/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3551 by jmm-guest, Wed Mar 1 14:36:47 2006 UTC revision 15001 by iuculano, Mon Jul 19 13:15:44 2010 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26    The srcpkg might be some string to identify the code if there is no
27    specific source package.
28    
29    Everything up to the next line is ignored.
30    ---BEGIN
31    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
32            NOTE: Fixed packages link to poppler library unless otherwise noted
33            - pdftohtml <unknown>
34            [sarge] - pdftohtml <unfixed>
35            [etch] - pdftohtml <unfixed>
36            NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38            - texlive-base 3.0-12 (embed)
39            - texlive-bin 2007-1 (embed)
40            - koffice 1:2.0.0-1 (embed; bug #436163)
41            - libextractor 0.5.12-1 (embed)
42            NOTE: libextractor is using its own pdf decoder now
43            - ipe <unfixed> (embed)
44            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45            - ruby-gnome2 <unknown> (embed)
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <removed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50    ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56            - chromium-browser 5.0.375.29~r46008-1
57    
58    lrmi
59            - read-edid 2.0.0-1 (embed; bug #495131)
60            - s3switch <unfixed> (embed)
61            - xresprobe <unfixed> (embed)
62            - zhcon <unfixed> (embed)
63    
64    php-htmlpurifier
65            - mahara 1.2.5-1 (embed)
66            - knowledgeroot <unfixed> (embed)
67            - moodle <unfixed> (embed)
68    
69    peercast
70            - gnome-peercast <removed> (embed)
71            [etch] - gnome-peercast <unfixed> (embed)
72    
73    silc-toolkit
74            - silc-client 1.1~beta6-1 (embed)
75    
76    icclib
77            - ghostscript <unfixed> (embed)
78            - argyll <unfixed> (embed)
79    
80    libusb
81            - argyll <unfixed> (embed)
82    
83    dietlibc
84            - ccontrol 0.9.1+20071204-1 (static)
85    
86    libmikmod
87            - sdl-mixer1.2 <unfixed> (embed)
88            TODO: report bug
89    
90    libiax
91            - iaxmodem <unfixable> (embed; bug #548885)
92    
93    spandsp
94            - iaxmodem <unfixable> (embed; bug #548885)
95    
96    python-paramiko
97            - fabric 0.9.0-2 (embed; bug #561398)
98    
99    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
100            - dpkg 1.15.6 (static)
101            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
102            - rsync <unfixed> (embed)
103            - cherokee <unfixed> (embed)
104            NOTE: somehow derived code base
105            - mono <unfixed> (embed)
106            TODO: check mozilla
107            - Linux kernels <unfixed> (embed)
108            - pvpgn 1.7.8-2 (embed)
109            - mrtg 2.12.2-1 (embed)
110            - rpm <unknown> (embed)
111            NOTE: pinged anibal since when rpm was fixed
112            - tuxcmd-modules <unfixed> (embed)
113            - zsync <unfixed>
114            - tra <unfixed>
115            - sash <unfixed>
116            - nsis <unfixed>
117            - pyfits 1:2.3.1-1
118            - mseide-msegui <unfixed>
119            NOTE: mseide
120            - mirrordir <unfixed>
121            - poco <unfixed>
122            - klibc <unfixed>
123            - emboss <unfixed>
124            - ghostscript <unfixed>
125            - freeimage <unfixed>
126            - clamav <unfixed> (fork)
127            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
128            - tuxonice-userui <unfixed> (static)
129            - plt-scheme <unfixed>
130            - perl <unfixed>
131            - paraview <unfixed>
132            - velvet 0.7.56~nozlibcopy-1
133            - gcvs <unfixed>
134            - dump <unfixed>
135            - aide <unfixed> (static)
136            - dar <unfixed> (static)
137            - avfs <unfixed>
138            - fpc <unfixed>
139            - winff <unfixed>
140            NOTE: inherited from fpc, see #472304
141            - lazarus <unfixed>
142            NOTE: inherited from fpc, see #472304
143            - erlang <unfixed> (embed)
144            - gamera 3.2.3-1 (embed)
145            - python2.4 <unfixed> (embed; bug #553403)
146            - python2.5 <unfixed> (embed; bug #553403)
147            - texlive-bin <unknown> (embed)
148    
149    dulwich
150            - hg-git 0.1.0-1 (embed; bug #541996)
151    
152    libvigraimpex
153            - hugin <unfixed> (embed; bug #542259)
154            - enblend-enfuse <unfixed> (embed; bug #542258)
155            - gamera 3.2.3-1 (embed)
156    
157    libbz2
158            - dpkg 1.15.6 (static)
159            - amd64-libs <unfixed> (static)
160            NOTE: let's call it "static"
161            - dar <unfixed> (static)
162            - dump <unfixed> (static)
163            - unalz <unfixed> (embed)
164            NOTE: has code, by the maint, to use the system version but links against the internal copy
165    
166    libyahoo2
167            - centerim <unfixed> (embed; bug #559783)
168    
169    libmsn
170            - centerim <unfixed> (embed; bug #559783)
171    
172    libgadu
173            - centerim <unfixed> (embed; bug #559783)
174            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
175            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
176            - kdenetwork 4:3.3.2-5 (embed)
177            NOTE: from kdenetwork: kopete
178            - ekg 1:1.8~rc0-1 (embed)
179            - kadu 0.6.0.2-3 (embed; bug #504430)
180            - gadu <itp> (embed)
181    
182    xmlrpc (which package is the "origin" of this code?)
183            - drupal <unfixed> (embed)
184            - phpgroupware <unfixed> (embed)
185            - egroupware <unfixed> (embed)
186            - phpwiki <unfixed> (embed)
187            - php4 <removed> (embed)
188            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
189    
190    shtool (affects build-time only)
191            - mysql-ocaml <unfixed> (embed)
192            - php4 <removed> (embed)
193            - php5 <unfixed> (embed)
194    
195    xulrunner
196            - iceape <unfixed> (embed; bug #561749)
197            - iceweasel 2.0.0.19 (embed)
198            - icedove <unfixed> (embed; bug #561750)
199            - kompozer <unfixed> (embed; bug #532168)
200            - galeon 2.0.2-4 (embed)
201            - epiphany-browser 2.14.3-8 (embed)
202            - conkeror 0.9~git080629-2 (embed)
203            - kazehakase 0.4.2-1 (embed)
204    
205    xli
206            - xloadimage <unfixed> (embed)
207    
208    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
209            - openmotif <unfixed> (embed)
210    
211    libxpm
212            - lesstif <unfixed> (embed; bug #575750)
213    
214    kerberized apps with BSD origin
215            - krb4 <removed> (embed)
216            - krb5 <unfixed> (embed)
217            - heimdal <unfixed> (embed)
218    
219    grip (which pkg is the origin?)
220            - libcdaudio <unfixed>
221            - grip <unfixed>
222            - gnome-vfs <unfixed>
223            TODO: check vfs2 as well
224    
225    fudforum
226            [etch] - phpgroupware <unfixed> (embed)
227            NOTE: phpgroupware-fudforum
228            [sarge] - egroupware-fudforum <removed> (embed)
229    
230    libbsd
231            - rdate 1:1.2-3 (embed)
232            - atheme-services <unfixed>
233            - libbsd-arc4random-perl <unfixed>
234            - isakmpd <unfixed>
235            - bsdgames <unfixed> (embed)
236            - bsd-mailx <unfixed> (embed)
237            - netcat-openbsd <unfixed> (embed; bug #550611)
238            - openssh <unfixed> (embed)
239            - unworkable <unfixed> (embed)
240    
241    cvs
242            - gcvs <unfixed> (embed)
243            NOTE: see cvsunix/src in tarball
244    
245    pcre3
246            - php4 <removed> (embed)
247            - analog 2:5.23-0woody1 (embed)
248            - goffice <unfixed> (embed)
249            NOTE: libgoffice-*
250            - vfu 4.06-4.1 (embed; bug #450754)
251            - tf5 5.0beta7-1 (embed)
252            - monotone 0.43-1 (embed)
253            NOTE: this only affects versions >= 0.37
254            - glib2.0 2.15.2-1 (embed)
255            - apache2 2.0.53-4 (embed)
256            - exim4 4.10-0.srh20.12 (embed)
257            - yacas <unfixed> (embed)
258            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
259            - gtamsanalyzer.app 0.42-5 (embed)
260            - tin 980117-1 (embed)
261            - kazehakase 0.5.2-1
262            - webkit 1.0.1-1 (embed)
263            - qt4-x11 <unfixed> (embed)
264            NOTE: embedded via webkit copy
265            - erlang <unfixed> (embed)
266            - ssed <unfixed> (embed)
267            - ircd-hybrid <unfixed> (static)
268            - emboss <unfixd>
269            - cherokee <unfixed> (embed)
270            - oftc-hybrid <unfixed> (embed)
271            - ratbox-services <unfixed> (embed)
272            - squeak-vm <unfixed> (embed)
273            - tinymux <unfixed> (embed)
274    
275    tiff
276            - wxwindows2.4 2.2.1 (embed)
277            - gamera 3.2.3-1 (embed)
278            - freeimage <unfixed> (embed)
279            - libtk-img <unfixed> (embed)
280            NOTE: there are two copies, one under tiff/ other under libtiff/
281            - gdal <unfixed>
282    
283    uudeview
284            - libconvert-uulib-perl <unfixed> (embed)
285            - pan <unfixed> (embed)
286    
287    sqlite (not affected by security vulnerabilities so far)
288            - amarok <unfixed> (embed)
289            - monotone 0.43-1 (embed)
290            - iceweasel <unfixed> (embed)
291            - heimdal <unfixed> (embed; bug #559616)
292    
293    util-linux/mount
294            - loop-aes-utils <unfixed> (embed)
295            NOTE: contains code from util-linux' mount in the mount-aes-udeb
296    
297    sylpheed
298            - sylpheed-claws <unfixed> (fork)
299    
300    phpsysinfo
301            - egroupware <unfixed> (embed)
302            - phpgroupware <unfixed> (embed)
303    
304    phpldapadmin
305            [sarge] - egroupware <unfixed> (embed)
306            NOTE: removed from egroupware after sarge
307    
308    chmlib
309            - kchmviewer <unknown> (embed)
310    
311    ffmpeg (libavcodec/libavformat)
312            - mplayer 1.0~rc2-14 (embed; bug #395252)
313            - kino 1.0.0-1
314            - vlc <not-affected> (Links dynamically since initial release)
315            - smilutils 0.3.0-10
316            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
317            - motion 3.1.19-1
318            - gstreamer0.10-ffmpeg 0.10.3-2
319            - xmovie <removed> (static)
320            TODO: gimp-gap (potentially using ffmpeg code as well)
321            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
322            - audacity 1.3.7-2 (embed; bug #512278)
323            - chromium-browser <unfixed> (fork)
324    
325    faad2
326            - mplayer 1.0~rc2-20 (embed)
327            - avifile <unfixed> (embed; bug #538750)
328            - ffmpeg-debian <removed> (embed)
329    
330    libmad (MPEG decoding lib)
331            - xine-lib <unfixed> (embed)
332            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
333            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
334    
 xpdf code: (some use xpdf 2, some xpdf 3)  
 gpdf (will be replaced by evince in Gnome 2.12)  
 pdftohtml (current poppler source package has a ported version, pinged maintainer)  
 kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
 tetex-bin (links to poppler since 3.0-12)  
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
 poppler  
 koffice (upstream is working on using poppler, probably not in time for Etch)  
 libextractor  
 pdfkit.framework (links to poppler since 0.8-4)  
   
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
335  libdts  libdts
336  xine-lib          - xine-lib <unfixed> (embed)
337    
 flac:  
338  flac  flac
339  xine-lib          - xine-lib <unfixed> (embed)
340    
341  liba52:  liba52
342  a52dec          - a52dec <unfixed> (embed)
343  xine-lib          - xine-lib <unfixed> (embed)
344    
345  libmpeg2:  mpeg2dec (libmpeg2)
346  mpeg2dec          - xine-lib <unfixed> (embed)
347  xine-lib  
348    libmpeg3
349            - squeak-vm <unfixed> (embed)
350    
351    libntlm
352            - wget <unfixed> (fork; bug #550436)
353            - curl <unfixed> (fork; bug #550437)
354            - cntlm <unfixed> (fork; bug #550438)
355    
356    uw-imap
357            - pine <unfixed> (embed)
358            - alpine <unfixed> (embed)
359    
360    imagemagick
361            - graphicsmagick <unfixed> (fork)
362    
363    python-urlgrabber
364            - mercurial <unfixed> (embed; bug #531062)
365            - w3af <unfixed> (embed; bug #555372)
366            [experimental] - harvestman <unfixed> (embed; bug #555373)
367    
368    beautifulsoup
369            - python-mechanize <unfixed> (embed; bug #555349)
370            - zope2.11 <removed> (embed; bug #555350)
371            - twill <unknown> (embed)
372    
373    halibut
374            - nsis <unfixed> (fork)
375    
376    libghttp
377            - hotway <unfixed> (embed)
378    
379    libsndfile
380            - ardour 1:2.7.1-1 (embed)
381    
382    glibmm2.4
383            - ardour 1:2.7.1-1 (embed)
384    
385    libgnomecanvasmm2.6
386            - ardour 1:2.7.1-1 (embed)
387    
388    libsigc++-2.0
389            - ardour 1:2.7.1-1 (embed)
390    
391    soundtouch
392            - ardour 1:2.7.1-1 (embed)
393    
394    libmms
395            - xine-lib <unfixed> (embed)
396            - mimms <unfixed> (embed)
397    
398    fckeditor
399            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
400            - moin 1.8.2-2 (embed; bug #452599)
401            - karrigell <removed> (embed; bug #452598)
402            - gforge 4.6.99+svn6225-1 (embed)
403            - request-tracker3.8 <unfixed> (embed)
404            - otrs2 <unfixed> (embed)
405    
406    ipatlas (not packaged in Debian)
407            - moodle <unfixed> (embed; bug #507185)
408    
409    libphp-phpmailer
410            - moodle <unfixed> (embed; bug #507185)
411            - mahara <unfixed> (embed)
412            - symfony <unfixed> (embed; bug #566778)
413            [etch] - phpgroupware <unfixed> (embed)
414            NOTE: phpgroupware-felamimail is only in etch
415            - egroupware <unfixed> (embed; bug #504283)
416            - glpi <unfixed>
417    
418    htmlArea (not packaged in Debian)
419            - moodle <unfixed> (embed)
420    
421    giflib
422            - wine <unfixed> (embed; bug #466181)
423    
424    bennu (not packaged in Debian, http://bennu.sourceforge.net)
425            - moodle <unfixed> (embed)
426    
427    smarty
428            - moodle 1.8.2-2 (embed; bug #471158)
429            - gallery2 2.2.5-2 (embed; bug #471160)
430            - mahara 0.9.2-2 (embed; bug #471201)
431            - gosa 2.4beta1-1 (embed; bug #471200)
432    
433    TinyMCE
434            - wordpress 2.5.1-3 (embed; bug #478257)
435            - moodle <unfixed> (embed; bug #507185)
436            - knowledgeroot <unfixed> (embed)
437            - joomla <itp> (bug #326398)
438    
439    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
440            - scite <unfixed> (embed)
441            - qscintilla <unfixed> (embed)
442            - qscintilla2 <unfixed> (embed)
443            - geany <unfixed> (fork)
444            - anjuta <unfixed> (embed)
445    
446    libphp-adodb
447            - moodle <unfixed> (embed; bug #507185)
448            NOTE: also AdoDB-XML Schema
449            - gallery2 <unfixed> (embed)
450            - phppgadmin <unfixed> (embed)
451            - egroupware <unfixed> (embed)
452            - phpwiki <unfixed> (embed)
453            - torrentflux 2.0beta1-2 (embed)
454            - ipplan <unfixed> (embed)
455            - typo3-src <unfixed> (embed)
456            - cacti <unknown> (embed)
457            [sarge] - cacti <unfixed> (embed)
458            NOTE: dependency exists, but internal version is used
459            - gforge 4.7~rc2-6 (embed)
460            - mahara <unfixed> (embed)
461    
462    gzip
463            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
464            - klibc <unfixed> (embed)
465            NOTE: based on linux-kernel gzip code
466            - busybox <unfixed> (embed)
467            - pristine-tar <unfixed> (modified-embed)
468            NOTE: compression code only, not uncompression
469            - ncompress <unfixed> (old-version)
470    
471    neon
472            - cadaver 0.22.3+debian-1 (embed; bug #188381)
473            - gnome-vfs2 <unfixed> (embed; bug #395874)
474            [etch] - litmus <unfixed> (embed; #395875)
475            - litmus <removed> (embed; #395875)
476            [sarge] - screem <unfixed> (embed)
477            - sitecopy 1:0.16.0-1 (embed; bug #395876)
478            [etch] - tla <unfixed> (embed; bug #395877)
479            [sarge] - tla <unfixed> (embed; bug #395877)
480    
481    libmodplug
482            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
483    
484    libvncserver
485            - vino <unfixed> (embed)
486    
487    putty
488            - filezilla <unfixed> (embed)
489    
490    tinyxml (not packaged in Debian; itp bug #531968)
491            - filezilla <unfixed>
492            - crystalspace <unfixed> (embed)
493            - libwfut <unfixed> (embed)
494            - rarian <unfixed> (embed)
495            - bulletml <unfixed> (embed)
496            - pokerth <unfixed> (embed)
497            - qutecom <unfixed> (embed)
498            - sofa-framework <unfixed> (embed)
499            - yate <unfixed> (embed)
500            - antigrav <unfixed> (embed)
501            - balder2d <unfixed> (embed)
502            - cal3d <unfixed> (embed)
503            - criticalmass <unfixed> (embed)
504            - ember <unfixed> (embed)
505            - epiphany <unfixed> (embed)
506            - gambit <unfixed> (embed)
507            - noiz2sa <unfixed> (embed)
508            - ogre <unfixed> (embed)
509            - opencity <unfixed> (embed)
510            - openmovieeditor <unfixed> (embed)
511            - pouetchess <unfixed> (embed)
512            - tecnoballz <unfixed> (embed)
513            - trigger-rally <unfixed> (embed)
514            - xmoto <unfixed> (embed)
515            - mapnik <unknown> (embed)
516            NOTE: uses a different XML parser by default
517            - rrootage 0.23a-6 <embed>
518            NOTE: links to libbulltetml
519            - boson <unknown> (embed)
520            NOTE: the embedded code is unused
521    
522    gv
523            - evince <unfixed> (embed)
524            NOTE: ps/ tree from gv 3.5.8
525            NOTE: evince-gtk is affected (a component of evince source package)
526    
527    libXbae
528            - paw <removed> (embed)
529            [etch] - paw <unfixed> (embed)
530    
531    libgtkhtml
532            - claws-mail-extra-plugins <unfixed> (fork)
533    
534    libXaw
535            - paw <removed> (embed)
536            [etch] - paw <unfixed> (embed)
537            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
538    
539    libgd2
540            - graphviz <unfixed> (embed)
541            NOTE: lib/gd seems to be 2.0.33
542            - wml 2.0.11ds2-1 (embed)
543            - libwmf <unfixed> (embed)
544            NOTE: derived from gd 1.6.3
545            - texlive-bin 2009-1 (embed)
546    
547    rar
548            - unrar-nonfree <unfixed> (embed)
549    
550    unrar-free (maybe this code is derived from the original rar, too?)
551            - clamav <unfixed> (embed)
552            NOTE: seems to be disabled in default config
553    
554    mplayer (DirectMedia Object loader)
555            - xine-lib <unfixed> (embed)
556            NOTE: src/libw32dll/
557            - vlc <unfixed> (embed)
558            NOTE: modules/codec/dmo/
559            - mplayer 1.0~rc2-20 (embed)
560    
561    libwpd (WordPerfect converter)
562            - openoffice.org <unfixed> (embed)
563    
564    fsplib (http://sourceforge.net/projects/fsp/)
565            - gftp <unfixed> (embed)
566            NOTE: lib/fsplib version 0.3
567    
568    sprng
569            - tree-puzzle <unfixed> (embed)
570    
571    librpcsecgss
572            - krb5 <unfixed> (embed)
573    
574    jasper
575            - ghostscript 8.64~dfsg-2 (embed)
576    
577    libiris
578            - psi <unfixed> (embed)
579            - kdenetwork <unfixed> (embed)
580            NOTE: kopete embeds libiris but links dynamically to libidn
581            - kdegames <unfixed> (embed)
582            NOTE: ksirk/kde4
583    
584    libidn
585            - monotone 0.43-1 (embed)
586            - psi <unfixed> (embed)
587            NOTE: psi embeds libiris which embeds libidn
588            - kdegames <unfixed> (embed)
589            NOTE: kdegames/kde4 embeds libiris which embeds libidn
590    
591    lua5.1
592            - monotone 0.43-1 (embed)
593            - nmap 5.00-1 (embed; bug #527997)
594            [lenny] - nmap <unfixed> (embed; bug #527997)
595            - ocropus <unfixed> (embed)
596            - enigma <unfixed> (embed)
597            NOTE: requires lua built with C++
598            - freeciv <unfixed> (embed)
599            - spring <unfixed> (embed)
600    
601    libbotan
602            - monotone 0.43-1 (embed)
603    
604    NetXX
605            - monotone 0.43-1 (embed)
606    
607    libgc
608            - mono <unfixed> (embed)
609    
610    lzma
611            - p7zip <unfixed> (embed)
612            - xz-utils <unfixed> (fork)
613    
614    lzo
615            - grub2 <unfixed> (embed)
616    
617    yassl
618            - mysql-dfsg-5.0 <unfixed> (embed)
619            - mysql-dfsg-5.1 <unfixed> (embed)
620    
621    pax code
622            - tar <unfixed> (embed)
623            - cpio <unfixed> (embed)
624    
625    t1lib
626            - tetex-bin 2.0.2-1 (embed)
627            - texlive-bin <unknown> (embed)
628    
629    guichan
630            - boswars <unfixed> (embed)
631            NOTE: maintainer notified us, working on it
632    
633    tolua
634            - boswars <unfixed> (embed)
635            NOTE: maintainer notified us, working on it
636            NOTE: actually tolua++
637            - ocropus <unfixed> (embed)
638            NOTE: actually tolua++
639            - freeciv <unfixed> (embed)
640            NOTE: actually tolua++
641            - enigma <unfixed> (embed)
642    
643  curl:  asio-dev
644  wget (code for NTLM authentication)          - luxrender <removed> (embed)
645    
646  TODO evaluate:  xine-lib
647  gimp-gap (potentially using ffmpeg code as well)          - vlc <unfixed> (embed)
648            NOTE: only parts included in modules/access/rtsp
 uw-imap:  
 pine  
649    
650  imagemagick:  netpbm
651  graphicsmagick          - tcl8.3 <unfixed> (embed)
652            - tcl8.4 <unfixed> (embed)
653            - tcl8.5 <unfixed> (embed)
654            NOTE: generic/tkImgGIF.c
655    
656    tk8.5
657            - tk8.0 <removed> (old-version)
658            - tk8.3 <unfixed> (old-version)
659            - tk8.4 <unfixed> (old-version)
660            - perl-tk <unfixable> (fork)
661    
662    samba
663            - mc 2:4.6.2~git20080311-1 (embed)
664            NOTE: maintainer is aware of this, currently searching a solution
665    
666    plib1.8.4c2
667            - boson <unfixed> (fork)
668            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
669    
670    fribidi
671            - quesoglc 0.7.2-2 (embed)
672    
673    glew
674            - quesoglc <unfixed> (embed; bug #489341)
675            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
676            - trigger 0.5.2.1-2 (embed)
677            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
678            - trigger-rally 0.5.2.1-2 (embed)
679            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
680            - chromium-browser 5.0.375.70~r48679-2
681    
682    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
683            - transcend <unfixed> (embed)
684            - cultivation <unfixed> (embed)
685            - passage <unfixed> (embed)
686            - gravitation <unfixed> (embed)
687    
688    tar
689            - libarchive <unfixed> (embed)
690            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
691    
692    cpio
693            - libarchive <unfixed> (embed)
694            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
695    
696    kde4libs
697            - kdelibs <unfixable> (old-version)
698    
699    webkit
700            - qt4-x11 <unfixed> (embed; bug #479851)
701            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
702            - kde4libs <unfixable> (fork)
703            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
704            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
705            - chromium-browser <unfixed> (fork)
706    
707    ftgl
708            - blender 2.46+dfsg-1 (embed)
709    
710    wv
711            - abiword <unfixed>
712    
713    qemu
714            - kvm <removed> (embed; bug #543159)
715            - qemu-kvm <unfixed> (embed; bug #560853)
716            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
717            - xen-3 3.4.2-2 (embed; bug #560856)
718            - xen-unstable <unfixed> (embed; bug #560856)
719    
720    vgabios
721            - kvm <removed> (embed; bug #489442)
722            - qemu-kvm <unfixed> (embed)
723    
724    bochs
725            - kvm <removed> (embed; bug #489442)
726            - qemu-kvm <unfixed> (embed)
727    
728    speex
729            - vorbis-tools <unfixed> (embed)
730            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
731            - gst-plugins-good0.10 <unfixed> (embed)
732            - xine-lib <unfixed> (embed)
733            - libfishsound <unfixed> (embed)
734            - libannodex <removed> (embed)
735            - vlc <unfixed> (embed)
736            - xmms-speex <unfixed> (embed)
737            - libsdl-sound1.2 <unfixed> (embed)
738            - sweep <unfixed> (embed)
739    
740    libreadline
741            - magic <itp> (old-version)
742    
743    opcode
744            - ode <unfixed> (embed)
745            NOTE: opcode is not a package in debian, it is just embedded
746            NOTE: http://www.codercorner.com/Opcode.htm
747    
748    gimpact
749            - ode <unfixed> (embed)
750            NOTE: gimpact is not a package in debian, it is just embedded
751            NOTE: http://gimpact.sf.net
752    
753    mochikit
754            - mahara <unfixed> (embed)
755            NOTE: they require extra patches, still unmerged upstream
756            - ntop <unfixed> (embed)
757            - coherence 0.6.2-1 (embed)
758            - paste <unfixed> (embed)
759            - turbogears <unfixed> (embed)
760            - plone3 <removed> (embed)
761            - xulrunner <unfixed> (embed)
762            - libjifty-plugin-chart-perl <unfixed> (embed)
763            - sabnzbdplus <unfixed> (embed)
764            - tgmochikit <unfixed> (embed)
765    
766    prototypejs
767            - netbeans-ide 6.0.1+dfsg-2 (embed)
768            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
769            - webcit <unfixed> (embed; bug #555219)
770            - asterisk 1:1.6.2.0~rc3-1 (embed)
771            - libjson-ruby 1.1.4-1 (embed; bug #555224)
772            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
773            - horde3 <unfixed> (embed)
774            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
775            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
776            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
777            - ebug-http <removed> (embed; bug #555236)
778            - libaws 2.7-1 (embed; bug #555222)
779            - phpgedview <removed> (embed)
780            - poker-network 1.7.6-1 (embed; bug #555238)
781            - rails 2.1.0-6 (embed)
782            - wordpress 2.5.0-2 (embed; bug #555243)
783            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
784            TODO: search through all of the other zope packages
785            - ampache 3.4.1-2 (embed)
786            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
787            - hobix 0.5~svn20070319-4 (embed; bug #555247)
788            - zabbix 1.6.6-4 (embed; bug #555250)
789            - chora2 <unfixed> (embed; bug #555253)
790            - gollem <unfixed> (embed; bug # 555254)
791            - jscropperui 1.2.1-1 (embed; bug #555257)
792            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
793            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
794            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
795            - activeldap 1.2.1-1 (embed)
796            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
797            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
798            - otrs2 2.3.4-6 (embed; bug #555267)
799            - webcalendar 1.2~b1-2 (embed; bug #555269)
800            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
801            - jifty 0.90519-1 (embed; bug #555271)
802            - jquery 1.4-1 (embed; bug #555272)
803            - passenger 2.2.5debian1-1 (embed; bug #555273)
804            - plone3 <removed> (embed; bug #555275)
805            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
806            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
807            - xulrunner <unfixed> (embed)
808            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
809    
810    gdb
811            - insight <unfixed> (embed)
812    
813    e2fsprogs
814            - ldiskfsprogs <unfixable> (fork)
815    
816    quazip (not packaged in Debian)
817            - qcake <unfixed> (embed)
818            NOTE: starting with upstream version 0.6.4
819    
820    exo
821            - pcmanfm <unfixed> (embed; bug #499677)
822            NOTE: slightly modified source code
823    
824    java
825            - openjdk-6 <unfixed>
826            - sun-java5 <unfixed>
827            - sun-java6 <unfixed>
828    
829    libphp-snoopy
830            - ampache 3.4.1-2 (embed; bug #504169)
831            - gforge 4.6.99+svn6094-2 (embed)
832            - mahara 1.0.5-2 (embed; bug #504170)
833            - pixelpost 1.7.1-5 (embed; bug #504171)
834            - mediamate 0.9.3.6-5 (embed; bug #504172)
835            - opendb <removed> (embed; bug #504173)
836            [etch] - opendb <unfixed> (embed; bug #504173)
837            - wordpress 2.5.1-9 (embed; bug #443948)
838            - moodle <unfixed> (embed; bug #507185)
839            [etch] - phpgroupware <unfixed> (embed)
840            NOTE: phpgroupware-felamimail
841            - magpierss 0.72-3 (embed; bug #431089)
842    
843    jquery
844            - zekr <unfixed> (embed)
845            - wordpress <unknown> (embed)
846            - yocto-reader <unfixed> (embed)
847            - textpattern <unfixed> (embed)
848            - genshi 0.5.1-1 (embed)
849            NOTE: compressed file under examples/ dir
850            - prewikka <unfixed> (embed)
851            - libramaze-ruby <unfixed> (embed)
852            - drupal5 <unfixed> (embed)
853            - b2evolution <unfixed> (embed)
854            - wesnoth <unfixed> (embed)
855    
856    tablesorter (jquery plugin, not packaged yet)
857            - wesnoth <unfixed> (embed)
858    
859    kses
860            - wordpress <unfixed> (embed; bug #504242)
861            NOTE: their copy has all methods renamed to wp_<foo>
862            NOTE: kses isn't in Debian, RFP: #504240
863            - moodle <unfixed> (embed; bug #507185)
864            - egroupware <unfixed> (embed)
865    
866    magpierss
867            - wordpress <unfixed> (embed; bug #504242)
868            - moodle <unfixed>
869    
870    php-gettext
871            - wordpress 2.8.4-1 (embed; bug #504242)
872            - docbookwiki <unfixed> (embed)
873            - knowledgeroot 0.9.9.5-1
874            NOTE: non-free
875    
876    libphp-ixr (name may change, it is the Incutio XML-RPC)
877            - wordpress <unfixed> (embed; bug #504242)
878            NOTE: libphp-ixr isn't in Debian, RFP: #504236
879            - dokuwiki <unfixed> (embed)
880            - textpattern <unfixed> (embed)
881    
882    libphp-cas
883            - glpi <unfixed> (embed)
884            - moodle <unfixed> (embed; bug #505984)
885    
886    scriptaculous (prototype.js is among the embeds in the following)
887            - glpi <unfixed> (embed)
888            - libaws <unfixed> (embed; bug #555222)
889            - op-panel <unfixed> (embed)
890            - symfony <unfixed> (embed)
891            NOTE: maintainer says there are extra incompatible changes required
892            - pixelpost 1.7.1-6 (embed)
893            - webhelpers <unfixed> (embed)
894            - qwik <removed> (embed; bug #555241)
895            - smokeping <unfixed> (embed)
896            - turba2 <unfixed> (embed)
897            - typo3-src 4.2.3-1 (embed)
898            - request-tracker3.6 <unfixed> (embed)
899            - request-tracker3.8 <unfixed> (embed)
900            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
901            - wordpress 2.5.0-2 (embed)
902            - libhtml-prototype-perl 1.48-3 (embed)
903    
904    libmarkdown-php
905            - moodle <unfixed> (embed; bug #507185)
906            - pixelpost 1.7.1-6 (embed)
907    
908    php-openid
909            - wordpress-openid <itp> (embed)
910    
911    geshi
912            - dokuwiki 0.0.20080505-3.1 (embed)
913            - pgfouine 1.0-1.1 (embed)
914            - websvn 2.1.0-1 (embed)
915    
916    webcalendar
917            - gforge 4.7~rc2-6 (embed; bug #504758)
918    
919    libical
920            - kdepim <unknown> (fork)
921            NOTE: fixed at some point during 4.0
922            - kdepimlibs 4.2.0-1 (fork)
923            - claws-mail-extra-plugins <unfixed> (fork)
924    
925    harfbuzz
926            - qt4-x11 <unfixed> (embed)
927            - pango1.0 <unfixed> (embed)
928            - fontmatrix <unfixed> (embed)
929    
930    libzip
931            - php5 <unfixable> (modified-embed)
932            - odt2txt <unfixed> (embed; bug #523808)
933    
934    json.php (not packaged; should be replaced with php's built-in functions)
935            - moodle <unfixed>
936            - yui <unfixed>
937            - gallery2 <unfixed>
938            - dokuwiki <unfixed>
939            - typo3-src <unfixed>
940    
941    php-fpdf
942            - tcpdf <itp> (fork)
943            - moodle <unfixed>
944            - phpwiki <unfixed>
945            - egroupware <unfixed>
946            - ldap-account-manager <unfixed> (fork)
947    
948    tcpdf (itp: #495985)
949            - moodle <unfixed>
950            - phpmyadmin <unfixed>
951    
952    typo3
953            - moodle <unfixed>
954    
955    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
956            - moodle <unfixed>
957            - gosa <unfixed>
958    
959    php-ole (itp: #487558)
960            - moodle <unfixed>
961    
962    pieforms (http://www.catalyst.net.nz)
963            - mahara <unfixed>
964    
965    savant2 (http://phpsavant.com)
966            - egroupware <unfixed>
967    
968    rssparser (http://nwow.org)
969            - egroupware <unfixed>
970            - phpgroupware <unfixed>
971    
972    lcms
973            - openjdk-6 <unfixed> (fork)
974            - gimp 2.4.0~rc2-2
975    
976    libphp-phplayersmenu
977            - diogenes <unfixed>
978            - phpldapadmin <unfixed>
979    
980    libphp-pclzip
981            - docvert <unfixed>
982            - moodle <unfixed>
983            - egroupware <unfixed>
984    
985    libphp-simplepie
986            - dokuwiki <unfixed>
987            - wordpress <unfixed>
988    
989    libphp-jpgraph
990            - egroupware <unfixed>
991    
992    php-simpletest
993            - moodle <unfixed>
994    
995    libpng
996            - iceweasel <not-affected> (uses xulrunner)
997            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
998            - iceape 1.0.13~pre080614i-0etch1 (embed)
999            - xulrunner 1.9.0.13-1 (embed)
1000            [lenny] - xulrunner 1.9.0.11-0lenny1
1001            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1002            - gamera 3.2.3-1 (embed)
1003            - freeimage <unfixed> (embed)
1004            - tuxonice-userui (static)
1005    
1006    irssi
1007            - silc-client <unfixed> (embed)
1008            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1009    
1010    extc
1011            - mtasc <unfixed> (embed)
1012            - haxe <unfixed> (embed)
1013    
1014    swflib
1015            - mtasc <unfixed> (embed)
1016            - haxe <unfixed> (embed)
1017    
1018    libitext-java
1019            - bouncycastle 2.1.4-1 (embed)
1020    
1021    python-ply
1022            - pyke <unfixed> (embed; bug #555363)
1023            - pywbem 0.7.0-4 (embed; bug #555364)
1024            - sepolgen <unfixed> (embed; bug #555365)
1025            - zope-textindexng3 <unknown> (embed)
1026            - iceweasel <not-affected> (uses xulrunner)
1027            - xulrunner <unknown> (embed)
1028            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1029    
1030    libdumbnet (libdnet upstream)
1031            - nmap <unfixed> (fork)
1032    
1033    gcc-4.4
1034            - gcc-mingw32 <unfixed> (embed)
1035    
1036    camlimages
1037            - advi <unfixed> (static; bug #550441)
1038    
1039    memcached
1040            - memcachedb <unfixed> (embed)
1041    
1042    yajl
1043            - argyll <unfixed> (embed; bug #544223)
1044            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1045    
1046    nusoap
1047            - gforge 4.8.2-1 (embed)
1048            - ampache <unfixed> (embed)
1049            - poker-network <unfixed> (embed)
1050            - moodle <unfixed> (embed)
1051            NOTE: code is not used when running under php5 and soap is enabled
1052            - phpwiki <unfixed> (embed)
1053            - gallery2 <unfixed> (embed)
1054            - typo3-src <unfixed> (embed)
1055    
1056    libept
1057            - adept <unfixed> (embed; bug #540649)
1058    
1059    libvorbis
1060            - iceweasel <not-affected> (uses xulrunner)
1061            - xulrunner <unfixed> (embed; bug #540959)
1062            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1063            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1064            - iceape <unfixed> (embed)
1065            [etch] - iceape <not-affected> (introduced in 2.0)
1066            [lenny] - iceape <not-affected> (introduced in 2.0)
1067    
1068    cairo
1069            - iceweasel <not-affected> (uses xulrunner)
1070            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1071    
1072    liboggz
1073            - iceweasel <not-affected> (uses xulrunner)
1074            - xulrunner <unfixed> (embed; bug #540959)
1075            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1076            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1077            - iceape <unfixed> (embed)
1078            [etch] - iceape <not-affected> (introduced in 2.0)
1079            [lenny] - iceape <not-affected> (introduced in 2.0)
1080    
1081    liboggplay
1082            - iceweasel <not-affected> (uses xulrunner)
1083            - xulrunner <unfixed> (embed; bug #540959)
1084            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1085            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1086            - iceape <unfixed> (embed)
1087            [etch] - iceape <not-affected> (introduced in 2.0)
1088            [lenny] - iceape <not-affected> (introduced in 2.0)
1089    
1090    php-net-dnsbl
1091            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1092    
1093    php-onyx-rss
1094            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1095    
1096    php-text-wiki
1097            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1098    
1099    php-xml-rpc
1100            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1101    
1102    polarssl (does not have a shared library)
1103            - pdkim <itp> (embed; bug #543150)
1104            - xyssl <unfixed> (old-version)
1105    
1106    pidgin (libpurple)
1107            - gaim <removed> (old-version)
1108            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1109    
1110    icu
1111            - webkit 1.0.1-1 (embed; bug #547214)
1112            - texlive-bin <unfixed> (fork)
1113            NOTE: texlive upstream working with icu upstream to merge their changes
1114            - chromium-browser 5.0.375.29~r46008-3
1115    
1116    cyrus-imapd-2.2
1117            - kolab-cyrus-imapd <unfixed> (fork)
1118            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1119    
1120    python-cxx-dev
1121            - freecad 0.9.2646.3-1 (embed; bug #547936)
1122    
1123    zipios++
1124            - freecad 0.9.2646.3-1 (embed; bug #547941)
1125            - enigma 0.92.3-3 (embed)
1126            NOTE: likely fixed earlier, marking etch's version as fixed
1127    
1128    linux-2.6
1129            - kvm <removed> (embed; bug #549973) [./kernel/*]
1130            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1131            - kernel-source-2.6.8 <removed> (old-version)
1132            - kernel-source-2.4.27 <removed> (old-version)
1133            - kernel-source-2.4.24 <removed> (old-version)
1134            - kernel-source-2.2.25 <removed> (old-version)
1135            - kernel-source-2.2.20 <removed> (old-version)
1136    
1137    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1138            - kvm <removed> (embed) [./libfdt/*]
1139            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1140    
1141    qweb (not packaged)
1142            - ajaxterm <unfixed>
1143    
1144    opensaml2
1145            - opensaml <removed> (old-version)
1146    
1147    shibboleth-sp2
1148            - shibboleth-sp <removed> (old-version)
1149    
1150    tuxonice-userui
1151            - suspend2-userui <removed> (old-version)
1152    
1153    expat
1154            - w3c-libwww <removed> (embed; bug #551941)
1155            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1156            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1157            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1158            - python2.4 <unfixable> (embed; bug #553403)
1159            - python-4suite <unfixed> (embed; bug #516935)
1160            - wxwindows2.4 <removed> (embed)
1161            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1162            - wxwidgets2.8 2.8.10.1-2 (embed)
1163            - celementtree 1.0.5-8 (embed)
1164            NOTE: Maybe that was fixed even earlier
1165            - audacity 1.3.2-1 (embed)
1166            - matanza <unfixed> (embed)
1167            - tdom 0.8.3~20080525-1 (embed)
1168            - udunits 2.1.8-4 (embed)
1169            - apr-util 1.2 (embed)
1170            - ayttm <unfxed> (embed; bug #561006)
1171            - cableswig <unfixed> (embed)
1172            - cadaver <unfixed> (embed)
1173            - cmake 2.6.0-6 (embed)
1174            - coin3 <unfixed> (embed)
1175            - gdcm 2.0.14-2 (embed)
1176            - ghostscript 8.71~dfsg-2 (embed)
1177            - grmonitor <removed> (embed)
1178            - iceape <unfixed> (embed)
1179            - insighttoolkit 3.16.0-1 (embed)
1180            NOTE: insighttoolkit might've been fixed earlier
1181            - libparagui1.1 1.0.2-1 (embed)
1182            - paraview 3.6.2-1 (embed)
1183            - poco 1.3.6p1-1 (embed)
1184            - simgear <unfixed> (embed)
1185            - sitecopy 1:0.16.0-1
1186            - smart <unfixed> (embed)
1187            NOTE: smart embeds celementree, and it includes expat
1188            - swish-e <not-affected> (Linked against libxml, which is used instead)
1189            - tla 1.3.5+dfsg-15 (embed)
1190            - vtk 4.1.20030227-1 (embed)
1191            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1192            - xmlrpc-c <unfixed> (embed)
1193            - iceweasel <unfixed> (embed)
1194            - kompozer <unfixed> (embed)
1195            - vxl 1.13.0-2 (embed)
1196            - xulrunner <unfixed> (embed)
1197            - apache2 2.2 (embed)
1198            - texlive-bin <not-affected> (Embedded code not compiled in)
1199            - vnc4 <unfixed> (embed)
1200            - xotcl 1.6.6-1 (embed)
1201            - chromium-browser 5.0.375.29~r46008-3
1202    
1203    xerces-c
1204            - xerces-c2 <unfixed> (old-version)
1205            - xerces27 <removed> (old-version)
1206    
1207    md5 (RSA's version; not the gnu version provided by coreutils)
1208            - w3c-libwww <removed> (embed; bug #551942)
1209            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1210    
1211    libparagui1.1
1212            - asc <unfixable> (fork)
1213    
1214    enet
1215            - sauerbraten <unfixed> (embed; #497194)
1216    
1217    eglibc
1218            - glibc <removed> (old-version)
1219    
1220    galib
1221            - gamera 3.2.3-1 (embed)
1222    
1223    configobj
1224            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1225            - elisa <unfixed> (embed; bug #555337)
1226            - gaupol <unfixed> (embed; bug #555338)
1227            - ipython <unfixed> (embed; bug #555339)
1228            - pida <unfixed> (embed; bug #555340)
1229            - psychopy <unfixed> (embed; bug #555341)
1230            - rest2web <unfixed> (embed; bug #555342)
1231            - auth2db <unknown> (embed)
1232            - dynagen <unknown> (embed)
1233            - iceweasel <unknown> (embed)
1234            - sabnzbdplus <unknown> (embed)
1235            - xulrunner <unknown> (embed)
1236            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1237    
1238    python-clientform
1239            - bibus <unfixed> (embed; bug #555332)
1240            - zope2.10 <unfixed> (embed; bug #555333)
1241            - zope2.11 <removed> (embed; bug #555334)
1242            - python-mechanize <unknown> (embed)
1243            - twill <unknown> (embed)
1244    
1245    python-mechanize
1246            - zope2.10 <unfixed> (embed; bug #555337)
1247            - zope2.11 <removed> (embed; bug #555338)
1248            - twill <unknown> (embed; bug #555339)
1249    
1250    pexpect
1251            - duplicity 0.6.06-1 (embed; bug #555361)
1252            - hplip <unfixed> (embed; bug #555362)
1253            - smart <unfixed> (embed; bug #555363)
1254    
1255    pyparsing
1256            - bauble <unfixed> (embed; bug #555366)
1257            - boa-constructor 0.6.1-8 (embed; bug #555367)
1258            - calibre <unfixed> (embed; bug #555368)
1259            - matplotlib <unfixed> (embed; bug #531024)
1260            - zhpy 1.7.3.1-1 (embed; bug #555370)
1261            - polybori <unknown> (embed)
1262            - python-whoosh <unknown> (embed)
1263            - twill <unknown> (embed)
1264            - zope-textindexng3 <unknown> (embed)
1265    
1266    python-pysqlite2
1267            - python2.4 <unfixed> (embed; bug #553403)
1268            - python2.5 <unfixed> (embed; bug #553403)
1269    
1270    celementtree
1271            - python2.5 <unfixed> (embed)
1272            - smart <unfixed> (embed)
1273    
1274    elementtree
1275            - python2.5 <unfixed> (embed)
1276            - python2.6 <unfixed> (embed)
1277            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1278            - gedit 2.28.2-1 (embed; bug #555344)
1279            - smart <unfixed> (embed)
1280            - solfege <unfixed> (embed; bug #555345)
1281            - w3af <unfixed> (embed; bug #555346)
1282            - python-qt4 <unknown> (embed)
1283            - sphinx <unknown> (embed)
1284            - python-nltk <itp> (embed)
1285    
1286    python2.5
1287            - python2.4 <unfixed> (old-version)
1288            - jython <unfixed> (embed)
1289            NOTE: embeds many stdlib modules
1290            - python-django <unfixed> (embed; bug #555419)
1291            NOTE: embeds stdlib modules: doctest, decimal
1292            - gamera 3.2.3-1 (embed)
1293            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1294            - boa-constructor <unfixed> (embed; bug #555426)
1295            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1296            - nicotine <unfixed> (embed; bug #555427)
1297            NOTE: embeds stdlib modules: ConfigParser
1298            - museek+ <unfixed> (embed; bug #555428)
1299            NOTE: embeds stdlib modules: ConfigParser
1300            - vegastrike-data <unfixed> (embed)
1301            NOTE: embeds many stdlib modules
1302            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1303            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1304            - config-manager <unfixed> (embed; bug #555423)
1305            NOTE: embeds stdlib modules: optparse
1306            - jhbuild 2.28.0-1 (embed; bug #555421)
1307            NOTE: embeds stdlib modules: optparse, subprocess
1308            - smart <unfixed> (embed; bug #555432)
1309            NOTE: embeds stdlib modules: optparse
1310            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1311            NOTE: embeds stdlib modules: doctest
1312            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1313            NOTE: embeds stdlib modules: doctest
1314            - distribute <unfixed> (embed)
1315            NOTE: embeds stdlib modules: doctest
1316            - python-setuptools <unfixed> (embed; bug #555435)
1317            NOTE: embeds stdlib modules: doctest
1318            - zope.testing <unfixed> (embed; bug #555436)
1319            NOTE: embeds stdlib modules: doctest
1320            - translate-toolkit <unfixed> (embed; bug #555422)
1321            NOTE: embeds stdlib modules: textwrap, contextlib
1322            - libtpclient-py <unfixed> (embed; bug #555424)
1323            NOTE: embeds stdlib modules: subprocess
1324            - grass <unfixed> (embed; bug #555425)
1325            NOTE: embeds stdlib modules: subprocess
1326            - coherence <unfixed> (embed; bug #555429)
1327            NOTE: embeds stdlib modules: uuid
1328            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1329            NOTE: embeds stdlib modules: uuid
1330            - setroubleshoot <unfixed> (embed; bug #555431)
1331            NOTE: embeds stdlib modules: uuid
1332            - linkchecker <unfixed> (embed; bug #555414)
1333            NOTE: embeds msgfmt.py script
1334            - imdbpy <unfixed> (embed)
1335            NOTE: embeds msgfmt.py script
1336            - kiwi <unfixed> (embed)
1337            NOTE: embeds msgfmt.py script
1338            - moin <unfixed> (embed)
1339            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1340            - plone3 <removed> (embed)
1341            NOTE: embeds msgfmt.py script
1342            - roundup <unfixed> (embed)
1343            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1344            - rednotebook <unfixed> (embed; bug #555415)
1345            NOTE: embeds msgfmt.py script
1346            - turbogears <unfixed> (embed)
1347            NOTE: embeds msgfmt.py script
1348            - elisa <unfixed> (embed)
1349            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1350            - calibre <unfixed> (embed)
1351            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1352            - mailman 1:2.1.13-1 (embed; #555416)
1353            NOTE: embeds msgfmt.py script
1354            - python-docutils <unknown> (embed)
1355            NOTE: embeds stdlib modules: optparse, textwrap
1356            - python-imaging <unknown> (embed)
1357            NOTE: embeds stdlib modules: doctest
1358            - python-mechanize <unknown> (embed)
1359            NOTE: embeds stdlib modules: doctest
1360            - twill <unknown> (embed)
1361            NOTE: embeds stdlib modules: subprocess
1362            - zeroc-ice <unknown> (embed)
1363            NOTE: embeds stdlib modules: subprocess
1364            - wxwidgets2.8 <unknown> (embed)
1365            NOTE: embeds stdlib modules: subprocess
1366            - cycle <unknown> (embed)
1367            NOTE: embeds msgfmt.py script
1368            - deluge <unknown> (embed)
1369            NOTE: embeds msgfmt.py script
1370            - opendict <unknown> (embed)
1371            NOTE: embeds msgfmt.py script
1372            - openerp-client <unknown> (embed)
1373            NOTE: embeds msgfmt.py script
1374            - rapidsvn <unknown> (embed)
1375            NOTE: embeds msgfmt.py script
1376            - wammu <unknown> (embed)
1377            NOTE: embeds msgfmt.py script
1378            - gaphor <unknown> (embed)
1379            NOTE: embeds msgfmt.py script
1380            - pida <unknown> (embed)
1381            NOTE: embeds msgfmt.py script
1382            - python-formencode <unknown> (embed)
1383            NOTE: embeds msgfmt.py script
1384            - duplicity <unfixed> (embed)
1385            NOTE: embeds stdlib module: urlparse, tarfile
1386            - pygopherd <unfixed> (embed)
1387            NOTE: embeds stdlib module: zipfile
1388    
1389    argparse
1390            - twill <unfixed> (embed; bug #555347)
1391            - ipython <unfixed> (embed; bug #555348)
1392    
1393    coherence
1394            - elisa <unfixed> (embed; bug #555335)
1395    
1396    simpletal
1397            - plastex <unfixed> (embed; bug #555371)
1398    
1399    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1400            - postr <unfixed> (embed)
1401            - elisa <unfixed> (embed)
1402    
1403    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1404            - apertium-tolk <unfixed> (embed)
1405            - ipython <unfixed> (embed)
1406            - virtaal <unfixed> (embed)
1407    
1408    distribute
1409            - setuptools <removed> (old-version)
1410    
1411    rails
1412            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1413            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1414            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1415            - thin <unfixed> (embed) [./spec/rails_app/*]
1416            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1417            NOTE: be dangerous if developers are naively basing their code off of the examples
1418            NOTE: prototype.js is among the example files
1419    
1420    lucene2 (prototype.js is among the embeds in the following)
1421            - lucene <unfixed> (old-version)
1422            - pylucene <unfixed> (embed)
1423            - libpdfbox-java <unfixed> (embed)
1424            - libfontbox-java <unfixed> (embed)
1425            - libjempbox-java <unfixed> (embed)
1426            - solr <unfixed> (embed)
1427    
1428    unicode-data
1429            - syslinux <unfixed> (embed)
1430            - camomile <unfixed> (embed)
1431            - fribidi <unfixed> (embed)
1432            - m17n-db <unfixed> (embed)
1433            - sbcl <unfixed> (embed)
1434            - heimdal <unfixed> (embed)
1435            - icu <unfixed> (embed)
1436            - icu4j <unfixed> (embed)
1437            - krb5 <unfixed> (embed)
1438            - moodle <unfixed> (embed)
1439            - openldap <unfixed> (embed)
1440            - pike7.6 <unfixed> (embed)
1441            - samba <unfixed> (embed)
1442            - samba4 <unfixed> (embed)
1443            - cmucl <unfixed> (embed)
1444            - typo3-src <unfixed> (embed)
1445            - mauve <unfixed> (embed)
1446            - texlive-bin <unfixed> (embed)
1447            - ypsilon <unfixed> (embed)
1448            - jeuclid <unfixed> (embed)
1449            - charmap.app <unfixed> (embed)
1450            - clisp <unfixed> (embed)
1451            - gnulib <unfixed> (embed)
1452            - opensrs-client <unfixed> (embed)
1453            - saxonb <unfixed> (embed)
1454            - rails <unfixed> (embed)
1455    
1456    feedparser
1457            - rawdog <unfixed> (embed; bug #383422)
1458            - miro <unfixed> (embed; bug #555351)
1459            - calibre <unfixed> (embed; bug #555352)
1460            - freevo <unfixed> (embed; bug #555353)
1461            - pida <unfixed> (embed; bug #555354)
1462            - planet-venus <unfixed> (embed; bug #555355)
1463            - plone3 <removed> (embed; bug #555356)
1464            - exaile 0.2.14+debian-1 (embed)
1465            - screenlets 0.1.2-3 (embed)
1466            NOTE: included twice
1467    
1468    agg:
1469            - matplotlib <unfixed> (embed: bug #377271)
1470            - contextfree <unfixed> (embed)
1471            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1472            - exactimage <unfixed> (embed)
1473            - python-enable <unfixed> (embed)
1474            - mapnik 0.5.1-3 (embed)
1475            NOTE: links statically to agg, but shared library is not available (bug #377271)
1476    
1477    vtk
1478            - paraview <unfixable> (embed; bug #495426)
1479    
1480    txt2tags
1481            - rednotebook <unfixed> (embed)
1482    
1483    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1484            - gajim <unfixed> (embed)
1485            - emesene <unfixed> (embed)
1486            - convirt <unfixed> (embed)
1487            - pida <unfixed> (embed)
1488            - rednotebook <unfixed> (embed)
1489    
1490    horde3 (prototype.js is among the embeds in the following)
1491            - mnemo2 <unfixed> (embed)
1492            - nag2 <unfixed> (embed)
1493            - wordpress <unfixed> (embed)
1494            NOTE: Text_Diff (wp-includes/Text/Diff*)
1495    
1496    cimg
1497            - gmic <itp> (embed)
1498    
1499    mootools
1500            - gmic <itp> (embed)
1501    
1502    openldap
1503            - openldap2.3 <removed> (old-version)
1504    
1505    grub2
1506            - grub <unfixed> (old-version)
1507    
1508    gnupginterface
1509            - duplicity <unfixed> (embed)
1510    
1511    python-dateutil
1512            - awn-extras-applets <unfixed> (embed)
1513            - matplotlib <unknown> (embed)
1514    
1515    cups
1516            - cupsys <removed> (old-version)
1517    
1518    yui
1519            - bcfg2 <not-affected> (present in source but not included in any binary files)
1520            - serendipity 1.5.3-1 (embed; bug #557746)
1521            - moodle 1.8.2.dfsg-5 (embed)
1522            - jifty 0.91117-1 (embed; bug #557748)
1523            - webgui 7.7.26-1 (embed)
1524            - loggerhead 1.17-1 (embed)
1525    
1526    quake3 (vanilla source not packaged in debian)
1527            - openarena <unfixable> (fork)
1528    
1529    quake2 (vanilla source not packaged in debian)
1530            - alien-arena <unfixable> (fork)
1531            - warsow <unfixable> (fork)
1532    
1533    libtheora
1534            - iceweasel <not-affected> (uses xulrunner)
1535            - xulrunner <unfixed> (embed; bug #540959)
1536            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1537            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1538            - iceape <unfixed> (embed; bug #559276)
1539            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1540            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1541    
1542    dtoa
1543            - bfilter <unfixed> (embed)
1544            - cacao <unfixed> (embed)
1545            - cdrdao <unfixed> (embed)
1546            - classpath <unfixed> (embed)
1547            - freej <unfixed> (embed)
1548            - iceape <unfixed> (embed)
1549            - iceweasel <unfixed> (embed)
1550            - jscoverage <unfixed> (embed)
1551            - kde4libs <unfixed> (embed)
1552            - kdelibs <unfixed> (embed)
1553            - kompozer <unfixed> (embed)
1554            - libv8 <unfixed> (embed)
1555            - mono <unfixed> (embed)
1556            - newlib <unfixed> (embed)
1557            - nspr <unfixed> (embed)
1558            - php5 <unfixed> (embed)
1559            - polyml <unfixed> (embed)
1560            - qt4-x11 <unfixed> (embed)
1561            - rhino <unfixed> (embed)
1562            NOTE: code translated to Java
1563            - ruby1.8 <unfixed> (embed)
1564            - ruby1.9 <unfixed> (embed)
1565            - ruby1.9.1 <unfixed> (embed)
1566            - sdd <unfixed> (embed)
1567            - sfind <unfixed> (embed)
1568            - star <unfixed> (embed)
1569            - tinymux <unfixed> (embed)
1570            - virtualbox-ose <unfixed> (embed)
1571            - webkit <unfixed> (embed)
1572            - xulrunner <unfixed> (embed)
1573    
1574    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1575            - firegpg <unfixed> (embed)
1576            - enigmail <unfixed> (embed)
1577    
1578    ptmalloc (not packaged in Debian)
1579            - crystalspace <unfixed> (embed)
1580            - qt4-x11 <unfixed> (embed)
1581    
1582    svgalib
1583            - usplash <unfixed> (embed)
1584    
1585    bogl
1586            - usplash <unfixed> (embed)
1587    
1588    taglist
1589            - usplash <unfixed> (embed)
1590    
1591    portaudio
1592            - audacity <unfixed> (embed; bug #323711)
1593    
1594    nyquist
1595            - audacity <unfixed> (embed)
1596            NOTE: embeds a forked nyquist with support for a shared library
1597    
1598    vamp-plugin-sdk
1599            - audacity <unfixed> (embed)
1600    
1601    wordpress
1602            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1603            - wordpress-mu <removed> (fork)
1604    
1605    php5
1606            - php4 <removed> (old-version)
1607    
1608    classpath
1609            - libgnucrypto-java <removed> (embed; bug #559788)
1610    
1611    libtool
1612            - apr <unfixed> (static; bug #489625)
1613            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1614            - arts <unfixed> (embed)
1615            - bochs 2.4.2-1 (embed; bug #560884)
1616            - camserv <unfixed> (embed)
1617            - collectd 4.8.2-1 (embed)
1618            - courier-authlib 0.58-4 (embed)
1619            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1620            - cvsnt 2.5.04.3236-1.2 (embed)
1621            - dico <not-affected> (Uses the system copy of ltdl)
1622            - freeradius 0.1+20010527-1 (embed)
1623            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1624            - ggobi 2.1.9~20091212-1 (embed)
1625            - glame 2.0.1-4 (embed)
1626            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1627            - gnash 0.8.7-2 (embed)
1628            - gnu-smalltalk <unfixed> (embed; bug #566777)
1629            - google-gadgets 0.10.5-0.3 (embed)
1630            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1631            - graphicsmagick 1.3.5-6 (embed)
1632            - graphviz 2.8-3 (embed)
1633            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1634            - guile-1.6 1.6.8-7 (embed)
1635            - hamlib 1.2.11-1 (embed)
1636            - hercules 3.06-1.2 (embed)
1637            - jags 1.0.4-3 (embed; bug #560864)
1638            - kdelibs <unfixed> (embed)
1639            - libannodex <removed> (embed)
1640            - libextractor 0.5.23+dfsg-4 (embed)
1641            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1642            - libtunepimp 0.5.3-7.3 (embed)
1643            - mp4h 1.3.1-4.1 (embed)
1644            - naim <removed> (embed)
1645            - parser-mysql <unfixed> (embed)
1646            - pinball 0.3.1-11 (embed)
1647            - redland <unfixed> (embed)
1648            - siproxd <unfixed> (embed)
1649            - ski <unfixed> (embed)
1650            - synfig 0.62.00-1 (embed)
1651            - unixodbc 2.2.4-5 (embed)
1652            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1653            - clamav 0.95+dfsg-1 (embed)
1654            - imagemagick 6:6.2.3.1-1 (embed)
1655            - hypre 2.4.0b-5 (embed)
1656            - lam <unfixed> (embed)
1657            - openmpi <unfixable> (embed; bug #559386)
1658            - parser <unfixed> (embed)
1659            - pdsh 2.18-5 (embed; bug #560892)
1660            - sbnc 1.2-8 (embed)
1661            - sdcc <unfixed> (embed)
1662            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1663            - proftpd-dfsg <unfixed> (embed; bug #561748)
1664            - babel 1.4.0.dfsg-5 (embed)
1665            - libprelude 0.9.14-2 (embed)
1666            - heartbeat 2.1.4-7 (embed)
1667            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1668            NOTE: might've been fixed earlier
1669            - gcc-* <unknown> (embed)
1670    
1671    ocamlgsl
1672            - orpie 1.5.1-7.1 (embed; bug #550058)
1673    
1674    xdotool
1675            - keynav <unfixed> (embed; bug #560103)
1676    
1677    bulletphysics (not packaged; http://www.bulletphysics.org/)
1678            - supertuxkart <unfixed> (embed)
1679            - blender <unfixed> (embed)
1680    
1681    ghostscript
1682            - gs-gpl <removed> (old-version)
1683    
1684    icedove
1685            - thunderbird <removed> (old-version)
1686    
1687    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1688            - jquery <unfixed> (embed)
1689    
1690    sed
1691            - ssed <unfixed> (fork)
1692    
1693    phpatomlib (http://code.google.com/p/phpatomlib)
1694            - wordpress <unfixed> (embed)
1695    
1696    Services_JSON (http://pear.php.net/package/Services_JSON)
1697            - wordpress <unfixed> (embed)
1698    
1699    phpass (http://www.openwall.com/phpass/)
1700            - gallery2 <unfixed> (embed)
1701            - wordpress <unfixed> (embed)
1702            - typo3-src <unfixed> (modified-embed)
1703            NOTE: file refers to drupal, maybe there's a copy somewhere there
1704            NOTE: a copyright owner search didn't match anything
1705            - libauthen-passphrase-perl <unfixable> (fork)
1706            NOTE: perl implementation of phpass
1707    
1708    squirrelmail
1709            - wordpress <unfixed> (embed)
1710            NOTE: class-pop3.php
1711    
1712    ezSQL (http://www.woyano.com/jv/ezsql)
1713            - wordpress <unfixable> (fork)
1714            NOTE: wp-db.php
1715    
1716    Diff.php (Clay Loveless' version/killersoft.com)
1717            - php-versioncontrol-svn <unfixed>
1718    
1719    libm (provided by libc)
1720            - spring <unfixed> (embed)
1721            NOTE: embedded by embedded copy of streflop
1722            - aide <unfixed> (static)
1723            - busybox <unfixed> (static)
1724            - mindi-busybox <unfixed> (static)
1725            - qemu <unfixed> (static)
1726            NOTE: qemu-user-static
1727            - tuxonice-userui <unfixed> (static)
1728            - zsh <unfixed> (static)
1729            NOTE: zsh-static
1730    
1731    streflop
1732            - spring <unfixed> (embed)
1733    
1734    minizip
1735            - spring <unfixed> (embed)
1736    
1737    oscpack
1738            - spring <unfixed> (embed)
1739    
1740    hpiutil2
1741            - spring <unfixed> (embed)
1742    
1743    p7zip
1744            - spring <unfixed> (embed)
1745    
1746    pythonqt (doesn't seem to be python-qtN, unknown source)
1747            - fontmatrix <unfixed> (embed)
1748            - elmerfem <unfixed> (embed)
1749    
1750    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1751            - docvert <unfixed> (embed)
1752            - jifty <unfixed> (embed)
1753            - kdenetwork <unfixed> (embed)
1754            - mediatomb <unfixed> (embed)
1755            - plastex <unfixed> (embed)
1756            - plone3 <removed> (embed)
1757            - python-chaco <unfixed> (embed)
1758            - python-docutils <unfixed> (embed)
1759            - s5 <unfixed> (embed)
1760            - zope2.10 <unfixed> (embed)
1761            - zope2.11 <removed> (embed)
1762            - cython <not-affcted> (embed)
1763            NOTE: part of documentation, which is not installed into the binary package
1764    
1765    python-docutils
1766            - zope2.10 <unfixed> (embed)
1767            - zope2.11 <removed> (embed)
1768    
1769    tesseract
1770            - ocropus <unfixed> (static)
1771    
1772    antlr
1773            - kdevelop <unfixed> (embed)
1774    
1775    libxerces2
1776            - openjdk-6 <unfixed> (embed)
1777    
1778    kfreebsd-8
1779            - kfreebsd-7 <unfixed> (old-version)
1780            - kfreebsd-6 <removed> (old-version)
1781    
1782    ruby1.9.1
1783            - ruby1.9 <unfixed> (old-version)
1784            - ruby1.8 <unfixed> (old-version)
1785    
1786    maildrop
1787            - courier <unfixed> (embed) [./maildrop]
1788    
1789    glee
1790            - warzone2100 <unfixed> (embed)
1791    
1792    phing
1793            - symfony <unfixed> (embed)
1794    
1795    pake
1796            - symfony <unfixed> (embed)
1797    
1798    propel
1799            - symfony <unfixed> (embed)
1800    
1801    creole
1802            - symfony <unfixed> (embed)
1803    
1804    hfsutils
1805            - cdrkit <unfixed> (embed; bug #570187)
1806            NOTE: embeds hfsutils code in genisoimage
1807    
1808    cdrkit
1809            - grub2 <unfixed> (embed; bug #570156)
1810            NOTE: genisoimage imported into grub-mkisofs
1811    
1812    kdebase-workspace
1813            - kdebase <unfixed> (old-version)
1814    
1815    file
1816            - php5 <unfixable> (modified-embed)
1817            [lenny] - php5 <not-affected>
1818    
1819    cdb
1820            - php5 <unfixed> (embed)
1821    
1822    libmbfl (itp: #570708)
1823            - php5 <unfixed> (embed)
1824            NOTE: PHP is actually the current upstream, ITP is of that code
1825    
1826    libonig
1827            - php5 5.3.2-1 (embed)
1828    
1829    xmlrpc-epi
1830            - php5 <unfixed> (embed)
1831    
1832    swt-gtk
1833            - eclipse <unfixed> (embed; bug #538808)
1834    
1835    txt2html
1836            - wml 2.0.11ds2-1 (embed)
1837    
1838    ca-certificates
1839            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1840    
1841    openexr
1842            - freeimage <unfixed> (embed)
1843    
1844    libmng
1845            - freeimage <unfixed> (embed)
1846    
1847    openjpeg
1848            - freeimage <unfixed> (embed)
1849    
1850    libjpeg6b
1851            - freeimage <unfixed> (embed)
1852    
1853    libjpeg (don't know what exact version)
1854            - dcmtk <unfixed>
1855            - gdcm <unfixed>
1856            - insighttoolkit <unfixed>
1857            - openarena <unfixed> (bug #495966)
1858            - outguess <unfixed>
1859            - squeak-vm <unfixed> (embed)
1860            - tremulous <unfixed>
1861            - tuxonice-userui <unfixed> (static)
1862            - fpc <unfixed> (static)
1863            - lazarus <unfixed> (static)
1864            NOTE: inherited from fpc, see #472304
1865            - mseide-msegui <unfixed> (static)
1866            NOTE: inherited from fpc, see #472304
1867            - easymp3gain <unfixed> (static)
1868            NOTE: inherited from fpc, see #472304
1869            - winff <unfixed> (static)
1870            NOTE: inherited from fpc, see #472304
1871            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1872    
1873    
1874    lxr
1875            - lxr-cvs (embed)
1876    
1877    libfile-copy-recursive-perl
1878            - r-base <unfixed> (embed; bug #577427)
1879            - r-base-core-ra <unfixed> (embed; bug #577429)
1880    
1881    delimmatch
1882            - r-base <unfixed> (embed; bug #577433)
1883            - r-base-core-ra <unfixed> (embed; bug #577434)
1884    
1885    libsmf (ITP: #572558)
1886            - denemo <unfixed> (embed)
1887            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1888    
1889    libselinux
1890            - dpkg 1.15.6 (static)
1891    
1892    xinha (ITP: #479708)
1893            - horde3 <unfixed>
1894            - serendipity <unfixed>
1895            - openacs <unfixed>
1896            - dotlrn <unfixed>
1897    
1898    dvipng
1899            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1900    
1901    dvipdfmx
1902            - texlive-bin <unfixed> (embed)
1903            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1904    
1905    lcdf-typetools
1906            - texlive-bin 2009-1 (embed)
1907    
1908    tex4ht
1909            - texlive-bin 2009-1 (embed)
1910    
1911    freetype
1912            - texlive-bin 2009-1 (embed)
1913    
1914    freetype2
1915            - texlive-bin 2009-1 (embed)
1916    
1917    silgraphite
1918            - texlive-bin <unfixed> (embed)
1919    
1920    unzip
1921            - texlive-bin 2009-1 (embed)
1922    
1923    jbig2dec
1924            - ghostscript 8.71~dfsg2-1 (embed)
1925    
1926    libxml2
1927            - chromium-browser 5.0.375.29~r46008-1
1928    
1929    protobuf
1930            - chromium-browser 5.0.375.70~r48679-2
1931    
1932    libv8
1933            - chromium-browser 5.0.375.38~r46659-1
1934    
1935  halibut:  nspr
1936  nsis          - chromium-browser 5.0.375.29~r46008-3
1937    
1938  libghttp:  yasm
1939  hotway          - chromium-browser 5.0.375.29~r46008-2
1940    
1941  etl-dev (will be renamed to libetl-dev soon):  libxslt
1942  synfig          - chromium-browser 5.0.375.29~r46008-1

Legend:
Removed from v.3551  
changed lines
  Added in v.15001

  ViewVC Help
Powered by ViewVC 1.1.5