
1445            - mauve <unfixed> (embed)
1446            - texlive-bin <unfixed> (embed)
1447            - ypsilon <unfixed> (embed)
1448            - jeuclid <unfixed> (embed)
1449            - charmap.app <unfixed> (embed)
1450            - clisp <unfixed> (embed)
1451            - gnulib <unfixed> (embed)
1452            - opensrs-client <unfixed> (embed)
1453            - saxonb <unfixed> (embed)
1454            - rails <unfixed> (embed)
1455    
1456    feedparser
1457            - rawdog <unfixed> (embed; bug #383422)
1458            - miro <unfixed> (embed; bug #555351)
1459            - calibre <unfixed> (embed; bug #555352)
1460            - freevo <unfixed> (embed; bug #555353)
1461            - pida <unfixed> (embed; bug #555354)
1462            - planet-venus <unfixed> (embed; bug #555355)
1463            - plone3 <removed> (embed; bug #555356)
1464            - exaile 0.2.14+debian-1 (embed)
1465            - screenlets 0.1.2-3 (embed)
1466            NOTE: included twice
1467    
1468    agg:
1469            - matplotlib <unfixed> (embed: bug #377271)
1470            - contextfree <unfixed> (embed)
1471            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1472            - exactimage <unfixed> (embed)
1473            - python-enable <unfixed> (embed)
1474            - mapnik 0.5.1-3 (embed)
1475            NOTE: links statically to agg, but shared library is not available (bug #377271)
1476    
1477    vtk
1478            - paraview <unfixable> (embed; bug #495426)
1479    
1480    txt2tags
1481            - rednotebook <unfixed> (embed)
1482    
1483    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1484            - gajim <unfixed> (embed)
1485            - emesene <unfixed> (embed)
1486            - convirt <unfixed> (embed)
1487            - pida <unfixed> (embed)
1488            - rednotebook <unfixed> (embed)
1489    
1490    horde3 (prototype.js is among the embeds in the following)
1491            - mnemo2 <unfixed> (embed)
1492            - nag2 <unfixed> (embed)
1493            - wordpress <unfixed> (embed)
1494            NOTE: Text_Diff (wp-includes/Text/Diff*)
1495    
1496    cimg
1497            - gmic <itp> (embed)
1498    
1499    mootools
1500            - gmic <itp> (embed)
1501    
1502    openldap
1503            - openldap2.3 <removed> (old-version)
1504    
1505    grub2
1506            - grub <unfixed> (old-version)
1507    
1508    gnupginterface
1509            - duplicity <unfixed> (embed)
1510    
1511    python-dateutil
1512            - awn-extras-applets <unfixed> (embed)
1513            - matplotlib <unknown> (embed)
1514    
1515    cups
1516            - cupsys <removed> (old-version)
1517    
1518    yui
1519            - bcfg2 <not-affected> (present in source but not included in any binary files)
1520            - serendipity 1.5.3-1 (embed; bug #557746)
1521            - moodle 1.8.2.dfsg-5 (embed)
1522            - jifty 0.91117-1 (embed; bug #557748)
1523            - webgui 7.7.26-1 (embed)
1524            - loggerhead 1.17-1 (embed)
1525    
1526    quake3 (vanilla source not packaged in debian)
1527            - openarena <unfixable> (fork)
1528    
1529    quake2 (vanilla source not packaged in debian)
1530            - alien-arena <unfixable> (fork)
1531            - warsow <unfixable> (fork)
1532    
1533    libtheora
1534            - iceweasel <not-affected> (uses xulrunner)
1535            - xulrunner <unfixed> (embed; bug #540959)
1536            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1537            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1538            - iceape <unfixed> (embed; bug #559276)
1539            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1540            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1541    
1542    dtoa
1543            - bfilter <unfixed> (embed)
1544            - cacao <unfixed> (embed)
1545            - cdrdao <unfixed> (embed)
1546            - classpath <unfixed> (embed)
1547            - freej <unfixed> (embed)
1548            - iceape <unfixed> (embed)
1549            - iceweasel <unfixed> (embed)
1550            - jscoverage <unfixed> (embed)
1551            - kde4libs <unfixed> (embed)
1552            - kdelibs <unfixed> (embed)
1553            - kompozer <unfixed> (embed)
1554            - libv8 <unfixed> (embed)
1555            - mono <unfixed> (embed)
1556            - newlib <unfixed> (embed)
1557            - nspr <unfixed> (embed)
1558            - php5 <unfixed> (embed)
1559            - polyml <unfixed> (embed)
1560            - qt4-x11 <unfixed> (embed)
1561            - rhino <unfixed> (embed)
1562            NOTE: code translated to Java
1563            - ruby1.8 <unfixed> (embed)
1564            - ruby1.9 <unfixed> (embed)
1565            - ruby1.9.1 <unfixed> (embed)
1566            - sdd <unfixed> (embed)
1567            - sfind <unfixed> (embed)
1568            - star <unfixed> (embed)
1569            - tinymux <unfixed> (embed)
1570            - virtualbox-ose <unfixed> (embed)
1571            - webkit <unfixed> (embed)
1572            - xulrunner <unfixed> (embed)
1573    
1574    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1575            - firegpg <unfixed> (embed)
1576            - enigmail <unfixed> (embed)
1577    
1578    ptmalloc (not packaged in Debian)
1579            - crystalspace <unfixed> (embed)
1580            - qt4-x11 <unfixed> (embed)
1581    
1582    svgalib
1583            - usplash <unfixed> (embed)
1584    
1585    bogl
1586            - usplash <unfixed> (embed)
1587    
1588    taglist
1589            - usplash <unfixed> (embed)
1590    
1591    portaudio
1592            - audacity <unfixed> (embed; bug #323711)
1593    
1594    nyquist
1595            - audacity <unfixed> (embed)
1596            NOTE: embeds a forked nyquist with support for a shared library
1597    
1598    vamp-plugin-sdk
1599            - audacity <unfixed> (embed)
1600    
1601    wordpress
1602            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1603            - wordpress-mu <removed> (fork)
1604    
1605    php5
1606            - php4 <removed> (old-version)
1607    
1608    classpath
1609            - libgnucrypto-java <removed> (embed; bug #559788)
1610    
1611    libtool
1612            - apr <unfixed> (static; bug #489625)
1613            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1614            - arts <unfixed> (embed)
1615            - bochs 2.4.2-1 (embed; bug #560884)
1616            - camserv <unfixed> (embed)
1617            - collectd 4.8.2-1 (embed)
1618            - courier-authlib 0.58-4 (embed)
1619            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1620            - cvsnt 2.5.04.3236-1.2 (embed)
1621            - dico <not-affected> (Uses the system copy of ltdl)
1622            - freeradius 0.1+20010527-1 (embed)
1623            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1624            - ggobi 2.1.9~20091212-1 (embed)
1625            - glame 2.0.1-4 (embed)
1626            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1627            - gnash 0.8.7-2 (embed)
1628            - gnu-smalltalk <unfixed> (embed; bug #566777)
1629            - google-gadgets 0.10.5-0.3 (embed)
1630            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1631            - graphicsmagick 1.3.5-6 (embed)
1632            - graphviz 2.8-3 (embed)
1633            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1634            - guile-1.6 1.6.8-7 (embed)
1635            - hamlib 1.2.11-1 (embed)
1636            - hercules 3.06-1.2 (embed)
1637            - jags 1.0.4-3 (embed; bug #560864)
1638            - kdelibs <unfixed> (embed)
1639            - libannodex <removed> (embed)
1640            - libextractor 0.5.23+dfsg-4 (embed)
1641            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1642            - libtunepimp 0.5.3-7.3 (embed)
1643            - mp4h 1.3.1-4.1 (embed)
1644            - naim <removed> (embed)
1645            - parser-mysql <unfixed> (embed)
1646            - pinball 0.3.1-11 (embed)
1647            - redland <unfixed> (embed)
1648            - siproxd <unfixed> (embed)
1649            - ski <unfixed> (embed)
1650            - synfig 0.62.00-1 (embed)
1651            - unixodbc 2.2.4-5 (embed)
1652            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1653            - clamav 0.95+dfsg-1 (embed)
1654            - imagemagick 6:6.2.3.1-1 (embed)
1655            - hypre 2.4.0b-5 (embed)
1656            - lam <unfixed> (embed)
1657            - openmpi <unfixable> (embed; bug #559386)
1658            - parser <unfixed> (embed)
1659            - pdsh 2.18-5 (embed; bug #560892)
1660            - sbnc 1.2-8 (embed)
1661            - sdcc <unfixed> (embed)
1662            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1663            - proftpd-dfsg <unfixed> (embed; bug #561748)
1664            - babel 1.4.0.dfsg-5 (embed)
1665            - libprelude 0.9.14-2 (embed)
1666            - heartbeat 2.1.4-7 (embed)
1667            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1668            NOTE: might've been fixed earlier
1669            - gcc-* <unknown> (embed)
1670    
1671    ocamlgsl
1672            - orpie 1.5.1-7.1 (embed; bug #550058)
1673    
1674    xdotool
1675            - keynav <unfixed> (embed; bug #560103)
1676    
1677    bulletphysics (not packaged; http://www.bulletphysics.org/)
1678            - supertuxkart <unfixed> (embed)
1679            - blender <unfixed> (embed)
1680    
1681    ghostscript
1682            - gs-gpl <removed> (old-version)
1683    
1684    icedove
1685            - thunderbird <removed> (old-version)
1686    
1687    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1688            - jquery <unfixed> (embed)
1689    
1690    sed
1691            - ssed <unfixed> (fork)
1692    
1693    phpatomlib (http://code.google.com/p/phpatomlib)
1694            - wordpress <unfixed> (embed)
1695    
1696    Services_JSON (http://pear.php.net/package/Services_JSON)
1697            - wordpress <unfixed> (embed)
1698    
1699    phpass (http://www.openwall.com/phpass/)
1700            - gallery2 <unfixed> (embed)
1701            - wordpress <unfixed> (embed)
1702            - typo3-src <unfixed> (modified-embed)
1703            NOTE: file refers to drupal, maybe there's a copy somewhere there
1704            NOTE: a copyright owner search didn't match anything
1705            - libauthen-passphrase-perl <unfixable> (fork)
1706            NOTE: perl implementation of phpass
1707    
1708    squirrelmail
1709            - wordpress <unfixed> (embed)
1710            NOTE: class-pop3.php
1711    
1712    ezSQL (http://www.woyano.com/jv/ezsql)
1713            - wordpress <unfixable> (fork)
1714            NOTE: wp-db.php
1715    
1716    Diff.php (Clay Loveless' version/killersoft.com)
1717            - php-versioncontrol-svn <unfixed>
1718    
1719    libm (provided by libc)
1720            - spring <unfixed> (embed)
1721            NOTE: embedded by embedded copy of streflop
1722            - aide <unfixed> (static)
1723            - busybox <unfixed> (static)
1724            - mindi-busybox <unfixed> (static)
1725            - qemu <unfixed> (static)
1726            NOTE: qemu-user-static
1727            - tuxonice-userui <unfixed> (static)
1728            - zsh <unfixed> (static)
1729            NOTE: zsh-static
1730    
1731    streflop
1732            - spring <unfixed> (embed)
1733    
1734    minizip
1735            - spring <unfixed> (embed)
1736    
1737    oscpack
1738            - spring <unfixed> (embed)
1739    
1740    hpiutil2
1741            - spring <unfixed> (embed)
1742    
1743    p7zip
1744            - spring <unfixed> (embed)
1745    
1746    pythonqt (doesn't seem to be python-qtN, unknown source)
1747            - fontmatrix <unfixed> (embed)
1748            - elmerfem <unfixed> (embed)
1749    
1750    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1751            - docvert <unfixed> (embed)
1752            - jifty <unfixed> (embed)
1753            - kdenetwork <unfixed> (embed)
1754            - mediatomb <unfixed> (embed)
1755            - plastex <unfixed> (embed)
1756            - plone3 <removed> (embed)
1757            - python-chaco <unfixed> (embed)
1758            - python-docutils <unfixed> (embed)
1759            - s5 <unfixed> (embed)
1760            - zope2.10 <unfixed> (embed)
1761            - zope2.11 <removed> (embed)
1762            - cython <not-affcted> (embed)
1763            NOTE: part of documentation, which is not installed into the binary package
1764    
1765    python-docutils
1766            - zope2.10 <unfixed> (embed)
1767            - zope2.11 <removed> (embed)
1768    
1769    tesseract
1770            - ocropus <unfixed> (static)
1771    
1772    antlr
1773            - kdevelop <unfixed> (embed)
1774    
1775    libxerces2
1776            - openjdk-6 <unfixed> (embed)
1777    
1778    kfreebsd-8
1779            - kfreebsd-7 <unfixed> (old-version)
1780            - kfreebsd-6 <removed> (old-version)
1781    
1782    ruby1.9.1
1783            - ruby1.9 <unfixed> (old-version)
1784            - ruby1.8 <unfixed> (old-version)
1785    
1786    maildrop
1787            - courier <unfixed> (embed) [./maildrop]
1788    
1789    glee
1790            - warzone2100 <unfixed> (embed)
1791    
1792    phing
1793            - symfony <unfixed> (embed)
1794    
1795    pake
1796            - symfony <unfixed> (embed)
1797    
1798    propel
1799            - symfony <unfixed> (embed)
1800    
1801    creole
1802            - symfony <unfixed> (embed)
1803    
1804    hfsutils
1805            - cdrkit <unfixed> (embed; bug #570187)
1806            NOTE: embeds hfsutils code in genisoimage
1807    
1808    cdrkit
1809            - grub2 <unfixed> (embed; bug #570156)
1810            NOTE: genisoimage imported into grub-mkisofs
1811    
1812    kdebase-workspace
1813            - kdebase <unfixed> (old-version)
1814    
1815    file
1816            - php5 <unfixable> (modified-embed)
1817            [lenny] - php5 <not-affected>
1818    
1819    cdb
1820            - php5 <unfixed> (embed)
1821    
1822    libmbfl (itp: #570708)
1823            - php5 <unfixed> (embed)
1824            NOTE: PHP is actually the current upstream, ITP is of that code
1825    
1826    libonig
1827            - php5 5.3.2-1 (embed)
1828    
1829    xmlrpc-epi
1830            - php5 <unfixed> (embed)
1831    
1832    swt-gtk
1833            - eclipse <unfixed> (embed; bug #538808)
1834    
1835    txt2html
1836            - wml 2.0.11ds2-1 (embed)
1837    
1838    ca-certificates
1839            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1840    
1841    openexr
1842            - freeimage <unfixed> (embed)
1843    
1844    libmng
1845            - freeimage <unfixed> (embed)
1846    
1847    openjpeg
1848            - freeimage <unfixed> (embed)
1849    
1850    libjpeg6b
1851            - freeimage <unfixed> (embed)
1852    
1853    libjpeg (don't know what exact version)
1854            - dcmtk <unfixed>
1855            - gdcm <unfixed>
1856            - insighttoolkit <unfixed>
1857            - openarena <unfixed> (bug #495966)
1858            - outguess <unfixed>
1859            - squeak-vm <unfixed> (embed)
1860            - tremulous <unfixed>
1861            - tuxonice-userui <unfixed> (static)
1862            - fpc <unfixed> (static)
1863            - lazarus <unfixed> (static)
1864            NOTE: inherited from fpc, see #472304
1865            - mseide-msegui <unfixed> (static)
1866            NOTE: inherited from fpc, see #472304
1867            - easymp3gain <unfixed> (static)
1868            NOTE: inherited from fpc, see #472304
1869            - winff <unfixed> (static)
1870            NOTE: inherited from fpc, see #472304
1871            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1872    
1873    
1874    lxr
1875            - lxr-cvs (embed)
1876    
1877    libfile-copy-recursive-perl
1878            - r-base <unfixed> (embed; bug #577427)
1879            - r-base-core-ra <unfixed> (embed; bug #577429)
1880    
1881    delimmatch
1882            - r-base <unfixed> (embed; bug #577433)
1883            - r-base-core-ra <unfixed> (embed; bug #577434)
1884    
1885    libsmf (ITP: #572558)
1886            - denemo <unfixed> (embed)
1887            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1888    
1889    libselinux
1890            - dpkg 1.15.6 (static)
1891    
1892    xinha (ITP: #479708)
1893            - horde3 <unfixed>
1894            - serendipity <unfixed>
1895            - openacs <unfixed>
1896            - dotlrn <unfixed>
1897    
1898    dvipng
1899            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1900    
1901    dvipdfmx
1902            - texlive-bin <unfixed> (embed)
1903            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1904    
1905    lcdf-typetools
1906            - texlive-bin 2009-1 (embed)
1907    
1908    tex4ht
1909            - texlive-bin 2009-1 (embed)
1910    
1911    freetype
1912            - texlive-bin 2009-1 (embed)
1913    
1914    freetype2
1915            - texlive-bin 2009-1 (embed)
1916    
1917    silgraphite
1918            - texlive-bin <unfixed> (embed)
1919    
1920    unzip
1921            - texlive-bin 2009-1 (embed)
1922    
1923    jbig2dec
1924            - ghostscript 8.71~dfsg2-1 (embed)
1925    
1926    libxml2
1927            - chromium-browser 5.0.375.29~r46008-1
1928    
1929    protobuf
1930            - chromium-browser 5.0.375.70~r48679-2
1931    
1932    libv8
1933            - chromium-browser 5.0.375.38~r46659-1
1934    
1935    nspr
1936            - chromium-browser 5.0.375.29~r46008-3
1937    
1938    yasm
1939            - chromium-browser 5.0.375.29~r46008-2
1940    
1941    libxslt
1942            - chromium-browser 5.0.375.29~r46008-1

Legend:
Removed from v.12061  
changed lines
  Added in v.15001

  ViewVC Help
Powered by ViewVC 1.1.5