/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 11344 by jamie-guest, Fri Mar 6 16:59:34 2009 UTC revision 15046 by geissert, Wed Jul 28 19:19:37 2010 UTC
# Line 10  Format: Line 10  Format:
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>,  status: version number fixing the embedded copy
14          <itp> or <unknown> if the version number can not be determined          <unfixed> if the issue is not yet fixed
15          <unfixable> for unavoidable cases (e.g., forks that add real value)          <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
21        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
22        fork (the package is not just embedding code but it is a fork and        modified-embed (embeds a code copy that differs from upstream code)
23              thus might share parts of the source code)        fork (a full-blown fork of another source package)
24        old-version (the package is an older version of essentially        old-version (an older version of essentially the same code)
                    the same code)  
25    
26  The srcpkg might be some string to identify the code if there is no  The srcpkg might be some string to identify the code if there is no
27  specific source package.  specific source package.
28    
29  Everything up to the next line is ignored.  Everything up to the next line is ignored.
30  ---BEGIN  ---BEGIN
31  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  poppler
         NOTE: Fixed packages link to poppler library unless otherwise noted  
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
32          - pdftohtml <unknown>          - pdftohtml <unknown>
33          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
34          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
35          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
36          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
         NOTE: the kpdf replacement in KDE 4 is using poppler  
37          - texlive-base 3.0-12 (embed)          - texlive-base 3.0-12 (embed)
38          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
39          NOTE: links to poppler          - koffice 1:2.0.0-1 (embed; bug #436163)
         - koffice <unfixed> (embed; bug #436163)  
40          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
41          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
42          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
43          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
         NOTE: copy only present in source but links to poppler  
45          - pdfedit <unfixed> (embed; bug #510794)          - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53  ppmd  ppmd
54          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60    
61    lrmi
62            - read-edid 2.0.0-1 (embed; bug #495131)
63            - s3switch <unfixed> (embed)
64            - xresprobe <unfixed> (embed)
65            - zhcon <unfixed> (embed)
66    
67    php-htmlpurifier
68            - mahara 1.2.5-1 (embed)
69            - knowledgeroot <unfixed> (embed)
70            - moodle <unfixed> (embed)
71    
72  peercast  peercast
73          - gnome-peercast <unfixed> (embed)          - gnome-peercast <removed> (embed)
74          NOTE: gnome-peercast may better be removed, see #466539          [etch] - gnome-peercast <unfixed> (embed)
75    
76  silc-toolkit  silc-toolkit
77          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
78    
79    icclib
80            - ghostscript <unfixed> (embed)
81            - argyll <unfixed> (embed)
82    
83    libusb
84            - argyll <unfixed> (embed)
85    
86  dietlibc  dietlibc
87          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
88            - mksh <unfixable> (static)
89            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
90    
91  libmikmod  libmikmod
92          - sdl-mixer1.2 <unfixed> (embed)          - sdl-mixer1.2 <unfixed> (embed)
93          TODO: report bug          TODO: report bug
94    
95  libiax  libiax
96          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
97    
98    spandsp
99            - iaxmodem <unfixable> (embed; bug #548885)
100    
101    python-paramiko
102            - fabric 0.9.0-2 (embed; bug #561398)
103    
104  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
105          - dpkg <unfixed> (embed)          - dpkg 1.15.6 (static)
106          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
107          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
108            - cherokee <unfixed> (embed)
109          NOTE: somehow derived code base          NOTE: somehow derived code base
110          - mono <unfixed> (embed)          - mono <unfixed> (embed)
111          TODO: check mozilla          TODO: check mozilla
# Line 82  zlib (lots of apps embed a copy, but lin Line 114  zlib (lots of apps embed a copy, but lin
114          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
115          - rpm <unknown> (embed)          - rpm <unknown> (embed)
116          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
117          - tuxcmd-modules <itp> (embed; bug #508082)          - tuxcmd-modules <unfixed> (embed)
118            - zsync <unfixed>
119            - tra <unfixed>
120            - sash <unfixed>
121            - nsis <unfixed>
122            - pyfits 1:2.3.1-1
123            - mseide-msegui <unfixed>
124            NOTE: mseide
125            - mirrordir <unfixed>
126            - poco <unfixed>
127            - klibc <unfixed>
128            - emboss <unfixed>
129            - ghostscript <unfixed>
130            - freeimage <unfixed>
131            - clamav <unfixed> (fork)
132            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
133            - tuxonice-userui <unfixed> (static)
134            - plt-scheme <unfixed>
135            - perl <unfixed>
136            - paraview <unfixed>
137            - velvet 0.7.56~nozlibcopy-1
138            - gcvs <unfixed>
139            - dump <unfixed>
140            - aide <unfixed> (static)
141            - dar <unfixed> (static)
142            - avfs <unfixed>
143            - fpc <unfixed>
144            - winff <unfixed>
145            NOTE: inherited from fpc, see #472304
146            - lazarus <unfixed>
147            NOTE: inherited from fpc, see #472304
148            - erlang <unfixed> (embed)
149            - gamera 3.2.3-1 (embed)
150            - python2.4 <unfixed> (embed; bug #553403)
151            - python2.5 <unfixed> (embed; bug #553403)
152            - texlive-bin <unknown> (embed)
153    
154    dulwich
155            - hg-git 0.1.0-1 (embed; bug #541996)
156    
157    libvigraimpex
158            - hugin <unfixed> (embed; bug #542259)
159            - enblend-enfuse <unfixed> (embed; bug #542258)
160            - gamera 3.2.3-1 (embed)
161    
162  libbz2  libbz2
163          - dpkg <unfixed> (static)          - dpkg 1.15.6 (static)
164            - amd64-libs <unfixed> (static)
165  libgadu:          NOTE: let's call it "static"
166          - centericq <unfixed> (embed)          - dar <unfixed> (static)
167          - gaim <unfixed> (embed)          - dump <unfixed> (static)
168          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)          - unalz <unfixed> (embed)
169          - kopete 4:3.3.2-5 (embed)          NOTE: has code, by the maint, to use the system version but links against the internal copy
170          - kadu 0.6.0.2-3 (embed)  
171          - gadu <unfixed> (embed)  libyahoo2
172            - centerim <unfixed> (embed; bug #559783)
173    
174    libmsn
175            - centerim <unfixed> (embed; bug #559783)
176    
177    libgadu
178            - centerim <unfixed> (embed; bug #559783)
179            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
180            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
181            - kdenetwork 4:3.3.2-5 (embed)
182            NOTE: from kdenetwork: kopete
183          - ekg 1:1.8~rc0-1 (embed)          - ekg 1:1.8~rc0-1 (embed)
184          - kadu 0.6.0.2-3 (embed; bug #504430)          - kadu 0.6.0.2-3 (embed; bug #504430)
185          NOTE: gadu not packaged in Debian yet          - gadu <itp> (embed)
186    
187  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
188          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
189          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
190          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
191          - phpwiki (embed)          - phpwiki <unfixed> (embed)
192          - php4 <unfixed> (embed)          - php4 <removed> (embed)
193          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
194    
195  shtool (affects build-time only)  shtool (affects build-time only)
196          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
197          - php4 <unfixed> (embed)          - php4 <removed> (embed)
198            - php5 <unfixed> (embed)
199    
200  mozilla source code  xulrunner
201          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
202          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
203          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
204          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
205          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
206          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
207          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
208          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
209    
210  xli  xli
211          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
212    
213  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
214          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
215          - xfree86/xorg <unfixed> (embed)  
216          NOTE: in libxpm  libxpm
217            - lesstif2 <unfixed> (embed; bug #575750)
218    
219  kerberized apps with BSD origin  kerberized apps with BSD origin
220          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
221          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
222          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
223    
224  grip (which pkg is the origin?)  grip (which pkg is the origin?)
225          - libcdaudio          - libcdaudio <unfixed>
226          - grip          - grip <unfixed>
227          - gnome-vfs          - gnome-vfs <unfixed>
228          TODO: check vfs2 as well          TODO: check vfs2 as well
229    
230  fudforum  fudforum
231          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
232          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
233          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
234    
235    libbsd
236            - rdate 1:1.2-3 (embed)
237            - atheme-services <unfixed>
238            - libbsd-arc4random-perl <not-affected> (modified-embed)
239            NOTE: code not used, it links dynamically against libbsd instead
240            - isakmpd <unfixed>
241            - bsdgames <unfixed> (embed)
242            - bsd-mailx <unfixed> (embed)
243            - netcat-openbsd <unfixed> (embed; bug #550611)
244            - openssh <unfixed> (embed)
245            - unworkable <unfixed> (embed)
246            - mksh <unfixed> (modified-embed)
247            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
248            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
249            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
250    
251  cvs  cvs
252          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
253          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
254    
255  pcre  pcre3
256          - python* <unfixed> (embed)          - php4 <removed> (embed)
         - php4 <unknown> (embed)  
257          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
258          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
259            NOTE: libgoffice-*
260          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
261          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
262          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
263          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
264          - glib2.0 2.15.2-1 (embed)          - glib2.0 2.15.2-1 (embed)
265          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
# Line 166  pcre Line 267  pcre
267          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
268          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
269          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
270          - tin <unknown> (embed)          - tin 980117-1 (embed)
271          - kazehakase 0.5.2-1          - kazehakase 0.5.2-1
272          - webkit <unfixed> (embed)          - webkit 1.0.1-1 (embed)
273          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
274          NOTE: embedded via webkit copy          NOTE: embedded via webkit copy
275            - erlang <unfixed> (embed)
276            - ssed <unfixed> (embed)
277            - ircd-hybrid <unfixed> (static)
278            - emboss <unfixd>
279            - cherokee <unfixed> (embed)
280            - oftc-hybrid <unfixed> (embed)
281            - ratbox-services <unfixed> (embed)
282            - squeak-vm <unfixed> (embed)
283            - tinymux <unfixed> (embed)
284    
285  tiff  tiff
286          - wxwindows2.4 2.2.1 (embed)          - wxwindows2.4 2.2.1 (embed)
287            - gamera 3.2.3-1 (embed)
288            - freeimage <unfixed> (embed)
289            - libtk-img <unfixed> (embed)
290            NOTE: there are two copies, one under tiff/ other under libtiff/
291            - gdal <unfixed>
292    
293  uudeview  uudeview
294          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
# Line 181  uudeview Line 296  uudeview
296    
297  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
298          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
299          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
300          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
301            - heimdal <unfixed> (embed; bug #559616)
302    
303  util-linux/mount  util-linux/mount
304          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
305          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
306    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
307  sylpheed  sylpheed
308          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
309    
# Line 206  phpldapadmin Line 318  phpldapadmin
318  chmlib  chmlib
319          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
320    
321  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
322          - mplayer 1.0~rc2-14 (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
323          - kino 1.0.0-1          - kino 1.0.0-1
324          - vlc <not-affected> (Links dynamically since initial release)          - vlc <not-affected> (Links dynamically since initial release)
# Line 214  libavcodec/libavformat (source: ffmpeg) Line 326  libavcodec/libavformat (source: ffmpeg)
326          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
327          - motion 3.1.19-1          - motion 3.1.19-1
328          - gstreamer0.10-ffmpeg 0.10.3-2          - gstreamer0.10-ffmpeg 0.10.3-2
329          - xmovie <unfixed>          - xmovie <removed> (static)
330          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
331            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
332            - audacity 1.3.7-2 (embed; bug #512278)
333            - chromium-browser <unfixed> (fork)
334    
335  faad2  faad2
336          - mplayer 1.0~rc2-20 (embed)          - mplayer 1.0~rc2-20 (embed)
337            - avifile <unfixed> (embed; bug #538750)
338            - ffmpeg-debian <removed> (embed)
339    
340  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
341          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
342            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
343            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
344    
345  libdts  libdts
346          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 234  liba52 Line 352  liba52
352          - a52dec <unfixed> (embed)          - a52dec <unfixed> (embed)
353          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
354    
355  libmpeg2  mpeg2dec (libmpeg2)
         - mpeg2dec <unfixed> (embed)  
356          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
357    
358  curl  libmpeg3
359          - wget <unfixed> (embed)          - squeak-vm <unfixed> (embed)
360          NOTE: code for NTLM authentication  
361    libntlm
362            - wget <unfixed> (fork; bug #550436)
363            - curl <unfixed> (fork; bug #550437)
364            - cntlm <unfixed> (fork; bug #550438)
365    
366  uw-imap  uw-imap
367          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 249  uw-imap Line 370  uw-imap
370  imagemagick  imagemagick
371          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
372    
373    python-urlgrabber
374            - mercurial <unfixed> (embed; bug #531062)
375            - w3af <unfixed> (embed; bug #555372)
376            [experimental] - harvestman <unfixed> (embed; bug #555373)
377    
378    beautifulsoup
379            - python-mechanize <unfixed> (embed; bug #555349)
380            - zope2.11 <removed> (embed; bug #555350)
381            - twill <unknown> (embed)
382    
383  halibut  halibut
384          - nsis <unfixed> (fork)          - nsis <unfixed> (fork)
385    
# Line 279  fckeditor Line 410  fckeditor
410          - moin 1.8.2-2 (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
411          - karrigell <removed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
412          - gforge 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
413            - request-tracker3.8 <unfixed> (embed)
414            - otrs2 <unfixed> (embed)
415    
416  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
417          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
# Line 286  ipatlas (not packaged in Debian) Line 419  ipatlas (not packaged in Debian)
419  libphp-phpmailer  libphp-phpmailer
420          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
421          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
422          - symfony <unfixed> (embed)          - symfony <unfixed> (embed; bug #566778)
423          - phpgroupware-felamimail <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
424          NOTE: phpgroupware-felamimail is only in etch          NOTE: phpgroupware-felamimail is only in etch
425          - egroupware <unfixed> (embed; bug #504283)          - egroupware <unfixed> (embed; bug #504283)
426          - glpi <unfixed>          - glpi <unfixed>
# Line 295  libphp-phpmailer Line 428  libphp-phpmailer
428  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
429          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
430    
431  giflib:  giflib
432          - wine <unfixed> (embed; bug #466181)          - wine <unfixed> (embed; bug #466181)
433    
434  bennu (not packaged in Debian, http://bennu.sourceforge.net)  bennu (not packaged in Debian, http://bennu.sourceforge.net)
435          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
436    
437  smarty:  smarty
438          - moodle 1.8.2-2 (embed; bug #471158)          - moodle 1.8.2-2 (embed; bug #471158)
439          - gallery2 2.2.5-2 (embed; bug #471160)          - gallery2 2.2.5-2 (embed; bug #471160)
440          - mahara 0.9.2-2 (embed; bug #471201)          - mahara 0.9.2-2 (embed; bug #471201)
# Line 327  libphp-adodb Line 460  libphp-adodb
460          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
461          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
462          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
463            - torrentflux 2.0beta1-2 (embed)
464          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
465          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
466          - cacti <unknown> (embed)          - cacti <unknown> (embed)
467          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
468          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
# Line 336  libphp-adodb Line 470  libphp-adodb
470          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
471    
472  gzip  gzip
473          - linux-kernel <unfixed> (embed)          - linux-2.6 <unfixed> (embed) [lib/inflate.c]
         NOTE: lib/inflate.c  
474          - klibc <unfixed> (embed)          - klibc <unfixed> (embed)
475          NOTE: based on linux-kernel gzip code          NOTE: based on linux-kernel gzip code
476          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
477            - pristine-tar <unfixed> (modified-embed)
478            NOTE: compression code only, not uncompression
479            - ncompress <unfixed> (old-version)
480    
481  neon  neon
482          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
483          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
484          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
485            - litmus <removed> (embed; #395875)
486          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
487          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
488          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
489          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
490    
491  libmodplug  libmodplug
492          - gst-plugins-bad0.10 <unfixed> (embed)          - gst-plugins-bad0.10 0.10.10.2-1 (embed)
493    
494  libvncserver  libvncserver
495          - vino <unfixed> (embed)          - vino <unfixed> (embed)
# Line 360  libvncserver Line 497  libvncserver
497  putty  putty
498          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
499    
500  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
501          - filezilla <unfixed>          - filezilla <unfixed>
502            - crystalspace <unfixed> (embed)
503            - libwfut <unfixed> (embed)
504            - rarian <unfixed> (embed)
505            - bulletml <unfixed> (embed)
506            - pokerth <unfixed> (embed)
507            - qutecom <unfixed> (embed)
508            - sofa-framework <unfixed> (embed)
509            - yate <unfixed> (embed)
510            - antigrav <unfixed> (embed)
511            - balder2d <unfixed> (embed)
512            - cal3d <unfixed> (embed)
513            - criticalmass <unfixed> (embed)
514            - ember <unfixed> (embed)
515            - epiphany <unfixed> (embed)
516            - gambit <unfixed> (embed)
517            - noiz2sa <unfixed> (embed)
518            - ogre <unfixed> (embed)
519            - opencity <unfixed> (embed)
520            - openmovieeditor <unfixed> (embed)
521            - pouetchess <unfixed> (embed)
522            - tecnoballz <unfixed> (embed)
523            - trigger-rally <unfixed> (embed)
524            - xmoto <unfixed> (embed)
525            - mapnik <unknown> (embed)
526            NOTE: uses a different XML parser by default
527            - rrootage 0.23a-6 <embed>
528            NOTE: links to libbulltetml
529            - boson <unknown> (embed)
530            NOTE: the embedded code is unused
531    
532  gv  gv
533          - evince <unfixed> (embed)          - evince <unfixed> (embed)
534          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
535          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
536    
537  libXbae  libXbae
538          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <unfixed> (embed)
539          NOTE: from Cernlib  
540    libgtkhtml
541            - claws-mail-extra-plugins <unfixed> (fork)
542    
543  libXaw  libXaw
544          [etch] - libpawlib2-lesstif          - paw <unfixed> (embed)
         NOTE: from Cernlib  
545          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
546    
547  libgd2  libgd2
548          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
549          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
550          - wml <unfixed> (embed)          - wml 2.0.11ds2-1 (embed)
551            - libwmf <unfixed> (embed)
552          NOTE: derived from gd 1.6.3          NOTE: derived from gd 1.6.3
553            - texlive-bin 2009-1 (embed)
554    
555  rar  rar
556          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 412  librpcsecgss Line 580  librpcsecgss
580          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
581    
582  jasper  jasper
583          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
584    
585  libiris  libiris
586          - psi <unfixed> (embed)          - psi <unfixed> (embed)
# Line 423  libiris Line 590  libiris
590          NOTE: ksirk/kde4          NOTE: ksirk/kde4
591    
592  libidn  libidn
593          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
594          - psi <unfixed> (embed)          - psi <unfixed> (embed)
595          NOTE: psi embeds libiris which embeds libidn          NOTE: psi embeds libiris which embeds libidn
596          - kdegames <unfixed> (embed)          - kdegames <unfixed> (embed)
597          NOTE: kdegames/kde4 embeds libiris which embeds libidn          NOTE: kdegames/kde4 embeds libiris which embeds libidn
598    
599  liblua  lua5.1
600          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
601            - nmap 5.00-1 (embed; bug #527997)
602            [lenny] - nmap <unfixed> (embed; bug #527997)
603            - ocropus <unfixed> (embed)
604            - enigma <unfixed> (embed)
605            NOTE: requires lua built with C++
606            - freeciv <unfixed> (embed)
607            - spring <unfixed> (embed)
608    
609  libbotan  libbotan
610          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
611    
612  NetXX  NetXX
613          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
614    
615  libgc  libgc
616          - mono <unfixed> (embed)          - mono <unfixed> (embed)
617    
618  lzma  lzma
619          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
620            - xz-utils <unfixed> (fork)
621    
622  lzo  lzo
623          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
624    
625  yassl  yassl
626          - mysql-dfsg-5.0 <unfixed> (embed)          - mysql-dfsg-5.0 <unfixed> (embed)
627            - mysql-5.1 <unfixed> (embed)
628    
629  pax code  pax code
630          - tar <unfixed> (embed)          - tar <unfixed> (embed)
# Line 465  guichan Line 641  guichan
641  tolua  tolua
642          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
643          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
644            NOTE: actually tolua++
645            - ocropus <unfixed> (embed)
646            NOTE: actually tolua++
647            - freeciv <unfixed> (embed)
648            NOTE: actually tolua++
649            - enigma <unfixed> (embed)
650    
651  asio-dev  asio-dev
652          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
653    
654  xine-lib  xine-lib
655          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 496  plib1.8.4c2 Line 676  plib1.8.4c2
676          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
677    
678  fribidi  fribidi
679          - quesoglc <unfixed> (embed)          - quesoglc 0.7.2-2 (embed)
         NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system  
680    
681  glew  glew
682          - quesoglc <unfixed> (embed; bug #489341)          - quesoglc <unfixed> (embed; bug #489341)
683          NOTE: waiting on GLEW_MX version of glew (see bug #474488)          NOTE: waiting on GLEW_MX version of glew (see bug #474488)
684            - trigger 0.5.2.1-2 (embed)
685            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
686            - trigger-rally 0.5.2.1-2 (embed)
687            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
688            - chromium-browser 5.0.375.70~r48679-2
689    
690  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
691          - transcend <unfixed> (embed)          - transcend <unfixed> (embed)
# Line 517  cpio Line 701  cpio
701          - libarchive <unfixed> (embed)          - libarchive <unfixed> (embed)
702          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
703    
704    kde4libs
705            - kdelibs <unfixable> (old-version)
706    
707  webkit  webkit
708          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed; bug #479851)
709            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
710            - kde4libs <unfixable> (fork)
711            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
712            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
713            - chromium-browser <unfixed> (fork)
714    
715  ftgl  ftgl
716          - blender 2.46+dfsg-1 (embed)          - blender 2.46+dfsg-1 (embed)
# Line 527  wv Line 719  wv
719          - abiword <unfixed>          - abiword <unfixed>
720    
721  qemu  qemu
722          - kvm <unfixed> (embed)          - kvm <removed> (embed; bug #543159)
723          - xen-3 <unfixed> (embed)          - qemu-kvm <unfixed> (embed; bug #560853)
724          - xen-unstable <unfixed> (embed)          NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
725            - xen-3 3.4.2-2 (embed; bug #560856)
726            - xen-unstable <unfixed> (embed; bug #560856)
727    
728    vgabios
729            - kvm <removed> (embed; bug #489442)
730            - qemu-kvm <unfixed> (embed)
731    
732  bochs  bochs
733          - kvm <unfixed> (embed; bug #489442)          - kvm <removed> (embed; bug #489442)
734            - qemu-kvm <unfixed> (embed)
735    
736  speex  speex
737          - vorbis-tools <unfixed> (embed)          - vorbis-tools <unfixed> (embed)
# Line 540  speex Line 739  speex
739          - gst-plugins-good0.10 <unfixed> (embed)          - gst-plugins-good0.10 <unfixed> (embed)
740          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
741          - libfishsound <unfixed> (embed)          - libfishsound <unfixed> (embed)
742          - libannodex <unfixed> (embed)          - libannodex <removed> (embed)
743          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
744          - xmms-speex <unfixed> (embed)          - xmms-speex <unfixed> (embed)
745          - libsdl-sound1.2 <unfixed> (embed)          - libsdl-sound1.2 <unfixed> (embed)
746          - sweep <unfixed> (embed)          - sweep <unfixed> (embed)
747    
748  libreadline  libreadline
749          - magic <unfixed> (old-version)          - magic <itp> (old-version)
         NOTE: magic is currently an RFS  
750    
751  opcode  opcode
752          - ode <unfixed> (embed)          - ode <unfixed> (embed)
# Line 564  mochikit Line 762  mochikit
762          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
763          NOTE: they require extra patches, still unmerged upstream          NOTE: they require extra patches, still unmerged upstream
764          - ntop <unfixed> (embed)          - ntop <unfixed> (embed)
765          - python-oherence <unfixed> (embed)          - coherence 0.6.2-1 (embed)
766          - python-paste <unfixed> (embed)          - paste <unfixed> (embed)
767          - python-turbogears <unfixed> (embed)          - turbogears <unfixed> (embed)
768          - zope-plone3 <unfixed> (embed)          - plone3 <removed> (embed)
769            - xulrunner <unfixed> (embed)
770  prototype          - libjifty-plugin-chart-perl <unfixed> (embed)
771          - netbeans-ide <unfixed> (embed)          - sabnzbdplus <unfixed> (embed)
772          - auth2db-frontend <unfixed> (embed)          - tgmochikit <unfixed> (embed)
773          - citadel-webcit <unfixed> (embed)  
774          - asterisk <unfixed> (embed)  prototypejs
775          - doc-iana <unfixed> (embed)          - netbeans-ide 6.0.1+dfsg-2 (embed)
776          - libaws-doc <unfixed> (embed)          - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
777          - libgettext-ruby-data <unfixed> (embed)          - webcit <unfixed> (embed; bug #555219)
778          - libjson-ruby-doc <unfixed> (embed)          - asterisk 1:1.6.2.0~rc3-1 (embed)
779          - liblucene2-java-doc <unfixed> (embed)          - libjson-ruby 1.1.4-1 (embed; bug #555224)
780          - libopenid-ruby <unfixed> (embed)          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
781          - solr-common <unfixed> (embed)          - horde3 <unfixed> (embed)
782          - glpi <unfixed> (embed)          - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
783          - hobbix <unfixed> (embed)          - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
784          - mnemo2 <unfixed> (embed)          - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
785          - nag2 <unfixed> (embed)          - ebug-http <unfixed> (embed; bug #555236)
786          - knowledgeroot <unfixed> (embed)          - libaws 2.7-1 (embed; bug #555222)
         - mediatomb-common <unfixed> (embed)  
         - mt-daapd <unfixed> (embed)  
         - op-panel <unfixed> (embed)  
         - ebug-http <unfixed> (embed)  
787          - phpgedview <removed> (embed)          - phpgedview <removed> (embed)
788          - poker-web <unfixed> (embed)          - poker-network 1.7.6-1 (embed; bug #555238)
789          - python-webhelpers <unfixed> (embed)          - rails 2.1.0-6 (embed)
790          - qwik <unfixed> (embed)          - wordpress 2.5.0-2 (embed; bug #555243)
791          - rails <unfixed> (embed)          - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
792          - typo3-src-4.1 <unfixed> (embed)          TODO: search through all of the other zope packages
         - wordpress <unfixed> (embed)  
         - zope-plone3 <unfixed> (embed)  
         - smokeping <unfixed> (embed)  
793          - ampache 3.4.1-2 (embed)          - ampache 3.4.1-2 (embed)
794          - exaile <unfixed> (embed)          - exaile 0.2.14+debian-2.1 (embed; bug #555245)
795          - hobix <unfixed> (embed)          - hobix 0.5~svn20070319-4 (embed; bug #555247)
796          - pixelpost <unfixed> (embed)          - zabbix 1.6.6-4 (embed; bug #555250)
797          - symfony <unfixed> (embed)          - chora2 <unfixed> (embed; bug #555253)
798          NOTE: it's been said that there are custom changes          - gollem <unfixed> (embed; bug # 555254)
799          - zabbix-frontend-php <unfixed> (embed)          - jscropperui 1.2.1-1 (embed; bug #555257)
800          - turba2 <unfixed> (embed)          - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
801            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
802            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
803            - activeldap 1.2.1-1 (embed)
804            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
805            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
806            - otrs2 2.3.4-6 (embed; bug #555267)
807            - webcalendar 1.2~b1-2 (embed; bug #555269)
808            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
809            - jifty 0.90519-1 (embed; bug #555271)
810            - jquery 1.4-1 (embed; bug #555272)
811            - passenger 2.2.5debian1-1 (embed; bug #555273)
812            - plone3 <removed> (embed; bug #555275)
813            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
814            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
815            - xulrunner <unfixed> (embed)
816            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
817            - jclicmoodle <unfixed> (embed)
818            - git-cola <unfixed> (embed)
819    
820  gdb  gdb
821          - insight <unfixed> (embed)          - insight <unfixed> (embed)
# Line 629  java Line 838  java
838    
839  libphp-snoopy  libphp-snoopy
840          - ampache 3.4.1-2 (embed; bug #504169)          - ampache 3.4.1-2 (embed; bug #504169)
841            - gforge 4.6.99+svn6094-2 (embed)
842          - mahara 1.0.5-2 (embed; bug #504170)          - mahara 1.0.5-2 (embed; bug #504170)
843          - pixelpost <unfixed> (embed; bug #504171)          - pixelpost 1.7.1-5 (embed; bug #504171)
844          - mediamate 0.9.3.6-5 (embed; bug #504172)          - mediamate 0.9.3.6-5 (embed; bug #504172)
845          - opendb <unfixed> (embed; bug #504173)          - opendb <removed> (embed; bug #504173)
846            [etch] - opendb <unfixed> (embed; bug #504173)
847          - wordpress 2.5.1-9 (embed; bug #443948)          - wordpress 2.5.1-9 (embed; bug #443948)
848          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
849          - phpgroupware-felamimail <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
850          NOTE: phpgroupware-felamimail is only in etch          NOTE: phpgroupware-felamimail
851          - magpierss 0.72-3 (embed; bug #431089)          - magpierss 0.72-3 (embed; bug #431089)
852    
853  jquery  jquery
854          - zekr <unfixed> (embed)          - zekr <unfixed> (embed)
855          - wordpress <unfixed> (embed)          - wordpress <unknown> (embed)
856          - yocto-reader <unfixed> (embed)          - yocto-reader <unfixed> (embed)
857          - textpattern <unfixed> (embed)          - textpattern <unfixed> (embed)
858          - genshi 0.5.1-1 (embed)          - genshi 0.5.1-1 (embed)
859          NOTE: compressed file under examples/ dir          NOTE: compressed file under examples/ dir
860          - prewikka <unfixed> (embed)          - prewikka <unfixed> (embed)
861          - libramaze-ruby <unfixed> (embed)          - libramaze-ruby <unfixed> (embed)
862          - drupal5 <unfixed> (embed)          - drupal6 <unfixed> (embed)
863          - b2evolution <unfixed> (embed)          - b2evolution <unfixed> (embed)
864          - wesnoth <unfixed> (embed)          - wesnoth <unfixed> (embed)
865    
# Line 658  tablesorter (jquery plugin, not packaged Line 869  tablesorter (jquery plugin, not packaged
869  kses  kses
870          - wordpress <unfixed> (embed; bug #504242)          - wordpress <unfixed> (embed; bug #504242)
871          NOTE: their copy has all methods renamed to wp_<foo>          NOTE: their copy has all methods renamed to wp_<foo>
872            NOTE: kses isn't in Debian, RFP: #504240
873          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
874          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
875    
# Line 666  magpierss Line 878  magpierss
878          - moodle <unfixed>          - moodle <unfixed>
879    
880  php-gettext  php-gettext
881          - wordpress <unfixed> (embed; bug #504242)          - wordpress 2.8.4-1 (embed; bug #504242)
882            - docbookwiki <unfixed> (embed)
883            - knowledgeroot 0.9.9.5-1
884            NOTE: non-free
885    
886  libphp-ixr (name may change, it is the Incutio XML-RPC)  libphp-ixr (name may change, it is the Incutio XML-RPC)
887          - wordpress <unfixed> (embed; bug #504242)          - wordpress <unfixed> (embed; bug #504242)
888            NOTE: libphp-ixr isn't in Debian, RFP: #504236
889          - dokuwiki <unfixed> (embed)          - dokuwiki <unfixed> (embed)
890          - textpattern <unfixed> (embed)          - textpattern <unfixed> (embed)
891    
892  libphp-cas  libphp-cas
893          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
894          - moodle <unfixed> (embed; bug #496069)          - moodle <unfixed> (embed; bug #505984)
895    
896  scriptaculous  scriptaculous (prototype.js is among the embeds in the following)
897          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
898          - libaws-doc <unfixed> (embed)          - libaws <unfixed> (embed; bug #555222)
899          - op-panel <unfixed> (embed)          - op-panel <unfixed> (embed)
900          - symfony <unfixed> (embed)          - symfony <unfixed> (embed)
901          NOTE: maintainer says there are extra incompatible changes required          NOTE: maintainer says there are extra incompatible changes required
902          - pixelpost <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
903          - python-webhelpers <unfixed> (embed)          - webhelpers <unfixed> (embed)
904          - qwik <unfixed> (embed)          - qwik <removed> (embed; bug #555241)
905          - smokeping <unfixed> (embed)          - smokeping <unfixed> (embed)
906          - turba2 <unfixed> (embed)          - turba2 <unfixed> (embed)
907          - typo3-src 4.2.3-1 (embed)          - typo3-src 4.2.3-1 (embed)
908            - request-tracker3.6 <unfixed> (embed)
909            - request-tracker3.8 <unfixed> (embed)
910            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
911            - wordpress 2.5.0-2 (embed)
912            - libhtml-prototype-perl 1.48-3 (embed)
913    
914  libmarkdown-php  libmarkdown-php
915          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
916          - pixelpost <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
917    
918  php-openid  php-openid
919          - wordpress-openid <itp> (embed)          - wordpress-openid 3.3.2-1 (embed)
920    
921  geshi  geshi
922          - dokuwiki 0.0.20080505-3.1 (embed)          - dokuwiki 0.0.20080505-3.1 (embed)
# Line 703  geshi Line 924  geshi
924          - websvn 2.1.0-1 (embed)          - websvn 2.1.0-1 (embed)
925    
926  webcalendar  webcalendar
927          - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)          - gforge 4.7~rc2-6 (embed; bug #504758)
928    
929  libical  libical
930          - kdepim <unfixed> (fork)          - kdepim <unknown> (fork)
931          - kdepimlibs <unfixed> (fork)          NOTE: fixed at some point during 4.0
932          NOTE: fixed in KDE4 post 4.1.x series          - kdepimlibs 4.2.0-1 (fork)
933            - claws-mail-extra-plugins <unfixed> (fork)
 libltdl3  
         - kdelibs <unfixed> (embed)  
         NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it  
         - synfig <unfixed> (embed)  
934    
935  harfbuzz  harfbuzz
936          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
937            - pango1.0 <unfixed> (embed)
938            - fontmatrix <unfixed> (embed)
939    
940  libzip  libzip
941          - php5 <unfixed> (fork)          - php5 <unfixable> (modified-embed)
942            - odt2txt <unfixed> (embed; bug #523808)
943    
944  json.php (not packaged; should be replaced with php's built-in functions)  json.php (not packaged; should be replaced with php's built-in functions)
945          - moodle <unfixed>          - moodle <unfixed>
946          - yui <unfixed>          - yui <unfixed>
947          - gallery2 <unfixed>          - gallery2 <unfixed>
948          - dokuwiki <unfixed>          - dokuwiki <unfixed>
949          - typo3-src-4.2 <unfixed>          - typo3-src <unfixed>
950    
951  php-fpdf  php-fpdf
952          - tcpdf <itp> (fork)          - tcpdf <itp> (fork)
# Line 761  rssparser (http://nwow.org) Line 981  rssparser (http://nwow.org)
981    
982  lcms  lcms
983          - openjdk-6 <unfixed> (fork)          - openjdk-6 <unfixed> (fork)
984            - gimp 2.4.0~rc2-2
985    
986  libphp-phplayersmenu  libphp-phplayersmenu
987          - diogenes <unfixed>          - diogenes <unfixed>
# Line 773  libphp-pclzip Line 994  libphp-pclzip
994    
995  libphp-simplepie  libphp-simplepie
996          - dokuwiki <unfixed>          - dokuwiki <unfixed>
997            - wordpress <unfixed>
998    
999  libphp-jpgraph  libphp-jpgraph
1000          - egroupware <unfixed>          - egroupware <unfixed>
# Line 781  php-simpletest Line 1003  php-simpletest
1003          - moodle <unfixed>          - moodle <unfixed>
1004    
1005  libpng  libpng
1006          - iceweasel <unfixed> (embed)          - iceweasel <not-affected> (uses xulrunner)
1007          NOTE: 3.0 uses embedded copy, 2.0 uses system libpng          - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
         - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)  
1008          - iceape 1.0.13~pre080614i-0etch1 (embed)          - iceape 1.0.13~pre080614i-0etch1 (embed)
1009            - xulrunner 1.9.0.13-1 (embed)
1010            [lenny] - xulrunner 1.9.0.11-0lenny1
1011            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1012            - gamera 3.2.3-1 (embed)
1013            - freeimage <unfixed> (embed)
1014            - tuxonice-userui <unfixed> (static)
1015    
1016    irssi
1017            - silc-client <unfixed> (embed)
1018            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1019    
1020    extc
1021            - mtasc <unfixed> (embed)
1022            - haxe <unfixed> (embed)
1023    
1024    swflib
1025            - mtasc <unfixed> (embed)
1026            - haxe <unfixed> (embed)
1027    
1028    libitext-java
1029            - bouncycastle 2.1.4-1 (embed)
1030    
1031    python-ply
1032            - pyke <unfixed> (embed; bug #555363)
1033            - pywbem 0.7.0-4 (embed; bug #555364)
1034            - sepolgen <unfixed> (embed; bug #555365)
1035            - zope-textindexng3 <unknown> (embed)
1036            - iceweasel <not-affected> (uses xulrunner)
1037            - xulrunner <unknown> (embed)
1038            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1039    
1040    libdumbnet (libdnet upstream)
1041            - nmap <unfixed> (fork)
1042    
1043    gcc-4.4
1044            - gcc-mingw32 <unfixed> (embed)
1045    
1046    camlimages
1047            - advi <unfixed> (static; bug #550441)
1048    
1049    memcached
1050            - memcachedb <unfixed> (embed)
1051    
1052    yajl
1053            - argyll <unfixed> (embed; bug #544223)
1054            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1055    
1056    nusoap
1057            - gforge 4.8.2-1 (embed)
1058            - ampache <unfixed> (embed)
1059            - poker-network <unfixed> (embed)
1060            - moodle <unfixed> (embed)
1061            NOTE: code is not used when running under php5 and soap is enabled
1062            - phpwiki <unfixed> (embed)
1063            - gallery2 <unfixed> (embed)
1064            - typo3-src <unfixed> (embed)
1065    
1066    libept
1067            - adept <unfixed> (embed; bug #540649)
1068    
1069    libvorbis
1070            - iceweasel <not-affected> (uses xulrunner)
1071            - xulrunner <unfixed> (embed; bug #540959)
1072            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1073            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1074            - iceape <unfixed> (embed)
1075            [etch] - iceape <not-affected> (introduced in 2.0)
1076            [lenny] - iceape <not-affected> (introduced in 2.0)
1077    
1078    cairo
1079            - iceweasel <not-affected> (uses xulrunner)
1080            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1081    
1082    liboggz
1083            - iceweasel <not-affected> (uses xulrunner)
1084            - xulrunner <unfixed> (embed; bug #540959)
1085            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1086            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1087            - iceape <unfixed> (embed)
1088            [etch] - iceape <not-affected> (introduced in 2.0)
1089            [lenny] - iceape <not-affected> (introduced in 2.0)
1090    
1091    liboggplay
1092            - iceweasel <not-affected> (uses xulrunner)
1093            - xulrunner <unfixed> (embed; bug #540959)
1094            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1095            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1096            - iceape <unfixed> (embed)
1097            [etch] - iceape <not-affected> (introduced in 2.0)
1098            [lenny] - iceape <not-affected> (introduced in 2.0)
1099    
1100    php-net-dnsbl
1101            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1102    
1103    php-onyx-rss
1104            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1105    
1106    php-text-wiki
1107            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1108    
1109    php-xml-rpc
1110            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1111    
1112    polarssl (does not have a shared library)
1113            - pdkim <itp> (embed; bug #543150)
1114            - xyssl <unfixed> (old-version)
1115    
1116    pidgin (libpurple)
1117            - gaim <removed> (old-version)
1118            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1119    
1120    icu
1121            - webkit 1.0.1-1 (embed; bug #547214)
1122            - texlive-bin <unfixed> (fork)
1123            NOTE: texlive upstream working with icu upstream to merge their changes
1124            - chromium-browser 5.0.375.29~r46008-3
1125    
1126    cyrus-imapd-2.2
1127            - kolab-cyrus-imapd <unfixed> (fork)
1128            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1129    
1130    python-cxx-dev
1131            - freecad 0.9.2646.3-1 (embed; bug #547936)
1132    
1133    zipios++
1134            - freecad 0.9.2646.3-1 (embed; bug #547941)
1135            - enigma 0.92.3-3 (embed)
1136            NOTE: likely fixed earlier, marking etch's version as fixed
1137    
1138    linux-2.6
1139            - kvm <removed> (embed; bug #549973) [./kernel/*]
1140            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1141            - kernel-source-2.6.8 <removed> (old-version)
1142            - kernel-source-2.4.27 <removed> (old-version)
1143            - kernel-source-2.4.24 <removed> (old-version)
1144            - kernel-source-2.2.25 <removed> (old-version)
1145            - kernel-source-2.2.20 <removed> (old-version)
1146    
1147    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1148            - kvm <removed> (embed) [./libfdt/*]
1149            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1150    
1151    qweb (not packaged)
1152            - ajaxterm <unfixed>
1153    
1154    opensaml2
1155            - opensaml <removed> (old-version)
1156    
1157    shibboleth-sp2
1158            - shibboleth-sp <removed> (old-version)
1159    
1160    tuxonice-userui
1161            - suspend2-userui <removed> (old-version)
1162    
1163    expat
1164            - w3c-libwww <removed> (embed; bug #551941)
1165            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1166            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1167            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1168            - python2.4 <unfixable> (embed; bug #553403)
1169            - python-4suite <unfixed> (embed; bug #516935)
1170            - wxwindows2.4 <removed> (embed)
1171            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1172            - wxwidgets2.8 2.8.10.1-2 (embed)
1173            - celementtree 1.0.5-8 (embed)
1174            NOTE: Maybe that was fixed even earlier
1175            - audacity 1.3.2-1 (embed)
1176            - matanza <unfixed> (embed)
1177            - tdom 0.8.3~20080525-1 (embed)
1178            - udunits 2.1.8-4 (embed)
1179            - apr-util 1.2 (embed)
1180            - ayttm <unfxed> (embed; bug #561006)
1181            - cableswig <unfixed> (embed)
1182            - cadaver <unfixed> (embed)
1183            - cmake 2.6.0-6 (embed)
1184            - coin3 <unfixed> (embed)
1185            - gdcm 2.0.14-2 (embed)
1186            - ghostscript 8.71~dfsg-2 (embed)
1187            - grmonitor <removed> (embed)
1188            - iceape <unfixed> (embed)
1189            - insighttoolkit 3.16.0-1 (embed)
1190            NOTE: insighttoolkit might've been fixed earlier
1191            - libparagui1.1 1.0.2-1 (embed)
1192            - paraview 3.6.2-1 (embed)
1193            - poco 1.3.6p1-1 (embed)
1194            - simgear <unfixed> (embed)
1195            - sitecopy 1:0.16.0-1
1196            - smart <unfixed> (embed)
1197            NOTE: smart embeds celementree, and it includes expat
1198            - swish-e <not-affected> (Linked against libxml, which is used instead)
1199            - tla 1.3.5+dfsg-15 (embed)
1200            - vtk 4.1.20030227-1 (embed)
1201            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1202            - xmlrpc-c <unfixed> (embed)
1203            - iceweasel <unfixed> (embed)
1204            - kompozer <unfixed> (embed)
1205            - vxl 1.13.0-2 (embed)
1206          - xulrunner <unfixed> (embed)          - xulrunner <unfixed> (embed)
1207          NOTE: Debian 1.9.0.6 uses embedded copy          - apache2 2.2 (embed)
1208          NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng          - texlive-bin <not-affected> (Embedded code not compiled in)
1209          - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)          - vnc4 <unfixed> (embed)
1210          NOTE: Ubuntu only          - xotcl 1.6.6-1 (embed)
1211          - firefox-3.0 <unfixed> (embed)          - chromium-browser 5.0.375.29~r46008-3
1212          NOTE: Ubuntu only  
1213          - firefox-3.1 <unfixed> (embed)  xerces-c
1214          NOTE: Ubuntu only          - xerces-c2 <unfixed> (old-version)
1215          - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)          - xerces27 <removed> (old-version)
1216          NOTE: Ubuntu only  
1217          - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)  md5 (RSA's version; not the gnu version provided by coreutils)
1218          NOTE: Ubuntu only          - w3c-libwww <removed> (embed; bug #551942)
1219          - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)          [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1220          NOTE: Ubuntu only  
1221    libparagui1.1
1222            - asc <unfixable> (fork)
1223    
1224    enet
1225            - sauerbraten <unfixed> (embed; #497194)
1226    
1227    eglibc
1228            - glibc <removed> (old-version)
1229            - mksh <unfixable> (static)
1230              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1231    
1232    galib
1233            - gamera 3.2.3-1 (embed)
1234    
1235    configobj
1236            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1237            - elisa <unfixed> (embed; bug #555337)
1238            - gaupol <unfixed> (embed; bug #555338)
1239            - ipython <unfixed> (embed; bug #555339)
1240            - pida <unfixed> (embed; bug #555340)
1241            - psychopy <unfixed> (embed; bug #555341)
1242            - rest2web <unfixed> (embed; bug #555342)
1243            - auth2db <unknown> (embed)
1244            - dynagen <unknown> (embed)
1245            - iceweasel <unknown> (embed)
1246            - sabnzbdplus <unknown> (embed)
1247            - xulrunner <unknown> (embed)
1248            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1249    
1250    python-clientform
1251            - bibus <unfixed> (embed; bug #555332)
1252            - zope2.10 <unfixed> (embed; bug #555333)
1253            - zope2.11 <removed> (embed; bug #555334)
1254            - python-mechanize <unknown> (embed)
1255            - twill <unknown> (embed)
1256    
1257    python-mechanize
1258            - zope2.10 <unfixed> (embed; bug #555337)
1259            - zope2.11 <removed> (embed; bug #555338)
1260            - twill <unknown> (embed; bug #555339)
1261    
1262    pexpect
1263            - duplicity 0.6.06-1 (embed; bug #555361)
1264            - hplip <unfixed> (embed; bug #555362)
1265            - smart <unfixed> (embed; bug #555363)
1266    
1267    pyparsing
1268            - bauble <unfixed> (embed; bug #555366)
1269            - boa-constructor 0.6.1-8 (embed; bug #555367)
1270            - calibre <unfixed> (embed; bug #555368)
1271            - matplotlib <unfixed> (embed; bug #531024)
1272            - zhpy 1.7.3.1-1 (embed; bug #555370)
1273            - polybori <unknown> (embed)
1274            - python-whoosh <unknown> (embed)
1275            - twill <unknown> (embed)
1276            - zope-textindexng3 <unknown> (embed)
1277    
1278    python-pysqlite2
1279            - python2.4 <unfixed> (embed; bug #553403)
1280            - python2.5 <unfixed> (embed; bug #553403)
1281    
1282    celementtree
1283            - python2.5 <unfixed> (embed)
1284            - smart <unfixed> (embed)
1285    
1286    elementtree
1287            - python2.5 <unfixed> (embed)
1288            - python2.6 <unfixed> (embed)
1289            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1290            - gedit 2.28.2-1 (embed; bug #555344)
1291            - smart <unfixed> (embed)
1292            - solfege <unfixed> (embed; bug #555345)
1293            - w3af <unfixed> (embed; bug #555346)
1294            - python-qt4 <unknown> (embed)
1295            - sphinx <unknown> (embed)
1296            - python-nltk <itp> (embed)
1297    
1298    python2.5
1299            - python2.4 <unfixed> (old-version)
1300            - jython <unfixed> (embed)
1301            NOTE: embeds many stdlib modules
1302            - python-django <unfixed> (embed; bug #555419)
1303            NOTE: embeds stdlib modules: doctest, decimal
1304            - gamera 3.2.3-1 (embed)
1305            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1306            - boa-constructor <unfixed> (embed; bug #555426)
1307            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1308            - nicotine <unfixed> (embed; bug #555427)
1309            NOTE: embeds stdlib modules: ConfigParser
1310            - museek+ <unfixed> (embed; bug #555428)
1311            NOTE: embeds stdlib modules: ConfigParser
1312            - vegastrike-data <removed> (embed)
1313            NOTE: embeds many stdlib modules
1314            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1315            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1316            - config-manager <unfixed> (embed; bug #555423)
1317            NOTE: embeds stdlib modules: optparse
1318            - jhbuild 2.28.0-1 (embed; bug #555421)
1319            NOTE: embeds stdlib modules: optparse, subprocess
1320            - smart <unfixed> (embed; bug #555432)
1321            NOTE: embeds stdlib modules: optparse
1322            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1323            NOTE: embeds stdlib modules: doctest
1324            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1325            NOTE: embeds stdlib modules: doctest
1326            - distribute <unfixed> (embed)
1327            NOTE: embeds stdlib modules: doctest
1328            - python-setuptools <unfixed> (embed; bug #555435)
1329            NOTE: embeds stdlib modules: doctest
1330            - zope.testing <unfixed> (embed; bug #555436)
1331            NOTE: embeds stdlib modules: doctest
1332            - translate-toolkit <unfixed> (embed; bug #555422)
1333            NOTE: embeds stdlib modules: textwrap, contextlib
1334            - libtpclient-py <unfixed> (embed; bug #555424)
1335            NOTE: embeds stdlib modules: subprocess
1336            - grass <unfixed> (embed; bug #555425)
1337            NOTE: embeds stdlib modules: subprocess
1338            - coherence <unfixed> (embed; bug #555429)
1339            NOTE: embeds stdlib modules: uuid
1340            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1341            NOTE: embeds stdlib modules: uuid
1342            - setroubleshoot <removed> (embed; bug #555431)
1343            NOTE: embeds stdlib modules: uuid
1344            - linkchecker <unfixed> (embed; bug #555414)
1345            NOTE: embeds msgfmt.py script
1346            - imdbpy <unfixed> (embed)
1347            NOTE: embeds msgfmt.py script
1348            - kiwi <unfixed> (embed)
1349            NOTE: embeds msgfmt.py script
1350            - moin <unfixed> (embed)
1351            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1352            - plone3 <removed> (embed)
1353            NOTE: embeds msgfmt.py script
1354            - roundup <unfixed> (embed)
1355            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1356            - rednotebook <unfixed> (embed; bug #555415)
1357            NOTE: embeds msgfmt.py script
1358            - turbogears <unfixed> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - elisa <unfixed> (embed)
1361            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1362            - calibre <unfixed> (embed)
1363            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1364            - mailman 1:2.1.13-1 (embed; #555416)
1365            NOTE: embeds msgfmt.py script
1366            - python-docutils <unknown> (embed)
1367            NOTE: embeds stdlib modules: optparse, textwrap
1368            - python-imaging <unknown> (embed)
1369            NOTE: embeds stdlib modules: doctest
1370            - python-mechanize <unknown> (embed)
1371            NOTE: embeds stdlib modules: doctest
1372            - twill <unknown> (embed)
1373            NOTE: embeds stdlib modules: subprocess
1374            - zeroc-ice <unknown> (embed)
1375            NOTE: embeds stdlib modules: subprocess
1376            - wxwidgets2.8 <unknown> (embed)
1377            NOTE: embeds stdlib modules: subprocess
1378            - cycle <unknown> (embed)
1379            NOTE: embeds msgfmt.py script
1380            - deluge <unknown> (embed)
1381            NOTE: embeds msgfmt.py script
1382            - opendict <unknown> (embed)
1383            NOTE: embeds msgfmt.py script
1384            - openerp-client <unknown> (embed)
1385            NOTE: embeds msgfmt.py script
1386            - rapidsvn <unknown> (embed)
1387            NOTE: embeds msgfmt.py script
1388            - wammu <unknown> (embed)
1389            NOTE: embeds msgfmt.py script
1390            - gaphor <unknown> (embed)
1391            NOTE: embeds msgfmt.py script
1392            - pida <unknown> (embed)
1393            NOTE: embeds msgfmt.py script
1394            - python-formencode <unknown> (embed)
1395            NOTE: embeds msgfmt.py script
1396            - duplicity <unfixed> (embed)
1397            NOTE: embeds stdlib module: urlparse, tarfile
1398            - pygopherd <unfixed> (embed)
1399            NOTE: embeds stdlib module: zipfile
1400    
1401    argparse
1402            - twill <unfixed> (embed; bug #555347)
1403            - ipython <unfixed> (embed; bug #555348)
1404    
1405    coherence
1406            - elisa <unfixed> (embed; bug #555335)
1407    
1408    simpletal
1409            - plastex <unfixed> (embed; bug #555371)
1410    
1411    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1412            - postr <unfixed> (embed)
1413            - elisa <unfixed> (embed)
1414    
1415    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1416            - apertium-tolk <unfixed> (embed)
1417            - ipython <unfixed> (embed)
1418            - virtaal <unfixed> (embed)
1419    
1420    distribute
1421            - setuptools <removed> (old-version)
1422    
1423    rails
1424            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1425            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1426            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1427            - thin <unfixed> (embed) [./spec/rails_app/*]
1428            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1429            NOTE: be dangerous if developers are naively basing their code off of the examples
1430            NOTE: prototype.js is among the example files
1431    
1432    lucene2 (prototype.js is among the embeds in the following)
1433            - lucene <unfixed> (old-version)
1434            - pylucene <unfixed> (embed)
1435            - libpdfbox-java <unfixed> (embed)
1436            - libfontbox-java <unfixed> (embed)
1437            - libjempbox-java <unfixed> (embed)
1438            - solr <unfixed> (embed)
1439    
1440    unicode-data
1441            - syslinux <unfixed> (embed)
1442            - camomile <unfixed> (embed)
1443            - fribidi <unfixed> (embed)
1444            - m17n-db <unfixed> (embed)
1445            - sbcl <unfixed> (embed)
1446            - heimdal <unfixed> (embed)
1447            - icu <unfixed> (embed)
1448            - icu4j <unfixed> (embed)
1449            - krb5 <unfixed> (embed)
1450            - moodle <unfixed> (embed)
1451            - openldap <unfixed> (embed)
1452            - pike7.6 <unfixed> (embed)
1453            - samba <unfixed> (embed)
1454            - samba4 <unfixed> (embed)
1455            - cmucl <unfixed> (embed)
1456            - typo3-src <unfixed> (embed)
1457            - mauve <unfixed> (embed)
1458            - texlive-bin <unfixed> (embed)
1459            - ypsilon <unfixed> (embed)
1460            - jeuclid <unfixed> (embed)
1461            - charmap.app <unfixed> (embed)
1462            - clisp <unfixed> (embed)
1463            - gnulib <unfixed> (embed)
1464            - opensrs-client <unfixed> (embed)
1465            - saxonb <unfixed> (embed)
1466            - rails <unfixed> (embed)
1467    
1468    feedparser
1469            - rawdog <unfixed> (embed; bug #383422)
1470            - miro <unfixed> (embed; bug #555351)
1471            - calibre <unfixed> (embed; bug #555352)
1472            - freevo <unfixed> (embed; bug #555353)
1473            - pida <unfixed> (embed; bug #555354)
1474            - planet-venus <unfixed> (embed; bug #555355)
1475            - plone3 <removed> (embed; bug #555356)
1476            - exaile 0.2.14+debian-1 (embed)
1477            - screenlets 0.1.2-3 (embed)
1478            NOTE: included twice
1479    
1480    agg:
1481            - matplotlib <unfixed> (embed: bug #377271)
1482            - contextfree <unfixed> (embed)
1483            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1484            - exactimage <unfixed> (embed)
1485            - python-enable <unfixed> (embed)
1486            - mapnik 0.5.1-3 (embed)
1487            NOTE: links statically to agg, but shared library is not available (bug #377271)
1488    
1489    vtk
1490            - paraview <unfixable> (embed; bug #495426)
1491    
1492    txt2tags
1493            - rednotebook <unfixed> (embed)
1494    
1495    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1496            - gajim <unfixed> (embed)
1497            - emesene <unfixed> (embed)
1498            - convirt <unfixed> (embed)
1499            - pida <unfixed> (embed)
1500            - rednotebook <unfixed> (embed)
1501    
1502    horde3 (prototype.js is among the embeds in the following)
1503            - mnemo2 <unfixed> (embed)
1504            - nag2 <unfixed> (embed)
1505            - wordpress <unfixed> (embed)
1506            NOTE: Text_Diff (wp-includes/Text/Diff*)
1507    
1508    cimg
1509            - gmic <unfixed> (embed)
1510    
1511    mootools
1512            - kdenetwork <unfixed> (embed)
1513            - gallery <unfixed> (embed)
1514            - jspwiki <unfixed> (embed)
1515            - vdr-plugin-live <unfixed> (embed)
1516            - perl-doc-html <unfixed> (embed)
1517    
1518    openldap
1519            - openldap2.3 <removed> (old-version)
1520    
1521    grub2
1522            - grub <unfixed> (old-version)
1523    
1524    gnupginterface
1525            - duplicity <unfixed> (embed)
1526    
1527    python-dateutil
1528            - awn-extras-applets <unfixed> (embed)
1529            - matplotlib <unknown> (embed)
1530    
1531    cups
1532            - cupsys <removed> (old-version)
1533    
1534    yui
1535            - bcfg2 <not-affected> (present in source but not included in any binary files)
1536            - serendipity 1.5.3-1 (embed; bug #557746)
1537            - moodle 1.8.2.dfsg-5 (embed)
1538            - jifty 0.91117-1 (embed; bug #557748)
1539            - webgui 7.7.26-1 (embed)
1540            - loggerhead 1.17-1 (embed)
1541    
1542    quake3 (vanilla source not packaged in debian)
1543            - openarena <unfixable> (fork)
1544    
1545    quake2 (vanilla source not packaged in debian)
1546            - alien-arena <unfixable> (fork)
1547            - warsow <unfixable> (fork)
1548    
1549    libtheora
1550            - iceweasel <not-affected> (uses xulrunner)
1551            - xulrunner <unfixed> (embed; bug #540959)
1552            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1553            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1554            - iceape <unfixed> (embed; bug #559276)
1555            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1556            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1557    
1558    dtoa
1559            - bfilter <unfixed> (embed)
1560            - cacao <removed> (embed)
1561            - cdrdao <unfixed> (embed)
1562            - classpath <unfixed> (embed)
1563            - freej <unfixed> (embed)
1564            - iceape <unfixed> (embed)
1565            - iceweasel <unfixed> (embed)
1566            - jscoverage <unfixed> (embed)
1567            - kde4libs <unfixed> (embed)
1568            - kdelibs <unfixed> (embed)
1569            - kompozer <unfixed> (embed)
1570            - libv8 <unfixed> (embed)
1571            - mono <unfixed> (embed)
1572            - newlib <unfixed> (embed)
1573            - nspr <unfixed> (embed)
1574            - php5 <unfixed> (embed)
1575            - polyml <unfixed> (embed)
1576            - qt4-x11 <unfixed> (embed)
1577            - rhino <unfixed> (embed)
1578            NOTE: code translated to Java
1579            - ruby1.8 <unfixed> (embed)
1580            - ruby1.9 <unfixed> (embed)
1581            - ruby1.9.1 <unfixed> (embed)
1582            - sdd <unfixed> (embed)
1583            - sfind <unfixed> (embed)
1584            - star <unfixed> (embed)
1585            - tinymux <unfixed> (embed)
1586            - virtualbox-ose <unfixed> (embed)
1587            - webkit <unfixed> (embed)
1588            - xulrunner <unfixed> (embed)
1589    
1590    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1591            - firegpg <unfixed> (embed)
1592            - enigmail <unfixed> (embed)
1593    
1594    ptmalloc (not packaged in Debian)
1595            - crystalspace <unfixed> (embed)
1596            - qt4-x11 <unfixed> (embed)
1597    
1598    svgalib
1599            - usplash <unfixed> (embed)
1600    
1601    bogl
1602            - usplash <unfixed> (embed)
1603    
1604    taglist
1605            - usplash <unfixed> (embed)
1606    
1607    portaudio
1608            - audacity <unfixed> (embed; bug #323711)
1609    
1610    nyquist
1611            - audacity <unfixed> (embed)
1612            NOTE: embeds a forked nyquist with support for a shared library
1613    
1614    vamp-plugin-sdk
1615            - audacity <unfixed> (embed)
1616    
1617    wordpress
1618            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1619            - wordpress-mu <removed> (fork)
1620    
1621    php5
1622            - php4 <removed> (old-version)
1623    
1624    classpath
1625            - libgnucrypto-java <removed> (embed; bug #559788)
1626    
1627    libtool
1628            - apr <unfixed> (static; bug #489625)
1629            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1630            - arts <unfixed> (embed)
1631            - bochs 2.4.2-1 (embed; bug #560884)
1632            - camserv <unfixed> (embed)
1633            - collectd 4.8.2-1 (embed)
1634            - courier-authlib 0.58-4 (embed)
1635            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1636            - cvsnt 2.5.04.3236-1.2 (embed)
1637            - dico <not-affected> (Uses the system copy of ltdl)
1638            - freeradius 0.1+20010527-1 (embed)
1639            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1640            - ggobi 2.1.9~20091212-1 (embed)
1641            - glame 2.0.1-4 (embed)
1642            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1643            - gnash 0.8.7-2 (embed)
1644            - gnu-smalltalk <unfixed> (embed; bug #566777)
1645            - google-gadgets 0.10.5-0.3 (embed)
1646            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1647            - graphicsmagick 1.3.5-6 (embed)
1648            - graphviz 2.8-3 (embed)
1649            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1650            - guile-1.6 1.6.8-7 (embed)
1651            - hamlib 1.2.11-1 (embed)
1652            - hercules 3.06-1.2 (embed)
1653            - jags 1.0.4-3 (embed; bug #560864)
1654            - kdelibs <unfixed> (embed)
1655            - libannodex <removed> (embed)
1656            - libextractor 0.5.23+dfsg-4 (embed)
1657            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1658            - libtunepimp 0.5.3-7.3 (embed)
1659            - mp4h 1.3.1-4.1 (embed)
1660            - naim <removed> (embed)
1661            - parser-mysql <unfixed> (embed)
1662            - pinball 0.3.1-11 (embed)
1663            - redland <unfixed> (embed)
1664            - siproxd <unfixed> (embed)
1665            - ski <unfixed> (embed)
1666            - synfig 0.62.00-1 (embed)
1667            - unixodbc 2.2.4-5 (embed)
1668            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1669            - clamav 0.95+dfsg-1 (embed)
1670            - imagemagick 6:6.2.3.1-1 (embed)
1671            - hypre 2.4.0b-5 (embed)
1672            - lam <unfixed> (embed)
1673            - openmpi <unfixable> (embed; bug #559386)
1674            - parser <unfixed> (embed)
1675            - pdsh 2.18-5 (embed; bug #560892)
1676            - sbnc 1.2-8 (embed)
1677            - sdcc <unfixed> (embed)
1678            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1679            - proftpd-dfsg <unfixed> (embed; bug #561748)
1680            - babel 1.4.0.dfsg-5 (embed)
1681            - libprelude 0.9.14-2 (embed)
1682            - heartbeat 2.1.4-7 (embed)
1683            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1684            NOTE: might've been fixed earlier
1685            - gcc-* <unknown> (embed)
1686    
1687    ocamlgsl
1688            - orpie 1.5.1-7.1 (embed; bug #550058)
1689    
1690    xdotool
1691            - keynav <unfixed> (embed; bug #560103)
1692    
1693    bulletphysics (not packaged; http://www.bulletphysics.org/)
1694            - supertuxkart <unfixed> (embed)
1695            - blender <unfixed> (embed)
1696    
1697    ghostscript
1698            - gs-gpl <removed> (old-version)
1699    
1700    icedove
1701            - thunderbird <removed> (old-version)
1702    
1703    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1704            - jquery <unfixed> (embed)
1705    
1706    sed
1707            - ssed <unfixed> (fork)
1708    
1709    phpatomlib (http://code.google.com/p/phpatomlib)
1710            - wordpress <unfixed> (embed)
1711    
1712    Services_JSON (http://pear.php.net/package/Services_JSON)
1713            - wordpress <unfixed> (embed)
1714    
1715    phpass (http://www.openwall.com/phpass/)
1716            - gallery2 <unfixed> (embed)
1717            - wordpress <unfixed> (embed)
1718            - typo3-src <unfixed> (modified-embed)
1719            NOTE: file refers to drupal, maybe there's a copy somewhere there
1720            NOTE: a copyright owner search didn't match anything
1721            - libauthen-passphrase-perl <unfixable> (fork)
1722            NOTE: perl implementation of phpass
1723    
1724    squirrelmail
1725            - wordpress <unfixed> (embed)
1726            NOTE: class-pop3.php
1727    
1728    ezSQL (http://www.woyano.com/jv/ezsql)
1729            - wordpress <unfixable> (fork)
1730            NOTE: wp-db.php
1731    
1732    Diff.php (Clay Loveless' version/killersoft.com)
1733            - php-versioncontrol-svn <unfixed>
1734    
1735    libm (provided by libc)
1736            - spring <unfixed> (embed)
1737            NOTE: embedded by embedded copy of streflop
1738            - aide <unfixed> (static)
1739            - busybox <unfixed> (static)
1740            - mindi-busybox <unfixed> (static)
1741            - qemu <unfixed> (static)
1742            NOTE: qemu-user-static
1743            - tuxonice-userui <unfixed> (static)
1744            - zsh <unfixed> (static)
1745            NOTE: zsh-static
1746            - tripwire <unfixed>
1747    
1748    streflop
1749            - spring <unfixed> (embed)
1750    
1751    minizip
1752            - spring <unfixed> (embed)
1753    
1754    oscpack
1755            - spring <unfixed> (embed)
1756    
1757    hpiutil2
1758            - spring <unfixed> (embed)
1759    
1760    p7zip
1761            - spring <unfixed> (embed)
1762    
1763    pythonqt (doesn't seem to be python-qtN, unknown source)
1764            - fontmatrix <unfixed> (embed)
1765            - elmerfem <unfixed> (embed)
1766    
1767    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1768            - docvert <unfixed> (embed)
1769            - jifty <unfixed> (embed)
1770            - kdenetwork <unfixed> (embed)
1771            - mediatomb <unfixed> (embed)
1772            - plastex <unfixed> (embed)
1773            - plone3 <removed> (embed)
1774            - python-chaco <unfixed> (embed)
1775            - python-docutils <unfixed> (embed)
1776            - s5 <unfixed> (embed)
1777            - zope2.10 <unfixed> (embed)
1778            - zope2.11 <removed> (embed)
1779            - cython <not-affcted> (embed)
1780            NOTE: part of documentation, which is not installed into the binary package
1781    
1782    python-docutils
1783            - zope2.10 <unfixed> (embed)
1784            - zope2.11 <removed> (embed)
1785    
1786    tesseract
1787            - ocropus <unfixed> (static)
1788    
1789    antlr
1790            - kdevelop <unfixed> (embed)
1791    
1792    libxerces2
1793            - openjdk-6 <unfixed> (embed)
1794    
1795    kfreebsd-8
1796            - kfreebsd-7 <unfixed> (old-version)
1797            - kfreebsd-6 <removed> (old-version)
1798    
1799    ruby1.9.1
1800            - ruby1.9 <unfixed> (old-version)
1801            - ruby1.8 <unfixed> (old-version)
1802    
1803    maildrop
1804            - courier <unfixed> (embed) [./maildrop]
1805    
1806    glee
1807            - warzone2100 <not-affected> (embed)
1808    
1809    phing
1810            - symfony <unfixed> (embed)
1811    
1812    pake
1813            - symfony <unfixed> (embed)
1814    
1815    propel
1816            - symfony <unfixed> (embed)
1817    
1818    creole
1819            - symfony <unfixed> (embed)
1820    
1821    hfsutils
1822            - cdrkit <unfixed> (embed; bug #570187)
1823            NOTE: embeds hfsutils code in genisoimage
1824    
1825    cdrkit
1826            - grub2 <unfixed> (embed; bug #570156)
1827            NOTE: genisoimage imported into grub-mkisofs
1828    
1829    kdebase-workspace
1830            - kdebase <unfixed> (old-version)
1831    
1832    file
1833            - php5 <unfixable> (modified-embed)
1834            [lenny] - php5 <not-affected>
1835    
1836    cdb
1837            - php5 <unfixed> (embed)
1838    
1839    libmbfl (itp: #570708)
1840            - php5 <unfixed> (embed)
1841            NOTE: PHP is actually the current upstream, ITP is of that code
1842    
1843    libonig
1844            - php5 5.3.2-1 (embed)
1845    
1846    xmlrpc-epi
1847            - php5 <unfixed> (embed)
1848    
1849    swt-gtk
1850            - eclipse <unfixed> (embed; bug #538808)
1851    
1852    txt2html
1853            - wml 2.0.11ds2-1 (embed)
1854    
1855    ca-certificates
1856            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1857    
1858    openexr
1859            - freeimage <unfixed> (embed)
1860    
1861    libmng
1862            - freeimage <unfixed> (embed)
1863    
1864    openjpeg
1865            - freeimage <unfixed> (embed)
1866    
1867    libjpeg6b
1868            - freeimage <unfixed> (embed)
1869    
1870    libjpeg (don't know what exact version)
1871            - dcmtk <unfixed>
1872            - gdcm <unfixed>
1873            - insighttoolkit <unfixed>
1874            - openarena <unfixed> (bug #495966)
1875            - outguess <unfixed>
1876            - squeak-vm <unfixed> (embed)
1877            - tremulous <unfixed>
1878            - tuxonice-userui <unfixed> (static)
1879            - fpc <unfixed> (static)
1880            - lazarus <unfixed> (static)
1881            NOTE: inherited from fpc, see #472304
1882            - mseide-msegui <unfixed> (static)
1883            NOTE: inherited from fpc, see #472304
1884            - easymp3gain <unfixed> (static)
1885            NOTE: inherited from fpc, see #472304
1886            - winff <unfixed> (static)
1887            NOTE: inherited from fpc, see #472304
1888            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1889    
1890    
1891    lxr
1892            - lxr-cvs <unfixed> (embed)
1893    
1894    libfile-copy-recursive-perl
1895            - r-base <unfixed> (embed; bug #577427)
1896            - r-base-core-ra <unfixed> (embed; bug #577429)
1897    
1898    delimmatch
1899            - r-base <unfixed> (embed; bug #577433)
1900            - r-base-core-ra <unfixed> (embed; bug #577434)
1901    
1902    libsmf (ITP: #572558)
1903            - denemo <unfixed> (embed)
1904            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1905    
1906    libselinux
1907            - dpkg 1.15.6 (static)
1908    
1909    xinha (ITP: #479708)
1910            - horde3 <unfixed>
1911            - serendipity <unfixed>
1912            - openacs <unfixed>
1913            - dotlrn <unfixed>
1914    
1915    dvipng
1916            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1917    
1918    dvipdfmx
1919            - texlive-bin <unfixed> (embed)
1920            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1921    
1922    lcdf-typetools
1923            - texlive-bin 2009-1 (embed)
1924    
1925    tex4ht
1926            - texlive-bin 2009-1 (embed)
1927    
1928    freetype
1929            - texlive-bin 2009-1 (embed)
1930    
1931    freetype2
1932            - texlive-bin 2009-1 (embed)
1933    
1934    silgraphite
1935            - texlive-bin <unfixed> (embed)
1936    
1937    unzip
1938            - texlive-bin 2009-1 (embed)
1939    
1940    jbig2dec
1941            - ghostscript 8.71~dfsg2-1 (embed)
1942    
1943    libxml2
1944            - chromium-browser 5.0.375.29~r46008-1
1945    
1946    protobuf
1947            - chromium-browser 5.0.375.70~r48679-2
1948    
1949    libv8
1950            - chromium-browser 5.0.375.38~r46659-1
1951    
1952    nspr
1953            - chromium-browser 5.0.375.29~r46008-3
1954    
1955    yasm
1956            - chromium-browser 5.0.375.29~r46008-2
1957    
1958    libxslt
1959            - chromium-browser 5.0.375.29~r46008-1
1960    
1961    miniupnpc (not packaged in Debian; ITP bug #444392)
1962            - warzone2100 <unfixed> (embed)
1963    
1964    iniparser (not packaged in Debian; RFP bug #582657)
1965            - warzone2100 <unfixed> (modified-embed)
1966    
Legend:
Removed from v.11344  
changed lines
  Added in v.15046
  ViewVC Help
Powered by ViewVC 1.1.5