/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3093 by jmm-guest, Mon Dec 19 00:11:32 2005 UTC revision 18915 by mgilbert, Wed Apr 11 13:34:35 2012 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26  xpdf code: (some use xpdf 2, some xpdf 3)  The srcpkg might be some string to identify the code if there is no
27  gpdf  specific source package.
28  pdftohtml  
29  kdegraphics/kpdf  Everything up to the next line is ignored.
30  tetex-bin (the very latest tetex-bin started to use poppler)  ---BEGIN
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
31  poppler  poppler
32  koffice          - pdftohtml <unknown>
33  libextractor          [sarge] - pdftohtml <unfixed>
34            [etch] - pdftohtml <unfixed>
35            NOTE: has been replaced by poppler-utils
36            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37            - texlive-base 3.0-12 (embed)
38            - texlive-bin 2007-1 (embed)
39            - koffice 1:2.0.0-1 (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53    ppmd
54            - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60            - dnsproxy <unknown> (embed)
61    
62    lrmi
63            - read-edid 2.0.0-1 (embed; bug #495131)
64            - s3switch <unfixed> (embed)
65            - xresprobe <unfixed> (embed)
66            - zhcon <unfixed> (embed)
67    
68    php-htmlpurifier
69            - mahara 1.2.5-1 (embed)
70            - knowledgeroot 0.9.9.5-5 (embed)
71            - moodle <unfixed> (embed)
72    
73    peercast
74            - gnome-peercast <removed> (embed)
75            [etch] - gnome-peercast <unfixed> (embed)
76    
77    silc-toolkit
78            - silc-client 1.1~beta6-1 (embed)
79    
80    icclib
81            - ghostscript <unfixed> (embed)
82            - argyll <unfixed> (embed)
83    
84    libusb
85            - argyll <unfixed> (embed)
86            - ia32-libs <unfixable> (embed)
87    
88    dietlibc
89            - ccontrol 0.9.1+20071204-1 (static)
90            - mksh <unfixable> (static)
91            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
92    
93    libmikmod
94            - pysol-sound-server <unfixed> (modified-embed)
95            - sdl-mixer1.2 <unfixed> (embed)
96            TODO: report bug
97            - uqm 0.6.2.dfsg-8 (embed)
98            NOTE: Might be fixed earlier. Lenny version recorded.
99            - black-box 1.4.6-2.2 (embed)
100            NOTE: Might be fixed earlier. Lenny version recorded.
101    
102    libiax
103            - iaxmodem <unfixable> (embed; bug #548885)
104    
105    spandsp
106            - iaxmodem <unfixable> (embed; bug #548885)
107    
108    python-paramiko
109            - fabric 0.9.0-2 (embed; bug #561398)
110    
111    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
112            - dpkg 1.15.6 (static)
113            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
114            - rsync <unfixed> (embed)
115            - cherokee <unfixed> (embed)
116            NOTE: somehow derived code base
117            - mono <unfixed> (embed)
118            TODO: check mozilla
119            - linux-2.6 <unfixed> (embed)
120            - pvpgn 1.7.8-2 (embed)
121            - mrtg 2.12.2-1 (embed)
122            - rpm <unknown> (embed)
123            NOTE: pinged anibal since when rpm was fixed
124            - tuxcmd-modules <unfixed> (embed)
125            - zsync <unfixed>
126            - tra <unfixed>
127            - sash <unfixed>
128            - nsis <unfixed>
129            - pyfits 1:2.3.1-1
130            - mseide-msegui <unfixed>
131            NOTE: mseide
132            - mirrordir <unfixed>
133            - poco <unfixed>
134            - klibc <unfixed>
135            - emboss 6.3.1-1 (embed)
136            - ghostscript 8.71~dfsg2-6 (embed)
137            NOTE: ghostscript fixed sometime before this, but this is the version i checked
138            - freeimage <unfixed>
139            - clamav <unfixed> (fork)
140            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
141            - tuxonice-userui <unfixed> (static)
142            - plt-scheme <unfixed>
143            - perl <unfixed>
144            - paraview <unfixed>
145            - velvet 0.7.56~nozlibcopy-1
146            - gcvs <unfixed>
147            - dump <unfixed>
148            - aide <unfixed> (static)
149            - dar <unfixed> (static)
150            - avfs <unfixed>
151            - fpc <unfixed>
152            - winff <unfixed>
153            NOTE: inherited from fpc, see #472304
154            - lazarus <unfixed>
155            NOTE: inherited from fpc, see #472304
156            - erlang <unfixed> (embed)
157            - gamera 3.2.3-1 (embed)
158            - python2.4 <unfixed> (embed; bug #553403)
159            - python2.5 <unfixed> (embed; bug #553403)
160            - texlive-bin <unknown> (embed)
161            - sudo <unknown> (embed)
162            NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
163    
164    dulwich
165            - hg-git 0.1.0-1 (embed; bug #541996)
166    
167    libvigraimpex
168            - hugin <unfixed> (embed; bug #542259)
169            - enblend-enfuse <unfixed> (embed; bug #542258)
170            - gamera 3.2.3-1 (embed)
171    
172    libbz2
173            - dpkg 1.15.6 (static)
174            - amd64-libs <unfixed> (static)
175            NOTE: let's call it "static"
176            - dar <unfixed> (static)
177            - dump <unfixed> (static)
178            - unalz 0.64-1 (embed)
179            NOTE: has code, by the maint, to use the system version but links against the internal copy
180            - clamav <unfixed> (embed)
181            NOTE: libclamav/nsis/bzlib*
182            - pristine-tar <unfixable> (modified-embed)
183            NOTE: compression code only, not uncompression
184            - r-base-core-ra 1.2.8 (static)
185            - r-base-core 2.11.1 (static)
186            NOTE: links dynamically in squeeze, statically in lenny
187            - rpm <unfixed> (static)
188            NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
189    
190    libyahoo2
191            - centerim <unfixed> (embed; bug #559783)
192    
193    libmsn
194            - centerim <unfixed> (embed; bug #559783)
195    
196    libgadu
197            - centerim <unfixed> (embed; bug #559783)
198            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
199            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
200            - kdenetwork 4:3.3.2-5 (embed)
201            NOTE: from kdenetwork: kopete
202            - ekg 1:1.8~rc0-1 (embed)
203            - kadu 0.6.0.2-3 (embed; bug #504430)
204            - gadu <itp> (embed)
205    
206    xmlrpc (which package is the "origin" of this code?)
207            - drupal <unfixed> (embed)
208            - phpgroupware <unfixed> (embed)
209            - egroupware <unfixed> (embed)
210            - phpwiki <unfixed> (embed)
211            - php4 <removed> (embed)
212            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
213    
214    shtool (affects build-time only)
215            - mysql-ocaml <unfixed> (embed)
216            - php4 <removed> (embed)
217            - php5 <unfixed> (embed)
218    
219    xulrunner
220            - iceape <unfixed> (embed; bug #561749)
221            - iceweasel 2.0.0.19 (embed)
222            - icedove <unfixed> (embed; bug #561750)
223            - kompozer <unfixed> (embed; bug #532168)
224            - galeon 2.0.2-4 (embed)
225            - epiphany-browser 2.14.3-8 (embed)
226            - conkeror 0.9~git080629-2 (embed)
227            - kazehakase 0.4.2-1 (embed)
228    
229    xli
230            - xloadimage <unfixed> (embed)
231    
232    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
233            - openmotif <unfixed> (embed)
234    
235    libxpm
236            - lesstif2 <unfixed> (embed; bug #575750)
237            - ia32-libs <unfixable> (embed)
238    
239    kerberized apps with BSD origin
240            - krb4 <removed> (embed)
241            - krb5 <unfixed> (embed)
242            - heimdal <unfixed> (embed)
243    
244    grip (which pkg is the origin?)
245            - libcdaudio <unfixed>
246            - grip <unfixed>
247            - gnome-vfs <unfixed>
248            TODO: check vfs2 as well
249    
250    fudforum
251            [etch] - phpgroupware <unfixed> (embed)
252            NOTE: phpgroupware-fudforum
253            [sarge] - egroupware-fudforum <removed> (embed)
254    
255    libbsd
256            - rdate 1:1.2-3 (embed)
257            - atheme-services <unfixed>
258            - libbsd-arc4random-perl <not-affected> (modified-embed)
259            NOTE: code not used, it links dynamically against libbsd instead
260            - isakmpd <unfixed>
261            - bsdgames <unfixed> (embed)
262            - bsd-mailx <unfixed> (embed)
263            - netcat-openbsd <unfixed> (embed; bug #550611)
264            - openssh <unfixed> (embed)
265            - unworkable <unfixed> (embed)
266            - mksh <unfixed> (modified-embed)
267            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
268            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
269            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
270            - ia32-libs <unfixable> (embed)
271    
272    cvs
273            - gcvs <unfixed> (embed)
274            NOTE: see cvsunix/src in tarball
275    
276    pcre3
277            - php4 <removed> (embed)
278            - analog 2:5.23-0woody1 (embed)
279            - chicken 3.2.7-2 (embed)
280            NOTE: Might be fixed earlier. Lenny version recorded.
281            - goffice <unfixed> (embed)
282            NOTE: libgoffice-*
283            - hypermail 2.2.0.dfsg-2 (embed)
284            NOTE: Might be fixed earlier. Lenny version recorded.
285            - privoxy 3.0.9-1 (embed)
286            NOTE: Might be fixed earlier. Lenny version recorded.
287            - vfu 4.06-4.1 (embed; bug #450754)
288            - tf5 5.0beta7-1 (embed)
289            - monotone 0.43-1 (embed)
290            NOTE: this only affects versions >= 0.37
291            - glib2.0 2.15.2-1 (embed)
292            - apache2 2.0.53-4 (embed)
293            - exim4 4.10-0.srh20.12 (embed)
294            - yacas <unfixed> (embed)
295            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
296            - gtamsanalyzer.app 0.42-5 (embed)
297            - tin 980117-1 (embed)
298            - kazehakase 0.5.2-1
299            - webkit 1.0.1-1 (embed)
300            - qt4-x11 <unfixed> (embed)
301            NOTE: embedded via webkit copy
302            - erlang <unfixed> (embed)
303            - ssed <unfixed> (embed)
304            - ircd-hybrid <unfixed> (static)
305            - emboss <unfixed> (fork)
306            - cherokee <unfixed> (embed)
307            - oftc-hybrid 1.6.9.dfsg-1 (embed)
308            - ratbox-services <unfixed> (embed)
309            - squeak-vm <unfixed> (embed)
310            - tinymux <unfixed> (embed)
311    
312    tiff
313            - wxwindows2.4 2.2.1 (embed)
314            - gamera 3.2.3-1 (embed)
315            - freeimage <unfixed> (embed)
316            - libtk-img <unfixed> (embed)
317            NOTE: there are two copies, one under tiff/ other under libtiff/
318            - gdal <unfixed>
319            - ia32-libs <unfixable> (embed)
320    
321    uudeview
322            - libconvert-uulib-perl <unfixed> (embed)
323            - pan <unfixed> (embed)
324    
325    sqlite
326            - amarok <unfixed> (embed)
327            - monotone 0.43-1 (embed)
328            - iceweasel <unfixed> (embed)
329            - heimdal <unfixed> (embed; bug #559616)
330    
331    util-linux
332            - loop-aes-utils <unfixed> (embed)
333            NOTE: contains code from util-linux' mount in the mount-aes-udeb
334            - ia32-libs <unfixable> (embed)
335    
336    sylpheed
337            - sylpheed-claws <unfixed> (fork)
338    
339    phpsysinfo
340            - egroupware <unfixed> (embed)
341            - phpgroupware <unfixed> (embed)
342    
343    phpldapadmin
344            [sarge] - egroupware <unfixed> (embed)
345            NOTE: removed from egroupware after sarge
346    
347    chmlib
348            - kchmviewer <unknown> (embed)
349    
350    ffmpeg (libavcodec/libavformat)
351            - mplayer 1.0~rc2-14 (embed; bug #395252)
352            - kino 1.0.0-1
353            - vlc <not-affected> (Links dynamically since initial release)
354            - smilutils 0.3.0-10
355            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
356            - motion 3.1.19-1
357            - gstreamer0.10-ffmpeg 0.10.3-2
358            - xmovie <removed> (static)
359            TODO: gimp-gap (potentially using ffmpeg code as well)
360            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
361            - audacity 1.3.7-2 (embed; bug #512278)
362            - chromium-browser <unfixed> (fork)
363            - libav <unfixed>
364    
365    faad2
366            - mplayer 1.0~rc2-20 (embed)
367            - avifile <unfixed> (embed; bug #538750)
368            - ffmpeg-debian <removed> (embed)
369    
370    libmad (MPEG decoding lib)
371            - xine-lib <unfixed> (embed)
372            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
373            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
374    
375    libdts
376            - xine-lib <unfixed> (embed)
377    
378  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  flac
379  dpkg          - xine-lib <unfixed> (embed)
380  rsync (somehow derived code base)          - ia32-libs <unfixable> (embed)
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
381    
382    liba52
383            - a52dec <unfixed> (embed)
384            - xine-lib <unfixed> (embed)
385    
386    mpeg2dec (libmpeg2)
387            - xine-lib <unfixed> (embed)
388    
389    libmpeg3
390            - squeak-vm <unfixed> (embed)
391    
392    libntlm
393            - wget <unfixed> (fork; bug #550436)
394            - curl <unfixed> (fork; bug #550437)
395            - cntlm <unfixed> (fork; bug #550438)
396    
397    uw-imap
398            - pine <unfixed> (embed)
399            - alpine <unfixed> (embed)
400    
401    imagemagick
402            - graphicsmagick <unfixed> (fork)
403    
404    python-urlgrabber
405            - mercurial <unfixed> (embed; bug #531062)
406            - w3af <unfixed> (embed; bug #555372)
407            [experimental] - harvestman <unfixed> (embed; bug #555373)
408    
409    beautifulsoup
410            - python-mechanize <unfixed> (embed; bug #555349)
411            - zope2.11 <removed> (embed; bug #555350)
412            - twill <unknown> (embed)
413    
414    halibut
415            - nsis <unfixed> (fork)
416    
417    libghttp
418            - hotway <unfixed> (embed)
419    
420    libsndfile
421            - ardour 1:2.7.1-1 (embed)
422            - ia32-libs <unfixable> (embed)
423    
424    glibmm2.4
425            - ardour 1:2.7.1-1 (embed)
426    
427    libgnomecanvasmm2.6
428            - ardour 1:2.7.1-1 (embed)
429    
430    libsigc++-2.0
431            - ardour 1:2.7.1-1 (embed)
432            - ia32-libs <unfixable> (embed)
433    
434    soundtouch
435            - ardour 1:2.7.1-1 (embed)
436    
437    libmms
438            - xine-lib <unfixed> (embed)
439            - mimms <unfixed> (embed)
440    
441    fckeditor
442            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
443            - moin 1.8.2-2 (embed; bug #452599)
444            - karrigell <removed> (embed; bug #452598)
445            - gforge 4.6.99+svn6225-1 (embed)
446            - request-tracker3.8 <unfixed> (embed)
447            - otrs2 <unfixed> (embed)
448    
449    ipatlas (not packaged in Debian)
450            - moodle <unfixed> (embed; bug #507185)
451    
452    libphp-phpmailer
453            - moodle <unfixed> (embed; bug #507185)
454            - mahara <unfixed> (embed)
455            - symfony <unfixed> (embed; bug #566778)
456            [etch] - phpgroupware <unfixed> (embed)
457            NOTE: phpgroupware-felamimail is only in etch
458            - egroupware <unfixed> (embed; bug #504283)
459            - glpi 0.80.7-2
460    
461    htmlArea (not packaged in Debian)
462            - moodle <unfixed> (embed)
463    
464    giflib
465            - wine <unfixed> (embed; bug #466181)
466    
467    bennu (not packaged in Debian, http://bennu.sourceforge.net)
468            - moodle <unfixed> (embed)
469    
470    smarty
471            - moodle 1.8.2-2 (embed; bug #471158)
472            - gallery2 2.2.5-2 (embed; bug #471160)
473            - mahara 0.9.2-2 (embed; bug #471201)
474            - gosa 2.4beta1-1 (embed; bug #471200)
475    
476    TinyMCE
477            - wordpress 2.5.1-3 (embed; bug #478257)
478            - moodle <unfixed> (embed; bug #507185)
479            - knowledgeroot <unfixed> (embed)
480            - joomla <itp> (bug #326398)
481            - mahara 1.2.6-1 (embed; #597752)
482            - glpi 0.80.7-2
483    
484    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
485            - scite <unfixed> (embed)
486            - qscintilla <unfixed> (embed)
487            - qscintilla2 <unfixed> (embed)
488            - geany <unfixed> (fork)
489            - anjuta <unfixed> (embed)
490            - sdlbasic <unfixed> (embed)
491    
492    libphp-adodb
493            - moodle <unfixed> (embed; bug #507185)
494            NOTE: also AdoDB-XML Schema
495            - gallery2 <unfixed> (embed)
496            - phppgadmin <unfixed> (embed)
497            - egroupware <unfixed> (embed)
498            - phpwiki <unfixed> (embed)
499            - torrentflux 2.0beta1-2 (embed)
500            - ipplan <unfixed> (embed)
501            - typo3-src <unfixed> (embed)
502            - cacti <unknown> (embed)
503            [sarge] - cacti <unfixed> (embed)
504            NOTE: dependency exists, but internal version is used
505            - gforge 4.7~rc2-6 (embed)
506            - mahara <unfixed> (embed)
507    
508    gzip
509            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
510            - klibc <unfixed> (embed)
511            NOTE: based on linux-kernel gzip code
512            - busybox <unfixed> (embed)
513            - pristine-tar <unfixed> (modified-embed)
514            NOTE: compression code only, not uncompression
515            - ncompress <unfixed> (old-version)
516    
517    neon
518            - cadaver 0.22.3+debian-1 (embed; bug #188381)
519            - gnome-vfs2 <unfixed> (embed; bug #395874)
520            [etch] - litmus <unfixed> (embed; #395875)
521            - litmus <removed> (embed; #395875)
522            [sarge] - screem <unfixed> (embed)
523            - sitecopy 1:0.16.0-1 (embed; bug #395876)
524            [etch] - tla <unfixed> (embed; bug #395877)
525            [sarge] - tla <unfixed> (embed; bug #395877)
526    
527    libmodplug
528            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
529    
530    libvncserver
531            - vino <unfixed> (embed)
532    
533    putty
534            - filezilla <unfixed> (embed)
535    
536    tinyxml
537            - filezilla <unfixed>
538            - crystalspace <unfixed> (embed)
539            - libwfut <unfixed> (embed)
540            - rarian <unfixed> (embed)
541            - bulletml <unfixed> (embed)
542            - pokerth <unfixed> (embed)
543            - qutecom <unfixed> (embed)
544            - sofa-framework <unfixed> (embed)
545            - yate <unfixed> (embed)
546            - antigrav <unfixed> (embed)
547            - balder2d <unfixed> (embed)
548            - cal3d <unfixed> (embed)
549            - criticalmass <unfixed> (embed)
550            - ember <unfixed> (embed)
551            - epiphany <unfixed> (embed)
552            - gambit <unfixed> (embed)
553            - noiz2sa <unfixed> (embed)
554            - ogre <unfixed> (embed)
555            - opencity <unfixed> (embed)
556            - openmovieeditor <unfixed> (embed)
557            - pouetchess <unfixed> (embed)
558            - tecnoballz <unfixed> (embed)
559            - trigger-rally <unfixed> (embed)
560            - xmoto <unfixed> (embed)
561            - mapnik <unknown> (embed)
562            NOTE: uses a different XML parser by default
563            - rrootage 0.23a-6 <embed>
564            NOTE: links to libbulltetml
565            - boson <unknown> (embed)
566            NOTE: the embedded code is unused
567            - cppcheck <unfixed> (embed)
568            NOTE: introduced in 1.47, will use system's version in 1.48
569            [squeeze] - cppcheck <not-affected>
570    
571    gv
572            - evince <unfixed> (embed)
573            NOTE: ps/ tree from gv 3.5.8
574            NOTE: evince-gtk is affected (a component of evince source package)
575    
576    libXbae
577            - paw <unfixed> (embed)
578    
579    libgtkhtml
580            - claws-mail-extra-plugins <unfixed> (fork)
581    
582    libXaw
583            - paw <unfixed> (embed)
584            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
585            - ia32-libs <unfixable> (embed)
586    
587    libgd2
588            - graphviz 2.16-1 (embed)
589            NOTE: lib/gd seems to be 2.0.33
590            - wml 2.0.11ds2-1 (embed)
591            - libwmf <unfixed> (embed)
592            NOTE: derived from gd 1.6.3, but only used to write images
593            - plt-scheme <unfixed> (embed; bug #601525)
594            - texlive-bin 2009-1 (embed)
595    
596    rar
597            - unrar-nonfree <unfixed> (embed)
598    
599    unrar-free (maybe this code is derived from the original rar, too?)
600            - clamav <unfixed> (embed)
601            NOTE: seems to be disabled in default config
602    
603    mplayer (DirectMedia Object loader)
604            - xine-lib <unfixed> (embed)
605            NOTE: src/libw32dll/
606            - vlc <unfixed> (embed)
607            NOTE: modules/codec/dmo/
608            - mplayer 1.0~rc2-20 (embed)
609    
610    libwpd (WordPerfect converter)
611            - openoffice.org <unfixed> (embed)
612    
613    fsplib (http://sourceforge.net/projects/fsp/)
614            - gftp <unfixed> (embed)
615            NOTE: lib/fsplib version 0.3
616    
617    sprng
618            - tree-puzzle <unfixed> (embed)
619    
620    librpcsecgss
621            - krb5 <unfixed> (embed)
622    
623    jasper
624            - ghostscript 8.64~dfsg-2 (embed)
625    
626    libiris
627            - psi <unfixed> (embed)
628            - kdenetwork <unfixed> (embed)
629            NOTE: kopete embeds libiris but links dynamically to libidn
630            - kdegames <unfixed> (embed)
631            NOTE: ksirk/kde4
632    
633    libidn
634            - monotone 0.43-1 (embed)
635            - psi <unfixed> (embed)
636            NOTE: psi embeds libiris which embeds libidn
637            - kdegames <unfixed> (embed)
638            NOTE: kdegames/kde4 embeds libiris which embeds libidn
639            - ia32-libs <unfixable> (embed)
640    
641    lua5.1
642            - monotone 0.43-1 (embed)
643            - nmap 5.00-1 (embed; bug #527997)
644            [lenny] - nmap <unfixed> (embed; bug #527997)
645            - ocropus <unfixed> (embed)
646            - enigma <unfixed> (embed)
647            NOTE: requires lua built with C++
648            - freeciv <unfixed> (embed)
649            - spring <unfixed> (embed)
650    
651    libbotan
652            - monotone 0.43-1 (embed)
653    
654    NetXX
655            - monotone 0.43-1 (embed)
656    
657    libgc
658            - mono <unfixed> (embed)
659    
660    lzma
661            - p7zip <unfixed> (embed)
662            - xz-utils <unfixed> (fork)
663            - r-base <unfixed> (embed)
664            NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
665    
666    lzo
667            - grub2 <unfixed> (embed)
668    
669    yassl
670            - mysql-dfsg-5.0 <unfixed> (embed)
671            - mysql-5.1 <unfixed> (embed)
672    
673    pax code
674            - tar <unfixed> (embed)
675            - cpio <unfixed> (embed)
676    
677    t1lib
678            - tetex-bin 2.0.2-1 (embed)
679            - texlive-bin <unfixed> (embed)
680            NOTE: used only in xdivk (a dvi file viewer that the maintainer refuses to drop)
681            - grace 5.1.14-2 (embed)
682            - evince <unfixed> (embed)
683            NOTE: at least parseafm code, maybe more?
684            - vftool <unfixed> (embed)
685            NOTE: just parseafm code it seems
686    
687    guichan
688            - boswars <unfixed> (embed)
689            NOTE: maintainer notified us, working on it
690    
691    tolua
692            - boswars <unfixed> (embed)
693            NOTE: maintainer notified us, working on it
694            NOTE: actually tolua++
695            - ocropus <unfixed> (embed)
696            NOTE: actually tolua++
697            - freeciv <unfixed> (embed)
698            NOTE: actually tolua++
699            - enigma <unfixed> (embed)
700    
701  libgadu/ekg:  asio-dev
702  centericq          - luxrender <removed> (embed)
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
703    
704    xine-lib
705            - vlc <unfixed> (embed)
706            NOTE: only parts included in modules/access/rtsp
707    
708  xmlrpc: (which package is the "origin" of this code?)  netpbm
709  drupal          - tcl8.3 <unfixed> (embed)
710  phpgroupware          - tcl8.4 <unfixed> (embed)
711  egroupware          - tcl8.5 <unfixed> (embed)
712  phpwiki          NOTE: generic/tkImgGIF.c
713  php4 (php-pear, IIRC this was reorganized some weeks ago?)  
714  tikiwiki (not packaged in Debian)  tk8.5
715            - tk8.0 <removed> (old-version)
716            - tk8.3 <unfixed> (old-version)
717            - tk8.4 <unfixed> (old-version)
718            - perl-tk <unfixable> (fork)
719    
720    samba
721            - mc 2:4.6.2~git20080311-1 (embed)
722            NOTE: maintainer is aware of this, currently searching a solution
723    
724    plib1.8.4c2
725            - boson <unfixed> (fork)
726            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
727    
728    fribidi
729            - quesoglc 0.7.2-2 (embed)
730    
731    glew
732            - quesoglc <unfixed> (embed; bug #489341)
733            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
734            - trigger 0.5.2.1-2 (embed)
735            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
736            - trigger-rally 0.5.2.1-2 (embed)
737            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
738            - chromium-browser 5.0.375.70~r48679-2
739    
740    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
741            - transcend <unfixed> (embed)
742            - cultivation <unfixed> (embed)
743            - passage <unfixed> (embed)
744            - gravitation <unfixed> (embed)
745    
746    tar
747            - libarchive <unfixed> (embed)
748            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
749    
750    cpio
751            - libarchive <unfixed> (embed)
752            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
753    
754    kde4libs
755            - kdelibs <unfixable> (old-version)
756    
757    webkit
758            - qt4-x11 <unfixed> (embed; bug #479851)
759            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
760            - kde4libs <unfixable> (fork)
761            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
762            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
763            - chromium-browser <unfixed> (fork)
764    
765    ftgl
766            - blender 2.46+dfsg-1 (embed)
767            - vtk <unfixed> (embed)
768            - paraview <unfixed> (embed)
769            NOTE: as part of its copy of vtk
770            - tulip <unfixed> (embed)
771            NOTE: depends on -dev but string found on binary
772            - root-system <unknown> (embed)
773            NOTE: depends on -dev package; not confirmed at source
774            - rgl <unknown> (embed)
775            NOTE: not sure if it is built
776            - mysql-gui-tools <unknown> (embed)
777            NOTE: not sure if it is built
778            - k3d <unfixed> (embed)
779            - extremetuxracer <unknown> (embed)
780            NOTE: not sure if it is built
781            - critterding <unknown> (embed)
782            - lightspeed <unfixed>
783            NOTE: depends on -dev but string found on binary
784    
785    wv
786            - abiword <unfixed>
787    
788    qemu
789            - kvm <removed> (embed; bug #543159)
790            - qemu-kvm <unfixed> (embed; bug #560853)
791            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
792            - xen-3 3.4.2-2 (embed; bug #560856)
793            - xen-unstable <unfixed> (embed; bug #560856)
794    
795    vgabios
796            - kvm <removed> (embed; bug #489442)
797            - qemu-kvm <unfixed> (embed)
798    
799    bochs
800            - kvm <removed> (embed; bug #489442)
801            - qemu-kvm <unfixed> (embed)
802    
803    speex
804            - vorbis-tools <unfixed> (embed)
805            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
806            - gst-plugins-good0.10 <unfixed> (embed)
807            - xine-lib <unfixed> (embed)
808            - libfishsound <unfixed> (embed)
809            - libannodex <removed> (embed)
810            - opal 3.4.2~dfsg-2 (embed)
811            - mumble 1.2.0~beta1-1 (embed)
812            - vlc <unfixed> (embed)
813            - xmms-speex <unfixed> (embed)
814            - libsdl-sound1.2 <unfixed> (embed)
815            - sweep <unfixed> (embed)
816    
817    libreadline
818            - magic <itp> (old-version)
819    
820    opcode
821            - ode <unfixed> (embed)
822            NOTE: opcode is not a package in debian, it is just embedded
823            NOTE: http://www.codercorner.com/Opcode.htm
824    
825    gimpact
826            - ode <unfixed> (embed)
827            NOTE: gimpact is not a package in debian, it is just embedded
828            NOTE: http://gimpact.sf.net
829    
830    mochikit
831            - mahara <unfixed> (embed)
832            NOTE: they require extra patches, still unmerged upstream
833            - ntop <unfixed> (embed)
834            - coherence 0.6.2-1 (embed)
835            - paste <unfixed> (embed)
836            - turbogears <unfixed> (embed)
837            - plone3 <removed> (embed)
838            - xulrunner <unfixed> (embed)
839            - libjifty-plugin-chart-perl <unfixed> (embed)
840            - sabnzbdplus <unfixed> (embed)
841            - tgmochikit <unfixed> (embed)
842    
843    prototypejs
844            - netbeans-ide 6.0.1+dfsg-2 (embed)
845            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
846            - webcit <unfixed> (embed; bug #555219)
847            - asterisk 1:1.6.2.0~rc3-1 (embed)
848            - libjson-ruby 1.1.4-1 (embed; bug #555224)
849            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
850            - horde3 <unfixed> (embed)
851            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
852            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
853            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
854            - ebug-http <unfixed> (embed; bug #555236)
855            - libaws 2.7-1 (embed; bug #555222)
856            - phpgedview <removed> (embed)
857            - poker-network 1.7.6-1 (embed; bug #555238)
858            - rails 2.1.0-6 (embed)
859            - wordpress 2.5.0-2 (embed; bug #555243)
860            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
861            TODO: search through all of the other zope packages
862            - ampache 3.4.1-2 (embed)
863            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
864            - hobix 0.5~svn20070319-4 (embed; bug #555247)
865            - zabbix 1.6.6-4 (embed; bug #555250)
866            - chora2 2.1.1+debian0-1 (embed; bug #555253)
867            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
868            - jscropperui 1.2.1-1 (embed; bug #555257)
869            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
870            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
871            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
872            - activeldap 1.2.1-1 (embed)
873            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
874            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
875            - otrs2 2.3.4-6 (embed; bug #555267)
876            - webcalendar 1.2~b1-2 (embed; bug #555269)
877            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
878            - jifty 0.90519-1 (embed; bug #555271)
879            - jquery 1.4-1 (embed; bug #555272)
880            - passenger 2.2.5debian1-1 (embed; bug #555273)
881            - plone3 <removed> (embed; bug #555275)
882            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
883            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
884            - xulrunner <unfixed> (embed)
885            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
886            - jclicmoodle <unfixed> (embed)
887            - git-cola <unfixed> (embed)
888    
889    gdb
890            - insight <unfixed> (embed)
891    
892    e2fsprogs
893            - ldiskfsprogs <unfixable> (fork)
894            - ia32-libs <unfixable> (embed)
895    
896    quazip (not packaged in Debian)
897            - qcake <unfixed> (embed)
898            NOTE: starting with upstream version 0.6.4
899    
900    exo
901            - pcmanfm <unfixed> (embed; bug #499677)
902            NOTE: slightly modified source code
903    
904    xfce4-taskmanager
905            - lxtask <unfixed> (embed)
906            NOTE: old fork, maybe outdated
907    
908    isync
909            - postler <unfixed> (embed; bug #628798)
910    
911    java
912            - openjdk-6 <unfixed>
913            - sun-java5 <unfixed>
914            - sun-java6 <unfixed>
915    
916    libphp-snoopy
917            - ampache 3.4.1-2 (embed; bug #504169)
918            - gforge 4.6.99+svn6094-2 (embed)
919            - mahara 1.0.5-2 (embed; bug #504170)
920            - pixelpost 1.7.1-5 (embed; bug #504171)
921            - mediamate 0.9.3.6-5 (embed; bug #504172)
922            - opendb <removed> (embed; bug #504173)
923            [etch] - opendb <unfixed> (embed; bug #504173)
924            - wordpress 2.5.1-9 (embed; bug #443948)
925            - moodle <unfixed> (embed; bug #507185)
926            [etch] - phpgroupware <unfixed> (embed)
927            NOTE: phpgroupware-felamimail
928            - magpierss 0.72-3 (embed; bug #431089)
929    
930    jquery
931            - jsonbot <unfixed> (embed; bug #625524)
932            - zekr <unfixed> (embed)
933            - wordpress <unknown> (embed)
934            - yocto-reader <unfixed> (embed)
935            - textpattern <unfixed> (embed)
936            - genshi 0.5.1-1 (embed)
937            NOTE: compressed file under examples/ dir
938            - prewikka <unfixed> (embed)
939            - libramaze-ruby <unfixed> (embed)
940            - drupal6 <unfixed> (embed)
941            - b2evolution <unfixed> (embed)
942            - wesnoth <unfixed> (embed)
943            - gammu 1.28.95-1 (embed)
944            - trac <unfixed> (embed; bug #645339)
945    
946    jquery-goodies
947            - horizon <unfixed> (embed)
948            NOTE: jquery.cookie.js, jquery.table-sorter.js, jquery-ui.min.js
949    
950    tablesorter (jquery plugin, not packaged yet)
951            - wesnoth <unfixed> (embed)
952    
953    kses
954            - wordpress <unfixed> (embed; bug #504242)
955            NOTE: their copy has all methods renamed to wp_<foo>
956            NOTE: kses isn't in Debian, RFP: #504240
957            - moodle <unfixed> (embed; bug #507185)
958            - egroupware <unfixed> (embed)
959    
960    magpierss
961            - wordpress <unfixed> (embed; bug #504242)
962            - moodle <unfixed>
963    
964    php-gettext
965            - wordpress 2.8.4-1 (embed; bug #504242)
966            - docbookwiki <unfixed> (embed)
967            - knowledgeroot 0.9.9.5-1
968            NOTE: non-free
969    
970    libphp-ixr (name may change, it is the Incutio XML-RPC)
971            - wordpress <unfixed> (embed; bug #504242)
972            NOTE: libphp-ixr isn't in Debian, RFP: #504236
973            - dokuwiki <unfixed> (embed)
974            - textpattern <unfixed> (embed)
975    
976    libphp-cas
977            - glpi 0.80.7-2 (embed)
978            - moodle <unfixed> (embed; bug #505984)
979    
980    scriptaculous (prototype.js is among the embeds in the following)
981            - glpi <unfixed> (embed)
982            - libaws <unfixed> (embed; bug #555222)
983            - op-panel <unfixed> (embed)
984            - symfony <unfixed> (embed)
985            NOTE: maintainer says there are extra incompatible changes required
986            - pixelpost 1.7.1-6 (embed)
987            - webhelpers <unfixed> (embed)
988            - qwik <removed> (embed; bug #555241)
989            - smokeping <unfixed> (embed)
990            - turba2 <unfixed> (embed)
991            - typo3-src 4.2.3-1 (embed)
992            - request-tracker3.6 <unfixed> (embed)
993            - request-tracker3.8 <unfixed> (embed)
994            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
995            - wordpress 2.5.0-2 (embed)
996            - libhtml-prototype-perl 1.48-3 (embed)
997    
998    libmarkdown-php
999            - moodle <unfixed> (embed; bug #507185)
1000            - pixelpost 1.7.1-6 (embed)
1001    
1002    php-openid
1003            - wordpress-openid 3.3.2-1 (embed)
1004    
1005    geshi
1006            - dokuwiki 0.0.20080505-3.1 (embed)
1007            - pgfouine 1.0-1.1 (embed)
1008            - websvn 2.1.0-1 (embed)
1009    
1010    webcalendar
1011            - gforge 4.7~rc2-6 (embed; bug #504758)
1012    
1013    libical
1014            - kdepim <unknown> (fork)
1015            NOTE: fixed at some point during 4.0
1016            - kdepimlibs 4.2.0-1 (fork)
1017            - claws-mail-extra-plugins <unfixed> (fork)
1018    
1019    harfbuzz
1020            - qt4-x11 <unfixed> (embed)
1021            - pango1.0 <unfixed> (embed)
1022            - fontmatrix <unfixed> (embed)
1023    
1024    libzip
1025            - php5 <unfixable> (modified-embed)
1026            - odt2txt <unfixed> (embed; bug #523808)
1027    
1028    json.php (not packaged; should be replaced with php's built-in functions)
1029            - moodle <unfixed>
1030            - yui <unfixed>
1031            - gallery2 <unfixed>
1032            - dokuwiki <unfixed>
1033            - typo3-src <unfixed>
1034    
1035    php-fpdf
1036            - tcpdf <itp> (fork)
1037            - moodle <unfixed>
1038            - phpwiki <unfixed>
1039            - egroupware <unfixed>
1040            - ldap-account-manager <unfixed> (fork)
1041    
1042    tcpdf (itp: #495985)
1043            - moodle <unfixed>
1044            - phpmyadmin <unfixed>
1045    
1046    typo3
1047            - moodle <unfixed>
1048    
1049    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1050            - moodle <unfixed>
1051            - gosa <unfixed>
1052    
1053    php-ole (itp: #487558)
1054            - moodle <unfixed>
1055    
1056    pieforms (http://www.catalyst.net.nz)
1057            - mahara <unfixed>
1058    
1059    savant2 (http://phpsavant.com)
1060            - egroupware <unfixed>
1061    
1062    rssparser (http://nwow.org)
1063            - egroupware <unfixed>
1064            - phpgroupware <unfixed>
1065    
1066    lcms
1067            - openjdk-6 <unfixed> (fork)
1068            - gimp 2.4.0~rc2-2
1069            - ia32-libs <unfixable> (embed)
1070    
1071    libphp-phplayersmenu
1072            - diogenes <unfixed>
1073            - phpldapadmin <unfixed>
1074    
1075    libphp-pclzip
1076            - docvert <unfixed>
1077            - moodle <unfixed>
1078            - egroupware <unfixed>
1079    
1080    libphp-simplepie
1081            - dokuwiki <unfixed>
1082            - wordpress <unfixed>
1083    
1084    libphp-jpgraph
1085            - egroupware <unfixed>
1086    
1087    php-simpletest
1088            - moodle <unfixed>
1089    
1090    libpng
1091            - doxygen 1.5.6-2 (embed)
1092            NOTE: Might be fixed earlier. Lenny version recorded.
1093            - gdal 1.5.2-3 (embed)
1094            NOTE: Might be fixed earlier. Lenny version recorded.
1095            - iceweasel <not-affected> (uses xulrunner)
1096            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1097            - iceape 1.0.13~pre080614i-0etch1 (embed)
1098            - libfltk1.1 1.1.9-6 (embed)
1099            NOTE: Might be fixed earlier. Lenny version recorded.
1100            - libtk-img <unfixed> (embed)
1101            - htmldoc 1.8.27-3 (embed)
1102            NOTE: Might be fixed earlier. Lenny version recorded.
1103            - xulrunner 1.9.0.13-1 (embed)
1104            [lenny] - xulrunner 1.9.0.11-0lenny1
1105            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1106            - gamera 3.2.3-1 (embed)
1107            - freeimage <unfixed> (embed)
1108            - syslinux-common <unfixable> (embed)
1109            - tuxonice-userui <unfixed> (static)
1110            - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1111            NOTE: Might be fixed earlier. Lenny version recorded.
1112            - vice 1.22.dfsg1-0.1 (embed)
1113            NOTE: Might be fixed earlier. Lenny version recorded.
1114            - visualboyadvance 1.8.0-4 (embed)
1115            NOTE: Might be fixed earlier. Lenny version recorded.
1116            - ia32-libs <unfixable> (embed)
1117    
1118    irssi
1119            - silc-client <unfixed> (embed)
1120            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1121    
1122    extc
1123            - mtasc <unfixed> (embed)
1124            - haxe <unfixed> (embed)
1125    
1126    swflib
1127            - mtasc <unfixed> (embed)
1128            - haxe <unfixed> (embed)
1129    
1130    libitext-java
1131            - bouncycastle 2.1.4-1 (embed)
1132    
1133    python-ply
1134            - pyke <unfixed> (embed; bug #555363)
1135            - pywbem 0.7.0-4 (embed; bug #555364)
1136            - sepolgen <unfixed> (embed; bug #555365)
1137            - zope-textindexng3 <unknown> (embed)
1138            - iceweasel <not-affected> (uses xulrunner)
1139            - xulrunner <unknown> (embed)
1140            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1141    
1142    libdumbnet (libdnet upstream)
1143            - nmap <unfixed> (fork)
1144    
1145    gcc-4.4
1146            - gcc-mingw32 <unfixed> (embed)
1147    
1148    camlimages
1149            - advi <unfixed> (static; bug #550441)
1150    
1151    memcached
1152            - memcachedb <unfixed> (embed)
1153    
1154    yajl
1155            - argyll <unfixed> (embed; bug #544223)
1156            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1157    
1158    nusoap
1159            - gforge 4.8.2-1 (embed)
1160            - ampache <unfixed> (embed)
1161            - poker-network <unfixed> (embed)
1162            - moodle <unfixed> (embed)
1163            NOTE: code is not used when running under php5 and soap is enabled
1164            - phpwiki <unfixed> (embed)
1165            - gallery2 <unfixed> (embed)
1166            - typo3-src <unfixed> (embed)
1167            - phpgacl 3.3.7-7 (embed)
1168            - mantis 1.1.8+dfsg-1 (embed)
1169    
1170    libept
1171            - adept <unfixed> (embed; bug #540649)
1172    
1173    libvorbis
1174            - iceweasel <not-affected> (uses xulrunner)
1175            - xulrunner <unfixed> (embed; bug #540959)
1176            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1177            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1178            - iceape <unfixed> (embed)
1179            [etch] - iceape <not-affected> (introduced in 2.0)
1180            [lenny] - iceape <not-affected> (introduced in 2.0)
1181            - ia32-libs <unfixable> (embed)
1182    
1183    cairo
1184            - iceweasel <not-affected> (uses xulrunner)
1185            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1186    
1187    liboggz
1188            - iceweasel <not-affected> (uses xulrunner)
1189            - xulrunner <unfixed> (embed; bug #540959)
1190            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1191            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1192            - iceape <unfixed> (embed)
1193            [etch] - iceape <not-affected> (introduced in 2.0)
1194            [lenny] - iceape <not-affected> (introduced in 2.0)
1195    
1196    liboggplay
1197            - iceweasel <not-affected> (uses xulrunner)
1198            - xulrunner <unfixed> (embed; bug #540959)
1199            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1200            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1201            - iceape <unfixed> (embed)
1202            [etch] - iceape <not-affected> (introduced in 2.0)
1203            [lenny] - iceape <not-affected> (introduced in 2.0)
1204    
1205    php-net-dnsbl
1206            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1207    
1208    php-onyx-rss
1209            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1210    
1211    php-text-wiki
1212            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1213    
1214    php-xml-rpc
1215            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1216    
1217    polarssl (does not have a shared library)
1218            - pdkim <itp> (embed; bug #543150)
1219            - xyssl <unfixed> (old-version)
1220    
1221    pidgin (libpurple)
1222            - gaim <removed> (old-version)
1223            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1224            - wengophone <unfixed> (embed; bug #601425)
1225    
1226    icu
1227            - webkit 1.0.1-1 (embed; bug #547214)
1228            - texlive-bin <unfixed> (fork)
1229            NOTE: texlive upstream working with icu upstream to merge their changes
1230            - chromium-browser 5.0.375.29~r46008-3
1231    
1232    cyrus-imapd-2.2
1233            - kolab-cyrus-imapd <unfixed> (fork)
1234            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1235    
1236    python-cxx-dev
1237            - freecad 0.9.2646.3-1 (embed; bug #547936)
1238    
1239    zipios++
1240            - freecad 0.9.2646.3-1 (embed; bug #547941)
1241            - enigma 0.92.3-3 (embed)
1242            NOTE: likely fixed earlier, marking etch's version as fixed
1243    
1244    linux-2.6
1245            - kvm <removed> (embed; bug #549973) [./kernel/*]
1246            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1247            - kernel-source-2.6.8 <removed> (old-version)
1248            - kernel-source-2.4.27 <removed> (old-version)
1249            - kernel-source-2.4.24 <removed> (old-version)
1250            - kernel-source-2.2.25 <removed> (old-version)
1251            - kernel-source-2.2.20 <removed> (old-version)
1252    
1253    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1254            - kvm <removed> (embed) [./libfdt/*]
1255            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1256    
1257    qweb (not packaged)
1258            - ajaxterm <unfixed>
1259    
1260    opensaml2
1261            - opensaml <removed> (old-version)
1262    
1263    shibboleth-sp2
1264            - shibboleth-sp <removed> (old-version)
1265    
1266    tuxonice-userui
1267            - suspend2-userui <removed> (old-version)
1268    
1269    expat
1270            - w3c-libwww <removed> (embed; bug #551941)
1271            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1272            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1273            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1274            - python2.4 <unfixable> (embed; bug #553403)
1275            - python2.7 2.7-6 (embed)
1276            - mcabber 0.10.0-1 (low; bug #601053)
1277            - python-4suite <unfixed> (embed; bug #516935)
1278            - wxwindows2.4 <removed> (embed)
1279            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1280            - wxwidgets2.8 2.8.10.1-2 (embed)
1281            - albert <unfixed> (embed; bug #600974)
1282            - celementtree 1.0.5-8 (embed)
1283            NOTE: Maybe that was fixed even earlier
1284            - centerim <unfixed> (embed; bug #559783)
1285            - audacity 1.3.2-1 (embed)
1286            - matanza <unfixed> (embed)
1287            - tdom 0.8.3~20080525-1 (embed)
1288            - udunits 2.1.8-4 (embed)
1289            - apr-util 1.2 (embed)
1290            - ayttm <unfxed> (embed; bug #561006)
1291            - cableswig <unfixed> (embed)
1292            - cadaver <unfixed> (embed)
1293            - cmake 2.6.0-6 (embed)
1294            - coin3 <unfixed> (embed)
1295            - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1296            NOTE: Might be fixed earlier. Lenny version recorded.
1297            - dasher 4.7.3-1 (embed)
1298            NOTE: Might be fixed earlier. Lenny version recorded.
1299            - emboss 6.3.1-1 (embed)
1300            - gdcm 2.0.14-2 (embed)
1301            - ghostscript 8.71~dfsg-2 (embed)
1302            - grmonitor <removed> (embed)
1303            - iceape <unfixed> (embed)
1304            - insighttoolkit 3.16.0-1 (embed)
1305            NOTE: insighttoolkit might've been fixed earlier
1306            - jabber 1.4.3-3.4 (embed)
1307            NOTE: Might be fixed earlier. Lenny version recorded.
1308            - libparagui1.1 1.0.2-1 (embed)
1309            - libspiff1 0.8.3-1 (embed)
1310            NOTE: Might be fixed earlier. Lenny version recorded.
1311            - paraview 3.6.2-1 (embed)
1312            - poco 1.3.6p1-1 (embed)
1313            - scorched3d 41.3dfsg-1+b1 (embed)
1314            NOTE: Might be fixed earlier. Lenny version recorded.
1315            - simgear <unfixed> (embed)
1316            - sitecopy 1:0.16.0-1
1317            - smart <unfixed> (embed)
1318            NOTE: smart embeds celementree, and it includes expat
1319            - swish-e <not-affected> (Linked against libxml, which is used instead)
1320            - tla 1.3.5+dfsg-15 (embed)
1321            - vtk 4.1.20030227-1 (embed)
1322            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1323            - xmlrpc-c <unfixed> (embed)
1324            - iceweasel <unfixed> (embed)
1325            - kompozer <unfixed> (embed)
1326            - vxl 1.13.0-2 (embed)
1327            - xulrunner <unfixed> (embed)
1328            - xmame 0.106-2.1 (embed)
1329            NOTE: Might be fixed earlier. Lenny version recorded.
1330            - apache2 2.2 (embed)
1331            - texlive-bin <not-affected> (Embedded code not compiled in)
1332            - vnc4 <unfixed> (embed)
1333            - xotcl 1.6.6-1 (embed)
1334            - chromium-browser 5.0.375.29~r46008-3
1335            - ia32-libs <unfixable> (embed)
1336    
1337    xerces-c
1338            - xerces-c2 <unfixed> (old-version)
1339            - xerces27 <removed> (old-version)
1340    
1341    md5 (RSA's version; not the gnu version provided by coreutils)
1342            - w3c-libwww <removed> (embed; bug #551942)
1343            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1344    
1345    libparagui1.1
1346            - asc <unfixable> (fork)
1347    
1348    enet
1349            - sauerbraten <unfixed> (embed; #497194)
1350    
1351    eglibc
1352            - glibc <removed> (old-version)
1353            - mksh <unfixable> (static)
1354              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1355    
1356    galib
1357            - gamera 3.2.3-1 (embed)
1358    
1359    configobj
1360            - bzr <unfixed> (embed; bug #555336)
1361            - elisa <unfixed> (embed; bug #555337)
1362            - gaupol <unfixed> (embed; bug #555338)
1363            - ipython <unfixed> (embed; bug #555339)
1364            - pida <unfixed> (embed; bug #555340)
1365            - psychopy <unfixed> (embed; bug #555341)
1366            - rest2web <unfixed> (embed; bug #555342)
1367            - auth2db <unknown> (embed)
1368            - dynagen <unknown> (embed)
1369            - iceweasel <unknown> (embed)
1370            - sabnzbdplus <unknown> (embed)
1371            - xulrunner <unknown> (embed)
1372            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1373    
1374    python-clientform
1375            - bibus <unfixed> (embed; bug #555332)
1376            - zope2.10 <unfixed> (embed; bug #555333)
1377            - zope2.11 <removed> (embed; bug #555334)
1378            - python-mechanize <unknown> (embed)
1379            - twill <unknown> (embed)
1380    
1381    python-mechanize
1382            - zope2.10 <unfixed> (embed; bug #555337)
1383            - zope2.11 <removed> (embed; bug #555338)
1384            - twill <unknown> (embed; bug #555339)
1385    
1386    pexpect
1387            - duplicity 0.6.06-1 (embed; bug #555361)
1388            - hplip <unfixed> (embed; bug #555362)
1389            - smart <unfixed> (embed; bug #555363)
1390    
1391    pyparsing
1392            - bauble <unfixed> (embed; bug #555366)
1393            - boa-constructor 0.6.1-8 (embed; bug #555367)
1394            - calibre <unfixed> (embed; bug #555368)
1395            - matplotlib <unfixed> (embed; bug #531024)
1396            - zhpy 1.7.3.1-1 (embed; bug #555370)
1397            - polybori <unknown> (embed)
1398            - python-whoosh <unknown> (embed)
1399            - twill <unknown> (embed)
1400            - zope-textindexng3 <unknown> (embed)
1401    
1402    python-pysqlite2
1403            - python2.4 <unfixed> (embed; bug #553403)
1404            - python2.5 <unfixed> (embed; bug #553403)
1405    
1406    celementtree
1407            - python2.5 <unfixed> (embed)
1408            - smart <unfixed> (embed)
1409    
1410    elementtree
1411            - python2.5 <unfixed> (embed)
1412            - python2.6 <unfixed> (embed)
1413            - bzr <unfixed> (embed; bug #555343)
1414            - gedit 2.28.2-1 (embed; bug #555344)
1415            - smart <unfixed> (embed)
1416            - solfege <unfixed> (embed; bug #555345)
1417            - w3af <unfixed> (embed; bug #555346)
1418            - python-qt4 <unknown> (embed)
1419            - sphinx <unknown> (embed)
1420            - python-nltk <itp> (embed)
1421    
1422    python2.5
1423            - python2.4 <unfixed> (old-version)
1424            - jython <unfixed> (embed)
1425            NOTE: embeds many stdlib modules
1426            - python-django <unfixed> (embed; bug #555419)
1427            NOTE: embeds stdlib modules: doctest, decimal
1428            - gamera 3.2.3-1 (embed)
1429            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1430            - boa-constructor <unfixed> (embed; bug #555426)
1431            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1432            - nicotine <unfixed> (embed; bug #555427)
1433            NOTE: embeds stdlib modules: ConfigParser
1434            - museek+ <unfixed> (embed; bug #555428)
1435            NOTE: embeds stdlib modules: ConfigParser
1436            - vegastrike-data <removed> (embed)
1437            NOTE: embeds many stdlib modules
1438            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1439            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1440            - config-manager <unfixed> (embed; bug #555423)
1441            NOTE: embeds stdlib modules: optparse
1442            - jhbuild 2.28.0-1 (embed; bug #555421)
1443            NOTE: embeds stdlib modules: optparse, subprocess
1444            - smart <unfixed> (embed; bug #555432)
1445            NOTE: embeds stdlib modules: optparse
1446            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1447            NOTE: embeds stdlib modules: doctest
1448            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1449            NOTE: embeds stdlib modules: doctest
1450            - distribute <unfixed> (embed)
1451            NOTE: embeds stdlib modules: doctest
1452            - python-setuptools <unfixed> (embed; bug #555435)
1453            NOTE: embeds stdlib modules: doctest
1454            - zope.testing <unfixed> (embed; bug #555436)
1455            NOTE: embeds stdlib modules: doctest
1456            - translate-toolkit <unfixed> (embed; bug #555422)
1457            NOTE: embeds stdlib modules: textwrap, contextlib
1458            - libtpclient-py <unfixed> (embed; bug #555424)
1459            NOTE: embeds stdlib modules: subprocess
1460            - grass <unfixed> (embed; bug #555425)
1461            NOTE: embeds stdlib modules: subprocess
1462            - coherence <unfixed> (embed; bug #555429)
1463            NOTE: embeds stdlib modules: uuid
1464            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1465            NOTE: embeds stdlib modules: uuid
1466            - setroubleshoot <removed> (embed; bug #555431)
1467            NOTE: embeds stdlib modules: uuid
1468            - linkchecker <unfixed> (embed; bug #555414)
1469            NOTE: embeds msgfmt.py script
1470            - imdbpy <unfixed> (embed)
1471            NOTE: embeds msgfmt.py script
1472            - kiwi <unfixed> (embed)
1473            NOTE: embeds msgfmt.py script
1474            - moin <unfixed> (embed)
1475            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1476            - plone3 <removed> (embed)
1477            NOTE: embeds msgfmt.py script
1478            - roundup <unfixed> (embed)
1479            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1480            - rednotebook <unfixed> (embed; bug #555415)
1481            NOTE: embeds msgfmt.py script
1482            - turbogears <unfixed> (embed)
1483            NOTE: embeds msgfmt.py script
1484            - elisa <unfixed> (embed)
1485            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1486            - calibre <unfixed> (embed)
1487            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1488            - mailman 1:2.1.13-1 (embed; #555416)
1489            NOTE: embeds msgfmt.py script
1490            - python-docutils <unknown> (embed)
1491            NOTE: embeds stdlib modules: optparse, textwrap
1492            - python-imaging <unknown> (embed)
1493            NOTE: embeds stdlib modules: doctest
1494            - python-mechanize <unknown> (embed)
1495            NOTE: embeds stdlib modules: doctest
1496            - twill <unknown> (embed)
1497            NOTE: embeds stdlib modules: subprocess
1498            - zeroc-ice <unknown> (embed)
1499            NOTE: embeds stdlib modules: subprocess
1500            - wxwidgets2.8 <unknown> (embed)
1501            NOTE: embeds stdlib modules: subprocess
1502            - cycle <unknown> (embed)
1503            NOTE: embeds msgfmt.py script
1504            - deluge <unknown> (embed)
1505            NOTE: embeds msgfmt.py script
1506            - opendict <unknown> (embed)
1507            NOTE: embeds msgfmt.py script
1508            - openerp-client <unknown> (embed)
1509            NOTE: embeds msgfmt.py script
1510            - rapidsvn <unknown> (embed)
1511            NOTE: embeds msgfmt.py script
1512            - wammu <unknown> (embed)
1513            NOTE: embeds msgfmt.py script
1514            - gaphor <unknown> (embed)
1515            NOTE: embeds msgfmt.py script
1516            - pida <unknown> (embed)
1517            NOTE: embeds msgfmt.py script
1518            - python-formencode <unknown> (embed)
1519            NOTE: embeds msgfmt.py script
1520            - duplicity <unfixed> (embed)
1521            NOTE: embeds stdlib module: urlparse, tarfile
1522            - pygopherd <unfixed> (embed)
1523            NOTE: embeds stdlib module: zipfile
1524    
1525    argparse
1526            - twill <unfixed> (embed; bug #555347)
1527            - ipython <unfixed> (embed; bug #555348)
1528    
1529    coherence
1530            - elisa <unfixed> (embed; bug #555335)
1531    
1532    simpletal
1533            - plastex <unfixed> (embed; bug #555371)
1534    
1535    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1536            - postr <unfixed> (embed)
1537            - elisa <unfixed> (embed)
1538    
1539    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1540            - apertium-tolk <unfixed> (embed)
1541            - ipython <unfixed> (embed)
1542            - virtaal <unfixed> (embed)
1543    
1544    distribute
1545            - setuptools <removed> (old-version)
1546    
1547    rails
1548            - jruby1.2 <removed> (embed) [./bench/rails/*]
1549            NOTE: jruby is in non-free, it probably includes rails too
1550            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1551            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1552            - thin <unfixed> (embed) [./spec/rails_app/*]
1553            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1554            NOTE: be dangerous if developers are naively basing their code off of the examples
1555            NOTE: prototype.js is among the example files
1556    
1557    lucene2 (prototype.js is among the embeds in the following)
1558            - lucene <unfixed> (old-version)
1559            - pylucene <unfixed> (embed)
1560            - libpdfbox-java <unfixed> (embed)
1561            - libfontbox-java <unfixed> (embed)
1562            - libjempbox-java <unfixed> (embed)
1563            - solr <unfixed> (embed)
1564    
1565    unicode-data
1566            - syslinux <unfixed> (embed)
1567            - camomile <unfixed> (embed)
1568            - fribidi <unfixed> (embed)
1569            - m17n-db <unfixed> (embed)
1570            - sbcl <unfixed> (embed)
1571            - heimdal <unfixed> (embed)
1572            - icu <unfixed> (embed)
1573            - icu4j <unfixed> (embed)
1574            - krb5 <unfixed> (embed)
1575            - moodle <unfixed> (embed)
1576            - openldap <unfixed> (embed)
1577            - pike7.6 <unfixed> (embed)
1578            - samba <unfixed> (embed)
1579            - samba4 <unfixed> (embed)
1580            - cmucl <unfixed> (embed)
1581            - typo3-src <unfixed> (embed)
1582            - mauve <unfixed> (embed)
1583            - texlive-bin <unfixed> (embed)
1584            - ypsilon <unfixed> (embed)
1585            - jeuclid <unfixed> (embed)
1586            - charmap.app <unfixed> (embed)
1587            - clisp <unfixed> (embed)
1588            - gnulib <unfixed> (embed)
1589            - opensrs-client <unfixed> (embed)
1590            - saxonb <unfixed> (embed)
1591            - rails <unfixed> (embed)
1592    
1593    feedparser
1594            - rawdog <unfixed> (embed; bug #383422)
1595            - miro <unfixed> (embed; bug #555351)
1596            - calibre <unfixed> (embed; bug #555352)
1597            - freevo <unfixed> (embed; bug #555353)
1598            - pida <unfixed> (embed; bug #555354)
1599            - planet-venus <unfixed> (embed; bug #555355)
1600            - plone3 <removed> (embed; bug #555356)
1601            - exaile 0.2.14+debian-1 (embed)
1602            - screenlets 0.1.2-3 (embed)
1603            NOTE: included twice
1604    
1605    agg:
1606            - matplotlib <unfixed> (embed: bug #377271)
1607            - contextfree <unfixed> (embed)
1608            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1609            - exactimage <unfixed> (embed)
1610            - python-enable <unfixed> (embed)
1611            - mapnik 0.5.1-3 (embed)
1612            NOTE: links statically to agg, but shared library is not available (bug #377271)
1613    
1614    vtk
1615            - paraview <unfixable> (embed; bug #495426)
1616            - libmesh <unfixed>
1617            NOTE: embeds exodus; not sure if there's a version external to vtk
1618    
1619    txt2tags
1620            - rednotebook <unfixed> (embed)
1621    
1622    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1623            - gajim <unfixed> (embed)
1624            - emesene <unfixed> (embed)
1625            - convirt <unfixed> (embed)
1626            - pida <unfixed> (embed)
1627            - rednotebook <unfixed> (embed)
1628    
1629    horde3 (prototype.js is among the embeds in the following)
1630            - mnemo2 <unfixed> (embed)
1631            - nag2 <unfixed> (embed)
1632            - wordpress <unfixed> (embed)
1633            NOTE: Text_Diff (wp-includes/Text/Diff*)
1634    
1635    cimg
1636            - gmic <unfixed> (embed)
1637    
1638    mootools
1639            - kdenetwork <unfixed> (embed)
1640            - gallery <unfixed> (embed)
1641            - jspwiki <unfixed> (embed)
1642            - vdr-plugin-live <unfixed> (embed)
1643            - perl-doc-html <unfixed> (embed)
1644    
1645    openldap
1646            - openldap2.3 <removed> (old-version)
1647            - ia32-libs <unfixable> (embed)
1648    
1649    grub2
1650            - grub <unfixed> (old-version)
1651    
1652    gnupginterface
1653            - duplicity <unfixed> (embed)
1654    
1655    python-dateutil
1656            - awn-extras-applets <unfixed> (embed)
1657            - matplotlib <unknown> (embed)
1658    
1659    cups
1660            - cupsys <removed> (old-version)
1661            - ia32-libs <unfixable> (embed)
1662    
1663    yui
1664            - bcfg2 <not-affected> (present in source but not included in any binary files)
1665            - serendipity 1.5.3-1 (embed; bug #557746)
1666            - moodle 1.8.2.dfsg-5 (embed)
1667            - jifty 0.91117-1 (embed; bug #557748)
1668            - webgui 7.7.26-1 (embed)
1669            - loggerhead 1.17-1 (embed)
1670            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1671    
1672    quake3 (vanilla source not packaged in debian)
1673            - openarena <unfixable> (fork)
1674    
1675    quake2 (vanilla source not packaged in debian)
1676            - alien-arena <unfixable> (fork)
1677            - warsow <unfixable> (fork)
1678    
1679    quake (vanilla source not packaged in debian)
1680            - darkplaces <unfixable> (fork)
1681            - quakespasm <unfixable> (fork)
1682            - nexuiz 2.5.2+dp-1 (old-version)
1683            NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1684    
1685    libtheora
1686            - iceweasel <not-affected> (uses xulrunner)
1687            - xulrunner <unfixed> (embed; bug #540959)
1688            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1689            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1690            - iceape <unfixed> (embed; bug #559276)
1691            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1692            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1693    
1694    dtoa
1695            - bfilter <unfixed> (embed)
1696            - cacao <removed> (embed)
1697            - cdrdao <unfixed> (embed)
1698            - classpath <unfixed> (embed)
1699            - freej <unfixed> (embed)
1700            - iceape <unfixed> (embed)
1701            - iceweasel <unfixed> (embed)
1702            - jscoverage <unfixed> (embed)
1703            - kde4libs <unfixed> (embed)
1704            - kdelibs <unfixed> (embed)
1705            - kompozer <unfixed> (embed)
1706            - libv8 <unfixed> (embed)
1707            - mono <unfixed> (embed)
1708            - newlib <unfixed> (embed)
1709            - nspr <unfixed> (embed)
1710            - php5 <unfixed> (embed)
1711            - polyml <unfixed> (embed)
1712            - qt4-x11 <unfixed> (embed)
1713            - rhino <unfixed> (embed)
1714            NOTE: code translated to Java
1715            - ruby1.8 <unfixed> (embed)
1716            - ruby1.9 <unfixed> (embed)
1717            - ruby1.9.1 <unfixed> (embed)
1718            - sdd <unfixed> (embed)
1719            - sfind <unfixed> (embed)
1720            - star <unfixed> (embed)
1721            - tinymux <unfixed> (embed)
1722            - virtualbox-ose <unfixed> (embed)
1723            - webkit <unfixed> (embed)
1724            - xulrunner <unfixed> (embed)
1725    
1726    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1727            - firegpg <unfixed> (embed)
1728            - enigmail <unfixed> (embed)
1729    
1730    ptmalloc (not packaged in Debian)
1731            - crystalspace <unfixed> (embed)
1732            - qt4-x11 <unfixed> (embed)
1733    
1734    svgalib
1735            - usplash <unfixed> (embed)
1736            - ia32-libs <unfixable> (embed)
1737    
1738    bogl
1739            - usplash <unfixed> (embed)
1740    
1741    taglist
1742            - usplash <unfixed> (embed)
1743    
1744    portaudio
1745            - audacity <unfixed> (embed; bug #323711)
1746    
1747    nyquist
1748            - audacity <unfixed> (embed)
1749            NOTE: embeds a forked nyquist with support for a shared library
1750    
1751    vamp-plugin-sdk
1752            - audacity <unfixed> (embed)
1753    
1754    wordpress
1755            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1756            - wordpress-mu <removed> (fork)
1757    
1758    php5
1759            - php4 <removed> (old-version)
1760    
1761    classpath
1762            - libgnucrypto-java <removed> (embed; bug #559788)
1763    
1764    libtool
1765            - apr <unfixed> (static; bug #489625)
1766            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1767            - arts <unfixed> (embed)
1768            - bochs 2.4.2-1 (embed; bug #560884)
1769            - camserv <unfixed> (embed)
1770            - collectd 4.8.2-1 (embed)
1771            - courier-authlib 0.58-4 (embed)
1772            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1773            - cvsnt 2.5.04.3236-1.2 (embed)
1774            - dico <not-affected> (Uses the system copy of ltdl)
1775            - freeradius 0.1+20010527-1 (embed)
1776            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1777            - ggobi 2.1.9~20091212-1 (embed)
1778            - glame 2.0.1-4 (embed)
1779            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1780            - gnash 0.8.7-2 (embed)
1781            - gnu-smalltalk <unfixed> (embed; bug #566777)
1782            - google-gadgets 0.10.5-0.3 (embed)
1783            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1784            - graphicsmagick 1.3.5-6 (embed)
1785            - graphviz 2.8-3 (embed)
1786            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1787            - guile-1.6 1.6.8-7 (embed)
1788            - hamlib 1.2.11-1 (embed)
1789            - hercules 3.06-1.2 (embed)
1790            - jags 1.0.4-3 (embed; bug #560864)
1791            - kdelibs <unfixed> (embed)
1792            - libannodex <removed> (embed)
1793            - libextractor 0.5.23+dfsg-4 (embed)
1794            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1795            - libtunepimp 0.5.3-7.3 (embed)
1796            - mp4h 1.3.1-4.1 (embed)
1797            - naim <removed> (embed)
1798            - parser-mysql <unfixed> (embed)
1799            - pinball 0.3.1-11 (embed)
1800            - redland <unfixed> (embed)
1801            - siproxd 1:0.8.1-2 (embed; bug #657070)
1802            - ski <unfixed> (embed)
1803            - synfig 0.62.00-1 (embed)
1804            - unixodbc 2.2.4-5 (embed)
1805            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1806            - clamav 0.95+dfsg-1 (embed)
1807            - imagemagick 6:6.2.3.1-1 (embed)
1808            - hypre 2.4.0b-5 (embed)
1809            - lam <unfixed> (embed)
1810            - openmpi <unfixable> (embed; bug #559386)
1811            - parser <unfixed> (embed)
1812            - pdsh 2.18-5 (embed; bug #560892)
1813            - sbnc 1.2-8 (embed)
1814            - sdcc <unfixed> (embed)
1815            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1816            - proftpd-dfsg <unfixed> (embed; bug #561748)
1817            - babel 1.4.0.dfsg-5 (embed)
1818            - libprelude 0.9.14-2 (embed)
1819            - heartbeat 2.1.4-7 (embed)
1820            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1821            NOTE: might've been fixed earlier
1822            - gcc-* <unknown> (embed)
1823            - ia32-libs <unfixable> (embed)
1824    
1825    ocamlgsl
1826            - orpie 1.5.1-7.1 (embed; bug #550058)
1827    
1828    xdotool
1829            - keynav <unfixed> (embed; bug #560103)
1830    
1831    bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1832            - supertuxkart <unfixed> (embed)
1833            - blender <unfixed> (embed)
1834            - critterding <unfixed> (embed)
1835            NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1836    
1837    ghostscript
1838            - gs-gpl <removed> (old-version)
1839    
1840    icedove
1841            - thunderbird <removed> (old-version)
1842    
1843    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1844            - jquery <unfixed> (embed)
1845    
1846    sed
1847            - ssed <unfixed> (fork)
1848    
1849    phpatomlib (http://code.google.com/p/phpatomlib)
1850            - wordpress <unfixed> (embed)
1851    
1852    Services_JSON (http://pear.php.net/package/Services_JSON)
1853            - wordpress <unfixed> (embed)
1854    
1855    phpass (http://www.openwall.com/phpass/)
1856            - gallery2 <unfixed> (embed)
1857            - wordpress <unfixed> (embed)
1858            - typo3-src <unfixed> (modified-embed)
1859            NOTE: file refers to drupal, maybe there's a copy somewhere there
1860            NOTE: a copyright owner search didn't match anything
1861            - libauthen-passphrase-perl <unfixable> (fork)
1862            NOTE: perl implementation of phpass
1863            - phpbb3 <unfixed>
1864            NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1865    
1866    squirrelmail
1867            - wordpress <unfixed> (embed)
1868            NOTE: class-pop3.php
1869    
1870    ezSQL (http://www.woyano.com/jv/ezsql)
1871            - wordpress <unfixable> (fork)
1872            NOTE: wp-db.php
1873    
1874    Diff.php (Clay Loveless' version/killersoft.com)
1875            - php-versioncontrol-svn <unfixed>
1876    
1877    libm (provided by libc)
1878            - spring <unfixed> (embed)
1879            NOTE: embedded by embedded copy of streflop
1880            - megaglest <unfixed> (embed)
1881            NOTE: embedded by embedded copy of streflop
1882            - aide <unfixed> (static)
1883            - busybox <unfixed> (static)
1884            - mindi-busybox <unfixed> (static)
1885            - qemu <unfixed> (static)
1886            NOTE: qemu-user-static
1887            - tuxonice-userui <unfixed> (static)
1888            - zsh <unfixed> (static)
1889            NOTE: zsh-static
1890            - tripwire <unfixed>
1891    
1892    streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1893            - spring <unfixed> (modified-embed)
1894            NOTE: old, modified version of streflop
1895            - megaglest <unfixed> (modified-embed)
1896            NOTE: megaglest uses the same streflop code as spring
1897    
1898    minizip
1899            - spring <unfixed> (embed)
1900    
1901    oscpack
1902            - spring <unfixed> (embed)
1903    
1904    hpiutil2
1905            - spring <unfixed> (embed)
1906    
1907    p7zip
1908            - spring <unfixed> (embed)
1909    
1910    pythonqt (doesn't seem to be python-qtN, unknown source)
1911            - fontmatrix <unfixed> (embed)
1912            - elmerfem <unfixed> (embed)
1913    
1914    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1915            - docvert <unfixed> (embed)
1916            - jifty <unfixed> (embed)
1917            - kdenetwork <unfixed> (embed)
1918            - mediatomb <unfixed> (embed)
1919            - plastex <unfixed> (embed)
1920            - plone3 <removed> (embed)
1921            - python-chaco <unfixed> (embed)
1922            - python-docutils <unfixed> (embed)
1923            - s5 <unfixed> (embed)
1924            - zope2.10 <unfixed> (embed)
1925            - zope2.11 <removed> (embed)
1926            - cython <not-affcted> (embed)
1927            NOTE: part of documentation, which is not installed into the binary package
1928    
1929    python-docutils
1930            - zope2.10 <unfixed> (embed)
1931            - zope2.11 <removed> (embed)
1932    
1933    tesseract
1934            - ocropus <unfixed> (static)
1935    
1936    antlr
1937            - kdevelop <unfixed> (embed)
1938    
1939    libxerces2
1940            - openjdk-6 <unfixed> (embed)
1941    
1942    kfreebsd-8
1943            - kfreebsd-7 <unfixed> (old-version)
1944            - kfreebsd-6 <removed> (old-version)
1945    
1946    ruby1.9.1
1947            - ruby1.9 <unfixed> (old-version)
1948            - ruby1.8 <unfixed> (old-version)
1949    
1950    maildrop
1951            - courier <unfixed> (embed) [./maildrop]
1952    
1953    glee
1954            - warzone2100 <not-affected> (embed)
1955    
1956    phing
1957            - symfony <unfixed> (embed)
1958    
1959    pake
1960            - symfony <unfixed> (embed)
1961    
1962    propel
1963            - symfony <unfixed> (embed)
1964    
1965    creole
1966            - symfony <unfixed> (embed)
1967    
1968    hfsutils
1969            - cdrkit <unfixed> (embed; bug #570187)
1970            NOTE: embeds hfsutils code in genisoimage
1971    
1972    cdrkit
1973            - grub2 <unfixed> (embed; bug #570156)
1974            NOTE: genisoimage imported into grub-mkisofs
1975    
1976    kdebase-workspace
1977            - kdebase <unfixed> (old-version)
1978    
1979    file
1980            - php5 <unfixable> (modified-embed)
1981            [lenny] - php5 <not-affected>
1982    
1983    cdb
1984            - php5 <unfixed> (embed)
1985    
1986    libmbfl (itp: #570708)
1987            - php5 <unfixed> (embed)
1988            NOTE: PHP is actually the current upstream, ITP is of that code
1989    
1990    libonig
1991            - php5 5.3.2-1 (embed)
1992    
1993    xmlrpc-epi
1994            - php5 <unfixed> (embed)
1995    
1996    swt-gtk
1997            - eclipse <unfixed> (embed; bug #538808)
1998    
1999    txt2html
2000            - wml 2.0.11ds2-1 (embed)
2001    
2002    ca-certificates
2003            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
2004    
2005    openexr
2006            - freeimage <unfixed> (embed)
2007    
2008    libmng
2009            - freeimage <unfixed> (embed)
2010    
2011    openjpeg
2012            - freeimage <unfixed> (embed)
2013    
2014    libjpeg6b
2015            - freeimage <unfixed> (embed)
2016            - ia32-libs <unfixable> (embed)
2017    
2018    libjpeg (don't know what exact version)
2019            - dcmtk <unfixed>
2020            - gdcm <unfixed>
2021            - insighttoolkit <unfixed>
2022            - openarena 0.8.5-5+exp1 (bug #495966)
2023            - outguess <unfixed>
2024            - squeak-vm <unfixed> (embed)
2025            - tremulous <unfixed>
2026            - tuxonice-userui <unfixed> (static)
2027            - fpc <unfixed> (static)
2028            - lazarus <unfixed> (static)
2029            NOTE: inherited from fpc, see #472304
2030            - mseide-msegui <unfixed> (static)
2031            NOTE: inherited from fpc, see #472304
2032            - easymp3gain <unfixed> (static)
2033            NOTE: inherited from fpc, see #472304
2034            - winff <unfixed> (static)
2035            NOTE: inherited from fpc, see #472304
2036            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2037    
2038    
2039    lxr
2040            - lxr-cvs <unfixed> (embed)
2041    
2042    libfile-copy-recursive-perl
2043            - r-base <unfixed> (embed; bug #577427)
2044            - r-base-core-ra <unfixed> (embed; bug #577429)
2045    
2046    delimmatch
2047            - r-base <unfixed> (embed; bug #577433)
2048            - r-base-core-ra <unfixed> (embed; bug #577434)
2049    
2050    libsmf (ITP: #572558)
2051            - denemo <unfixed> (embed)
2052            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2053    
2054    libselinux
2055            - dpkg 1.15.6 (static)
2056            - ia32-libs <unfixable> (embed)
2057    
2058    xinha (ITP: #479708)
2059            - horde3 <unfixed>
2060            - serendipity <unfixed>
2061            - openacs <unfixed>
2062            - dotlrn <unfixed>
2063    
2064    dvipng
2065            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2066    
2067    dvipdfmx
2068            - texlive-bin <unfixed> (embed)
2069            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2070    
2071    lcdf-typetools
2072            - texlive-bin 2009-1 (embed)
2073    
2074    tex4ht
2075            - texlive-bin 2009-1 (embed)
2076    
2077    freetype
2078            - texlive-bin 2009-1 (embed)
2079            - ia32-libs <unfixable> (embed)
2080    
2081    freetype2
2082            - texlive-bin 2009-1 (embed)
2083            - tuxonice-userui <unfixed> (static)
2084            - instantbird <unfixed>
2085            - qt4-x11 <unknown> (embed)
2086            - vtk <unknown> (embed)
2087            - paraview <unknown> (embed)
2088            NOTE: from embedded copy of vtk
2089    
2090    silgraphite
2091            - texlive-bin <unfixed> (embed)
2092    
2093    unzip
2094            - texlive-bin 2009-1 (embed)
2095    
2096    jbig2dec
2097            - ghostscript 8.71~dfsg2-1 (embed)
2098    
2099    libxml2
2100            - chromium-browser 5.0.375.29~r46008-1
2101            - ia32-libs <unfixable> (embed)
2102    
2103    protobuf
2104            - chromium-browser 5.0.375.70~r48679-2
2105    
2106    libv8
2107            - chromium-browser 5.0.375.38~r46659-1
2108    
2109    nspr
2110            - chromium-browser 5.0.375.29~r46008-3
2111            - ia32-libs <unfixable> (embed)
2112    
2113    yasm
2114            - chromium-browser 5.0.375.29~r46008-2
2115    
2116    libxslt
2117            - chromium-browser 5.0.375.29~r46008-1
2118            - ia32-libs <unfixable> (embed)
2119    
2120    miniupnpc
2121            - warzone2100 2.3.7-2
2122            NOTE: code still present in tarball but removed during build and unused
2123            - vino 3.2.2-1
2124            NOTE: code still present in tarball but removed during build and unused
2125    
2126    iniparser (not packaged in Debian; RFP bug #582657)
2127            - warzone2100 <unfixed> (modified-embed)
2128    
2129    pyglet
2130            - sympy <unfixed> (embed; bug #459716)
2131    
2132    mpmath
2133            - sympy <unfixed> (embed; bug #541746)
2134    
2135    openssh
2136            - libpam-ssh <unfixed> (embed; bug #598522)
2137    
2138    curl
2139            - cmake 2.6.0-6 (embed)
2140            NOTE: Might be fixed earlier. Lenny version recorded.
2141            - criticalmass <unfixed> (static; bug #599061)
2142            - wengophone 2.1.0~beta1-svn9983-1 (embed)
2143            - ia32-libs <unfixable> (embed)
2144    
2145    lib3ds
2146            - boson <unfixed> (embed; bug #600900)
2147            - openscenegraph <unfixed> (embed; bug #601181)
2148    
2149    xcftools
2150            - gnome-xcf-thumbnailer <unfixed> (embed)
2151    
2152    simplejson
2153            - exaile <unfixed> (embed; bug #604547)
2154    
2155    libasycns
2156            - loudmouth <unfixed> (embed; bug #566143)
2157    
2158    plplot
2159            - emboss <unfixed> (fork)
2160    
2161    acl
2162            - ia32-libs <unfixable> (embed)
2163    
2164    arts
2165            - ia32-libs <unfixable> (embed)
2166    
2167    attr
2168            - ia32-libs <unfixable> (embed)
2169    
2170    audiofile
2171            - ia32-libs <unfixable> (embed)
2172    
2173    avahi
2174            - ia32-libs <unfixable> (embed)
2175    
2176    celt
2177            - ia32-libs <unfixable> (embed)
2178    
2179    coreutils
2180            - ia32-libs <unfixable> (embed)
2181    
2182    cyrus-sasl2
2183            - ia32-libs <unfixable> (embed)
2184    
2185    db4.8
2186            - ia32-libs <unfixable> (embed)
2187    
2188    dbus
2189            - ia32-libs <unfixable> (embed)
2190    
2191    directfb
2192            - ia32-libs <unfixable> (embed)
2193    
2194    esound
2195            - ia32-libs <unfixable> (embed)
2196    
2197    fltk1.1
2198            - ia32-libs <unfixable> (embed)
2199    
2200    fontconfig
2201            - ia32-libs <unfixable> (embed)
2202    
2203    freeglut
2204            - ia32-libs <unfixable> (embed)
2205    
2206    gcc-3.3
2207            - ia32-libs <unfixable> (embed)
2208    
2209    gdbm
2210            - ia32-libs <unfixable> (embed)
2211    
2212    gnutls26
2213            - ia32-libs <unfixable> (embed)
2214    
2215    hal
2216            - ia32-libs <unfixable> (embed)
2217    
2218    isdnutils
2219            - ia32-libs <unfixable> (embed)
2220    
2221  shtool: (affects build-time only)  jack-audio-connection-kit
2222  mysql-ocaml          - ia32-libs <unfixable> (embed)
 php4  
2223    
2224    keyutils
2225            - ia32-libs <unfixable> (embed)
2226    
2227  mozilla:  krb5
2228  mozilla-firefox          - ia32-libs <unfixable> (embed)
 mozilla-thunderbird  
 nvu  
2229    
2230    lesstif2
2231            - ia32-libs <unfixable> (embed)
2232    
2233  xli:  libaio
2234  xloadimage          - ia32-libs <unfixable> (embed)
2235    
2236    libasyncns
2237            - ia32-libs <unfixable> (embed)
2238    
2239  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  libcap2
2240  openmotif          - ia32-libs <unfixable> (embed)
 xfree86/xorg (in libxpm)  
2241    
2242    libdrm
2243            - ia32-libs <unfixable> (embed)
2244    
2245  kerberized apps with BSD origin:  libedit
2246  krb4          - ia32-libs <unfixable> (embed)
 krb5  
 heimdal  
2247    
2248    libexif
2249            - ia32-libs <unfixable> (embed)
2250    
2251  grip: (which pkg is the origin?)  libgcrypt11
2252  libcdaudio          - ia32-libs <unfixable> (embed)
 grip  
 gnome-vfs (vfs2 as well?)  
2253    
2254    libgpg-error
2255            - ia32-libs <unfixable> (embed)
2256    
2257  fudforum:  libgphoto2
2258  phpgroupware-fudforum          - ia32-libs <unfixable> (embed)
 egroupware-fudforum  
2259    
2260  cvs:  libice
2261  gcvs (at least an additional script is included, check if there's more)          - ia32-libs <unfixable> (embed)
2262    
2263  pcre:  libieee1284
2264  all pythons          - ia32-libs <unfixable> (embed)
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
2265    
2266  tiff:  libjpeg8
2267  wxpythongtk (check, which debian pkg this is in)          - ia32-libs <unfixable> (embed)
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
2268    
2269    libnss-ldap
2270            - ia32-libs <unfixable> (embed)
2271    
2272  uudeview:  libogg
2273  libconvert-uulib-perl          - ia32-libs <unfixable> (embed)
2274    
2275  sqlite: (not affected by security vulnerabilities so far)  libpam-ldap
2276  amarok          - ia32-libs <unfixable> (embed)
2277    
2278  util-linux/mount:  libsamplerate
2279  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - ia32-libs <unfixable> (embed)
2280    
2281  webmin:  libsdl1.2
2282  usermin          - ia32-libs <unfixable> (embed)
2283    
2284  sylpheed:  libsm
2285  sylpheed-claws          - ia32-libs <unfixable> (embed)
2286    
2287  phpsysinfo:  libssh2
2288  egroupware          - ia32-libs <unfixable> (embed)
 phpgroupware  
2289    
2290  phpldapadmin:  libtasn1-3
2291  egroupware          - ia32-libs <unfixable> (embed)
2292    
2293  chmlib:  libx11
2294  kchmviewer (not packaged in Debian)          - ia32-libs <unfixable> (embed)
2295    
2296  libavcodec/libavformat:  libx86
2297  ffmpeg          - ia32-libs <unfixable> (embed)
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
2298    
2299  mad MPEG decoding lib:  libxau
2300  mad          - ia32-libs <unfixable> (embed)
 xine-lib  
2301    
2302  libdts:  libxcb
2303  libdts          - ia32-libs <unfixable> (embed)
 xine-lib  
2304    
2305  flac:  libxcomposite
2306  flac          - ia32-libs <unfixable> (embed)
 xine-lib  
2307    
2308  liba52:  libxcursor
2309  a52dec          - ia32-libs <unfixable> (embed)
 xine-lib  
2310    
2311  libmpeg2:  libxdamage
2312  mpeg2dec          - ia32-libs <unfixable> (embed)
2313  xine-lib  
2314    libxdmcp
2315            - ia32-libs <unfixable> (embed)
2316    
2317    libxext
2318            - ia32-libs <unfixable> (embed)
2319    
2320    libxfixes
2321            - ia32-libs <unfixable> (embed)
2322    
2323    libxi
2324            - ia32-libs <unfixable> (embed)
2325    
2326    libxinerama
2327            - ia32-libs <unfixable> (embed)
2328    
2329    libxmu
2330            - ia32-libs <unfixable> (embed)
2331    
2332    libxp
2333            - ia32-libs <unfixable> (embed)
2334    
2335    libxrandr
2336            - ia32-libs <unfixable> (embed)
2337    
2338    libxrender
2339            - ia32-libs <unfixable> (embed)
2340    
2341    libxss
2342            - ia32-libs <unfixable> (embed)
2343    
2344    libxt
2345            - ia32-libs <unfixable> (embed)
2346    
2347    libxtst
2348            - ia32-libs <unfixable> (embed)
2349    
2350    libxv
2351            - ia32-libs <unfixable> (embed)
2352    
2353    libxxf86vm
2354            - ia32-libs <unfixable> (embed)
2355    
2356    lzo2
2357            - ia32-libs <unfixable> (embed)
2358    
2359    mesa
2360            - ia32-libs <unfixable> (embed)
2361    
2362    mpg123
2363            - ia32-libs <unfixable> (embed)
2364    
2365    nas
2366            - ia32-libs <unfixable> (embed)
2367    
2368    nss
2369            - ia32-libs <unfixable> (embed)
2370    
2371    openal-soft
2372            - ia32-libs <unfixable> (embed)
2373    
2374    openssl
2375            - ia32-libs <unfixable> (embed)
2376    
2377    pam
2378            - ia32-libs <unfixable> (embed)
2379    
2380    popt
2381            - ia32-libs <unfixable> (embed)
2382    
2383    pulseaudio
2384            - ia32-libs <unfixable> (embed)
2385    
2386    sane-backends
2387            - ia32-libs <unfixable> (embed)
2388    
2389    sqlite3
2390            - ia32-libs <unfixable> (embed)
2391            - chromium-browser <unfixed> (embed)
2392    
2393    sysfsutils
2394            - ia32-libs <unfixable> (embed)
2395    
2396    tcp-wrappers
2397            - ia32-libs <unfixable> (embed)
2398    
2399    tdb
2400                  - thunar 1.2.1-3 (old-version)
2401            - ia32-libs <unfixable> (embed)
2402    
2403    tslib
2404            - ia32-libs <unfixable> (embed)
2405    
2406    unixodbc
2407            - ia32-libs <unfixable> (embed)
2408    
2409    xaw3d
2410            - ia32-libs <unfixable> (embed)
2411    
2412    xbitmaps
2413            - ia32-libs <unfixable> (embed)
2414    
2415    xcb-util
2416            - ia32-libs <unfixable> (embed)
2417    
2418    xcursor-themes
2419            - ia32-libs <unfixable> (embed)
2420    
2421    xft
2422            - ia32-libs <unfixable> (embed)
2423    
2424    dicomparser
2425            - vtk <unfixed>
2426            - paraview <unfixed>
2427            NOTE: as part of its copy of vtk
2428            - insighttoolkit <unfixed>
2429    
2430    proj
2431            - vtk <unfixed>
2432            - paraview <unfixed>
2433            NOTE: as part of its copy of vtk
2434            - therion <unfixed>
2435            - python-pyproj 1.8.6-1
2436    
2437    netcdf
2438            - vtk <unfixed>
2439            - paraview <unfixed>
2440            NOTE: as part of its copy of vtk
2441    
2442    insighttoolkit
2443            - vtk <unfixed> (embed)
2444            NOTE: embeds at least MetaIO
2445            - paraview <unfixed> (embed)
2446            NOTE: embeds at least MetaIO
2447    
2448    gl2ps
2449            - vtk <unfixed>
2450            - paraview <unfixed>
2451            NOTE: as part of its copy of vtk
2452            - avogadro <unfixed>
2453            - gabedit <unknown> (embed)
2454            NOTE: not sure if it is built
2455            - drawxtl <unfixed> (embed)
2456            - rgl <unfixed> (embed)
2457            - gmsh <unfixed>
2458            - mcrl2 <unfixed> (embed)
2459            - mysql-gui-tools <unknown> (embed)
2460            NOTE: not sure if it is built
2461            - opencascade <unfixed> (embed)
2462            - orsa <unfixed> (embed)
2463            - qtiplot <unfixed> (embed)
2464            - qwtplot3d <unfixed> (embed)
2465            - root-system <unknown> (embed)
2466            NOTE: not sure if it is built
2467            - scilab <unfixed> (embed)
2468            - snd <unknown> (embed)
2469            NOTE: not sure if it is built
2470            - xmakemol <unfixed> (embed)
2471    
2472    qwtplot3d
2473            - qtiplot <unfixed>
2474    
2475    parseafm (from Adobe)
2476            - vftool <unfixed>
2477            - gnustep-back <unknown>
2478            NOTE: looks like it isn't built
2479            - evince <unfixed>
2480    
2481    bugzilla
2482            - perl <unknown>
2483            - libcgi-pm-perl <unknown>
2484    
2485    isc-dhcp
2486            - dhcp3 <unfixable> (old-version)
2487            - dhcp <unfixable> (old-version)
2488    
2489    chipmunk (ITP: #623274)
2490            - xmoto <unfixed> (embed; bug #623299)
2491            - libtuxcap <unfixed> (embed; bug #623300)
2492    
2493    libsigsegv
2494            - gawk 3.1.8+dfsg-0.1
2495    
2496    pdfrw
2497            - rst2pdf <unfixed> (embed; bug #638607)
2498    
2499    bind9
2500            - isc-dhcp <unfixed> (embed; bug #643569)
2501            NOTE: introduced in upstream 4.2 series
2502    
2503    qof
2504            - gnucash <unfixed> (embed; bug #556245)
2505    
2506    feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2507            - megaglest <unfixed> (modified-embed)
2508    
2509  curl:  acsccid
2510  wget (code for NTLM authentication)          - ccid 1.3.11 <unfixed> (fork)
2511            - openct <unfixed> (modified-embed)
2512            - towitoko <unfixed> (modified-embed)
2513    
2514    ccid
2515            - openct <unfixed> (modified-embed)
2516            - towitoko <unfixed> (modified-embed)
2517    
 TODO evaluate:  
 gimp-gap  
2518    msmtp
2519            - mpop <unfixed> (embed)

Legend:
Removed from v.3093  
changed lines
  Added in v.18915

  ViewVC Help
Powered by ViewVC 1.1.5