/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7279 by jmm-guest, Sun Nov 11 18:50:43 2007 UTC revision 15418 by sf, Mon Oct 4 20:01:42 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16  silc-toolkit:          <itp> if the package is in the process of being packaged
17  silc-client (uses libsilc and libsilcclient)          <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19  dietlibc:          <unfixable> for unavoidable cases (e.g., forks that add real value)
20  ccontrol (links statically)  sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22  libiax:        modified-embed (embeds a code copy that differs from upstream code)
23  iaxmodem        fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mono  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
 rpm  
   
 libbz2:  
 dpkg (statically linked)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki  
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 firefox (to be removed)  
 thunderbird (to be removed)  
 iceweasel  
 iceape  
 icedove  
 xulrunner  
 nvu (no longer in Debian)  
25    
26  xli:  The srcpkg might be some string to identify the code if there is no
27  xloadimage  specific source package.
28    
29  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  Everything up to the next line is ignored.
30  openmotif  ---BEGIN
31  xfree86/xorg (in libxpm)  poppler
32            - pdftohtml <unknown>
33  kerberized apps with BSD origin:          [sarge] - pdftohtml <unfixed>
34  krb4          [etch] - pdftohtml <unfixed>
35  krb5          NOTE: has been replaced by poppler-utils
36  heimdal          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37            - texlive-base 3.0-12 (embed)
38  grip: (which pkg is the origin?)          - texlive-bin 2007-1 (embed)
39  libcdaudio          - koffice 1:2.0.0-1 (embed; bug #436163)
40  grip          - libextractor 0.5.12-1 (embed)
41  gnome-vfs (vfs2 as well?)          NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43  fudforum:          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44  phpgroupware-fudforum          - ruby-gnome2 <unknown> (embed)
45  egroupware-fudforum (removed from egroupware after sarge)          - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47  cvs:          - xpdf 3.02-9 (fork)
48  gcvs (at least an additional script is included, check if there's more)  
49    pdksh (no longer developed since 1999)
50  pcre:          - mksh <unfixable> (fork)
51  all pythons          - posh <unfixable> (fork)
52  php4 (src included, but Debian package links dynamically)  
53  analog (src included, but Debian package links dynamically)  ppmd
54  libgoffice-1          - libcomplearn-mod-ppmd <unfixed> (fork)
55  vfu (#450754)          NOTE: discussion in #458152
56  tf5 (since 5.0beta7 the Debian package links dynamically)  
57  monotone (including this starting from 0.37)  libevent
58  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60  tiff:  
61  wxpythongtk (check, which debian pkg this is in)  lrmi
62  older kdegraphics/kpdf releases < 3.3 embedded a copy          - read-edid 2.0.0-1 (embed; bug #495131)
63            - s3switch <unfixed> (embed)
64  uudeview:          - xresprobe <unfixed> (embed)
65  libconvert-uulib-perl          - zhcon <unfixed> (embed)
66    
67  sqlite: (not affected by security vulnerabilities so far)  php-htmlpurifier
68  amarok          - mahara 1.2.5-1 (embed)
69  monotone          - knowledgeroot 0.9.9.5-5 (embed)
70  iceweasel          - moodle <unfixed> (embed)
71    
72  util-linux/mount:  peercast
73  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - gnome-peercast <removed> (embed)
74            [etch] - gnome-peercast <unfixed> (embed)
75  webmin:  
76  usermin (only in sarge)  silc-toolkit
77            - silc-client 1.1~beta6-1 (embed)
78  sylpheed:  
79  sylpheed-claws  icclib
80            - ghostscript <unfixed> (embed)
81  phpsysinfo:          - argyll <unfixed> (embed)
82  egroupware  
83  phpgroupware  libusb
84            - argyll <unfixed> (embed)
85  phpldapadmin:  
86  egroupware (removed from egroupware after sarge)  dietlibc
87            - ccontrol 0.9.1+20071204-1 (static)
88  chmlib:          - mksh <unfixable> (static)
89  kchmviewer (not packaged in Debian)          NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
90    
91  libavcodec/libavformat (source: ffmpeg):  libmikmod
92  mplayer (#395252)          - sdl-mixer1.2 <unfixed> (embed)
93  xvidcap          TODO: report bug
94  kino (links statically, does not include code)  
95  vlc (links statically, does not include code)  libiax
96  smilutils (links statically, does not include code)          - iaxmodem <unfixable> (embed; bug #548885)
97  motion (links statically, does not include code)  
98  gst-ffmpeg  spandsp
99  gstreamer0.10-ffmpeg          - iaxmodem <unfixable> (embed; bug #548885)
100  xmovie  
101    python-paramiko
102            - fabric 0.9.0-2 (embed; bug #561398)
103    
104    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
105            - dpkg 1.15.6 (static)
106            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
107            - rsync <unfixed> (embed)
108            - cherokee <unfixed> (embed)
109            NOTE: somehow derived code base
110            - mono <unfixed> (embed)
111            TODO: check mozilla
112            - Linux kernels <unfixed> (embed)
113            - pvpgn 1.7.8-2 (embed)
114            - mrtg 2.12.2-1 (embed)
115            - rpm <unknown> (embed)
116            NOTE: pinged anibal since when rpm was fixed
117            - tuxcmd-modules <unfixed> (embed)
118            - zsync <unfixed>
119            - tra <unfixed>
120            - sash <unfixed>
121            - nsis <unfixed>
122            - pyfits 1:2.3.1-1
123            - mseide-msegui <unfixed>
124            NOTE: mseide
125            - mirrordir <unfixed>
126            - poco <unfixed>
127            - klibc <unfixed>
128            - emboss <unfixed>
129            - ghostscript <unfixed>
130            - freeimage <unfixed>
131            - clamav <unfixed> (fork)
132            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
133            - tuxonice-userui <unfixed> (static)
134            - plt-scheme <unfixed>
135            - perl <unfixed>
136            - paraview <unfixed>
137            - velvet 0.7.56~nozlibcopy-1
138            - gcvs <unfixed>
139            - dump <unfixed>
140            - aide <unfixed> (static)
141            - dar <unfixed> (static)
142            - avfs <unfixed>
143            - fpc <unfixed>
144            - winff <unfixed>
145            NOTE: inherited from fpc, see #472304
146            - lazarus <unfixed>
147            NOTE: inherited from fpc, see #472304
148            - erlang <unfixed> (embed)
149            - gamera 3.2.3-1 (embed)
150            - python2.4 <unfixed> (embed; bug #553403)
151            - python2.5 <unfixed> (embed; bug #553403)
152            - texlive-bin <unknown> (embed)
153    
154    dulwich
155            - hg-git 0.1.0-1 (embed; bug #541996)
156    
157    libvigraimpex
158            - hugin <unfixed> (embed; bug #542259)
159            - enblend-enfuse <unfixed> (embed; bug #542258)
160            - gamera 3.2.3-1 (embed)
161    
162    libbz2
163            - dpkg 1.15.6 (static)
164            - amd64-libs <unfixed> (static)
165            NOTE: let's call it "static"
166            - dar <unfixed> (static)
167            - dump <unfixed> (static)
168            - unalz 0.64-1 (embed)
169            NOTE: has code, by the maint, to use the system version but links against the internal copy
170            - clamav <unfixed> (embed)
171            NOTE: libclamav/nsis/bzlib*
172            - pristine-tar <unfixable> (modified-embed)
173            NOTE: compression code only, not uncompression
174            - r-base-core-ra <unfixed> (static)
175            - r-base-core <unfixed> (static)
176            NOTE: seem to link dynamically in squeeze, but needs verification
177            - rpm <unfixed> (static)
178            NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
179    
180    libyahoo2
181            - centerim <unfixed> (embed; bug #559783)
182    
183    libmsn
184            - centerim <unfixed> (embed; bug #559783)
185    
186    libgadu
187            - centerim <unfixed> (embed; bug #559783)
188            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
189            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
190            - kdenetwork 4:3.3.2-5 (embed)
191            NOTE: from kdenetwork: kopete
192            - ekg 1:1.8~rc0-1 (embed)
193            - kadu 0.6.0.2-3 (embed; bug #504430)
194            - gadu <itp> (embed)
195    
196    xmlrpc (which package is the "origin" of this code?)
197            - drupal <unfixed> (embed)
198            - phpgroupware <unfixed> (embed)
199            - egroupware <unfixed> (embed)
200            - phpwiki <unfixed> (embed)
201            - php4 <removed> (embed)
202            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
203    
204    shtool (affects build-time only)
205            - mysql-ocaml <unfixed> (embed)
206            - php4 <removed> (embed)
207            - php5 <unfixed> (embed)
208    
209  mad MPEG decoding lib:  xulrunner
210  mad          - iceape <unfixed> (embed; bug #561749)
211  xine-lib          - iceweasel 2.0.0.19 (embed)
212            - icedove <unfixed> (embed; bug #561750)
213            - kompozer <unfixed> (embed; bug #532168)
214            - galeon 2.0.2-4 (embed)
215            - epiphany-browser 2.14.3-8 (embed)
216            - conkeror 0.9~git080629-2 (embed)
217            - kazehakase 0.4.2-1 (embed)
218    
219    xli
220            - xloadimage <unfixed> (embed)
221    
222    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
223            - openmotif <unfixed> (embed)
224    
225    libxpm
226            - lesstif2 <unfixed> (embed; bug #575750)
227    
228    kerberized apps with BSD origin
229            - krb4 <removed> (embed)
230            - krb5 <unfixed> (embed)
231            - heimdal <unfixed> (embed)
232    
233    grip (which pkg is the origin?)
234            - libcdaudio <unfixed>
235            - grip <unfixed>
236            - gnome-vfs <unfixed>
237            TODO: check vfs2 as well
238    
239    fudforum
240            [etch] - phpgroupware <unfixed> (embed)
241            NOTE: phpgroupware-fudforum
242            [sarge] - egroupware-fudforum <removed> (embed)
243    
244    libbsd
245            - rdate 1:1.2-3 (embed)
246            - atheme-services <unfixed>
247            - libbsd-arc4random-perl <not-affected> (modified-embed)
248            NOTE: code not used, it links dynamically against libbsd instead
249            - isakmpd <unfixed>
250            - bsdgames <unfixed> (embed)
251            - bsd-mailx <unfixed> (embed)
252            - netcat-openbsd <unfixed> (embed; bug #550611)
253            - openssh <unfixed> (embed)
254            - unworkable <unfixed> (embed)
255            - mksh <unfixed> (modified-embed)
256            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
257            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
258            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
259    
260    cvs
261            - gcvs <unfixed> (embed)
262            NOTE: see cvsunix/src in tarball
263    
264    pcre3
265            - php4 <removed> (embed)
266            - analog 2:5.23-0woody1 (embed)
267            - goffice <unfixed> (embed)
268            NOTE: libgoffice-*
269            - vfu 4.06-4.1 (embed; bug #450754)
270            - tf5 5.0beta7-1 (embed)
271            - monotone 0.43-1 (embed)
272            NOTE: this only affects versions >= 0.37
273            - glib2.0 2.15.2-1 (embed)
274            - apache2 2.0.53-4 (embed)
275            - exim4 4.10-0.srh20.12 (embed)
276            - yacas <unfixed> (embed)
277            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
278            - gtamsanalyzer.app 0.42-5 (embed)
279            - tin 980117-1 (embed)
280            - kazehakase 0.5.2-1
281            - webkit 1.0.1-1 (embed)
282            - qt4-x11 <unfixed> (embed)
283            NOTE: embedded via webkit copy
284            - erlang <unfixed> (embed)
285            - ssed <unfixed> (embed)
286            - ircd-hybrid <unfixed> (static)
287            - emboss <unfixd>
288            - cherokee <unfixed> (embed)
289            - oftc-hybrid 1.6.9.dfsg-1 (embed)
290            - ratbox-services <unfixed> (embed)
291            - squeak-vm <unfixed> (embed)
292            - tinymux <unfixed> (embed)
293    
294    tiff
295            - wxwindows2.4 2.2.1 (embed)
296            - gamera 3.2.3-1 (embed)
297            - freeimage <unfixed> (embed)
298            - libtk-img <unfixed> (embed)
299            NOTE: there are two copies, one under tiff/ other under libtiff/
300            - gdal <unfixed>
301    
302    uudeview
303            - libconvert-uulib-perl <unfixed> (embed)
304            - pan <unfixed> (embed)
305    
306    sqlite (not affected by security vulnerabilities so far)
307            - amarok <unfixed> (embed)
308            - monotone 0.43-1 (embed)
309            - iceweasel <unfixed> (embed)
310            - heimdal <unfixed> (embed; bug #559616)
311    
312    util-linux/mount
313            - loop-aes-utils <unfixed> (embed)
314            NOTE: contains code from util-linux' mount in the mount-aes-udeb
315    
316    sylpheed
317            - sylpheed-claws <unfixed> (fork)
318    
319    phpsysinfo
320            - egroupware <unfixed> (embed)
321            - phpgroupware <unfixed> (embed)
322    
323    phpldapadmin
324            [sarge] - egroupware <unfixed> (embed)
325            NOTE: removed from egroupware after sarge
326    
327    chmlib
328            - kchmviewer <unknown> (embed)
329    
330    ffmpeg (libavcodec/libavformat)
331            - mplayer 1.0~rc2-14 (embed; bug #395252)
332            - kino 1.0.0-1
333            - vlc <not-affected> (Links dynamically since initial release)
334            - smilutils 0.3.0-10
335            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
336            - motion 3.1.19-1
337            - gstreamer0.10-ffmpeg 0.10.3-2
338            - xmovie <removed> (static)
339            TODO: gimp-gap (potentially using ffmpeg code as well)
340            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
341            - audacity 1.3.7-2 (embed; bug #512278)
342            - chromium-browser <unfixed> (fork)
343    
344    faad2
345            - mplayer 1.0~rc2-20 (embed)
346            - avifile <unfixed> (embed; bug #538750)
347            - ffmpeg-debian <removed> (embed)
348    
349    libmad (MPEG decoding lib)
350            - xine-lib <unfixed> (embed)
351            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
352            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
353    
 libdts:  
354  libdts  libdts
355  xine-lib          - xine-lib <unfixed> (embed)
356    
 flac:  
357  flac  flac
358  xine-lib          - xine-lib <unfixed> (embed)
359    
360  liba52:  liba52
361  a52dec          - a52dec <unfixed> (embed)
362  xine-lib          - xine-lib <unfixed> (embed)
363    
364    mpeg2dec (libmpeg2)
365            - xine-lib <unfixed> (embed)
366    
367    libmpeg3
368            - squeak-vm <unfixed> (embed)
369    
370    libntlm
371            - wget <unfixed> (fork; bug #550436)
372            - curl <unfixed> (fork; bug #550437)
373            - cntlm <unfixed> (fork; bug #550438)
374    
375    uw-imap
376            - pine <unfixed> (embed)
377            - alpine <unfixed> (embed)
378    
379    imagemagick
380            - graphicsmagick <unfixed> (fork)
381    
382    python-urlgrabber
383            - mercurial <unfixed> (embed; bug #531062)
384            - w3af <unfixed> (embed; bug #555372)
385            [experimental] - harvestman <unfixed> (embed; bug #555373)
386    
387    beautifulsoup
388            - python-mechanize <unfixed> (embed; bug #555349)
389            - zope2.11 <removed> (embed; bug #555350)
390            - twill <unknown> (embed)
391    
392    halibut
393            - nsis <unfixed> (fork)
394    
395    libghttp
396            - hotway <unfixed> (embed)
397    
398    libsndfile
399            - ardour 1:2.7.1-1 (embed)
400    
401    glibmm2.4
402            - ardour 1:2.7.1-1 (embed)
403    
404    libgnomecanvasmm2.6
405            - ardour 1:2.7.1-1 (embed)
406    
407    libsigc++-2.0
408            - ardour 1:2.7.1-1 (embed)
409    
410    soundtouch
411            - ardour 1:2.7.1-1 (embed)
412    
413    libmms
414            - xine-lib <unfixed> (embed)
415            - mimms <unfixed> (embed)
416    
417    fckeditor
418            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
419            - moin 1.8.2-2 (embed; bug #452599)
420            - karrigell <removed> (embed; bug #452598)
421            - gforge 4.6.99+svn6225-1 (embed)
422            - request-tracker3.8 <unfixed> (embed)
423            - otrs2 <unfixed> (embed)
424    
425    ipatlas (not packaged in Debian)
426            - moodle <unfixed> (embed; bug #507185)
427    
428    libphp-phpmailer
429            - moodle <unfixed> (embed; bug #507185)
430            - mahara <unfixed> (embed)
431            - symfony <unfixed> (embed; bug #566778)
432            [etch] - phpgroupware <unfixed> (embed)
433            NOTE: phpgroupware-felamimail is only in etch
434            - egroupware <unfixed> (embed; bug #504283)
435            - glpi <unfixed>
436    
437    htmlArea (not packaged in Debian)
438            - moodle <unfixed> (embed)
439    
440    giflib
441            - wine <unfixed> (embed; bug #466181)
442    
443    bennu (not packaged in Debian, http://bennu.sourceforge.net)
444            - moodle <unfixed> (embed)
445    
446    smarty
447            - moodle 1.8.2-2 (embed; bug #471158)
448            - gallery2 2.2.5-2 (embed; bug #471160)
449            - mahara 0.9.2-2 (embed; bug #471201)
450            - gosa 2.4beta1-1 (embed; bug #471200)
451    
452  libmpeg2:  TinyMCE
453  mpeg2dec          - wordpress 2.5.1-3 (embed; bug #478257)
454  xine-lib          - moodle <unfixed> (embed; bug #507185)
455            - knowledgeroot <unfixed> (embed)
456            - joomla <itp> (bug #326398)
457            - mahara 1.2.6-1 (embed; #597752)
458    
459    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
460            - scite <unfixed> (embed)
461            - qscintilla <unfixed> (embed)
462            - qscintilla2 <unfixed> (embed)
463            - geany <unfixed> (fork)
464            - anjuta <unfixed> (embed)
465    
466    libphp-adodb
467            - moodle <unfixed> (embed; bug #507185)
468            NOTE: also AdoDB-XML Schema
469            - gallery2 <unfixed> (embed)
470            - phppgadmin <unfixed> (embed)
471            - egroupware <unfixed> (embed)
472            - phpwiki <unfixed> (embed)
473            - torrentflux 2.0beta1-2 (embed)
474            - ipplan <unfixed> (embed)
475            - typo3-src <unfixed> (embed)
476            - cacti <unknown> (embed)
477            [sarge] - cacti <unfixed> (embed)
478            NOTE: dependency exists, but internal version is used
479            - gforge 4.7~rc2-6 (embed)
480            - mahara <unfixed> (embed)
481    
482    gzip
483            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
484            - klibc <unfixed> (embed)
485            NOTE: based on linux-kernel gzip code
486            - busybox <unfixed> (embed)
487            - pristine-tar <unfixed> (modified-embed)
488            NOTE: compression code only, not uncompression
489            - ncompress <unfixed> (old-version)
490    
491    neon
492            - cadaver 0.22.3+debian-1 (embed; bug #188381)
493            - gnome-vfs2 <unfixed> (embed; bug #395874)
494            [etch] - litmus <unfixed> (embed; #395875)
495            - litmus <removed> (embed; #395875)
496            [sarge] - screem <unfixed> (embed)
497            - sitecopy 1:0.16.0-1 (embed; bug #395876)
498            [etch] - tla <unfixed> (embed; bug #395877)
499            [sarge] - tla <unfixed> (embed; bug #395877)
500    
501    libmodplug
502            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
503    
504    libvncserver
505            - vino <unfixed> (embed)
506    
507    putty
508            - filezilla <unfixed> (embed)
509    
510    tinyxml (not packaged in Debian; itp bug #531968)
511            - filezilla <unfixed>
512            - crystalspace <unfixed> (embed)
513            - libwfut <unfixed> (embed)
514            - rarian <unfixed> (embed)
515            - bulletml <unfixed> (embed)
516            - pokerth <unfixed> (embed)
517            - qutecom <unfixed> (embed)
518            - sofa-framework <unfixed> (embed)
519            - yate <unfixed> (embed)
520            - antigrav <unfixed> (embed)
521            - balder2d <unfixed> (embed)
522            - cal3d <unfixed> (embed)
523            - criticalmass <unfixed> (embed)
524            - ember <unfixed> (embed)
525            - epiphany <unfixed> (embed)
526            - gambit <unfixed> (embed)
527            - noiz2sa <unfixed> (embed)
528            - ogre <unfixed> (embed)
529            - opencity <unfixed> (embed)
530            - openmovieeditor <unfixed> (embed)
531            - pouetchess <unfixed> (embed)
532            - tecnoballz <unfixed> (embed)
533            - trigger-rally <unfixed> (embed)
534            - xmoto <unfixed> (embed)
535            - mapnik <unknown> (embed)
536            NOTE: uses a different XML parser by default
537            - rrootage 0.23a-6 <embed>
538            NOTE: links to libbulltetml
539            - boson <unknown> (embed)
540            NOTE: the embedded code is unused
541    
542    gv
543            - evince <unfixed> (embed)
544            NOTE: ps/ tree from gv 3.5.8
545            NOTE: evince-gtk is affected (a component of evince source package)
546    
547    libXbae
548            - paw <unfixed> (embed)
549    
550    libgtkhtml
551            - claws-mail-extra-plugins <unfixed> (fork)
552    
553    libXaw
554            - paw <unfixed> (embed)
555            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
556    
557    libgd2
558            - graphviz <unfixed> (embed)
559            NOTE: lib/gd seems to be 2.0.33
560            - wml 2.0.11ds2-1 (embed)
561            - libwmf <unfixed> (embed)
562            NOTE: derived from gd 1.6.3
563            - texlive-bin 2009-1 (embed)
564    
565    rar
566            - unrar-nonfree <unfixed> (embed)
567    
568    unrar-free (maybe this code is derived from the original rar, too?)
569            - clamav <unfixed> (embed)
570            NOTE: seems to be disabled in default config
571    
572    mplayer (DirectMedia Object loader)
573            - xine-lib <unfixed> (embed)
574            NOTE: src/libw32dll/
575            - vlc <unfixed> (embed)
576            NOTE: modules/codec/dmo/
577            - mplayer 1.0~rc2-20 (embed)
578    
579    libwpd (WordPerfect converter)
580            - openoffice.org <unfixed> (embed)
581    
582    fsplib (http://sourceforge.net/projects/fsp/)
583            - gftp <unfixed> (embed)
584            NOTE: lib/fsplib version 0.3
585    
586    sprng
587            - tree-puzzle <unfixed> (embed)
588    
589    librpcsecgss
590            - krb5 <unfixed> (embed)
591    
592    jasper
593            - ghostscript 8.64~dfsg-2 (embed)
594    
595    libiris
596            - psi <unfixed> (embed)
597            - kdenetwork <unfixed> (embed)
598            NOTE: kopete embeds libiris but links dynamically to libidn
599            - kdegames <unfixed> (embed)
600            NOTE: ksirk/kde4
601    
602    libidn
603            - monotone 0.43-1 (embed)
604            - psi <unfixed> (embed)
605            NOTE: psi embeds libiris which embeds libidn
606            - kdegames <unfixed> (embed)
607            NOTE: kdegames/kde4 embeds libiris which embeds libidn
608    
609    lua5.1
610            - monotone 0.43-1 (embed)
611            - nmap 5.00-1 (embed; bug #527997)
612            [lenny] - nmap <unfixed> (embed; bug #527997)
613            - ocropus <unfixed> (embed)
614            - enigma <unfixed> (embed)
615            NOTE: requires lua built with C++
616            - freeciv <unfixed> (embed)
617            - spring <unfixed> (embed)
618    
619    libbotan
620            - monotone 0.43-1 (embed)
621    
622    NetXX
623            - monotone 0.43-1 (embed)
624    
625    libgc
626            - mono <unfixed> (embed)
627    
628    lzma
629            - p7zip <unfixed> (embed)
630            - xz-utils <unfixed> (fork)
631    
632    lzo
633            - grub2 <unfixed> (embed)
634    
635    yassl
636            - mysql-dfsg-5.0 <unfixed> (embed)
637            - mysql-5.1 <unfixed> (embed)
638    
639    pax code
640            - tar <unfixed> (embed)
641            - cpio <unfixed> (embed)
642    
643    t1lib
644            - tetex-bin 2.0.2-1 (embed)
645            - texlive-bin <unknown> (embed)
646    
647    guichan
648            - boswars <unfixed> (embed)
649            NOTE: maintainer notified us, working on it
650    
651    tolua
652            - boswars <unfixed> (embed)
653            NOTE: maintainer notified us, working on it
654            NOTE: actually tolua++
655            - ocropus <unfixed> (embed)
656            NOTE: actually tolua++
657            - freeciv <unfixed> (embed)
658            NOTE: actually tolua++
659            - enigma <unfixed> (embed)
660    
661  curl:  asio-dev
662  wget (code for NTLM authentication)          - luxrender <removed> (embed)
663    
664  TODO evaluate:  xine-lib
665  gimp-gap (potentially using ffmpeg code as well)          - vlc <unfixed> (embed)
666            NOTE: only parts included in modules/access/rtsp
667    
668  uw-imap:  netpbm
669  pine          - tcl8.3 <unfixed> (embed)
670  alpine          - tcl8.4 <unfixed> (embed)
671            - tcl8.5 <unfixed> (embed)
672            NOTE: generic/tkImgGIF.c
673    
674    tk8.5
675            - tk8.0 <removed> (old-version)
676            - tk8.3 <unfixed> (old-version)
677            - tk8.4 <unfixed> (old-version)
678            - perl-tk <unfixable> (fork)
679    
680    samba
681            - mc 2:4.6.2~git20080311-1 (embed)
682            NOTE: maintainer is aware of this, currently searching a solution
683    
684    plib1.8.4c2
685            - boson <unfixed> (fork)
686            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
687    
688    fribidi
689            - quesoglc 0.7.2-2 (embed)
690    
691    glew
692            - quesoglc <unfixed> (embed; bug #489341)
693            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
694            - trigger 0.5.2.1-2 (embed)
695            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
696            - trigger-rally 0.5.2.1-2 (embed)
697            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
698            - chromium-browser 5.0.375.70~r48679-2
699    
700    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
701            - transcend <unfixed> (embed)
702            - cultivation <unfixed> (embed)
703            - passage <unfixed> (embed)
704            - gravitation <unfixed> (embed)
705    
706  imagemagick:  tar
707  graphicsmagick          - libarchive <unfixed> (embed)
708            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
709    
710  halibut:  cpio
711  nsis          - libarchive <unfixed> (embed)
712            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
713    
714  libghttp:  kde4libs
715  hotway          - kdelibs <unfixable> (old-version)
716    
717  libsndfile:  webkit
718  ardour          - qt4-x11 <unfixed> (embed; bug #479851)
719            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
720            - kde4libs <unfixable> (fork)
721            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
722            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
723            - chromium-browser <unfixed> (fork)
724    
725    ftgl
726            - blender 2.46+dfsg-1 (embed)
727    
728    wv
729            - abiword <unfixed>
730    
731    qemu
732            - kvm <removed> (embed; bug #543159)
733            - qemu-kvm <unfixed> (embed; bug #560853)
734            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
735            - xen-3 3.4.2-2 (embed; bug #560856)
736            - xen-unstable <unfixed> (embed; bug #560856)
737    
738    vgabios
739            - kvm <removed> (embed; bug #489442)
740            - qemu-kvm <unfixed> (embed)
741    
742    bochs
743            - kvm <removed> (embed; bug #489442)
744            - qemu-kvm <unfixed> (embed)
745    
746    speex
747            - vorbis-tools <unfixed> (embed)
748            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
749            - gst-plugins-good0.10 <unfixed> (embed)
750            - xine-lib <unfixed> (embed)
751            - libfishsound <unfixed> (embed)
752            - libannodex <removed> (embed)
753            - vlc <unfixed> (embed)
754            - xmms-speex <unfixed> (embed)
755            - libsdl-sound1.2 <unfixed> (embed)
756            - sweep <unfixed> (embed)
757    
758    libreadline
759            - magic <itp> (old-version)
760    
761    opcode
762            - ode <unfixed> (embed)
763            NOTE: opcode is not a package in debian, it is just embedded
764            NOTE: http://www.codercorner.com/Opcode.htm
765    
766    gimpact
767            - ode <unfixed> (embed)
768            NOTE: gimpact is not a package in debian, it is just embedded
769            NOTE: http://gimpact.sf.net
770    
771    mochikit
772            - mahara <unfixed> (embed)
773            NOTE: they require extra patches, still unmerged upstream
774            - ntop <unfixed> (embed)
775            - coherence 0.6.2-1 (embed)
776            - paste <unfixed> (embed)
777            - turbogears <unfixed> (embed)
778            - plone3 <removed> (embed)
779            - xulrunner <unfixed> (embed)
780            - libjifty-plugin-chart-perl <unfixed> (embed)
781            - sabnzbdplus <unfixed> (embed)
782            - tgmochikit <unfixed> (embed)
783    
784    prototypejs
785            - netbeans-ide 6.0.1+dfsg-2 (embed)
786            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
787            - webcit <unfixed> (embed; bug #555219)
788            - asterisk 1:1.6.2.0~rc3-1 (embed)
789            - libjson-ruby 1.1.4-1 (embed; bug #555224)
790            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
791            - horde3 <unfixed> (embed)
792            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
793            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
794            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
795            - ebug-http <unfixed> (embed; bug #555236)
796            - libaws 2.7-1 (embed; bug #555222)
797            - phpgedview <removed> (embed)
798            - poker-network 1.7.6-1 (embed; bug #555238)
799            - rails 2.1.0-6 (embed)
800            - wordpress 2.5.0-2 (embed; bug #555243)
801            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
802            TODO: search through all of the other zope packages
803            - ampache 3.4.1-2 (embed)
804            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
805            - hobix 0.5~svn20070319-4 (embed; bug #555247)
806            - zabbix 1.6.6-4 (embed; bug #555250)
807            - chora2 2.1.1+debian0-1 (embed; bug #555253)
808            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
809            - jscropperui 1.2.1-1 (embed; bug #555257)
810            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
811            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
812            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
813            - activeldap 1.2.1-1 (embed)
814            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
815            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
816            - otrs2 2.3.4-6 (embed; bug #555267)
817            - webcalendar 1.2~b1-2 (embed; bug #555269)
818            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
819            - jifty 0.90519-1 (embed; bug #555271)
820            - jquery 1.4-1 (embed; bug #555272)
821            - passenger 2.2.5debian1-1 (embed; bug #555273)
822            - plone3 <removed> (embed; bug #555275)
823            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
824            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
825            - xulrunner <unfixed> (embed)
826            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
827            - jclicmoodle <unfixed> (embed)
828            - git-cola <unfixed> (embed)
829    
830    gdb
831            - insight <unfixed> (embed)
832    
833    e2fsprogs
834            - ldiskfsprogs <unfixable> (fork)
835    
836    quazip (not packaged in Debian)
837            - qcake <unfixed> (embed)
838            NOTE: starting with upstream version 0.6.4
839    
840    exo
841            - pcmanfm <unfixed> (embed; bug #499677)
842            NOTE: slightly modified source code
843    
844    java
845            - openjdk-6 <unfixed>
846            - sun-java5 <unfixed>
847            - sun-java6 <unfixed>
848    
849    libphp-snoopy
850            - ampache 3.4.1-2 (embed; bug #504169)
851            - gforge 4.6.99+svn6094-2 (embed)
852            - mahara 1.0.5-2 (embed; bug #504170)
853            - pixelpost 1.7.1-5 (embed; bug #504171)
854            - mediamate 0.9.3.6-5 (embed; bug #504172)
855            - opendb <removed> (embed; bug #504173)
856            [etch] - opendb <unfixed> (embed; bug #504173)
857            - wordpress 2.5.1-9 (embed; bug #443948)
858            - moodle <unfixed> (embed; bug #507185)
859            [etch] - phpgroupware <unfixed> (embed)
860            NOTE: phpgroupware-felamimail
861            - magpierss 0.72-3 (embed; bug #431089)
862    
863    jquery
864            - zekr <unfixed> (embed)
865            - wordpress <unknown> (embed)
866            - yocto-reader <unfixed> (embed)
867            - textpattern <unfixed> (embed)
868            - genshi 0.5.1-1 (embed)
869            NOTE: compressed file under examples/ dir
870            - prewikka <unfixed> (embed)
871            - libramaze-ruby <unfixed> (embed)
872            - drupal6 <unfixed> (embed)
873            - b2evolution <unfixed> (embed)
874            - wesnoth <unfixed> (embed)
875    
876    tablesorter (jquery plugin, not packaged yet)
877            - wesnoth <unfixed> (embed)
878    
879    kses
880            - wordpress <unfixed> (embed; bug #504242)
881            NOTE: their copy has all methods renamed to wp_<foo>
882            NOTE: kses isn't in Debian, RFP: #504240
883            - moodle <unfixed> (embed; bug #507185)
884            - egroupware <unfixed> (embed)
885    
886    magpierss
887            - wordpress <unfixed> (embed; bug #504242)
888            - moodle <unfixed>
889    
890    php-gettext
891            - wordpress 2.8.4-1 (embed; bug #504242)
892            - docbookwiki <unfixed> (embed)
893            - knowledgeroot 0.9.9.5-1
894            NOTE: non-free
895    
896    libphp-ixr (name may change, it is the Incutio XML-RPC)
897            - wordpress <unfixed> (embed; bug #504242)
898            NOTE: libphp-ixr isn't in Debian, RFP: #504236
899            - dokuwiki <unfixed> (embed)
900            - textpattern <unfixed> (embed)
901    
902    libphp-cas
903            - glpi <unfixed> (embed)
904            - moodle <unfixed> (embed; bug #505984)
905    
906    scriptaculous (prototype.js is among the embeds in the following)
907            - glpi <unfixed> (embed)
908            - libaws <unfixed> (embed; bug #555222)
909            - op-panel <unfixed> (embed)
910            - symfony <unfixed> (embed)
911            NOTE: maintainer says there are extra incompatible changes required
912            - pixelpost 1.7.1-6 (embed)
913            - webhelpers <unfixed> (embed)
914            - qwik <removed> (embed; bug #555241)
915            - smokeping <unfixed> (embed)
916            - turba2 <unfixed> (embed)
917            - typo3-src 4.2.3-1 (embed)
918            - request-tracker3.6 <unfixed> (embed)
919            - request-tracker3.8 <unfixed> (embed)
920            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
921            - wordpress 2.5.0-2 (embed)
922            - libhtml-prototype-perl 1.48-3 (embed)
923    
924    libmarkdown-php
925            - moodle <unfixed> (embed; bug #507185)
926            - pixelpost 1.7.1-6 (embed)
927    
928    php-openid
929            - wordpress-openid 3.3.2-1 (embed)
930    
931    geshi
932            - dokuwiki 0.0.20080505-3.1 (embed)
933            - pgfouine 1.0-1.1 (embed)
934            - websvn 2.1.0-1 (embed)
935    
936    webcalendar
937            - gforge 4.7~rc2-6 (embed; bug #504758)
938    
939    libical
940            - kdepim <unknown> (fork)
941            NOTE: fixed at some point during 4.0
942            - kdepimlibs 4.2.0-1 (fork)
943            - claws-mail-extra-plugins <unfixed> (fork)
944    
945    harfbuzz
946            - qt4-x11 <unfixed> (embed)
947            - pango1.0 <unfixed> (embed)
948            - fontmatrix <unfixed> (embed)
949    
950    libzip
951            - php5 <unfixable> (modified-embed)
952            - odt2txt <unfixed> (embed; bug #523808)
953    
954    json.php (not packaged; should be replaced with php's built-in functions)
955            - moodle <unfixed>
956            - yui <unfixed>
957            - gallery2 <unfixed>
958            - dokuwiki <unfixed>
959            - typo3-src <unfixed>
960    
961    php-fpdf
962            - tcpdf <itp> (fork)
963            - moodle <unfixed>
964            - phpwiki <unfixed>
965            - egroupware <unfixed>
966            - ldap-account-manager <unfixed> (fork)
967    
968    tcpdf (itp: #495985)
969            - moodle <unfixed>
970            - phpmyadmin <unfixed>
971    
972  glibmm2.4:  typo3
973  ardour          - moodle <unfixed>
974    
975  libgnomecanvasmm2.6:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
976  ardour          - moodle <unfixed>
977            - gosa <unfixed>
978    
979    php-ole (itp: #487558)
980            - moodle <unfixed>
981    
982    pieforms (http://www.catalyst.net.nz)
983            - mahara <unfixed>
984    
985    savant2 (http://phpsavant.com)
986            - egroupware <unfixed>
987    
988    rssparser (http://nwow.org)
989            - egroupware <unfixed>
990            - phpgroupware <unfixed>
991    
992    lcms
993            - openjdk-6 <unfixed> (fork)
994            - gimp 2.4.0~rc2-2
995    
996    libphp-phplayersmenu
997            - diogenes <unfixed>
998            - phpldapadmin <unfixed>
999    
1000    libphp-pclzip
1001            - docvert <unfixed>
1002            - moodle <unfixed>
1003            - egroupware <unfixed>
1004    
1005    libphp-simplepie
1006            - dokuwiki <unfixed>
1007            - wordpress <unfixed>
1008    
1009    libphp-jpgraph
1010            - egroupware <unfixed>
1011    
1012    php-simpletest
1013            - moodle <unfixed>
1014    
1015    libpng
1016            - iceweasel <not-affected> (uses xulrunner)
1017            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1018            - iceape 1.0.13~pre080614i-0etch1 (embed)
1019            - xulrunner 1.9.0.13-1 (embed)
1020            [lenny] - xulrunner 1.9.0.11-0lenny1
1021            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1022            - gamera 3.2.3-1 (embed)
1023            - freeimage <unfixed> (embed)
1024            - tuxonice-userui <unfixed> (static)
1025    
1026    irssi
1027            - silc-client <unfixed> (embed)
1028            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1029    
1030    extc
1031            - mtasc <unfixed> (embed)
1032            - haxe <unfixed> (embed)
1033    
1034    swflib
1035            - mtasc <unfixed> (embed)
1036            - haxe <unfixed> (embed)
1037    
1038    libitext-java
1039            - bouncycastle 2.1.4-1 (embed)
1040    
1041    python-ply
1042            - pyke <unfixed> (embed; bug #555363)
1043            - pywbem 0.7.0-4 (embed; bug #555364)
1044            - sepolgen <unfixed> (embed; bug #555365)
1045            - zope-textindexng3 <unknown> (embed)
1046            - iceweasel <not-affected> (uses xulrunner)
1047            - xulrunner <unknown> (embed)
1048            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1049    
1050    libdumbnet (libdnet upstream)
1051            - nmap <unfixed> (fork)
1052    
1053    gcc-4.4
1054            - gcc-mingw32 <unfixed> (embed)
1055    
1056    camlimages
1057            - advi <unfixed> (static; bug #550441)
1058    
1059    memcached
1060            - memcachedb <unfixed> (embed)
1061    
1062    yajl
1063            - argyll <unfixed> (embed; bug #544223)
1064            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1065    
1066    nusoap
1067            - gforge 4.8.2-1 (embed)
1068            - ampache <unfixed> (embed)
1069            - poker-network <unfixed> (embed)
1070            - moodle <unfixed> (embed)
1071            NOTE: code is not used when running under php5 and soap is enabled
1072            - phpwiki <unfixed> (embed)
1073            - gallery2 <unfixed> (embed)
1074            - typo3-src <unfixed> (embed)
1075            - phpgacl 3.3.7-7 (embed)
1076            - mantis 1.1.8+dfsg-1 (embed)
1077    
1078    libept
1079            - adept <unfixed> (embed; bug #540649)
1080    
1081    libvorbis
1082            - iceweasel <not-affected> (uses xulrunner)
1083            - xulrunner <unfixed> (embed; bug #540959)
1084            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1085            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1086            - iceape <unfixed> (embed)
1087            [etch] - iceape <not-affected> (introduced in 2.0)
1088            [lenny] - iceape <not-affected> (introduced in 2.0)
1089    
1090    cairo
1091            - iceweasel <not-affected> (uses xulrunner)
1092            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1093    
1094    liboggz
1095            - iceweasel <not-affected> (uses xulrunner)
1096            - xulrunner <unfixed> (embed; bug #540959)
1097            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1098            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1099            - iceape <unfixed> (embed)
1100            [etch] - iceape <not-affected> (introduced in 2.0)
1101            [lenny] - iceape <not-affected> (introduced in 2.0)
1102    
1103    liboggplay
1104            - iceweasel <not-affected> (uses xulrunner)
1105            - xulrunner <unfixed> (embed; bug #540959)
1106            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1107            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1108            - iceape <unfixed> (embed)
1109            [etch] - iceape <not-affected> (introduced in 2.0)
1110            [lenny] - iceape <not-affected> (introduced in 2.0)
1111    
1112    php-net-dnsbl
1113            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1114    
1115    php-onyx-rss
1116            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1117    
1118    php-text-wiki
1119            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1120    
1121    php-xml-rpc
1122            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1123    
1124    polarssl (does not have a shared library)
1125            - pdkim <itp> (embed; bug #543150)
1126            - xyssl <unfixed> (old-version)
1127    
1128    pidgin (libpurple)
1129            - gaim <removed> (old-version)
1130            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1131    
1132    icu
1133            - webkit 1.0.1-1 (embed; bug #547214)
1134            - texlive-bin <unfixed> (fork)
1135            NOTE: texlive upstream working with icu upstream to merge their changes
1136            - chromium-browser 5.0.375.29~r46008-3
1137    
1138    cyrus-imapd-2.2
1139            - kolab-cyrus-imapd <unfixed> (fork)
1140            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1141    
1142    python-cxx-dev
1143            - freecad 0.9.2646.3-1 (embed; bug #547936)
1144    
1145    zipios++
1146            - freecad 0.9.2646.3-1 (embed; bug #547941)
1147            - enigma 0.92.3-3 (embed)
1148            NOTE: likely fixed earlier, marking etch's version as fixed
1149    
1150    linux-2.6
1151            - kvm <removed> (embed; bug #549973) [./kernel/*]
1152            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1153            - kernel-source-2.6.8 <removed> (old-version)
1154            - kernel-source-2.4.27 <removed> (old-version)
1155            - kernel-source-2.4.24 <removed> (old-version)
1156            - kernel-source-2.2.25 <removed> (old-version)
1157            - kernel-source-2.2.20 <removed> (old-version)
1158    
1159    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1160            - kvm <removed> (embed) [./libfdt/*]
1161            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1162    
1163    qweb (not packaged)
1164            - ajaxterm <unfixed>
1165    
1166    opensaml2
1167            - opensaml <removed> (old-version)
1168    
1169    shibboleth-sp2
1170            - shibboleth-sp <removed> (old-version)
1171    
1172    tuxonice-userui
1173            - suspend2-userui <removed> (old-version)
1174    
1175    expat
1176            - w3c-libwww <removed> (embed; bug #551941)
1177            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1178            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1179            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1180            - python2.4 <unfixable> (embed; bug #553403)
1181            - python2.7 2.7-6 (embed)
1182            - python-4suite <unfixed> (embed; bug #516935)
1183            - wxwindows2.4 <removed> (embed)
1184            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1185            - wxwidgets2.8 2.8.10.1-2 (embed)
1186            - celementtree 1.0.5-8 (embed)
1187            NOTE: Maybe that was fixed even earlier
1188            - audacity 1.3.2-1 (embed)
1189            - matanza <unfixed> (embed)
1190            - tdom 0.8.3~20080525-1 (embed)
1191            - udunits 2.1.8-4 (embed)
1192            - apr-util 1.2 (embed)
1193            - ayttm <unfxed> (embed; bug #561006)
1194            - cableswig <unfixed> (embed)
1195            - cadaver <unfixed> (embed)
1196            - cmake 2.6.0-6 (embed)
1197            - coin3 <unfixed> (embed)
1198            - gdcm 2.0.14-2 (embed)
1199            - ghostscript 8.71~dfsg-2 (embed)
1200            - grmonitor <removed> (embed)
1201            - iceape <unfixed> (embed)
1202            - insighttoolkit 3.16.0-1 (embed)
1203            NOTE: insighttoolkit might've been fixed earlier
1204            - libparagui1.1 1.0.2-1 (embed)
1205            - paraview 3.6.2-1 (embed)
1206            - poco 1.3.6p1-1 (embed)
1207            - simgear <unfixed> (embed)
1208            - sitecopy 1:0.16.0-1
1209            - smart <unfixed> (embed)
1210            NOTE: smart embeds celementree, and it includes expat
1211            - swish-e <not-affected> (Linked against libxml, which is used instead)
1212            - tla 1.3.5+dfsg-15 (embed)
1213            - vtk 4.1.20030227-1 (embed)
1214            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1215            - xmlrpc-c <unfixed> (embed)
1216            - iceweasel <unfixed> (embed)
1217            - kompozer <unfixed> (embed)
1218            - vxl 1.13.0-2 (embed)
1219            - xulrunner <unfixed> (embed)
1220            - apache2 2.2 (embed)
1221            - texlive-bin <not-affected> (Embedded code not compiled in)
1222            - vnc4 <unfixed> (embed)
1223            - xotcl 1.6.6-1 (embed)
1224            - chromium-browser 5.0.375.29~r46008-3
1225    
1226    xerces-c
1227            - xerces-c2 <unfixed> (old-version)
1228            - xerces27 <removed> (old-version)
1229    
1230    md5 (RSA's version; not the gnu version provided by coreutils)
1231            - w3c-libwww <removed> (embed; bug #551942)
1232            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1233    
1234    libparagui1.1
1235            - asc <unfixable> (fork)
1236    
1237    enet
1238            - sauerbraten <unfixed> (embed; #497194)
1239    
1240    eglibc
1241            - glibc <removed> (old-version)
1242            - mksh <unfixable> (static)
1243              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1244    
1245    galib
1246            - gamera 3.2.3-1 (embed)
1247    
1248    configobj
1249            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1250            - elisa <unfixed> (embed; bug #555337)
1251            - gaupol <unfixed> (embed; bug #555338)
1252            - ipython <unfixed> (embed; bug #555339)
1253            - pida <unfixed> (embed; bug #555340)
1254            - psychopy <unfixed> (embed; bug #555341)
1255            - rest2web <unfixed> (embed; bug #555342)
1256            - auth2db <unknown> (embed)
1257            - dynagen <unknown> (embed)
1258            - iceweasel <unknown> (embed)
1259            - sabnzbdplus <unknown> (embed)
1260            - xulrunner <unknown> (embed)
1261            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1262    
1263    python-clientform
1264            - bibus <unfixed> (embed; bug #555332)
1265            - zope2.10 <unfixed> (embed; bug #555333)
1266            - zope2.11 <removed> (embed; bug #555334)
1267            - python-mechanize <unknown> (embed)
1268            - twill <unknown> (embed)
1269    
1270    python-mechanize
1271            - zope2.10 <unfixed> (embed; bug #555337)
1272            - zope2.11 <removed> (embed; bug #555338)
1273            - twill <unknown> (embed; bug #555339)
1274    
1275    pexpect
1276            - duplicity 0.6.06-1 (embed; bug #555361)
1277            - hplip <unfixed> (embed; bug #555362)
1278            - smart <unfixed> (embed; bug #555363)
1279    
1280    pyparsing
1281            - bauble <unfixed> (embed; bug #555366)
1282            - boa-constructor 0.6.1-8 (embed; bug #555367)
1283            - calibre <unfixed> (embed; bug #555368)
1284            - matplotlib <unfixed> (embed; bug #531024)
1285            - zhpy 1.7.3.1-1 (embed; bug #555370)
1286            - polybori <unknown> (embed)
1287            - python-whoosh <unknown> (embed)
1288            - twill <unknown> (embed)
1289            - zope-textindexng3 <unknown> (embed)
1290    
1291    python-pysqlite2
1292            - python2.4 <unfixed> (embed; bug #553403)
1293            - python2.5 <unfixed> (embed; bug #553403)
1294    
1295    celementtree
1296            - python2.5 <unfixed> (embed)
1297            - smart <unfixed> (embed)
1298    
1299    elementtree
1300            - python2.5 <unfixed> (embed)
1301            - python2.6 <unfixed> (embed)
1302            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1303            - gedit 2.28.2-1 (embed; bug #555344)
1304            - smart <unfixed> (embed)
1305            - solfege <unfixed> (embed; bug #555345)
1306            - w3af <unfixed> (embed; bug #555346)
1307            - python-qt4 <unknown> (embed)
1308            - sphinx <unknown> (embed)
1309            - python-nltk <itp> (embed)
1310    
1311    python2.5
1312            - python2.4 <unfixed> (old-version)
1313            - jython <unfixed> (embed)
1314            NOTE: embeds many stdlib modules
1315            - python-django <unfixed> (embed; bug #555419)
1316            NOTE: embeds stdlib modules: doctest, decimal
1317            - gamera 3.2.3-1 (embed)
1318            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1319            - boa-constructor <unfixed> (embed; bug #555426)
1320            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1321            - nicotine <unfixed> (embed; bug #555427)
1322            NOTE: embeds stdlib modules: ConfigParser
1323            - museek+ <unfixed> (embed; bug #555428)
1324            NOTE: embeds stdlib modules: ConfigParser
1325            - vegastrike-data <removed> (embed)
1326            NOTE: embeds many stdlib modules
1327            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1328            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1329            - config-manager <unfixed> (embed; bug #555423)
1330            NOTE: embeds stdlib modules: optparse
1331            - jhbuild 2.28.0-1 (embed; bug #555421)
1332            NOTE: embeds stdlib modules: optparse, subprocess
1333            - smart <unfixed> (embed; bug #555432)
1334            NOTE: embeds stdlib modules: optparse
1335            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1336            NOTE: embeds stdlib modules: doctest
1337            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1338            NOTE: embeds stdlib modules: doctest
1339            - distribute <unfixed> (embed)
1340            NOTE: embeds stdlib modules: doctest
1341            - python-setuptools <unfixed> (embed; bug #555435)
1342            NOTE: embeds stdlib modules: doctest
1343            - zope.testing <unfixed> (embed; bug #555436)
1344            NOTE: embeds stdlib modules: doctest
1345            - translate-toolkit <unfixed> (embed; bug #555422)
1346            NOTE: embeds stdlib modules: textwrap, contextlib
1347            - libtpclient-py <unfixed> (embed; bug #555424)
1348            NOTE: embeds stdlib modules: subprocess
1349            - grass <unfixed> (embed; bug #555425)
1350            NOTE: embeds stdlib modules: subprocess
1351            - coherence <unfixed> (embed; bug #555429)
1352            NOTE: embeds stdlib modules: uuid
1353            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1354            NOTE: embeds stdlib modules: uuid
1355            - setroubleshoot <removed> (embed; bug #555431)
1356            NOTE: embeds stdlib modules: uuid
1357            - linkchecker <unfixed> (embed; bug #555414)
1358            NOTE: embeds msgfmt.py script
1359            - imdbpy <unfixed> (embed)
1360            NOTE: embeds msgfmt.py script
1361            - kiwi <unfixed> (embed)
1362            NOTE: embeds msgfmt.py script
1363            - moin <unfixed> (embed)
1364            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1365            - plone3 <removed> (embed)
1366            NOTE: embeds msgfmt.py script
1367            - roundup <unfixed> (embed)
1368            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1369            - rednotebook <unfixed> (embed; bug #555415)
1370            NOTE: embeds msgfmt.py script
1371            - turbogears <unfixed> (embed)
1372            NOTE: embeds msgfmt.py script
1373            - elisa <unfixed> (embed)
1374            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1375            - calibre <unfixed> (embed)
1376            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1377            - mailman 1:2.1.13-1 (embed; #555416)
1378            NOTE: embeds msgfmt.py script
1379            - python-docutils <unknown> (embed)
1380            NOTE: embeds stdlib modules: optparse, textwrap
1381            - python-imaging <unknown> (embed)
1382            NOTE: embeds stdlib modules: doctest
1383            - python-mechanize <unknown> (embed)
1384            NOTE: embeds stdlib modules: doctest
1385            - twill <unknown> (embed)
1386            NOTE: embeds stdlib modules: subprocess
1387            - zeroc-ice <unknown> (embed)
1388            NOTE: embeds stdlib modules: subprocess
1389            - wxwidgets2.8 <unknown> (embed)
1390            NOTE: embeds stdlib modules: subprocess
1391            - cycle <unknown> (embed)
1392            NOTE: embeds msgfmt.py script
1393            - deluge <unknown> (embed)
1394            NOTE: embeds msgfmt.py script
1395            - opendict <unknown> (embed)
1396            NOTE: embeds msgfmt.py script
1397            - openerp-client <unknown> (embed)
1398            NOTE: embeds msgfmt.py script
1399            - rapidsvn <unknown> (embed)
1400            NOTE: embeds msgfmt.py script
1401            - wammu <unknown> (embed)
1402            NOTE: embeds msgfmt.py script
1403            - gaphor <unknown> (embed)
1404            NOTE: embeds msgfmt.py script
1405            - pida <unknown> (embed)
1406            NOTE: embeds msgfmt.py script
1407            - python-formencode <unknown> (embed)
1408            NOTE: embeds msgfmt.py script
1409            - duplicity <unfixed> (embed)
1410            NOTE: embeds stdlib module: urlparse, tarfile
1411            - pygopherd <unfixed> (embed)
1412            NOTE: embeds stdlib module: zipfile
1413    
1414    argparse
1415            - twill <unfixed> (embed; bug #555347)
1416            - ipython <unfixed> (embed; bug #555348)
1417    
1418    coherence
1419            - elisa <unfixed> (embed; bug #555335)
1420    
1421    simpletal
1422            - plastex <unfixed> (embed; bug #555371)
1423    
1424    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1425            - postr <unfixed> (embed)
1426            - elisa <unfixed> (embed)
1427    
1428    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1429            - apertium-tolk <unfixed> (embed)
1430            - ipython <unfixed> (embed)
1431            - virtaal <unfixed> (embed)
1432    
1433    distribute
1434            - setuptools <removed> (old-version)
1435    
1436    rails
1437            - jruby1.2 <removed> (embed) [./bench/rails/*]
1438            NOTE: jruby is in non-free, it probably includes rails too
1439            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1440            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1441            - thin <unfixed> (embed) [./spec/rails_app/*]
1442            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1443            NOTE: be dangerous if developers are naively basing their code off of the examples
1444            NOTE: prototype.js is among the example files
1445    
1446    lucene2 (prototype.js is among the embeds in the following)
1447            - lucene <unfixed> (old-version)
1448            - pylucene <unfixed> (embed)
1449            - libpdfbox-java <unfixed> (embed)
1450            - libfontbox-java <unfixed> (embed)
1451            - libjempbox-java <unfixed> (embed)
1452            - solr <unfixed> (embed)
1453    
1454    unicode-data
1455            - syslinux <unfixed> (embed)
1456            - camomile <unfixed> (embed)
1457            - fribidi <unfixed> (embed)
1458            - m17n-db <unfixed> (embed)
1459            - sbcl <unfixed> (embed)
1460            - heimdal <unfixed> (embed)
1461            - icu <unfixed> (embed)
1462            - icu4j <unfixed> (embed)
1463            - krb5 <unfixed> (embed)
1464            - moodle <unfixed> (embed)
1465            - openldap <unfixed> (embed)
1466            - pike7.6 <unfixed> (embed)
1467            - samba <unfixed> (embed)
1468            - samba4 <unfixed> (embed)
1469            - cmucl <unfixed> (embed)
1470            - typo3-src <unfixed> (embed)
1471            - mauve <unfixed> (embed)
1472            - texlive-bin <unfixed> (embed)
1473            - ypsilon <unfixed> (embed)
1474            - jeuclid <unfixed> (embed)
1475            - charmap.app <unfixed> (embed)
1476            - clisp <unfixed> (embed)
1477            - gnulib <unfixed> (embed)
1478            - opensrs-client <unfixed> (embed)
1479            - saxonb <unfixed> (embed)
1480            - rails <unfixed> (embed)
1481    
1482    feedparser
1483            - rawdog <unfixed> (embed; bug #383422)
1484            - miro <unfixed> (embed; bug #555351)
1485            - calibre <unfixed> (embed; bug #555352)
1486            - freevo <unfixed> (embed; bug #555353)
1487            - pida <unfixed> (embed; bug #555354)
1488            - planet-venus <unfixed> (embed; bug #555355)
1489            - plone3 <removed> (embed; bug #555356)
1490            - exaile 0.2.14+debian-1 (embed)
1491            - screenlets 0.1.2-3 (embed)
1492            NOTE: included twice
1493    
1494    agg:
1495            - matplotlib <unfixed> (embed: bug #377271)
1496            - contextfree <unfixed> (embed)
1497            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1498            - exactimage <unfixed> (embed)
1499            - python-enable <unfixed> (embed)
1500            - mapnik 0.5.1-3 (embed)
1501            NOTE: links statically to agg, but shared library is not available (bug #377271)
1502    
1503    vtk
1504            - paraview <unfixable> (embed; bug #495426)
1505    
1506    txt2tags
1507            - rednotebook <unfixed> (embed)
1508    
1509    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1510            - gajim <unfixed> (embed)
1511            - emesene <unfixed> (embed)
1512            - convirt <unfixed> (embed)
1513            - pida <unfixed> (embed)
1514            - rednotebook <unfixed> (embed)
1515    
1516    horde3 (prototype.js is among the embeds in the following)
1517            - mnemo2 <unfixed> (embed)
1518            - nag2 <unfixed> (embed)
1519            - wordpress <unfixed> (embed)
1520            NOTE: Text_Diff (wp-includes/Text/Diff*)
1521    
1522    cimg
1523            - gmic <unfixed> (embed)
1524    
1525    mootools
1526            - kdenetwork <unfixed> (embed)
1527            - gallery <unfixed> (embed)
1528            - jspwiki <unfixed> (embed)
1529            - vdr-plugin-live <unfixed> (embed)
1530            - perl-doc-html <unfixed> (embed)
1531    
1532  libsigc++-2.0:  openldap
1533  ardour          - openldap2.3 <removed> (old-version)
1534    
1535  soundtouch:  grub2
1536  ardour          - grub <unfixed> (old-version)
1537    
1538  libmms:  gnupginterface
1539  xine-lib          - duplicity <unfixed> (embed)
 mimms  
1540    
1541  FCKeditor:  python-dateutil
1542  knowledgeroot          - awn-extras-applets <unfixed> (embed)
1543  moin          - matplotlib <unknown> (embed)
1544  karrigell  
1545  gforge-plugins-extra  cups
1546            - cupsys <removed> (old-version)
1547  Moodle contains lots of things:  
1548  AdoDB  yui
1549  AdoDB-XML Schema          - bcfg2 <not-affected> (present in source but not included in any binary files)
1550  ipatlas          - serendipity 1.5.3-1 (embed; bug #557746)
1551  PHPMailer          - moodle 1.8.2.dfsg-5 (embed)
1552  Smarty          - jifty 0.91117-1 (embed; bug #557748)
1553  htmlArea          - webgui 7.7.26-1 (embed)
1554  TinyMCE          - loggerhead 1.17-1 (embed)
1555  bennu          - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1556    
1557    quake3 (vanilla source not packaged in debian)
1558            - openarena <unfixable> (fork)
1559    
1560    quake2 (vanilla source not packaged in debian)
1561            - alien-arena <unfixable> (fork)
1562            - warsow <unfixable> (fork)
1563    
1564    libtheora
1565            - iceweasel <not-affected> (uses xulrunner)
1566            - xulrunner <unfixed> (embed; bug #540959)
1567            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1568            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1569            - iceape <unfixed> (embed; bug #559276)
1570            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1571            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1572    
1573    dtoa
1574            - bfilter <unfixed> (embed)
1575            - cacao <removed> (embed)
1576            - cdrdao <unfixed> (embed)
1577            - classpath <unfixed> (embed)
1578            - freej <unfixed> (embed)
1579            - iceape <unfixed> (embed)
1580            - iceweasel <unfixed> (embed)
1581            - jscoverage <unfixed> (embed)
1582            - kde4libs <unfixed> (embed)
1583            - kdelibs <unfixed> (embed)
1584            - kompozer <unfixed> (embed)
1585            - libv8 <unfixed> (embed)
1586            - mono <unfixed> (embed)
1587            - newlib <unfixed> (embed)
1588            - nspr <unfixed> (embed)
1589            - php5 <unfixed> (embed)
1590            - polyml <unfixed> (embed)
1591            - qt4-x11 <unfixed> (embed)
1592            - rhino <unfixed> (embed)
1593            NOTE: code translated to Java
1594            - ruby1.8 <unfixed> (embed)
1595            - ruby1.9 <unfixed> (embed)
1596            - ruby1.9.1 <unfixed> (embed)
1597            - sdd <unfixed> (embed)
1598            - sfind <unfixed> (embed)
1599            - star <unfixed> (embed)
1600            - tinymux <unfixed> (embed)
1601            - virtualbox-ose <unfixed> (embed)
1602            - webkit <unfixed> (embed)
1603            - xulrunner <unfixed> (embed)
1604    
1605    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1606            - firegpg <unfixed> (embed)
1607            - enigmail <unfixed> (embed)
1608    
1609    ptmalloc (not packaged in Debian)
1610            - crystalspace <unfixed> (embed)
1611            - qt4-x11 <unfixed> (embed)
1612    
1613    svgalib
1614            - usplash <unfixed> (embed)
1615    
1616    bogl
1617            - usplash <unfixed> (embed)
1618    
1619    taglist
1620            - usplash <unfixed> (embed)
1621    
1622    portaudio
1623            - audacity <unfixed> (embed; bug #323711)
1624    
1625    nyquist
1626            - audacity <unfixed> (embed)
1627            NOTE: embeds a forked nyquist with support for a shared library
1628    
1629    vamp-plugin-sdk
1630            - audacity <unfixed> (embed)
1631    
 TinyMCE:  
1632  wordpress  wordpress
1633  moodle          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1634  knowledgeroot          - wordpress-mu <removed> (fork)
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
1635    
1636  gzip:  php5
1637  linux-kernel (lib/inflate.c)          - php4 <removed> (old-version)
 klibc (based on linux-kernel gzip code)  
 busybox  
1638    
1639  neon:  classpath
1640  cadaver (all, but being worked on: #188381)          - libgnucrypto-java <removed> (embed; bug #559788)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
1641    
1642  libmodplug:  libtool
1643  gst-plugins-bad0.10          - apr <unfixed> (static; bug #489625)
1644            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1645            - arts <unfixed> (embed)
1646            - bochs 2.4.2-1 (embed; bug #560884)
1647            - camserv <unfixed> (embed)
1648            - collectd 4.8.2-1 (embed)
1649            - courier-authlib 0.58-4 (embed)
1650            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1651            - cvsnt 2.5.04.3236-1.2 (embed)
1652            - dico <not-affected> (Uses the system copy of ltdl)
1653            - freeradius 0.1+20010527-1 (embed)
1654            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1655            - ggobi 2.1.9~20091212-1 (embed)
1656            - glame 2.0.1-4 (embed)
1657            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1658            - gnash 0.8.7-2 (embed)
1659            - gnu-smalltalk <unfixed> (embed; bug #566777)
1660            - google-gadgets 0.10.5-0.3 (embed)
1661            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1662            - graphicsmagick 1.3.5-6 (embed)
1663            - graphviz 2.8-3 (embed)
1664            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1665            - guile-1.6 1.6.8-7 (embed)
1666            - hamlib 1.2.11-1 (embed)
1667            - hercules 3.06-1.2 (embed)
1668            - jags 1.0.4-3 (embed; bug #560864)
1669            - kdelibs <unfixed> (embed)
1670            - libannodex <removed> (embed)
1671            - libextractor 0.5.23+dfsg-4 (embed)
1672            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1673            - libtunepimp 0.5.3-7.3 (embed)
1674            - mp4h 1.3.1-4.1 (embed)
1675            - naim <removed> (embed)
1676            - parser-mysql <unfixed> (embed)
1677            - pinball 0.3.1-11 (embed)
1678            - redland <unfixed> (embed)
1679            - siproxd <unfixed> (embed)
1680            - ski <unfixed> (embed)
1681            - synfig 0.62.00-1 (embed)
1682            - unixodbc 2.2.4-5 (embed)
1683            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1684            - clamav 0.95+dfsg-1 (embed)
1685            - imagemagick 6:6.2.3.1-1 (embed)
1686            - hypre 2.4.0b-5 (embed)
1687            - lam <unfixed> (embed)
1688            - openmpi <unfixable> (embed; bug #559386)
1689            - parser <unfixed> (embed)
1690            - pdsh 2.18-5 (embed; bug #560892)
1691            - sbnc 1.2-8 (embed)
1692            - sdcc <unfixed> (embed)
1693            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1694            - proftpd-dfsg <unfixed> (embed; bug #561748)
1695            - babel 1.4.0.dfsg-5 (embed)
1696            - libprelude 0.9.14-2 (embed)
1697            - heartbeat 2.1.4-7 (embed)
1698            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1699            NOTE: might've been fixed earlier
1700            - gcc-* <unknown> (embed)
1701    
1702    ocamlgsl
1703            - orpie 1.5.1-7.1 (embed; bug #550058)
1704    
1705    xdotool
1706            - keynav <unfixed> (embed; bug #560103)
1707    
1708    bulletphysics (not packaged; http://www.bulletphysics.org/)
1709            - supertuxkart <unfixed> (embed)
1710            - blender <unfixed> (embed)
1711    
1712  libvncserver:  ghostscript
1713  vino          - gs-gpl <removed> (old-version)
1714    
1715  putty:  icedove
1716  filezilla          - thunderbird <removed> (old-version)
1717    
1718  tinyxml (not packaged in Debian):  sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1719  filezilla          - jquery <unfixed> (embed)
1720    
1721  gv:  sed
1722  evince (ps/ tree from gv 3.5.8)          - ssed <unfixed> (fork)
 evince-gtk (not packaged in Debian)  
1723    
1724  libXbae:  phpatomlib (http://code.google.com/p/phpatomlib)
1725  libpawlib2-lesstif package (from Cernlib)          - wordpress <unfixed> (embed)
1726    
1727    Services_JSON (http://pear.php.net/package/Services_JSON)
1728            - wordpress <unfixed> (embed)
1729    
1730    phpass (http://www.openwall.com/phpass/)
1731            - gallery2 <unfixed> (embed)
1732            - wordpress <unfixed> (embed)
1733            - typo3-src <unfixed> (modified-embed)
1734            NOTE: file refers to drupal, maybe there's a copy somewhere there
1735            NOTE: a copyright owner search didn't match anything
1736            - libauthen-passphrase-perl <unfixable> (fork)
1737            NOTE: perl implementation of phpass
1738    
1739    squirrelmail
1740            - wordpress <unfixed> (embed)
1741            NOTE: class-pop3.php
1742    
1743    ezSQL (http://www.woyano.com/jv/ezsql)
1744            - wordpress <unfixable> (fork)
1745            NOTE: wp-db.php
1746    
1747    Diff.php (Clay Loveless' version/killersoft.com)
1748            - php-versioncontrol-svn <unfixed>
1749    
1750    libm (provided by libc)
1751            - spring <unfixed> (embed)
1752            NOTE: embedded by embedded copy of streflop
1753            - aide <unfixed> (static)
1754            - busybox <unfixed> (static)
1755            - mindi-busybox <unfixed> (static)
1756            - qemu <unfixed> (static)
1757            NOTE: qemu-user-static
1758            - tuxonice-userui <unfixed> (static)
1759            - zsh <unfixed> (static)
1760            NOTE: zsh-static
1761            - tripwire <unfixed>
1762    
1763    streflop
1764            - spring <unfixed> (embed)
1765    
1766  libXaw:  minizip
1767  libpawlib2-lesstif package (from Cernlib)          - spring <unfixed> (embed)
1768    
1769  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  oscpack
1770            - spring <unfixed> (embed)
1771    
1772  libgd2:  hpiutil2
1773  graphviz (lib/gd seems to be 2.0.33)          - spring <unfixed> (embed)
1774    
1775  rar:  p7zip
1776  unrar-nonfree          - spring <unfixed> (embed)
1777    
1778  unrar-free: (maybe this code is derived from the original rar, too?)  pythonqt (doesn't seem to be python-qtN, unknown source)
1779  clamav (seems to be disabled in default config)          - fontmatrix <unfixed> (embed)
1780            - elmerfem <unfixed> (embed)
1781    
1782  mplayer (DirectMedia Object loader):  iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1783  xine-lib (src/libw32dll/)          - docvert <unfixed> (embed)
1784  vlc (modules/codec/dmo/)          - jifty <unfixed> (embed)
1785            - kdenetwork <unfixed> (embed)
1786            - mediatomb <unfixed> (embed)
1787            - plastex <unfixed> (embed)
1788            - plone3 <removed> (embed)
1789            - python-chaco <unfixed> (embed)
1790            - python-docutils <unfixed> (embed)
1791            - s5 <unfixed> (embed)
1792            - zope2.10 <unfixed> (embed)
1793            - zope2.11 <removed> (embed)
1794            - cython <not-affcted> (embed)
1795            NOTE: part of documentation, which is not installed into the binary package
1796    
1797  libwpd (WordPerfect converter):  python-docutils
1798  openoffice.org          - zope2.10 <unfixed> (embed)
1799            - zope2.11 <removed> (embed)
1800    
1801  fsplib (http://sourceforge.net/projects/fsp/):  tesseract
1802  gftp (lib/fsplib version 0.3)          - ocropus <unfixed> (static)
1803    
1804  librpcsecgss:  antlr
1805  krb5          - kdevelop <unfixed> (embed)
1806    
1807  jasper:  libxerces2
1808  ghostscript          - openjdk-6 <unfixed> (embed)
 gs-gpl  
1809    
1810  libidn:  kfreebsd-8
1811  monotone          - kfreebsd-7 <unfixed> (old-version)
1812            - kfreebsd-6 <removed> (old-version)
1813    
1814  liblua:  ruby1.9.1
1815  monotone          - ruby1.9 <unfixed> (old-version)
1816            - ruby1.8 <unfixed> (old-version)
1817    
1818  libbotan:  maildrop
1819  montone          - courier <unfixed> (embed) [./maildrop]
1820    
1821  NetXX:  glee
1822  monotone          - warzone2100 <not-affected> (embed)
1823    
1824  libgc:  phing
1825  mono          - symfony <unfixed> (embed)
1826    
1827  lzma:  pake
1828  p7zip          - symfony <unfixed> (embed)
1829    
1830  lzo:  propel
1831  grub2          - symfony <unfixed> (embed)
1832    
1833  pax code:  creole
1834  tar          - symfony <unfixed> (embed)
1835  cpio  
1836    hfsutils
1837            - cdrkit <unfixed> (embed; bug #570187)
1838            NOTE: embeds hfsutils code in genisoimage
1839    
1840    cdrkit
1841            - grub2 <unfixed> (embed; bug #570156)
1842            NOTE: genisoimage imported into grub-mkisofs
1843    
1844    kdebase-workspace
1845            - kdebase <unfixed> (old-version)
1846    
1847    file
1848            - php5 <unfixable> (modified-embed)
1849            [lenny] - php5 <not-affected>
1850    
1851    cdb
1852            - php5 <unfixed> (embed)
1853    
1854    libmbfl (itp: #570708)
1855            - php5 <unfixed> (embed)
1856            NOTE: PHP is actually the current upstream, ITP is of that code
1857    
1858    libonig
1859            - php5 5.3.2-1 (embed)
1860    
1861    xmlrpc-epi
1862            - php5 <unfixed> (embed)
1863    
1864    swt-gtk
1865            - eclipse <unfixed> (embed; bug #538808)
1866    
1867    txt2html
1868            - wml 2.0.11ds2-1 (embed)
1869    
1870    ca-certificates
1871            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1872    
1873    openexr
1874            - freeimage <unfixed> (embed)
1875    
1876    libmng
1877            - freeimage <unfixed> (embed)
1878    
1879    openjpeg
1880            - freeimage <unfixed> (embed)
1881    
1882    libjpeg6b
1883            - freeimage <unfixed> (embed)
1884    
1885    libjpeg (don't know what exact version)
1886            - dcmtk <unfixed>
1887            - gdcm <unfixed>
1888            - insighttoolkit <unfixed>
1889            - openarena <unfixed> (bug #495966)
1890            - outguess <unfixed>
1891            - squeak-vm <unfixed> (embed)
1892            - tremulous <unfixed>
1893            - tuxonice-userui <unfixed> (static)
1894            - fpc <unfixed> (static)
1895            - lazarus <unfixed> (static)
1896            NOTE: inherited from fpc, see #472304
1897            - mseide-msegui <unfixed> (static)
1898            NOTE: inherited from fpc, see #472304
1899            - easymp3gain <unfixed> (static)
1900            NOTE: inherited from fpc, see #472304
1901            - winff <unfixed> (static)
1902            NOTE: inherited from fpc, see #472304
1903            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1904    
1905    
1906    lxr
1907            - lxr-cvs <unfixed> (embed)
1908    
1909    libfile-copy-recursive-perl
1910            - r-base <unfixed> (embed; bug #577427)
1911            - r-base-core-ra <unfixed> (embed; bug #577429)
1912    
1913    delimmatch
1914            - r-base <unfixed> (embed; bug #577433)
1915            - r-base-core-ra <unfixed> (embed; bug #577434)
1916    
1917    libsmf (ITP: #572558)
1918            - denemo <unfixed> (embed)
1919            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1920    
1921    libselinux
1922            - dpkg 1.15.6 (static)
1923    
1924    xinha (ITP: #479708)
1925            - horde3 <unfixed>
1926            - serendipity <unfixed>
1927            - openacs <unfixed>
1928            - dotlrn <unfixed>
1929    
1930    dvipng
1931            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1932    
1933    dvipdfmx
1934            - texlive-bin <unfixed> (embed)
1935            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1936    
1937    lcdf-typetools
1938            - texlive-bin 2009-1 (embed)
1939    
1940    tex4ht
1941            - texlive-bin 2009-1 (embed)
1942    
1943    freetype
1944            - texlive-bin 2009-1 (embed)
1945    
1946    freetype2
1947            - texlive-bin 2009-1 (embed)
1948    
1949    silgraphite
1950            - texlive-bin <unfixed> (embed)
1951    
1952    unzip
1953            - texlive-bin 2009-1 (embed)
1954    
1955    jbig2dec
1956            - ghostscript 8.71~dfsg2-1 (embed)
1957    
1958    libxml2
1959            - chromium-browser 5.0.375.29~r46008-1
1960    
1961    protobuf
1962            - chromium-browser 5.0.375.70~r48679-2
1963    
1964    libv8
1965            - chromium-browser 5.0.375.38~r46659-1
1966    
1967    nspr
1968            - chromium-browser 5.0.375.29~r46008-3
1969    
1970    yasm
1971            - chromium-browser 5.0.375.29~r46008-2
1972    
1973    libxslt
1974            - chromium-browser 5.0.375.29~r46008-1
1975    
1976    miniupnpc (not packaged in Debian; ITP bug #444392)
1977            - warzone2100 <unfixed> (embed)
1978    
1979    iniparser (not packaged in Debian; RFP bug #582657)
1980            - warzone2100 <unfixed> (modified-embed)
1981    
1982    pyglet
1983            - sympy <unfixed> (embed; bug #459716)
1984    
1985    mpmath
1986            - sympy <unfixed> (embed; bug #541746)
1987    
1988    curl
1989            - criticalmass <unfixed> (static; bug #599061)

Legend:
Removed from v.7279  
changed lines
  Added in v.15418

  ViewVC Help
Powered by ViewVC 1.1.5