/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3477 by jmm-guest, Tue Feb 14 11:40:47 2006 UTC revision 16388 by pabs, Wed Mar 16 10:22:30 2011 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26  xpdf code: (some use xpdf 2, some xpdf 3)  The srcpkg might be some string to identify the code if there is no
27  gpdf  specific source package.
28  pdftohtml  
29  kdegraphics/kpdf  Everything up to the next line is ignored.
30  tetex-bin (links to poppler since 3.0-12)  ---BEGIN
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
31  poppler  poppler
32  koffice          - pdftohtml <unknown>
33  libextractor          [sarge] - pdftohtml <unfixed>
34  pdfkit.framework (links to poppler since 0.8-4)          [etch] - pdftohtml <unfixed>
35            NOTE: has been replaced by poppler-utils
36            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37            - texlive-base 3.0-12 (embed)
38            - texlive-bin 2007-1 (embed)
39            - koffice 1:2.0.0-1 (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53    ppmd
54            - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60            - dnsproxy <unknown> (embed)
61    
62    lrmi
63            - read-edid 2.0.0-1 (embed; bug #495131)
64            - s3switch <unfixed> (embed)
65            - xresprobe <unfixed> (embed)
66            - zhcon <unfixed> (embed)
67    
68    php-htmlpurifier
69            - mahara 1.2.5-1 (embed)
70            - knowledgeroot 0.9.9.5-5 (embed)
71            - moodle <unfixed> (embed)
72    
73    peercast
74            - gnome-peercast <removed> (embed)
75            [etch] - gnome-peercast <unfixed> (embed)
76    
77    silc-toolkit
78            - silc-client 1.1~beta6-1 (embed)
79    
80    icclib
81            - ghostscript <unfixed> (embed)
82            - argyll <unfixed> (embed)
83    
84    libusb
85            - argyll <unfixed> (embed)
86            - ia32-libs <unfixable> (embed)
87    
88    dietlibc
89            - ccontrol 0.9.1+20071204-1 (static)
90            - mksh <unfixable> (static)
91            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
92    
93    libmikmod
94            - pysol-sound-server <unfixed> (modified-embed)
95            - sdl-mixer1.2 <unfixed> (embed)
96            TODO: report bug
97            - uqm 0.6.2.dfsg-8 (embed)
98            NOTE: Might be fixed earlier. Lenny version recorded.
99            - black-box 1.4.6-2.2 (embed)
100            NOTE: Might be fixed earlier. Lenny version recorded.
101    
102    libiax
103            - iaxmodem <unfixable> (embed; bug #548885)
104    
105    spandsp
106            - iaxmodem <unfixable> (embed; bug #548885)
107    
108    python-paramiko
109            - fabric 0.9.0-2 (embed; bug #561398)
110    
111    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
112            - dpkg 1.15.6 (static)
113            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
114            - rsync <unfixed> (embed)
115            - cherokee <unfixed> (embed)
116            NOTE: somehow derived code base
117            - mono <unfixed> (embed)
118            TODO: check mozilla
119            - linux-2.6 <unfixed> (embed)
120            - pvpgn 1.7.8-2 (embed)
121            - mrtg 2.12.2-1 (embed)
122            - rpm <unknown> (embed)
123            NOTE: pinged anibal since when rpm was fixed
124            - tuxcmd-modules <unfixed> (embed)
125            - zsync <unfixed>
126            - tra <unfixed>
127            - sash <unfixed>
128            - nsis <unfixed>
129            - pyfits 1:2.3.1-1
130            - mseide-msegui <unfixed>
131            NOTE: mseide
132            - mirrordir <unfixed>
133            - poco <unfixed>
134            - klibc <unfixed>
135            - emboss 6.3.1-1 (embed)
136            - ghostscript 8.71~dfsg2-6 (embed)
137            NOTE: ghostscript fixed sometime before this, but this is the version i checked
138            - freeimage <unfixed>
139            - clamav <unfixed> (fork)
140            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
141            - tuxonice-userui <unfixed> (static)
142            - plt-scheme <unfixed>
143            - perl <unfixed>
144            - paraview <unfixed>
145            - velvet 0.7.56~nozlibcopy-1
146            - gcvs <unfixed>
147            - dump <unfixed>
148            - aide <unfixed> (static)
149            - dar <unfixed> (static)
150            - avfs <unfixed>
151            - fpc <unfixed>
152            - winff <unfixed>
153            NOTE: inherited from fpc, see #472304
154            - lazarus <unfixed>
155            NOTE: inherited from fpc, see #472304
156            - erlang <unfixed> (embed)
157            - gamera 3.2.3-1 (embed)
158            - python2.4 <unfixed> (embed; bug #553403)
159            - python2.5 <unfixed> (embed; bug #553403)
160            - texlive-bin <unknown> (embed)
161    
162    dulwich
163            - hg-git 0.1.0-1 (embed; bug #541996)
164    
165    libvigraimpex
166            - hugin <unfixed> (embed; bug #542259)
167            - enblend-enfuse <unfixed> (embed; bug #542258)
168            - gamera 3.2.3-1 (embed)
169    
170    libbz2
171            - dpkg 1.15.6 (static)
172            - amd64-libs <unfixed> (static)
173            NOTE: let's call it "static"
174            - dar <unfixed> (static)
175            - dump <unfixed> (static)
176            - unalz 0.64-1 (embed)
177            NOTE: has code, by the maint, to use the system version but links against the internal copy
178            - clamav <unfixed> (embed)
179            NOTE: libclamav/nsis/bzlib*
180            - pristine-tar <unfixable> (modified-embed)
181            NOTE: compression code only, not uncompression
182            - r-base-core-ra 1.2.8 (static)
183            - r-base-core 2.11.1 (static)
184            NOTE: links dynamically in squeeze, statically in lenny
185            - rpm <unfixed> (static)
186            NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
187    
188    libyahoo2
189            - centerim <unfixed> (embed; bug #559783)
190    
191    libmsn
192            - centerim <unfixed> (embed; bug #559783)
193    
194    libgadu
195            - centerim <unfixed> (embed; bug #559783)
196            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
197            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
198            - kdenetwork 4:3.3.2-5 (embed)
199            NOTE: from kdenetwork: kopete
200            - ekg 1:1.8~rc0-1 (embed)
201            - kadu 0.6.0.2-3 (embed; bug #504430)
202            - gadu <itp> (embed)
203    
204    xmlrpc (which package is the "origin" of this code?)
205            - drupal <unfixed> (embed)
206            - phpgroupware <unfixed> (embed)
207            - egroupware <unfixed> (embed)
208            - phpwiki <unfixed> (embed)
209            - php4 <removed> (embed)
210            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
211    
212    shtool (affects build-time only)
213            - mysql-ocaml <unfixed> (embed)
214            - php4 <removed> (embed)
215            - php5 <unfixed> (embed)
216    
217    xulrunner
218            - iceape <unfixed> (embed; bug #561749)
219            - iceweasel 2.0.0.19 (embed)
220            - icedove <unfixed> (embed; bug #561750)
221            - kompozer <unfixed> (embed; bug #532168)
222            - galeon 2.0.2-4 (embed)
223            - epiphany-browser 2.14.3-8 (embed)
224            - conkeror 0.9~git080629-2 (embed)
225            - kazehakase 0.4.2-1 (embed)
226    
227    xli
228            - xloadimage <unfixed> (embed)
229    
230    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
231            - openmotif <unfixed> (embed)
232    
233    libxpm
234            - lesstif2 <unfixed> (embed; bug #575750)
235            - ia32-libs <unfixable> (embed)
236    
237    kerberized apps with BSD origin
238            - krb4 <removed> (embed)
239            - krb5 <unfixed> (embed)
240            - heimdal <unfixed> (embed)
241    
242    grip (which pkg is the origin?)
243            - libcdaudio <unfixed>
244            - grip <unfixed>
245            - gnome-vfs <unfixed>
246            TODO: check vfs2 as well
247    
248    fudforum
249            [etch] - phpgroupware <unfixed> (embed)
250            NOTE: phpgroupware-fudforum
251            [sarge] - egroupware-fudforum <removed> (embed)
252    
253    libbsd
254            - rdate 1:1.2-3 (embed)
255            - atheme-services <unfixed>
256            - libbsd-arc4random-perl <not-affected> (modified-embed)
257            NOTE: code not used, it links dynamically against libbsd instead
258            - isakmpd <unfixed>
259            - bsdgames <unfixed> (embed)
260            - bsd-mailx <unfixed> (embed)
261            - netcat-openbsd <unfixed> (embed; bug #550611)
262            - openssh <unfixed> (embed)
263            - unworkable <unfixed> (embed)
264            - mksh <unfixed> (modified-embed)
265            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
266            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
267            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
268            - ia32-libs <unfixable> (embed)
269    
270    cvs
271            - gcvs <unfixed> (embed)
272            NOTE: see cvsunix/src in tarball
273    
274    pcre3
275            - php4 <removed> (embed)
276            - analog 2:5.23-0woody1 (embed)
277            - chicken 3.2.7-2 (embed)
278            NOTE: Might be fixed earlier. Lenny version recorded.
279            - goffice <unfixed> (embed)
280            NOTE: libgoffice-*
281            - hypermail 2.2.0.dfsg-2 (embed)
282            NOTE: Might be fixed earlier. Lenny version recorded.
283            - privoxy 3.0.9-1 (embed)
284            NOTE: Might be fixed earlier. Lenny version recorded.
285            - vfu 4.06-4.1 (embed; bug #450754)
286            - tf5 5.0beta7-1 (embed)
287            - monotone 0.43-1 (embed)
288            NOTE: this only affects versions >= 0.37
289            - glib2.0 2.15.2-1 (embed)
290            - apache2 2.0.53-4 (embed)
291            - exim4 4.10-0.srh20.12 (embed)
292            - yacas <unfixed> (embed)
293            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
294            - gtamsanalyzer.app 0.42-5 (embed)
295            - tin 980117-1 (embed)
296            - kazehakase 0.5.2-1
297            - webkit 1.0.1-1 (embed)
298            - qt4-x11 <unfixed> (embed)
299            NOTE: embedded via webkit copy
300            - erlang <unfixed> (embed)
301            - ssed <unfixed> (embed)
302            - ircd-hybrid <unfixed> (static)
303            - emboss <unfixed> (fork)
304            - cherokee <unfixed> (embed)
305            - oftc-hybrid 1.6.9.dfsg-1 (embed)
306            - ratbox-services <unfixed> (embed)
307            - squeak-vm <unfixed> (embed)
308            - tinymux <unfixed> (embed)
309    
310    tiff
311            - wxwindows2.4 2.2.1 (embed)
312            - gamera 3.2.3-1 (embed)
313            - freeimage <unfixed> (embed)
314            - libtk-img <unfixed> (embed)
315            NOTE: there are two copies, one under tiff/ other under libtiff/
316            - gdal <unfixed>
317            - ia32-libs <unfixable> (embed)
318    
319    uudeview
320            - libconvert-uulib-perl <unfixed> (embed)
321            - pan <unfixed> (embed)
322    
323    sqlite
324            - amarok <unfixed> (embed)
325            - monotone 0.43-1 (embed)
326            - iceweasel <unfixed> (embed)
327            - heimdal <unfixed> (embed; bug #559616)
328    
329    util-linux
330            - loop-aes-utils <unfixed> (embed)
331            NOTE: contains code from util-linux' mount in the mount-aes-udeb
332            - ia32-libs <unfixable> (embed)
333    
334    sylpheed
335            - sylpheed-claws <unfixed> (fork)
336    
337    phpsysinfo
338            - egroupware <unfixed> (embed)
339            - phpgroupware <unfixed> (embed)
340    
341    phpldapadmin
342            [sarge] - egroupware <unfixed> (embed)
343            NOTE: removed from egroupware after sarge
344    
345    chmlib
346            - kchmviewer <unknown> (embed)
347    
348    ffmpeg (libavcodec/libavformat)
349            - mplayer 1.0~rc2-14 (embed; bug #395252)
350            - kino 1.0.0-1
351            - vlc <not-affected> (Links dynamically since initial release)
352            - smilutils 0.3.0-10
353            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
354            - motion 3.1.19-1
355            - gstreamer0.10-ffmpeg 0.10.3-2
356            - xmovie <removed> (static)
357            TODO: gimp-gap (potentially using ffmpeg code as well)
358            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
359            - audacity 1.3.7-2 (embed; bug #512278)
360            - chromium-browser <unfixed> (fork)
361    
362    faad2
363            - mplayer 1.0~rc2-20 (embed)
364            - avifile <unfixed> (embed; bug #538750)
365            - ffmpeg-debian <removed> (embed)
366    
367    libmad (MPEG decoding lib)
368            - xine-lib <unfixed> (embed)
369            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
370            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
371    
372  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  libdts
373  dpkg          - xine-lib <unfixed> (embed)
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
374    
375    flac
376            - xine-lib <unfixed> (embed)
377            - ia32-libs <unfixable> (embed)
378    
379  libgadu/ekg:  liba52
380  centericq          - a52dec <unfixed> (embed)
381  gaim          - xine-lib <unfixed> (embed)
382  kopete (ships the code, but links dynamically in the Debian package)  
383  kadu (not packaged in Debian)  mpeg2dec (libmpeg2)
384  GNU gadu (not yet packaged in Debian)          - xine-lib <unfixed> (embed)
385    
386    libmpeg3
387            - squeak-vm <unfixed> (embed)
388    
389    libntlm
390            - wget <unfixed> (fork; bug #550436)
391            - curl <unfixed> (fork; bug #550437)
392            - cntlm <unfixed> (fork; bug #550438)
393    
394    uw-imap
395            - pine <unfixed> (embed)
396            - alpine <unfixed> (embed)
397    
398    imagemagick
399            - graphicsmagick <unfixed> (fork)
400    
401    python-urlgrabber
402            - mercurial <unfixed> (embed; bug #531062)
403            - w3af <unfixed> (embed; bug #555372)
404            [experimental] - harvestman <unfixed> (embed; bug #555373)
405    
406    beautifulsoup
407            - python-mechanize <unfixed> (embed; bug #555349)
408            - zope2.11 <removed> (embed; bug #555350)
409            - twill <unknown> (embed)
410    
411    halibut
412            - nsis <unfixed> (fork)
413    
414    libghttp
415            - hotway <unfixed> (embed)
416    
417    libsndfile
418            - ardour 1:2.7.1-1 (embed)
419            - ia32-libs <unfixable> (embed)
420    
421    glibmm2.4
422            - ardour 1:2.7.1-1 (embed)
423    
424    libgnomecanvasmm2.6
425            - ardour 1:2.7.1-1 (embed)
426    
427    libsigc++-2.0
428            - ardour 1:2.7.1-1 (embed)
429            - ia32-libs <unfixable> (embed)
430    
431    soundtouch
432            - ardour 1:2.7.1-1 (embed)
433    
434    libmms
435            - xine-lib <unfixed> (embed)
436            - mimms <unfixed> (embed)
437    
438    fckeditor
439            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
440            - moin 1.8.2-2 (embed; bug #452599)
441            - karrigell <removed> (embed; bug #452598)
442            - gforge 4.6.99+svn6225-1 (embed)
443            - request-tracker3.8 <unfixed> (embed)
444            - otrs2 <unfixed> (embed)
445    
446    ipatlas (not packaged in Debian)
447            - moodle <unfixed> (embed; bug #507185)
448    
449    libphp-phpmailer
450            - moodle <unfixed> (embed; bug #507185)
451            - mahara <unfixed> (embed)
452            - symfony <unfixed> (embed; bug #566778)
453            [etch] - phpgroupware <unfixed> (embed)
454            NOTE: phpgroupware-felamimail is only in etch
455            - egroupware <unfixed> (embed; bug #504283)
456            - glpi <unfixed>
457    
458    htmlArea (not packaged in Debian)
459            - moodle <unfixed> (embed)
460    
461    giflib
462            - wine <unfixed> (embed; bug #466181)
463    
464    bennu (not packaged in Debian, http://bennu.sourceforge.net)
465            - moodle <unfixed> (embed)
466    
467    smarty
468            - moodle 1.8.2-2 (embed; bug #471158)
469            - gallery2 2.2.5-2 (embed; bug #471160)
470            - mahara 0.9.2-2 (embed; bug #471201)
471            - gosa 2.4beta1-1 (embed; bug #471200)
472    
473    TinyMCE
474            - wordpress 2.5.1-3 (embed; bug #478257)
475            - moodle <unfixed> (embed; bug #507185)
476            - knowledgeroot <unfixed> (embed)
477            - joomla <itp> (bug #326398)
478            - mahara 1.2.6-1 (embed; #597752)
479    
480    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
481            - scite <unfixed> (embed)
482            - qscintilla <unfixed> (embed)
483            - qscintilla2 <unfixed> (embed)
484            - geany <unfixed> (fork)
485            - anjuta <unfixed> (embed)
486    
487    libphp-adodb
488            - moodle <unfixed> (embed; bug #507185)
489            NOTE: also AdoDB-XML Schema
490            - gallery2 <unfixed> (embed)
491            - phppgadmin <unfixed> (embed)
492            - egroupware <unfixed> (embed)
493            - phpwiki <unfixed> (embed)
494            - torrentflux 2.0beta1-2 (embed)
495            - ipplan <unfixed> (embed)
496            - typo3-src <unfixed> (embed)
497            - cacti <unknown> (embed)
498            [sarge] - cacti <unfixed> (embed)
499            NOTE: dependency exists, but internal version is used
500            - gforge 4.7~rc2-6 (embed)
501            - mahara <unfixed> (embed)
502    
503    gzip
504            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
505            - klibc <unfixed> (embed)
506            NOTE: based on linux-kernel gzip code
507            - busybox <unfixed> (embed)
508            - pristine-tar <unfixed> (modified-embed)
509            NOTE: compression code only, not uncompression
510            - ncompress <unfixed> (old-version)
511    
512    neon
513            - cadaver 0.22.3+debian-1 (embed; bug #188381)
514            - gnome-vfs2 <unfixed> (embed; bug #395874)
515            [etch] - litmus <unfixed> (embed; #395875)
516            - litmus <removed> (embed; #395875)
517            [sarge] - screem <unfixed> (embed)
518            - sitecopy 1:0.16.0-1 (embed; bug #395876)
519            [etch] - tla <unfixed> (embed; bug #395877)
520            [sarge] - tla <unfixed> (embed; bug #395877)
521    
522    libmodplug
523            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
524    
525    libvncserver
526            - vino <unfixed> (embed)
527    
528    putty
529            - filezilla <unfixed> (embed)
530    
531    tinyxml
532            - filezilla <unfixed>
533            - crystalspace <unfixed> (embed)
534            - libwfut <unfixed> (embed)
535            - rarian <unfixed> (embed)
536            - bulletml <unfixed> (embed)
537            - pokerth <unfixed> (embed)
538            - qutecom <unfixed> (embed)
539            - sofa-framework <unfixed> (embed)
540            - yate <unfixed> (embed)
541            - antigrav <unfixed> (embed)
542            - balder2d <unfixed> (embed)
543            - cal3d <unfixed> (embed)
544            - criticalmass <unfixed> (embed)
545            - ember <unfixed> (embed)
546            - epiphany <unfixed> (embed)
547            - gambit <unfixed> (embed)
548            - noiz2sa <unfixed> (embed)
549            - ogre <unfixed> (embed)
550            - opencity <unfixed> (embed)
551            - openmovieeditor <unfixed> (embed)
552            - pouetchess <unfixed> (embed)
553            - tecnoballz <unfixed> (embed)
554            - trigger-rally <unfixed> (embed)
555            - xmoto <unfixed> (embed)
556            - mapnik <unknown> (embed)
557            NOTE: uses a different XML parser by default
558            - rrootage 0.23a-6 <embed>
559            NOTE: links to libbulltetml
560            - boson <unknown> (embed)
561            NOTE: the embedded code is unused
562            - cppcheck <unfixed> (embed)
563            NOTE: introduced in 1.47, will use system's version in 1.48
564            [squeeze] - cppcheck <not-affected>
565    
566    gv
567            - evince <unfixed> (embed)
568            NOTE: ps/ tree from gv 3.5.8
569            NOTE: evince-gtk is affected (a component of evince source package)
570    
571    libXbae
572            - paw <unfixed> (embed)
573    
574    libgtkhtml
575            - claws-mail-extra-plugins <unfixed> (fork)
576    
577    libXaw
578            - paw <unfixed> (embed)
579            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
580            - ia32-libs <unfixable> (embed)
581    
582    libgd2
583            - graphviz 2.16-1 (embed)
584            NOTE: lib/gd seems to be 2.0.33
585            - wml 2.0.11ds2-1 (embed)
586            - libwmf <unfixed> (embed)
587            NOTE: derived from gd 1.6.3, but only used to write images
588            - plt-scheme <unfixed> (embed; bug #601525)
589            - texlive-bin 2009-1 (embed)
590    
591    rar
592            - unrar-nonfree <unfixed> (embed)
593    
594    unrar-free (maybe this code is derived from the original rar, too?)
595            - clamav <unfixed> (embed)
596            NOTE: seems to be disabled in default config
597    
598    mplayer (DirectMedia Object loader)
599            - xine-lib <unfixed> (embed)
600            NOTE: src/libw32dll/
601            - vlc <unfixed> (embed)
602            NOTE: modules/codec/dmo/
603            - mplayer 1.0~rc2-20 (embed)
604    
605    libwpd (WordPerfect converter)
606            - openoffice.org <unfixed> (embed)
607    
608    fsplib (http://sourceforge.net/projects/fsp/)
609            - gftp <unfixed> (embed)
610            NOTE: lib/fsplib version 0.3
611    
612    sprng
613            - tree-puzzle <unfixed> (embed)
614    
615    librpcsecgss
616            - krb5 <unfixed> (embed)
617    
618    jasper
619            - ghostscript 8.64~dfsg-2 (embed)
620    
621    libiris
622            - psi <unfixed> (embed)
623            - kdenetwork <unfixed> (embed)
624            NOTE: kopete embeds libiris but links dynamically to libidn
625            - kdegames <unfixed> (embed)
626            NOTE: ksirk/kde4
627    
628    libidn
629            - monotone 0.43-1 (embed)
630            - psi <unfixed> (embed)
631            NOTE: psi embeds libiris which embeds libidn
632            - kdegames <unfixed> (embed)
633            NOTE: kdegames/kde4 embeds libiris which embeds libidn
634            - ia32-libs <unfixable> (embed)
635    
636    lua5.1
637            - monotone 0.43-1 (embed)
638            - nmap 5.00-1 (embed; bug #527997)
639            [lenny] - nmap <unfixed> (embed; bug #527997)
640            - ocropus <unfixed> (embed)
641            - enigma <unfixed> (embed)
642            NOTE: requires lua built with C++
643            - freeciv <unfixed> (embed)
644            - spring <unfixed> (embed)
645    
646    libbotan
647            - monotone 0.43-1 (embed)
648    
649    NetXX
650            - monotone 0.43-1 (embed)
651    
652    libgc
653            - mono <unfixed> (embed)
654    
655    lzma
656            - p7zip <unfixed> (embed)
657            - xz-utils <unfixed> (fork)
658            - r-base <unfixed> (embed)
659            NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
660    
661    lzo
662            - grub2 <unfixed> (embed)
663    
664    yassl
665            - mysql-dfsg-5.0 <unfixed> (embed)
666            - mysql-5.1 <unfixed> (embed)
667    
668    pax code
669            - tar <unfixed> (embed)
670            - cpio <unfixed> (embed)
671    
672    t1lib
673            - tetex-bin 2.0.2-1 (embed)
674            - texlive-bin <unknown> (embed)
675            - grace 5.1.14-2 (embed)
676            NOTE: Might be fixed even earlier
677    
678    guichan
679            - boswars <unfixed> (embed)
680            NOTE: maintainer notified us, working on it
681    
682    tolua
683            - boswars <unfixed> (embed)
684            NOTE: maintainer notified us, working on it
685            NOTE: actually tolua++
686            - ocropus <unfixed> (embed)
687            NOTE: actually tolua++
688            - freeciv <unfixed> (embed)
689            NOTE: actually tolua++
690            - enigma <unfixed> (embed)
691    
692    asio-dev
693            - luxrender <removed> (embed)
694    
695  xmlrpc: (which package is the "origin" of this code?)  xine-lib
696  drupal          - vlc <unfixed> (embed)
697  phpgroupware          NOTE: only parts included in modules/access/rtsp
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
698    
699    netpbm
700            - tcl8.3 <unfixed> (embed)
701            - tcl8.4 <unfixed> (embed)
702            - tcl8.5 <unfixed> (embed)
703            NOTE: generic/tkImgGIF.c
704    
705    tk8.5
706            - tk8.0 <removed> (old-version)
707            - tk8.3 <unfixed> (old-version)
708            - tk8.4 <unfixed> (old-version)
709            - perl-tk <unfixable> (fork)
710    
711    samba
712            - mc 2:4.6.2~git20080311-1 (embed)
713            NOTE: maintainer is aware of this, currently searching a solution
714    
715    plib1.8.4c2
716            - boson <unfixed> (fork)
717            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
718    
719    fribidi
720            - quesoglc 0.7.2-2 (embed)
721    
722    glew
723            - quesoglc <unfixed> (embed; bug #489341)
724            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
725            - trigger 0.5.2.1-2 (embed)
726            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
727            - trigger-rally 0.5.2.1-2 (embed)
728            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
729            - chromium-browser 5.0.375.70~r48679-2
730    
731    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
732            - transcend <unfixed> (embed)
733            - cultivation <unfixed> (embed)
734            - passage <unfixed> (embed)
735            - gravitation <unfixed> (embed)
736    
737    tar
738            - libarchive <unfixed> (embed)
739            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
740    
741    cpio
742            - libarchive <unfixed> (embed)
743            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
744    
745    kde4libs
746            - kdelibs <unfixable> (old-version)
747    
748    webkit
749            - qt4-x11 <unfixed> (embed; bug #479851)
750            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
751            - kde4libs <unfixable> (fork)
752            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
753            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
754            - chromium-browser <unfixed> (fork)
755    
756    ftgl
757            - blender 2.46+dfsg-1 (embed)
758            - vtk <unfixed> (embed)
759            - paraview <unfixed> (embed)
760            NOTE: as part of its copy of vtk
761            - tulip <unfixed> (embed)
762            NOTE: depends on -dev but string found on binary
763            - root-system <unknown> (embed)
764            NOTE: depends on -dev package; not confirmed at source
765            - rgl <unknown> (embed)
766            NOTE: not sure if it is built
767            - mysql-gui-tools <unknown> (embed)
768            NOTE: not sure if it is built
769            - k3d <unfixed> (embed)
770            - extremetuxracer <unknown> (embed)
771            NOTE: not sure if it is built
772            - critterding <unknown> (embed)
773            - lightspeed <unfixed>
774            NOTE: depends on -dev but string found on binary
775    
776    wv
777            - abiword <unfixed>
778    
779    qemu
780            - kvm <removed> (embed; bug #543159)
781            - qemu-kvm <unfixed> (embed; bug #560853)
782            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
783            - xen-3 3.4.2-2 (embed; bug #560856)
784            - xen-unstable <unfixed> (embed; bug #560856)
785    
786    vgabios
787            - kvm <removed> (embed; bug #489442)
788            - qemu-kvm <unfixed> (embed)
789    
790    bochs
791            - kvm <removed> (embed; bug #489442)
792            - qemu-kvm <unfixed> (embed)
793    
794    speex
795            - vorbis-tools <unfixed> (embed)
796            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
797            - gst-plugins-good0.10 <unfixed> (embed)
798            - xine-lib <unfixed> (embed)
799            - libfishsound <unfixed> (embed)
800            - libannodex <removed> (embed)
801            - opal 3.4.2~dfsg-2 (embed)
802            - mumble 1.2.0~beta1-1 (embed)
803            - vlc <unfixed> (embed)
804            - xmms-speex <unfixed> (embed)
805            - libsdl-sound1.2 <unfixed> (embed)
806            - sweep <unfixed> (embed)
807    
808    libreadline
809            - magic <itp> (old-version)
810    
811    opcode
812            - ode <unfixed> (embed)
813            NOTE: opcode is not a package in debian, it is just embedded
814            NOTE: http://www.codercorner.com/Opcode.htm
815    
816    gimpact
817            - ode <unfixed> (embed)
818            NOTE: gimpact is not a package in debian, it is just embedded
819            NOTE: http://gimpact.sf.net
820    
821    mochikit
822            - mahara <unfixed> (embed)
823            NOTE: they require extra patches, still unmerged upstream
824            - ntop <unfixed> (embed)
825            - coherence 0.6.2-1 (embed)
826            - paste <unfixed> (embed)
827            - turbogears <unfixed> (embed)
828            - plone3 <removed> (embed)
829            - xulrunner <unfixed> (embed)
830            - libjifty-plugin-chart-perl <unfixed> (embed)
831            - sabnzbdplus <unfixed> (embed)
832            - tgmochikit <unfixed> (embed)
833    
834    prototypejs
835            - netbeans-ide 6.0.1+dfsg-2 (embed)
836            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
837            - webcit <unfixed> (embed; bug #555219)
838            - asterisk 1:1.6.2.0~rc3-1 (embed)
839            - libjson-ruby 1.1.4-1 (embed; bug #555224)
840            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
841            - horde3 <unfixed> (embed)
842            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
843            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
844            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
845            - ebug-http <unfixed> (embed; bug #555236)
846            - libaws 2.7-1 (embed; bug #555222)
847            - phpgedview <removed> (embed)
848            - poker-network 1.7.6-1 (embed; bug #555238)
849            - rails 2.1.0-6 (embed)
850            - wordpress 2.5.0-2 (embed; bug #555243)
851            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
852            TODO: search through all of the other zope packages
853            - ampache 3.4.1-2 (embed)
854            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
855            - hobix 0.5~svn20070319-4 (embed; bug #555247)
856            - zabbix 1.6.6-4 (embed; bug #555250)
857            - chora2 2.1.1+debian0-1 (embed; bug #555253)
858            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
859            - jscropperui 1.2.1-1 (embed; bug #555257)
860            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
861            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
862            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
863            - activeldap 1.2.1-1 (embed)
864            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
865            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
866            - otrs2 2.3.4-6 (embed; bug #555267)
867            - webcalendar 1.2~b1-2 (embed; bug #555269)
868            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
869            - jifty 0.90519-1 (embed; bug #555271)
870            - jquery 1.4-1 (embed; bug #555272)
871            - passenger 2.2.5debian1-1 (embed; bug #555273)
872            - plone3 <removed> (embed; bug #555275)
873            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
874            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
875            - xulrunner <unfixed> (embed)
876            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
877            - jclicmoodle <unfixed> (embed)
878            - git-cola <unfixed> (embed)
879    
880    gdb
881            - insight <unfixed> (embed)
882    
883    e2fsprogs
884            - ldiskfsprogs <unfixable> (fork)
885            - ia32-libs <unfixable> (embed)
886    
887    quazip (not packaged in Debian)
888            - qcake <unfixed> (embed)
889            NOTE: starting with upstream version 0.6.4
890    
891    exo
892            - pcmanfm <unfixed> (embed; bug #499677)
893            NOTE: slightly modified source code
894    
895    java
896            - openjdk-6 <unfixed>
897            - sun-java5 <unfixed>
898            - sun-java6 <unfixed>
899    
900    libphp-snoopy
901            - ampache 3.4.1-2 (embed; bug #504169)
902            - gforge 4.6.99+svn6094-2 (embed)
903            - mahara 1.0.5-2 (embed; bug #504170)
904            - pixelpost 1.7.1-5 (embed; bug #504171)
905            - mediamate 0.9.3.6-5 (embed; bug #504172)
906            - opendb <removed> (embed; bug #504173)
907            [etch] - opendb <unfixed> (embed; bug #504173)
908            - wordpress 2.5.1-9 (embed; bug #443948)
909            - moodle <unfixed> (embed; bug #507185)
910            [etch] - phpgroupware <unfixed> (embed)
911            NOTE: phpgroupware-felamimail
912            - magpierss 0.72-3 (embed; bug #431089)
913    
914    jquery
915            - zekr <unfixed> (embed)
916            - wordpress <unknown> (embed)
917            - yocto-reader <unfixed> (embed)
918            - textpattern <unfixed> (embed)
919            - genshi 0.5.1-1 (embed)
920            NOTE: compressed file under examples/ dir
921            - prewikka <unfixed> (embed)
922            - libramaze-ruby <unfixed> (embed)
923            - drupal6 <unfixed> (embed)
924            - b2evolution <unfixed> (embed)
925            - wesnoth <unfixed> (embed)
926            - gammu 1.28.95-1 (embed)
927    
928    tablesorter (jquery plugin, not packaged yet)
929            - wesnoth <unfixed> (embed)
930    
931    kses
932            - wordpress <unfixed> (embed; bug #504242)
933            NOTE: their copy has all methods renamed to wp_<foo>
934            NOTE: kses isn't in Debian, RFP: #504240
935            - moodle <unfixed> (embed; bug #507185)
936            - egroupware <unfixed> (embed)
937    
938    magpierss
939            - wordpress <unfixed> (embed; bug #504242)
940            - moodle <unfixed>
941    
942    php-gettext
943            - wordpress 2.8.4-1 (embed; bug #504242)
944            - docbookwiki <unfixed> (embed)
945            - knowledgeroot 0.9.9.5-1
946            NOTE: non-free
947    
948    libphp-ixr (name may change, it is the Incutio XML-RPC)
949            - wordpress <unfixed> (embed; bug #504242)
950            NOTE: libphp-ixr isn't in Debian, RFP: #504236
951            - dokuwiki <unfixed> (embed)
952            - textpattern <unfixed> (embed)
953    
954    libphp-cas
955            - glpi <unfixed> (embed)
956            - moodle <unfixed> (embed; bug #505984)
957    
958    scriptaculous (prototype.js is among the embeds in the following)
959            - glpi <unfixed> (embed)
960            - libaws <unfixed> (embed; bug #555222)
961            - op-panel <unfixed> (embed)
962            - symfony <unfixed> (embed)
963            NOTE: maintainer says there are extra incompatible changes required
964            - pixelpost 1.7.1-6 (embed)
965            - webhelpers <unfixed> (embed)
966            - qwik <removed> (embed; bug #555241)
967            - smokeping <unfixed> (embed)
968            - turba2 <unfixed> (embed)
969            - typo3-src 4.2.3-1 (embed)
970            - request-tracker3.6 <unfixed> (embed)
971            - request-tracker3.8 <unfixed> (embed)
972            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
973            - wordpress 2.5.0-2 (embed)
974            - libhtml-prototype-perl 1.48-3 (embed)
975    
976    libmarkdown-php
977            - moodle <unfixed> (embed; bug #507185)
978            - pixelpost 1.7.1-6 (embed)
979    
980    php-openid
981            - wordpress-openid 3.3.2-1 (embed)
982    
983    geshi
984            - dokuwiki 0.0.20080505-3.1 (embed)
985            - pgfouine 1.0-1.1 (embed)
986            - websvn 2.1.0-1 (embed)
987    
988    webcalendar
989            - gforge 4.7~rc2-6 (embed; bug #504758)
990    
991    libical
992            - kdepim <unknown> (fork)
993            NOTE: fixed at some point during 4.0
994            - kdepimlibs 4.2.0-1 (fork)
995            - claws-mail-extra-plugins <unfixed> (fork)
996    
997    harfbuzz
998            - qt4-x11 <unfixed> (embed)
999            - pango1.0 <unfixed> (embed)
1000            - fontmatrix <unfixed> (embed)
1001    
1002    libzip
1003            - php5 <unfixable> (modified-embed)
1004            - odt2txt <unfixed> (embed; bug #523808)
1005    
1006    json.php (not packaged; should be replaced with php's built-in functions)
1007            - moodle <unfixed>
1008            - yui <unfixed>
1009            - gallery2 <unfixed>
1010            - dokuwiki <unfixed>
1011            - typo3-src <unfixed>
1012    
1013    php-fpdf
1014            - tcpdf <itp> (fork)
1015            - moodle <unfixed>
1016            - phpwiki <unfixed>
1017            - egroupware <unfixed>
1018            - ldap-account-manager <unfixed> (fork)
1019    
1020    tcpdf (itp: #495985)
1021            - moodle <unfixed>
1022            - phpmyadmin <unfixed>
1023    
1024    typo3
1025            - moodle <unfixed>
1026    
1027    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1028            - moodle <unfixed>
1029            - gosa <unfixed>
1030    
1031    php-ole (itp: #487558)
1032            - moodle <unfixed>
1033    
1034    pieforms (http://www.catalyst.net.nz)
1035            - mahara <unfixed>
1036    
1037    savant2 (http://phpsavant.com)
1038            - egroupware <unfixed>
1039    
1040    rssparser (http://nwow.org)
1041            - egroupware <unfixed>
1042            - phpgroupware <unfixed>
1043    
1044    lcms
1045            - openjdk-6 <unfixed> (fork)
1046            - gimp 2.4.0~rc2-2
1047            - ia32-libs <unfixable> (embed)
1048    
1049    libphp-phplayersmenu
1050            - diogenes <unfixed>
1051            - phpldapadmin <unfixed>
1052    
1053    libphp-pclzip
1054            - docvert <unfixed>
1055            - moodle <unfixed>
1056            - egroupware <unfixed>
1057    
1058    libphp-simplepie
1059            - dokuwiki <unfixed>
1060            - wordpress <unfixed>
1061    
1062    libphp-jpgraph
1063            - egroupware <unfixed>
1064    
1065    php-simpletest
1066            - moodle <unfixed>
1067    
1068    libpng
1069            - doxygen 1.5.6-2 (embed)
1070            NOTE: Might be fixed earlier. Lenny version recorded.
1071            - gdal 1.5.2-3 (embed)
1072            NOTE: Might be fixed earlier. Lenny version recorded.
1073            - iceweasel <not-affected> (uses xulrunner)
1074            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1075            - iceape 1.0.13~pre080614i-0etch1 (embed)
1076            - libfltk1.1 1.1.9-6 (embed)
1077            NOTE: Might be fixed earlier. Lenny version recorded.
1078            - libtk-img <unfixed> (embed)
1079            - htmldoc 1.8.27-3 (embed)
1080            NOTE: Might be fixed earlier. Lenny version recorded.
1081            - xulrunner 1.9.0.13-1 (embed)
1082            [lenny] - xulrunner 1.9.0.11-0lenny1
1083            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1084            - gamera 3.2.3-1 (embed)
1085            - freeimage <unfixed> (embed)
1086            - syslinux-common <unfixable> (embed)
1087            - tuxonice-userui <unfixed> (static)
1088            - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1089            NOTE: Might be fixed earlier. Lenny version recorded.
1090            - vice 1.22.dfsg1-0.1 (embed)
1091            NOTE: Might be fixed earlier. Lenny version recorded.
1092            - visualboyadvance 1.8.0-4 (embed)
1093            NOTE: Might be fixed earlier. Lenny version recorded.
1094            - ia32-libs <unfixable> (embed)
1095    
1096    irssi
1097            - silc-client <unfixed> (embed)
1098            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1099    
1100    extc
1101            - mtasc <unfixed> (embed)
1102            - haxe <unfixed> (embed)
1103    
1104    swflib
1105            - mtasc <unfixed> (embed)
1106            - haxe <unfixed> (embed)
1107    
1108    libitext-java
1109            - bouncycastle 2.1.4-1 (embed)
1110    
1111    python-ply
1112            - pyke <unfixed> (embed; bug #555363)
1113            - pywbem 0.7.0-4 (embed; bug #555364)
1114            - sepolgen <unfixed> (embed; bug #555365)
1115            - zope-textindexng3 <unknown> (embed)
1116            - iceweasel <not-affected> (uses xulrunner)
1117            - xulrunner <unknown> (embed)
1118            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1119    
1120    libdumbnet (libdnet upstream)
1121            - nmap <unfixed> (fork)
1122    
1123    gcc-4.4
1124            - gcc-mingw32 <unfixed> (embed)
1125    
1126    camlimages
1127            - advi <unfixed> (static; bug #550441)
1128    
1129    memcached
1130            - memcachedb <unfixed> (embed)
1131    
1132    yajl
1133            - argyll <unfixed> (embed; bug #544223)
1134            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1135    
1136    nusoap
1137            - gforge 4.8.2-1 (embed)
1138            - ampache <unfixed> (embed)
1139            - poker-network <unfixed> (embed)
1140            - moodle <unfixed> (embed)
1141            NOTE: code is not used when running under php5 and soap is enabled
1142            - phpwiki <unfixed> (embed)
1143            - gallery2 <unfixed> (embed)
1144            - typo3-src <unfixed> (embed)
1145            - phpgacl 3.3.7-7 (embed)
1146            - mantis 1.1.8+dfsg-1 (embed)
1147    
1148    libept
1149            - adept <unfixed> (embed; bug #540649)
1150    
1151    libvorbis
1152            - iceweasel <not-affected> (uses xulrunner)
1153            - xulrunner <unfixed> (embed; bug #540959)
1154            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1155            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1156            - iceape <unfixed> (embed)
1157            [etch] - iceape <not-affected> (introduced in 2.0)
1158            [lenny] - iceape <not-affected> (introduced in 2.0)
1159            - ia32-libs <unfixable> (embed)
1160    
1161    cairo
1162            - iceweasel <not-affected> (uses xulrunner)
1163            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1164    
1165    liboggz
1166            - iceweasel <not-affected> (uses xulrunner)
1167            - xulrunner <unfixed> (embed; bug #540959)
1168            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1169            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1170            - iceape <unfixed> (embed)
1171            [etch] - iceape <not-affected> (introduced in 2.0)
1172            [lenny] - iceape <not-affected> (introduced in 2.0)
1173    
1174    liboggplay
1175            - iceweasel <not-affected> (uses xulrunner)
1176            - xulrunner <unfixed> (embed; bug #540959)
1177            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1178            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1179            - iceape <unfixed> (embed)
1180            [etch] - iceape <not-affected> (introduced in 2.0)
1181            [lenny] - iceape <not-affected> (introduced in 2.0)
1182    
1183    php-net-dnsbl
1184            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1185    
1186    php-onyx-rss
1187            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1188    
1189    php-text-wiki
1190            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1191    
1192    php-xml-rpc
1193            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1194    
1195    polarssl (does not have a shared library)
1196            - pdkim <itp> (embed; bug #543150)
1197            - xyssl <unfixed> (old-version)
1198    
1199    pidgin (libpurple)
1200            - gaim <removed> (old-version)
1201            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1202            - wengophone <unfixed> (embed; bug #601425)
1203    
1204    icu
1205            - webkit 1.0.1-1 (embed; bug #547214)
1206            - texlive-bin <unfixed> (fork)
1207            NOTE: texlive upstream working with icu upstream to merge their changes
1208            - chromium-browser 5.0.375.29~r46008-3
1209    
1210    cyrus-imapd-2.2
1211            - kolab-cyrus-imapd <unfixed> (fork)
1212            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1213    
1214    python-cxx-dev
1215            - freecad 0.9.2646.3-1 (embed; bug #547936)
1216    
1217    zipios++
1218            - freecad 0.9.2646.3-1 (embed; bug #547941)
1219            - enigma 0.92.3-3 (embed)
1220            NOTE: likely fixed earlier, marking etch's version as fixed
1221    
1222    linux-2.6
1223            - kvm <removed> (embed; bug #549973) [./kernel/*]
1224            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1225            - kernel-source-2.6.8 <removed> (old-version)
1226            - kernel-source-2.4.27 <removed> (old-version)
1227            - kernel-source-2.4.24 <removed> (old-version)
1228            - kernel-source-2.2.25 <removed> (old-version)
1229            - kernel-source-2.2.20 <removed> (old-version)
1230    
1231    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1232            - kvm <removed> (embed) [./libfdt/*]
1233            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1234    
1235    qweb (not packaged)
1236            - ajaxterm <unfixed>
1237    
1238    opensaml2
1239            - opensaml <removed> (old-version)
1240    
1241    shibboleth-sp2
1242            - shibboleth-sp <removed> (old-version)
1243    
1244    tuxonice-userui
1245            - suspend2-userui <removed> (old-version)
1246    
1247    expat
1248            - w3c-libwww <removed> (embed; bug #551941)
1249            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1250            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1251            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1252            - python2.4 <unfixable> (embed; bug #553403)
1253            - python2.7 2.7-6 (embed)
1254            - mcabber 0.10.0-1 (low; bug #601053)
1255            - python-4suite <unfixed> (embed; bug #516935)
1256            - wxwindows2.4 <removed> (embed)
1257            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1258            - wxwidgets2.8 2.8.10.1-2 (embed)
1259            - albert <unfixed> (embed; bug #600974)
1260            - celementtree 1.0.5-8 (embed)
1261            NOTE: Maybe that was fixed even earlier
1262            - centerim <unfixed> (embed; bug #559783)
1263            - audacity 1.3.2-1 (embed)
1264            - matanza <unfixed> (embed)
1265            - tdom 0.8.3~20080525-1 (embed)
1266            - udunits 2.1.8-4 (embed)
1267            - apr-util 1.2 (embed)
1268            - ayttm <unfxed> (embed; bug #561006)
1269            - cableswig <unfixed> (embed)
1270            - cadaver <unfixed> (embed)
1271            - cmake 2.6.0-6 (embed)
1272            - coin3 <unfixed> (embed)
1273            - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1274            NOTE: Might be fixed earlier. Lenny version recorded.
1275            - dasher 4.7.3-1 (embed)
1276            NOTE: Might be fixed earlier. Lenny version recorded.
1277            - emboss 6.3.1-1 (embed)
1278            - gdcm 2.0.14-2 (embed)
1279            - ghostscript 8.71~dfsg-2 (embed)
1280            - grmonitor <removed> (embed)
1281            - iceape <unfixed> (embed)
1282            - insighttoolkit 3.16.0-1 (embed)
1283            NOTE: insighttoolkit might've been fixed earlier
1284            - jabber 1.4.3-3.4 (embed)
1285            NOTE: Might be fixed earlier. Lenny version recorded.
1286            - libparagui1.1 1.0.2-1 (embed)
1287            - libspiff1 0.8.3-1 (embed)
1288            NOTE: Might be fixed earlier. Lenny version recorded.
1289            - paraview 3.6.2-1 (embed)
1290            - poco 1.3.6p1-1 (embed)
1291            - scorched3d 41.3dfsg-1+b1 (embed)
1292            NOTE: Might be fixed earlier. Lenny version recorded.
1293            - simgear <unfixed> (embed)
1294            - sitecopy 1:0.16.0-1
1295            - smart <unfixed> (embed)
1296            NOTE: smart embeds celementree, and it includes expat
1297            - swish-e <not-affected> (Linked against libxml, which is used instead)
1298            - tla 1.3.5+dfsg-15 (embed)
1299            - vtk 4.1.20030227-1 (embed)
1300            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1301            - xmlrpc-c <unfixed> (embed)
1302            - iceweasel <unfixed> (embed)
1303            - kompozer <unfixed> (embed)
1304            - vxl 1.13.0-2 (embed)
1305            - xulrunner <unfixed> (embed)
1306            - xmame 0.106-2.1 (embed)
1307            NOTE: Might be fixed earlier. Lenny version recorded.
1308            - apache2 2.2 (embed)
1309            - texlive-bin <not-affected> (Embedded code not compiled in)
1310            - vnc4 <unfixed> (embed)
1311            - xotcl 1.6.6-1 (embed)
1312            - chromium-browser 5.0.375.29~r46008-3
1313            - ia32-libs <unfixable> (embed)
1314    
1315    xerces-c
1316            - xerces-c2 <unfixed> (old-version)
1317            - xerces27 <removed> (old-version)
1318    
1319    md5 (RSA's version; not the gnu version provided by coreutils)
1320            - w3c-libwww <removed> (embed; bug #551942)
1321            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1322    
1323    libparagui1.1
1324            - asc <unfixable> (fork)
1325    
1326    enet
1327            - sauerbraten <unfixed> (embed; #497194)
1328    
1329    eglibc
1330            - glibc <removed> (old-version)
1331            - mksh <unfixable> (static)
1332              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1333    
1334    galib
1335            - gamera 3.2.3-1 (embed)
1336    
1337    configobj
1338            - bzr <unfixed> (embed; bug #555336)
1339            - elisa <unfixed> (embed; bug #555337)
1340            - gaupol <unfixed> (embed; bug #555338)
1341            - ipython <unfixed> (embed; bug #555339)
1342            - pida <unfixed> (embed; bug #555340)
1343            - psychopy <unfixed> (embed; bug #555341)
1344            - rest2web <unfixed> (embed; bug #555342)
1345            - auth2db <unknown> (embed)
1346            - dynagen <unknown> (embed)
1347            - iceweasel <unknown> (embed)
1348            - sabnzbdplus <unknown> (embed)
1349            - xulrunner <unknown> (embed)
1350            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1351    
1352    python-clientform
1353            - bibus <unfixed> (embed; bug #555332)
1354            - zope2.10 <unfixed> (embed; bug #555333)
1355            - zope2.11 <removed> (embed; bug #555334)
1356            - python-mechanize <unknown> (embed)
1357            - twill <unknown> (embed)
1358    
1359    python-mechanize
1360            - zope2.10 <unfixed> (embed; bug #555337)
1361            - zope2.11 <removed> (embed; bug #555338)
1362            - twill <unknown> (embed; bug #555339)
1363    
1364    pexpect
1365            - duplicity 0.6.06-1 (embed; bug #555361)
1366            - hplip <unfixed> (embed; bug #555362)
1367            - smart <unfixed> (embed; bug #555363)
1368    
1369    pyparsing
1370            - bauble <unfixed> (embed; bug #555366)
1371            - boa-constructor 0.6.1-8 (embed; bug #555367)
1372            - calibre <unfixed> (embed; bug #555368)
1373            - matplotlib <unfixed> (embed; bug #531024)
1374            - zhpy 1.7.3.1-1 (embed; bug #555370)
1375            - polybori <unknown> (embed)
1376            - python-whoosh <unknown> (embed)
1377            - twill <unknown> (embed)
1378            - zope-textindexng3 <unknown> (embed)
1379    
1380    python-pysqlite2
1381            - python2.4 <unfixed> (embed; bug #553403)
1382            - python2.5 <unfixed> (embed; bug #553403)
1383    
1384    celementtree
1385            - python2.5 <unfixed> (embed)
1386            - smart <unfixed> (embed)
1387    
1388    elementtree
1389            - python2.5 <unfixed> (embed)
1390            - python2.6 <unfixed> (embed)
1391            - bzr <unfixed> (embed; bug #555343)
1392            - gedit 2.28.2-1 (embed; bug #555344)
1393            - smart <unfixed> (embed)
1394            - solfege <unfixed> (embed; bug #555345)
1395            - w3af <unfixed> (embed; bug #555346)
1396            - python-qt4 <unknown> (embed)
1397            - sphinx <unknown> (embed)
1398            - python-nltk <itp> (embed)
1399    
1400    python2.5
1401            - python2.4 <unfixed> (old-version)
1402            - jython <unfixed> (embed)
1403            NOTE: embeds many stdlib modules
1404            - python-django <unfixed> (embed; bug #555419)
1405            NOTE: embeds stdlib modules: doctest, decimal
1406            - gamera 3.2.3-1 (embed)
1407            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1408            - boa-constructor <unfixed> (embed; bug #555426)
1409            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1410            - nicotine <unfixed> (embed; bug #555427)
1411            NOTE: embeds stdlib modules: ConfigParser
1412            - museek+ <unfixed> (embed; bug #555428)
1413            NOTE: embeds stdlib modules: ConfigParser
1414            - vegastrike-data <removed> (embed)
1415            NOTE: embeds many stdlib modules
1416            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1417            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1418            - config-manager <unfixed> (embed; bug #555423)
1419            NOTE: embeds stdlib modules: optparse
1420            - jhbuild 2.28.0-1 (embed; bug #555421)
1421            NOTE: embeds stdlib modules: optparse, subprocess
1422            - smart <unfixed> (embed; bug #555432)
1423            NOTE: embeds stdlib modules: optparse
1424            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1425            NOTE: embeds stdlib modules: doctest
1426            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1427            NOTE: embeds stdlib modules: doctest
1428            - distribute <unfixed> (embed)
1429            NOTE: embeds stdlib modules: doctest
1430            - python-setuptools <unfixed> (embed; bug #555435)
1431            NOTE: embeds stdlib modules: doctest
1432            - zope.testing <unfixed> (embed; bug #555436)
1433            NOTE: embeds stdlib modules: doctest
1434            - translate-toolkit <unfixed> (embed; bug #555422)
1435            NOTE: embeds stdlib modules: textwrap, contextlib
1436            - libtpclient-py <unfixed> (embed; bug #555424)
1437            NOTE: embeds stdlib modules: subprocess
1438            - grass <unfixed> (embed; bug #555425)
1439            NOTE: embeds stdlib modules: subprocess
1440            - coherence <unfixed> (embed; bug #555429)
1441            NOTE: embeds stdlib modules: uuid
1442            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1443            NOTE: embeds stdlib modules: uuid
1444            - setroubleshoot <removed> (embed; bug #555431)
1445            NOTE: embeds stdlib modules: uuid
1446            - linkchecker <unfixed> (embed; bug #555414)
1447            NOTE: embeds msgfmt.py script
1448            - imdbpy <unfixed> (embed)
1449            NOTE: embeds msgfmt.py script
1450            - kiwi <unfixed> (embed)
1451            NOTE: embeds msgfmt.py script
1452            - moin <unfixed> (embed)
1453            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1454            - plone3 <removed> (embed)
1455            NOTE: embeds msgfmt.py script
1456            - roundup <unfixed> (embed)
1457            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1458            - rednotebook <unfixed> (embed; bug #555415)
1459            NOTE: embeds msgfmt.py script
1460            - turbogears <unfixed> (embed)
1461            NOTE: embeds msgfmt.py script
1462            - elisa <unfixed> (embed)
1463            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1464            - calibre <unfixed> (embed)
1465            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1466            - mailman 1:2.1.13-1 (embed; #555416)
1467            NOTE: embeds msgfmt.py script
1468            - python-docutils <unknown> (embed)
1469            NOTE: embeds stdlib modules: optparse, textwrap
1470            - python-imaging <unknown> (embed)
1471            NOTE: embeds stdlib modules: doctest
1472            - python-mechanize <unknown> (embed)
1473            NOTE: embeds stdlib modules: doctest
1474            - twill <unknown> (embed)
1475            NOTE: embeds stdlib modules: subprocess
1476            - zeroc-ice <unknown> (embed)
1477            NOTE: embeds stdlib modules: subprocess
1478            - wxwidgets2.8 <unknown> (embed)
1479            NOTE: embeds stdlib modules: subprocess
1480            - cycle <unknown> (embed)
1481            NOTE: embeds msgfmt.py script
1482            - deluge <unknown> (embed)
1483            NOTE: embeds msgfmt.py script
1484            - opendict <unknown> (embed)
1485            NOTE: embeds msgfmt.py script
1486            - openerp-client <unknown> (embed)
1487            NOTE: embeds msgfmt.py script
1488            - rapidsvn <unknown> (embed)
1489            NOTE: embeds msgfmt.py script
1490            - wammu <unknown> (embed)
1491            NOTE: embeds msgfmt.py script
1492            - gaphor <unknown> (embed)
1493            NOTE: embeds msgfmt.py script
1494            - pida <unknown> (embed)
1495            NOTE: embeds msgfmt.py script
1496            - python-formencode <unknown> (embed)
1497            NOTE: embeds msgfmt.py script
1498            - duplicity <unfixed> (embed)
1499            NOTE: embeds stdlib module: urlparse, tarfile
1500            - pygopherd <unfixed> (embed)
1501            NOTE: embeds stdlib module: zipfile
1502    
1503    argparse
1504            - twill <unfixed> (embed; bug #555347)
1505            - ipython <unfixed> (embed; bug #555348)
1506    
1507    coherence
1508            - elisa <unfixed> (embed; bug #555335)
1509    
1510    simpletal
1511            - plastex <unfixed> (embed; bug #555371)
1512    
1513    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1514            - postr <unfixed> (embed)
1515            - elisa <unfixed> (embed)
1516    
1517    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1518            - apertium-tolk <unfixed> (embed)
1519            - ipython <unfixed> (embed)
1520            - virtaal <unfixed> (embed)
1521    
1522    distribute
1523            - setuptools <removed> (old-version)
1524    
1525    rails
1526            - jruby1.2 <removed> (embed) [./bench/rails/*]
1527            NOTE: jruby is in non-free, it probably includes rails too
1528            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1529            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1530            - thin <unfixed> (embed) [./spec/rails_app/*]
1531            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1532            NOTE: be dangerous if developers are naively basing their code off of the examples
1533            NOTE: prototype.js is among the example files
1534    
1535    lucene2 (prototype.js is among the embeds in the following)
1536            - lucene <unfixed> (old-version)
1537            - pylucene <unfixed> (embed)
1538            - libpdfbox-java <unfixed> (embed)
1539            - libfontbox-java <unfixed> (embed)
1540            - libjempbox-java <unfixed> (embed)
1541            - solr <unfixed> (embed)
1542    
1543    unicode-data
1544            - syslinux <unfixed> (embed)
1545            - camomile <unfixed> (embed)
1546            - fribidi <unfixed> (embed)
1547            - m17n-db <unfixed> (embed)
1548            - sbcl <unfixed> (embed)
1549            - heimdal <unfixed> (embed)
1550            - icu <unfixed> (embed)
1551            - icu4j <unfixed> (embed)
1552            - krb5 <unfixed> (embed)
1553            - moodle <unfixed> (embed)
1554            - openldap <unfixed> (embed)
1555            - pike7.6 <unfixed> (embed)
1556            - samba <unfixed> (embed)
1557            - samba4 <unfixed> (embed)
1558            - cmucl <unfixed> (embed)
1559            - typo3-src <unfixed> (embed)
1560            - mauve <unfixed> (embed)
1561            - texlive-bin <unfixed> (embed)
1562            - ypsilon <unfixed> (embed)
1563            - jeuclid <unfixed> (embed)
1564            - charmap.app <unfixed> (embed)
1565            - clisp <unfixed> (embed)
1566            - gnulib <unfixed> (embed)
1567            - opensrs-client <unfixed> (embed)
1568            - saxonb <unfixed> (embed)
1569            - rails <unfixed> (embed)
1570    
1571    feedparser
1572            - rawdog <unfixed> (embed; bug #383422)
1573            - miro <unfixed> (embed; bug #555351)
1574            - calibre <unfixed> (embed; bug #555352)
1575            - freevo <unfixed> (embed; bug #555353)
1576            - pida <unfixed> (embed; bug #555354)
1577            - planet-venus <unfixed> (embed; bug #555355)
1578            - plone3 <removed> (embed; bug #555356)
1579            - exaile 0.2.14+debian-1 (embed)
1580            - screenlets 0.1.2-3 (embed)
1581            NOTE: included twice
1582    
1583    agg:
1584            - matplotlib <unfixed> (embed: bug #377271)
1585            - contextfree <unfixed> (embed)
1586            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1587            - exactimage <unfixed> (embed)
1588            - python-enable <unfixed> (embed)
1589            - mapnik 0.5.1-3 (embed)
1590            NOTE: links statically to agg, but shared library is not available (bug #377271)
1591    
1592    vtk
1593            - paraview <unfixable> (embed; bug #495426)
1594            - libmesh <unfixed>
1595            NOTE: embeds exodus; not sure if there's a version external to vtk
1596    
1597    txt2tags
1598            - rednotebook <unfixed> (embed)
1599    
1600    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1601            - gajim <unfixed> (embed)
1602            - emesene <unfixed> (embed)
1603            - convirt <unfixed> (embed)
1604            - pida <unfixed> (embed)
1605            - rednotebook <unfixed> (embed)
1606    
1607    horde3 (prototype.js is among the embeds in the following)
1608            - mnemo2 <unfixed> (embed)
1609            - nag2 <unfixed> (embed)
1610            - wordpress <unfixed> (embed)
1611            NOTE: Text_Diff (wp-includes/Text/Diff*)
1612    
1613    cimg
1614            - gmic <unfixed> (embed)
1615    
1616    mootools
1617            - kdenetwork <unfixed> (embed)
1618            - gallery <unfixed> (embed)
1619            - jspwiki <unfixed> (embed)
1620            - vdr-plugin-live <unfixed> (embed)
1621            - perl-doc-html <unfixed> (embed)
1622    
1623    openldap
1624            - openldap2.3 <removed> (old-version)
1625            - ia32-libs <unfixable> (embed)
1626    
1627    grub2
1628            - grub <unfixed> (old-version)
1629    
1630    gnupginterface
1631            - duplicity <unfixed> (embed)
1632    
1633    python-dateutil
1634            - awn-extras-applets <unfixed> (embed)
1635            - matplotlib <unknown> (embed)
1636    
1637    cups
1638            - cupsys <removed> (old-version)
1639            - ia32-libs <unfixable> (embed)
1640    
1641    yui
1642            - bcfg2 <not-affected> (present in source but not included in any binary files)
1643            - serendipity 1.5.3-1 (embed; bug #557746)
1644            - moodle 1.8.2.dfsg-5 (embed)
1645            - jifty 0.91117-1 (embed; bug #557748)
1646            - webgui 7.7.26-1 (embed)
1647            - loggerhead 1.17-1 (embed)
1648            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1649    
1650    quake3 (vanilla source not packaged in debian)
1651            - openarena <unfixable> (fork)
1652    
1653    quake2 (vanilla source not packaged in debian)
1654            - alien-arena <unfixable> (fork)
1655            - warsow <unfixable> (fork)
1656    
1657    libtheora
1658            - iceweasel <not-affected> (uses xulrunner)
1659            - xulrunner <unfixed> (embed; bug #540959)
1660            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1661            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1662            - iceape <unfixed> (embed; bug #559276)
1663            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1664            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1665    
1666    dtoa
1667            - bfilter <unfixed> (embed)
1668            - cacao <removed> (embed)
1669            - cdrdao <unfixed> (embed)
1670            - classpath <unfixed> (embed)
1671            - freej <unfixed> (embed)
1672            - iceape <unfixed> (embed)
1673            - iceweasel <unfixed> (embed)
1674            - jscoverage <unfixed> (embed)
1675            - kde4libs <unfixed> (embed)
1676            - kdelibs <unfixed> (embed)
1677            - kompozer <unfixed> (embed)
1678            - libv8 <unfixed> (embed)
1679            - mono <unfixed> (embed)
1680            - newlib <unfixed> (embed)
1681            - nspr <unfixed> (embed)
1682            - php5 <unfixed> (embed)
1683            - polyml <unfixed> (embed)
1684            - qt4-x11 <unfixed> (embed)
1685            - rhino <unfixed> (embed)
1686            NOTE: code translated to Java
1687            - ruby1.8 <unfixed> (embed)
1688            - ruby1.9 <unfixed> (embed)
1689            - ruby1.9.1 <unfixed> (embed)
1690            - sdd <unfixed> (embed)
1691            - sfind <unfixed> (embed)
1692            - star <unfixed> (embed)
1693            - tinymux <unfixed> (embed)
1694            - virtualbox-ose <unfixed> (embed)
1695            - webkit <unfixed> (embed)
1696            - xulrunner <unfixed> (embed)
1697    
1698    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1699            - firegpg <unfixed> (embed)
1700            - enigmail <unfixed> (embed)
1701    
1702    ptmalloc (not packaged in Debian)
1703            - crystalspace <unfixed> (embed)
1704            - qt4-x11 <unfixed> (embed)
1705    
1706    svgalib
1707            - usplash <unfixed> (embed)
1708            - ia32-libs <unfixable> (embed)
1709    
1710    bogl
1711            - usplash <unfixed> (embed)
1712    
1713    taglist
1714            - usplash <unfixed> (embed)
1715    
1716    portaudio
1717            - audacity <unfixed> (embed; bug #323711)
1718    
1719    nyquist
1720            - audacity <unfixed> (embed)
1721            NOTE: embeds a forked nyquist with support for a shared library
1722    
1723    vamp-plugin-sdk
1724            - audacity <unfixed> (embed)
1725    
1726    wordpress
1727            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1728            - wordpress-mu <removed> (fork)
1729    
1730    php5
1731            - php4 <removed> (old-version)
1732    
1733    classpath
1734            - libgnucrypto-java <removed> (embed; bug #559788)
1735    
1736    libtool
1737            - apr <unfixed> (static; bug #489625)
1738            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1739            - arts <unfixed> (embed)
1740            - bochs 2.4.2-1 (embed; bug #560884)
1741            - camserv <unfixed> (embed)
1742            - collectd 4.8.2-1 (embed)
1743            - courier-authlib 0.58-4 (embed)
1744            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1745            - cvsnt 2.5.04.3236-1.2 (embed)
1746            - dico <not-affected> (Uses the system copy of ltdl)
1747            - freeradius 0.1+20010527-1 (embed)
1748            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1749            - ggobi 2.1.9~20091212-1 (embed)
1750            - glame 2.0.1-4 (embed)
1751            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1752            - gnash 0.8.7-2 (embed)
1753            - gnu-smalltalk <unfixed> (embed; bug #566777)
1754            - google-gadgets 0.10.5-0.3 (embed)
1755            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1756            - graphicsmagick 1.3.5-6 (embed)
1757            - graphviz 2.8-3 (embed)
1758            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1759            - guile-1.6 1.6.8-7 (embed)
1760            - hamlib 1.2.11-1 (embed)
1761            - hercules 3.06-1.2 (embed)
1762            - jags 1.0.4-3 (embed; bug #560864)
1763            - kdelibs <unfixed> (embed)
1764            - libannodex <removed> (embed)
1765            - libextractor 0.5.23+dfsg-4 (embed)
1766            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1767            - libtunepimp 0.5.3-7.3 (embed)
1768            - mp4h 1.3.1-4.1 (embed)
1769            - naim <removed> (embed)
1770            - parser-mysql <unfixed> (embed)
1771            - pinball 0.3.1-11 (embed)
1772            - redland <unfixed> (embed)
1773            - siproxd <unfixed> (embed)
1774            - ski <unfixed> (embed)
1775            - synfig 0.62.00-1 (embed)
1776            - unixodbc 2.2.4-5 (embed)
1777            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1778            - clamav 0.95+dfsg-1 (embed)
1779            - imagemagick 6:6.2.3.1-1 (embed)
1780            - hypre 2.4.0b-5 (embed)
1781            - lam <unfixed> (embed)
1782            - openmpi <unfixable> (embed; bug #559386)
1783            - parser <unfixed> (embed)
1784            - pdsh 2.18-5 (embed; bug #560892)
1785            - sbnc 1.2-8 (embed)
1786            - sdcc <unfixed> (embed)
1787            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1788            - proftpd-dfsg <unfixed> (embed; bug #561748)
1789            - babel 1.4.0.dfsg-5 (embed)
1790            - libprelude 0.9.14-2 (embed)
1791            - heartbeat 2.1.4-7 (embed)
1792            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1793            NOTE: might've been fixed earlier
1794            - gcc-* <unknown> (embed)
1795            - ia32-libs <unfixable> (embed)
1796    
1797    ocamlgsl
1798            - orpie 1.5.1-7.1 (embed; bug #550058)
1799    
1800    xdotool
1801            - keynav <unfixed> (embed; bug #560103)
1802    
1803    bulletphysics (not packaged; http://www.bulletphysics.org/)
1804            - supertuxkart <unfixed> (embed)
1805            - blender <unfixed> (embed)
1806    
1807    ghostscript
1808            - gs-gpl <removed> (old-version)
1809    
1810    icedove
1811            - thunderbird <removed> (old-version)
1812    
1813    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1814            - jquery <unfixed> (embed)
1815    
1816    sed
1817            - ssed <unfixed> (fork)
1818    
1819    phpatomlib (http://code.google.com/p/phpatomlib)
1820            - wordpress <unfixed> (embed)
1821    
1822    Services_JSON (http://pear.php.net/package/Services_JSON)
1823            - wordpress <unfixed> (embed)
1824    
1825    phpass (http://www.openwall.com/phpass/)
1826            - gallery2 <unfixed> (embed)
1827            - wordpress <unfixed> (embed)
1828            - typo3-src <unfixed> (modified-embed)
1829            NOTE: file refers to drupal, maybe there's a copy somewhere there
1830            NOTE: a copyright owner search didn't match anything
1831            - libauthen-passphrase-perl <unfixable> (fork)
1832            NOTE: perl implementation of phpass
1833            - phpbb3 <unfixed>
1834            NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1835    
1836    squirrelmail
1837            - wordpress <unfixed> (embed)
1838            NOTE: class-pop3.php
1839    
1840    ezSQL (http://www.woyano.com/jv/ezsql)
1841            - wordpress <unfixable> (fork)
1842            NOTE: wp-db.php
1843    
1844    Diff.php (Clay Loveless' version/killersoft.com)
1845            - php-versioncontrol-svn <unfixed>
1846    
1847    libm (provided by libc)
1848            - spring <unfixed> (embed)
1849            NOTE: embedded by embedded copy of streflop
1850            - aide <unfixed> (static)
1851            - busybox <unfixed> (static)
1852            - mindi-busybox <unfixed> (static)
1853            - qemu <unfixed> (static)
1854            NOTE: qemu-user-static
1855            - tuxonice-userui <unfixed> (static)
1856            - zsh <unfixed> (static)
1857            NOTE: zsh-static
1858            - tripwire <unfixed>
1859    
1860    streflop
1861            - spring <unfixed> (embed)
1862    
1863    minizip
1864            - spring <unfixed> (embed)
1865    
1866    oscpack
1867            - spring <unfixed> (embed)
1868    
1869    hpiutil2
1870            - spring <unfixed> (embed)
1871    
1872    p7zip
1873            - spring <unfixed> (embed)
1874    
1875    pythonqt (doesn't seem to be python-qtN, unknown source)
1876            - fontmatrix <unfixed> (embed)
1877            - elmerfem <unfixed> (embed)
1878    
1879    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1880            - docvert <unfixed> (embed)
1881            - jifty <unfixed> (embed)
1882            - kdenetwork <unfixed> (embed)
1883            - mediatomb <unfixed> (embed)
1884            - plastex <unfixed> (embed)
1885            - plone3 <removed> (embed)
1886            - python-chaco <unfixed> (embed)
1887            - python-docutils <unfixed> (embed)
1888            - s5 <unfixed> (embed)
1889            - zope2.10 <unfixed> (embed)
1890            - zope2.11 <removed> (embed)
1891            - cython <not-affcted> (embed)
1892            NOTE: part of documentation, which is not installed into the binary package
1893    
1894    python-docutils
1895            - zope2.10 <unfixed> (embed)
1896            - zope2.11 <removed> (embed)
1897    
1898    tesseract
1899            - ocropus <unfixed> (static)
1900    
1901    antlr
1902            - kdevelop <unfixed> (embed)
1903    
1904    libxerces2
1905            - openjdk-6 <unfixed> (embed)
1906    
1907    kfreebsd-8
1908            - kfreebsd-7 <unfixed> (old-version)
1909            - kfreebsd-6 <removed> (old-version)
1910    
1911    ruby1.9.1
1912            - ruby1.9 <unfixed> (old-version)
1913            - ruby1.8 <unfixed> (old-version)
1914    
1915    maildrop
1916            - courier <unfixed> (embed) [./maildrop]
1917    
1918    glee
1919            - warzone2100 <not-affected> (embed)
1920    
1921    phing
1922            - symfony <unfixed> (embed)
1923    
1924    pake
1925            - symfony <unfixed> (embed)
1926    
1927    propel
1928            - symfony <unfixed> (embed)
1929    
1930    creole
1931            - symfony <unfixed> (embed)
1932    
1933    hfsutils
1934            - cdrkit <unfixed> (embed; bug #570187)
1935            NOTE: embeds hfsutils code in genisoimage
1936    
1937    cdrkit
1938            - grub2 <unfixed> (embed; bug #570156)
1939            NOTE: genisoimage imported into grub-mkisofs
1940    
1941    kdebase-workspace
1942            - kdebase <unfixed> (old-version)
1943    
1944    file
1945            - php5 <unfixable> (modified-embed)
1946            [lenny] - php5 <not-affected>
1947    
1948    cdb
1949            - php5 <unfixed> (embed)
1950    
1951    libmbfl (itp: #570708)
1952            - php5 <unfixed> (embed)
1953            NOTE: PHP is actually the current upstream, ITP is of that code
1954    
1955    libonig
1956            - php5 5.3.2-1 (embed)
1957    
1958    xmlrpc-epi
1959            - php5 <unfixed> (embed)
1960    
1961    swt-gtk
1962            - eclipse <unfixed> (embed; bug #538808)
1963    
1964    txt2html
1965            - wml 2.0.11ds2-1 (embed)
1966    
1967    ca-certificates
1968            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1969    
1970    openexr
1971            - freeimage <unfixed> (embed)
1972    
1973    libmng
1974            - freeimage <unfixed> (embed)
1975    
1976    openjpeg
1977            - freeimage <unfixed> (embed)
1978    
1979    libjpeg6b
1980            - freeimage <unfixed> (embed)
1981            - ia32-libs <unfixable> (embed)
1982    
1983    libjpeg (don't know what exact version)
1984            - dcmtk <unfixed>
1985            - gdcm <unfixed>
1986            - insighttoolkit <unfixed>
1987            - openarena 0.8.5-5+exp1 (bug #495966)
1988            - outguess <unfixed>
1989            - squeak-vm <unfixed> (embed)
1990            - tremulous <unfixed>
1991            - tuxonice-userui <unfixed> (static)
1992            - fpc <unfixed> (static)
1993            - lazarus <unfixed> (static)
1994            NOTE: inherited from fpc, see #472304
1995            - mseide-msegui <unfixed> (static)
1996            NOTE: inherited from fpc, see #472304
1997            - easymp3gain <unfixed> (static)
1998            NOTE: inherited from fpc, see #472304
1999            - winff <unfixed> (static)
2000            NOTE: inherited from fpc, see #472304
2001            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2002    
2003    
2004    lxr
2005            - lxr-cvs <unfixed> (embed)
2006    
2007    libfile-copy-recursive-perl
2008            - r-base <unfixed> (embed; bug #577427)
2009            - r-base-core-ra <unfixed> (embed; bug #577429)
2010    
2011    delimmatch
2012            - r-base <unfixed> (embed; bug #577433)
2013            - r-base-core-ra <unfixed> (embed; bug #577434)
2014    
2015    libsmf (ITP: #572558)
2016            - denemo <unfixed> (embed)
2017            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2018    
2019    libselinux
2020            - dpkg 1.15.6 (static)
2021            - ia32-libs <unfixable> (embed)
2022    
2023    xinha (ITP: #479708)
2024            - horde3 <unfixed>
2025            - serendipity <unfixed>
2026            - openacs <unfixed>
2027            - dotlrn <unfixed>
2028    
2029    dvipng
2030            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2031    
2032    dvipdfmx
2033            - texlive-bin <unfixed> (embed)
2034            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2035    
2036    lcdf-typetools
2037            - texlive-bin 2009-1 (embed)
2038    
2039    tex4ht
2040            - texlive-bin 2009-1 (embed)
2041    
2042    freetype
2043            - texlive-bin 2009-1 (embed)
2044            - ia32-libs <unfixable> (embed)
2045    
2046    freetype2
2047            - texlive-bin 2009-1 (embed)
2048            - tuxonice-userui <unfixed> (static)
2049            - instantbird <unfixed>
2050            - qt4-x11 <unknown> (embed)
2051            - vtk <unknown> (embed)
2052            - paraview <unknown> (embed)
2053            NOTE: from embedded copy of vtk
2054    
2055    silgraphite
2056            - texlive-bin <unfixed> (embed)
2057    
2058    unzip
2059            - texlive-bin 2009-1 (embed)
2060    
2061    jbig2dec
2062            - ghostscript 8.71~dfsg2-1 (embed)
2063    
2064    libxml2
2065            - chromium-browser 5.0.375.29~r46008-1
2066            - ia32-libs <unfixable> (embed)
2067    
2068    protobuf
2069            - chromium-browser 5.0.375.70~r48679-2
2070    
2071    libv8
2072            - chromium-browser 5.0.375.38~r46659-1
2073    
2074    nspr
2075            - chromium-browser 5.0.375.29~r46008-3
2076            - ia32-libs <unfixable> (embed)
2077    
2078    yasm
2079            - chromium-browser 5.0.375.29~r46008-2
2080    
2081    libxslt
2082            - chromium-browser 5.0.375.29~r46008-1
2083            - ia32-libs <unfixable> (embed)
2084    
2085    miniupnpc
2086            - warzone2100 2.3.7-2
2087            NOTE: code still present in tarball but removed during build and unused
2088    
2089    iniparser (not packaged in Debian; RFP bug #582657)
2090            - warzone2100 <unfixed> (modified-embed)
2091    
2092    pyglet
2093            - sympy <unfixed> (embed; bug #459716)
2094    
2095    mpmath
2096            - sympy <unfixed> (embed; bug #541746)
2097    
2098    openssh
2099            - libpam-ssh <unfixed> (embed; bug #598522)
2100    
2101    curl
2102            - cmake 2.6.0-6 (embed)
2103            NOTE: Might be fixed earlier. Lenny version recorded.
2104            - criticalmass <unfixed> (static; bug #599061)
2105            - wengophone 2.1.0~beta1-svn9983-1 (embed)
2106            - ia32-libs <unfixable> (embed)
2107    
2108    lib3ds
2109            - boson <unfixed> (embed; bug #600900)
2110            - openscenegraph <unfixed> (embed; bug #601181)
2111    
2112    xcftools
2113            - gnome-xcf-thumbnailer <unfixed> (embed)
2114    
2115    simplejson
2116            - exaile <unfixed> (embed; bug #604547)
2117    
2118    libasycns
2119            - loudmouth <unfixed> (embed; bug #566143)
2120    
2121    plplot
2122            - emboss <unfixed> (fork)
2123    
2124    acl
2125            - ia32-libs <unfixable> (embed)
2126    
2127    arts
2128            - ia32-libs <unfixable> (embed)
2129    
2130    attr
2131            - ia32-libs <unfixable> (embed)
2132    
2133    audiofile
2134            - ia32-libs <unfixable> (embed)
2135    
2136    avahi
2137            - ia32-libs <unfixable> (embed)
2138    
2139    celt
2140            - ia32-libs <unfixable> (embed)
2141    
2142    coreutils
2143            - ia32-libs <unfixable> (embed)
2144    
2145    cyrus-sasl2
2146            - ia32-libs <unfixable> (embed)
2147    
2148    db4.8
2149            - ia32-libs <unfixable> (embed)
2150    
2151    dbus
2152            - ia32-libs <unfixable> (embed)
2153    
2154    directfb
2155            - ia32-libs <unfixable> (embed)
2156    
2157    esound
2158            - ia32-libs <unfixable> (embed)
2159    
2160    fltk1.1
2161            - ia32-libs <unfixable> (embed)
2162    
2163    fontconfig
2164            - ia32-libs <unfixable> (embed)
2165    
2166    freeglut
2167            - ia32-libs <unfixable> (embed)
2168    
2169    gcc-3.3
2170            - ia32-libs <unfixable> (embed)
2171    
2172    gdbm
2173            - ia32-libs <unfixable> (embed)
2174    
2175    gnutls26
2176            - ia32-libs <unfixable> (embed)
2177    
2178    hal
2179            - ia32-libs <unfixable> (embed)
2180    
2181  shtool: (affects build-time only)  isdnutils
2182  mysql-ocaml          - ia32-libs <unfixable> (embed)
 php4  
2183    
2184    jack-audio-connection-kit
2185            - ia32-libs <unfixable> (embed)
2186    
2187  mozilla:  keyutils
2188  mozilla-firefox          - ia32-libs <unfixable> (embed)
 mozilla-thunderbird  
 nvu  
2189    
2190    krb5
2191            - ia32-libs <unfixable> (embed)
2192    
2193  xli:  lesstif2
2194  xloadimage          - ia32-libs <unfixable> (embed)
2195    
2196    libaio
2197            - ia32-libs <unfixable> (embed)
2198    
2199  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  libasyncns
2200  openmotif          - ia32-libs <unfixable> (embed)
 xfree86/xorg (in libxpm)  
2201    
2202    libcap2
2203            - ia32-libs <unfixable> (embed)
2204    
2205  kerberized apps with BSD origin:  libdrm
2206  krb4          - ia32-libs <unfixable> (embed)
 krb5  
 heimdal  
2207    
2208    libedit
2209            - ia32-libs <unfixable> (embed)
2210    
2211  grip: (which pkg is the origin?)  libexif
2212  libcdaudio          - ia32-libs <unfixable> (embed)
 grip  
 gnome-vfs (vfs2 as well?)  
2213    
2214    libgcrypt11
2215            - ia32-libs <unfixable> (embed)
2216    
2217  fudforum:  libgpg-error
2218  phpgroupware-fudforum          - ia32-libs <unfixable> (embed)
 egroupware-fudforum  
2219    
2220  cvs:  libgphoto2
2221  gcvs (at least an additional script is included, check if there's more)          - ia32-libs <unfixable> (embed)
2222    
2223  pcre:  libice
2224  all pythons          - ia32-libs <unfixable> (embed)
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
2225    
2226  tiff:  libieee1284
2227  wxpythongtk (check, which debian pkg this is in)          - ia32-libs <unfixable> (embed)
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
2228    
2229    libjpeg8
2230            - ia32-libs <unfixable> (embed)
2231    
2232  uudeview:  libnss-ldap
2233  libconvert-uulib-perl          - ia32-libs <unfixable> (embed)
2234    
2235  sqlite: (not affected by security vulnerabilities so far)  libogg
2236  amarok          - ia32-libs <unfixable> (embed)
2237    
2238  util-linux/mount:  libpam-ldap
2239  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - ia32-libs <unfixable> (embed)
2240    
2241  webmin:  libsamplerate
2242  usermin          - ia32-libs <unfixable> (embed)
2243    
2244  sylpheed:  libsdl1.2
2245  sylpheed-claws          - ia32-libs <unfixable> (embed)
2246    
2247  phpsysinfo:  libsm
2248  egroupware          - ia32-libs <unfixable> (embed)
 phpgroupware  
2249    
2250  phpldapadmin:  libssh2
2251  egroupware          - ia32-libs <unfixable> (embed)
2252    
2253  chmlib:  libtasn1-3
2254  kchmviewer (not packaged in Debian)          - ia32-libs <unfixable> (embed)
2255    
2256  libavcodec/libavformat:  libx11
2257  ffmpeg          - ia32-libs <unfixable> (embed)
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
2258    
2259  mad MPEG decoding lib:  libx86
2260  mad          - ia32-libs <unfixable> (embed)
 xine-lib  
2261    
2262  libdts:  libxau
2263  libdts          - ia32-libs <unfixable> (embed)
 xine-lib  
2264    
2265  flac:  libxcb
2266  flac          - ia32-libs <unfixable> (embed)
 xine-lib  
2267    
2268  liba52:  libxcomposite
2269  a52dec          - ia32-libs <unfixable> (embed)
 xine-lib  
2270    
2271  libmpeg2:  libxcursor
2272  mpeg2dec          - ia32-libs <unfixable> (embed)
2273  xine-lib  
2274    libxdamage
2275            - ia32-libs <unfixable> (embed)
2276    
2277    libxdmcp
2278            - ia32-libs <unfixable> (embed)
2279    
2280    libxext
2281            - ia32-libs <unfixable> (embed)
2282    
2283    libxfixes
2284            - ia32-libs <unfixable> (embed)
2285    
2286    libxi
2287            - ia32-libs <unfixable> (embed)
2288    
2289    libxinerama
2290            - ia32-libs <unfixable> (embed)
2291    
2292    libxmu
2293            - ia32-libs <unfixable> (embed)
2294    
2295    libxp
2296            - ia32-libs <unfixable> (embed)
2297    
2298    libxrandr
2299            - ia32-libs <unfixable> (embed)
2300    
2301    libxrender
2302            - ia32-libs <unfixable> (embed)
2303    
2304    libxss
2305            - ia32-libs <unfixable> (embed)
2306    
2307    libxt
2308            - ia32-libs <unfixable> (embed)
2309    
2310    libxtst
2311            - ia32-libs <unfixable> (embed)
2312    
2313    libxv
2314            - ia32-libs <unfixable> (embed)
2315    
2316    libxxf86vm
2317            - ia32-libs <unfixable> (embed)
2318    
2319    lzo2
2320            - ia32-libs <unfixable> (embed)
2321    
2322    mesa
2323            - ia32-libs <unfixable> (embed)
2324    
2325    mpg123
2326            - ia32-libs <unfixable> (embed)
2327    
2328    nas
2329            - ia32-libs <unfixable> (embed)
2330    
2331    nss
2332            - ia32-libs <unfixable> (embed)
2333    
2334    openal-soft
2335            - ia32-libs <unfixable> (embed)
2336    
2337    openssl
2338            - ia32-libs <unfixable> (embed)
2339    
2340    pam
2341            - ia32-libs <unfixable> (embed)
2342    
2343    popt
2344            - ia32-libs <unfixable> (embed)
2345    
2346    pulseaudio
2347            - ia32-libs <unfixable> (embed)
2348    
2349    sane-backends
2350            - ia32-libs <unfixable> (embed)
2351    
2352    sqlite3
2353            - ia32-libs <unfixable> (embed)
2354            - chromium-browser <unfixed> (embed)
2355    
2356    sysfsutils
2357            - ia32-libs <unfixable> (embed)
2358    
2359    tcp-wrappers
2360            - ia32-libs <unfixable> (embed)
2361    
2362    tdb
2363                  - thunar 1.2.1-3 (old-version)
2364            - ia32-libs <unfixable> (embed)
2365    
2366    tslib
2367            - ia32-libs <unfixable> (embed)
2368    
2369    unixodbc
2370            - ia32-libs <unfixable> (embed)
2371    
2372    xaw3d
2373            - ia32-libs <unfixable> (embed)
2374    
2375    xbitmaps
2376            - ia32-libs <unfixable> (embed)
2377    
2378    xcb-util
2379            - ia32-libs <unfixable> (embed)
2380    
2381    xcursor-themes
2382            - ia32-libs <unfixable> (embed)
2383    
2384    xft
2385            - ia32-libs <unfixable> (embed)
2386    
2387    dicomparser
2388            - vtk <unfixed>
2389            - paraview <unfixed>
2390            NOTE: as part of its copy of vtk
2391            - insighttoolkit <unfixed>
2392    
2393    proj
2394            - vtk <unfixed>
2395            - paraview <unfixed>
2396            NOTE: as part of its copy of vtk
2397            - therion <unfixed>
2398            - python-pyproj 1.8.6-1
2399    
2400    netcdf
2401            - vtk <unfixed>
2402            - paraview <unfixed>
2403            NOTE: as part of its copy of vtk
2404    
2405    insighttoolkit
2406            - vtk <unfixed> (embed)
2407            NOTE: embeds at least MetaIO
2408            - paraview <unfixed> (embed)
2409            NOTE: embeds at least MetaIO
2410    
2411  curl:  gl2ps
2412  wget (code for NTLM authentication)          - vtk <unfixed>
2413            - paraview <unfixed>
2414            NOTE: as part of its copy of vtk
2415            - avogadro <unfixed>
2416            - gabedit <unknown> (embed)
2417            NOTE: not sure if it is built
2418            - drawxtl <unfixed> (embed)
2419            - rgl <unfixed> (embed)
2420            - gmsh <unfixed>
2421            - mcrl2 <unfixed> (embed)
2422            - mysql-gui-tools <unknown> (embed)
2423            NOTE: not sure if it is built
2424            - opencascade <unfixed> (embed)
2425            - orsa <unfixed> (embed)
2426            - qtiplot <unfixed> (embed)
2427            - qwtplot3d <unfixed> (embed)
2428            - root-system <unknown> (embed)
2429            NOTE: not sure if it is built
2430            - scilab <unfixed> (embed)
2431            - snd <unknown> (embed)
2432            NOTE: not sure if it is built
2433            - xmakemol <unfixed> (embed)
2434    
2435  TODO evaluate:  qwtplot3d
2436  gimp-gap (potentially using ffmpeg code as well)          - qtiplot <unfixed>
2437    
2438  uw-imap:  parseafm (from Adobe)
2439  pine          - vftool <unfixed>
2440            - gnustep-back <unknown>
2441            NOTE: looks like it isn't built
2442            - evince <unfixed>
2443    
 imagemagick:  
 graphicsmagick  
2444    bugzilla
2445            - perl <unknown>
2446            - libcgi-pm-perl <unknown>

Legend:
Removed from v.3477  
changed lines
  Added in v.16388

  ViewVC Help
Powered by ViewVC 1.1.5