/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7924 by stef-guest, Mon Jan 14 23:05:37 2008 UTC revision 14700 by gilbert-guest, Tue May 18 00:42:33 2010 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>, <itp> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and thus might share parts of the source code)        modified-embed (embeds a code copy that differs from upstream code)
20          fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22    
23  The srcpkg might be some string to identify the code if there is no specific source package.  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26  Everything up to the next line is ignored  Everything up to the next line is ignored.
27  ---BEGIN  ---BEGIN
28  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
30          - pdftohtml <unknown>          - pdftohtml <unknown>
31          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
32          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
33          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
34          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
36          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
37          NOTE: links to poppler          NOTE: links to poppler
38          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
39          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
40          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
41          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
42          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
44          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48    
49  ppmd  ppmd
50          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
51            NOTE: discussion in #458152
52    
53    libevent
54            - transmission 1.71-1 (embed; bug #529372)
55    
56    lrmi
57            - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59            - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61    
62    peercast
63            - gnome-peercast <removed> (embed)
64            [etch] - gnome-peercast <unfixed> (embed)
65    
66  silc-toolkit  silc-toolkit
67          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
68    
69    icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    libusb
74            - argyll <unfixed> (embed)
75    
76  dietlibc  dietlibc
77          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
78    
79    libmikmod
80            - sdl-mixer1.2 <unfixed> (embed)
81            TODO: report bug
82    
83  libiax  libiax
84          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
85    
86    spandsp
87            - iaxmodem <unfixable> (embed; bug #548885)
88    
89    python-paramiko
90            - fabric 0.9.0-2 (embed; bug #561398)
91    
92  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
93          - dpkg <unfixed> (embed)          - dpkg 1.15.6 (static)
94          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
95          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
96            - cherokee <unfixed> (embed)
97          NOTE: somehow derived code base          NOTE: somehow derived code base
98          - mono <unfixed> (embed)          - mono <unfixed> (embed)
99          TODO: check mozilla          TODO: check mozilla
# Line 67  zlib (lots of apps embed a copy, but lin Line 102  zlib (lots of apps embed a copy, but lin
102          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
103          - rpm <unknown> (embed)          - rpm <unknown> (embed)
104          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
105            - tuxcmd-modules <unfixed> (embed)
106            - zsync <unfixed>
107            - tra <unfixed>
108            - sash <unfixed>
109            - nsis <unfixed>
110            - mseide-msegui <unfixed>
111            NOTE: mseide
112            - mirrordir <unfixed>
113            - poco <unfixed>
114            - klibc <unfixed>
115            - ghostscript <unfixed>
116            - freeimage <unfixed>
117            - clamav <unfixed> (fork)
118            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
119            - tuxonice-userui <unfixed> (static)
120            - plt-scheme <unfixed>
121            - perl <unfixed>
122            - paraview <unfixed>
123            - velvet 0.7.56~nozlibcopy-1
124            - gcvs <unfixed>
125            - dump <unfixed>
126            - aide <unfixed> (static)
127            - dar <unfixed> (static)
128            - avfs <unfixed>
129            - fpc <unfixed>
130            - winff <unfixed>
131            NOTE: inherited from fpc, see #472304
132            - lazarus <unfixed>
133            NOTE: inherited from fpc, see #472304
134            - erlang <unfixed> (embed)
135            - gamera 3.2.3-1 (embed)
136            - python2.4 <unfixed> (embed; bug #553403)
137            - python2.5 <unfixed> (embed; bug #553403)
138            - texlive-bin <unknown> (embed)
139    
140    dulwich
141            - hg-git 0.1.0-1 (embed; bug #541996)
142    
143    libvigraimpex
144            - hugin <unfixed> (embed; bug #542259)
145            - enblend-enfuse <unfixed> (embed; bug #542258)
146            - gamera 3.2.3-1 (embed)
147    
148  libbz2  libbz2
149          - dpkg <unfixed> (static)          - dpkg 1.15.6 (static)
150            - amd64-libs <unfixed> (static)
151  ekg          NOTE: let's call it "static"
152          - centericq <unfixed> (embed)          - dar <unfixed> (static)
153          - gaim <unfixed> (embed)          - dump <unfixed> (static)
154          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - unalz <unfixed> (embed)
155          - kopete 4:3.3.2-5 (embed)          NOTE: has code, by the maint, to use the system version but links against the internal copy
156          - kadu <unfixed> (embed)  
157          - gadu <unfixed> (embed)  libyahoo2
158          NOTE: g/kadu not packaged in Debian yet          - centerim <unfixed> (embed; bug #559783)
159    
160    libmsn
161            - centerim <unfixed> (embed; bug #559783)
162    
163    libgadu
164            - centerim <unfixed> (embed; bug #559783)
165            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
166            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
167            - kdenetwork 4:3.3.2-5 (embed)
168            NOTE: from kdenetwork: kopete
169            - ekg 1:1.8~rc0-1 (embed)
170            - kadu 0.6.0.2-3 (embed; bug #504430)
171            - gadu <itp> (embed)
172    
173  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
174          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
175          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
176          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
177          - phpwiki (embed)          - phpwiki <unfixed> (embed)
178          - php4 <unfixed> (embed)          - php4 <removed> (embed)
179          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
180    
181  shtool (affects build-time only)  shtool (affects build-time only)
182          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
183          - php4 <unfixed> (embed)          - php4 <removed> (embed)
184            - php5 <unfixed> (embed)
185    
186  mozilla source code  xulrunner
187          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
188          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
189          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
190          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
191          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
192          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
193          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
194          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
195    
196  xli  xli
197          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
198    
199  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
200          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
201          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed; bug #575750)
         NOTE: in libxpm  
202    
203  kerberized apps with BSD origin  kerberized apps with BSD origin
204          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
205          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
206          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
207    
208  grip (which pkg is the origin?)  grip (which pkg is the origin?)
209          - libcdaudio          - libcdaudio <unfixed>
210          - grip          - grip <unfixed>
211          - gnome-vfs          - gnome-vfs <unfixed>
212          TODO: check vfs2 as well          TODO: check vfs2 as well
213    
214  fudforum  fudforum
215          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
216          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
217          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
218    
219    libbsd
220            - rdate 1:1.2-3 (embed)
221            - atheme-services <unfixed>
222            - libbsd-arc4random-perl <unfixed>
223            - isakmpd <unfixed>
224            - bsdgames <unfixed> (embed)
225            - bsd-mailx <unfixed> (embed)
226            - netcat-openbsd <unfixed> (embed; bug #550611)
227            - openssh <unfixed> (embed)
228            - unworkable <unfixed> (embed)
229    
230  cvs  cvs
231          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
232          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
233    
234  pcre  pcre3
235          - python* <unfixed> (embed)          - php4 <removed> (embed)
         - php4 <unknown> (embed)  
236          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
237          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
238            NOTE: libgoffice-*
239          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
240          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
241          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
242          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
243          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
244          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
245          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
246          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
247          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
248          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
249            - tin 980117-1 (embed)
250            - kazehakase 0.5.2-1
251            - webkit 1.0.1-1 (embed)
252            - qt4-x11 <unfixed> (embed)
253            NOTE: embedded via webkit copy
254            - erlang <unfixed> (embed)
255            - ssed <unfixed> (embed)
256            - ircd-hybrid <unfixed> (static)
257            - emboss <unfixd>
258            - cherokee <unfixed> (embed)
259            - oftc-hybrid <unfixed> (embed)
260            - ratbox-services <unfixed> (embed)
261            - squeak-vm <unfixed> (embed)
262            - tinymux <unfixed> (embed)
263    
264  tiff  tiff
265          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
266          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
267            - freeimage <unfixed> (embed)
268            - libtk-img <unfixed> (embed)
269            NOTE: there are two copies, one under tiff/ other under libtiff/
270            - gdal <unfixed>
271    
272  uudeview  uudeview
273          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
274            - pan <unfixed> (embed)
275    
276  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
277          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
278          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
279          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
280            - heimdal <unfixed> (embed; bug #559616)
281    
282  util-linux/mount  util-linux/mount
283          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
284          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
285    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
286  sylpheed  sylpheed
287          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
288    
# Line 184  phpldapadmin Line 297  phpldapadmin
297  chmlib  chmlib
298          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
299    
300  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
301          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
302          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
303          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
304          - vlc <unfixed> (static)          - smilutils 0.3.0-10
305          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
306          - motion <unfixed> (static)          - motion 3.1.19-1
307          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
308          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed> (static)
         - xmovie <unfixed>  
309          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
310            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
311            - audacity 1.3.7-2 (embed; bug #512278)
312    
313  mad MPEG decoding lib  faad2
314          - mad <unfixed> (embed)          - mplayer 1.0~rc2-20 (embed)
315            - avifile <unfixed> (embed; bug #538750)
316            - ffmpeg-debian <removed> (embed)
317    
318    libmad (MPEG decoding lib)
319          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
320            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
321            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
322    
323  libdts  libdts
324          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 210  liba52 Line 330  liba52
330          - a52dec <unfixed> (embed)          - a52dec <unfixed> (embed)
331          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
332    
333  libmpeg2  mpeg2dec (libmpeg2)
         - mpeg2dec <unfixed> (embed)  
334          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
335    
336  curl  libmpeg3
337          - wget <unfixed> (embed)          - squeak-vm <unfixed> (embed)
338          NOTE: code for NTLM authentication  
339    libntlm
340            - wget <unfixed> (fork; bug #550436)
341            - curl <unfixed> (fork; bug #550437)
342            - cntlm <unfixed> (fork; bug #550438)
343    
344  uw-imap  uw-imap
345          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 225  uw-imap Line 348  uw-imap
348  imagemagick  imagemagick
349          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
350    
351    python-urlgrabber
352            - mercurial <unfixed> (embed; bug #531062)
353            - w3af <unfixed> (embed; bug #555372)
354            [experimental] - harvestman <unfixed> (embed; bug #555373)
355    
356    beautifulsoup
357            - python-mechanize <unfixed> (embed; bug #555349)
358            - zope2.11 <removed> (embed; bug #555350)
359            - twill <unknown> (embed)
360    
361  halibut  halibut
362          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
363    
364  libghttp  libghttp
365          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
366    
367  libsndfile  libsndfile
368          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
369    
370  glibmm2.4  glibmm2.4
371          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
372    
373  libgnomecanvasmm2.6  libgnomecanvasmm2.6
374          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
375    
376  libsigc++-2.0  libsigc++-2.0
377          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
378    
379  soundtouch  soundtouch
380          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
381    
382  libmms  libmms
383          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
384          - mimms <unfixed> (embed)          - mimms <unfixed> (embed)
385    
386  fckeditor  fckeditor
387          - knowledgeroot <unfixed> (embed)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
388          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
389          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
390          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
391            - request-tracker3.8 <unfixed> (embed)
392            - otrs2 <unfixed> (embed)
393    
394  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
395          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
396    
397  libphp-phpmailer  libphp-phpmailer
398          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
399            - mahara <unfixed> (embed)
400            - symfony <unfixed> (embed; bug #566778)
401            [etch] - phpgroupware <unfixed> (embed)
402            NOTE: phpgroupware-felamimail is only in etch
403            - egroupware <unfixed> (embed; bug #504283)
404            - glpi <unfixed>
405    
406  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
407          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
408    
409  bennu (not packaged in Debian)  giflib
410          - moodle <unfixed> (embed)          - wine <unfixed> (embed; bug #466181)
411    
412  smarty:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
413          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
414    
415    smarty
416            - moodle 1.8.2-2 (embed; bug #471158)
417            - gallery2 2.2.5-2 (embed; bug #471160)
418            - mahara 0.9.2-2 (embed; bug #471201)
419            - gosa 2.4beta1-1 (embed; bug #471200)
420    
421  TinyMCE  TinyMCE
422          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
423          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
424          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
425          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
426    
427  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
428          - scite <unfixed> (embed)          - scite <unfixed> (embed)
429          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
430          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
431          - geany <unfixed> (embed)          - geany <unfixed> (fork)
432            - anjuta <unfixed> (embed)
433    
434  libphp-adodb  libphp-adodb
435          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
436          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
437          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
438          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
439          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
440          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
441            - torrentflux 2.0beta1-2 (embed)
442          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
443          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
444          - cacti <unknown> (embed)          - cacti <unknown> (embed)
445          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
446          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
447            - gforge 4.7~rc2-6 (embed)
448            - mahara <unfixed> (embed)
449    
450  gzip  gzip
451          - linux-kernel <unfixed> (embed)          - linux-2.6 <unfixed> (embed) [lib/inflate.c]
         NOTE: lib/inflate.c  
452          - klibc <unfixed> (embed)          - klibc <unfixed> (embed)
453          NOTE: based on linux-kernel gzip code          NOTE: based on linux-kernel gzip code
454          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
455            - pristine-tar <unfixed> (modified-embed)
456            NOTE: compression code only, not uncompression
457    
458  neon  neon
459          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
460          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
461          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
462            - litmus <removed> (embed; #395875)
463          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
464          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
465          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
466          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
467    
468  libmodplug  libmodplug
469          - gst-plugins-bad0.10 <unfixed> (embed)          - gst-plugins-bad0.10 0.10.10.2-1 (embed)
470    
471  libvncserver  libvncserver
472          - vino <unfixed> (embed)          - vino <unfixed> (embed)
# Line 322  libvncserver Line 474  libvncserver
474  putty  putty
475          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
476    
477  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
478          - filezilla <unfixed>          - filezilla <unfixed>
479            - crystalspace <unfixed> (embed)
480            - libwfut <unfixed> (embed)
481            - rarian <unfixed> (embed)
482            - bulletml <unfixed> (embed)
483            - pokerth <unfixed> (embed)
484            - qutecom <unfixed> (embed)
485            - sofa-framework <unfixed> (embed)
486            - yate <unfixed> (embed)
487            - antigrav <unfixed> (embed)
488            - balder2d <unfixed> (embed)
489            - cal3d <unfixed> (embed)
490            - criticalmass <unfixed> (embed)
491            - ember <unfixed> (embed)
492            - epiphany <unfixed> (embed)
493            - gambit <unfixed> (embed)
494            - noiz2sa <unfixed> (embed)
495            - ogre <unfixed> (embed)
496            - opencity <unfixed> (embed)
497            - openmovieeditor <unfixed> (embed)
498            - pouetchess <unfixed> (embed)
499            - tecnoballz <unfixed> (embed)
500            - trigger-rally <unfixed> (embed)
501            - xmoto <unfixed> (embed)
502            - mapnik <unknown> (embed)
503            NOTE: uses a different XML parser by default
504            - rrootage 0.23a-6 <embed>
505            NOTE: links to libbulltetml
506            - boson <unknown> (embed)
507            NOTE: the embedded code is unused
508    
509  gv  gv
510          - evince <unfixed> (embed)          - evince <unfixed> (embed)
511          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
512          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
513    
514  libXbae  libXbae
515          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
516          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
517    
518    libgtkhtml
519            - claws-mail-extra-plugins <unfixed> (fork)
520    
521  libXaw  libXaw
522          [etch] - libpawlib2-lesstif          - paw <removed> (embed)
523          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
524          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
525    
526  libgd2  libgd2
527          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
528          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
529            - wml 2.0.11ds2-1 (embed)
530            - libwmf <unfixed> (embed)
531            NOTE: derived from gd 1.6.3
532            - texlive-bin <unfixed> (embed)
533    
534  rar  rar
535          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 356  mplayer (DirectMedia Object loader) Line 543  mplayer (DirectMedia Object loader)
543          NOTE: src/libw32dll/          NOTE: src/libw32dll/
544          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
545          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
546            - mplayer 1.0~rc2-20 (embed)
547    
548  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
549          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 364  fsplib (http://sourceforge.net/projects/ Line 552  fsplib (http://sourceforge.net/projects/
552          - gftp <unfixed> (embed)          - gftp <unfixed> (embed)
553          NOTE: lib/fsplib version 0.3          NOTE: lib/fsplib version 0.3
554    
555    sprng
556            - tree-puzzle <unfixed> (embed)
557    
558  librpcsecgss  librpcsecgss
559          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
560    
561  jasper  jasper
562          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
563    
564    libiris
565            - psi <unfixed> (embed)
566            - kdenetwork <unfixed> (embed)
567            NOTE: kopete embeds libiris but links dynamically to libidn
568            - kdegames <unfixed> (embed)
569            NOTE: ksirk/kde4
570    
571  libidn  libidn
572          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
573            - psi <unfixed> (embed)
574  liblua          NOTE: psi embeds libiris which embeds libidn
575          - monotone <unfixed> (embed)          - kdegames <unfixed> (embed)
576            NOTE: kdegames/kde4 embeds libiris which embeds libidn
577    
578    lua5.1
579            - monotone 0.43-1 (embed)
580            - nmap 5.00-1 (embed; bug #527997)
581            [lenny] - nmap <unfixed> (embed; bug #527997)
582            - ocropus <unfixed> (embed)
583            - enigma <unfixed> (embed)
584            NOTE: requires lua built with C++
585            - freeciv <unfixed> (embed)
586            - spring <unfixed> (embed)
587    
588  libbotan  libbotan
589          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
590    
591  NetXX  NetXX
592          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
593    
594  libgc  libgc
595          - mono <unfixed> (embed)          - mono <unfixed> (embed)
596    
597  lzma  lzma
598          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
599            - xz-utils <unfixed> (fork)
600    
601  lzo  lzo
602          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
603    
604    yassl
605            - mysql-dfsg-5.0 <unfixed> (embed)
606            - mysql-dfsg-5.1 <unfixed> (embed)
607    
608  pax code  pax code
609          - tar <unfixed> (embed)          - tar <unfixed> (embed)
610          - cpio <unfixed> (embed)          - cpio <unfixed> (embed)
# Line 399  pax code Line 612  pax code
612  t1lib  t1lib
613          - tetex-bin 2.0.2-1 (embed)          - tetex-bin 2.0.2-1 (embed)
614          - texlive-bin <unknown> (embed)          - texlive-bin <unknown> (embed)
615    
616    guichan
617            - boswars <unfixed> (embed)
618            NOTE: maintainer notified us, working on it
619    
620    tolua
621            - boswars <unfixed> (embed)
622            NOTE: maintainer notified us, working on it
623            NOTE: actually tolua++
624            - ocropus <unfixed> (embed)
625            NOTE: actually tolua++
626            - freeciv <unfixed> (embed)
627            NOTE: actually tolua++
628            - enigma <unfixed> (embed)
629    
630    asio-dev
631            - luxrender <removed> (embed)
632    
633    xine-lib
634            - vlc <unfixed> (embed)
635            NOTE: only parts included in modules/access/rtsp
636    
637    netpbm
638            - tcl8.3 <unfixed> (embed)
639            - tcl8.4 <unfixed> (embed)
640            - tcl8.5 <unfixed> (embed)
641            NOTE: generic/tkImgGIF.c
642    
643    tk8.5
644            - tk8.0 <removed> (old-version)
645            - tk8.3 <unfixed> (old-version)
646            - tk8.4 <unfixed> (old-version)
647            - perl-tk <unfixable> (fork)
648    
649    samba
650            - mc 2:4.6.2~git20080311-1 (embed)
651            NOTE: maintainer is aware of this, currently searching a solution
652    
653    plib1.8.4c2
654            - boson <unfixed> (fork)
655            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
656    
657    fribidi
658            - quesoglc <unfixed> (embed)
659            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
660    
661    glew
662            - quesoglc <unfixed> (embed; bug #489341)
663            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
664            - trigger 0.5.2.1-2 (embed)
665            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
666            - trigger-rally 0.5.2.1-2 (embed)
667            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
668    
669    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
670            - transcend <unfixed> (embed)
671            - cultivation <unfixed> (embed)
672            - passage <unfixed> (embed)
673            - gravitation <unfixed> (embed)
674    
675    tar
676            - libarchive <unfixed> (embed)
677            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
678    
679    cpio
680            - libarchive <unfixed> (embed)
681            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
682    
683    kde4libs
684            - kdelibs <unfixable> (old-version)
685    
686    webkit
687            - qt4-x11 <unfixed> (embed; bug #479851)
688            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
689            - kde4libs <unfixable> (fork)
690            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
691            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
692    
693    ftgl
694            - blender 2.46+dfsg-1 (embed)
695    
696    wv
697            - abiword <unfixed>
698    
699    qemu
700            - kvm <removed> (embed; bug #543159)
701            - qemu-kvm <unfixed> (embed; bug #560853)
702            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
703            - xen-3 3.4.2-2 (embed; bug #560856)
704            - xen-unstable <unfixed> (embed; bug #560856)
705    
706    vgabios
707            - kvm <removed> (embed; bug #489442)
708            - qemu-kvm <unfixed> (embed)
709    
710    bochs
711            - kvm <removed> (embed; bug #489442)
712            - qemu-kvm <unfixed> (embed)
713    
714    speex
715            - vorbis-tools <unfixed> (embed)
716            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
717            - gst-plugins-good0.10 <unfixed> (embed)
718            - xine-lib <unfixed> (embed)
719            - libfishsound <unfixed> (embed)
720            - libannodex <removed> (embed)
721            - vlc <unfixed> (embed)
722            - xmms-speex <unfixed> (embed)
723            - libsdl-sound1.2 <unfixed> (embed)
724            - sweep <unfixed> (embed)
725    
726    libreadline
727            - magic <itp> (old-version)
728    
729    opcode
730            - ode <unfixed> (embed)
731            NOTE: opcode is not a package in debian, it is just embedded
732            NOTE: http://www.codercorner.com/Opcode.htm
733    
734    gimpact
735            - ode <unfixed> (embed)
736            NOTE: gimpact is not a package in debian, it is just embedded
737            NOTE: http://gimpact.sf.net
738    
739    mochikit
740            - mahara <unfixed> (embed)
741            NOTE: they require extra patches, still unmerged upstream
742            - ntop <unfixed> (embed)
743            - coherence 0.6.2-1 (embed)
744            - paste <unfixed> (embed)
745            - turbogears <unfixed> (embed)
746            - plone3 <removed> (embed)
747            - xulrunner <unfixed> (embed)
748            - libjifty-plugin-chart-perl <unfixed> (embed)
749            - sabnzbdplus <unfixed> (embed)
750            - tgmochikit <unfixed> (embed)
751    
752    prototypejs
753            - netbeans-ide 6.0.1+dfsg-2 (embed)
754            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
755            - webcit <unfixed> (embed; bug #555219)
756            - asterisk 1:1.6.2.0~rc3-1 (embed)
757            - libjson-ruby 1.1.4-1 (embed; bug #555224)
758            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
759            - horde3 <unfixed> (embed)
760            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
761            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
762            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
763            - ebug-http <removed> (embed; bug #555236)
764            - libaws 2.7-1 (embed; bug #555222)
765            - phpgedview <removed> (embed)
766            - poker-network 1.7.6-1 (embed; bug #555238)
767            - rails 2.1.0-6 (embed)
768            - wordpress 2.5.0-2 (embed; bug #555243)
769            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
770            TODO: search through all of the other zope packages
771            - ampache 3.4.1-2 (embed)
772            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
773            - hobix 0.5~svn20070319-4 (embed; bug #555247)
774            - zabbix 1.6.6-4 (embed; bug #555250)
775            - chora2 <unfixed> (embed; bug #555253)
776            - gollem <unfixed> (embed; bug # 555254)
777            - jscropperui 1.2.1-1 (embed; bug #555257)
778            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
779            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
780            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
781            - activeldap <unfixed> (embed)
782            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
783            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
784            - otrs2 2.3.4-6 (embed; bug #555267)
785            - webcalendar 1.2~b1-2 (embed; bug #555269)
786            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
787            - jifty 0.90519-1 (embed; bug #555271)
788            - jquery 1.4-1 (embed; bug #555272)
789            - passenger 2.2.5debian1-1 (embed; bug #555273)
790            - plone3 <removed> (embed; bug #555275)
791            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
792            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
793            - xulrunner <unfixed> (embed)
794            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
795    
796    gdb
797            - insight <unfixed> (embed)
798    
799    e2fsprogs
800            - ldiskfsprogs <unfixable> (fork)
801    
802    quazip (not packaged in Debian)
803            - qcake <unfixed> (embed)
804            NOTE: starting with upstream version 0.6.4
805    
806    exo
807            - pcmanfm <unfixed> (embed; bug #499677)
808            NOTE: slightly modified source code
809    
810    java
811            - openjdk-6 <unfixed>
812            - sun-java5 <unfixed>
813            - sun-java6 <unfixed>
814    
815    libphp-snoopy
816            - ampache 3.4.1-2 (embed; bug #504169)
817            - gforge 4.6.99+svn6094-2 (embed)
818            - mahara 1.0.5-2 (embed; bug #504170)
819            - pixelpost 1.7.1-5 (embed; bug #504171)
820            - mediamate 0.9.3.6-5 (embed; bug #504172)
821            - opendb <removed> (embed; bug #504173)
822            [etch] - opendb <unfixed> (embed; bug #504173)
823            - wordpress 2.5.1-9 (embed; bug #443948)
824            - moodle <unfixed> (embed; bug #507185)
825            [etch] - phpgroupware <unfixed> (embed)
826            NOTE: phpgroupware-felamimail
827            - magpierss 0.72-3 (embed; bug #431089)
828    
829    jquery
830            - zekr <unfixed> (embed)
831            - wordpress <unknown> (embed)
832            - yocto-reader <unfixed> (embed)
833            - textpattern <unfixed> (embed)
834            - genshi 0.5.1-1 (embed)
835            NOTE: compressed file under examples/ dir
836            - prewikka <unfixed> (embed)
837            - libramaze-ruby <unfixed> (embed)
838            - drupal5 <unfixed> (embed)
839            - b2evolution <unfixed> (embed)
840            - wesnoth <unfixed> (embed)
841    
842    tablesorter (jquery plugin, not packaged yet)
843            - wesnoth <unfixed> (embed)
844    
845    kses
846            - wordpress <unfixed> (embed; bug #504242)
847            NOTE: their copy has all methods renamed to wp_<foo>
848            NOTE: kses isn't in Debian, RFP: #504240
849            - moodle <unfixed> (embed; bug #507185)
850            - egroupware <unfixed> (embed)
851    
852    magpierss
853            - wordpress <unfixed> (embed; bug #504242)
854            - moodle <unfixed>
855    
856    php-gettext
857            - wordpress 2.8.4-1 (embed; bug #504242)
858            - docbookwiki <unfixed> (embed)
859            - knowledgeroot 0.9.9.5-1
860            NOTE: non-free
861    
862    libphp-ixr (name may change, it is the Incutio XML-RPC)
863            - wordpress <unfixed> (embed; bug #504242)
864            NOTE: libphp-ixr isn't in Debian, RFP: #504236
865            - dokuwiki <unfixed> (embed)
866            - textpattern <unfixed> (embed)
867    
868    libphp-cas
869            - glpi <unfixed> (embed)
870            - moodle <unfixed> (embed; bug #505984)
871    
872    scriptaculous (prototype.js is among the embeds in the following)
873            - glpi <unfixed> (embed)
874            - libaws <unfixed> (embed; bug #555222)
875            - op-panel <unfixed> (embed)
876            - symfony <unfixed> (embed)
877            NOTE: maintainer says there are extra incompatible changes required
878            - pixelpost 1.7.1-6 (embed)
879            - webhelpers <unfixed> (embed)
880            - qwik <removed> (embed; bug #555241)
881            - smokeping <unfixed> (embed)
882            - turba2 <unfixed> (embed)
883            - typo3-src 4.2.3-1 (embed)
884            - request-tracker3.6 <unfixed> (embed)
885            - request-tracker3.8 <unfixed> (embed)
886            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
887            - wordpress 2.5.0-2 (embed)
888            - libhtml-prototype-perl 1.48-3 (embed)
889    
890    libmarkdown-php
891            - moodle <unfixed> (embed; bug #507185)
892            - pixelpost 1.7.1-6 (embed)
893    
894    php-openid
895            - wordpress-openid <itp> (embed)
896    
897    geshi
898            - dokuwiki 0.0.20080505-3.1 (embed)
899            - pgfouine 1.0-1.1 (embed)
900            - websvn 2.1.0-1 (embed)
901    
902    webcalendar
903            - gforge 4.7~rc2-6 (embed; bug #504758)
904    
905    libical
906            - kdepim <unknown> (fork)
907            NOTE: fixed at some point during 4.0
908            - kdepimlibs 4.2.0-1 (fork)
909            - claws-mail-extra-plugins <unfixed> (fork)
910    
911    harfbuzz
912            - qt4-x11 <unfixed> (embed)
913            - pango1.0 <unfixed> (embed)
914            - fontmatrix <unfixed> (embed)
915    
916    libzip
917            - php5 <unfixable> (modified-embed)
918            - odt2txt <unfixed> (embed; bug #523808)
919    
920    json.php (not packaged; should be replaced with php's built-in functions)
921            - moodle <unfixed>
922            - yui <unfixed>
923            - gallery2 <unfixed>
924            - dokuwiki <unfixed>
925            - typo3-src <unfixed>
926    
927    php-fpdf
928            - tcpdf <itp> (fork)
929            - moodle <unfixed>
930            - phpwiki <unfixed>
931            - egroupware <unfixed>
932            - ldap-account-manager <unfixed> (fork)
933    
934    tcpdf (itp: #495985)
935            - moodle <unfixed>
936            - phpmyadmin <unfixed>
937    
938    typo3
939            - moodle <unfixed>
940    
941    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
942            - moodle <unfixed>
943            - gosa <unfixed>
944    
945    php-ole (itp: #487558)
946            - moodle <unfixed>
947    
948    pieforms (http://www.catalyst.net.nz)
949            - mahara <unfixed>
950    
951    savant2 (http://phpsavant.com)
952            - egroupware <unfixed>
953    
954    rssparser (http://nwow.org)
955            - egroupware <unfixed>
956            - phpgroupware <unfixed>
957    
958    lcms
959            - openjdk-6 <unfixed> (fork)
960            - gimp 2.4.0~rc2-2
961    
962    libphp-phplayersmenu
963            - diogenes <unfixed>
964            - phpldapadmin <unfixed>
965    
966    libphp-pclzip
967            - docvert <unfixed>
968            - moodle <unfixed>
969            - egroupware <unfixed>
970    
971    libphp-simplepie
972            - dokuwiki <unfixed>
973            - wordpress <unfixed>
974    
975    libphp-jpgraph
976            - egroupware <unfixed>
977    
978    php-simpletest
979            - moodle <unfixed>
980    
981    libpng
982            - iceweasel <not-affected> (uses xulrunner)
983            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
984            - iceape 1.0.13~pre080614i-0etch1 (embed)
985            - xulrunner 1.9.0.13-1 (embed)
986            [lenny] - xulrunner 1.9.0.11-0lenny1
987            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
988            - gamera 3.2.3-1 (embed)
989            - freeimage <unfixed> (embed)
990            - tuxonice-userui (static)
991    
992    irssi
993            - silc-client <unfixed> (embed)
994            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
995    
996    extc
997            - mtasc <unfixed> (embed)
998            - haxe <unfixed> (embed)
999    
1000    swflib
1001            - mtasc <unfixed> (embed)
1002            - haxe <unfixed> (embed)
1003    
1004    libitext-java
1005            - bouncycastle 2.1.4-1 (embed)
1006    
1007    python-ply
1008            - pyke <unfixed> (embed; bug #555363)
1009            - pywbem 0.7.0-4 (embed; bug #555364)
1010            - sepolgen <unfixed> (embed; bug #555365)
1011            - zope-textindexng3 <unknown> (embed)
1012            - iceweasel <not-affected> (uses xulrunner)
1013            - xulrunner <unknown> (embed)
1014            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1015    
1016    libdumbnet (libdnet upstream)
1017            - nmap <unfixed> (fork)
1018    
1019    gcc-4.4
1020            - gcc-mingw32 <unfixed> (embed)
1021    
1022    camlimages
1023            - advi <unfixed> (static; bug #550441)
1024    
1025    memcached
1026            - memcachedb <unfixed> (embed)
1027    
1028    yajl
1029            - argyll <unfixed> (embed; bug #544223)
1030            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1031    
1032    nusoap
1033            - gforge 4.8.2-1 (embed)
1034            - ampache <unfixed> (embed)
1035            - poker-network <unfixed> (embed)
1036            - moodle <unfixed> (embed)
1037            NOTE: code is not used when running under php5 and soap is enabled
1038            - phpwiki <unfixed> (embed)
1039            - gallery2 <unfixed> (embed)
1040            - typo3-src <unfixed> (embed)
1041    
1042    libept
1043            - adept <unfixed> (embed; bug #540649)
1044    
1045    libvorbis
1046            - iceweasel <not-affected> (uses xulrunner)
1047            - xulrunner <unfixed> (embed; bug #540959)
1048            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1049            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1050            - iceape <unfixed> (embed)
1051            [etch] - iceape <not-affected> (introduced in 2.0)
1052            [lenny] - iceape <not-affected> (introduced in 2.0)
1053    
1054    cairo
1055            - iceweasel <not-affected> (uses xulrunner)
1056            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1057    
1058    liboggz
1059            - iceweasel <not-affected> (uses xulrunner)
1060            - xulrunner <unfixed> (embed; bug #540959)
1061            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1062            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1063            - iceape <unfixed> (embed)
1064            [etch] - iceape <not-affected> (introduced in 2.0)
1065            [lenny] - iceape <not-affected> (introduced in 2.0)
1066    
1067    liboggplay
1068            - iceweasel <not-affected> (uses xulrunner)
1069            - xulrunner <unfixed> (embed; bug #540959)
1070            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1071            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1072            - iceape <unfixed> (embed)
1073            [etch] - iceape <not-affected> (introduced in 2.0)
1074            [lenny] - iceape <not-affected> (introduced in 2.0)
1075    
1076    php-net-dnsbl
1077            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1078    
1079    php-onyx-rss
1080            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1081    
1082    php-text-wiki
1083            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1084    
1085    php-xml-rpc
1086            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1087    
1088    polarssl (does not have a shared library)
1089            - pdkim <itp> (embed; bug #543150)
1090            - xyssl <unfixed> (old-version)
1091    
1092    pidgin (libpurple)
1093            - gaim <removed> (old-version)
1094            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1095    
1096    icu
1097            - webkit 1.0.1-1 (embed; bug #547214)
1098            - texlive-bin <unfixed> (fork)
1099            NOTE: texlive upstream working with icu upstream to merge their changes
1100    
1101    cyrus-imapd-2.2
1102            - kolab-cyrus-imapd <unfixed> (fork)
1103            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1104    
1105    python-cxx-dev
1106            - freecad 0.9.2646.3-1 (embed; bug #547936)
1107    
1108    zipios++
1109            - freecad 0.9.2646.3-1 (embed; bug #547941)
1110            - enigma 0.92.3-3 (embed)
1111            NOTE: likely fixed earlier, marking etch's version as fixed
1112    
1113    linux-2.6
1114            - kvm <removed> (embed; bug #549973) [./kernel/*]
1115            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1116            - kernel-source-2.6.8 <removed> (old-version)
1117            - kernel-source-2.4.27 <removed> (old-version)
1118            - kernel-source-2.4.24 <removed> (old-version)
1119            - kernel-source-2.2.25 <removed> (old-version)
1120            - kernel-source-2.2.20 <removed> (old-version)
1121    
1122    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1123            - kvm <removed> (embed) [./libfdt/*]
1124            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1125    
1126    qweb (not packaged)
1127            - ajaxterm <unfixed>
1128    
1129    opensaml2
1130            - opensaml <removed> (old-version)
1131    
1132    shibboleth-sp2
1133            - shibboleth-sp <removed> (old-version)
1134    
1135    tuxonice-userui
1136            - suspend2-userui <removed> (old-version)
1137    
1138    expat
1139            - w3c-libwww <removed> (embed; bug #551941)
1140            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1141            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1142            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1143            - python2.4 <unfixable> (embed; bug #553403)
1144            - python-4suite <unfixed> (embed; bug #516935)
1145            - wxwindows2.4 <removed> (embed)
1146            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1147            - wxwidgets2.8 2.8.10.1-2 (embed)
1148            - celementtree 1.0.5-8 (embed)
1149            NOTE: Maybe that was fixed even earlier
1150            - audacity 1.3.2-1 (embed)
1151            - matanza <unfixed> (embed)
1152            - tdom 0.8.3~20080525-1 (embed)
1153            - udunits 2.1.8-4 (embed)
1154            - apr-util 1.2 (embed)
1155            - ayttm <unfxed> (embed; bug #561006)
1156            - cableswig <unfixed> (embed)
1157            - cadaver <unfixed> (embed)
1158            - cmake 2.6.0-6 (embed)
1159            - coin3 <unfixed> (embed)
1160            - gdcm 2.0.14-2 (embed)
1161            - ghostscript 8.71~dfsg-2 (embed)
1162            - grmonitor <removed> (embed)
1163            - iceape <unfixed> (embed)
1164            - insighttoolkit 3.16.0-1 (embed)
1165            NOTE: insighttoolkit might've been fixed earlier
1166            - libparagui1.1 1.0.2-1 (embed)
1167            - paraview 3.6.2-1 (embed)
1168            - poco 1.3.6p1-1 (embed)
1169            - simgear <unfixed> (embed)
1170            - sitecopy 1:0.16.0-1
1171            - smart <unfixed> (embed)
1172            NOTE: smart embeds celementree, and it includes expat
1173            - swish-e <not-affected> (Linked against libxml, which is used instead)
1174            - tla 1.3.5+dfsg-15 (embed)
1175            - vtk 4.1.20030227-1 (embed)
1176            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1177            - xmlrpc-c <unfixed> (embed)
1178            - iceweasel <unfixed> (embed)
1179            - kompozer <unfixed> (embed)
1180            - vxl 1.13.0-2 (embed)
1181            - xulrunner <unfixed> (embed)
1182            - apache2 2.2 (embed)
1183            - texlive-bin <not-affected> (Embedded code not compiled in)
1184            - vnc4 <unfixed> (embed)
1185            - xotcl 1.6.6-1 (embed)
1186    
1187    xerces-c
1188            - xerces-c2 <unfixed> (old-version)
1189            - xerces27 <removed> (old-version)
1190    
1191    md5 (RSA's version; not the gnu version provided by coreutils)
1192            - w3c-libwww <removed> (embed; bug #551942)
1193            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1194    
1195    libparagui1.1
1196            - asc <unfixable> (fork)
1197    
1198    enet
1199            - sauerbraten <unfixed> (embed; #497194)
1200    
1201    eglibc
1202            - glibc <removed> (old-version)
1203    
1204    galib
1205            - gamera 3.2.3-1 (embed)
1206    
1207    configobj
1208            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1209            - elisa <unfixed> (embed; bug #555337)
1210            - gaupol <unfixed> (embed; bug #555338)
1211            - ipython <unfixed> (embed; bug #555339)
1212            - pida <unfixed> (embed; bug #555340)
1213            - psychopy <unfixed> (embed; bug #555341)
1214            - rest2web <unfixed> (embed; bug #555342)
1215            - auth2db <unknown> (embed)
1216            - dynagen <unknown> (embed)
1217            - iceweasel <unknown> (embed)
1218            - sabnzbdplus <unknown> (embed)
1219            - xulrunner <unknown> (embed)
1220            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1221    
1222    python-clientform
1223            - bibus <unfixed> (embed; bug #555332)
1224            - zope2.10 <unfixed> (embed; bug #555333)
1225            - zope2.11 <removed> (embed; bug #555334)
1226            - python-mechanize <unknown> (embed)
1227            - twill <unknown> (embed)
1228    
1229    python-mechanize
1230            - zope2.10 <unfixed> (embed; bug #555337)
1231            - zope2.11 <removed> (embed; bug #555338)
1232            - twill <unknown> (embed; bug #555339)
1233    
1234    pexpect
1235            - duplicity 0.6.06-1 (embed; bug #555361)
1236            - hplip <unfixed> (embed; bug #555362)
1237            - smart <unfixed> (embed; bug #555363)
1238    
1239    pyparsing
1240            - bauble <unfixed> (embed; bug #555366)
1241            - boa-constructor 0.6.1-8 (embed; bug #555367)
1242            - calibre <unfixed> (embed; bug #555368)
1243            - matplotlib <unfixed> (embed; bug #531024)
1244            - zhpy 1.7.3.1-1 (embed; bug #555370)
1245            - polybori <unknown> (embed)
1246            - python-whoosh <unknown> (embed)
1247            - twill <unknown> (embed)
1248            - zope-textindexng3 <unknown> (embed)
1249    
1250    python-pysqlite2
1251            - python2.4 <unfixed> (embed; bug #553403)
1252            - python2.5 <unfixed> (embed; bug #553403)
1253    
1254    celementtree
1255            - python2.5 <unfixed> (embed)
1256            - smart <unfixed> (embed)
1257    
1258    elementtree
1259            - python2.5 <unfixed> (embed)
1260            - python2.6 <unfixed> (embed)
1261            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1262            - gedit 2.28.2-1 (embed; bug #555344)
1263            - smart <unfixed> (embed)
1264            - solfege <unfixed> (embed; bug #555345)
1265            - w3af <unfixed> (embed; bug #555346)
1266            - python-qt4 <unknown> (embed)
1267            - sphinx <unknown> (embed)
1268            - python-nltk <itp> (embed)
1269    
1270    python2.5
1271            - python2.4 <unfixed> (old-version)
1272            - jython <unfixed> (embed)
1273            NOTE: embeds many stdlib modules
1274            - python-django <unfixed> (embed; bug #555419)
1275            NOTE: embeds stdlib modules: doctest, decimal
1276            - gamera 3.2.3-1 (embed)
1277            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1278            - boa-constructor <unfixed> (embed; bug #555426)
1279            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1280            - nicotine <unfixed> (embed; bug #555427)
1281            NOTE: embeds stdlib modules: ConfigParser
1282            - museek+ <unfixed> (embed; bug #555428)
1283            NOTE: embeds stdlib modules: ConfigParser
1284            - vegastrike-data <unfixed> (embed)
1285            NOTE: embeds many stdlib modules
1286            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1287            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1288            - config-manager <unfixed> (embed; bug #555423)
1289            NOTE: embeds stdlib modules: optparse
1290            - jhbuild 2.28.0-1 (embed; bug #555421)
1291            NOTE: embeds stdlib modules: optparse, subprocess
1292            - smart <unfixed> (embed; bug #555432)
1293            NOTE: embeds stdlib modules: optparse
1294            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1295            NOTE: embeds stdlib modules: doctest
1296            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1297            NOTE: embeds stdlib modules: doctest
1298            - distribute <unfixed> (embed)
1299            NOTE: embeds stdlib modules: doctest
1300            - python-setuptools <unfixed> (embed; bug #555435)
1301            NOTE: embeds stdlib modules: doctest
1302            - zope.testing <unfixed> (embed; bug #555436)
1303            NOTE: embeds stdlib modules: doctest
1304            - translate-toolkit <unfixed> (embed; bug #555422)
1305            NOTE: embeds stdlib modules: textwrap, contextlib
1306            - libtpclient-py <unfixed> (embed; bug #555424)
1307            NOTE: embeds stdlib modules: subprocess
1308            - grass <unfixed> (embed; bug #555425)
1309            NOTE: embeds stdlib modules: subprocess
1310            - coherence <unfixed> (embed; bug #555429)
1311            NOTE: embeds stdlib modules: uuid
1312            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1313            NOTE: embeds stdlib modules: uuid
1314            - setroubleshoot <unfixed> (embed; bug #555431)
1315            NOTE: embeds stdlib modules: uuid
1316            - linkchecker <unfixed> (embed; bug #555414)
1317            NOTE: embeds msgfmt.py script
1318            - imdbpy <unfixed> (embed)
1319            NOTE: embeds msgfmt.py script
1320            - kiwi <unfixed> (embed)
1321            NOTE: embeds msgfmt.py script
1322            - moin <unfixed> (embed)
1323            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1324            - plone3 <removed> (embed)
1325            NOTE: embeds msgfmt.py script
1326            - roundup <unfixed> (embed)
1327            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1328            - rednotebook <unfixed> (embed; bug #555415)
1329            NOTE: embeds msgfmt.py script
1330            - turbogears <unfixed> (embed)
1331            NOTE: embeds msgfmt.py script
1332            - elisa <unfixed> (embed)
1333            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1334            - calibre <unfixed> (embed)
1335            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1336            - mailman 1:2.1.13-1 (embed; #555416)
1337            NOTE: embeds msgfmt.py script
1338            - python-docutils <unknown> (embed)
1339            NOTE: embeds stdlib modules: optparse, textwrap
1340            - python-imaging <unknown> (embed)
1341            NOTE: embeds stdlib modules: doctest
1342            - python-mechanize <unknown> (embed)
1343            NOTE: embeds stdlib modules: doctest
1344            - twill <unknown> (embed)
1345            NOTE: embeds stdlib modules: subprocess
1346            - zeroc-ice <unknown> (embed)
1347            NOTE: embeds stdlib modules: subprocess
1348            - wxwidgets2.8 <unknown> (embed)
1349            NOTE: embeds stdlib modules: subprocess
1350            - cycle <unknown> (embed)
1351            NOTE: embeds msgfmt.py script
1352            - deluge <unknown> (embed)
1353            NOTE: embeds msgfmt.py script
1354            - opendict <unknown> (embed)
1355            NOTE: embeds msgfmt.py script
1356            - openerp-client <unknown> (embed)
1357            NOTE: embeds msgfmt.py script
1358            - rapidsvn <unknown> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - wammu <unknown> (embed)
1361            NOTE: embeds msgfmt.py script
1362            - gaphor <unknown> (embed)
1363            NOTE: embeds msgfmt.py script
1364            - pida <unknown> (embed)
1365            NOTE: embeds msgfmt.py script
1366            - python-formencode <unknown> (embed)
1367            NOTE: embeds msgfmt.py script
1368            - duplicity <unfixed> (embed)
1369            NOTE: embeds stdlib module: urlparse, tarfile
1370            - pygopherd <unfixed> (embed)
1371            NOTE: embeds stdlib module: zipfile
1372    
1373    argparse
1374            - twill <unfixed> (embed; bug #555347)
1375            - ipython <unfixed> (embed; bug #555348)
1376    
1377    coherence
1378            - elisa <unfixed> (embed; bug #555335)
1379    
1380    simpletal
1381            - plastex <unfixed> (embed; bug #555371)
1382    
1383    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1384            - postr <unfixed> (embed)
1385            - elisa <unfixed> (embed)
1386    
1387    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1388            - apertium-tolk <unfixed> (embed)
1389            - ipython <unfixed> (embed)
1390            - virtaal <unfixed> (embed)
1391    
1392    distribute
1393            - setuptools <removed> (old-version)
1394    
1395    rails
1396            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1397            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1398            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1399            - thin <unfixed> (embed) [./spec/rails_app/*]
1400            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1401            NOTE: be dangerous if developers are naively basing their code off of the examples
1402            NOTE: prototype.js is among the example files
1403    
1404    lucene2 (prototype.js is among the embeds in the following)
1405            - lucene <unfixed> (old-version)
1406            - pylucene <unfixed> (embed)
1407            - libpdfbox-java <unfixed> (embed)
1408            - libfontbox-java <unfixed> (embed)
1409            - libjempbox-java <unfixed> (embed)
1410            - solr <unfixed> (embed)
1411    
1412    unicode-data
1413            - syslinux <unfixed> (embed)
1414            - camomile <unfixed> (embed)
1415            - fribidi <unfixed> (embed)
1416            - m17n-db <unfixed> (embed)
1417            - sbcl <unfixed> (embed)
1418            - heimdal <unfixed> (embed)
1419            - icu <unfixed> (embed)
1420            - icu4j <unfixed> (embed)
1421            - krb5 <unfixed> (embed)
1422            - moodle <unfixed> (embed)
1423            - openldap <unfixed> (embed)
1424            - pike7.6 <unfixed> (embed)
1425            - samba <unfixed> (embed)
1426            - samba4 <unfixed> (embed)
1427            - cmucl <unfixed> (embed)
1428            - typo3-src <unfixed> (embed)
1429            - mauve <unfixed> (embed)
1430            - texlive-bin <unfixed> (embed)
1431            - ypsilon <unfixed> (embed)
1432            - jeuclid <unfixed> (embed)
1433            - charmap.app <unfixed> (embed)
1434            - clisp <unfixed> (embed)
1435            - gnulib <unfixed> (embed)
1436            - opensrs-client <unfixed> (embed)
1437            - saxonb <unfixed> (embed)
1438            - rails <unfixed> (embed)
1439    
1440    feedparser
1441            - rawdog <unfixed> (embed; bug #383422)
1442            - miro <unfixed> (embed; bug #555351)
1443            - calibre <unfixed> (embed; bug #555352)
1444            - freevo <unfixed> (embed; bug #555353)
1445            - pida <unfixed> (embed; bug #555354)
1446            - planet-venus <unfixed> (embed; bug #555355)
1447            - plone3 <removed> (embed; bug #555356)
1448            - exaile 0.2.14+debian-1 (embed)
1449            - screenlets 0.1.2-3 (embed)
1450            NOTE: included twice
1451    
1452    agg:
1453            - matplotlib <unfixed> (embed: bug #377271)
1454            - contextfree <unfixed> (embed)
1455            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1456            - exactimage <unfixed> (embed)
1457            - python-enable <unfixed> (embed)
1458            - mapnik 0.5.1-3 (embed)
1459            NOTE: links statically to agg, but shared library is not available (bug #377271)
1460    
1461    vtk
1462            - paraview <unfixable> (embed; bug #495426)
1463    
1464    txt2tags
1465            - rednotebook <unfixed> (embed)
1466    
1467    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1468            - gajim <unfixed> (embed)
1469            - emesene <unfixed> (embed)
1470            - convirt <unfixed> (embed)
1471            - pida <unfixed> (embed)
1472            - rednotebook <unfixed> (embed)
1473    
1474    horde3 (prototype.js is among the embeds in the following)
1475            - mnemo2 <unfixed> (embed)
1476            - nag2 <unfixed> (embed)
1477            - wordpress <unfixed> (embed)
1478            NOTE: Text_Diff (wp-includes/Text/Diff*)
1479    
1480    cimg
1481            - gmic <itp> (embed)
1482    
1483    mootools
1484            - gmic <itp> (embed)
1485    
1486    openldap
1487            - openldap2.3 <removed> (old-version)
1488    
1489    grub2
1490            - grub <unfixed> (old-version)
1491    
1492    gnupginterface
1493            - duplicity <unfixed> (embed)
1494    
1495    python-dateutil
1496            - awn-extras-applets <unfixed> (embed)
1497            - matplotlib <unknown> (embed)
1498    
1499    cups
1500            - cupsys <removed> (old-version)
1501    
1502    yui
1503            - bcfg2 <not-affected> (present in source but not included in any binary files)
1504            - serendipity 1.5.3-1 (embed; bug #557746)
1505            - moodle 1.8.2.dfsg-5 (embed)
1506            - jifty 0.91117-1 (embed; bug #557748)
1507            - webgui 7.7.26-1 (embed)
1508            - loggerhead 1.17-1 (embed)
1509    
1510    quake3 (vanilla source not packaged in debian)
1511            - openarena <unfixable> (fork)
1512    
1513    quake2 (vanilla source not packaged in debian)
1514            - alien-arena <unfixable> (fork)
1515            - warsow <unfixable> (fork)
1516    
1517    libtheora
1518            - iceweasel <not-affected> (uses xulrunner)
1519            - xulrunner <unfixed> (embed; bug #540959)
1520            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1521            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1522            - iceape <unfixed> (embed; bug #559276)
1523            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1524            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1525    
1526    dtoa
1527            - bfilter <unfixed> (embed)
1528            - cacao <unfixed> (embed)
1529            - cdrdao <unfixed> (embed)
1530            - classpath <unfixed> (embed)
1531            - freej <unfixed> (embed)
1532            - iceape <unfixed> (embed)
1533            - iceweasel <unfixed> (embed)
1534            - jscoverage <unfixed> (embed)
1535            - kde4libs <unfixed> (embed)
1536            - kdelibs <unfixed> (embed)
1537            - kompozer <unfixed> (embed)
1538            - libv8 <unfixed> (embed)
1539            - mono <unfixed> (embed)
1540            - newlib <unfixed> (embed)
1541            - nspr <unfixed> (embed)
1542            - php5 <unfixed> (embed)
1543            - polyml <unfixed> (embed)
1544            - qt4-x11 <unfixed> (embed)
1545            - rhino <unfixed> (embed)
1546            NOTE: code translated to Java
1547            - ruby1.8 <unfixed> (embed)
1548            - ruby1.9 <unfixed> (embed)
1549            - ruby1.9.1 <unfixed> (embed)
1550            - sdd <unfixed> (embed)
1551            - sfind <unfixed> (embed)
1552            - star <unfixed> (embed)
1553            - tinymux <unfixed> (embed)
1554            - virtualbox-ose <unfixed> (embed)
1555            - webkit <unfixed> (embed)
1556            - xulrunner <unfixed> (embed)
1557    
1558    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1559            - firegpg <unfixed> (embed)
1560            - enigmail <unfixed> (embed)
1561    
1562    ptmalloc (not packaged in Debian)
1563            - crystalspace <unfixed> (embed)
1564            - qt4-x11 <unfixed> (embed)
1565    
1566    svgalib
1567            - usplash <unfixed> (embed)
1568    
1569    bogl
1570            - usplash <unfixed> (embed)
1571    
1572    taglist
1573            - usplash <unfixed> (embed)
1574    
1575    portaudio
1576            - audacity <unfixed> (embed; bug #323711)
1577    
1578    nyquist
1579            - audacity <unfixed> (embed)
1580            NOTE: embeds a forked nyquist with support for a shared library
1581    
1582    vamp-plugin-sdk
1583            - audacity <unfixed> (embed)
1584    
1585    wordpress
1586            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1587            - wordpress-mu <removed> (fork)
1588    
1589    php5
1590            - php4 <removed> (old-version)
1591    
1592    classpath
1593            - libgnucrypto-java <removed> (embed; bug #559788)
1594    
1595    libtool
1596            - apr <unfixed> (static; bug #489625)
1597            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1598            - arts <unfixed> (embed)
1599            - bochs 2.4.2-1 (embed; bug #560884)
1600            - camserv <unfixed> (embed)
1601            - collectd 4.8.2-1 (embed)
1602            - courier-authlib 0.58-4 (embed)
1603            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1604            - cvsnt 2.5.04.3236-1.2 (embed)
1605            - dico <not-affected> (Uses the system copy of ltdl)
1606            - freeradius 0.1+20010527-1 (embed)
1607            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1608            - ggobi 2.1.9~20091212-1 (embed)
1609            - glame 2.0.1-4 (embed)
1610            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1611            - gnash 0.8.7-2 (embed)
1612            - gnu-smalltalk <unfixed> (embed; bug #566777)
1613            - google-gadgets 0.10.5-0.3 (embed)
1614            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1615            - graphicsmagick 1.3.5-6 (embed)
1616            - graphviz 2.8-3 (embed)
1617            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1618            - guile-1.6 1.6.8-7 (embed)
1619            - hamlib <unfixed> (embed)
1620            - hercules 3.06-1.2 (embed)
1621            - jags 1.0.4-3 (embed; bug #560864)
1622            - kdelibs <unfixed> (embed)
1623            - libannodex <removed> (embed)
1624            - libextractor 0.5.23+dfsg-4 (embed)
1625            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1626            - libtunepimp 0.5.3-7.3 (embed)
1627            - mp4h 1.3.1-4.1 (embed)
1628            - naim <removed> (embed)
1629            - parser-mysql <unfixed> (embed)
1630            - pinball 0.3.1-11 (embed)
1631            - redland <unfixed> (embed)
1632            - siproxd <unfixed> (embed)
1633            - ski <unfixed> (embed)
1634            - synfig 0.62.00-1 (embed)
1635            - unixodbc 2.2.4-5 (embed)
1636            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1637            - clamav 0.95+dfsg-1 (embed)
1638            - imagemagick 6:6.2.3.1-1 (embed)
1639            - hypre 2.4.0b-5 (embed)
1640            - lam <unfixed> (embed)
1641            - openmpi <unfixable> (embed; bug #559386)
1642            - parser <unfixed> (embed)
1643            - pdsh 2.18-5 (embed; bug #560892)
1644            - sbnc 1.2-8 (embed)
1645            - sdcc <unfixed> (embed)
1646            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1647            - proftpd-dfsg <unfixed> (embed; bug #561748)
1648            - babel 1.4.0.dfsg-5 (embed)
1649            - libprelude 0.9.14-2 (embed)
1650            - heartbeat 2.1.4-7 (embed)
1651            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1652            NOTE: might've been fixed earlier
1653            - gcc-* <unknown> (embed)
1654    
1655    ocamlgsl
1656            - orpie 1.5.1-7.1 (embed; bug #550058)
1657    
1658    xdotool
1659            - keynav <unfixed> (embed; bug #560103)
1660    
1661    bulletphysics (not packaged; http://www.bulletphysics.org/)
1662            - supertuxkart <unfixed> (embed)
1663            - blender <unfixed> (embed)
1664    
1665    ghostscript
1666            - gs-gpl <removed> (old-version)
1667    
1668    icedove
1669            - thunderbird <removed> (old-version)
1670    
1671    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1672            - jquery <unfixed> (embed)
1673    
1674    sed
1675            - ssed <unfixed> (fork)
1676    
1677    phpatomlib (http://code.google.com/p/phpatomlib)
1678            - wordpress <unfixed> (embed)
1679    
1680    Services_JSON (http://pear.php.net/package/Services_JSON)
1681            - wordpress <unfixed> (embed)
1682    
1683    phpass (http://www.openwall.com/phpass/)
1684            - gallery2 <unfixed> (embed)
1685            - wordpress <unfixed> (embed)
1686            - typo3-src <unfixed> (modified-embed)
1687            NOTE: file refers to drupal, maybe there's a copy somewhere there
1688            NOTE: a copyright owner search didn't match anything
1689            - libauthen-passphrase-perl <unfixable> (fork)
1690            NOTE: perl implementation of phpass
1691    
1692    squirrelmail
1693            - wordpress <unfixed> (embed)
1694            NOTE: class-pop3.php
1695    
1696    ezSQL (http://www.woyano.com/jv/ezsql)
1697            - wordpress <unfixable> (fork)
1698            NOTE: wp-db.php
1699    
1700    Diff.php (Clay Loveless' version/killersoft.com)
1701            - php-versioncontrol-svn <unfixed>
1702    
1703    libm (provided by libc)
1704            - spring <unfixed> (embed)
1705            NOTE: embedded by embedded copy of streflop
1706            - aide <unfixed> (static)
1707            - busybox <unfixed> (static)
1708            - mindi-busybox <unfixed> (static)
1709            - qemu <unfixed> (static)
1710            NOTE: qemu-user-static
1711            - tuxonice-userui <unfixed> (static)
1712            - zsh <unfixed> (static)
1713            NOTE: zsh-static
1714    
1715    streflop
1716            - spring <unfixed> (embed)
1717    
1718    minizip
1719            - spring <unfixed> (embed)
1720    
1721    oscpack
1722            - spring <unfixed> (embed)
1723    
1724    hpiutil2
1725            - spring <unfixed> (embed)
1726    
1727    p7zip
1728            - spring <unfixed> (embed)
1729    
1730    pythonqt (doesn't seem to be python-qtN, unknown source)
1731            - fontmatrix <unfixed> (embed)
1732            - elmerfem <unfixed> (embed)
1733    
1734    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1735            - docvert <unfixed> (embed)
1736            - jifty <unfixed> (embed)
1737            - kdenetwork <unfixed> (embed)
1738            - mediatomb <unfixed> (embed)
1739            - plastex <unfixed> (embed)
1740            - plone3 <removed> (embed)
1741            - python-chaco <unfixed> (embed)
1742            - python-docutils <unfixed> (embed)
1743            - s5 <unfixed> (embed)
1744            - zope2.10 <unfixed> (embed)
1745            - zope2.11 <removed> (embed)
1746            - cython <not-affcted> (embed)
1747            NOTE: part of documentation, which is not installed into the binary package
1748    
1749    python-docutils
1750            - zope2.10 <unfixed> (embed)
1751            - zope2.11 <removed> (embed)
1752    
1753    tesseract
1754            - ocropus <unfixed> (static)
1755    
1756    antlr
1757            - kdevelop <unfixed> (embed)
1758    
1759    libxerces2
1760            - openjdk-6 <unfixed> (embed)
1761    
1762    kfreebsd-8
1763            - kfreebsd-7 <unfixed> (old-version)
1764            - kfreebsd-6 <removed> (old-version)
1765    
1766    ruby1.9.1
1767            - ruby1.9 <unfixed> (old-version)
1768            - ruby1.8 <unfixed> (old-version)
1769    
1770    maildrop
1771            - courier <unfixed> (embed) [./maildrop]
1772    
1773    glee
1774            - warzone2100 <unfixed> (embed)
1775    
1776    phing
1777            - symfony <unfixed> (embed)
1778    
1779    pake
1780            - symfony <unfixed> (embed)
1781    
1782    propel
1783            - symfony <unfixed> (embed)
1784    
1785    creole
1786            - symfony <unfixed> (embed)
1787    
1788    hfsutils
1789            - cdrkit <unfixed> (embed; bug #570187)
1790            NOTE: embeds hfsutils code in genisoimage
1791    
1792    cdrkit
1793            - grub2 <unfixed> (embed; bug #570156)
1794            NOTE: genisoimage imported into grub-mkisofs
1795    
1796    kdebase-workspace
1797            - kdebase <unfixed> (old-version)
1798    
1799    file
1800            - php5 <unfixable> (modified-embed)
1801            [lenny] - php5 <not-affected>
1802    
1803    cdb
1804            - php5 <unfixed> (embed)
1805    
1806    libmbfl (itp: #570708)
1807            - php5 <unfixed> (embed)
1808            NOTE: PHP is actually the current upstream, ITP is of that code
1809    
1810    libonig
1811            - php5 5.3.2-1 (embed)
1812    
1813    xmlrpc-epi
1814            - php5 <unfixed> (embed)
1815    
1816    swt-gtk
1817            - eclipse <unfixed> (embed; bug #538808)
1818    
1819    txt2html
1820            - wml 2.0.11ds2-1 (embed)
1821    
1822    ca-certificates
1823            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1824    
1825    openexr
1826            - freeimage <unfixed> (embed)
1827    
1828    libmng
1829            - freeimage <unfixed> (embed)
1830    
1831    openjpeg
1832            - freeimage <unfixed> (embed)
1833    
1834    libjpeg6b
1835            - freeimage <unfixed> (embed)
1836    
1837    libjpeg (don't know what exact version)
1838            - dcmtk <unfixed>
1839            - gdcm <unfixed>
1840            - insighttoolkit <unfixed>
1841            - openarena <unfixed>
1842            - outguess <unfixed>
1843            - squeak-vm <unfixed> (embed)
1844            - tremulous <unfixed>
1845            - tuxonice-userui <unfixed> (static)
1846            - fpc <unfixed> (static)
1847            - lazarus <unfixed> (static)
1848            NOTE: inherited from fpc, see #472304
1849            - mseide-msegui <unfixed> (static)
1850            NOTE: inherited from fpc, see #472304
1851            - easymp3gain <unfixed> (static)
1852            NOTE: inherited from fpc, see #472304
1853            - winff <unfixed> (static)
1854            NOTE: inherited from fpc, see #472304
1855            - texlive-bin <unfixed> (embed)
1856    
1857    libfile-copy-recursive-perl
1858            - r-base <unfixed> (embed; bug #577427)
1859            - r-base-core-ra <unfixed> (embed; bug #577429)
1860    
1861    delimmatch
1862            - r-base <unfixed> (embed; bug #577433)
1863            - r-base-core-ra <unfixed> (embed; bug #577434)
1864    
1865    libsmf (ITP: #572558)
1866            - denemo <unfixed> (embed)
1867            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1868    
1869    libselinux
1870            - dpkg 1.15.6 (static)
1871    
1872    dvipng
1873            - texlive-bin <unfixed> (embed)
1874    
1875    dvipdfmx
1876            - texlive-bin <unfixed> (embed)
1877    
1878    lcdf-typetools
1879            - texlive-bin <unfixed> (embed)
1880    
1881    tex4ht
1882            - texlive-bin <unfixed> (embed)
1883    
1884    freetype
1885            - texlive-bin <unfixed> (embed)
1886    
1887    freetype2
1888            - texlive-bin <unfixed> (embed)
1889    
1890    silgraphite
1891            - texlive-bin <unfixed> (embed)
1892    
1893    unzip
1894            - texlive-bin <unfixed> (embed)
Legend:
Removed from v.7924  
changed lines
  Added in v.14700
  ViewVC Help
Powered by ViewVC 1.1.5