/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1593 by jmm-guest, Tue Aug 16 08:15:41 2005 UTC revision 15503 by silvio-guest, Sat Oct 23 01:10:52 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
 kdegraphics/kpdf  
 tetex-bin  
 cupsys (only older releases, recent ones use xpdf-utils)  
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  zlib code: (separate between 1.2 and 1.1)  status: version number fixing the embedded copy
14  dpkg          <unfixed> if the issue is not yet fixed
15  rsync          <removed> if the package was removed from the archive
16  mozilla-firefox          <itp> if the package is in the process of being packaged
17  mozilla(?)          <not-affected> if the package does not use the embedded copy
18  Linux kernels          <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26    The srcpkg might be some string to identify the code if there is no
27    specific source package.
28    
29  libgadu/ekg:  Everything up to the next line is ignored.
30  centericq  ---BEGIN
31  gaim  poppler
32  kopete (ships the code, but links dynamically in the Debian package)          - pdftohtml <unknown>
33            [sarge] - pdftohtml <unfixed>
34            [etch] - pdftohtml <unfixed>
35            NOTE: has been replaced by poppler-utils
36            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37            - texlive-base 3.0-12 (embed)
38            - texlive-bin 2007-1 (embed)
39            - koffice 1:2.0.0-1 (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53  xmlrpc: (which package is the "origin" of this code?)  ppmd
54  drupal          - libcomplearn-mod-ppmd <unfixed> (fork)
55  phpgroupware          NOTE: discussion in #458152
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60            - dnsproxy <unknown> (embed)
61    
62  shtool: (affects build-time only)  lrmi
63  mysql-ocaml          - read-edid 2.0.0-1 (embed; bug #495131)
64  php4          - s3switch <unfixed> (embed)
65            - xresprobe <unfixed> (embed)
66            - zhcon <unfixed> (embed)
67    
68    php-htmlpurifier
69            - mahara 1.2.5-1 (embed)
70            - knowledgeroot 0.9.9.5-5 (embed)
71            - moodle <unfixed> (embed)
72    
73  mozilla:  peercast
74  mozilla-firefox          - gnome-peercast <removed> (embed)
75  mozilla-thunderbird          [etch] - gnome-peercast <unfixed> (embed)
 nvu  
76    
77    silc-toolkit
78            - silc-client 1.1~beta6-1 (embed)
79    
80  xli:  icclib
81  xloadimage          - ghostscript <unfixed> (embed)
82            - argyll <unfixed> (embed)
83    
84    libusb
85            - argyll <unfixed> (embed)
86    
87  lesstif: (beware: two different lesstif APIs supported in one package, 1.2 discarded upstream)  dietlibc
88  openmotif          - ccontrol 0.9.1+20071204-1 (static)
89  xfree86/xorg (in libxpm, still the case with x.org?          - mksh <unfixable> (static)
90            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
91    
92    libmikmod
93            - sdl-mixer1.2 <unfixed> (embed)
94            TODO: report bug
95    
96  kerberized apps with BSD origin:  libiax
97  krb4          - iaxmodem <unfixable> (embed; bug #548885)
 krb5  
 heimdal  
98    
99    spandsp
100            - iaxmodem <unfixable> (embed; bug #548885)
101    
102  grip: (which pkg is the origin?)  python-paramiko
103  libcdaudio          - fabric 0.9.0-2 (embed; bug #561398)
104  grip  
105  gnome-vfs (vfs2 as well?)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
106            - dpkg 1.15.6 (static)
107            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
108            - rsync <unfixed> (embed)
109            - cherokee <unfixed> (embed)
110            NOTE: somehow derived code base
111            - mono <unfixed> (embed)
112            TODO: check mozilla
113            - Linux kernels <unfixed> (embed)
114            - pvpgn 1.7.8-2 (embed)
115            - mrtg 2.12.2-1 (embed)
116            - rpm <unknown> (embed)
117            NOTE: pinged anibal since when rpm was fixed
118            - tuxcmd-modules <unfixed> (embed)
119            - zsync <unfixed>
120            - tra <unfixed>
121            - sash <unfixed>
122            - nsis <unfixed>
123            - pyfits 1:2.3.1-1
124            - mseide-msegui <unfixed>
125            NOTE: mseide
126            - mirrordir <unfixed>
127            - poco <unfixed>
128            - klibc <unfixed>
129            - emboss <unfixed>
130            - ghostscript <unfixed>
131            - freeimage <unfixed>
132            - clamav <unfixed> (fork)
133            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
134            - tuxonice-userui <unfixed> (static)
135            - plt-scheme <unfixed>
136            - perl <unfixed>
137            - paraview <unfixed>
138            - velvet 0.7.56~nozlibcopy-1
139            - gcvs <unfixed>
140            - dump <unfixed>
141            - aide <unfixed> (static)
142            - dar <unfixed> (static)
143            - avfs <unfixed>
144            - fpc <unfixed>
145            - winff <unfixed>
146            NOTE: inherited from fpc, see #472304
147            - lazarus <unfixed>
148            NOTE: inherited from fpc, see #472304
149            - erlang <unfixed> (embed)
150            - gamera 3.2.3-1 (embed)
151            - python2.4 <unfixed> (embed; bug #553403)
152            - python2.5 <unfixed> (embed; bug #553403)
153            - texlive-bin <unknown> (embed)
154    
155    dulwich
156            - hg-git 0.1.0-1 (embed; bug #541996)
157    
158    libvigraimpex
159            - hugin <unfixed> (embed; bug #542259)
160            - enblend-enfuse <unfixed> (embed; bug #542258)
161            - gamera 3.2.3-1 (embed)
162    
163    libbz2
164            - dpkg 1.15.6 (static)
165            - amd64-libs <unfixed> (static)
166            NOTE: let's call it "static"
167            - dar <unfixed> (static)
168            - dump <unfixed> (static)
169            - unalz 0.64-1 (embed)
170            NOTE: has code, by the maint, to use the system version but links against the internal copy
171            - clamav <unfixed> (embed)
172            NOTE: libclamav/nsis/bzlib*
173            - pristine-tar <unfixable> (modified-embed)
174            NOTE: compression code only, not uncompression
175            - r-base-core-ra 1.2.8 (static)
176            - r-base-core 2.11.1 (static)
177            NOTE: links dynamically in squeeze, statically in lenny
178            - rpm <unfixed> (static)
179            NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
180    
181    libyahoo2
182            - centerim <unfixed> (embed; bug #559783)
183    
184    libmsn
185            - centerim <unfixed> (embed; bug #559783)
186    
187    libgadu
188            - centerim <unfixed> (embed; bug #559783)
189            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
190            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
191            - kdenetwork 4:3.3.2-5 (embed)
192            NOTE: from kdenetwork: kopete
193            - ekg 1:1.8~rc0-1 (embed)
194            - kadu 0.6.0.2-3 (embed; bug #504430)
195            - gadu <itp> (embed)
196    
197    xmlrpc (which package is the "origin" of this code?)
198            - drupal <unfixed> (embed)
199            - phpgroupware <unfixed> (embed)
200            - egroupware <unfixed> (embed)
201            - phpwiki <unfixed> (embed)
202            - php4 <removed> (embed)
203            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
204    
205    shtool (affects build-time only)
206            - mysql-ocaml <unfixed> (embed)
207            - php4 <removed> (embed)
208            - php5 <unfixed> (embed)
209    
210    xulrunner
211            - iceape <unfixed> (embed; bug #561749)
212            - iceweasel 2.0.0.19 (embed)
213            - icedove <unfixed> (embed; bug #561750)
214            - kompozer <unfixed> (embed; bug #532168)
215            - galeon 2.0.2-4 (embed)
216            - epiphany-browser 2.14.3-8 (embed)
217            - conkeror 0.9~git080629-2 (embed)
218            - kazehakase 0.4.2-1 (embed)
219    
220    xli
221            - xloadimage <unfixed> (embed)
222    
223    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
224            - openmotif <unfixed> (embed)
225    
226    libxpm
227            - lesstif2 <unfixed> (embed; bug #575750)
228    
229    kerberized apps with BSD origin
230            - krb4 <removed> (embed)
231            - krb5 <unfixed> (embed)
232            - heimdal <unfixed> (embed)
233    
234    grip (which pkg is the origin?)
235            - libcdaudio <unfixed>
236            - grip <unfixed>
237            - gnome-vfs <unfixed>
238            TODO: check vfs2 as well
239    
240    fudforum
241            [etch] - phpgroupware <unfixed> (embed)
242            NOTE: phpgroupware-fudforum
243            [sarge] - egroupware-fudforum <removed> (embed)
244    
245    libbsd
246            - rdate 1:1.2-3 (embed)
247            - atheme-services <unfixed>
248            - libbsd-arc4random-perl <not-affected> (modified-embed)
249            NOTE: code not used, it links dynamically against libbsd instead
250            - isakmpd <unfixed>
251            - bsdgames <unfixed> (embed)
252            - bsd-mailx <unfixed> (embed)
253            - netcat-openbsd <unfixed> (embed; bug #550611)
254            - openssh <unfixed> (embed)
255            - unworkable <unfixed> (embed)
256            - mksh <unfixed> (modified-embed)
257            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
258            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
259            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
260    
261    cvs
262            - gcvs <unfixed> (embed)
263            NOTE: see cvsunix/src in tarball
264    
265    pcre3
266            - php4 <removed> (embed)
267            - analog 2:5.23-0woody1 (embed)
268            - goffice <unfixed> (embed)
269            NOTE: libgoffice-*
270            - vfu 4.06-4.1 (embed; bug #450754)
271            - tf5 5.0beta7-1 (embed)
272            - monotone 0.43-1 (embed)
273            NOTE: this only affects versions >= 0.37
274            - glib2.0 2.15.2-1 (embed)
275            - apache2 2.0.53-4 (embed)
276            - exim4 4.10-0.srh20.12 (embed)
277            - yacas <unfixed> (embed)
278            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
279            - gtamsanalyzer.app 0.42-5 (embed)
280            - tin 980117-1 (embed)
281            - kazehakase 0.5.2-1
282            - webkit 1.0.1-1 (embed)
283            - qt4-x11 <unfixed> (embed)
284            NOTE: embedded via webkit copy
285            - erlang <unfixed> (embed)
286            - ssed <unfixed> (embed)
287            - ircd-hybrid <unfixed> (static)
288            - emboss <unfixd>
289            - cherokee <unfixed> (embed)
290            - oftc-hybrid 1.6.9.dfsg-1 (embed)
291            - ratbox-services <unfixed> (embed)
292            - squeak-vm <unfixed> (embed)
293            - tinymux <unfixed> (embed)
294    
295    tiff
296            - wxwindows2.4 2.2.1 (embed)
297            - gamera 3.2.3-1 (embed)
298            - freeimage <unfixed> (embed)
299            - libtk-img <unfixed> (embed)
300            NOTE: there are two copies, one under tiff/ other under libtiff/
301            - gdal <unfixed>
302    
303    uudeview
304            - libconvert-uulib-perl <unfixed> (embed)
305            - pan <unfixed> (embed)
306    
307    sqlite (not affected by security vulnerabilities so far)
308            - amarok <unfixed> (embed)
309            - monotone 0.43-1 (embed)
310            - iceweasel <unfixed> (embed)
311            - heimdal <unfixed> (embed; bug #559616)
312    
313    util-linux/mount
314            - loop-aes-utils <unfixed> (embed)
315            NOTE: contains code from util-linux' mount in the mount-aes-udeb
316    
317    sylpheed
318            - sylpheed-claws <unfixed> (fork)
319    
320    phpsysinfo
321            - egroupware <unfixed> (embed)
322            - phpgroupware <unfixed> (embed)
323    
324    phpldapadmin
325            [sarge] - egroupware <unfixed> (embed)
326            NOTE: removed from egroupware after sarge
327    
328    chmlib
329            - kchmviewer <unknown> (embed)
330    
331    ffmpeg (libavcodec/libavformat)
332            - mplayer 1.0~rc2-14 (embed; bug #395252)
333            - kino 1.0.0-1
334            - vlc <not-affected> (Links dynamically since initial release)
335            - smilutils 0.3.0-10
336            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
337            - motion 3.1.19-1
338            - gstreamer0.10-ffmpeg 0.10.3-2
339            - xmovie <removed> (static)
340            TODO: gimp-gap (potentially using ffmpeg code as well)
341            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
342            - audacity 1.3.7-2 (embed; bug #512278)
343            - chromium-browser <unfixed> (fork)
344    
345    faad2
346            - mplayer 1.0~rc2-20 (embed)
347            - avifile <unfixed> (embed; bug #538750)
348            - ffmpeg-debian <removed> (embed)
349    
350    libmad (MPEG decoding lib)
351            - xine-lib <unfixed> (embed)
352            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
353            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
354    
355    libdts
356            - xine-lib <unfixed> (embed)
357    
358    flac
359            - xine-lib <unfixed> (embed)
360    
361    liba52
362            - a52dec <unfixed> (embed)
363            - xine-lib <unfixed> (embed)
364    
365    mpeg2dec (libmpeg2)
366            - xine-lib <unfixed> (embed)
367    
368    libmpeg3
369            - squeak-vm <unfixed> (embed)
370    
371    libntlm
372            - wget <unfixed> (fork; bug #550436)
373            - curl <unfixed> (fork; bug #550437)
374            - cntlm <unfixed> (fork; bug #550438)
375    
376    uw-imap
377            - pine <unfixed> (embed)
378            - alpine <unfixed> (embed)
379    
380    imagemagick
381            - graphicsmagick <unfixed> (fork)
382    
383    python-urlgrabber
384            - mercurial <unfixed> (embed; bug #531062)
385            - w3af <unfixed> (embed; bug #555372)
386            [experimental] - harvestman <unfixed> (embed; bug #555373)
387    
388    beautifulsoup
389            - python-mechanize <unfixed> (embed; bug #555349)
390            - zope2.11 <removed> (embed; bug #555350)
391            - twill <unknown> (embed)
392    
393    halibut
394            - nsis <unfixed> (fork)
395    
396    libghttp
397            - hotway <unfixed> (embed)
398    
399    libsndfile
400            - ardour 1:2.7.1-1 (embed)
401    
402    glibmm2.4
403            - ardour 1:2.7.1-1 (embed)
404    
405    libgnomecanvasmm2.6
406            - ardour 1:2.7.1-1 (embed)
407    
408    libsigc++-2.0
409            - ardour 1:2.7.1-1 (embed)
410    
411    soundtouch
412            - ardour 1:2.7.1-1 (embed)
413    
414    libmms
415            - xine-lib <unfixed> (embed)
416            - mimms <unfixed> (embed)
417    
418    fckeditor
419            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
420            - moin 1.8.2-2 (embed; bug #452599)
421            - karrigell <removed> (embed; bug #452598)
422            - gforge 4.6.99+svn6225-1 (embed)
423            - request-tracker3.8 <unfixed> (embed)
424            - otrs2 <unfixed> (embed)
425    
426    ipatlas (not packaged in Debian)
427            - moodle <unfixed> (embed; bug #507185)
428    
429    libphp-phpmailer
430            - moodle <unfixed> (embed; bug #507185)
431            - mahara <unfixed> (embed)
432            - symfony <unfixed> (embed; bug #566778)
433            [etch] - phpgroupware <unfixed> (embed)
434            NOTE: phpgroupware-felamimail is only in etch
435            - egroupware <unfixed> (embed; bug #504283)
436            - glpi <unfixed>
437    
438    htmlArea (not packaged in Debian)
439            - moodle <unfixed> (embed)
440    
441    giflib
442            - wine <unfixed> (embed; bug #466181)
443    
444    bennu (not packaged in Debian, http://bennu.sourceforge.net)
445            - moodle <unfixed> (embed)
446    
447    smarty
448            - moodle 1.8.2-2 (embed; bug #471158)
449            - gallery2 2.2.5-2 (embed; bug #471160)
450            - mahara 0.9.2-2 (embed; bug #471201)
451            - gosa 2.4beta1-1 (embed; bug #471200)
452    
453    TinyMCE
454            - wordpress 2.5.1-3 (embed; bug #478257)
455            - moodle <unfixed> (embed; bug #507185)
456            - knowledgeroot <unfixed> (embed)
457            - joomla <itp> (bug #326398)
458            - mahara 1.2.6-1 (embed; #597752)
459    
460    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
461            - scite <unfixed> (embed)
462            - qscintilla <unfixed> (embed)
463            - qscintilla2 <unfixed> (embed)
464            - geany <unfixed> (fork)
465            - anjuta <unfixed> (embed)
466    
467    libphp-adodb
468            - moodle <unfixed> (embed; bug #507185)
469            NOTE: also AdoDB-XML Schema
470            - gallery2 <unfixed> (embed)
471            - phppgadmin <unfixed> (embed)
472            - egroupware <unfixed> (embed)
473            - phpwiki <unfixed> (embed)
474            - torrentflux 2.0beta1-2 (embed)
475            - ipplan <unfixed> (embed)
476            - typo3-src <unfixed> (embed)
477            - cacti <unknown> (embed)
478            [sarge] - cacti <unfixed> (embed)
479            NOTE: dependency exists, but internal version is used
480            - gforge 4.7~rc2-6 (embed)
481            - mahara <unfixed> (embed)
482    
483    gzip
484            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
485            - klibc <unfixed> (embed)
486            NOTE: based on linux-kernel gzip code
487            - busybox <unfixed> (embed)
488            - pristine-tar <unfixed> (modified-embed)
489            NOTE: compression code only, not uncompression
490            - ncompress <unfixed> (old-version)
491    
492    neon
493            - cadaver 0.22.3+debian-1 (embed; bug #188381)
494            - gnome-vfs2 <unfixed> (embed; bug #395874)
495            [etch] - litmus <unfixed> (embed; #395875)
496            - litmus <removed> (embed; #395875)
497            [sarge] - screem <unfixed> (embed)
498            - sitecopy 1:0.16.0-1 (embed; bug #395876)
499            [etch] - tla <unfixed> (embed; bug #395877)
500            [sarge] - tla <unfixed> (embed; bug #395877)
501    
502    libmodplug
503            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
504    
505    libvncserver
506            - vino <unfixed> (embed)
507    
508    putty
509            - filezilla <unfixed> (embed)
510    
511    tinyxml (not packaged in Debian; itp bug #531968)
512            - filezilla <unfixed>
513            - crystalspace <unfixed> (embed)
514            - libwfut <unfixed> (embed)
515            - rarian <unfixed> (embed)
516            - bulletml <unfixed> (embed)
517            - pokerth <unfixed> (embed)
518            - qutecom <unfixed> (embed)
519            - sofa-framework <unfixed> (embed)
520            - yate <unfixed> (embed)
521            - antigrav <unfixed> (embed)
522            - balder2d <unfixed> (embed)
523            - cal3d <unfixed> (embed)
524            - criticalmass <unfixed> (embed)
525            - ember <unfixed> (embed)
526            - epiphany <unfixed> (embed)
527            - gambit <unfixed> (embed)
528            - noiz2sa <unfixed> (embed)
529            - ogre <unfixed> (embed)
530            - opencity <unfixed> (embed)
531            - openmovieeditor <unfixed> (embed)
532            - pouetchess <unfixed> (embed)
533            - tecnoballz <unfixed> (embed)
534            - trigger-rally <unfixed> (embed)
535            - xmoto <unfixed> (embed)
536            - mapnik <unknown> (embed)
537            NOTE: uses a different XML parser by default
538            - rrootage 0.23a-6 <embed>
539            NOTE: links to libbulltetml
540            - boson <unknown> (embed)
541            NOTE: the embedded code is unused
542    
543    gv
544            - evince <unfixed> (embed)
545            NOTE: ps/ tree from gv 3.5.8
546            NOTE: evince-gtk is affected (a component of evince source package)
547    
548    libXbae
549            - paw <unfixed> (embed)
550    
551    libgtkhtml
552            - claws-mail-extra-plugins <unfixed> (fork)
553    
554    libXaw
555            - paw <unfixed> (embed)
556            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
557    
558    libgd2
559            - graphviz <unfixed> (embed)
560            NOTE: lib/gd seems to be 2.0.33
561            - wml 2.0.11ds2-1 (embed)
562            - libwmf <unfixed> (embed)
563            NOTE: derived from gd 1.6.3
564            - texlive-bin 2009-1 (embed)
565    
566    rar
567            - unrar-nonfree <unfixed> (embed)
568    
569    unrar-free (maybe this code is derived from the original rar, too?)
570            - clamav <unfixed> (embed)
571            NOTE: seems to be disabled in default config
572    
573    mplayer (DirectMedia Object loader)
574            - xine-lib <unfixed> (embed)
575            NOTE: src/libw32dll/
576            - vlc <unfixed> (embed)
577            NOTE: modules/codec/dmo/
578            - mplayer 1.0~rc2-20 (embed)
579    
580    libwpd (WordPerfect converter)
581            - openoffice.org <unfixed> (embed)
582    
583    fsplib (http://sourceforge.net/projects/fsp/)
584            - gftp <unfixed> (embed)
585            NOTE: lib/fsplib version 0.3
586    
587    sprng
588            - tree-puzzle <unfixed> (embed)
589    
590    librpcsecgss
591            - krb5 <unfixed> (embed)
592    
593    jasper
594            - ghostscript 8.64~dfsg-2 (embed)
595    
596    libiris
597            - psi <unfixed> (embed)
598            - kdenetwork <unfixed> (embed)
599            NOTE: kopete embeds libiris but links dynamically to libidn
600            - kdegames <unfixed> (embed)
601            NOTE: ksirk/kde4
602    
603    libidn
604            - monotone 0.43-1 (embed)
605            - psi <unfixed> (embed)
606            NOTE: psi embeds libiris which embeds libidn
607            - kdegames <unfixed> (embed)
608            NOTE: kdegames/kde4 embeds libiris which embeds libidn
609    
610    lua5.1
611            - monotone 0.43-1 (embed)
612            - nmap 5.00-1 (embed; bug #527997)
613            [lenny] - nmap <unfixed> (embed; bug #527997)
614            - ocropus <unfixed> (embed)
615            - enigma <unfixed> (embed)
616            NOTE: requires lua built with C++
617            - freeciv <unfixed> (embed)
618            - spring <unfixed> (embed)
619    
620    libbotan
621            - monotone 0.43-1 (embed)
622    
623    NetXX
624            - monotone 0.43-1 (embed)
625    
626    libgc
627            - mono <unfixed> (embed)
628    
629    lzma
630            - p7zip <unfixed> (embed)
631            - xz-utils <unfixed> (fork)
632            - r-base <unfixed> (embed)
633            NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
634    
635    lzo
636            - grub2 <unfixed> (embed)
637    
638    yassl
639            - mysql-dfsg-5.0 <unfixed> (embed)
640            - mysql-5.1 <unfixed> (embed)
641    
642    pax code
643            - tar <unfixed> (embed)
644            - cpio <unfixed> (embed)
645    
646    t1lib
647            - tetex-bin 2.0.2-1 (embed)
648            - texlive-bin <unknown> (embed)
649            - grace <unknown> (embed)
650    
651    guichan
652            - boswars <unfixed> (embed)
653            NOTE: maintainer notified us, working on it
654    
655    tolua
656            - boswars <unfixed> (embed)
657            NOTE: maintainer notified us, working on it
658            NOTE: actually tolua++
659            - ocropus <unfixed> (embed)
660            NOTE: actually tolua++
661            - freeciv <unfixed> (embed)
662            NOTE: actually tolua++
663            - enigma <unfixed> (embed)
664    
665    asio-dev
666            - luxrender <removed> (embed)
667    
668    xine-lib
669            - vlc <unfixed> (embed)
670            NOTE: only parts included in modules/access/rtsp
671    
672    netpbm
673            - tcl8.3 <unfixed> (embed)
674            - tcl8.4 <unfixed> (embed)
675            - tcl8.5 <unfixed> (embed)
676            NOTE: generic/tkImgGIF.c
677    
678    tk8.5
679            - tk8.0 <removed> (old-version)
680            - tk8.3 <unfixed> (old-version)
681            - tk8.4 <unfixed> (old-version)
682            - perl-tk <unfixable> (fork)
683    
684    samba
685            - mc 2:4.6.2~git20080311-1 (embed)
686            NOTE: maintainer is aware of this, currently searching a solution
687    
688    plib1.8.4c2
689            - boson <unfixed> (fork)
690            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
691    
692    fribidi
693            - quesoglc 0.7.2-2 (embed)
694    
695    glew
696            - quesoglc <unfixed> (embed; bug #489341)
697            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
698            - trigger 0.5.2.1-2 (embed)
699            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
700            - trigger-rally 0.5.2.1-2 (embed)
701            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
702            - chromium-browser 5.0.375.70~r48679-2
703    
704    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
705            - transcend <unfixed> (embed)
706            - cultivation <unfixed> (embed)
707            - passage <unfixed> (embed)
708            - gravitation <unfixed> (embed)
709    
710    tar
711            - libarchive <unfixed> (embed)
712            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
713    
714    cpio
715            - libarchive <unfixed> (embed)
716            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
717    
718    kde4libs
719            - kdelibs <unfixable> (old-version)
720    
721    webkit
722            - qt4-x11 <unfixed> (embed; bug #479851)
723            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
724            - kde4libs <unfixable> (fork)
725            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
726            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
727            - chromium-browser <unfixed> (fork)
728    
729    ftgl
730            - blender 2.46+dfsg-1 (embed)
731    
732    wv
733            - abiword <unfixed>
734    
735    qemu
736            - kvm <removed> (embed; bug #543159)
737            - qemu-kvm <unfixed> (embed; bug #560853)
738            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
739            - xen-3 3.4.2-2 (embed; bug #560856)
740            - xen-unstable <unfixed> (embed; bug #560856)
741    
742    vgabios
743            - kvm <removed> (embed; bug #489442)
744            - qemu-kvm <unfixed> (embed)
745    
746    bochs
747            - kvm <removed> (embed; bug #489442)
748            - qemu-kvm <unfixed> (embed)
749    
750    speex
751            - vorbis-tools <unfixed> (embed)
752            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
753            - gst-plugins-good0.10 <unfixed> (embed)
754            - xine-lib <unfixed> (embed)
755            - libfishsound <unfixed> (embed)
756            - libannodex <removed> (embed)
757            - libopal-2.2 <unknown> (embed)
758            - mumble <unknown> (embed)
759            - vlc <unfixed> (embed)
760            - xmms-speex <unfixed> (embed)
761            - libsdl-sound1.2 <unfixed> (embed)
762            - sweep <unfixed> (embed)
763    
764    libreadline
765            - magic <itp> (old-version)
766    
767    opcode
768            - ode <unfixed> (embed)
769            NOTE: opcode is not a package in debian, it is just embedded
770            NOTE: http://www.codercorner.com/Opcode.htm
771    
772    gimpact
773            - ode <unfixed> (embed)
774            NOTE: gimpact is not a package in debian, it is just embedded
775            NOTE: http://gimpact.sf.net
776    
777    mochikit
778            - mahara <unfixed> (embed)
779            NOTE: they require extra patches, still unmerged upstream
780            - ntop <unfixed> (embed)
781            - coherence 0.6.2-1 (embed)
782            - paste <unfixed> (embed)
783            - turbogears <unfixed> (embed)
784            - plone3 <removed> (embed)
785            - xulrunner <unfixed> (embed)
786            - libjifty-plugin-chart-perl <unfixed> (embed)
787            - sabnzbdplus <unfixed> (embed)
788            - tgmochikit <unfixed> (embed)
789    
790    prototypejs
791            - netbeans-ide 6.0.1+dfsg-2 (embed)
792            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
793            - webcit <unfixed> (embed; bug #555219)
794            - asterisk 1:1.6.2.0~rc3-1 (embed)
795            - libjson-ruby 1.1.4-1 (embed; bug #555224)
796            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
797            - horde3 <unfixed> (embed)
798            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
799            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
800            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
801            - ebug-http <unfixed> (embed; bug #555236)
802            - libaws 2.7-1 (embed; bug #555222)
803            - phpgedview <removed> (embed)
804            - poker-network 1.7.6-1 (embed; bug #555238)
805            - rails 2.1.0-6 (embed)
806            - wordpress 2.5.0-2 (embed; bug #555243)
807            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
808            TODO: search through all of the other zope packages
809            - ampache 3.4.1-2 (embed)
810            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
811            - hobix 0.5~svn20070319-4 (embed; bug #555247)
812            - zabbix 1.6.6-4 (embed; bug #555250)
813            - chora2 2.1.1+debian0-1 (embed; bug #555253)
814            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
815            - jscropperui 1.2.1-1 (embed; bug #555257)
816            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
817            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
818            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
819            - activeldap 1.2.1-1 (embed)
820            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
821            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
822            - otrs2 2.3.4-6 (embed; bug #555267)
823            - webcalendar 1.2~b1-2 (embed; bug #555269)
824            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
825            - jifty 0.90519-1 (embed; bug #555271)
826            - jquery 1.4-1 (embed; bug #555272)
827            - passenger 2.2.5debian1-1 (embed; bug #555273)
828            - plone3 <removed> (embed; bug #555275)
829            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
830            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
831            - xulrunner <unfixed> (embed)
832            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
833            - jclicmoodle <unfixed> (embed)
834            - git-cola <unfixed> (embed)
835    
836    gdb
837            - insight <unfixed> (embed)
838    
839    e2fsprogs
840            - ldiskfsprogs <unfixable> (fork)
841    
842    quazip (not packaged in Debian)
843            - qcake <unfixed> (embed)
844            NOTE: starting with upstream version 0.6.4
845    
846    exo
847            - pcmanfm <unfixed> (embed; bug #499677)
848            NOTE: slightly modified source code
849    
850    java
851            - openjdk-6 <unfixed>
852            - sun-java5 <unfixed>
853            - sun-java6 <unfixed>
854    
855    libphp-snoopy
856            - ampache 3.4.1-2 (embed; bug #504169)
857            - gforge 4.6.99+svn6094-2 (embed)
858            - mahara 1.0.5-2 (embed; bug #504170)
859            - pixelpost 1.7.1-5 (embed; bug #504171)
860            - mediamate 0.9.3.6-5 (embed; bug #504172)
861            - opendb <removed> (embed; bug #504173)
862            [etch] - opendb <unfixed> (embed; bug #504173)
863            - wordpress 2.5.1-9 (embed; bug #443948)
864            - moodle <unfixed> (embed; bug #507185)
865            [etch] - phpgroupware <unfixed> (embed)
866            NOTE: phpgroupware-felamimail
867            - magpierss 0.72-3 (embed; bug #431089)
868    
869    jquery
870            - zekr <unfixed> (embed)
871            - wordpress <unknown> (embed)
872            - yocto-reader <unfixed> (embed)
873            - textpattern <unfixed> (embed)
874            - genshi 0.5.1-1 (embed)
875            NOTE: compressed file under examples/ dir
876            - prewikka <unfixed> (embed)
877            - libramaze-ruby <unfixed> (embed)
878            - drupal6 <unfixed> (embed)
879            - b2evolution <unfixed> (embed)
880            - wesnoth <unfixed> (embed)
881    
882    tablesorter (jquery plugin, not packaged yet)
883            - wesnoth <unfixed> (embed)
884    
885    kses
886            - wordpress <unfixed> (embed; bug #504242)
887            NOTE: their copy has all methods renamed to wp_<foo>
888            NOTE: kses isn't in Debian, RFP: #504240
889            - moodle <unfixed> (embed; bug #507185)
890            - egroupware <unfixed> (embed)
891    
892    magpierss
893            - wordpress <unfixed> (embed; bug #504242)
894            - moodle <unfixed>
895    
896    php-gettext
897            - wordpress 2.8.4-1 (embed; bug #504242)
898            - docbookwiki <unfixed> (embed)
899            - knowledgeroot 0.9.9.5-1
900            NOTE: non-free
901    
902    libphp-ixr (name may change, it is the Incutio XML-RPC)
903            - wordpress <unfixed> (embed; bug #504242)
904            NOTE: libphp-ixr isn't in Debian, RFP: #504236
905            - dokuwiki <unfixed> (embed)
906            - textpattern <unfixed> (embed)
907    
908    libphp-cas
909            - glpi <unfixed> (embed)
910            - moodle <unfixed> (embed; bug #505984)
911    
912    scriptaculous (prototype.js is among the embeds in the following)
913            - glpi <unfixed> (embed)
914            - libaws <unfixed> (embed; bug #555222)
915            - op-panel <unfixed> (embed)
916            - symfony <unfixed> (embed)
917            NOTE: maintainer says there are extra incompatible changes required
918            - pixelpost 1.7.1-6 (embed)
919            - webhelpers <unfixed> (embed)
920            - qwik <removed> (embed; bug #555241)
921            - smokeping <unfixed> (embed)
922            - turba2 <unfixed> (embed)
923            - typo3-src 4.2.3-1 (embed)
924            - request-tracker3.6 <unfixed> (embed)
925            - request-tracker3.8 <unfixed> (embed)
926            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
927            - wordpress 2.5.0-2 (embed)
928            - libhtml-prototype-perl 1.48-3 (embed)
929    
930    libmarkdown-php
931            - moodle <unfixed> (embed; bug #507185)
932            - pixelpost 1.7.1-6 (embed)
933    
934    php-openid
935            - wordpress-openid 3.3.2-1 (embed)
936    
937    geshi
938            - dokuwiki 0.0.20080505-3.1 (embed)
939            - pgfouine 1.0-1.1 (embed)
940            - websvn 2.1.0-1 (embed)
941    
942    webcalendar
943            - gforge 4.7~rc2-6 (embed; bug #504758)
944    
945    libical
946            - kdepim <unknown> (fork)
947            NOTE: fixed at some point during 4.0
948            - kdepimlibs 4.2.0-1 (fork)
949            - claws-mail-extra-plugins <unfixed> (fork)
950    
951    harfbuzz
952            - qt4-x11 <unfixed> (embed)
953            - pango1.0 <unfixed> (embed)
954            - fontmatrix <unfixed> (embed)
955    
956    libzip
957            - php5 <unfixable> (modified-embed)
958            - odt2txt <unfixed> (embed; bug #523808)
959    
960    json.php (not packaged; should be replaced with php's built-in functions)
961            - moodle <unfixed>
962            - yui <unfixed>
963            - gallery2 <unfixed>
964            - dokuwiki <unfixed>
965            - typo3-src <unfixed>
966    
967    php-fpdf
968            - tcpdf <itp> (fork)
969            - moodle <unfixed>
970            - phpwiki <unfixed>
971            - egroupware <unfixed>
972            - ldap-account-manager <unfixed> (fork)
973    
974    tcpdf (itp: #495985)
975            - moodle <unfixed>
976            - phpmyadmin <unfixed>
977    
978    typo3
979            - moodle <unfixed>
980    
981    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
982            - moodle <unfixed>
983            - gosa <unfixed>
984    
985    php-ole (itp: #487558)
986            - moodle <unfixed>
987    
988    pieforms (http://www.catalyst.net.nz)
989            - mahara <unfixed>
990    
991    savant2 (http://phpsavant.com)
992            - egroupware <unfixed>
993    
994    rssparser (http://nwow.org)
995            - egroupware <unfixed>
996            - phpgroupware <unfixed>
997    
998    lcms
999            - openjdk-6 <unfixed> (fork)
1000            - gimp 2.4.0~rc2-2
1001    
1002    libphp-phplayersmenu
1003            - diogenes <unfixed>
1004            - phpldapadmin <unfixed>
1005    
1006    libphp-pclzip
1007            - docvert <unfixed>
1008            - moodle <unfixed>
1009            - egroupware <unfixed>
1010    
1011    libphp-simplepie
1012            - dokuwiki <unfixed>
1013            - wordpress <unfixed>
1014    
1015    libphp-jpgraph
1016            - egroupware <unfixed>
1017    
1018    php-simpletest
1019            - moodle <unfixed>
1020    
1021    libpng
1022            - iceweasel <not-affected> (uses xulrunner)
1023            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1024            - iceape 1.0.13~pre080614i-0etch1 (embed)
1025            - xulrunner 1.9.0.13-1 (embed)
1026            [lenny] - xulrunner 1.9.0.11-0lenny1
1027            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1028            - gamera 3.2.3-1 (embed)
1029            - freeimage <unfixed> (embed)
1030            - tuxonice-userui <unfixed> (static)
1031    
1032    irssi
1033            - silc-client <unfixed> (embed)
1034            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1035    
1036    extc
1037            - mtasc <unfixed> (embed)
1038            - haxe <unfixed> (embed)
1039    
1040    swflib
1041            - mtasc <unfixed> (embed)
1042            - haxe <unfixed> (embed)
1043    
1044    libitext-java
1045            - bouncycastle 2.1.4-1 (embed)
1046    
1047    python-ply
1048            - pyke <unfixed> (embed; bug #555363)
1049            - pywbem 0.7.0-4 (embed; bug #555364)
1050            - sepolgen <unfixed> (embed; bug #555365)
1051            - zope-textindexng3 <unknown> (embed)
1052            - iceweasel <not-affected> (uses xulrunner)
1053            - xulrunner <unknown> (embed)
1054            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1055    
1056    libdumbnet (libdnet upstream)
1057            - nmap <unfixed> (fork)
1058    
1059    gcc-4.4
1060            - gcc-mingw32 <unfixed> (embed)
1061    
1062    camlimages
1063            - advi <unfixed> (static; bug #550441)
1064    
1065    memcached
1066            - memcachedb <unfixed> (embed)
1067    
1068    yajl
1069            - argyll <unfixed> (embed; bug #544223)
1070            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1071    
1072    nusoap
1073            - gforge 4.8.2-1 (embed)
1074            - ampache <unfixed> (embed)
1075            - poker-network <unfixed> (embed)
1076            - moodle <unfixed> (embed)
1077            NOTE: code is not used when running under php5 and soap is enabled
1078            - phpwiki <unfixed> (embed)
1079            - gallery2 <unfixed> (embed)
1080            - typo3-src <unfixed> (embed)
1081            - phpgacl 3.3.7-7 (embed)
1082            - mantis 1.1.8+dfsg-1 (embed)
1083    
1084    libept
1085            - adept <unfixed> (embed; bug #540649)
1086    
1087    libvorbis
1088            - iceweasel <not-affected> (uses xulrunner)
1089            - xulrunner <unfixed> (embed; bug #540959)
1090            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1091            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1092            - iceape <unfixed> (embed)
1093            [etch] - iceape <not-affected> (introduced in 2.0)
1094            [lenny] - iceape <not-affected> (introduced in 2.0)
1095    
1096    cairo
1097            - iceweasel <not-affected> (uses xulrunner)
1098            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1099    
1100    liboggz
1101            - iceweasel <not-affected> (uses xulrunner)
1102            - xulrunner <unfixed> (embed; bug #540959)
1103            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1104            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1105            - iceape <unfixed> (embed)
1106            [etch] - iceape <not-affected> (introduced in 2.0)
1107            [lenny] - iceape <not-affected> (introduced in 2.0)
1108    
1109    liboggplay
1110            - iceweasel <not-affected> (uses xulrunner)
1111            - xulrunner <unfixed> (embed; bug #540959)
1112            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1113            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1114            - iceape <unfixed> (embed)
1115            [etch] - iceape <not-affected> (introduced in 2.0)
1116            [lenny] - iceape <not-affected> (introduced in 2.0)
1117    
1118    php-net-dnsbl
1119            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1120    
1121    php-onyx-rss
1122            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1123    
1124    php-text-wiki
1125            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1126    
1127    php-xml-rpc
1128            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1129    
1130    polarssl (does not have a shared library)
1131            - pdkim <itp> (embed; bug #543150)
1132            - xyssl <unfixed> (old-version)
1133    
1134    pidgin (libpurple)
1135            - gaim <removed> (old-version)
1136            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1137    
1138    icu
1139            - webkit 1.0.1-1 (embed; bug #547214)
1140            - texlive-bin <unfixed> (fork)
1141            NOTE: texlive upstream working with icu upstream to merge their changes
1142            - chromium-browser 5.0.375.29~r46008-3
1143    
1144    cyrus-imapd-2.2
1145            - kolab-cyrus-imapd <unfixed> (fork)
1146            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1147    
1148    python-cxx-dev
1149            - freecad 0.9.2646.3-1 (embed; bug #547936)
1150    
1151    zipios++
1152            - freecad 0.9.2646.3-1 (embed; bug #547941)
1153            - enigma 0.92.3-3 (embed)
1154            NOTE: likely fixed earlier, marking etch's version as fixed
1155    
1156    linux-2.6
1157            - kvm <removed> (embed; bug #549973) [./kernel/*]
1158            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1159            - kernel-source-2.6.8 <removed> (old-version)
1160            - kernel-source-2.4.27 <removed> (old-version)
1161            - kernel-source-2.4.24 <removed> (old-version)
1162            - kernel-source-2.2.25 <removed> (old-version)
1163            - kernel-source-2.2.20 <removed> (old-version)
1164    
1165    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1166            - kvm <removed> (embed) [./libfdt/*]
1167            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1168    
1169    qweb (not packaged)
1170            - ajaxterm <unfixed>
1171    
1172    opensaml2
1173            - opensaml <removed> (old-version)
1174    
1175    shibboleth-sp2
1176            - shibboleth-sp <removed> (old-version)
1177    
1178    tuxonice-userui
1179            - suspend2-userui <removed> (old-version)
1180    
1181    expat
1182            - w3c-libwww <removed> (embed; bug #551941)
1183            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1184            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1185            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1186            - python2.4 <unfixable> (embed; bug #553403)
1187            - python2.7 2.7-6 (embed)
1188            - python-4suite <unfixed> (embed; bug #516935)
1189            - wxwindows2.4 <removed> (embed)
1190            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1191            - wxwidgets2.8 2.8.10.1-2 (embed)
1192            - albert <unfixed> (embed; bug #600974)
1193            - celementtree 1.0.5-8 (embed)
1194            NOTE: Maybe that was fixed even earlier
1195            - audacity 1.3.2-1 (embed)
1196            - matanza <unfixed> (embed)
1197            - tdom 0.8.3~20080525-1 (embed)
1198            - udunits 2.1.8-4 (embed)
1199            - apr-util 1.2 (embed)
1200            - ayttm <unfxed> (embed; bug #561006)
1201            - cableswig <unfixed> (embed)
1202            - cadaver <unfixed> (embed)
1203            - cmake 2.6.0-6 (embed)
1204            - coin3 <unfixed> (embed)
1205            - gdcm 2.0.14-2 (embed)
1206            - ghostscript 8.71~dfsg-2 (embed)
1207            - grmonitor <removed> (embed)
1208            - iceape <unfixed> (embed)
1209            - insighttoolkit 3.16.0-1 (embed)
1210            NOTE: insighttoolkit might've been fixed earlier
1211            - libparagui1.1 1.0.2-1 (embed)
1212            - mcabber <unfixed> (embed; bug #601053)
1213            - paraview 3.6.2-1 (embed)
1214            - poco 1.3.6p1-1 (embed)
1215            - simgear <unfixed> (embed)
1216            - sitecopy 1:0.16.0-1
1217            - smart <unfixed> (embed)
1218            NOTE: smart embeds celementree, and it includes expat
1219            - swish-e <not-affected> (Linked against libxml, which is used instead)
1220            - tla 1.3.5+dfsg-15 (embed)
1221            - vtk 4.1.20030227-1 (embed)
1222            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1223            - xmlrpc-c <unfixed> (embed)
1224            - iceweasel <unfixed> (embed)
1225            - kompozer <unfixed> (embed)
1226            - vxl 1.13.0-2 (embed)
1227            - xulrunner <unfixed> (embed)
1228            - apache2 2.2 (embed)
1229            - texlive-bin <not-affected> (Embedded code not compiled in)
1230            - vnc4 <unfixed> (embed)
1231            - xotcl 1.6.6-1 (embed)
1232            - chromium-browser 5.0.375.29~r46008-3
1233    
1234    xerces-c
1235            - xerces-c2 <unfixed> (old-version)
1236            - xerces27 <removed> (old-version)
1237    
1238    md5 (RSA's version; not the gnu version provided by coreutils)
1239            - w3c-libwww <removed> (embed; bug #551942)
1240            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1241    
1242    libparagui1.1
1243            - asc <unfixable> (fork)
1244    
1245    enet
1246            - sauerbraten <unfixed> (embed; #497194)
1247    
1248    eglibc
1249            - glibc <removed> (old-version)
1250            - mksh <unfixable> (static)
1251              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1252    
1253    galib
1254            - gamera 3.2.3-1 (embed)
1255    
1256    configobj
1257            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1258            - elisa <unfixed> (embed; bug #555337)
1259            - gaupol <unfixed> (embed; bug #555338)
1260            - ipython <unfixed> (embed; bug #555339)
1261            - pida <unfixed> (embed; bug #555340)
1262            - psychopy <unfixed> (embed; bug #555341)
1263            - rest2web <unfixed> (embed; bug #555342)
1264            - auth2db <unknown> (embed)
1265            - dynagen <unknown> (embed)
1266            - iceweasel <unknown> (embed)
1267            - sabnzbdplus <unknown> (embed)
1268            - xulrunner <unknown> (embed)
1269            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1270    
1271    python-clientform
1272            - bibus <unfixed> (embed; bug #555332)
1273            - zope2.10 <unfixed> (embed; bug #555333)
1274            - zope2.11 <removed> (embed; bug #555334)
1275            - python-mechanize <unknown> (embed)
1276            - twill <unknown> (embed)
1277    
1278    python-mechanize
1279            - zope2.10 <unfixed> (embed; bug #555337)
1280            - zope2.11 <removed> (embed; bug #555338)
1281            - twill <unknown> (embed; bug #555339)
1282    
1283    pexpect
1284            - duplicity 0.6.06-1 (embed; bug #555361)
1285            - hplip <unfixed> (embed; bug #555362)
1286            - smart <unfixed> (embed; bug #555363)
1287    
1288    pyparsing
1289            - bauble <unfixed> (embed; bug #555366)
1290            - boa-constructor 0.6.1-8 (embed; bug #555367)
1291            - calibre <unfixed> (embed; bug #555368)
1292            - matplotlib <unfixed> (embed; bug #531024)
1293            - zhpy 1.7.3.1-1 (embed; bug #555370)
1294            - polybori <unknown> (embed)
1295            - python-whoosh <unknown> (embed)
1296            - twill <unknown> (embed)
1297            - zope-textindexng3 <unknown> (embed)
1298    
1299    python-pysqlite2
1300            - python2.4 <unfixed> (embed; bug #553403)
1301            - python2.5 <unfixed> (embed; bug #553403)
1302    
1303    celementtree
1304            - python2.5 <unfixed> (embed)
1305            - smart <unfixed> (embed)
1306    
1307    elementtree
1308            - python2.5 <unfixed> (embed)
1309            - python2.6 <unfixed> (embed)
1310            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1311            - gedit 2.28.2-1 (embed; bug #555344)
1312            - smart <unfixed> (embed)
1313            - solfege <unfixed> (embed; bug #555345)
1314            - w3af <unfixed> (embed; bug #555346)
1315            - python-qt4 <unknown> (embed)
1316            - sphinx <unknown> (embed)
1317            - python-nltk <itp> (embed)
1318    
1319    python2.5
1320            - python2.4 <unfixed> (old-version)
1321            - jython <unfixed> (embed)
1322            NOTE: embeds many stdlib modules
1323            - python-django <unfixed> (embed; bug #555419)
1324            NOTE: embeds stdlib modules: doctest, decimal
1325            - gamera 3.2.3-1 (embed)
1326            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1327            - boa-constructor <unfixed> (embed; bug #555426)
1328            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1329            - nicotine <unfixed> (embed; bug #555427)
1330            NOTE: embeds stdlib modules: ConfigParser
1331            - museek+ <unfixed> (embed; bug #555428)
1332            NOTE: embeds stdlib modules: ConfigParser
1333            - vegastrike-data <removed> (embed)
1334            NOTE: embeds many stdlib modules
1335            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1336            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1337            - config-manager <unfixed> (embed; bug #555423)
1338            NOTE: embeds stdlib modules: optparse
1339            - jhbuild 2.28.0-1 (embed; bug #555421)
1340            NOTE: embeds stdlib modules: optparse, subprocess
1341            - smart <unfixed> (embed; bug #555432)
1342            NOTE: embeds stdlib modules: optparse
1343            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1344            NOTE: embeds stdlib modules: doctest
1345            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1346            NOTE: embeds stdlib modules: doctest
1347            - distribute <unfixed> (embed)
1348            NOTE: embeds stdlib modules: doctest
1349            - python-setuptools <unfixed> (embed; bug #555435)
1350            NOTE: embeds stdlib modules: doctest
1351            - zope.testing <unfixed> (embed; bug #555436)
1352            NOTE: embeds stdlib modules: doctest
1353            - translate-toolkit <unfixed> (embed; bug #555422)
1354            NOTE: embeds stdlib modules: textwrap, contextlib
1355            - libtpclient-py <unfixed> (embed; bug #555424)
1356            NOTE: embeds stdlib modules: subprocess
1357            - grass <unfixed> (embed; bug #555425)
1358            NOTE: embeds stdlib modules: subprocess
1359            - coherence <unfixed> (embed; bug #555429)
1360            NOTE: embeds stdlib modules: uuid
1361            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1362            NOTE: embeds stdlib modules: uuid
1363            - setroubleshoot <removed> (embed; bug #555431)
1364            NOTE: embeds stdlib modules: uuid
1365            - linkchecker <unfixed> (embed; bug #555414)
1366            NOTE: embeds msgfmt.py script
1367            - imdbpy <unfixed> (embed)
1368            NOTE: embeds msgfmt.py script
1369            - kiwi <unfixed> (embed)
1370            NOTE: embeds msgfmt.py script
1371            - moin <unfixed> (embed)
1372            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1373            - plone3 <removed> (embed)
1374            NOTE: embeds msgfmt.py script
1375            - roundup <unfixed> (embed)
1376            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1377            - rednotebook <unfixed> (embed; bug #555415)
1378            NOTE: embeds msgfmt.py script
1379            - turbogears <unfixed> (embed)
1380            NOTE: embeds msgfmt.py script
1381            - elisa <unfixed> (embed)
1382            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1383            - calibre <unfixed> (embed)
1384            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1385            - mailman 1:2.1.13-1 (embed; #555416)
1386            NOTE: embeds msgfmt.py script
1387            - python-docutils <unknown> (embed)
1388            NOTE: embeds stdlib modules: optparse, textwrap
1389            - python-imaging <unknown> (embed)
1390            NOTE: embeds stdlib modules: doctest
1391            - python-mechanize <unknown> (embed)
1392            NOTE: embeds stdlib modules: doctest
1393            - twill <unknown> (embed)
1394            NOTE: embeds stdlib modules: subprocess
1395            - zeroc-ice <unknown> (embed)
1396            NOTE: embeds stdlib modules: subprocess
1397            - wxwidgets2.8 <unknown> (embed)
1398            NOTE: embeds stdlib modules: subprocess
1399            - cycle <unknown> (embed)
1400            NOTE: embeds msgfmt.py script
1401            - deluge <unknown> (embed)
1402            NOTE: embeds msgfmt.py script
1403            - opendict <unknown> (embed)
1404            NOTE: embeds msgfmt.py script
1405            - openerp-client <unknown> (embed)
1406            NOTE: embeds msgfmt.py script
1407            - rapidsvn <unknown> (embed)
1408            NOTE: embeds msgfmt.py script
1409            - wammu <unknown> (embed)
1410            NOTE: embeds msgfmt.py script
1411            - gaphor <unknown> (embed)
1412            NOTE: embeds msgfmt.py script
1413            - pida <unknown> (embed)
1414            NOTE: embeds msgfmt.py script
1415            - python-formencode <unknown> (embed)
1416            NOTE: embeds msgfmt.py script
1417            - duplicity <unfixed> (embed)
1418            NOTE: embeds stdlib module: urlparse, tarfile
1419            - pygopherd <unfixed> (embed)
1420            NOTE: embeds stdlib module: zipfile
1421    
1422    argparse
1423            - twill <unfixed> (embed; bug #555347)
1424            - ipython <unfixed> (embed; bug #555348)
1425    
1426    coherence
1427            - elisa <unfixed> (embed; bug #555335)
1428    
1429    simpletal
1430            - plastex <unfixed> (embed; bug #555371)
1431    
1432    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1433            - postr <unfixed> (embed)
1434            - elisa <unfixed> (embed)
1435    
1436    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1437            - apertium-tolk <unfixed> (embed)
1438            - ipython <unfixed> (embed)
1439            - virtaal <unfixed> (embed)
1440    
1441    distribute
1442            - setuptools <removed> (old-version)
1443    
1444    rails
1445            - jruby1.2 <removed> (embed) [./bench/rails/*]
1446            NOTE: jruby is in non-free, it probably includes rails too
1447            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1448            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1449            - thin <unfixed> (embed) [./spec/rails_app/*]
1450            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1451            NOTE: be dangerous if developers are naively basing their code off of the examples
1452            NOTE: prototype.js is among the example files
1453    
1454    lucene2 (prototype.js is among the embeds in the following)
1455            - lucene <unfixed> (old-version)
1456            - pylucene <unfixed> (embed)
1457            - libpdfbox-java <unfixed> (embed)
1458            - libfontbox-java <unfixed> (embed)
1459            - libjempbox-java <unfixed> (embed)
1460            - solr <unfixed> (embed)
1461    
1462    unicode-data
1463            - syslinux <unfixed> (embed)
1464            - camomile <unfixed> (embed)
1465            - fribidi <unfixed> (embed)
1466            - m17n-db <unfixed> (embed)
1467            - sbcl <unfixed> (embed)
1468            - heimdal <unfixed> (embed)
1469            - icu <unfixed> (embed)
1470            - icu4j <unfixed> (embed)
1471            - krb5 <unfixed> (embed)
1472            - moodle <unfixed> (embed)
1473            - openldap <unfixed> (embed)
1474            - pike7.6 <unfixed> (embed)
1475            - samba <unfixed> (embed)
1476            - samba4 <unfixed> (embed)
1477            - cmucl <unfixed> (embed)
1478            - typo3-src <unfixed> (embed)
1479            - mauve <unfixed> (embed)
1480            - texlive-bin <unfixed> (embed)
1481            - ypsilon <unfixed> (embed)
1482            - jeuclid <unfixed> (embed)
1483            - charmap.app <unfixed> (embed)
1484            - clisp <unfixed> (embed)
1485            - gnulib <unfixed> (embed)
1486            - opensrs-client <unfixed> (embed)
1487            - saxonb <unfixed> (embed)
1488            - rails <unfixed> (embed)
1489    
1490    feedparser
1491            - rawdog <unfixed> (embed; bug #383422)
1492            - miro <unfixed> (embed; bug #555351)
1493            - calibre <unfixed> (embed; bug #555352)
1494            - freevo <unfixed> (embed; bug #555353)
1495            - pida <unfixed> (embed; bug #555354)
1496            - planet-venus <unfixed> (embed; bug #555355)
1497            - plone3 <removed> (embed; bug #555356)
1498            - exaile 0.2.14+debian-1 (embed)
1499            - screenlets 0.1.2-3 (embed)
1500            NOTE: included twice
1501    
1502    agg:
1503            - matplotlib <unfixed> (embed: bug #377271)
1504            - contextfree <unfixed> (embed)
1505            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1506            - exactimage <unfixed> (embed)
1507            - python-enable <unfixed> (embed)
1508            - mapnik 0.5.1-3 (embed)
1509            NOTE: links statically to agg, but shared library is not available (bug #377271)
1510    
1511    vtk
1512            - paraview <unfixable> (embed; bug #495426)
1513    
1514    txt2tags
1515            - rednotebook <unfixed> (embed)
1516    
1517    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1518            - gajim <unfixed> (embed)
1519            - emesene <unfixed> (embed)
1520            - convirt <unfixed> (embed)
1521            - pida <unfixed> (embed)
1522            - rednotebook <unfixed> (embed)
1523    
1524    horde3 (prototype.js is among the embeds in the following)
1525            - mnemo2 <unfixed> (embed)
1526            - nag2 <unfixed> (embed)
1527            - wordpress <unfixed> (embed)
1528            NOTE: Text_Diff (wp-includes/Text/Diff*)
1529    
1530    cimg
1531            - gmic <unfixed> (embed)
1532    
1533    mootools
1534            - kdenetwork <unfixed> (embed)
1535            - gallery <unfixed> (embed)
1536            - jspwiki <unfixed> (embed)
1537            - vdr-plugin-live <unfixed> (embed)
1538            - perl-doc-html <unfixed> (embed)
1539    
1540    openldap
1541            - openldap2.3 <removed> (old-version)
1542    
1543    grub2
1544            - grub <unfixed> (old-version)
1545    
1546    gnupginterface
1547            - duplicity <unfixed> (embed)
1548    
1549    python-dateutil
1550            - awn-extras-applets <unfixed> (embed)
1551            - matplotlib <unknown> (embed)
1552    
1553    cups
1554            - cupsys <removed> (old-version)
1555    
1556    yui
1557            - bcfg2 <not-affected> (present in source but not included in any binary files)
1558            - serendipity 1.5.3-1 (embed; bug #557746)
1559            - moodle 1.8.2.dfsg-5 (embed)
1560            - jifty 0.91117-1 (embed; bug #557748)
1561            - webgui 7.7.26-1 (embed)
1562            - loggerhead 1.17-1 (embed)
1563            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1564    
1565    quake3 (vanilla source not packaged in debian)
1566            - openarena <unfixable> (fork)
1567    
1568    quake2 (vanilla source not packaged in debian)
1569            - alien-arena <unfixable> (fork)
1570            - warsow <unfixable> (fork)
1571    
1572    libtheora
1573            - iceweasel <not-affected> (uses xulrunner)
1574            - xulrunner <unfixed> (embed; bug #540959)
1575            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1576            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1577            - iceape <unfixed> (embed; bug #559276)
1578            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1579            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1580    
1581    dtoa
1582            - bfilter <unfixed> (embed)
1583            - cacao <removed> (embed)
1584            - cdrdao <unfixed> (embed)
1585            - classpath <unfixed> (embed)
1586            - freej <unfixed> (embed)
1587            - iceape <unfixed> (embed)
1588            - iceweasel <unfixed> (embed)
1589            - jscoverage <unfixed> (embed)
1590            - kde4libs <unfixed> (embed)
1591            - kdelibs <unfixed> (embed)
1592            - kompozer <unfixed> (embed)
1593            - libv8 <unfixed> (embed)
1594            - mono <unfixed> (embed)
1595            - newlib <unfixed> (embed)
1596            - nspr <unfixed> (embed)
1597            - php5 <unfixed> (embed)
1598            - polyml <unfixed> (embed)
1599            - qt4-x11 <unfixed> (embed)
1600            - rhino <unfixed> (embed)
1601            NOTE: code translated to Java
1602            - ruby1.8 <unfixed> (embed)
1603            - ruby1.9 <unfixed> (embed)
1604            - ruby1.9.1 <unfixed> (embed)
1605            - sdd <unfixed> (embed)
1606            - sfind <unfixed> (embed)
1607            - star <unfixed> (embed)
1608            - tinymux <unfixed> (embed)
1609            - virtualbox-ose <unfixed> (embed)
1610            - webkit <unfixed> (embed)
1611            - xulrunner <unfixed> (embed)
1612    
1613    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1614            - firegpg <unfixed> (embed)
1615            - enigmail <unfixed> (embed)
1616    
1617    ptmalloc (not packaged in Debian)
1618            - crystalspace <unfixed> (embed)
1619            - qt4-x11 <unfixed> (embed)
1620    
1621    svgalib
1622            - usplash <unfixed> (embed)
1623    
1624    bogl
1625            - usplash <unfixed> (embed)
1626    
1627    taglist
1628            - usplash <unfixed> (embed)
1629    
1630    portaudio
1631            - audacity <unfixed> (embed; bug #323711)
1632    
1633    nyquist
1634            - audacity <unfixed> (embed)
1635            NOTE: embeds a forked nyquist with support for a shared library
1636    
1637    vamp-plugin-sdk
1638            - audacity <unfixed> (embed)
1639    
1640    wordpress
1641            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1642            - wordpress-mu <removed> (fork)
1643    
1644    php5
1645            - php4 <removed> (old-version)
1646    
1647    classpath
1648            - libgnucrypto-java <removed> (embed; bug #559788)
1649    
1650    libtool
1651            - apr <unfixed> (static; bug #489625)
1652            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1653            - arts <unfixed> (embed)
1654            - bochs 2.4.2-1 (embed; bug #560884)
1655            - camserv <unfixed> (embed)
1656            - collectd 4.8.2-1 (embed)
1657            - courier-authlib 0.58-4 (embed)
1658            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1659            - cvsnt 2.5.04.3236-1.2 (embed)
1660            - dico <not-affected> (Uses the system copy of ltdl)
1661            - freeradius 0.1+20010527-1 (embed)
1662            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1663            - ggobi 2.1.9~20091212-1 (embed)
1664            - glame 2.0.1-4 (embed)
1665            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1666            - gnash 0.8.7-2 (embed)
1667            - gnu-smalltalk <unfixed> (embed; bug #566777)
1668            - google-gadgets 0.10.5-0.3 (embed)
1669            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1670            - graphicsmagick 1.3.5-6 (embed)
1671            - graphviz 2.8-3 (embed)
1672            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1673            - guile-1.6 1.6.8-7 (embed)
1674            - hamlib 1.2.11-1 (embed)
1675            - hercules 3.06-1.2 (embed)
1676            - jags 1.0.4-3 (embed; bug #560864)
1677            - kdelibs <unfixed> (embed)
1678            - libannodex <removed> (embed)
1679            - libextractor 0.5.23+dfsg-4 (embed)
1680            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1681            - libtunepimp 0.5.3-7.3 (embed)
1682            - mp4h 1.3.1-4.1 (embed)
1683            - naim <removed> (embed)
1684            - parser-mysql <unfixed> (embed)
1685            - pinball 0.3.1-11 (embed)
1686            - redland <unfixed> (embed)
1687            - siproxd <unfixed> (embed)
1688            - ski <unfixed> (embed)
1689            - synfig 0.62.00-1 (embed)
1690            - unixodbc 2.2.4-5 (embed)
1691            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1692            - clamav 0.95+dfsg-1 (embed)
1693            - imagemagick 6:6.2.3.1-1 (embed)
1694            - hypre 2.4.0b-5 (embed)
1695            - lam <unfixed> (embed)
1696            - openmpi <unfixable> (embed; bug #559386)
1697            - parser <unfixed> (embed)
1698            - pdsh 2.18-5 (embed; bug #560892)
1699            - sbnc 1.2-8 (embed)
1700            - sdcc <unfixed> (embed)
1701            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1702            - proftpd-dfsg <unfixed> (embed; bug #561748)
1703            - babel 1.4.0.dfsg-5 (embed)
1704            - libprelude 0.9.14-2 (embed)
1705            - heartbeat 2.1.4-7 (embed)
1706            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1707            NOTE: might've been fixed earlier
1708            - gcc-* <unknown> (embed)
1709    
1710    ocamlgsl
1711            - orpie 1.5.1-7.1 (embed; bug #550058)
1712    
1713    xdotool
1714            - keynav <unfixed> (embed; bug #560103)
1715    
1716    bulletphysics (not packaged; http://www.bulletphysics.org/)
1717            - supertuxkart <unfixed> (embed)
1718            - blender <unfixed> (embed)
1719    
1720    ghostscript
1721            - gs-gpl <removed> (old-version)
1722    
1723    icedove
1724            - thunderbird <removed> (old-version)
1725    
1726    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1727            - jquery <unfixed> (embed)
1728    
1729    sed
1730            - ssed <unfixed> (fork)
1731    
1732    phpatomlib (http://code.google.com/p/phpatomlib)
1733            - wordpress <unfixed> (embed)
1734    
1735    Services_JSON (http://pear.php.net/package/Services_JSON)
1736            - wordpress <unfixed> (embed)
1737    
1738    phpass (http://www.openwall.com/phpass/)
1739            - gallery2 <unfixed> (embed)
1740            - wordpress <unfixed> (embed)
1741            - typo3-src <unfixed> (modified-embed)
1742            NOTE: file refers to drupal, maybe there's a copy somewhere there
1743            NOTE: a copyright owner search didn't match anything
1744            - libauthen-passphrase-perl <unfixable> (fork)
1745            NOTE: perl implementation of phpass
1746    
1747    squirrelmail
1748            - wordpress <unfixed> (embed)
1749            NOTE: class-pop3.php
1750    
1751    ezSQL (http://www.woyano.com/jv/ezsql)
1752            - wordpress <unfixable> (fork)
1753            NOTE: wp-db.php
1754    
1755    Diff.php (Clay Loveless' version/killersoft.com)
1756            - php-versioncontrol-svn <unfixed>
1757    
1758    libm (provided by libc)
1759            - spring <unfixed> (embed)
1760            NOTE: embedded by embedded copy of streflop
1761            - aide <unfixed> (static)
1762            - busybox <unfixed> (static)
1763            - mindi-busybox <unfixed> (static)
1764            - qemu <unfixed> (static)
1765            NOTE: qemu-user-static
1766            - tuxonice-userui <unfixed> (static)
1767            - zsh <unfixed> (static)
1768            NOTE: zsh-static
1769            - tripwire <unfixed>
1770    
1771    streflop
1772            - spring <unfixed> (embed)
1773    
1774    minizip
1775            - spring <unfixed> (embed)
1776    
1777    oscpack
1778            - spring <unfixed> (embed)
1779    
1780    hpiutil2
1781            - spring <unfixed> (embed)
1782    
1783    p7zip
1784            - spring <unfixed> (embed)
1785    
1786    pythonqt (doesn't seem to be python-qtN, unknown source)
1787            - fontmatrix <unfixed> (embed)
1788            - elmerfem <unfixed> (embed)
1789    
1790    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1791            - docvert <unfixed> (embed)
1792            - jifty <unfixed> (embed)
1793            - kdenetwork <unfixed> (embed)
1794            - mediatomb <unfixed> (embed)
1795            - plastex <unfixed> (embed)
1796            - plone3 <removed> (embed)
1797            - python-chaco <unfixed> (embed)
1798            - python-docutils <unfixed> (embed)
1799            - s5 <unfixed> (embed)
1800            - zope2.10 <unfixed> (embed)
1801            - zope2.11 <removed> (embed)
1802            - cython <not-affcted> (embed)
1803            NOTE: part of documentation, which is not installed into the binary package
1804    
1805    python-docutils
1806            - zope2.10 <unfixed> (embed)
1807            - zope2.11 <removed> (embed)
1808    
1809    tesseract
1810            - ocropus <unfixed> (static)
1811    
1812    antlr
1813            - kdevelop <unfixed> (embed)
1814    
1815    libxerces2
1816            - openjdk-6 <unfixed> (embed)
1817    
1818    kfreebsd-8
1819            - kfreebsd-7 <unfixed> (old-version)
1820            - kfreebsd-6 <removed> (old-version)
1821    
1822    ruby1.9.1
1823            - ruby1.9 <unfixed> (old-version)
1824            - ruby1.8 <unfixed> (old-version)
1825    
1826    maildrop
1827            - courier <unfixed> (embed) [./maildrop]
1828    
1829    glee
1830            - warzone2100 <not-affected> (embed)
1831    
1832    phing
1833            - symfony <unfixed> (embed)
1834    
1835    pake
1836            - symfony <unfixed> (embed)
1837    
1838    propel
1839            - symfony <unfixed> (embed)
1840    
1841    creole
1842            - symfony <unfixed> (embed)
1843    
1844    hfsutils
1845            - cdrkit <unfixed> (embed; bug #570187)
1846            NOTE: embeds hfsutils code in genisoimage
1847    
1848    cdrkit
1849            - grub2 <unfixed> (embed; bug #570156)
1850            NOTE: genisoimage imported into grub-mkisofs
1851    
1852    kdebase-workspace
1853            - kdebase <unfixed> (old-version)
1854    
1855    file
1856            - php5 <unfixable> (modified-embed)
1857            [lenny] - php5 <not-affected>
1858    
1859    cdb
1860            - php5 <unfixed> (embed)
1861    
1862    libmbfl (itp: #570708)
1863            - php5 <unfixed> (embed)
1864            NOTE: PHP is actually the current upstream, ITP is of that code
1865    
1866    libonig
1867            - php5 5.3.2-1 (embed)
1868    
1869    xmlrpc-epi
1870            - php5 <unfixed> (embed)
1871    
1872    swt-gtk
1873            - eclipse <unfixed> (embed; bug #538808)
1874    
1875    txt2html
1876            - wml 2.0.11ds2-1 (embed)
1877    
1878    ca-certificates
1879            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1880    
1881    openexr
1882            - freeimage <unfixed> (embed)
1883    
1884    libmng
1885            - freeimage <unfixed> (embed)
1886    
1887    openjpeg
1888            - freeimage <unfixed> (embed)
1889    
1890    libjpeg6b
1891            - freeimage <unfixed> (embed)
1892    
1893    libjpeg (don't know what exact version)
1894            - dcmtk <unfixed>
1895            - gdcm <unfixed>
1896            - insighttoolkit <unfixed>
1897            - openarena 0.8.5-5+exp1 (bug #495966)
1898            - outguess <unfixed>
1899            - squeak-vm <unfixed> (embed)
1900            - tremulous <unfixed>
1901            - tuxonice-userui <unfixed> (static)
1902            - fpc <unfixed> (static)
1903            - lazarus <unfixed> (static)
1904            NOTE: inherited from fpc, see #472304
1905            - mseide-msegui <unfixed> (static)
1906            NOTE: inherited from fpc, see #472304
1907            - easymp3gain <unfixed> (static)
1908            NOTE: inherited from fpc, see #472304
1909            - winff <unfixed> (static)
1910            NOTE: inherited from fpc, see #472304
1911            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1912    
1913    
1914    lxr
1915            - lxr-cvs <unfixed> (embed)
1916    
1917    libfile-copy-recursive-perl
1918            - r-base <unfixed> (embed; bug #577427)
1919            - r-base-core-ra <unfixed> (embed; bug #577429)
1920    
1921    delimmatch
1922            - r-base <unfixed> (embed; bug #577433)
1923            - r-base-core-ra <unfixed> (embed; bug #577434)
1924    
1925    libsmf (ITP: #572558)
1926            - denemo <unfixed> (embed)
1927            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1928    
1929    libselinux
1930            - dpkg 1.15.6 (static)
1931    
1932    xinha (ITP: #479708)
1933            - horde3 <unfixed>
1934            - serendipity <unfixed>
1935            - openacs <unfixed>
1936            - dotlrn <unfixed>
1937    
1938    dvipng
1939            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1940    
1941    dvipdfmx
1942            - texlive-bin <unfixed> (embed)
1943            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1944    
1945    lcdf-typetools
1946            - texlive-bin 2009-1 (embed)
1947    
1948    tex4ht
1949            - texlive-bin 2009-1 (embed)
1950    
1951    freetype
1952            - texlive-bin 2009-1 (embed)
1953    
1954    freetype2
1955            - texlive-bin 2009-1 (embed)
1956    
1957    silgraphite
1958            - texlive-bin <unfixed> (embed)
1959    
1960    unzip
1961            - texlive-bin 2009-1 (embed)
1962    
1963    jbig2dec
1964            - ghostscript 8.71~dfsg2-1 (embed)
1965    
1966    libxml2
1967            - chromium-browser 5.0.375.29~r46008-1
1968    
1969    protobuf
1970            - chromium-browser 5.0.375.70~r48679-2
1971    
1972    libv8
1973            - chromium-browser 5.0.375.38~r46659-1
1974    
1975    nspr
1976            - chromium-browser 5.0.375.29~r46008-3
1977    
1978    yasm
1979            - chromium-browser 5.0.375.29~r46008-2
1980    
1981    libxslt
1982            - chromium-browser 5.0.375.29~r46008-1
1983    
1984    miniupnpc (not packaged in Debian; ITP bug #444392)
1985            - warzone2100 <unfixed> (embed)
1986    
1987    iniparser (not packaged in Debian; RFP bug #582657)
1988            - warzone2100 <unfixed> (modified-embed)
1989    
1990    pyglet
1991            - sympy <unfixed> (embed; bug #459716)
1992    
1993    mpmath
1994            - sympy <unfixed> (embed; bug #541746)
1995    
1996    curl
1997            - criticalmass <unfixed> (static; bug #599061)
1998            - wengophone <unknown> (embed)
1999    
2000    lib3ds
2001            - boson <unfixed> (embed; bug #600900)

Legend:
Removed from v.1593  
changed lines
  Added in v.15503

  ViewVC Help
Powered by ViewVC 1.1.5