/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3404 by jmm-guest, Wed Feb 1 09:39:31 2006 UTC revision 15199 by sf, Tue Aug 24 19:56:46 2010 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26  xpdf code: (some use xpdf 2, some xpdf 3)  The srcpkg might be some string to identify the code if there is no
27  gpdf  specific source package.
 pdftohtml  
 kdegraphics/kpdf  
 tetex-bin (the very latest tetex-bin started to use poppler)  
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
 poppler  
 koffice  
 libextractor  
 pdfkit.framework  
   
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
   
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
28    
29  pcre:  Everything up to the next line is ignored.
30  all pythons  ---BEGIN
31  php4 (src included, but Debian package links dynamically)  poppler
32  analog (src included, but Debian package links dynamically)          - pdftohtml <unknown>
33  libgoffice-1          [sarge] - pdftohtml <unfixed>
34  tf5 (since 5.0beta7 the Debian package links dynamically)          [etch] - pdftohtml <unfixed>
35            NOTE: has been replaced by poppler-utils
36  tiff:          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37  wxpythongtk (check, which debian pkg this is in)          - texlive-base 3.0-12 (embed)
38  older kdegraphics/kpdf releases < 3.3 embedded a copy          - texlive-bin 2007-1 (embed)
39            - koffice 1:2.0.0-1 (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41  uudeview:          NOTE: libextractor is using its own pdf decoder now
42  libconvert-uulib-perl          - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44  sqlite: (not affected by security vulnerabilities so far)          - ruby-gnome2 <unknown> (embed)
45  amarok          - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47  util-linux/mount:          - xpdf 3.02-9 (fork)
48  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
49    pdksh (no longer developed since 1999)
50  webmin:          - mksh <unfixable> (fork)
51  usermin          - posh <unfixable> (fork)
52    
53  sylpheed:  ppmd
54  sylpheed-claws          - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56  phpsysinfo:  
57  egroupware  libevent
58  phpgroupware          - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60  phpldapadmin:  
61  egroupware  lrmi
62            - read-edid 2.0.0-1 (embed; bug #495131)
63  chmlib:          - s3switch <unfixed> (embed)
64  kchmviewer (not packaged in Debian)          - xresprobe <unfixed> (embed)
65            - zhcon <unfixed> (embed)
66  libavcodec/libavformat:  
67  ffmpeg  php-htmlpurifier
68  xine-lib          - mahara 1.2.5-1 (embed)
69  xvidcap (currently in NEW)          - knowledgeroot 0.9.9.5-5 (embed)
70  kino (links statically, does not include code)          - moodle <unfixed> (embed)
71  vlc (links statically, does not include code)  
72  smilutils (links statically, does not include code)  peercast
73  motion (links statically, does not include code)          - gnome-peercast <removed> (embed)
74  gst-ffmpeg          [etch] - gnome-peercast <unfixed> (embed)
75  xmovie (currently in NEW)  
76    silc-toolkit
77  mad MPEG decoding lib:          - silc-client 1.1~beta6-1 (embed)
78  mad  
79  xine-lib  icclib
80            - ghostscript <unfixed> (embed)
81            - argyll <unfixed> (embed)
82    
83    libusb
84            - argyll <unfixed> (embed)
85    
86    dietlibc
87            - ccontrol 0.9.1+20071204-1 (static)
88            - mksh <unfixable> (static)
89            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
90    
91    libmikmod
92            - sdl-mixer1.2 <unfixed> (embed)
93            TODO: report bug
94    
95    libiax
96            - iaxmodem <unfixable> (embed; bug #548885)
97    
98    spandsp
99            - iaxmodem <unfixable> (embed; bug #548885)
100    
101    python-paramiko
102            - fabric 0.9.0-2 (embed; bug #561398)
103    
104    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
105            - dpkg 1.15.6 (static)
106            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
107            - rsync <unfixed> (embed)
108            - cherokee <unfixed> (embed)
109            NOTE: somehow derived code base
110            - mono <unfixed> (embed)
111            TODO: check mozilla
112            - Linux kernels <unfixed> (embed)
113            - pvpgn 1.7.8-2 (embed)
114            - mrtg 2.12.2-1 (embed)
115            - rpm <unknown> (embed)
116            NOTE: pinged anibal since when rpm was fixed
117            - tuxcmd-modules <unfixed> (embed)
118            - zsync <unfixed>
119            - tra <unfixed>
120            - sash <unfixed>
121            - nsis <unfixed>
122            - pyfits 1:2.3.1-1
123            - mseide-msegui <unfixed>
124            NOTE: mseide
125            - mirrordir <unfixed>
126            - poco <unfixed>
127            - klibc <unfixed>
128            - emboss <unfixed>
129            - ghostscript <unfixed>
130            - freeimage <unfixed>
131            - clamav <unfixed> (fork)
132            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
133            - tuxonice-userui <unfixed> (static)
134            - plt-scheme <unfixed>
135            - perl <unfixed>
136            - paraview <unfixed>
137            - velvet 0.7.56~nozlibcopy-1
138            - gcvs <unfixed>
139            - dump <unfixed>
140            - aide <unfixed> (static)
141            - dar <unfixed> (static)
142            - avfs <unfixed>
143            - fpc <unfixed>
144            - winff <unfixed>
145            NOTE: inherited from fpc, see #472304
146            - lazarus <unfixed>
147            NOTE: inherited from fpc, see #472304
148            - erlang <unfixed> (embed)
149            - gamera 3.2.3-1 (embed)
150            - python2.4 <unfixed> (embed; bug #553403)
151            - python2.5 <unfixed> (embed; bug #553403)
152            - texlive-bin <unknown> (embed)
153    
154    dulwich
155            - hg-git 0.1.0-1 (embed; bug #541996)
156    
157    libvigraimpex
158            - hugin <unfixed> (embed; bug #542259)
159            - enblend-enfuse <unfixed> (embed; bug #542258)
160            - gamera 3.2.3-1 (embed)
161    
162    libbz2
163            - dpkg 1.15.6 (static)
164            - amd64-libs <unfixed> (static)
165            NOTE: let's call it "static"
166            - dar <unfixed> (static)
167            - dump <unfixed> (static)
168            - unalz 0.64-1 (embed)
169            NOTE: has code, by the maint, to use the system version but links against the internal copy
170    
171    libyahoo2
172            - centerim <unfixed> (embed; bug #559783)
173    
174    libmsn
175            - centerim <unfixed> (embed; bug #559783)
176    
177    libgadu
178            - centerim <unfixed> (embed; bug #559783)
179            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
180            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
181            - kdenetwork 4:3.3.2-5 (embed)
182            NOTE: from kdenetwork: kopete
183            - ekg 1:1.8~rc0-1 (embed)
184            - kadu 0.6.0.2-3 (embed; bug #504430)
185            - gadu <itp> (embed)
186    
187    xmlrpc (which package is the "origin" of this code?)
188            - drupal <unfixed> (embed)
189            - phpgroupware <unfixed> (embed)
190            - egroupware <unfixed> (embed)
191            - phpwiki <unfixed> (embed)
192            - php4 <removed> (embed)
193            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
194    
195    shtool (affects build-time only)
196            - mysql-ocaml <unfixed> (embed)
197            - php4 <removed> (embed)
198            - php5 <unfixed> (embed)
199    
200    xulrunner
201            - iceape <unfixed> (embed; bug #561749)
202            - iceweasel 2.0.0.19 (embed)
203            - icedove <unfixed> (embed; bug #561750)
204            - kompozer <unfixed> (embed; bug #532168)
205            - galeon 2.0.2-4 (embed)
206            - epiphany-browser 2.14.3-8 (embed)
207            - conkeror 0.9~git080629-2 (embed)
208            - kazehakase 0.4.2-1 (embed)
209    
210    xli
211            - xloadimage <unfixed> (embed)
212    
213    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
214            - openmotif <unfixed> (embed)
215    
216    libxpm
217            - lesstif2 <unfixed> (embed; bug #575750)
218    
219    kerberized apps with BSD origin
220            - krb4 <removed> (embed)
221            - krb5 <unfixed> (embed)
222            - heimdal <unfixed> (embed)
223    
224    grip (which pkg is the origin?)
225            - libcdaudio <unfixed>
226            - grip <unfixed>
227            - gnome-vfs <unfixed>
228            TODO: check vfs2 as well
229    
230    fudforum
231            [etch] - phpgroupware <unfixed> (embed)
232            NOTE: phpgroupware-fudforum
233            [sarge] - egroupware-fudforum <removed> (embed)
234    
235    libbsd
236            - rdate 1:1.2-3 (embed)
237            - atheme-services <unfixed>
238            - libbsd-arc4random-perl <not-affected> (modified-embed)
239            NOTE: code not used, it links dynamically against libbsd instead
240            - isakmpd <unfixed>
241            - bsdgames <unfixed> (embed)
242            - bsd-mailx <unfixed> (embed)
243            - netcat-openbsd <unfixed> (embed; bug #550611)
244            - openssh <unfixed> (embed)
245            - unworkable <unfixed> (embed)
246            - mksh <unfixed> (modified-embed)
247            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
248            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
249            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
250    
251    cvs
252            - gcvs <unfixed> (embed)
253            NOTE: see cvsunix/src in tarball
254    
255    pcre3
256            - php4 <removed> (embed)
257            - analog 2:5.23-0woody1 (embed)
258            - goffice <unfixed> (embed)
259            NOTE: libgoffice-*
260            - vfu 4.06-4.1 (embed; bug #450754)
261            - tf5 5.0beta7-1 (embed)
262            - monotone 0.43-1 (embed)
263            NOTE: this only affects versions >= 0.37
264            - glib2.0 2.15.2-1 (embed)
265            - apache2 2.0.53-4 (embed)
266            - exim4 4.10-0.srh20.12 (embed)
267            - yacas <unfixed> (embed)
268            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
269            - gtamsanalyzer.app 0.42-5 (embed)
270            - tin 980117-1 (embed)
271            - kazehakase 0.5.2-1
272            - webkit 1.0.1-1 (embed)
273            - qt4-x11 <unfixed> (embed)
274            NOTE: embedded via webkit copy
275            - erlang <unfixed> (embed)
276            - ssed <unfixed> (embed)
277            - ircd-hybrid <unfixed> (static)
278            - emboss <unfixd>
279            - cherokee <unfixed> (embed)
280            - oftc-hybrid <unfixed> (embed)
281            - ratbox-services <unfixed> (embed)
282            - squeak-vm <unfixed> (embed)
283            - tinymux <unfixed> (embed)
284    
285    tiff
286            - wxwindows2.4 2.2.1 (embed)
287            - gamera 3.2.3-1 (embed)
288            - freeimage <unfixed> (embed)
289            - libtk-img <unfixed> (embed)
290            NOTE: there are two copies, one under tiff/ other under libtiff/
291            - gdal <unfixed>
292    
293    uudeview
294            - libconvert-uulib-perl <unfixed> (embed)
295            - pan <unfixed> (embed)
296    
297    sqlite (not affected by security vulnerabilities so far)
298            - amarok <unfixed> (embed)
299            - monotone 0.43-1 (embed)
300            - iceweasel <unfixed> (embed)
301            - heimdal <unfixed> (embed; bug #559616)
302    
303    util-linux/mount
304            - loop-aes-utils <unfixed> (embed)
305            NOTE: contains code from util-linux' mount in the mount-aes-udeb
306    
307    sylpheed
308            - sylpheed-claws <unfixed> (fork)
309    
310    phpsysinfo
311            - egroupware <unfixed> (embed)
312            - phpgroupware <unfixed> (embed)
313    
314    phpldapadmin
315            [sarge] - egroupware <unfixed> (embed)
316            NOTE: removed from egroupware after sarge
317    
318    chmlib
319            - kchmviewer <unknown> (embed)
320    
321    ffmpeg (libavcodec/libavformat)
322            - mplayer 1.0~rc2-14 (embed; bug #395252)
323            - kino 1.0.0-1
324            - vlc <not-affected> (Links dynamically since initial release)
325            - smilutils 0.3.0-10
326            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
327            - motion 3.1.19-1
328            - gstreamer0.10-ffmpeg 0.10.3-2
329            - xmovie <removed> (static)
330            TODO: gimp-gap (potentially using ffmpeg code as well)
331            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
332            - audacity 1.3.7-2 (embed; bug #512278)
333            - chromium-browser <unfixed> (fork)
334    
335    faad2
336            - mplayer 1.0~rc2-20 (embed)
337            - avifile <unfixed> (embed; bug #538750)
338            - ffmpeg-debian <removed> (embed)
339    
340    libmad (MPEG decoding lib)
341            - xine-lib <unfixed> (embed)
342            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
343            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
344    
 libdts:  
345  libdts  libdts
346  xine-lib          - xine-lib <unfixed> (embed)
347    
 flac:  
348  flac  flac
349  xine-lib          - xine-lib <unfixed> (embed)
350    
351  liba52:  liba52
352  a52dec          - a52dec <unfixed> (embed)
353  xine-lib          - xine-lib <unfixed> (embed)
354    
355    mpeg2dec (libmpeg2)
356            - xine-lib <unfixed> (embed)
357    
358    libmpeg3
359            - squeak-vm <unfixed> (embed)
360    
361    libntlm
362            - wget <unfixed> (fork; bug #550436)
363            - curl <unfixed> (fork; bug #550437)
364            - cntlm <unfixed> (fork; bug #550438)
365    
366    uw-imap
367            - pine <unfixed> (embed)
368            - alpine <unfixed> (embed)
369    
370    imagemagick
371            - graphicsmagick <unfixed> (fork)
372    
373    python-urlgrabber
374            - mercurial <unfixed> (embed; bug #531062)
375            - w3af <unfixed> (embed; bug #555372)
376            [experimental] - harvestman <unfixed> (embed; bug #555373)
377    
378    beautifulsoup
379            - python-mechanize <unfixed> (embed; bug #555349)
380            - zope2.11 <removed> (embed; bug #555350)
381            - twill <unknown> (embed)
382    
383    halibut
384            - nsis <unfixed> (fork)
385    
386    libghttp
387            - hotway <unfixed> (embed)
388    
389    libsndfile
390            - ardour 1:2.7.1-1 (embed)
391    
392    glibmm2.4
393            - ardour 1:2.7.1-1 (embed)
394    
395    libgnomecanvasmm2.6
396            - ardour 1:2.7.1-1 (embed)
397    
398    libsigc++-2.0
399            - ardour 1:2.7.1-1 (embed)
400    
401    soundtouch
402            - ardour 1:2.7.1-1 (embed)
403    
404    libmms
405            - xine-lib <unfixed> (embed)
406            - mimms <unfixed> (embed)
407    
408    fckeditor
409            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
410            - moin 1.8.2-2 (embed; bug #452599)
411            - karrigell <removed> (embed; bug #452598)
412            - gforge 4.6.99+svn6225-1 (embed)
413            - request-tracker3.8 <unfixed> (embed)
414            - otrs2 <unfixed> (embed)
415    
416    ipatlas (not packaged in Debian)
417            - moodle <unfixed> (embed; bug #507185)
418    
419    libphp-phpmailer
420            - moodle <unfixed> (embed; bug #507185)
421            - mahara <unfixed> (embed)
422            - symfony <unfixed> (embed; bug #566778)
423            [etch] - phpgroupware <unfixed> (embed)
424            NOTE: phpgroupware-felamimail is only in etch
425            - egroupware <unfixed> (embed; bug #504283)
426            - glpi <unfixed>
427    
428    htmlArea (not packaged in Debian)
429            - moodle <unfixed> (embed)
430    
431    giflib
432            - wine <unfixed> (embed; bug #466181)
433    
434    bennu (not packaged in Debian, http://bennu.sourceforge.net)
435            - moodle <unfixed> (embed)
436    
437    smarty
438            - moodle 1.8.2-2 (embed; bug #471158)
439            - gallery2 2.2.5-2 (embed; bug #471160)
440            - mahara 0.9.2-2 (embed; bug #471201)
441            - gosa 2.4beta1-1 (embed; bug #471200)
442    
443    TinyMCE
444            - wordpress 2.5.1-3 (embed; bug #478257)
445            - moodle <unfixed> (embed; bug #507185)
446            - knowledgeroot <unfixed> (embed)
447            - joomla <itp> (bug #326398)
448    
449    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
450            - scite <unfixed> (embed)
451            - qscintilla <unfixed> (embed)
452            - qscintilla2 <unfixed> (embed)
453            - geany <unfixed> (fork)
454            - anjuta <unfixed> (embed)
455    
456    libphp-adodb
457            - moodle <unfixed> (embed; bug #507185)
458            NOTE: also AdoDB-XML Schema
459            - gallery2 <unfixed> (embed)
460            - phppgadmin <unfixed> (embed)
461            - egroupware <unfixed> (embed)
462            - phpwiki <unfixed> (embed)
463            - torrentflux 2.0beta1-2 (embed)
464            - ipplan <unfixed> (embed)
465            - typo3-src <unfixed> (embed)
466            - cacti <unknown> (embed)
467            [sarge] - cacti <unfixed> (embed)
468            NOTE: dependency exists, but internal version is used
469            - gforge 4.7~rc2-6 (embed)
470            - mahara <unfixed> (embed)
471    
472    gzip
473            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
474            - klibc <unfixed> (embed)
475            NOTE: based on linux-kernel gzip code
476            - busybox <unfixed> (embed)
477            - pristine-tar <unfixed> (modified-embed)
478            NOTE: compression code only, not uncompression
479            - ncompress <unfixed> (old-version)
480    
481    neon
482            - cadaver 0.22.3+debian-1 (embed; bug #188381)
483            - gnome-vfs2 <unfixed> (embed; bug #395874)
484            [etch] - litmus <unfixed> (embed; #395875)
485            - litmus <removed> (embed; #395875)
486            [sarge] - screem <unfixed> (embed)
487            - sitecopy 1:0.16.0-1 (embed; bug #395876)
488            [etch] - tla <unfixed> (embed; bug #395877)
489            [sarge] - tla <unfixed> (embed; bug #395877)
490    
491    libmodplug
492            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
493    
494    libvncserver
495            - vino <unfixed> (embed)
496    
497    putty
498            - filezilla <unfixed> (embed)
499    
500    tinyxml (not packaged in Debian; itp bug #531968)
501            - filezilla <unfixed>
502            - crystalspace <unfixed> (embed)
503            - libwfut <unfixed> (embed)
504            - rarian <unfixed> (embed)
505            - bulletml <unfixed> (embed)
506            - pokerth <unfixed> (embed)
507            - qutecom <unfixed> (embed)
508            - sofa-framework <unfixed> (embed)
509            - yate <unfixed> (embed)
510            - antigrav <unfixed> (embed)
511            - balder2d <unfixed> (embed)
512            - cal3d <unfixed> (embed)
513            - criticalmass <unfixed> (embed)
514            - ember <unfixed> (embed)
515            - epiphany <unfixed> (embed)
516            - gambit <unfixed> (embed)
517            - noiz2sa <unfixed> (embed)
518            - ogre <unfixed> (embed)
519            - opencity <unfixed> (embed)
520            - openmovieeditor <unfixed> (embed)
521            - pouetchess <unfixed> (embed)
522            - tecnoballz <unfixed> (embed)
523            - trigger-rally <unfixed> (embed)
524            - xmoto <unfixed> (embed)
525            - mapnik <unknown> (embed)
526            NOTE: uses a different XML parser by default
527            - rrootage 0.23a-6 <embed>
528            NOTE: links to libbulltetml
529            - boson <unknown> (embed)
530            NOTE: the embedded code is unused
531    
532    gv
533            - evince <unfixed> (embed)
534            NOTE: ps/ tree from gv 3.5.8
535            NOTE: evince-gtk is affected (a component of evince source package)
536    
537    libXbae
538            - paw <unfixed> (embed)
539    
540    libgtkhtml
541            - claws-mail-extra-plugins <unfixed> (fork)
542    
543    libXaw
544            - paw <unfixed> (embed)
545            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
546    
547    libgd2
548            - graphviz <unfixed> (embed)
549            NOTE: lib/gd seems to be 2.0.33
550            - wml 2.0.11ds2-1 (embed)
551            - libwmf <unfixed> (embed)
552            NOTE: derived from gd 1.6.3
553            - texlive-bin 2009-1 (embed)
554    
555    rar
556            - unrar-nonfree <unfixed> (embed)
557    
558    unrar-free (maybe this code is derived from the original rar, too?)
559            - clamav <unfixed> (embed)
560            NOTE: seems to be disabled in default config
561    
562    mplayer (DirectMedia Object loader)
563            - xine-lib <unfixed> (embed)
564            NOTE: src/libw32dll/
565            - vlc <unfixed> (embed)
566            NOTE: modules/codec/dmo/
567            - mplayer 1.0~rc2-20 (embed)
568    
569    libwpd (WordPerfect converter)
570            - openoffice.org <unfixed> (embed)
571    
572    fsplib (http://sourceforge.net/projects/fsp/)
573            - gftp <unfixed> (embed)
574            NOTE: lib/fsplib version 0.3
575    
576    sprng
577            - tree-puzzle <unfixed> (embed)
578    
579    librpcsecgss
580            - krb5 <unfixed> (embed)
581    
582    jasper
583            - ghostscript 8.64~dfsg-2 (embed)
584    
585    libiris
586            - psi <unfixed> (embed)
587            - kdenetwork <unfixed> (embed)
588            NOTE: kopete embeds libiris but links dynamically to libidn
589            - kdegames <unfixed> (embed)
590            NOTE: ksirk/kde4
591    
592    libidn
593            - monotone 0.43-1 (embed)
594            - psi <unfixed> (embed)
595            NOTE: psi embeds libiris which embeds libidn
596            - kdegames <unfixed> (embed)
597            NOTE: kdegames/kde4 embeds libiris which embeds libidn
598    
599    lua5.1
600            - monotone 0.43-1 (embed)
601            - nmap 5.00-1 (embed; bug #527997)
602            [lenny] - nmap <unfixed> (embed; bug #527997)
603            - ocropus <unfixed> (embed)
604            - enigma <unfixed> (embed)
605            NOTE: requires lua built with C++
606            - freeciv <unfixed> (embed)
607            - spring <unfixed> (embed)
608    
609    libbotan
610            - monotone 0.43-1 (embed)
611    
612    NetXX
613            - monotone 0.43-1 (embed)
614    
615    libgc
616            - mono <unfixed> (embed)
617    
618    lzma
619            - p7zip <unfixed> (embed)
620            - xz-utils <unfixed> (fork)
621    
622    lzo
623            - grub2 <unfixed> (embed)
624    
625    yassl
626            - mysql-dfsg-5.0 <unfixed> (embed)
627            - mysql-5.1 <unfixed> (embed)
628    
629    pax code
630            - tar <unfixed> (embed)
631            - cpio <unfixed> (embed)
632    
633    t1lib
634            - tetex-bin 2.0.2-1 (embed)
635            - texlive-bin <unknown> (embed)
636    
637    guichan
638            - boswars <unfixed> (embed)
639            NOTE: maintainer notified us, working on it
640    
641    tolua
642            - boswars <unfixed> (embed)
643            NOTE: maintainer notified us, working on it
644            NOTE: actually tolua++
645            - ocropus <unfixed> (embed)
646            NOTE: actually tolua++
647            - freeciv <unfixed> (embed)
648            NOTE: actually tolua++
649            - enigma <unfixed> (embed)
650    
651    asio-dev
652            - luxrender <removed> (embed)
653    
 libmpeg2:  
 mpeg2dec  
654  xine-lib  xine-lib
655            - vlc <unfixed> (embed)
656            NOTE: only parts included in modules/access/rtsp
657    
658    netpbm
659            - tcl8.3 <unfixed> (embed)
660            - tcl8.4 <unfixed> (embed)
661            - tcl8.5 <unfixed> (embed)
662            NOTE: generic/tkImgGIF.c
663    
664    tk8.5
665            - tk8.0 <removed> (old-version)
666            - tk8.3 <unfixed> (old-version)
667            - tk8.4 <unfixed> (old-version)
668            - perl-tk <unfixable> (fork)
669    
670    samba
671            - mc 2:4.6.2~git20080311-1 (embed)
672            NOTE: maintainer is aware of this, currently searching a solution
673    
674    plib1.8.4c2
675            - boson <unfixed> (fork)
676            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
677    
678    fribidi
679            - quesoglc 0.7.2-2 (embed)
680    
681    glew
682            - quesoglc <unfixed> (embed; bug #489341)
683            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
684            - trigger 0.5.2.1-2 (embed)
685            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
686            - trigger-rally 0.5.2.1-2 (embed)
687            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
688            - chromium-browser 5.0.375.70~r48679-2
689    
690    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
691            - transcend <unfixed> (embed)
692            - cultivation <unfixed> (embed)
693            - passage <unfixed> (embed)
694            - gravitation <unfixed> (embed)
695    
696    tar
697            - libarchive <unfixed> (embed)
698            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
699    
700    cpio
701            - libarchive <unfixed> (embed)
702            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
703    
704    kde4libs
705            - kdelibs <unfixable> (old-version)
706    
707    webkit
708            - qt4-x11 <unfixed> (embed; bug #479851)
709            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
710            - kde4libs <unfixable> (fork)
711            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
712            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
713            - chromium-browser <unfixed> (fork)
714    
715    ftgl
716            - blender 2.46+dfsg-1 (embed)
717    
718    wv
719            - abiword <unfixed>
720    
721    qemu
722            - kvm <removed> (embed; bug #543159)
723            - qemu-kvm <unfixed> (embed; bug #560853)
724            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
725            - xen-3 3.4.2-2 (embed; bug #560856)
726            - xen-unstable <unfixed> (embed; bug #560856)
727    
728    vgabios
729            - kvm <removed> (embed; bug #489442)
730            - qemu-kvm <unfixed> (embed)
731    
732    bochs
733            - kvm <removed> (embed; bug #489442)
734            - qemu-kvm <unfixed> (embed)
735    
736    speex
737            - vorbis-tools <unfixed> (embed)
738            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
739            - gst-plugins-good0.10 <unfixed> (embed)
740            - xine-lib <unfixed> (embed)
741            - libfishsound <unfixed> (embed)
742            - libannodex <removed> (embed)
743            - vlc <unfixed> (embed)
744            - xmms-speex <unfixed> (embed)
745            - libsdl-sound1.2 <unfixed> (embed)
746            - sweep <unfixed> (embed)
747    
748    libreadline
749            - magic <itp> (old-version)
750    
751    opcode
752            - ode <unfixed> (embed)
753            NOTE: opcode is not a package in debian, it is just embedded
754            NOTE: http://www.codercorner.com/Opcode.htm
755    
756    gimpact
757            - ode <unfixed> (embed)
758            NOTE: gimpact is not a package in debian, it is just embedded
759            NOTE: http://gimpact.sf.net
760    
761    mochikit
762            - mahara <unfixed> (embed)
763            NOTE: they require extra patches, still unmerged upstream
764            - ntop <unfixed> (embed)
765            - coherence 0.6.2-1 (embed)
766            - paste <unfixed> (embed)
767            - turbogears <unfixed> (embed)
768            - plone3 <removed> (embed)
769            - xulrunner <unfixed> (embed)
770            - libjifty-plugin-chart-perl <unfixed> (embed)
771            - sabnzbdplus <unfixed> (embed)
772            - tgmochikit <unfixed> (embed)
773    
774    prototypejs
775            - netbeans-ide 6.0.1+dfsg-2 (embed)
776            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
777            - webcit <unfixed> (embed; bug #555219)
778            - asterisk 1:1.6.2.0~rc3-1 (embed)
779            - libjson-ruby 1.1.4-1 (embed; bug #555224)
780            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
781            - horde3 <unfixed> (embed)
782            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
783            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
784            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
785            - ebug-http <unfixed> (embed; bug #555236)
786            - libaws 2.7-1 (embed; bug #555222)
787            - phpgedview <removed> (embed)
788            - poker-network 1.7.6-1 (embed; bug #555238)
789            - rails 2.1.0-6 (embed)
790            - wordpress 2.5.0-2 (embed; bug #555243)
791            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
792            TODO: search through all of the other zope packages
793            - ampache 3.4.1-2 (embed)
794            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
795            - hobix 0.5~svn20070319-4 (embed; bug #555247)
796            - zabbix 1.6.6-4 (embed; bug #555250)
797            - chora2 2.1.1+debian0-1 (embed; bug #555253)
798            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
799            - jscropperui 1.2.1-1 (embed; bug #555257)
800            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
801            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
802            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
803            - activeldap 1.2.1-1 (embed)
804            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
805            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
806            - otrs2 2.3.4-6 (embed; bug #555267)
807            - webcalendar 1.2~b1-2 (embed; bug #555269)
808            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
809            - jifty 0.90519-1 (embed; bug #555271)
810            - jquery 1.4-1 (embed; bug #555272)
811            - passenger 2.2.5debian1-1 (embed; bug #555273)
812            - plone3 <removed> (embed; bug #555275)
813            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
814            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
815            - xulrunner <unfixed> (embed)
816            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
817            - jclicmoodle <unfixed> (embed)
818            - git-cola <unfixed> (embed)
819    
820    gdb
821            - insight <unfixed> (embed)
822    
823    e2fsprogs
824            - ldiskfsprogs <unfixable> (fork)
825    
826    quazip (not packaged in Debian)
827            - qcake <unfixed> (embed)
828            NOTE: starting with upstream version 0.6.4
829    
830    exo
831            - pcmanfm <unfixed> (embed; bug #499677)
832            NOTE: slightly modified source code
833    
834    java
835            - openjdk-6 <unfixed>
836            - sun-java5 <unfixed>
837            - sun-java6 <unfixed>
838    
839    libphp-snoopy
840            - ampache 3.4.1-2 (embed; bug #504169)
841            - gforge 4.6.99+svn6094-2 (embed)
842            - mahara 1.0.5-2 (embed; bug #504170)
843            - pixelpost 1.7.1-5 (embed; bug #504171)
844            - mediamate 0.9.3.6-5 (embed; bug #504172)
845            - opendb <removed> (embed; bug #504173)
846            [etch] - opendb <unfixed> (embed; bug #504173)
847            - wordpress 2.5.1-9 (embed; bug #443948)
848            - moodle <unfixed> (embed; bug #507185)
849            [etch] - phpgroupware <unfixed> (embed)
850            NOTE: phpgroupware-felamimail
851            - magpierss 0.72-3 (embed; bug #431089)
852    
853    jquery
854            - zekr <unfixed> (embed)
855            - wordpress <unknown> (embed)
856            - yocto-reader <unfixed> (embed)
857            - textpattern <unfixed> (embed)
858            - genshi 0.5.1-1 (embed)
859            NOTE: compressed file under examples/ dir
860            - prewikka <unfixed> (embed)
861            - libramaze-ruby <unfixed> (embed)
862            - drupal6 <unfixed> (embed)
863            - b2evolution <unfixed> (embed)
864            - wesnoth <unfixed> (embed)
865    
866    tablesorter (jquery plugin, not packaged yet)
867            - wesnoth <unfixed> (embed)
868    
869    kses
870            - wordpress <unfixed> (embed; bug #504242)
871            NOTE: their copy has all methods renamed to wp_<foo>
872            NOTE: kses isn't in Debian, RFP: #504240
873            - moodle <unfixed> (embed; bug #507185)
874            - egroupware <unfixed> (embed)
875    
876    magpierss
877            - wordpress <unfixed> (embed; bug #504242)
878            - moodle <unfixed>
879    
880    php-gettext
881            - wordpress 2.8.4-1 (embed; bug #504242)
882            - docbookwiki <unfixed> (embed)
883            - knowledgeroot 0.9.9.5-1
884            NOTE: non-free
885    
886    libphp-ixr (name may change, it is the Incutio XML-RPC)
887            - wordpress <unfixed> (embed; bug #504242)
888            NOTE: libphp-ixr isn't in Debian, RFP: #504236
889            - dokuwiki <unfixed> (embed)
890            - textpattern <unfixed> (embed)
891    
892    libphp-cas
893            - glpi <unfixed> (embed)
894            - moodle <unfixed> (embed; bug #505984)
895    
896    scriptaculous (prototype.js is among the embeds in the following)
897            - glpi <unfixed> (embed)
898            - libaws <unfixed> (embed; bug #555222)
899            - op-panel <unfixed> (embed)
900            - symfony <unfixed> (embed)
901            NOTE: maintainer says there are extra incompatible changes required
902            - pixelpost 1.7.1-6 (embed)
903            - webhelpers <unfixed> (embed)
904            - qwik <removed> (embed; bug #555241)
905            - smokeping <unfixed> (embed)
906            - turba2 <unfixed> (embed)
907            - typo3-src 4.2.3-1 (embed)
908            - request-tracker3.6 <unfixed> (embed)
909            - request-tracker3.8 <unfixed> (embed)
910            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
911            - wordpress 2.5.0-2 (embed)
912            - libhtml-prototype-perl 1.48-3 (embed)
913    
914    libmarkdown-php
915            - moodle <unfixed> (embed; bug #507185)
916            - pixelpost 1.7.1-6 (embed)
917    
918    php-openid
919            - wordpress-openid 3.3.2-1 (embed)
920    
921    geshi
922            - dokuwiki 0.0.20080505-3.1 (embed)
923            - pgfouine 1.0-1.1 (embed)
924            - websvn 2.1.0-1 (embed)
925    
926    webcalendar
927            - gforge 4.7~rc2-6 (embed; bug #504758)
928    
929    libical
930            - kdepim <unknown> (fork)
931            NOTE: fixed at some point during 4.0
932            - kdepimlibs 4.2.0-1 (fork)
933            - claws-mail-extra-plugins <unfixed> (fork)
934    
935    harfbuzz
936            - qt4-x11 <unfixed> (embed)
937            - pango1.0 <unfixed> (embed)
938            - fontmatrix <unfixed> (embed)
939    
940    libzip
941            - php5 <unfixable> (modified-embed)
942            - odt2txt <unfixed> (embed; bug #523808)
943    
944    json.php (not packaged; should be replaced with php's built-in functions)
945            - moodle <unfixed>
946            - yui <unfixed>
947            - gallery2 <unfixed>
948            - dokuwiki <unfixed>
949            - typo3-src <unfixed>
950    
951    php-fpdf
952            - tcpdf <itp> (fork)
953            - moodle <unfixed>
954            - phpwiki <unfixed>
955            - egroupware <unfixed>
956            - ldap-account-manager <unfixed> (fork)
957    
958    tcpdf (itp: #495985)
959            - moodle <unfixed>
960            - phpmyadmin <unfixed>
961    
962    typo3
963            - moodle <unfixed>
964    
965    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
966            - moodle <unfixed>
967            - gosa <unfixed>
968    
969    php-ole (itp: #487558)
970            - moodle <unfixed>
971    
972    pieforms (http://www.catalyst.net.nz)
973            - mahara <unfixed>
974    
975    savant2 (http://phpsavant.com)
976            - egroupware <unfixed>
977    
978    rssparser (http://nwow.org)
979            - egroupware <unfixed>
980            - phpgroupware <unfixed>
981    
982    lcms
983            - openjdk-6 <unfixed> (fork)
984            - gimp 2.4.0~rc2-2
985    
986    libphp-phplayersmenu
987            - diogenes <unfixed>
988            - phpldapadmin <unfixed>
989    
990    libphp-pclzip
991            - docvert <unfixed>
992            - moodle <unfixed>
993            - egroupware <unfixed>
994    
995    libphp-simplepie
996            - dokuwiki <unfixed>
997            - wordpress <unfixed>
998    
999    libphp-jpgraph
1000            - egroupware <unfixed>
1001    
1002    php-simpletest
1003            - moodle <unfixed>
1004    
1005    libpng
1006            - iceweasel <not-affected> (uses xulrunner)
1007            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1008            - iceape 1.0.13~pre080614i-0etch1 (embed)
1009            - xulrunner 1.9.0.13-1 (embed)
1010            [lenny] - xulrunner 1.9.0.11-0lenny1
1011            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1012            - gamera 3.2.3-1 (embed)
1013            - freeimage <unfixed> (embed)
1014            - tuxonice-userui <unfixed> (static)
1015    
1016    irssi
1017            - silc-client <unfixed> (embed)
1018            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1019    
1020    extc
1021            - mtasc <unfixed> (embed)
1022            - haxe <unfixed> (embed)
1023    
1024    swflib
1025            - mtasc <unfixed> (embed)
1026            - haxe <unfixed> (embed)
1027    
1028    libitext-java
1029            - bouncycastle 2.1.4-1 (embed)
1030    
1031    python-ply
1032            - pyke <unfixed> (embed; bug #555363)
1033            - pywbem 0.7.0-4 (embed; bug #555364)
1034            - sepolgen <unfixed> (embed; bug #555365)
1035            - zope-textindexng3 <unknown> (embed)
1036            - iceweasel <not-affected> (uses xulrunner)
1037            - xulrunner <unknown> (embed)
1038            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1039    
1040    libdumbnet (libdnet upstream)
1041            - nmap <unfixed> (fork)
1042    
1043    gcc-4.4
1044            - gcc-mingw32 <unfixed> (embed)
1045    
1046    camlimages
1047            - advi <unfixed> (static; bug #550441)
1048    
1049    memcached
1050            - memcachedb <unfixed> (embed)
1051    
1052    yajl
1053            - argyll <unfixed> (embed; bug #544223)
1054            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1055    
1056    nusoap
1057            - gforge 4.8.2-1 (embed)
1058            - ampache <unfixed> (embed)
1059            - poker-network <unfixed> (embed)
1060            - moodle <unfixed> (embed)
1061            NOTE: code is not used when running under php5 and soap is enabled
1062            - phpwiki <unfixed> (embed)
1063            - gallery2 <unfixed> (embed)
1064            - typo3-src <unfixed> (embed)
1065    
1066    libept
1067            - adept <unfixed> (embed; bug #540649)
1068    
1069    libvorbis
1070            - iceweasel <not-affected> (uses xulrunner)
1071            - xulrunner <unfixed> (embed; bug #540959)
1072            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1073            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1074            - iceape <unfixed> (embed)
1075            [etch] - iceape <not-affected> (introduced in 2.0)
1076            [lenny] - iceape <not-affected> (introduced in 2.0)
1077    
1078    cairo
1079            - iceweasel <not-affected> (uses xulrunner)
1080            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1081    
1082    liboggz
1083            - iceweasel <not-affected> (uses xulrunner)
1084            - xulrunner <unfixed> (embed; bug #540959)
1085            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1086            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1087            - iceape <unfixed> (embed)
1088            [etch] - iceape <not-affected> (introduced in 2.0)
1089            [lenny] - iceape <not-affected> (introduced in 2.0)
1090    
1091    liboggplay
1092            - iceweasel <not-affected> (uses xulrunner)
1093            - xulrunner <unfixed> (embed; bug #540959)
1094            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1095            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1096            - iceape <unfixed> (embed)
1097            [etch] - iceape <not-affected> (introduced in 2.0)
1098            [lenny] - iceape <not-affected> (introduced in 2.0)
1099    
1100    php-net-dnsbl
1101            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1102    
1103    php-onyx-rss
1104            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1105    
1106    php-text-wiki
1107            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1108    
1109    php-xml-rpc
1110            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1111    
1112    polarssl (does not have a shared library)
1113            - pdkim <itp> (embed; bug #543150)
1114            - xyssl <unfixed> (old-version)
1115    
1116    pidgin (libpurple)
1117            - gaim <removed> (old-version)
1118            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1119    
1120    icu
1121            - webkit 1.0.1-1 (embed; bug #547214)
1122            - texlive-bin <unfixed> (fork)
1123            NOTE: texlive upstream working with icu upstream to merge their changes
1124            - chromium-browser 5.0.375.29~r46008-3
1125    
1126    cyrus-imapd-2.2
1127            - kolab-cyrus-imapd <unfixed> (fork)
1128            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1129    
1130    python-cxx-dev
1131            - freecad 0.9.2646.3-1 (embed; bug #547936)
1132    
1133    zipios++
1134            - freecad 0.9.2646.3-1 (embed; bug #547941)
1135            - enigma 0.92.3-3 (embed)
1136            NOTE: likely fixed earlier, marking etch's version as fixed
1137    
1138    linux-2.6
1139            - kvm <removed> (embed; bug #549973) [./kernel/*]
1140            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1141            - kernel-source-2.6.8 <removed> (old-version)
1142            - kernel-source-2.4.27 <removed> (old-version)
1143            - kernel-source-2.4.24 <removed> (old-version)
1144            - kernel-source-2.2.25 <removed> (old-version)
1145            - kernel-source-2.2.20 <removed> (old-version)
1146    
1147    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1148            - kvm <removed> (embed) [./libfdt/*]
1149            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1150    
1151    qweb (not packaged)
1152            - ajaxterm <unfixed>
1153    
1154    opensaml2
1155            - opensaml <removed> (old-version)
1156    
1157    shibboleth-sp2
1158            - shibboleth-sp <removed> (old-version)
1159    
1160    tuxonice-userui
1161            - suspend2-userui <removed> (old-version)
1162    
1163    expat
1164            - w3c-libwww <removed> (embed; bug #551941)
1165            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1166            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1167            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1168            - python2.4 <unfixable> (embed; bug #553403)
1169            - python-4suite <unfixed> (embed; bug #516935)
1170            - wxwindows2.4 <removed> (embed)
1171            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1172            - wxwidgets2.8 2.8.10.1-2 (embed)
1173            - celementtree 1.0.5-8 (embed)
1174            NOTE: Maybe that was fixed even earlier
1175            - audacity 1.3.2-1 (embed)
1176            - matanza <unfixed> (embed)
1177            - tdom 0.8.3~20080525-1 (embed)
1178            - udunits 2.1.8-4 (embed)
1179            - apr-util 1.2 (embed)
1180            - ayttm <unfxed> (embed; bug #561006)
1181            - cableswig <unfixed> (embed)
1182            - cadaver <unfixed> (embed)
1183            - cmake 2.6.0-6 (embed)
1184            - coin3 <unfixed> (embed)
1185            - gdcm 2.0.14-2 (embed)
1186            - ghostscript 8.71~dfsg-2 (embed)
1187            - grmonitor <removed> (embed)
1188            - iceape <unfixed> (embed)
1189            - insighttoolkit 3.16.0-1 (embed)
1190            NOTE: insighttoolkit might've been fixed earlier
1191            - libparagui1.1 1.0.2-1 (embed)
1192            - paraview 3.6.2-1 (embed)
1193            - poco 1.3.6p1-1 (embed)
1194            - simgear <unfixed> (embed)
1195            - sitecopy 1:0.16.0-1
1196            - smart <unfixed> (embed)
1197            NOTE: smart embeds celementree, and it includes expat
1198            - swish-e <not-affected> (Linked against libxml, which is used instead)
1199            - tla 1.3.5+dfsg-15 (embed)
1200            - vtk 4.1.20030227-1 (embed)
1201            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1202            - xmlrpc-c <unfixed> (embed)
1203            - iceweasel <unfixed> (embed)
1204            - kompozer <unfixed> (embed)
1205            - vxl 1.13.0-2 (embed)
1206            - xulrunner <unfixed> (embed)
1207            - apache2 2.2 (embed)
1208            - texlive-bin <not-affected> (Embedded code not compiled in)
1209            - vnc4 <unfixed> (embed)
1210            - xotcl 1.6.6-1 (embed)
1211            - chromium-browser 5.0.375.29~r46008-3
1212    
1213    xerces-c
1214            - xerces-c2 <unfixed> (old-version)
1215            - xerces27 <removed> (old-version)
1216    
1217    md5 (RSA's version; not the gnu version provided by coreutils)
1218            - w3c-libwww <removed> (embed; bug #551942)
1219            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1220    
1221    libparagui1.1
1222            - asc <unfixable> (fork)
1223    
1224    enet
1225            - sauerbraten <unfixed> (embed; #497194)
1226    
1227    eglibc
1228            - glibc <removed> (old-version)
1229            - mksh <unfixable> (static)
1230              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1231    
1232    galib
1233            - gamera 3.2.3-1 (embed)
1234    
1235    configobj
1236            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1237            - elisa <unfixed> (embed; bug #555337)
1238            - gaupol <unfixed> (embed; bug #555338)
1239            - ipython <unfixed> (embed; bug #555339)
1240            - pida <unfixed> (embed; bug #555340)
1241            - psychopy <unfixed> (embed; bug #555341)
1242            - rest2web <unfixed> (embed; bug #555342)
1243            - auth2db <unknown> (embed)
1244            - dynagen <unknown> (embed)
1245            - iceweasel <unknown> (embed)
1246            - sabnzbdplus <unknown> (embed)
1247            - xulrunner <unknown> (embed)
1248            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1249    
1250    python-clientform
1251            - bibus <unfixed> (embed; bug #555332)
1252            - zope2.10 <unfixed> (embed; bug #555333)
1253            - zope2.11 <removed> (embed; bug #555334)
1254            - python-mechanize <unknown> (embed)
1255            - twill <unknown> (embed)
1256    
1257    python-mechanize
1258            - zope2.10 <unfixed> (embed; bug #555337)
1259            - zope2.11 <removed> (embed; bug #555338)
1260            - twill <unknown> (embed; bug #555339)
1261    
1262    pexpect
1263            - duplicity 0.6.06-1 (embed; bug #555361)
1264            - hplip <unfixed> (embed; bug #555362)
1265            - smart <unfixed> (embed; bug #555363)
1266    
1267    pyparsing
1268            - bauble <unfixed> (embed; bug #555366)
1269            - boa-constructor 0.6.1-8 (embed; bug #555367)
1270            - calibre <unfixed> (embed; bug #555368)
1271            - matplotlib <unfixed> (embed; bug #531024)
1272            - zhpy 1.7.3.1-1 (embed; bug #555370)
1273            - polybori <unknown> (embed)
1274            - python-whoosh <unknown> (embed)
1275            - twill <unknown> (embed)
1276            - zope-textindexng3 <unknown> (embed)
1277    
1278    python-pysqlite2
1279            - python2.4 <unfixed> (embed; bug #553403)
1280            - python2.5 <unfixed> (embed; bug #553403)
1281    
1282    celementtree
1283            - python2.5 <unfixed> (embed)
1284            - smart <unfixed> (embed)
1285    
1286    elementtree
1287            - python2.5 <unfixed> (embed)
1288            - python2.6 <unfixed> (embed)
1289            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1290            - gedit 2.28.2-1 (embed; bug #555344)
1291            - smart <unfixed> (embed)
1292            - solfege <unfixed> (embed; bug #555345)
1293            - w3af <unfixed> (embed; bug #555346)
1294            - python-qt4 <unknown> (embed)
1295            - sphinx <unknown> (embed)
1296            - python-nltk <itp> (embed)
1297    
1298    python2.5
1299            - python2.4 <unfixed> (old-version)
1300            - jython <unfixed> (embed)
1301            NOTE: embeds many stdlib modules
1302            - python-django <unfixed> (embed; bug #555419)
1303            NOTE: embeds stdlib modules: doctest, decimal
1304            - gamera 3.2.3-1 (embed)
1305            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1306            - boa-constructor <unfixed> (embed; bug #555426)
1307            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1308            - nicotine <unfixed> (embed; bug #555427)
1309            NOTE: embeds stdlib modules: ConfigParser
1310            - museek+ <unfixed> (embed; bug #555428)
1311            NOTE: embeds stdlib modules: ConfigParser
1312            - vegastrike-data <removed> (embed)
1313            NOTE: embeds many stdlib modules
1314            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1315            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1316            - config-manager <unfixed> (embed; bug #555423)
1317            NOTE: embeds stdlib modules: optparse
1318            - jhbuild 2.28.0-1 (embed; bug #555421)
1319            NOTE: embeds stdlib modules: optparse, subprocess
1320            - smart <unfixed> (embed; bug #555432)
1321            NOTE: embeds stdlib modules: optparse
1322            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1323            NOTE: embeds stdlib modules: doctest
1324            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1325            NOTE: embeds stdlib modules: doctest
1326            - distribute <unfixed> (embed)
1327            NOTE: embeds stdlib modules: doctest
1328            - python-setuptools <unfixed> (embed; bug #555435)
1329            NOTE: embeds stdlib modules: doctest
1330            - zope.testing <unfixed> (embed; bug #555436)
1331            NOTE: embeds stdlib modules: doctest
1332            - translate-toolkit <unfixed> (embed; bug #555422)
1333            NOTE: embeds stdlib modules: textwrap, contextlib
1334            - libtpclient-py <unfixed> (embed; bug #555424)
1335            NOTE: embeds stdlib modules: subprocess
1336            - grass <unfixed> (embed; bug #555425)
1337            NOTE: embeds stdlib modules: subprocess
1338            - coherence <unfixed> (embed; bug #555429)
1339            NOTE: embeds stdlib modules: uuid
1340            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1341            NOTE: embeds stdlib modules: uuid
1342            - setroubleshoot <removed> (embed; bug #555431)
1343            NOTE: embeds stdlib modules: uuid
1344            - linkchecker <unfixed> (embed; bug #555414)
1345            NOTE: embeds msgfmt.py script
1346            - imdbpy <unfixed> (embed)
1347            NOTE: embeds msgfmt.py script
1348            - kiwi <unfixed> (embed)
1349            NOTE: embeds msgfmt.py script
1350            - moin <unfixed> (embed)
1351            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1352            - plone3 <removed> (embed)
1353            NOTE: embeds msgfmt.py script
1354            - roundup <unfixed> (embed)
1355            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1356            - rednotebook <unfixed> (embed; bug #555415)
1357            NOTE: embeds msgfmt.py script
1358            - turbogears <unfixed> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - elisa <unfixed> (embed)
1361            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1362            - calibre <unfixed> (embed)
1363            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1364            - mailman 1:2.1.13-1 (embed; #555416)
1365            NOTE: embeds msgfmt.py script
1366            - python-docutils <unknown> (embed)
1367            NOTE: embeds stdlib modules: optparse, textwrap
1368            - python-imaging <unknown> (embed)
1369            NOTE: embeds stdlib modules: doctest
1370            - python-mechanize <unknown> (embed)
1371            NOTE: embeds stdlib modules: doctest
1372            - twill <unknown> (embed)
1373            NOTE: embeds stdlib modules: subprocess
1374            - zeroc-ice <unknown> (embed)
1375            NOTE: embeds stdlib modules: subprocess
1376            - wxwidgets2.8 <unknown> (embed)
1377            NOTE: embeds stdlib modules: subprocess
1378            - cycle <unknown> (embed)
1379            NOTE: embeds msgfmt.py script
1380            - deluge <unknown> (embed)
1381            NOTE: embeds msgfmt.py script
1382            - opendict <unknown> (embed)
1383            NOTE: embeds msgfmt.py script
1384            - openerp-client <unknown> (embed)
1385            NOTE: embeds msgfmt.py script
1386            - rapidsvn <unknown> (embed)
1387            NOTE: embeds msgfmt.py script
1388            - wammu <unknown> (embed)
1389            NOTE: embeds msgfmt.py script
1390            - gaphor <unknown> (embed)
1391            NOTE: embeds msgfmt.py script
1392            - pida <unknown> (embed)
1393            NOTE: embeds msgfmt.py script
1394            - python-formencode <unknown> (embed)
1395            NOTE: embeds msgfmt.py script
1396            - duplicity <unfixed> (embed)
1397            NOTE: embeds stdlib module: urlparse, tarfile
1398            - pygopherd <unfixed> (embed)
1399            NOTE: embeds stdlib module: zipfile
1400    
1401    argparse
1402            - twill <unfixed> (embed; bug #555347)
1403            - ipython <unfixed> (embed; bug #555348)
1404    
1405    coherence
1406            - elisa <unfixed> (embed; bug #555335)
1407    
1408    simpletal
1409            - plastex <unfixed> (embed; bug #555371)
1410    
1411    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1412            - postr <unfixed> (embed)
1413            - elisa <unfixed> (embed)
1414    
1415    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1416            - apertium-tolk <unfixed> (embed)
1417            - ipython <unfixed> (embed)
1418            - virtaal <unfixed> (embed)
1419    
1420    distribute
1421            - setuptools <removed> (old-version)
1422    
1423    rails
1424            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1425            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1426            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1427            - thin <unfixed> (embed) [./spec/rails_app/*]
1428            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1429            NOTE: be dangerous if developers are naively basing their code off of the examples
1430            NOTE: prototype.js is among the example files
1431    
1432    lucene2 (prototype.js is among the embeds in the following)
1433            - lucene <unfixed> (old-version)
1434            - pylucene <unfixed> (embed)
1435            - libpdfbox-java <unfixed> (embed)
1436            - libfontbox-java <unfixed> (embed)
1437            - libjempbox-java <unfixed> (embed)
1438            - solr <unfixed> (embed)
1439    
1440    unicode-data
1441            - syslinux <unfixed> (embed)
1442            - camomile <unfixed> (embed)
1443            - fribidi <unfixed> (embed)
1444            - m17n-db <unfixed> (embed)
1445            - sbcl <unfixed> (embed)
1446            - heimdal <unfixed> (embed)
1447            - icu <unfixed> (embed)
1448            - icu4j <unfixed> (embed)
1449            - krb5 <unfixed> (embed)
1450            - moodle <unfixed> (embed)
1451            - openldap <unfixed> (embed)
1452            - pike7.6 <unfixed> (embed)
1453            - samba <unfixed> (embed)
1454            - samba4 <unfixed> (embed)
1455            - cmucl <unfixed> (embed)
1456            - typo3-src <unfixed> (embed)
1457            - mauve <unfixed> (embed)
1458            - texlive-bin <unfixed> (embed)
1459            - ypsilon <unfixed> (embed)
1460            - jeuclid <unfixed> (embed)
1461            - charmap.app <unfixed> (embed)
1462            - clisp <unfixed> (embed)
1463            - gnulib <unfixed> (embed)
1464            - opensrs-client <unfixed> (embed)
1465            - saxonb <unfixed> (embed)
1466            - rails <unfixed> (embed)
1467    
1468    feedparser
1469            - rawdog <unfixed> (embed; bug #383422)
1470            - miro <unfixed> (embed; bug #555351)
1471            - calibre <unfixed> (embed; bug #555352)
1472            - freevo <unfixed> (embed; bug #555353)
1473            - pida <unfixed> (embed; bug #555354)
1474            - planet-venus <unfixed> (embed; bug #555355)
1475            - plone3 <removed> (embed; bug #555356)
1476            - exaile 0.2.14+debian-1 (embed)
1477            - screenlets 0.1.2-3 (embed)
1478            NOTE: included twice
1479    
1480    agg:
1481            - matplotlib <unfixed> (embed: bug #377271)
1482            - contextfree <unfixed> (embed)
1483            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1484            - exactimage <unfixed> (embed)
1485            - python-enable <unfixed> (embed)
1486            - mapnik 0.5.1-3 (embed)
1487            NOTE: links statically to agg, but shared library is not available (bug #377271)
1488    
1489    vtk
1490            - paraview <unfixable> (embed; bug #495426)
1491    
1492    txt2tags
1493            - rednotebook <unfixed> (embed)
1494    
1495    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1496            - gajim <unfixed> (embed)
1497            - emesene <unfixed> (embed)
1498            - convirt <unfixed> (embed)
1499            - pida <unfixed> (embed)
1500            - rednotebook <unfixed> (embed)
1501    
1502    horde3 (prototype.js is among the embeds in the following)
1503            - mnemo2 <unfixed> (embed)
1504            - nag2 <unfixed> (embed)
1505            - wordpress <unfixed> (embed)
1506            NOTE: Text_Diff (wp-includes/Text/Diff*)
1507    
1508    cimg
1509            - gmic <unfixed> (embed)
1510    
1511    mootools
1512            - kdenetwork <unfixed> (embed)
1513            - gallery <unfixed> (embed)
1514            - jspwiki <unfixed> (embed)
1515            - vdr-plugin-live <unfixed> (embed)
1516            - perl-doc-html <unfixed> (embed)
1517    
1518    openldap
1519            - openldap2.3 <removed> (old-version)
1520    
1521    grub2
1522            - grub <unfixed> (old-version)
1523    
1524    gnupginterface
1525            - duplicity <unfixed> (embed)
1526    
1527    python-dateutil
1528            - awn-extras-applets <unfixed> (embed)
1529            - matplotlib <unknown> (embed)
1530    
1531    cups
1532            - cupsys <removed> (old-version)
1533    
1534    yui
1535            - bcfg2 <not-affected> (present in source but not included in any binary files)
1536            - serendipity 1.5.3-1 (embed; bug #557746)
1537            - moodle 1.8.2.dfsg-5 (embed)
1538            - jifty 0.91117-1 (embed; bug #557748)
1539            - webgui 7.7.26-1 (embed)
1540            - loggerhead 1.17-1 (embed)
1541            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1542    
1543    quake3 (vanilla source not packaged in debian)
1544            - openarena <unfixable> (fork)
1545    
1546    quake2 (vanilla source not packaged in debian)
1547            - alien-arena <unfixable> (fork)
1548            - warsow <unfixable> (fork)
1549    
1550    libtheora
1551            - iceweasel <not-affected> (uses xulrunner)
1552            - xulrunner <unfixed> (embed; bug #540959)
1553            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1554            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1555            - iceape <unfixed> (embed; bug #559276)
1556            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1557            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1558    
1559    dtoa
1560            - bfilter <unfixed> (embed)
1561            - cacao <removed> (embed)
1562            - cdrdao <unfixed> (embed)
1563            - classpath <unfixed> (embed)
1564            - freej <unfixed> (embed)
1565            - iceape <unfixed> (embed)
1566            - iceweasel <unfixed> (embed)
1567            - jscoverage <unfixed> (embed)
1568            - kde4libs <unfixed> (embed)
1569            - kdelibs <unfixed> (embed)
1570            - kompozer <unfixed> (embed)
1571            - libv8 <unfixed> (embed)
1572            - mono <unfixed> (embed)
1573            - newlib <unfixed> (embed)
1574            - nspr <unfixed> (embed)
1575            - php5 <unfixed> (embed)
1576            - polyml <unfixed> (embed)
1577            - qt4-x11 <unfixed> (embed)
1578            - rhino <unfixed> (embed)
1579            NOTE: code translated to Java
1580            - ruby1.8 <unfixed> (embed)
1581            - ruby1.9 <unfixed> (embed)
1582            - ruby1.9.1 <unfixed> (embed)
1583            - sdd <unfixed> (embed)
1584            - sfind <unfixed> (embed)
1585            - star <unfixed> (embed)
1586            - tinymux <unfixed> (embed)
1587            - virtualbox-ose <unfixed> (embed)
1588            - webkit <unfixed> (embed)
1589            - xulrunner <unfixed> (embed)
1590    
1591    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1592            - firegpg <unfixed> (embed)
1593            - enigmail <unfixed> (embed)
1594    
1595    ptmalloc (not packaged in Debian)
1596            - crystalspace <unfixed> (embed)
1597            - qt4-x11 <unfixed> (embed)
1598    
1599    svgalib
1600            - usplash <unfixed> (embed)
1601    
1602    bogl
1603            - usplash <unfixed> (embed)
1604    
1605    taglist
1606            - usplash <unfixed> (embed)
1607    
1608    portaudio
1609            - audacity <unfixed> (embed; bug #323711)
1610    
1611    nyquist
1612            - audacity <unfixed> (embed)
1613            NOTE: embeds a forked nyquist with support for a shared library
1614    
1615    vamp-plugin-sdk
1616            - audacity <unfixed> (embed)
1617    
1618    wordpress
1619            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1620            - wordpress-mu <removed> (fork)
1621    
1622    php5
1623            - php4 <removed> (old-version)
1624    
1625    classpath
1626            - libgnucrypto-java <removed> (embed; bug #559788)
1627    
1628    libtool
1629            - apr <unfixed> (static; bug #489625)
1630            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1631            - arts <unfixed> (embed)
1632            - bochs 2.4.2-1 (embed; bug #560884)
1633            - camserv <unfixed> (embed)
1634            - collectd 4.8.2-1 (embed)
1635            - courier-authlib 0.58-4 (embed)
1636            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1637            - cvsnt 2.5.04.3236-1.2 (embed)
1638            - dico <not-affected> (Uses the system copy of ltdl)
1639            - freeradius 0.1+20010527-1 (embed)
1640            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1641            - ggobi 2.1.9~20091212-1 (embed)
1642            - glame 2.0.1-4 (embed)
1643            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1644            - gnash 0.8.7-2 (embed)
1645            - gnu-smalltalk <unfixed> (embed; bug #566777)
1646            - google-gadgets 0.10.5-0.3 (embed)
1647            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1648            - graphicsmagick 1.3.5-6 (embed)
1649            - graphviz 2.8-3 (embed)
1650            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1651            - guile-1.6 1.6.8-7 (embed)
1652            - hamlib 1.2.11-1 (embed)
1653            - hercules 3.06-1.2 (embed)
1654            - jags 1.0.4-3 (embed; bug #560864)
1655            - kdelibs <unfixed> (embed)
1656            - libannodex <removed> (embed)
1657            - libextractor 0.5.23+dfsg-4 (embed)
1658            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1659            - libtunepimp 0.5.3-7.3 (embed)
1660            - mp4h 1.3.1-4.1 (embed)
1661            - naim <removed> (embed)
1662            - parser-mysql <unfixed> (embed)
1663            - pinball 0.3.1-11 (embed)
1664            - redland <unfixed> (embed)
1665            - siproxd <unfixed> (embed)
1666            - ski <unfixed> (embed)
1667            - synfig 0.62.00-1 (embed)
1668            - unixodbc 2.2.4-5 (embed)
1669            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1670            - clamav 0.95+dfsg-1 (embed)
1671            - imagemagick 6:6.2.3.1-1 (embed)
1672            - hypre 2.4.0b-5 (embed)
1673            - lam <unfixed> (embed)
1674            - openmpi <unfixable> (embed; bug #559386)
1675            - parser <unfixed> (embed)
1676            - pdsh 2.18-5 (embed; bug #560892)
1677            - sbnc 1.2-8 (embed)
1678            - sdcc <unfixed> (embed)
1679            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1680            - proftpd-dfsg <unfixed> (embed; bug #561748)
1681            - babel 1.4.0.dfsg-5 (embed)
1682            - libprelude 0.9.14-2 (embed)
1683            - heartbeat 2.1.4-7 (embed)
1684            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1685            NOTE: might've been fixed earlier
1686            - gcc-* <unknown> (embed)
1687    
1688    ocamlgsl
1689            - orpie 1.5.1-7.1 (embed; bug #550058)
1690    
1691    xdotool
1692            - keynav <unfixed> (embed; bug #560103)
1693    
1694    bulletphysics (not packaged; http://www.bulletphysics.org/)
1695            - supertuxkart <unfixed> (embed)
1696            - blender <unfixed> (embed)
1697    
1698    ghostscript
1699            - gs-gpl <removed> (old-version)
1700    
1701    icedove
1702            - thunderbird <removed> (old-version)
1703    
1704    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1705            - jquery <unfixed> (embed)
1706    
1707    sed
1708            - ssed <unfixed> (fork)
1709    
1710    phpatomlib (http://code.google.com/p/phpatomlib)
1711            - wordpress <unfixed> (embed)
1712    
1713    Services_JSON (http://pear.php.net/package/Services_JSON)
1714            - wordpress <unfixed> (embed)
1715    
1716    phpass (http://www.openwall.com/phpass/)
1717            - gallery2 <unfixed> (embed)
1718            - wordpress <unfixed> (embed)
1719            - typo3-src <unfixed> (modified-embed)
1720            NOTE: file refers to drupal, maybe there's a copy somewhere there
1721            NOTE: a copyright owner search didn't match anything
1722            - libauthen-passphrase-perl <unfixable> (fork)
1723            NOTE: perl implementation of phpass
1724    
1725    squirrelmail
1726            - wordpress <unfixed> (embed)
1727            NOTE: class-pop3.php
1728    
1729    ezSQL (http://www.woyano.com/jv/ezsql)
1730            - wordpress <unfixable> (fork)
1731            NOTE: wp-db.php
1732    
1733    Diff.php (Clay Loveless' version/killersoft.com)
1734            - php-versioncontrol-svn <unfixed>
1735    
1736    libm (provided by libc)
1737            - spring <unfixed> (embed)
1738            NOTE: embedded by embedded copy of streflop
1739            - aide <unfixed> (static)
1740            - busybox <unfixed> (static)
1741            - mindi-busybox <unfixed> (static)
1742            - qemu <unfixed> (static)
1743            NOTE: qemu-user-static
1744            - tuxonice-userui <unfixed> (static)
1745            - zsh <unfixed> (static)
1746            NOTE: zsh-static
1747            - tripwire <unfixed>
1748    
1749    streflop
1750            - spring <unfixed> (embed)
1751    
1752    minizip
1753            - spring <unfixed> (embed)
1754    
1755    oscpack
1756            - spring <unfixed> (embed)
1757    
1758    hpiutil2
1759            - spring <unfixed> (embed)
1760    
1761    p7zip
1762            - spring <unfixed> (embed)
1763    
1764    pythonqt (doesn't seem to be python-qtN, unknown source)
1765            - fontmatrix <unfixed> (embed)
1766            - elmerfem <unfixed> (embed)
1767    
1768    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1769            - docvert <unfixed> (embed)
1770            - jifty <unfixed> (embed)
1771            - kdenetwork <unfixed> (embed)
1772            - mediatomb <unfixed> (embed)
1773            - plastex <unfixed> (embed)
1774            - plone3 <removed> (embed)
1775            - python-chaco <unfixed> (embed)
1776            - python-docutils <unfixed> (embed)
1777            - s5 <unfixed> (embed)
1778            - zope2.10 <unfixed> (embed)
1779            - zope2.11 <removed> (embed)
1780            - cython <not-affcted> (embed)
1781            NOTE: part of documentation, which is not installed into the binary package
1782    
1783    python-docutils
1784            - zope2.10 <unfixed> (embed)
1785            - zope2.11 <removed> (embed)
1786    
1787    tesseract
1788            - ocropus <unfixed> (static)
1789    
1790    antlr
1791            - kdevelop <unfixed> (embed)
1792    
1793    libxerces2
1794            - openjdk-6 <unfixed> (embed)
1795    
1796    kfreebsd-8
1797            - kfreebsd-7 <unfixed> (old-version)
1798            - kfreebsd-6 <removed> (old-version)
1799    
1800    ruby1.9.1
1801            - ruby1.9 <unfixed> (old-version)
1802            - ruby1.8 <unfixed> (old-version)
1803    
1804    maildrop
1805            - courier <unfixed> (embed) [./maildrop]
1806    
1807    glee
1808            - warzone2100 <not-affected> (embed)
1809    
1810    phing
1811            - symfony <unfixed> (embed)
1812    
1813    pake
1814            - symfony <unfixed> (embed)
1815    
1816    propel
1817            - symfony <unfixed> (embed)
1818    
1819    creole
1820            - symfony <unfixed> (embed)
1821    
1822    hfsutils
1823            - cdrkit <unfixed> (embed; bug #570187)
1824            NOTE: embeds hfsutils code in genisoimage
1825    
1826    cdrkit
1827            - grub2 <unfixed> (embed; bug #570156)
1828            NOTE: genisoimage imported into grub-mkisofs
1829    
1830    kdebase-workspace
1831            - kdebase <unfixed> (old-version)
1832    
1833    file
1834            - php5 <unfixable> (modified-embed)
1835            [lenny] - php5 <not-affected>
1836    
1837    cdb
1838            - php5 <unfixed> (embed)
1839    
1840    libmbfl (itp: #570708)
1841            - php5 <unfixed> (embed)
1842            NOTE: PHP is actually the current upstream, ITP is of that code
1843    
1844    libonig
1845            - php5 5.3.2-1 (embed)
1846    
1847    xmlrpc-epi
1848            - php5 <unfixed> (embed)
1849    
1850    swt-gtk
1851            - eclipse <unfixed> (embed; bug #538808)
1852    
1853    txt2html
1854            - wml 2.0.11ds2-1 (embed)
1855    
1856    ca-certificates
1857            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1858    
1859    openexr
1860            - freeimage <unfixed> (embed)
1861    
1862    libmng
1863            - freeimage <unfixed> (embed)
1864    
1865    openjpeg
1866            - freeimage <unfixed> (embed)
1867    
1868    libjpeg6b
1869            - freeimage <unfixed> (embed)
1870    
1871    libjpeg (don't know what exact version)
1872            - dcmtk <unfixed>
1873            - gdcm <unfixed>
1874            - insighttoolkit <unfixed>
1875            - openarena <unfixed> (bug #495966)
1876            - outguess <unfixed>
1877            - squeak-vm <unfixed> (embed)
1878            - tremulous <unfixed>
1879            - tuxonice-userui <unfixed> (static)
1880            - fpc <unfixed> (static)
1881            - lazarus <unfixed> (static)
1882            NOTE: inherited from fpc, see #472304
1883            - mseide-msegui <unfixed> (static)
1884            NOTE: inherited from fpc, see #472304
1885            - easymp3gain <unfixed> (static)
1886            NOTE: inherited from fpc, see #472304
1887            - winff <unfixed> (static)
1888            NOTE: inherited from fpc, see #472304
1889            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1890    
1891    
1892    lxr
1893            - lxr-cvs <unfixed> (embed)
1894    
1895    libfile-copy-recursive-perl
1896            - r-base <unfixed> (embed; bug #577427)
1897            - r-base-core-ra <unfixed> (embed; bug #577429)
1898    
1899    delimmatch
1900            - r-base <unfixed> (embed; bug #577433)
1901            - r-base-core-ra <unfixed> (embed; bug #577434)
1902    
1903    libsmf (ITP: #572558)
1904            - denemo <unfixed> (embed)
1905            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1906    
1907    libselinux
1908            - dpkg 1.15.6 (static)
1909    
1910    xinha (ITP: #479708)
1911            - horde3 <unfixed>
1912            - serendipity <unfixed>
1913            - openacs <unfixed>
1914            - dotlrn <unfixed>
1915    
1916    dvipng
1917            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1918    
1919    dvipdfmx
1920            - texlive-bin <unfixed> (embed)
1921            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1922    
1923    lcdf-typetools
1924            - texlive-bin 2009-1 (embed)
1925    
1926    tex4ht
1927            - texlive-bin 2009-1 (embed)
1928    
1929    freetype
1930            - texlive-bin 2009-1 (embed)
1931    
1932    freetype2
1933            - texlive-bin 2009-1 (embed)
1934    
1935    silgraphite
1936            - texlive-bin <unfixed> (embed)
1937    
1938    unzip
1939            - texlive-bin 2009-1 (embed)
1940    
1941    jbig2dec
1942            - ghostscript 8.71~dfsg2-1 (embed)
1943    
1944    libxml2
1945            - chromium-browser 5.0.375.29~r46008-1
1946    
1947    protobuf
1948            - chromium-browser 5.0.375.70~r48679-2
1949    
1950    libv8
1951            - chromium-browser 5.0.375.38~r46659-1
1952    
1953    nspr
1954            - chromium-browser 5.0.375.29~r46008-3
1955    
1956    yasm
1957            - chromium-browser 5.0.375.29~r46008-2
1958    
1959    libxslt
1960            - chromium-browser 5.0.375.29~r46008-1
1961    
1962    miniupnpc (not packaged in Debian; ITP bug #444392)
1963            - warzone2100 <unfixed> (embed)
1964    
1965  curl:  iniparser (not packaged in Debian; RFP bug #582657)
1966  wget (code for NTLM authentication)          - warzone2100 <unfixed> (modified-embed)
1967    
1968  TODO evaluate:  pyglet
1969  gimp-gap (potentially using ffmpeg code as well)          - sympy <unfixed> (embed; bug #459716)
1970    
1971  uw-imap:  mpmath
1972  pine          - sympy <unfixed> (embed; bug #541746)
1973    
 imagemagick:  
 graphicsmagick  
Legend:
Removed from v.3404  
changed lines
  Added in v.15199
  ViewVC Help
Powered by ViewVC 1.1.5