/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3551 by jmm-guest, Wed Mar 1 14:36:47 2006 UTC revision 13801 by jmm-guest, Wed Jan 13 18:48:55 2010 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embeds a copy of the library into another source package)
19          modified-embed (embeds a code copy that differs from upstream code)
20          fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30            - pdftohtml <unknown>
31            [sarge] - pdftohtml <unfixed>
32            [etch] - pdftohtml <unfixed>
33            NOTE: has been replaced by poppler-utils
34            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35            - texlive-base 3.0-12 (embed)
36            - texlive-bin 2007-1 (embed)
37            NOTE: links to poppler
38            - koffice <unfixed> (embed; bug #436163)
39            - libextractor 0.5.12-1 (embed)
40            NOTE: libextractor is using its own pdf decoder now
41            - ipe <unfixed> (embed)
42            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43            - ruby-gnome2 <unknown> (embed)
44            NOTE: copy only present in source but links to poppler
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <unfixed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48    
49    ppmd
50            - libcomplearn-mod-ppmd <unfixed> (fork)
51            NOTE: discussion in #458152
52    
53    libevent
54            - transmission 1.71-1 (embed; bug #529372)
55    
56    lrmi
57            - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59            - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61    
62    peercast
63            - gnome-peercast <removed> (embed)
64            [etch] - gnome-peercast <unfixed> (embed)
65    
66    silc-toolkit
67            - silc-client 1.1~beta6-1 (embed)
68    
69    icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    dietlibc
74            - ccontrol 0.9.1+20071204-1 (static)
75    
76    libmikmod
77            - sdl-mixer1.2 <unfixed> (embed)
78            TODO: report bug
79    
80    libiax
81            - iaxmodem <unfixable> (embed; bug #548885)
82    
83    spandsp
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86    python-paramiko
87            - fabric 0.9.0-2 (embed; bug #561398)
88    
89    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
90            - dpkg <unfixed> (static)
91            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
92            - rsync <unfixed> (embed)
93            NOTE: somehow derived code base
94            - mono <unfixed> (embed)
95            TODO: check mozilla
96            - Linux kernels <unfixed> (embed)
97            - pvpgn 1.7.8-2 (embed)
98            - mrtg 2.12.2-1 (embed)
99            - rpm <unknown> (embed)
100            NOTE: pinged anibal since when rpm was fixed
101            - tuxcmd-modules <unfixed> (embed)
102            - zsync <unfixed>
103            - tra <unfixed>
104            - sash <unfixed>
105            - nsis <unfixed>
106            - mseide-msegui <unfixed>
107            NOTE: mseide
108            - mirrordir <unfixed>
109            - poco <unfixed>
110            - klibc <unfixed>
111            - ghostscript <unfixed>
112            - freeimage <unfixed>
113            - clamav <unfixed> (fork)
114            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
115            - tuxonice-userui <unfixed>
116            - plt-scheme <unfixed>
117            - perl <unfixed>
118            - paraview <unfixed>
119            - gcvs <unfixed>
120            - dump <unfixed>
121            - aide <unfixed> (static)
122            - dar <unfixed> (static)
123            - avfs <unfixed>
124            - fpc <unfixed>
125            - winff <unfixed>
126            NOTE: inherited from fpc, see #472304
127            - lazarus <unfixed>
128            NOTE: inherited from fpc, see #472304
129            - erlang <unfixed> (embed)
130            - gamera 3.2.3-1 (embed)
131            - python2.4 <unfixed> (embed; bug #553403)
132            - python2.5 <unfixed> (embed; bug #553403)
133    
134    dulwich
135            - hg-git 0.1.0-1 (embed; bug #541996)
136    
137    libvigraimpex
138            - hugin <unfixed> (embed; bug #542259)
139            - enblend-enfuse <unfixed> (embed; bug #542258)
140            - gamera 3.2.3-1 (embed)
141    
142    libbz2
143            - dpkg <unfixed> (static)
144    
145    libyahoo2
146            - centerim <unfixed> (embed; bug #559783)
147    
148    libmsn
149            - centerim <unfixed> (embed; bug #559783)
150    
151    libgadu
152            - centerim <unfixed> (embed; bug #559783)
153            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
154            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
155            - kdenetwork 4:3.3.2-5 (embed)
156            NOTE: from kdenetwork: kopete
157            - ekg 1:1.8~rc0-1 (embed)
158            - kadu 0.6.0.2-3 (embed; bug #504430)
159            - gadu <itp> (embed)
160    
161    xmlrpc (which package is the "origin" of this code?)
162            - drupal <unfixed> (embed)
163            - phpgroupware <unfixed> (embed)
164            - egroupware <unfixed> (embed)
165            - phpwiki <unfixed> (embed)
166            - php4 <unfixed> (embed)
167            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
168    
169    shtool (affects build-time only)
170            - mysql-ocaml <unfixed> (embed)
171            - php4 <unfixed> (embed)
172    
173    xulrunner
174            - iceape <unfixed> (embed; bug #561749)
175            - iceweasel 2.0.0.19 (embed)
176            - icedove <unfixed> (embed; bug #561750)
177            - kompozer <unfixed> (embed; bug #532168)
178            - galeon 2.0.2-4 (embed)
179            - epiphany-browser 2.14.3-8 (embed)
180            - conkeror 0.9~git080629-2 (embed)
181            - kazehakase 0.4.2-1 (embed)
182    
183    xli
184            - xloadimage <unfixed> (embed)
185    
186    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
187            - openmotif <unfixed> (embed)
188            - libxpm <unfixed> (embed)
189    
190    kerberized apps with BSD origin
191            - krb4 <removed> (embed)
192            - krb5 <unfixed> (embed)
193            - heimdal <unfixed> (embed)
194    
195    grip (which pkg is the origin?)
196            - libcdaudio <unfixed>
197            - grip <unfixed>
198            - gnome-vfs <unfixed>
199            TODO: check vfs2 as well
200    
201    fudforum
202            [etch] - phpgroupware <unfixed> (embed)
203            NOTE: phpgroupware-fudforum
204            [sarge] - egroupware-fudforum <removed> (embed)
205    
206    libbsd
207            - rdate 1:1.2-3 (embed)
208            - atheme-services <unfixed>
209            - libbsd-arc4random-perl <unfixed>
210            - isakmpd <unfixed>
211            - bsdgames <unfixed> (embed)
212            - bsd-mailx <unfixed> (embed)
213            - netcat-openbsd <unfixed> (embed; bug #550611)
214            - openssh <unfixed> (embed)
215            - unworkable <unfixed> (embed)
216    
217    cvs
218            - gcvs <unfixed> (embed)
219            NOTE: see cvsunix/src in tarball
220    
221    pcre3
222            - php4 <unknown> (embed)
223            - analog 2:5.23-0woody1 (embed)
224            - goffice <unfixed> (embed)
225            NOTE: libgoffice-*
226            - vfu 4.06-4.1 (embed; bug #450754)
227            - tf5 5.0beta7-1 (embed)
228            - monotone 0.43-1 (embed)
229            NOTE: this only affects versions >= 0.37
230            - glib2.0 2.15.2-1 (embed)
231            - apache2 2.0.53-4 (embed)
232            - exim4 4.10-0.srh20.12 (embed)
233            - yacas <unfixed> (embed)
234            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
235            - gtamsanalyzer.app 0.42-5 (embed)
236            - tin 980117-1 (embed)
237            - kazehakase 0.5.2-1
238            - webkit 1.0.1-1 (embed)
239            - qt4-x11 <unfixed> (embed)
240            NOTE: embedded via webkit copy
241            - erlang <unfixed> (embed)
242            - ssed <unfixed> (embed)
243    
244    tiff
245            - wxwindows2.4 2.2.1 (embed)
246            - gamera 3.2.3-1 (embed)
247    
248    uudeview
249            - libconvert-uulib-perl <unfixed> (embed)
250            - pan <unfixed> (embed)
251    
252    sqlite (not affected by security vulnerabilities so far)
253            - amarok <unfixed> (embed)
254            - monotone 0.43-1 (embed)
255            - iceweasel <unfixed> (embed)
256            - heimdal <unfixed> (embed; bug #559616)
257    
258    util-linux/mount
259            - loop-aes-utils <unfixed> (embed)
260            NOTE: contains code from util-linux' mount in the mount-aes-udeb
261    
262    sylpheed
263            - sylpheed-claws <unfixed> (fork)
264    
265    phpsysinfo
266            - egroupware <unfixed> (embed)
267            - phpgroupware <unfixed> (embed)
268    
269    phpldapadmin
270            [sarge] - egroupware <unfixed> (embed)
271            NOTE: removed from egroupware after sarge
272    
273    chmlib
274            - kchmviewer <unknown> (embed)
275    
276    ffmpeg (libavcodec/libavformat)
277            - mplayer 1.0~rc2-14 (embed; bug #395252)
278            - kino 1.0.0-1
279            - vlc <not-affected> (Links dynamically since initial release)
280            - smilutils 0.3.0-10
281            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
282            - motion 3.1.19-1
283            - gstreamer0.10-ffmpeg 0.10.3-2
284            - xmovie <removed> (static)
285            TODO: gimp-gap (potentially using ffmpeg code as well)
286            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
287            - audacity 1.3.7-2 (embed; bug #512278)
288    
289    faad2
290            - mplayer 1.0~rc2-20 (embed)
291            - avifile <unfixed> (embed; bug #538750)
292            - ffmpeg-debian <removed> (old-version)
293    
294    libmad (MPEG decoding lib)
295            - xine-lib <unfixed> (embed)
296            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
297            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
298    
 xpdf code: (some use xpdf 2, some xpdf 3)  
 gpdf (will be replaced by evince in Gnome 2.12)  
 pdftohtml (current poppler source package has a ported version, pinged maintainer)  
 kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
 tetex-bin (links to poppler since 3.0-12)  
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
 poppler  
 koffice (upstream is working on using poppler, probably not in time for Etch)  
 libextractor  
 pdfkit.framework (links to poppler since 0.8-4)  
   
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
299  libdts  libdts
300  xine-lib          - xine-lib <unfixed> (embed)
301    
 flac:  
302  flac  flac
303  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
304    
305  curl:  liba52
306  wget (code for NTLM authentication)          - a52dec <unfixed> (embed)
307            - xine-lib <unfixed> (embed)
308    
309    libmpeg2
310            - mpeg2dec <unfixed> (embed)
311            - xine-lib <unfixed> (embed)
312    
313    libntlm
314            - wget <unfixed> (fork; bug #550436)
315            - curl <unfixed> (fork; bug #550437)
316            - cntlm <unfixed> (fork; bug #550438)
317    
318    uw-imap
319            - pine <unfixed> (embed)
320            - alpine <unfixed> (embed)
321    
322    imagemagick
323            - graphicsmagick <unfixed> (fork)
324    
325    python-urlgrabber
326            - mercurial <unfixed> (embed; bug #531062)
327            - w3af <unfixed> (embed; bug #555372)
328            [experimental] - harvestman <unfixed> (embed; bug #555373)
329    
330    beautifulsoup
331            - python-mechanize <unfixed> (embed; bug #555349)
332            - zope2.11 <unfixed> (embed; bug #555350)
333            - twill <unknown> (embed)
334    
335    halibut
336            - nsis <unfixed> (fork)
337    
338    libghttp
339            - hotway <unfixed> (embed)
340    
341    libsndfile
342            - ardour 1:2.7.1-1 (embed)
343    
344    glibmm2.4
345            - ardour 1:2.7.1-1 (embed)
346    
347    libgnomecanvasmm2.6
348            - ardour 1:2.7.1-1 (embed)
349    
350    libsigc++-2.0
351            - ardour 1:2.7.1-1 (embed)
352    
353    soundtouch
354            - ardour 1:2.7.1-1 (embed)
355    
356    libmms
357            - xine-lib <unfixed> (embed)
358            - mimms <unfixed> (embed)
359    
360    fckeditor
361            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
362            - moin 1.8.2-2 (embed; bug #452599)
363            - karrigell <removed> (embed; bug #452598)
364            - gforge 4.6.99+svn6225-1 (embed)
365            - request-tracker3.8 <unfixed> (embed)
366            - otrs2 <unfixed> (embed)
367    
368    ipatlas (not packaged in Debian)
369            - moodle <unfixed> (embed; bug #507185)
370    
371    libphp-phpmailer
372            - moodle <unfixed> (embed; bug #507185)
373            - mahara <unfixed> (embed)
374            - symfony <unfixed> (embed)
375            [etch] - phpgroupware <unfixed> (embed)
376            NOTE: phpgroupware-felamimail is only in etch
377            - egroupware <unfixed> (embed; bug #504283)
378            - glpi <unfixed>
379    
380    htmlArea (not packaged in Debian)
381            - moodle <unfixed> (embed)
382    
383    giflib
384            - wine <unfixed> (embed; bug #466181)
385    
386    bennu (not packaged in Debian, http://bennu.sourceforge.net)
387            - moodle <unfixed> (embed)
388    
389    smarty
390            - moodle 1.8.2-2 (embed; bug #471158)
391            - gallery2 2.2.5-2 (embed; bug #471160)
392            - mahara 0.9.2-2 (embed; bug #471201)
393            - gosa 2.4beta1-1 (embed; bug #471200)
394    
395    TinyMCE
396            - wordpress 2.5.1-3 (embed; bug #478257)
397            - moodle <unfixed> (embed; bug #507185)
398            - knowledgeroot <unfixed> (embed)
399            - joomla <itp> (bug #326398)
400    
401    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
402            - scite <unfixed> (embed)
403            - qscintilla <unfixed> (embed)
404            - qscintilla2 <unfixed> (embed)
405            - geany <unfixed> (fork)
406            - anjuta <unfixed> (embed)
407    
408    libphp-adodb
409            - moodle <unfixed> (embed; bug #507185)
410            NOTE: also AdoDB-XML Schema
411            - gallery2 <unfixed> (embed)
412            - phppgadmin <unfixed> (embed)
413            - egroupware <unfixed> (embed)
414            - phpwiki <unfixed> (embed)
415            - torrentflux 2.0beta1-2 (embed)
416            - ipplan <unfixed> (embed)
417            - typo3-src <unfixed> (embed)
418            - cacti <unknown> (embed)
419            [sarge] - cacti <unfixed> (embed)
420            NOTE: dependency exists, but internal version is used
421            - gforge 4.7~rc2-6 (embed)
422            - mahara <unfixed> (embed)
423    
424    gzip
425            - linux-kernel <unfixed> (embed)
426            NOTE: lib/inflate.c
427            - klibc <unfixed> (embed)
428            NOTE: based on linux-kernel gzip code
429            - busybox <unfixed> (embed)
430    
431    neon
432            - cadaver 0.22.3+debian-1 (embed; bug #188381)
433            - gnome-vfs2 <unfixed> (embed; bug #395874)
434            [etch] - litmus <unfixed> (embed; #395875)
435            - litmus <removed> (embed; #395875)
436            [sarge] - screem <unfixed> (embed)
437            - sitecopy 1:0.16.0-1 (embed; bug #395876)
438            [etch] - tla <unfixed> (embed; bug #395877)
439            [sarge] - tla <unfixed> (embed; bug #395877)
440    
441    libmodplug
442            - gst-plugins-bad0.10 <unfixed> (embed)
443    
444    libvncserver
445            - vino <unfixed> (embed)
446    
447    putty
448            - filezilla <unfixed> (embed)
449    
450    tinyxml (not packaged in Debian; itp bug #531968)
451            - filezilla <unfixed>
452            - crystalspace <unfixed> (embed)
453            - libwfut <unfixed> (embed)
454            - rarian <unfixed> (embed)
455            - bulletml <unfixed> (embed)
456            - pokerth <unfixed> (embed)
457            - qutecom <unfixed> (embed)
458            - sofa-framework <unfixed> (embed)
459            - yate <unfixed> (embed)
460            - antigrav <unfixed> (embed)
461            - balder2d <unfixed> (embed)
462            - cal3d <unfixed> (embed)
463            - criticalmass <unfixed> (embed)
464            - ember <unfixed> (embed)
465            - epiphany <unfixed> (embed)
466            - gambit <unfixed> (embed)
467            - noiz2sa <unfixed> (embed)
468            - ogre <unfixed> (embed)
469            - opencity <unfixed> (embed)
470            - openmovieeditor <unfixed> (embed)
471            - pouetchess <unfixed> (embed)
472            - tecnoballz <unfixed> (embed)
473            - trigger-rally <unfixed> (embed)
474            - xmoto <unfixed> (embed)
475            - mapnik <unknown> (embed)
476            NOTE: uses a different XML parser by default
477            - rrootage 0.23a-6 <embed>
478            NOTE: links to libbulltetml
479            - boson <unknown> (embed)
480            NOTE: the embedded code is unused
481    
482    gv
483            - evince <unfixed> (embed)
484            NOTE: ps/ tree from gv 3.5.8
485            NOTE: evince-gtk is affected (a component of evince source package)
486    
487    libXbae
488            - paw <removed> (embed)
489            [etch] - paw <unfixed> (embed)
490    
491    libgtkhtml
492            - claws-mail-extra-plugins <unfixed> (fork)
493    
494    libXaw
495            - paw <removed> (embed)
496            [etch] - paw <unfixed> (embed)
497            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
498    
499    libgd2
500            - graphviz <unfixed> (embed)
501            NOTE: lib/gd seems to be 2.0.33
502            - wml <unfixed> (embed)
503            - libwmf <unfixed> (embed)
504            NOTE: derived from gd 1.6.3
505    
506    rar
507            - unrar-nonfree <unfixed> (embed)
508    
509    unrar-free (maybe this code is derived from the original rar, too?)
510            - clamav <unfixed> (embed)
511            NOTE: seems to be disabled in default config
512    
513    mplayer (DirectMedia Object loader)
514            - xine-lib <unfixed> (embed)
515            NOTE: src/libw32dll/
516            - vlc <unfixed> (embed)
517            NOTE: modules/codec/dmo/
518            - mplayer 1.0~rc2-20 (embed)
519    
520    libwpd (WordPerfect converter)
521            - openoffice.org <unfixed> (embed)
522    
523    fsplib (http://sourceforge.net/projects/fsp/)
524            - gftp <unfixed> (embed)
525            NOTE: lib/fsplib version 0.3
526    
527    sprng
528            - tree-puzzle <unfixed> (embed)
529    
530    librpcsecgss
531            - krb5 <unfixed> (embed)
532    
533    jasper
534            - ghostscript 8.64~dfsg-2 (embed)
535    
536    libiris
537            - psi <unfixed> (embed)
538            - kdenetwork <unfixed> (embed)
539            NOTE: kopete embeds libiris but links dynamically to libidn
540            - kdegames <unfixed> (embed)
541            NOTE: ksirk/kde4
542    
543    libidn
544            - monotone 0.43-1 (embed)
545            - psi <unfixed> (embed)
546            NOTE: psi embeds libiris which embeds libidn
547            - kdegames <unfixed> (embed)
548            NOTE: kdegames/kde4 embeds libiris which embeds libidn
549    
550    lua5.1
551            - monotone 0.43-1 (embed)
552            - nmap 5.00-1 (embed; bug #527997)
553            [lenny] - nmap <unfixed> (embed; bug #527997)
554            - ocropus <unfixed> (embed)
555            - enigma <unfixed> (embed)
556            NOTE: requires lua built with C++
557            - freeciv <unfixed> (embed)
558            - spring <unfixed> (embed)
559    
560    libbotan
561            - monotone 0.43-1 (embed)
562    
563    NetXX
564            - monotone 0.43-1 (embed)
565    
566    libgc
567            - mono <unfixed> (embed)
568    
569    lzma
570            - p7zip <unfixed> (embed)
571            - xz-utils <unfixed> (fork)
572    
573    lzo
574            - grub2 <unfixed> (embed)
575    
576    yassl
577            - mysql-dfsg-5.0 <unfixed> (embed)
578    
579    pax code
580            - tar <unfixed> (embed)
581            - cpio <unfixed> (embed)
582    
583    t1lib
584            - tetex-bin 2.0.2-1 (embed)
585            - texlive-bin <unknown> (embed)
586    
587    guichan
588            - boswars <unfixed> (embed)
589            NOTE: maintainer notified us, working on it
590    
591    tolua
592            - boswars <unfixed> (embed)
593            NOTE: maintainer notified us, working on it
594            NOTE: actually tolua++
595            - ocropus <unfixed> (embed)
596            NOTE: actually tolua++
597            - freeciv <unfixed> (embed)
598            NOTE: actually tolua++
599            - enigma <unfixed> (embed)
600    
601  TODO evaluate:  asio-dev
602  gimp-gap (potentially using ffmpeg code as well)          - luxrender <removed> (embed)
603    
604  uw-imap:  xine-lib
605  pine          - vlc <unfixed> (embed)
606            NOTE: only parts included in modules/access/rtsp
 imagemagick:  
 graphicsmagick  
607    
608  halibut:  netpbm
609  nsis          - tcl8.3 <unfixed> (embed)
610            - tcl8.4 <unfixed> (embed)
611            - tcl8.5 <unfixed> (embed)
612            NOTE: generic/tkImgGIF.c
613    
614    tk8.5
615            - tk8.0 <removed> (old-version)
616            - tk8.3 <unfixed> (old-version)
617            - tk8.4 <unfixed> (old-version)
618            - perl-tk <unfixable> (fork)
619    
620    samba
621            - mc 2:4.6.2~git20080311-1 (embed)
622            NOTE: maintainer is aware of this, currently searching a solution
623    
624    plib1.8.4c2
625            - boson <unfixed> (fork)
626            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
627    
628    fribidi
629            - quesoglc <unfixed> (embed)
630            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
631    
632    glew
633            - quesoglc <unfixed> (embed; bug #489341)
634            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
635            - trigger <unfixed> (embed)
636            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
637            - trigger-rally <unfixed> (embed)
638            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
639    
640    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
641            - transcend <unfixed> (embed)
642            - cultivation <unfixed> (embed)
643            - passage <unfixed> (embed)
644            - gravitation <unfixed> (embed)
645    
646    tar
647            - libarchive <unfixed> (embed)
648            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
649    
650    cpio
651            - libarchive <unfixed> (embed)
652            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
653    
654    kde4libs
655            - kdelibs <unfixable> (old-version)
656    
657    webkit
658            - qt4-x11 <unfixed> (embed; bug #479851)
659            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
660            [lenny] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
661            - kde4libs <unfixable> (fork)
662            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
663            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
664    
665    ftgl
666            - blender 2.46+dfsg-1 (embed)
667    
668    wv
669            - abiword <unfixed>
670    
671    qemu
672            - kvm <unfixed> (embed; bug #543159)
673            NOTE: the kvm package will be removed from sid and squeeze soon (after
674            NOTE: which it will only be in experimental). superceded by qemu-kvm.
675            - qemu-kvm <unfixed> (embed; bug #560853)
676            - xen-3 3.4.2-2 (embed; bug #560856)
677            - xen-unstable <unfixed> (embed; bug #560856)
678    
679    vgabios
680            - kvm <unfixed> (embed; bug #489442)
681    
682    bochs
683            - kvm <unfixed> (embed; bug #489442)
684    
685    speex
686            - vorbis-tools <unfixed> (embed)
687            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
688            - gst-plugins-good0.10 <unfixed> (embed)
689            - xine-lib <unfixed> (embed)
690            - libfishsound <unfixed> (embed)
691            - libannodex <removed> (embed)
692            - vlc <unfixed> (embed)
693            - xmms-speex <unfixed> (embed)
694            - libsdl-sound1.2 <unfixed> (embed)
695            - sweep <unfixed> (embed)
696    
697    libreadline
698            - magic <itp> (old-version)
699    
700    opcode
701            - ode <unfixed> (embed)
702            NOTE: opcode is not a package in debian, it is just embedded
703            NOTE: http://www.codercorner.com/Opcode.htm
704    
705    gimpact
706            - ode <unfixed> (embed)
707            NOTE: gimpact is not a package in debian, it is just embedded
708            NOTE: http://gimpact.sf.net
709    
710    mochikit
711            - mahara <unfixed> (embed)
712            NOTE: they require extra patches, still unmerged upstream
713            - ntop <unfixed> (embed)
714            - coherence 0.6.2-1 (embed)
715            - paste <unfixed> (embed)
716            - turbogears <unfixed> (embed)
717            - plone3 <unfixed> (embed)
718            - xulrunner <unfixed> (embed)
719            - libjifty-plugin-chart-perl <unfixed> (embed)
720            - sabnzbdplus <unfixed> (embed)
721            - tgmochikit <unfixed> (embed)
722    
723    prototypejs
724            - netbeans-ide 6.0.1+dfsg-2 (embed)
725            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
726            - webcit <unfixed> (embed; bug #555219)
727            - asterisk 1:1.6.2.0~rc3-1 (embed)
728            - libjson-ruby 1.1.4-1 (embed; bug #555224)
729            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
730            - horde3 <unfixed> (embed)
731            - knowledgeroot <unfixed> (embed; bug #555230)
732            - mediatomb <unfixed> (embed; bug #555233)
733            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
734            - ebug-http <removed> (embed; bug #555236)
735            - libaws 2.7-1 (embed; bug #555222)
736            - phpgedview <removed> (embed)
737            - poker-network <removed> (embed; bug #555238)
738            - rails 2.1.0-6 (embed)
739            - wordpress 2.5.0-2 (embed; bug #555243)
740            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
741            TODO: search through all of the other zope packages
742            - ampache 3.4.1-2 (embed)
743            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
744            - hobix 0.5~svn20070319-4 (embed; bug #555247)
745            - zabbix 1.6.6-4 (embed; bug #555250)
746            - chora2 <unfixed> (embed; bug #555253)
747            - gollem <unfixed> (embed; bug # 555254)
748            - jscropperui 1.2.1-1 (embed; bug #555257)
749            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
750            - ingo1 <unfixed> (embed; bug #555261)
751            - kronolith2 <unfixed> (embed; bug #555262)
752            - activeldap <unfixed> (embed)
753            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
754            - mantis <unfixed> (embed; bug #555265)
755            - otrs2 2.3.4-6 (embed; bug #555267)
756            - webcalendar <unfixed> (embed; bug #555269)
757            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
758            - jifty 0.90519-1 (embed; bug #555271)
759            - jquery <unfixed> (embed; bug #555272)
760            - passenger 2.2.5debian1-1 (embed; bug #555273)
761            - plone3 <unfixed> (embed; bug #555275)
762            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
763            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
764            - xulrunner <unfixed> (embed)
765            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
766    
767    gdb
768            - insight <unfixed> (embed)
769    
770    e2fsprogs
771            - ldiskfsprogs <unfixable> (fork)
772    
773    quazip (not packaged in Debian)
774            - qcake <unfixed> (embed)
775            NOTE: starting with upstream version 0.6.4
776    
777    exo
778            - pcmanfm <unfixed> (embed; bug #499677)
779            NOTE: slightly modified source code
780    
781    java
782            - openjdk-6 <unfixed>
783            - sun-java5 <unfixed>
784            - sun-java6 <unfixed>
785    
786    libphp-snoopy
787            - ampache 3.4.1-2 (embed; bug #504169)
788            - gforge 4.6.99+svn6094-2 (embed)
789            - mahara 1.0.5-2 (embed; bug #504170)
790            - pixelpost 1.7.1-5 (embed; bug #504171)
791            - mediamate 0.9.3.6-5 (embed; bug #504172)
792            - opendb <removed> (embed; bug #504173)
793            [etch] - opendb <unfixed> (embed; bug #504173)
794            - wordpress 2.5.1-9 (embed; bug #443948)
795            - moodle <unfixed> (embed; bug #507185)
796            [etch] - phpgroupware <unfixed> (embed)
797            NOTE: phpgroupware-felamimail
798            - magpierss 0.72-3 (embed; bug #431089)
799    
800    jquery
801            - zekr <unfixed> (embed)
802            - wordpress <unknown> (embed)
803            - yocto-reader <unfixed> (embed)
804            - textpattern <unfixed> (embed)
805            - genshi 0.5.1-1 (embed)
806            NOTE: compressed file under examples/ dir
807            - prewikka <unfixed> (embed)
808            - libramaze-ruby <unfixed> (embed)
809            - drupal5 <unfixed> (embed)
810            - b2evolution <unfixed> (embed)
811            - wesnoth <unfixed> (embed)
812    
813    tablesorter (jquery plugin, not packaged yet)
814            - wesnoth <unfixed> (embed)
815    
816    kses
817            - wordpress <unfixed> (embed; bug #504242)
818            NOTE: their copy has all methods renamed to wp_<foo>
819            NOTE: kses isn't in Debian, RFP: #504240
820            - moodle <unfixed> (embed; bug #507185)
821            - egroupware <unfixed> (embed)
822    
823    magpierss
824            - wordpress <unfixed> (embed; bug #504242)
825            - moodle <unfixed>
826    
827    php-gettext
828            - wordpress 2.8.4-1 (embed; bug #504242)
829            - docbookwiki <unfixed> (embed)
830            NOTE: non-free
831    
832    libphp-ixr (name may change, it is the Incutio XML-RPC)
833            - wordpress <unfixed> (embed; bug #504242)
834            NOTE: libphp-ixr isn't in Debian, RFP: #504236
835            - dokuwiki <unfixed> (embed)
836            - textpattern <unfixed> (embed)
837    
838    libphp-cas
839            - glpi <unfixed> (embed)
840            - moodle <unfixed> (embed; bug #505984)
841    
842    scriptaculous (prototype.js is among the embeds in the following)
843            - glpi <unfixed> (embed)
844            - libaws <unfixed> (embed; bug #555222)
845            - op-panel <unfixed> (embed)
846            - symfony <unfixed> (embed)
847            NOTE: maintainer says there are extra incompatible changes required
848            - pixelpost 1.7.1-6 (embed)
849            - webhelpers <unfixed> (embed)
850            - qwik <removed> (embed; bug #555241)
851            - smokeping <unfixed> (embed)
852            - turba2 <unfixed> (embed)
853            - typo3-src 4.2.3-1 (embed)
854            - request-tracker3.6 <unfixed> (embed)
855            - request-tracker3.8 <unfixed> (embed)
856            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
857            - wordpress 2.5.0-2 (embed)
858            - libhtml-prototype-perl 1.48-3 (embed)
859    
860    libmarkdown-php
861            - moodle <unfixed> (embed; bug #507185)
862            - pixelpost 1.7.1-6 (embed)
863    
864    php-openid
865            - wordpress-openid <itp> (embed)
866    
867    geshi
868            - dokuwiki 0.0.20080505-3.1 (embed)
869            - pgfouine 1.0-1.1 (embed)
870            - websvn 2.1.0-1 (embed)
871    
872    webcalendar
873            - gforge 4.7~rc2-6 (embed; bug #504758)
874    
875    libical
876            - kdepim <unknown> (fork)
877            NOTE: fixed at some point during 4.0
878            - kdepimlibs 4.2.0-1 (fork)
879            - claws-mail-extra-plugins <unfixed> (fork)
880    
881    libltdl3
882            - kdelibs <unfixed> (embed)
883            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
884            - synfig <unfixed> (embed)
885    
886    harfbuzz
887            - qt4-x11 <unfixed> (embed)
888            - pango1.0 <unfixed> (embed)
889            - fontmatrix <unfixed> (embed)
890    
891    libzip
892            - php5 <unfixable> (modified-embed)
893            - odt2txt <unfixed> (embed; bug #523808)
894    
895    json.php (not packaged; should be replaced with php's built-in functions)
896            - moodle <unfixed>
897            - yui <unfixed>
898            - gallery2 <unfixed>
899            - dokuwiki <unfixed>
900            - typo3-src <unfixed>
901    
902    php-fpdf
903            - tcpdf <itp> (fork)
904            - moodle <unfixed>
905            - phpwiki <unfixed>
906            - egroupware <unfixed>
907            - ldap-account-manager <unfixed> (fork)
908    
909    tcpdf (itp: #495985)
910            - moodle <unfixed>
911            - phpmyadmin <unfixed>
912    
913    typo3
914            - moodle <unfixed>
915    
916    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
917            - moodle <unfixed>
918            - gosa <unfixed>
919    
920    php-ole (itp: #487558)
921            - moodle <unfixed>
922    
923    pieforms (http://www.catalyst.net.nz)
924            - mahara <unfixed>
925    
926    savant2 (http://phpsavant.com)
927            - egroupware <unfixed>
928    
929    rssparser (http://nwow.org)
930            - egroupware <unfixed>
931            - phpgroupware <unfixed>
932    
933    lcms
934            - openjdk-6 <unfixed> (fork)
935    
936    libphp-phplayersmenu
937            - diogenes <unfixed>
938            - phpldapadmin <unfixed>
939    
940    libphp-pclzip
941            - docvert <unfixed>
942            - moodle <unfixed>
943            - egroupware <unfixed>
944    
945    libphp-simplepie
946            - dokuwiki <unfixed>
947            - wordpress <unfixed>
948    
949    libphp-jpgraph
950            - egroupware <unfixed>
951    
952    php-simpletest
953            - moodle <unfixed>
954    
955    libpng
956            - iceweasel <not-affected> (uses xulrunner)
957            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
958            - iceape 1.0.13~pre080614i-0etch1 (embed)
959            - xulrunner 1.9.0.13-1 (embed)
960            [lenny] - xulrunner 1.9.0.11-0lenny1
961            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
962            - gamera 3.2.3-1 (embed)
963    
964    irssi
965            - silc-client <unfixed> (embed)
966            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
967    
968    extc
969            - mtasc <unfixed> (embed)
970            - haxe <unfixed> (embed)
971    
972    swflib
973            - mtasc <unfixed> (embed)
974            - haxe <unfixed> (embed)
975    
976    libitext-java
977            - bouncycastle 2.1.4-1 (embed)
978    
979    python-ply
980            - pyke <unfixed> (embed; bug #555363)
981            - pywbem 0.7.0-4 (embed; bug #555364)
982            - sepolgen <unfixed> (embed; bug #555365)
983            - zope-textindexng3 <unknown> (embed)
984            - iceweasel <not-affected> (uses xulrunner)
985            - xulrunner <unknown> (embed)
986            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
987    
988    libdumbnet (libdnet upstream)
989            - nmap <unfixed> (fork)
990    
991    gcc-4.4
992            - gcc-mingw32 <unfixed> (embed)
993    
994    camlimages
995            - advi <unfixed> (static; bug #550441)
996    
997    memcached
998            - memcachedb <unfixed> (embed)
999    
1000    yajl
1001            - argyll <unfixed> (embed; bug #544223)
1002            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1003    
1004    nusoap
1005            - gforge 4.8.2-1 (embed)
1006            - ampache <unfixed> (embed)
1007            - poker-network <unfixed> (old-version)
1008            - moodle <unfixed> (old-version)
1009            NOTE: code is not used when running under php5 and soap is enabled
1010            - phpwiki <unfixed> (old-version)
1011            - gallery2 <unfixed> (old-version)
1012            - typo3-src <unfixed> (old-version)
1013    
1014    libept
1015            - adept <unfixed> (embed; bug #540649)
1016    
1017    libvorbis
1018            - iceweasel <not-affected> (uses xulrunner)
1019            - xulrunner <unfixed> (embed; bug #540959)
1020            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1021            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1022            - iceape <unfixed> (embed)
1023            [etch] - iceape <not-affected> (introduced in 2.0)
1024            [lenny] - iceape <not-affected> (introduced in 2.0)
1025    
1026    cairo
1027            - iceweasel <not-affected> (uses xulrunner)
1028            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1029    
1030    liboggz
1031            - iceweasel <not-affected> (uses xulrunner)
1032            - xulrunner <unfixed> (embed; bug #540959)
1033            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1034            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1035            - iceape <unfixed> (embed)
1036            [etch] - iceape <not-affected> (introduced in 2.0)
1037            [lenny] - iceape <not-affected> (introduced in 2.0)
1038    
1039    liboggplay
1040            - iceweasel <not-affected> (uses xulrunner)
1041            - xulrunner <unfixed> (embed; bug #540959)
1042            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1043            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1044            - iceape <unfixed> (embed)
1045            [etch] - iceape <not-affected> (introduced in 2.0)
1046            [lenny] - iceape <not-affected> (introduced in 2.0)
1047    
1048    php-net-dnsbl
1049            - serendipity <unfixed> (embed; bug #541740)
1050    
1051    php-onyx-rss
1052            - serendipity <unfixed> (embed; bug #541740)
1053    
1054    php-text-wiki
1055            - serendipity <unfixed> (embed; bug #541740)
1056    
1057    php-xml-rpc
1058            - serendipity <unfixed> (embed; bug #541740)
1059    
1060    polarssl (does not have a shared library)
1061            - pdkim <itp> (embed; bug #543150)
1062            - xyssl <unfixed> (old-version)
1063    
1064    pidgin
1065            - gaim <removed> (old-version)
1066            - qutecom <unfixed> (embed; bug #559785)
1067    
1068    icu
1069            - webkit 1.0.1-1 (embed; bug #547214)
1070            - texlive-bin <unfixed> (fork)
1071            NOTE: texlive upstream working with icu upstream to merge their changes
1072    
1073    cyrus-imapd-2.2
1074            - kolab-cyrus-imapd <unfixed> (fork)
1075            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1076    
1077    python-cxx-dev
1078            - freecad 0.9.2646.3-1 (embed; bug #547936)
1079    
1080    zipios++
1081            - freecad 0.9.2646.3-1 (embed; bug #547941)
1082            - enigma 0.92.3-3 (embed)
1083            NOTE: likely fixed earlier, marking etch's version as fixed
1084    
1085    linux-2.6
1086            - kvm <removed> (embed; bug #549973) [./kernel/*]
1087            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1088            - kernel-source-2.6.8 <removed> (old-version)
1089            - kernel-source-2.4.27 <removed> (old-version)
1090            - kernel-source-2.4.24 <removed> (old-version)
1091            - kernel-source-2.2.25 <removed> (old-version)
1092            - kernel-source-2.2.20 <removed> (old-version)
1093    
1094    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1095            - kvm <removed> (embed) [./libfdt/*]
1096            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1097    
1098    qweb (not packaged)
1099            - ajaxterm <unfixed>
1100    
1101    opensaml2
1102            - opensaml <removed> (old-version)
1103    
1104    shibboleth-sp2
1105            - shibboleth-sp <removed> (old-version)
1106    
1107    tuxonice-userui
1108            - suspend2-userui <removed> (old-version)
1109    
1110    expat
1111            - w3c-libwww <removed> (embed; bug #551941)
1112            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1113            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1114            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1115            - python2.4 <unfixable> (embed; bug #553403)
1116            - python-4suite <unfixed> (embed; bug #516935)
1117            - wxwindows2.4 <removed> (embed)
1118            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1119            - wxwidgets2.8 2.8.10.1-2 (embed)
1120            - celementtree 1.0.5-8 (embed)
1121            NOTE: Maybe that was fixed even earlier
1122            - audacity 1.3.2-1 (embed)
1123            - matanza <unfixed> (embed)
1124            - tdom 0.8.3~20080525-1 (embed)
1125            - udunits 2.1.8-4 (embed)
1126            - apr-util 1.2 (embed)
1127            - ayttm <unfxed> (embed; bug #561006)
1128            - cableswig <unfixed> (embed)
1129            - cadaver <unfixed> (embed)
1130            - cmake 2.6.0-6 (embed)
1131            - coin3 <unfixed> (embed)
1132            - gdcm 2.0.14-2 (embed)
1133            - ghostscript <unfixed> (embed)
1134            - grmonitor <removed> (embed)
1135            - iceape <unfixed> (embed)
1136            - insighttoolkit 3.16.0-1 (embed)
1137            NOTE: insighttoolkit might've been fixed earlier
1138            - libparagui1.1 1.0.2-1 (embed)
1139            - paraview <unfixed> (embed)
1140            - poco <unfixed> (embed)
1141            - simgear <unfixed> (embed)
1142            - sitecopy 1:0.16.0-1
1143            - smart 1.0-1 (embed)
1144            - swish-e <not-affected> (Linked against libxml, which is used instead)
1145            - tla 1.3.5+dfsg-15 (embed)
1146            - vtk 4.1.20030227-1 (embed)
1147            - wbxml2 <unfixed> (embed)
1148            - xmlrpc-c <unfixed> (embed)
1149            - iceweasel <unfixed> (embed)
1150            - kompozer <unfixed> (embed)
1151            - vxl 1.13.0-2 (embed)
1152            - xulrunner <unfixed> (embed)
1153            - apache2 2.2 (embed)
1154            - texlive-bin <not-affected> (Embedded code not compiled in)
1155            - vnc4 <unfixed> (embed)
1156            - xotcl <unfixed> (embed)
1157    
1158    xerces-c
1159            - xerces-c2 <unfixed> (old-version)
1160            - xerces27 <removed> (old-version)
1161    
1162    md5 (RSA's version; not the gnu version provided by coreutils)
1163            - w3c-libwww <removed> (embed; bug #551942)
1164            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1165    
1166    enet
1167            - sauerbraten <unfixed> (embed; #497194)
1168    
1169    eglibc
1170            - glibc <removed> (old-version)
1171    
1172    galib
1173            - gamera 3.2.3-1 (embed)
1174    
1175    configobj
1176            - bzr <unfixed> (embed; bug #555336)
1177            - elisa <unfixed> (embed; bug #555337)
1178            - gaupol <unfixed> (embed; bug #555338)
1179            - ipython <unfixed> (embed; bug #555339)
1180            - pida <unfixed> (embed; bug #555340)
1181            - psychopy <unfixed> (embed; bug #555341)
1182            - rest2web <unfixed> (embed; bug #555342)
1183            - auth2db <unknown> (embed)
1184            - dynagen <unknown> (embed)
1185            - iceweasel <unknown> (embed)
1186            - sabnzbdplus <unknown> (embed)
1187            - xulrunner <unknown> (embed)
1188            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1189    
1190    python-clientform
1191            - bibus <unfixed> (embed; bug #555332)
1192            - zope2.10 <unfixed> (embed; bug #555333)
1193            - zope2.11 <unfixed> (embed; bug #555334)
1194            - python-mechanize <unknown> (embed)
1195            - twill <unknown> (embed)
1196    
1197    python-mechanize
1198            - zope2.10 <unfixed> (embed; bug #555337)
1199            - zope2.11 <unfixed> (embed; bug #555338)
1200            - twill <unknown> (embed; bug #555339)
1201    
1202    pexpect
1203            - duplicity 0.6.06-1 (embed; bug #555361)
1204            - hplip <unfixed> (embed; bug #555362)
1205            - smart <unfixed> (embed; bug #555363)
1206    
1207    pyparsing
1208            - bauble <unfixed> (embed; bug #555366)
1209            - boa-constructor 0.6.1-8 (embed; bug #555367)
1210            - calibre <unfixed> (embed; bug #555368)
1211            - matplotlib <unfixed> (embed; bug #531024)
1212            - zhpy <unfixed> (embed; bug #555370)
1213            - polybori <unknown> (embed)
1214            - python-whoosh <unknown> (embed)
1215            - twill <unknown> (embed)
1216            - zope-textindexng3 <unknown> (embed)
1217    
1218    python-pysqlite2
1219            - python2.4 <unfixed> (embed; bug #553403)
1220            - python2.5 <unfixed> (embed; bug #553403)
1221    
1222    celementtree
1223            - python2.5 <unfixed> (embed)
1224            - smart 1.0-1 (embed)
1225            [etch] - smart <unfixed> (embed)
1226    
1227    elementtree
1228            - python2.5 <unfixed> (embed)
1229            - bzr <unfixed> (embed; bug #555343)
1230            - gedit 2.28.2-1 (embed; bug #555344)
1231            - smart 1.0-1 (embed)
1232            [etch] - smart <unfixed> (embed)
1233            - solfege <unfixed> (embed; bug #555345)
1234            - w3af <unfixed> (embed; bug #555346)
1235            - python-qt4 <unknown> (embed)
1236            - sphinx <unknown> (embed)
1237            - python-nltk <itp> (embed)
1238    
1239    python2.5
1240            - python2.4 <unfixed> (old-version)
1241            - jython <unfixed> (embed)
1242            NOTE: embeds many stdlib modules
1243            - python-django <unfixed> (embed; bug #555419)
1244            NOTE: embeds stdlib modules: doctest, decimal
1245            - gamera 3.2.3-1 (embed)
1246            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1247            - boa-constructor <unfixed> (embed; bug #555426)
1248            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1249            - nicotine <unfixed> (embed; bug #555427)
1250            NOTE: embeds stdlib modules: ConfigParser
1251            - museek+ <unfixed> (embed; bug #555428)
1252            NOTE: embeds stdlib modules: ConfigParser
1253            - vegastrike-data <unfixed> (embed)
1254            NOTE: embeds many stdlib modules
1255            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1256            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1257            - config-manager <unfixed> (embed; bug #555423)
1258            NOTE: embeds stdlib modules: optparse
1259            - jhbuild 2.28.0-1 (embed; bug #555421)
1260            NOTE: embeds stdlib modules: optparse, subprocess
1261            - smart <unfixed> (embed; bug #555432)
1262            NOTE: embeds stdlib modules: optparse
1263            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1264            NOTE: embeds stdlib modules: doctest
1265            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1266            NOTE: embeds stdlib modules: doctest
1267            - distribute <unfixed> (embed)
1268            NOTE: embeds stdlib modules: doctest
1269            - python-setuptools <unfixed> (embed; bug #555435)
1270            NOTE: embeds stdlib modules: doctest
1271            - zope.testing <unfixed> (embed; bug #555436)
1272            NOTE: embeds stdlib modules: doctest
1273            - translate-toolkit <unfixed> (embed; bug #555422)
1274            NOTE: embeds stdlib modules: textwrap, contextlib
1275            - libtpclient-py <unfixed> (embed; bug #555424)
1276            NOTE: embeds stdlib modules: subprocess
1277            - grass <unfixed> (embed; bug #555425)
1278            NOTE: embeds stdlib modules: subprocess
1279            - coherence <unfixed> (embed; bug #555429)
1280            NOTE: embeds stdlib modules: uuid
1281            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1282            NOTE: embeds stdlib modules: uuid
1283            - setroubleshoot <unfixed> (embed; bug #555431)
1284            NOTE: embeds stdlib modules: uuid
1285            - linkchecker <unfixed> (embed; bug #555414)
1286            NOTE: embeds msgfmt.py script
1287            - imdbpy <unfixed> (embed)
1288            NOTE: embeds msgfmt.py script
1289            - kiwi <unfixed> (embed)
1290            NOTE: embeds msgfmt.py script
1291            - moin <unfixed> (embed)
1292            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1293            - plone3 <unfixed> (embed)
1294            NOTE: embeds msgfmt.py script
1295            - roundup <unfixed> (embed)
1296            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1297            - rednotebook <unfixed> (embed; bug #555415)
1298            NOTE: embeds msgfmt.py script
1299            - turbogears <unfixed> (embed)
1300            NOTE: embeds msgfmt.py script
1301            - elisa <unfixed> (embed)
1302            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1303            - calibre <unfixed> (embed)
1304            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1305            - mailman 1:2.1.13-1 (embed; #555416)
1306            NOTE: embeds msgfmt.py script
1307            - python-docutils <unknown> (embed)
1308            NOTE: embeds stdlib modules: optparse, textwrap
1309            - python-imaging <unknown> (embed)
1310            NOTE: embeds stdlib modules: doctest
1311            - python-mechanize <unknown> (embed)
1312            NOTE: embeds stdlib modules: doctest
1313            - twill <unknown> (embed)
1314            NOTE: embeds stdlib modules: subprocess
1315            - zeroc-ice <unknown> (embed)
1316            NOTE: embeds stdlib modules: subprocess
1317            - wxwidgets2.8 <unknown> (embed)
1318            NOTE: embeds stdlib modules: subprocess
1319            - cycle <unknown> (embed)
1320            NOTE: embeds msgfmt.py script
1321            - deluge <unknown> (embed)
1322            NOTE: embeds msgfmt.py script
1323            - opendict <unknown> (embed)
1324            NOTE: embeds msgfmt.py script
1325            - openerp-client <unknown> (embed)
1326            NOTE: embeds msgfmt.py script
1327            - rapidsvn <unknown> (embed)
1328            NOTE: embeds msgfmt.py script
1329            - wammu <unknown> (embed)
1330            NOTE: embeds msgfmt.py script
1331            - gaphor <unknown> (embed)
1332            NOTE: embeds msgfmt.py script
1333            - pida <unknown> (embed)
1334            NOTE: embeds msgfmt.py script
1335            - python-formencode <unknown> (embed)
1336            NOTE: embeds msgfmt.py script
1337            - duplicity <unfixed> (embed)
1338            NOTE: embeds stdlib module: urlparse, tarfile
1339            - pygopherd <unfixed> (embed)
1340            NOTE: embeds stdlib module: zipfile
1341    
1342    argparse
1343            - twill <unfixed> (embed; bug #555347)
1344            - ipython <unfixed> (embed; bug #555348)
1345    
1346    coherence
1347            - elisa <unfixed> (embed; bug #555335)
1348    
1349    simpletal
1350            - plastex <unfixed> (embed; bug #555371)
1351    
1352    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1353            - postr <unfixed> (embed)
1354            - elisa <unfixed> (embed)
1355    
1356    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1357            - apertium-tolk <unfixed> (embed)
1358            - ipython <unfixed> (embed)
1359            - virtaal <unfixed> (embed)
1360    
1361    distribute
1362            - setuptools <removed> (old-version)
1363    
1364    rails
1365            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1366            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1367            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1368            - thin <unfixed> (embed) [./spec/rails_app/*]
1369            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1370            NOTE: be dangerous if developers are naively basing their code off of the examples
1371            NOTE: prototype.js is among the example files
1372    
1373    lucene2 (prototype.js is among the embeds in the following)
1374            - lucene <unfixed> (old-version)
1375            - pylucene <unfixed> (embed)
1376            - libpdfbox-java <unfixed> (embed)
1377            - libfontbox-java <unfixed> (embed)
1378            - libjempbox-java <unfixed> (embed)
1379            - solr <unfixed> (embed)
1380    
1381    unicode-data
1382            - syslinux <unfixed> (embed)
1383            - camomile <unfixed> (embed)
1384            - fribidi <unfixed> (embed)
1385            - m17n-db <unfixed> (embed)
1386            - sbcl <unfixed> (embed)
1387            - heimdal <unfixed> (embed)
1388            - icu <unfixed> (embed)
1389            - icu4j <unfixed> (embed)
1390            - krb5 <unfixed> (embed)
1391            - moodle <unfixed> (embed)
1392            - openldap <unfixed> (embed)
1393            - pike7.6 <unfixed> (embed)
1394            - samba <unfixed> (embed)
1395            - samba4 <unfixed> (embed)
1396            - cmucl <unfixed> (embed)
1397            - typo3-src <unfixed> (embed)
1398            - mauve <unfixed> (embed)
1399            - texlive-bin <unfixed> (embed)
1400            - ypsilon <unfixed> (embed)
1401            - jeuclid <unfixed> (embed)
1402            - charmap.app <unfixed> (embed)
1403            - clisp <unfixed> (embed)
1404            - gnulib <unfixed> (embed)
1405            - opensrs-client <unfixed> (embed)
1406            - saxonb <unfixed> (embed)
1407            - rails <unfixed> (embed)
1408    
1409    feedparser
1410            - rawdog <unfixed> (embed; bug #383422)
1411            - miro <unfixed> (embed; bug #555351)
1412            - calibre <unfixed> (embed; bug #555352)
1413            - freevo <unfixed> (embed; bug #555353)
1414            - pida <unfixed> (embed; bug #555354)
1415            - planet-venus <unfixed> (embed; bug #555355)
1416            - plone3 <unfixed> (embed; bug #555356)
1417            - exaile 0.2.14+debian-1 (embed)
1418            - screenlets 0.1.2-3 (embed)
1419            NOTE: included twice
1420    
1421    agg:
1422            - matplotlib <unfixed> (embed: bug #377271)
1423            - contextfree <unfixed> (embed)
1424            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1425            - exactimage <unfixed> (embed)
1426            - python-enable <unfixed> (embed)
1427            - mapnik 0.5.1-3 (embed)
1428            NOTE: links statically to agg, but shared library is not available (bug #377271)
1429    
1430    vtk
1431            - paraview <unfixable> (embed; bug #495426)
1432    
1433    txt2tags
1434            - rednotebook <unfixed> (embed)
1435    
1436    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1437            - gajim <unfixed> (embed)
1438            - emesene <unfixed> (embed)
1439            - convirt <unfixed> (embed)
1440            - pida <unfixed> (embed)
1441            - rednotebook <unfixed> (embed)
1442    
1443    horde3 (prototype.js is among the embeds in the following)
1444            - mnemo2 <unfixed> (embed)
1445            - nag2 <unfixed> (embed)
1446            - wordpress <unfixed> (embed)
1447            NOTE: Text_Diff (wp-includes/Text/Diff*)
1448    
1449    cimg
1450            - gmic <itp> (embed)
1451    
1452    mootools
1453            - gmic <itp> (embed)
1454    
1455    openldap
1456            - openldap2.3 <removed> (old-version)
1457    
1458    grub2
1459            - grub <unfixed> (old-version)
1460    
1461    gnupginterface
1462            - duplicity <unfixed> (embed)
1463    
1464    python-dateutil
1465            - awn-extras-applets <unfixed> (embed)
1466            - matplotlib <unknown> (embed)
1467    
1468    cups
1469            - cupsys <removed> (old-version)
1470    
1471    yui
1472            - bcfg2 <not-affected> (present in source but not included in any binary files)
1473            - serendipity <unfixed> (embed; bug #557746)
1474            - moodle 1.8.2.dfsg-5 (embed)
1475            - jifty 0.91117-1 (embed; bug #557748)
1476            - webgui 7.7.26-1 (embed)
1477            - loggerhead 1.17-1 (embed)
1478    
1479    quake3 (vanilla source not packaged in debian)
1480            - openarena <unfixable> (fork)
1481    
1482    quake2 (vanilla source not packaged in debian)
1483            - alien-arena <unfixable> (fork)
1484            - warsow <unfixable> (fork)
1485    
1486    libtheora
1487            - iceweasel <not-affected> (uses xulrunner)
1488            - xulrunner <unfixed> (embed; bug #540959)
1489            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1490            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1491            - iceape <unfixed> (embed; bug #559276)
1492            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1493            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1494    
1495    dtoa
1496            - bfilter <unfixed> (embed)
1497            - cacao <unfixed> (embed)
1498            - cdrdao <unfixed> (embed)
1499            - classpath <unfixed> (embed)
1500            - freej <unfixed> (embed)
1501            - iceape <unfixed> (embed)
1502            - iceweasel <unfixed> (embed)
1503            - jscoverage <unfixed> (embed)
1504            - kde4libs <unfixed> (embed)
1505            - kdelibs <unfixed> (embed)
1506            - kompozer <unfixed> (embed)
1507            - libv8 <unfixed> (embed)
1508            - mono <unfixed> (embed)
1509            - newlib <unfixed> (embed)
1510            - nspr <unfixed> (embed)
1511            - php5 <unfixed> (embed)
1512            - polyml <unfixed> (embed)
1513            - qt4-x11 <unfixed> (embed)
1514            - rhino <unfixed> (embed)
1515            NOTE: code translated to Java
1516            - ruby1.8 <unfixed> (embed)
1517            - ruby1.9 <unfixed> (embed)
1518            - ruby1.9.1 <unfixed> (embed)
1519            - sdd <unfixed> (embed)
1520            - sfind <unfixed> (embed)
1521            - star <unfixed> (embed)
1522            - tinymux <unfixed> (embed)
1523            - virtualbox-ose <unfixed> (embed)
1524            - webkit <unfixed> (embed)
1525            - xulrunner <unfixed> (embed)
1526    
1527    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1528            - firegpg <unfixed> (embed)
1529            - enigmail <unfixed> (embed)
1530    
1531    ptmalloc (not packaged in Debian)
1532            - crystalspace <unfixed> (embed)
1533            - qt4-x11 <unfixed> (embed)
1534    
1535    svgalib
1536            - usplash <unfixed> (embed)
1537    
1538    bogl
1539            - usplash <unfixed> (embed)
1540    
1541    taglist
1542            - usplash <unfixed> (embed)
1543    
1544    portaudio
1545            - audacity <unfixed> (embed; bug #323711)
1546    
1547    nyquist
1548            - audacity <unfixed> (embed)
1549            NOTE: embeds a forked nyquist with support for a shared library
1550    
1551    vamp-plugin-sdk
1552            - audacity <unfixed> (embed)
1553    
1554    wordpress
1555            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1556    
1557    php5
1558            - php4 <removed> (old-version)
1559    
1560    classpath
1561            - libgnucrypto-java <unfixed> (embed; bug #559788)
1562    
1563    libtool
1564            - apr <unfixed> (static; bug #489625)
1565            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1566            - arts <unfixed> (embed)
1567            - bochs 2.4.2-1 (embed; bug #560884)
1568            - camserv <unfixed> (embed)
1569            - collectd <unfixed> (embed)
1570            - courier-authlib 0.58-4 (embed)
1571            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1572            - cvsnt <unfixed> (embed)
1573            - dico <not-affected> (Uses the system copy of ltdl)
1574            - freeradius 0.1+20010527-1 (embed)
1575            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1576            - ggobi 2.1.9~20091212-1 (embed)
1577            - glame 2.0.1-4 (embed)
1578            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1579            - gnash <unfixed> (embed)
1580            - gnu-smalltalk <unfixed> (embed)
1581            - google-gadgets 0.10.5-0.3 (embed)
1582            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1583            - graphicsmagick 1.3.5-6 (embed)
1584            - graphviz 2.8-3 (embed)
1585            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1586            - guile-1.6 1.6.8-7 (embed)
1587            - hamlib <unfixed> (embed)
1588            - hercules <unfixed> (embed)
1589            - jags 1.0.4-3 (embed; bug #560864)
1590            - kdelibs <unfixed> (embed)
1591            - libannodex <removed> (embed)
1592            - libextractor <unfixed> (embed)
1593            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1594            - libtunepimp <unfixed> (embed)
1595            - mp4h <unfixed> (embed)
1596            - naim <unfixed> (embed)
1597            - parser-mysql <unfixed> (embed)
1598            - pinball 0.3.1-11 (embed)
1599            - redland <unfixed> (embed)
1600            - siproxd <unfixed> (embed)
1601            - ski <unfixed> (embed)
1602            - synfig <unfixed> (embed)
1603            - unixodbc 2.2.4-5 (embed)
1604            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1605            - clamav 0.95+dfsg-1 (embed)
1606            - imagemagick 6:6.2.3.1-1 (embed)
1607            - hypre 2.4.0b-5 (embed)
1608            - lam <unfixed> (embed)
1609            - openmpi <unfixable> (embed; bug #559386)
1610            - parser <unfixed> (embed)
1611            - pdsh 2.18-5 (embed; bug #560892)
1612            - sbnc 1.2-8 (embed)
1613            - sdcc <unfixed> (embed)
1614            - wml <unfixed> (embed)
1615            - proftpd-dfsg <unfixed> (embed; bug #561748)
1616            - babel 1.4.0.dfsg-5 (embed)
1617            - libprelude 0.9.14-2 (embed)
1618            - heartbeat 2.1.4-7 (embed)
1619            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1620            NOTE: might've been fixed earlier
1621            - gcc-* <unknown> (embed)
1622    
1623    ocamlgsl
1624            - orpie 1.5.1-7.1 (embed; bug #550058)
1625    
1626    xdotool
1627            - keynav <unfixed> (embed; bug #560103)
1628    
1629    bulletphysics (not packaged; http://www.bulletphysics.org/)
1630            - supertuxkart <unfixed> (embed)
1631            - blender <unfixed> (embed)
1632    
1633    ghostscript
1634            - gs-gpl <removed> (old-version)
1635    
1636    icedove
1637            - thunderbird <removed> (old-version)
1638    
1639    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1640            - jquery <unfixed> (embed)
1641    
1642    sed
1643            - ssed <unfixed> (fork)
1644    
1645    phpatomlib (http://code.google.com/p/phpatomlib)
1646            - wordpress <unfixed> (embed)
1647    
1648    Services_JSON (http://pear.php.net/package/Services_JSON)
1649            - wordpress <unfixed> (embed)
1650    
1651    phpass (http://www.openwall.com/phpass/)
1652            - gallery2 <unfixed> (embed)
1653            - wordpress <unfixed> (embed)
1654            - typo3-src <unfixed> (fork)
1655            NOTE: file refers to drupal, maybe there's a copy somewhere there
1656            NOTE: a copyright owner search didn't match anything
1657            - libauthen-passphrase-perl <unfixable> (fork)
1658            NOTE: perl implementation of phpass
1659    
1660    squirrelmail
1661            - wordpress <unfixed> (embed)
1662            NOTE: class-pop3.php
1663    
1664    ezSQL (http://www.woyano.com/jv/ezsql)
1665            - wordpress <unfixable> (fork)
1666            NOTE: wp-db.php
1667    
1668    Diff.php (Clay Loveless' version/killersoft.com)
1669            - php-versioncontrol-svn <unfixed>
1670    
1671    libm
1672            - spring <unfixed> (embed)
1673            NOTE: embedded by embedded copy of streflop
1674    
1675    streflop
1676            - spring <unfixed> (embed)
1677    
1678    minizip
1679            - spring <unfixed> (embed)
1680    
1681    oscpack
1682            - spring <unfixed> (embed)
1683    
1684    hpiutil2
1685            - spring <unfixed> (embed)
1686    
1687    p7zip
1688            - spring <unfixed> (embed)
1689    
1690    pythonqt (doesn't seem to be python-qtN, unknown source)
1691            - fontmatrix <unfixed> (embed)
1692            - elmerfem <unfixed> (embed)
1693    
1694    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1695            - docvert <unfixed> (embed)
1696            - jifty <unfixed> (embed)
1697            - kdenetwork <unfixed> (embed)
1698            - mediatomb <unfixed> (embed)
1699            - plastex <unfixed> (embed)
1700            - plone3 <unfixed> (embed)
1701            - python-chaco <unfixed> (embed)
1702            - python-docutils <unfixed> (embed)
1703            - s5 <unfixed> (embed)
1704            - zope2.10 <unfixed> (embed)
1705            - zope2.11 <unfixed> (embed)
1706            - cython <not-affcted> (embed)
1707            NOTE: part of documentation, which is not installed into the binary package
1708    
1709    python-docutils
1710            - zope2.10 <unfixed> (embed)
1711            - zope2.11 <unfixed> (embed)
1712    
1713  libghttp:  tesseract
1714  hotway          - ocropus <unfixed> (static)
1715    
1716  etl-dev (will be renamed to libetl-dev soon):  antlr
1717  synfig          - kdevelop <unfixed> (embed)

Legend:
Removed from v.3551  
changed lines
  Added in v.13801

  ViewVC Help
Powered by ViewVC 1.1.5