/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 9382 by nion, Sun Jul 20 17:58:09 2008 UTC revision 14964 by nion, Tue Jul 6 09:51:08 2010 UTC
# Line 10  Format: Line 10  Format:
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>,  status: version number fixing the embedded copy
14          <itp> or <unknown> if the version number can not be determined          <unfixed> if the issue is not yet fixed
15          <unfixable> for unavoidable cases (e.g., forks that add real value)          <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
21        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
22        fork (the package is not just embedding code but it is a fork and        modified-embed (embeds a code copy that differs from upstream code)
23              thus might share parts of the source code)        fork (a full-blown fork of another source package)
24        old-version (the package is an older version of essentially        old-version (an older version of essentially the same code)
                    the same code)  
25    
26  The srcpkg might be some string to identify the code if there is no  The srcpkg might be some string to identify the code if there is no
27  specific source package.  specific source package.
# Line 27  Everything up to the next line is ignore Line 30  Everything up to the next line is ignore
30  ---BEGIN  ---BEGIN
31  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
32          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
33          - pdftohtml <unknown>          - pdftohtml <unknown>
34          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
35          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
36          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
37          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
         NOTE: the kpdf replacement in KDE 4 is using poppler  
38          - texlive-base 3.0-12 (embed)          - texlive-base 3.0-12 (embed)
39          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
40          NOTE: links to poppler          - koffice 1:2.0.0-1 (embed; bug #436163)
         - koffice <unfixed> (embed; bug #436163)  
41          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
42          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
43          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
44          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
46          NOTE: copy only present in source but links to poppler          - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <removed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50  ppmd  ppmd
51          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59            - s3switch <unfixed> (embed)
60            - xresprobe <unfixed> (embed)
61            - zhcon <unfixed> (embed)
62    
63    php-htmlpurifier
64            - mahara 1.2.5-1 (embed)
65    
66  peercast  peercast
67          - gnome-peercast <unfixed> (embed)          - gnome-peercast <removed> (embed)
68          NOTE: gnome-peercast may better be removed, see #466539          [etch] - gnome-peercast <unfixed> (embed)
69    
70  silc-toolkit  silc-toolkit
71          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
72    
73    icclib
74            - ghostscript <unfixed> (embed)
75            - argyll <unfixed> (embed)
76    
77    libusb
78            - argyll <unfixed> (embed)
79    
80  dietlibc  dietlibc
81          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
82    
83    libmikmod
84            - sdl-mixer1.2 <unfixed> (embed)
85            TODO: report bug
86    
87  libiax  libiax
88          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
89    
90    spandsp
91            - iaxmodem <unfixable> (embed; bug #548885)
92    
93    python-paramiko
94            - fabric 0.9.0-2 (embed; bug #561398)
95    
96  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
97          - dpkg <unfixed> (embed)          - dpkg 1.15.6 (static)
98          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
99          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
100            - cherokee <unfixed> (embed)
101          NOTE: somehow derived code base          NOTE: somehow derived code base
102          - mono <unfixed> (embed)          - mono <unfixed> (embed)
103          TODO: check mozilla          TODO: check mozilla
# Line 77  zlib (lots of apps embed a copy, but lin Line 106  zlib (lots of apps embed a copy, but lin
106          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
107          - rpm <unknown> (embed)          - rpm <unknown> (embed)
108          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
109            - tuxcmd-modules <unfixed> (embed)
110            - zsync <unfixed>
111            - tra <unfixed>
112            - sash <unfixed>
113            - nsis <unfixed>
114            - pyfits 1:2.3.1-1
115            - mseide-msegui <unfixed>
116            NOTE: mseide
117            - mirrordir <unfixed>
118            - poco <unfixed>
119            - klibc <unfixed>
120            - emboss <unfixed>
121            - ghostscript <unfixed>
122            - freeimage <unfixed>
123            - clamav <unfixed> (fork)
124            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
125            - tuxonice-userui <unfixed> (static)
126            - plt-scheme <unfixed>
127            - perl <unfixed>
128            - paraview <unfixed>
129            - velvet 0.7.56~nozlibcopy-1
130            - gcvs <unfixed>
131            - dump <unfixed>
132            - aide <unfixed> (static)
133            - dar <unfixed> (static)
134            - avfs <unfixed>
135            - fpc <unfixed>
136            - winff <unfixed>
137            NOTE: inherited from fpc, see #472304
138            - lazarus <unfixed>
139            NOTE: inherited from fpc, see #472304
140            - erlang <unfixed> (embed)
141            - gamera 3.2.3-1 (embed)
142            - python2.4 <unfixed> (embed; bug #553403)
143            - python2.5 <unfixed> (embed; bug #553403)
144            - texlive-bin <unknown> (embed)
145    
146    dulwich
147            - hg-git 0.1.0-1 (embed; bug #541996)
148    
149    libvigraimpex
150            - hugin <unfixed> (embed; bug #542259)
151            - enblend-enfuse <unfixed> (embed; bug #542258)
152            - gamera 3.2.3-1 (embed)
153    
154  libbz2  libbz2
155          - dpkg <unfixed> (static)          - dpkg 1.15.6 (static)
156            - amd64-libs <unfixed> (static)
157  ekg          NOTE: let's call it "static"
158          - centericq <unfixed> (embed)          - dar <unfixed> (static)
159          - gaim <unfixed> (embed)          - dump <unfixed> (static)
160          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - unalz <unfixed> (embed)
161          - kopete 4:3.3.2-5 (embed)          NOTE: has code, by the maint, to use the system version but links against the internal copy
162          - kadu <unfixed> (embed)  
163          - gadu <unfixed> (embed)  libyahoo2
164          NOTE: g/kadu not packaged in Debian yet          - centerim <unfixed> (embed; bug #559783)
165    
166    libmsn
167            - centerim <unfixed> (embed; bug #559783)
168    
169    libgadu
170            - centerim <unfixed> (embed; bug #559783)
171            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
172            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
173            - kdenetwork 4:3.3.2-5 (embed)
174            NOTE: from kdenetwork: kopete
175            - ekg 1:1.8~rc0-1 (embed)
176            - kadu 0.6.0.2-3 (embed; bug #504430)
177            - gadu <itp> (embed)
178    
179  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
180          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
181          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
182          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
183          - phpwiki (embed)          - phpwiki <unfixed> (embed)
184          - php4 <unfixed> (embed)          - php4 <removed> (embed)
185          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
186    
187  shtool (affects build-time only)  shtool (affects build-time only)
188          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
189          - php4 <unfixed> (embed)          - php4 <removed> (embed)
190            - php5 <unfixed> (embed)
191    
192  mozilla source code  xulrunner
193          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
194          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
195          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
196          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
197          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
198          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
199          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
200          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
201    
202  xli  xli
203          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
204    
205  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
206          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
207          - xfree86/xorg <unfixed> (embed)  
208          NOTE: in libxpm  libxpm
209            - lesstif <unfixed> (embed; bug #575750)
210    
211  kerberized apps with BSD origin  kerberized apps with BSD origin
212          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
213          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
214          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
215    
216  grip (which pkg is the origin?)  grip (which pkg is the origin?)
217          - libcdaudio          - libcdaudio <unfixed>
218          - grip          - grip <unfixed>
219          - gnome-vfs          - gnome-vfs <unfixed>
220          TODO: check vfs2 as well          TODO: check vfs2 as well
221    
222  fudforum  fudforum
223          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
224          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
225          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
226    
227    libbsd
228            - rdate 1:1.2-3 (embed)
229            - atheme-services <unfixed>
230            - libbsd-arc4random-perl <unfixed>
231            - isakmpd <unfixed>
232            - bsdgames <unfixed> (embed)
233            - bsd-mailx <unfixed> (embed)
234            - netcat-openbsd <unfixed> (embed; bug #550611)
235            - openssh <unfixed> (embed)
236            - unworkable <unfixed> (embed)
237    
238  cvs  cvs
239          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
240          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
241    
242  pcre  pcre3
243          - python* <unfixed> (embed)          - php4 <removed> (embed)
         - php4 <unknown> (embed)  
244          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
245          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
246            NOTE: libgoffice-*
247          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
248          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
249          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
250          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
251          - glib2.0 2.15.2-1 (embed)          - glib2.0 2.15.2-1 (embed)
252          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
# Line 158  pcre Line 254  pcre
254          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
255          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
256          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
257          - tin <unknown> (embed)          - tin 980117-1 (embed)
258          - kazehakase 0.5.2-1          - kazehakase 0.5.2-1
259          - webkit <unfixed> (embed)          - webkit 1.0.1-1 (embed)
260          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
261          NOTE: embedded via webkit copy          NOTE: embedded via webkit copy
262            - erlang <unfixed> (embed)
263            - ssed <unfixed> (embed)
264            - ircd-hybrid <unfixed> (static)
265            - emboss <unfixd>
266            - cherokee <unfixed> (embed)
267            - oftc-hybrid <unfixed> (embed)
268            - ratbox-services <unfixed> (embed)
269            - squeak-vm <unfixed> (embed)
270            - tinymux <unfixed> (embed)
271    
272  tiff  tiff
273          - wxwindows2.4 2.2.1 (embed)          - wxwindows2.4 2.2.1 (embed)
274            - gamera 3.2.3-1 (embed)
275            - freeimage <unfixed> (embed)
276            - libtk-img <unfixed> (embed)
277            NOTE: there are two copies, one under tiff/ other under libtiff/
278            - gdal <unfixed>
279    
280  uudeview  uudeview
281          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
# Line 173  uudeview Line 283  uudeview
283    
284  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
285          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
286          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
287          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
288            - heimdal <unfixed> (embed; bug #559616)
289    
290  util-linux/mount  util-linux/mount
291          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
292          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
293    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
294  sylpheed  sylpheed
295          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
296    
# Line 198  phpldapadmin Line 305  phpldapadmin
305  chmlib  chmlib
306          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
307    
308  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
309          - mplayer 1.0~rc2-14 (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
310          - kino 1.0.0-1          - kino 1.0.0-1
311          - vlc <not-affected> (Links dynamically since initial release)          - vlc <not-affected> (Links dynamically since initial release)
# Line 206  libavcodec/libavformat (source: ffmpeg) Line 313  libavcodec/libavformat (source: ffmpeg)
313          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
314          - motion 3.1.19-1          - motion 3.1.19-1
315          - gstreamer0.10-ffmpeg 0.10.3-2          - gstreamer0.10-ffmpeg 0.10.3-2
316          - xmovie <unfixed>          - xmovie <removed> (static)
317          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
318            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
319            - audacity 1.3.7-2 (embed; bug #512278)
320    
321  mad MPEG decoding lib  faad2
322          - mad <unfixed> (embed)          - mplayer 1.0~rc2-20 (embed)
323            - avifile <unfixed> (embed; bug #538750)
324            - ffmpeg-debian <removed> (embed)
325    
326    libmad (MPEG decoding lib)
327          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
328            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
329            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
330    
331  libdts  libdts
332          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 223  liba52 Line 338  liba52
338          - a52dec <unfixed> (embed)          - a52dec <unfixed> (embed)
339          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
340    
341  libmpeg2  mpeg2dec (libmpeg2)
         - mpeg2dec <unfixed> (embed)  
342          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
343    
344  curl  libmpeg3
345          - wget <unfixed> (embed)          - squeak-vm <unfixed> (embed)
346          NOTE: code for NTLM authentication  
347    libntlm
348            - wget <unfixed> (fork; bug #550436)
349            - curl <unfixed> (fork; bug #550437)
350            - cntlm <unfixed> (fork; bug #550438)
351    
352  uw-imap  uw-imap
353          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 238  uw-imap Line 356  uw-imap
356  imagemagick  imagemagick
357          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
358    
359    python-urlgrabber
360            - mercurial <unfixed> (embed; bug #531062)
361            - w3af <unfixed> (embed; bug #555372)
362            [experimental] - harvestman <unfixed> (embed; bug #555373)
363    
364    beautifulsoup
365            - python-mechanize <unfixed> (embed; bug #555349)
366            - zope2.11 <removed> (embed; bug #555350)
367            - twill <unknown> (embed)
368    
369  halibut  halibut
370          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
371    
372  libghttp  libghttp
373          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
374    
375  libsndfile  libsndfile
376          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
377    
378  glibmm2.4  glibmm2.4
379          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
380    
381  libgnomecanvasmm2.6  libgnomecanvasmm2.6
382          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
383    
384  libsigc++-2.0  libsigc++-2.0
385          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
386    
387  soundtouch  soundtouch
388          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
389    
390  libmms  libmms
391          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 265  libmms Line 393  libmms
393    
394  fckeditor  fckeditor
395          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
396          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
397          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
398          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
399            - request-tracker3.8 <unfixed> (embed)
400            - otrs2 <unfixed> (embed)
401    
402  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
403          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
404    
405  libphp-phpmailer  libphp-phpmailer
406          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
407            - mahara <unfixed> (embed)
408            - symfony <unfixed> (embed; bug #566778)
409            [etch] - phpgroupware <unfixed> (embed)
410            NOTE: phpgroupware-felamimail is only in etch
411            - egroupware <unfixed> (embed; bug #504283)
412            - glpi <unfixed>
413    
414  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
415          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
416    
417  giflib:  giflib
418          - wine <unfixed> (embed; bug #466181)          - wine <unfixed> (embed; bug #466181)
419    
420  bennu (not packaged in Debian)  bennu (not packaged in Debian, http://bennu.sourceforge.net)
421          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
422    
423  smarty:  smarty
424          - moodle <unfixed> (embed; bug #471158)          - moodle 1.8.2-2 (embed; bug #471158)
425          - gallery2 2.2.5-2 (embed; bug #471160)          - gallery2 2.2.5-2 (embed; bug #471160)
426          - mahara 0.9.2-2 (embed; bug #471201)          - mahara 0.9.2-2 (embed; bug #471201)
427          - gosa 2.4beta1-1 (embed; bug #471200)          - gosa 2.4beta1-1 (embed; bug #471200)
428    
429  TinyMCE  TinyMCE
430          - wordpress 2.5.1-3 (embed; bug #478257)          - wordpress 2.5.1-3 (embed; bug #478257)
431          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
432          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
433          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
434    
435  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
436          - scite <unfixed> (embed)          - scite <unfixed> (embed)
437          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
438          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
439          - geany <unfixed> (embed)          - geany <unfixed> (fork)
440            - anjuta <unfixed> (embed)
441    
442  libphp-adodb  libphp-adodb
443          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
444          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
445          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
446          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
447          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
448          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
449            - torrentflux 2.0beta1-2 (embed)
450          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
451          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
452          - cacti <unknown> (embed)          - cacti <unknown> (embed)
453          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
454          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
455            - gforge 4.7~rc2-6 (embed)
456            - mahara <unfixed> (embed)
457    
458  gzip  gzip
459          - linux-kernel <unfixed> (embed)          - linux-2.6 <unfixed> (embed) [lib/inflate.c]
         NOTE: lib/inflate.c  
460          - klibc <unfixed> (embed)          - klibc <unfixed> (embed)
461          NOTE: based on linux-kernel gzip code          NOTE: based on linux-kernel gzip code
462          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
463            - pristine-tar <unfixed> (modified-embed)
464            NOTE: compression code only, not uncompression
465            - ncompress <unfixed> (old-version)
466    
467  neon  neon
468          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
469          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
470          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
471            - litmus <removed> (embed; #395875)
472          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
473          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
474          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
475          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
476    
477  libmodplug  libmodplug
478          - gst-plugins-bad0.10 <unfixed> (embed)          - gst-plugins-bad0.10 0.10.10.2-1 (embed)
479    
480  libvncserver  libvncserver
481          - vino <unfixed> (embed)          - vino <unfixed> (embed)
# Line 341  libvncserver Line 483  libvncserver
483  putty  putty
484          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
485    
486  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
487          - filezilla <unfixed>          - filezilla <unfixed>
488            - crystalspace <unfixed> (embed)
489            - libwfut <unfixed> (embed)
490            - rarian <unfixed> (embed)
491            - bulletml <unfixed> (embed)
492            - pokerth <unfixed> (embed)
493            - qutecom <unfixed> (embed)
494            - sofa-framework <unfixed> (embed)
495            - yate <unfixed> (embed)
496            - antigrav <unfixed> (embed)
497            - balder2d <unfixed> (embed)
498            - cal3d <unfixed> (embed)
499            - criticalmass <unfixed> (embed)
500            - ember <unfixed> (embed)
501            - epiphany <unfixed> (embed)
502            - gambit <unfixed> (embed)
503            - noiz2sa <unfixed> (embed)
504            - ogre <unfixed> (embed)
505            - opencity <unfixed> (embed)
506            - openmovieeditor <unfixed> (embed)
507            - pouetchess <unfixed> (embed)
508            - tecnoballz <unfixed> (embed)
509            - trigger-rally <unfixed> (embed)
510            - xmoto <unfixed> (embed)
511            - mapnik <unknown> (embed)
512            NOTE: uses a different XML parser by default
513            - rrootage 0.23a-6 <embed>
514            NOTE: links to libbulltetml
515            - boson <unknown> (embed)
516            NOTE: the embedded code is unused
517    
518  gv  gv
519          - evince <unfixed> (embed)          - evince <unfixed> (embed)
520          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
521          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
522    
523  libXbae  libXbae
524          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
525          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
526    
527    libgtkhtml
528            - claws-mail-extra-plugins <unfixed> (fork)
529    
530  libXaw  libXaw
531          [etch] - libpawlib2-lesstif          - paw <removed> (embed)
532          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
533          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
534    
535  libgd2  libgd2
536          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
537          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
538          - wml <unfixed> (embed)          - wml 2.0.11ds2-1 (embed)
539            - libwmf <unfixed> (embed)
540          NOTE: derived from gd 1.6.3          NOTE: derived from gd 1.6.3
541            - texlive-bin 2009-1 (embed)
542    
543  rar  rar
544          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 377  mplayer (DirectMedia Object loader) Line 552  mplayer (DirectMedia Object loader)
552          NOTE: src/libw32dll/          NOTE: src/libw32dll/
553          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
554          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
555            - mplayer 1.0~rc2-20 (embed)
556    
557  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
558          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 392  librpcsecgss Line 568  librpcsecgss
568          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
569    
570  jasper  jasper
571          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
572    
573    libiris
574            - psi <unfixed> (embed)
575            - kdenetwork <unfixed> (embed)
576            NOTE: kopete embeds libiris but links dynamically to libidn
577            - kdegames <unfixed> (embed)
578            NOTE: ksirk/kde4
579    
580  libidn  libidn
581          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
582            - psi <unfixed> (embed)
583  liblua          NOTE: psi embeds libiris which embeds libidn
584          - monotone <unfixed> (embed)          - kdegames <unfixed> (embed)
585            NOTE: kdegames/kde4 embeds libiris which embeds libidn
586    
587    lua5.1
588            - monotone 0.43-1 (embed)
589            - nmap 5.00-1 (embed; bug #527997)
590            [lenny] - nmap <unfixed> (embed; bug #527997)
591            - ocropus <unfixed> (embed)
592            - enigma <unfixed> (embed)
593            NOTE: requires lua built with C++
594            - freeciv <unfixed> (embed)
595            - spring <unfixed> (embed)
596    
597  libbotan  libbotan
598          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
599    
600  NetXX  NetXX
601          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
602    
603  libgc  libgc
604          - mono <unfixed> (embed)          - mono <unfixed> (embed)
605    
606  lzma  lzma
607          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
608            - xz-utils <unfixed> (fork)
609    
610  lzo  lzo
611          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
612    
613  yassl  yassl
614          - mysql-dfsg-5.0 <unfixed> (embed)          - mysql-dfsg-5.0 <unfixed> (embed)
615            - mysql-dfsg-5.1 <unfixed> (embed)
616    
617  pax code  pax code
618          - tar <unfixed> (embed)          - tar <unfixed> (embed)
# Line 434  guichan Line 629  guichan
629  tolua  tolua
630          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
631          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
632            NOTE: actually tolua++
633            - ocropus <unfixed> (embed)
634            NOTE: actually tolua++
635            - freeciv <unfixed> (embed)
636            NOTE: actually tolua++
637            - enigma <unfixed> (embed)
638    
639  asio-dev  asio-dev
640          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
641    
642  xine-lib  xine-lib
643          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 457  tk8.5 Line 656  tk8.5
656          - perl-tk <unfixable> (fork)          - perl-tk <unfixable> (fork)
657    
658  samba  samba
659          - mc <unfixed> (embed)          - mc 2:4.6.2~git20080311-1 (embed)
660          NOTE: maintainer is aware of this, currently searching a solution          NOTE: maintainer is aware of this, currently searching a solution
661    
662  plib1.8.4c2  plib1.8.4c2
# Line 465  plib1.8.4c2 Line 664  plib1.8.4c2
664          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
665    
666  fribidi  fribidi
667          - quesoglc <unfixed> (embed)          - quesoglc 0.7.2-2 (embed)
668    
669  glew  glew
670          - quesoglc <unfixed> (embed)          - quesoglc <unfixed> (embed; bug #489341)
671            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
672            - trigger 0.5.2.1-2 (embed)
673            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
674            - trigger-rally 0.5.2.1-2 (embed)
675            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
676    
677  minorGems  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
678          - transcend <unfixed> (embed)          - transcend <unfixed> (embed)
679          - cultivation <unfixed> (embed)          - cultivation <unfixed> (embed)
680            - passage <unfixed> (embed)
681            - gravitation <unfixed> (embed)
682    
683  tar  tar
684          - libarchive <unfixed> (embed)          - libarchive <unfixed> (embed)
# Line 482  cpio Line 688  cpio
688          - libarchive <unfixed> (embed)          - libarchive <unfixed> (embed)
689          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
690    
691    kde4libs
692            - kdelibs <unfixable> (old-version)
693    
694  webkit  webkit
695          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed; bug #479851)
696            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
697            - kde4libs <unfixable> (fork)
698            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
699            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
700    
701  ftgl  ftgl
702          - blender 2.46+dfsg-1 (embed)          - blender 2.46+dfsg-1 (embed)
# Line 492  wv Line 705  wv
705          - abiword <unfixed>          - abiword <unfixed>
706    
707  qemu  qemu
708          - kvm <unfixed> (embed)          - kvm <removed> (embed; bug #543159)
709            - qemu-kvm <unfixed> (embed; bug #560853)
710            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
711            - xen-3 3.4.2-2 (embed; bug #560856)
712            - xen-unstable <unfixed> (embed; bug #560856)
713    
714    vgabios
715            - kvm <removed> (embed; bug #489442)
716            - qemu-kvm <unfixed> (embed)
717    
718  bochs  bochs
719          - kvm <unfixed> (embed; bug #489442)          - kvm <removed> (embed; bug #489442)
720            - qemu-kvm <unfixed> (embed)
721    
722  speex  speex
723          - vorbis-tools <unfixed> (embed)          - vorbis-tools <unfixed> (embed)
# Line 503  speex Line 725  speex
725          - gst-plugins-good0.10 <unfixed> (embed)          - gst-plugins-good0.10 <unfixed> (embed)
726          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
727          - libfishsound <unfixed> (embed)          - libfishsound <unfixed> (embed)
728          - libannodex <unfixed> (embed)          - libannodex <removed> (embed)
729          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
730          - xmms-speex <unfixed> (embed)          - xmms-speex <unfixed> (embed)
731          - libsdl-sound1.2 <unfixed> (embed)          - libsdl-sound1.2 <unfixed> (embed)
732          - sweep <unfixed> (embed)          - sweep <unfixed> (embed)
733    
734  libreadline  libreadline
735          - magic <unfixed> (old-version)          - magic <itp> (old-version)
         NOTE: magic is currently an RFS  
736    
737  opcode  opcode
738          - ode <unfixed> (embed)          - ode <unfixed> (embed)
# Line 523  gimpact Line 744  gimpact
744          NOTE: gimpact is not a package in debian, it is just embedded          NOTE: gimpact is not a package in debian, it is just embedded
745          NOTE: http://gimpact.sf.net          NOTE: http://gimpact.sf.net
746    
747  MochiKit.js  mochikit
748          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
749            NOTE: they require extra patches, still unmerged upstream
750          - ntop <unfixed> (embed)          - ntop <unfixed> (embed)
751          - python-oherence <unfixed> (embed)          - coherence 0.6.2-1 (embed)
752          - python-paste <unfixed> (embed)          - paste <unfixed> (embed)
753          - python-turbogears <unfixed> (embed)          - turbogears <unfixed> (embed)
754          - zope-plone3 <unfixed> (embed)          - plone3 <removed> (embed)
755            - xulrunner <unfixed> (embed)
756  prototype.js          - libjifty-plugin-chart-perl <unfixed> (embed)
757          - netbeans-ide <unfixed> (embed)          - sabnzbdplus <unfixed> (embed)
758          - auth2db-frontend <unfixed> (embed)          - tgmochikit <unfixed> (embed)
759          - citadel-webcit <unfixed> (embed)  
760          - asterisk <unfixed> (embed)  prototypejs
761          - doc-iana <unfixed> (embed)          - netbeans-ide 6.0.1+dfsg-2 (embed)
762          - libaws-doc <unfixed> (embed)          - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
763          - libgettext-ruby-data <unfixed> (embed)          - webcit <unfixed> (embed; bug #555219)
764          - libjson-ruby-doc <unfixed> (embed)          - asterisk 1:1.6.2.0~rc3-1 (embed)
765          - liblucene2-java-doc <unfixed> (embed)          - libjson-ruby 1.1.4-1 (embed; bug #555224)
766          - libopenid-ruby <unfixed> (embed)          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
767          - solr-common <unfixed> (embed)          - horde3 <unfixed> (embed)
768            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
769            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
770            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
771            - ebug-http <removed> (embed; bug #555236)
772            - libaws 2.7-1 (embed; bug #555222)
773            - phpgedview <removed> (embed)
774            - poker-network 1.7.6-1 (embed; bug #555238)
775            - rails 2.1.0-6 (embed)
776            - wordpress 2.5.0-2 (embed; bug #555243)
777            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
778            TODO: search through all of the other zope packages
779            - ampache 3.4.1-2 (embed)
780            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
781            - hobix 0.5~svn20070319-4 (embed; bug #555247)
782            - zabbix 1.6.6-4 (embed; bug #555250)
783            - chora2 <unfixed> (embed; bug #555253)
784            - gollem <unfixed> (embed; bug # 555254)
785            - jscropperui 1.2.1-1 (embed; bug #555257)
786            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
787            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
788            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
789            - activeldap 1.2.1-1 (embed)
790            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
791            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
792            - otrs2 2.3.4-6 (embed; bug #555267)
793            - webcalendar 1.2~b1-2 (embed; bug #555269)
794            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
795            - jifty 0.90519-1 (embed; bug #555271)
796            - jquery 1.4-1 (embed; bug #555272)
797            - passenger 2.2.5debian1-1 (embed; bug #555273)
798            - plone3 <removed> (embed; bug #555275)
799            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
800            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
801            - xulrunner <unfixed> (embed)
802            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
803    
804    gdb
805            - insight <unfixed> (embed)
806    
807    e2fsprogs
808            - ldiskfsprogs <unfixable> (fork)
809    
810    quazip (not packaged in Debian)
811            - qcake <unfixed> (embed)
812            NOTE: starting with upstream version 0.6.4
813    
814    exo
815            - pcmanfm <unfixed> (embed; bug #499677)
816            NOTE: slightly modified source code
817    
818    java
819            - openjdk-6 <unfixed>
820            - sun-java5 <unfixed>
821            - sun-java6 <unfixed>
822    
823    libphp-snoopy
824            - ampache 3.4.1-2 (embed; bug #504169)
825            - gforge 4.6.99+svn6094-2 (embed)
826            - mahara 1.0.5-2 (embed; bug #504170)
827            - pixelpost 1.7.1-5 (embed; bug #504171)
828            - mediamate 0.9.3.6-5 (embed; bug #504172)
829            - opendb <removed> (embed; bug #504173)
830            [etch] - opendb <unfixed> (embed; bug #504173)
831            - wordpress 2.5.1-9 (embed; bug #443948)
832            - moodle <unfixed> (embed; bug #507185)
833            [etch] - phpgroupware <unfixed> (embed)
834            NOTE: phpgroupware-felamimail
835            - magpierss 0.72-3 (embed; bug #431089)
836    
837    jquery
838            - zekr <unfixed> (embed)
839            - wordpress <unknown> (embed)
840            - yocto-reader <unfixed> (embed)
841            - textpattern <unfixed> (embed)
842            - genshi 0.5.1-1 (embed)
843            NOTE: compressed file under examples/ dir
844            - prewikka <unfixed> (embed)
845            - libramaze-ruby <unfixed> (embed)
846            - drupal5 <unfixed> (embed)
847            - b2evolution <unfixed> (embed)
848            - wesnoth <unfixed> (embed)
849    
850    tablesorter (jquery plugin, not packaged yet)
851            - wesnoth <unfixed> (embed)
852    
853    kses
854            - wordpress <unfixed> (embed; bug #504242)
855            NOTE: their copy has all methods renamed to wp_<foo>
856            NOTE: kses isn't in Debian, RFP: #504240
857            - moodle <unfixed> (embed; bug #507185)
858            - egroupware <unfixed> (embed)
859    
860    magpierss
861            - wordpress <unfixed> (embed; bug #504242)
862            - moodle <unfixed>
863    
864    php-gettext
865            - wordpress 2.8.4-1 (embed; bug #504242)
866            - docbookwiki <unfixed> (embed)
867            - knowledgeroot 0.9.9.5-1
868            NOTE: non-free
869    
870    libphp-ixr (name may change, it is the Incutio XML-RPC)
871            - wordpress <unfixed> (embed; bug #504242)
872            NOTE: libphp-ixr isn't in Debian, RFP: #504236
873            - dokuwiki <unfixed> (embed)
874            - textpattern <unfixed> (embed)
875    
876    libphp-cas
877          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
878          - hobbix <unfixed> (embed)          - moodle <unfixed> (embed; bug #505984)
879          - mnemo2 <unfixed> (embed)  
880          - nag2 <unfixed> (embed)  scriptaculous (prototype.js is among the embeds in the following)
881          - libjs-prototype <unfixed> (embed)          - glpi <unfixed> (embed)
882          - libjs-scriptaculous <unfixed> (embed)          - libaws <unfixed> (embed; bug #555222)
         - knowledgeroot <unfixed> (embed)  
         - mediatomb-common <unfixed> (embed)  
         - mt-daapd <unfixed> (embed)  
883          - op-panel <unfixed> (embed)          - op-panel <unfixed> (embed)
884          - ebug-http <unfixed> (embed)          - symfony <unfixed> (embed)
885          - phpgedview <removed> (embed)          NOTE: maintainer says there are extra incompatible changes required
886          - poker-web <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
887          - python-webhelpers <unfixed> (embed)          - webhelpers <unfixed> (embed)
888          - qwik <unfixed> (embed)          - qwik <removed> (embed; bug #555241)
889            - smokeping <unfixed> (embed)
890            - turba2 <unfixed> (embed)
891            - typo3-src 4.2.3-1 (embed)
892            - request-tracker3.6 <unfixed> (embed)
893            - request-tracker3.8 <unfixed> (embed)
894            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
895            - wordpress 2.5.0-2 (embed)
896            - libhtml-prototype-perl 1.48-3 (embed)
897    
898    libmarkdown-php
899            - moodle <unfixed> (embed; bug #507185)
900            - pixelpost 1.7.1-6 (embed)
901    
902    php-openid
903            - wordpress-openid <itp> (embed)
904    
905    geshi
906            - dokuwiki 0.0.20080505-3.1 (embed)
907            - pgfouine 1.0-1.1 (embed)
908            - websvn 2.1.0-1 (embed)
909    
910    webcalendar
911            - gforge 4.7~rc2-6 (embed; bug #504758)
912    
913    libical
914            - kdepim <unknown> (fork)
915            NOTE: fixed at some point during 4.0
916            - kdepimlibs 4.2.0-1 (fork)
917            - claws-mail-extra-plugins <unfixed> (fork)
918    
919    harfbuzz
920            - qt4-x11 <unfixed> (embed)
921            - pango1.0 <unfixed> (embed)
922            - fontmatrix <unfixed> (embed)
923    
924    libzip
925            - php5 <unfixable> (modified-embed)
926            - odt2txt <unfixed> (embed; bug #523808)
927    
928    json.php (not packaged; should be replaced with php's built-in functions)
929            - moodle <unfixed>
930            - yui <unfixed>
931            - gallery2 <unfixed>
932            - dokuwiki <unfixed>
933            - typo3-src <unfixed>
934    
935    php-fpdf
936            - tcpdf <itp> (fork)
937            - moodle <unfixed>
938            - phpwiki <unfixed>
939            - egroupware <unfixed>
940            - ldap-account-manager <unfixed> (fork)
941    
942    tcpdf (itp: #495985)
943            - moodle <unfixed>
944            - phpmyadmin <unfixed>
945    
946    typo3
947            - moodle <unfixed>
948    
949    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
950            - moodle <unfixed>
951            - gosa <unfixed>
952    
953    php-ole (itp: #487558)
954            - moodle <unfixed>
955    
956    pieforms (http://www.catalyst.net.nz)
957            - mahara <unfixed>
958    
959    savant2 (http://phpsavant.com)
960            - egroupware <unfixed>
961    
962    rssparser (http://nwow.org)
963            - egroupware <unfixed>
964            - phpgroupware <unfixed>
965    
966    lcms
967            - openjdk-6 <unfixed> (fork)
968            - gimp 2.4.0~rc2-2
969    
970    libphp-phplayersmenu
971            - diogenes <unfixed>
972            - phpldapadmin <unfixed>
973    
974    libphp-pclzip
975            - docvert <unfixed>
976            - moodle <unfixed>
977            - egroupware <unfixed>
978    
979    libphp-simplepie
980            - dokuwiki <unfixed>
981            - wordpress <unfixed>
982    
983    libphp-jpgraph
984            - egroupware <unfixed>
985    
986    php-simpletest
987            - moodle <unfixed>
988    
989    libpng
990            - iceweasel <not-affected> (uses xulrunner)
991            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
992            - iceape 1.0.13~pre080614i-0etch1 (embed)
993            - xulrunner 1.9.0.13-1 (embed)
994            [lenny] - xulrunner 1.9.0.11-0lenny1
995            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
996            - gamera 3.2.3-1 (embed)
997            - freeimage <unfixed> (embed)
998            - tuxonice-userui (static)
999    
1000    irssi
1001            - silc-client <unfixed> (embed)
1002            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1003    
1004    extc
1005            - mtasc <unfixed> (embed)
1006            - haxe <unfixed> (embed)
1007    
1008    swflib
1009            - mtasc <unfixed> (embed)
1010            - haxe <unfixed> (embed)
1011    
1012    libitext-java
1013            - bouncycastle 2.1.4-1 (embed)
1014    
1015    python-ply
1016            - pyke <unfixed> (embed; bug #555363)
1017            - pywbem 0.7.0-4 (embed; bug #555364)
1018            - sepolgen <unfixed> (embed; bug #555365)
1019            - zope-textindexng3 <unknown> (embed)
1020            - iceweasel <not-affected> (uses xulrunner)
1021            - xulrunner <unknown> (embed)
1022            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1023    
1024    libdumbnet (libdnet upstream)
1025            - nmap <unfixed> (fork)
1026    
1027    gcc-4.4
1028            - gcc-mingw32 <unfixed> (embed)
1029    
1030    camlimages
1031            - advi <unfixed> (static; bug #550441)
1032    
1033    memcached
1034            - memcachedb <unfixed> (embed)
1035    
1036    yajl
1037            - argyll <unfixed> (embed; bug #544223)
1038            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1039    
1040    nusoap
1041            - gforge 4.8.2-1 (embed)
1042            - ampache <unfixed> (embed)
1043            - poker-network <unfixed> (embed)
1044            - moodle <unfixed> (embed)
1045            NOTE: code is not used when running under php5 and soap is enabled
1046            - phpwiki <unfixed> (embed)
1047            - gallery2 <unfixed> (embed)
1048            - typo3-src <unfixed> (embed)
1049    
1050    libept
1051            - adept <unfixed> (embed; bug #540649)
1052    
1053    libvorbis
1054            - iceweasel <not-affected> (uses xulrunner)
1055            - xulrunner <unfixed> (embed; bug #540959)
1056            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1057            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1058            - iceape <unfixed> (embed)
1059            [etch] - iceape <not-affected> (introduced in 2.0)
1060            [lenny] - iceape <not-affected> (introduced in 2.0)
1061    
1062    cairo
1063            - iceweasel <not-affected> (uses xulrunner)
1064            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1065    
1066    liboggz
1067            - iceweasel <not-affected> (uses xulrunner)
1068            - xulrunner <unfixed> (embed; bug #540959)
1069            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1070            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1071            - iceape <unfixed> (embed)
1072            [etch] - iceape <not-affected> (introduced in 2.0)
1073            [lenny] - iceape <not-affected> (introduced in 2.0)
1074    
1075    liboggplay
1076            - iceweasel <not-affected> (uses xulrunner)
1077            - xulrunner <unfixed> (embed; bug #540959)
1078            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1079            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1080            - iceape <unfixed> (embed)
1081            [etch] - iceape <not-affected> (introduced in 2.0)
1082            [lenny] - iceape <not-affected> (introduced in 2.0)
1083    
1084    php-net-dnsbl
1085            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1086    
1087    php-onyx-rss
1088            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1089    
1090    php-text-wiki
1091            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1092    
1093    php-xml-rpc
1094            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1095    
1096    polarssl (does not have a shared library)
1097            - pdkim <itp> (embed; bug #543150)
1098            - xyssl <unfixed> (old-version)
1099    
1100    pidgin (libpurple)
1101            - gaim <removed> (old-version)
1102            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1103    
1104    icu
1105            - webkit 1.0.1-1 (embed; bug #547214)
1106            - texlive-bin <unfixed> (fork)
1107            NOTE: texlive upstream working with icu upstream to merge their changes
1108    
1109    cyrus-imapd-2.2
1110            - kolab-cyrus-imapd <unfixed> (fork)
1111            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1112    
1113    python-cxx-dev
1114            - freecad 0.9.2646.3-1 (embed; bug #547936)
1115    
1116    zipios++
1117            - freecad 0.9.2646.3-1 (embed; bug #547941)
1118            - enigma 0.92.3-3 (embed)
1119            NOTE: likely fixed earlier, marking etch's version as fixed
1120    
1121    linux-2.6
1122            - kvm <removed> (embed; bug #549973) [./kernel/*]
1123            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1124            - kernel-source-2.6.8 <removed> (old-version)
1125            - kernel-source-2.4.27 <removed> (old-version)
1126            - kernel-source-2.4.24 <removed> (old-version)
1127            - kernel-source-2.2.25 <removed> (old-version)
1128            - kernel-source-2.2.20 <removed> (old-version)
1129    
1130    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1131            - kvm <removed> (embed) [./libfdt/*]
1132            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1133    
1134    qweb (not packaged)
1135            - ajaxterm <unfixed>
1136    
1137    opensaml2
1138            - opensaml <removed> (old-version)
1139    
1140    shibboleth-sp2
1141            - shibboleth-sp <removed> (old-version)
1142    
1143    tuxonice-userui
1144            - suspend2-userui <removed> (old-version)
1145    
1146    expat
1147            - w3c-libwww <removed> (embed; bug #551941)
1148            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1149            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1150            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1151            - python2.4 <unfixable> (embed; bug #553403)
1152            - python-4suite <unfixed> (embed; bug #516935)
1153            - wxwindows2.4 <removed> (embed)
1154            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1155            - wxwidgets2.8 2.8.10.1-2 (embed)
1156            - celementtree 1.0.5-8 (embed)
1157            NOTE: Maybe that was fixed even earlier
1158            - audacity 1.3.2-1 (embed)
1159            - matanza <unfixed> (embed)
1160            - tdom 0.8.3~20080525-1 (embed)
1161            - udunits 2.1.8-4 (embed)
1162            - apr-util 1.2 (embed)
1163            - ayttm <unfxed> (embed; bug #561006)
1164            - cableswig <unfixed> (embed)
1165            - cadaver <unfixed> (embed)
1166            - cmake 2.6.0-6 (embed)
1167            - coin3 <unfixed> (embed)
1168            - gdcm 2.0.14-2 (embed)
1169            - ghostscript 8.71~dfsg-2 (embed)
1170            - grmonitor <removed> (embed)
1171            - iceape <unfixed> (embed)
1172            - insighttoolkit 3.16.0-1 (embed)
1173            NOTE: insighttoolkit might've been fixed earlier
1174            - libparagui1.1 1.0.2-1 (embed)
1175            - paraview 3.6.2-1 (embed)
1176            - poco 1.3.6p1-1 (embed)
1177            - simgear <unfixed> (embed)
1178            - sitecopy 1:0.16.0-1
1179            - smart <unfixed> (embed)
1180            NOTE: smart embeds celementree, and it includes expat
1181            - swish-e <not-affected> (Linked against libxml, which is used instead)
1182            - tla 1.3.5+dfsg-15 (embed)
1183            - vtk 4.1.20030227-1 (embed)
1184            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1185            - xmlrpc-c <unfixed> (embed)
1186            - iceweasel <unfixed> (embed)
1187            - kompozer <unfixed> (embed)
1188            - vxl 1.13.0-2 (embed)
1189            - xulrunner <unfixed> (embed)
1190            - apache2 2.2 (embed)
1191            - texlive-bin <not-affected> (Embedded code not compiled in)
1192            - vnc4 <unfixed> (embed)
1193            - xotcl 1.6.6-1 (embed)
1194    
1195    xerces-c
1196            - xerces-c2 <unfixed> (old-version)
1197            - xerces27 <removed> (old-version)
1198    
1199    md5 (RSA's version; not the gnu version provided by coreutils)
1200            - w3c-libwww <removed> (embed; bug #551942)
1201            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1202    
1203    libparagui1.1
1204            - asc <unfixable> (fork)
1205    
1206    enet
1207            - sauerbraten <unfixed> (embed; #497194)
1208    
1209    eglibc
1210            - glibc <removed> (old-version)
1211    
1212    galib
1213            - gamera 3.2.3-1 (embed)
1214    
1215    configobj
1216            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1217            - elisa <unfixed> (embed; bug #555337)
1218            - gaupol <unfixed> (embed; bug #555338)
1219            - ipython <unfixed> (embed; bug #555339)
1220            - pida <unfixed> (embed; bug #555340)
1221            - psychopy <unfixed> (embed; bug #555341)
1222            - rest2web <unfixed> (embed; bug #555342)
1223            - auth2db <unknown> (embed)
1224            - dynagen <unknown> (embed)
1225            - iceweasel <unknown> (embed)
1226            - sabnzbdplus <unknown> (embed)
1227            - xulrunner <unknown> (embed)
1228            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1229    
1230    python-clientform
1231            - bibus <unfixed> (embed; bug #555332)
1232            - zope2.10 <unfixed> (embed; bug #555333)
1233            - zope2.11 <removed> (embed; bug #555334)
1234            - python-mechanize <unknown> (embed)
1235            - twill <unknown> (embed)
1236    
1237    python-mechanize
1238            - zope2.10 <unfixed> (embed; bug #555337)
1239            - zope2.11 <removed> (embed; bug #555338)
1240            - twill <unknown> (embed; bug #555339)
1241    
1242    pexpect
1243            - duplicity 0.6.06-1 (embed; bug #555361)
1244            - hplip <unfixed> (embed; bug #555362)
1245            - smart <unfixed> (embed; bug #555363)
1246    
1247    pyparsing
1248            - bauble <unfixed> (embed; bug #555366)
1249            - boa-constructor 0.6.1-8 (embed; bug #555367)
1250            - calibre <unfixed> (embed; bug #555368)
1251            - matplotlib <unfixed> (embed; bug #531024)
1252            - zhpy 1.7.3.1-1 (embed; bug #555370)
1253            - polybori <unknown> (embed)
1254            - python-whoosh <unknown> (embed)
1255            - twill <unknown> (embed)
1256            - zope-textindexng3 <unknown> (embed)
1257    
1258    python-pysqlite2
1259            - python2.4 <unfixed> (embed; bug #553403)
1260            - python2.5 <unfixed> (embed; bug #553403)
1261    
1262    celementtree
1263            - python2.5 <unfixed> (embed)
1264            - smart <unfixed> (embed)
1265    
1266    elementtree
1267            - python2.5 <unfixed> (embed)
1268            - python2.6 <unfixed> (embed)
1269            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1270            - gedit 2.28.2-1 (embed; bug #555344)
1271            - smart <unfixed> (embed)
1272            - solfege <unfixed> (embed; bug #555345)
1273            - w3af <unfixed> (embed; bug #555346)
1274            - python-qt4 <unknown> (embed)
1275            - sphinx <unknown> (embed)
1276            - python-nltk <itp> (embed)
1277    
1278    python2.5
1279            - python2.4 <unfixed> (old-version)
1280            - jython <unfixed> (embed)
1281            NOTE: embeds many stdlib modules
1282            - python-django <unfixed> (embed; bug #555419)
1283            NOTE: embeds stdlib modules: doctest, decimal
1284            - gamera 3.2.3-1 (embed)
1285            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1286            - boa-constructor <unfixed> (embed; bug #555426)
1287            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1288            - nicotine <unfixed> (embed; bug #555427)
1289            NOTE: embeds stdlib modules: ConfigParser
1290            - museek+ <unfixed> (embed; bug #555428)
1291            NOTE: embeds stdlib modules: ConfigParser
1292            - vegastrike-data <unfixed> (embed)
1293            NOTE: embeds many stdlib modules
1294            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1295            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1296            - config-manager <unfixed> (embed; bug #555423)
1297            NOTE: embeds stdlib modules: optparse
1298            - jhbuild 2.28.0-1 (embed; bug #555421)
1299            NOTE: embeds stdlib modules: optparse, subprocess
1300            - smart <unfixed> (embed; bug #555432)
1301            NOTE: embeds stdlib modules: optparse
1302            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1303            NOTE: embeds stdlib modules: doctest
1304            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1305            NOTE: embeds stdlib modules: doctest
1306            - distribute <unfixed> (embed)
1307            NOTE: embeds stdlib modules: doctest
1308            - python-setuptools <unfixed> (embed; bug #555435)
1309            NOTE: embeds stdlib modules: doctest
1310            - zope.testing <unfixed> (embed; bug #555436)
1311            NOTE: embeds stdlib modules: doctest
1312            - translate-toolkit <unfixed> (embed; bug #555422)
1313            NOTE: embeds stdlib modules: textwrap, contextlib
1314            - libtpclient-py <unfixed> (embed; bug #555424)
1315            NOTE: embeds stdlib modules: subprocess
1316            - grass <unfixed> (embed; bug #555425)
1317            NOTE: embeds stdlib modules: subprocess
1318            - coherence <unfixed> (embed; bug #555429)
1319            NOTE: embeds stdlib modules: uuid
1320            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1321            NOTE: embeds stdlib modules: uuid
1322            - setroubleshoot <unfixed> (embed; bug #555431)
1323            NOTE: embeds stdlib modules: uuid
1324            - linkchecker <unfixed> (embed; bug #555414)
1325            NOTE: embeds msgfmt.py script
1326            - imdbpy <unfixed> (embed)
1327            NOTE: embeds msgfmt.py script
1328            - kiwi <unfixed> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - moin <unfixed> (embed)
1331            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1332            - plone3 <removed> (embed)
1333            NOTE: embeds msgfmt.py script
1334            - roundup <unfixed> (embed)
1335            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1336            - rednotebook <unfixed> (embed; bug #555415)
1337            NOTE: embeds msgfmt.py script
1338            - turbogears <unfixed> (embed)
1339            NOTE: embeds msgfmt.py script
1340            - elisa <unfixed> (embed)
1341            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1342            - calibre <unfixed> (embed)
1343            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1344            - mailman 1:2.1.13-1 (embed; #555416)
1345            NOTE: embeds msgfmt.py script
1346            - python-docutils <unknown> (embed)
1347            NOTE: embeds stdlib modules: optparse, textwrap
1348            - python-imaging <unknown> (embed)
1349            NOTE: embeds stdlib modules: doctest
1350            - python-mechanize <unknown> (embed)
1351            NOTE: embeds stdlib modules: doctest
1352            - twill <unknown> (embed)
1353            NOTE: embeds stdlib modules: subprocess
1354            - zeroc-ice <unknown> (embed)
1355            NOTE: embeds stdlib modules: subprocess
1356            - wxwidgets2.8 <unknown> (embed)
1357            NOTE: embeds stdlib modules: subprocess
1358            - cycle <unknown> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - deluge <unknown> (embed)
1361            NOTE: embeds msgfmt.py script
1362            - opendict <unknown> (embed)
1363            NOTE: embeds msgfmt.py script
1364            - openerp-client <unknown> (embed)
1365            NOTE: embeds msgfmt.py script
1366            - rapidsvn <unknown> (embed)
1367            NOTE: embeds msgfmt.py script
1368            - wammu <unknown> (embed)
1369            NOTE: embeds msgfmt.py script
1370            - gaphor <unknown> (embed)
1371            NOTE: embeds msgfmt.py script
1372            - pida <unknown> (embed)
1373            NOTE: embeds msgfmt.py script
1374            - python-formencode <unknown> (embed)
1375            NOTE: embeds msgfmt.py script
1376            - duplicity <unfixed> (embed)
1377            NOTE: embeds stdlib module: urlparse, tarfile
1378            - pygopherd <unfixed> (embed)
1379            NOTE: embeds stdlib module: zipfile
1380    
1381    argparse
1382            - twill <unfixed> (embed; bug #555347)
1383            - ipython <unfixed> (embed; bug #555348)
1384    
1385    coherence
1386            - elisa <unfixed> (embed; bug #555335)
1387    
1388    simpletal
1389            - plastex <unfixed> (embed; bug #555371)
1390    
1391    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1392            - postr <unfixed> (embed)
1393            - elisa <unfixed> (embed)
1394    
1395    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1396            - apertium-tolk <unfixed> (embed)
1397            - ipython <unfixed> (embed)
1398            - virtaal <unfixed> (embed)
1399    
1400    distribute
1401            - setuptools <removed> (old-version)
1402    
1403    rails
1404            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1405            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1406            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1407            - thin <unfixed> (embed) [./spec/rails_app/*]
1408            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1409            NOTE: be dangerous if developers are naively basing their code off of the examples
1410            NOTE: prototype.js is among the example files
1411    
1412    lucene2 (prototype.js is among the embeds in the following)
1413            - lucene <unfixed> (old-version)
1414            - pylucene <unfixed> (embed)
1415            - libpdfbox-java <unfixed> (embed)
1416            - libfontbox-java <unfixed> (embed)
1417            - libjempbox-java <unfixed> (embed)
1418            - solr <unfixed> (embed)
1419    
1420    unicode-data
1421            - syslinux <unfixed> (embed)
1422            - camomile <unfixed> (embed)
1423            - fribidi <unfixed> (embed)
1424            - m17n-db <unfixed> (embed)
1425            - sbcl <unfixed> (embed)
1426            - heimdal <unfixed> (embed)
1427            - icu <unfixed> (embed)
1428            - icu4j <unfixed> (embed)
1429            - krb5 <unfixed> (embed)
1430            - moodle <unfixed> (embed)
1431            - openldap <unfixed> (embed)
1432            - pike7.6 <unfixed> (embed)
1433            - samba <unfixed> (embed)
1434            - samba4 <unfixed> (embed)
1435            - cmucl <unfixed> (embed)
1436            - typo3-src <unfixed> (embed)
1437            - mauve <unfixed> (embed)
1438            - texlive-bin <unfixed> (embed)
1439            - ypsilon <unfixed> (embed)
1440            - jeuclid <unfixed> (embed)
1441            - charmap.app <unfixed> (embed)
1442            - clisp <unfixed> (embed)
1443            - gnulib <unfixed> (embed)
1444            - opensrs-client <unfixed> (embed)
1445            - saxonb <unfixed> (embed)
1446          - rails <unfixed> (embed)          - rails <unfixed> (embed)
1447          - typo3-src-4.1 <unfixed> (embed)  
1448    feedparser
1449            - rawdog <unfixed> (embed; bug #383422)
1450            - miro <unfixed> (embed; bug #555351)
1451            - calibre <unfixed> (embed; bug #555352)
1452            - freevo <unfixed> (embed; bug #555353)
1453            - pida <unfixed> (embed; bug #555354)
1454            - planet-venus <unfixed> (embed; bug #555355)
1455            - plone3 <removed> (embed; bug #555356)
1456            - exaile 0.2.14+debian-1 (embed)
1457            - screenlets 0.1.2-3 (embed)
1458            NOTE: included twice
1459    
1460    agg:
1461            - matplotlib <unfixed> (embed: bug #377271)
1462            - contextfree <unfixed> (embed)
1463            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1464            - exactimage <unfixed> (embed)
1465            - python-enable <unfixed> (embed)
1466            - mapnik 0.5.1-3 (embed)
1467            NOTE: links statically to agg, but shared library is not available (bug #377271)
1468    
1469    vtk
1470            - paraview <unfixable> (embed; bug #495426)
1471    
1472    txt2tags
1473            - rednotebook <unfixed> (embed)
1474    
1475    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1476            - gajim <unfixed> (embed)
1477            - emesene <unfixed> (embed)
1478            - convirt <unfixed> (embed)
1479            - pida <unfixed> (embed)
1480            - rednotebook <unfixed> (embed)
1481    
1482    horde3 (prototype.js is among the embeds in the following)
1483            - mnemo2 <unfixed> (embed)
1484            - nag2 <unfixed> (embed)
1485          - wordpress <unfixed> (embed)          - wordpress <unfixed> (embed)
1486          - zope-plone3 <unfixed> (embed)          NOTE: Text_Diff (wp-includes/Text/Diff*)
         - smokeping <unfixed> (embed)  
1487    
1488  gdb  cimg
1489          - insight <unfixed> (embed)          - gmic <itp> (embed)
1490    
1491    mootools
1492            - gmic <itp> (embed)
1493    
1494    openldap
1495            - openldap2.3 <removed> (old-version)
1496    
1497    grub2
1498            - grub <unfixed> (old-version)
1499    
1500    gnupginterface
1501            - duplicity <unfixed> (embed)
1502    
1503    python-dateutil
1504            - awn-extras-applets <unfixed> (embed)
1505            - matplotlib <unknown> (embed)
1506    
1507    cups
1508            - cupsys <removed> (old-version)
1509    
1510    yui
1511            - bcfg2 <not-affected> (present in source but not included in any binary files)
1512            - serendipity 1.5.3-1 (embed; bug #557746)
1513            - moodle 1.8.2.dfsg-5 (embed)
1514            - jifty 0.91117-1 (embed; bug #557748)
1515            - webgui 7.7.26-1 (embed)
1516            - loggerhead 1.17-1 (embed)
1517    
1518    quake3 (vanilla source not packaged in debian)
1519            - openarena <unfixable> (fork)
1520    
1521    quake2 (vanilla source not packaged in debian)
1522            - alien-arena <unfixable> (fork)
1523            - warsow <unfixable> (fork)
1524    
1525    libtheora
1526            - iceweasel <not-affected> (uses xulrunner)
1527            - xulrunner <unfixed> (embed; bug #540959)
1528            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1529            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1530            - iceape <unfixed> (embed; bug #559276)
1531            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1532            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1533    
1534    dtoa
1535            - bfilter <unfixed> (embed)
1536            - cacao <unfixed> (embed)
1537            - cdrdao <unfixed> (embed)
1538            - classpath <unfixed> (embed)
1539            - freej <unfixed> (embed)
1540            - iceape <unfixed> (embed)
1541            - iceweasel <unfixed> (embed)
1542            - jscoverage <unfixed> (embed)
1543            - kde4libs <unfixed> (embed)
1544            - kdelibs <unfixed> (embed)
1545            - kompozer <unfixed> (embed)
1546            - libv8 <unfixed> (embed)
1547            - mono <unfixed> (embed)
1548            - newlib <unfixed> (embed)
1549            - nspr <unfixed> (embed)
1550            - php5 <unfixed> (embed)
1551            - polyml <unfixed> (embed)
1552            - qt4-x11 <unfixed> (embed)
1553            - rhino <unfixed> (embed)
1554            NOTE: code translated to Java
1555            - ruby1.8 <unfixed> (embed)
1556            - ruby1.9 <unfixed> (embed)
1557            - ruby1.9.1 <unfixed> (embed)
1558            - sdd <unfixed> (embed)
1559            - sfind <unfixed> (embed)
1560            - star <unfixed> (embed)
1561            - tinymux <unfixed> (embed)
1562            - virtualbox-ose <unfixed> (embed)
1563            - webkit <unfixed> (embed)
1564            - xulrunner <unfixed> (embed)
1565    
1566    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1567            - firegpg <unfixed> (embed)
1568            - enigmail <unfixed> (embed)
1569    
1570    ptmalloc (not packaged in Debian)
1571            - crystalspace <unfixed> (embed)
1572            - qt4-x11 <unfixed> (embed)
1573    
1574    svgalib
1575            - usplash <unfixed> (embed)
1576    
1577    bogl
1578            - usplash <unfixed> (embed)
1579    
1580    taglist
1581            - usplash <unfixed> (embed)
1582    
1583    portaudio
1584            - audacity <unfixed> (embed; bug #323711)
1585    
1586    nyquist
1587            - audacity <unfixed> (embed)
1588            NOTE: embeds a forked nyquist with support for a shared library
1589    
1590    vamp-plugin-sdk
1591            - audacity <unfixed> (embed)
1592    
1593    wordpress
1594            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1595            - wordpress-mu <removed> (fork)
1596    
1597    php5
1598            - php4 <removed> (old-version)
1599    
1600    classpath
1601            - libgnucrypto-java <removed> (embed; bug #559788)
1602    
1603    libtool
1604            - apr <unfixed> (static; bug #489625)
1605            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1606            - arts <unfixed> (embed)
1607            - bochs 2.4.2-1 (embed; bug #560884)
1608            - camserv <unfixed> (embed)
1609            - collectd 4.8.2-1 (embed)
1610            - courier-authlib 0.58-4 (embed)
1611            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1612            - cvsnt 2.5.04.3236-1.2 (embed)
1613            - dico <not-affected> (Uses the system copy of ltdl)
1614            - freeradius 0.1+20010527-1 (embed)
1615            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1616            - ggobi 2.1.9~20091212-1 (embed)
1617            - glame 2.0.1-4 (embed)
1618            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1619            - gnash 0.8.7-2 (embed)
1620            - gnu-smalltalk <unfixed> (embed; bug #566777)
1621            - google-gadgets 0.10.5-0.3 (embed)
1622            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1623            - graphicsmagick 1.3.5-6 (embed)
1624            - graphviz 2.8-3 (embed)
1625            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1626            - guile-1.6 1.6.8-7 (embed)
1627            - hamlib 1.2.11-1 (embed)
1628            - hercules 3.06-1.2 (embed)
1629            - jags 1.0.4-3 (embed; bug #560864)
1630            - kdelibs <unfixed> (embed)
1631            - libannodex <removed> (embed)
1632            - libextractor 0.5.23+dfsg-4 (embed)
1633            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1634            - libtunepimp 0.5.3-7.3 (embed)
1635            - mp4h 1.3.1-4.1 (embed)
1636            - naim <removed> (embed)
1637            - parser-mysql <unfixed> (embed)
1638            - pinball 0.3.1-11 (embed)
1639            - redland <unfixed> (embed)
1640            - siproxd <unfixed> (embed)
1641            - ski <unfixed> (embed)
1642            - synfig 0.62.00-1 (embed)
1643            - unixodbc 2.2.4-5 (embed)
1644            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1645            - clamav 0.95+dfsg-1 (embed)
1646            - imagemagick 6:6.2.3.1-1 (embed)
1647            - hypre 2.4.0b-5 (embed)
1648            - lam <unfixed> (embed)
1649            - openmpi <unfixable> (embed; bug #559386)
1650            - parser <unfixed> (embed)
1651            - pdsh 2.18-5 (embed; bug #560892)
1652            - sbnc 1.2-8 (embed)
1653            - sdcc <unfixed> (embed)
1654            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1655            - proftpd-dfsg <unfixed> (embed; bug #561748)
1656            - babel 1.4.0.dfsg-5 (embed)
1657            - libprelude 0.9.14-2 (embed)
1658            - heartbeat 2.1.4-7 (embed)
1659            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1660            NOTE: might've been fixed earlier
1661            - gcc-* <unknown> (embed)
1662    
1663    ocamlgsl
1664            - orpie 1.5.1-7.1 (embed; bug #550058)
1665    
1666    xdotool
1667            - keynav <unfixed> (embed; bug #560103)
1668    
1669    bulletphysics (not packaged; http://www.bulletphysics.org/)
1670            - supertuxkart <unfixed> (embed)
1671            - blender <unfixed> (embed)
1672    
1673    ghostscript
1674            - gs-gpl <removed> (old-version)
1675    
1676    icedove
1677            - thunderbird <removed> (old-version)
1678    
1679    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1680            - jquery <unfixed> (embed)
1681    
1682    sed
1683            - ssed <unfixed> (fork)
1684    
1685    phpatomlib (http://code.google.com/p/phpatomlib)
1686            - wordpress <unfixed> (embed)
1687    
1688    Services_JSON (http://pear.php.net/package/Services_JSON)
1689            - wordpress <unfixed> (embed)
1690    
1691    phpass (http://www.openwall.com/phpass/)
1692            - gallery2 <unfixed> (embed)
1693            - wordpress <unfixed> (embed)
1694            - typo3-src <unfixed> (modified-embed)
1695            NOTE: file refers to drupal, maybe there's a copy somewhere there
1696            NOTE: a copyright owner search didn't match anything
1697            - libauthen-passphrase-perl <unfixable> (fork)
1698            NOTE: perl implementation of phpass
1699    
1700    squirrelmail
1701            - wordpress <unfixed> (embed)
1702            NOTE: class-pop3.php
1703    
1704    ezSQL (http://www.woyano.com/jv/ezsql)
1705            - wordpress <unfixable> (fork)
1706            NOTE: wp-db.php
1707    
1708    Diff.php (Clay Loveless' version/killersoft.com)
1709            - php-versioncontrol-svn <unfixed>
1710    
1711    libm (provided by libc)
1712            - spring <unfixed> (embed)
1713            NOTE: embedded by embedded copy of streflop
1714            - aide <unfixed> (static)
1715            - busybox <unfixed> (static)
1716            - mindi-busybox <unfixed> (static)
1717            - qemu <unfixed> (static)
1718            NOTE: qemu-user-static
1719            - tuxonice-userui <unfixed> (static)
1720            - zsh <unfixed> (static)
1721            NOTE: zsh-static
1722    
1723    streflop
1724            - spring <unfixed> (embed)
1725    
1726    minizip
1727            - spring <unfixed> (embed)
1728    
1729    oscpack
1730            - spring <unfixed> (embed)
1731    
1732    hpiutil2
1733            - spring <unfixed> (embed)
1734    
1735    p7zip
1736            - spring <unfixed> (embed)
1737    
1738    pythonqt (doesn't seem to be python-qtN, unknown source)
1739            - fontmatrix <unfixed> (embed)
1740            - elmerfem <unfixed> (embed)
1741    
1742    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1743            - docvert <unfixed> (embed)
1744            - jifty <unfixed> (embed)
1745            - kdenetwork <unfixed> (embed)
1746            - mediatomb <unfixed> (embed)
1747            - plastex <unfixed> (embed)
1748            - plone3 <removed> (embed)
1749            - python-chaco <unfixed> (embed)
1750            - python-docutils <unfixed> (embed)
1751            - s5 <unfixed> (embed)
1752            - zope2.10 <unfixed> (embed)
1753            - zope2.11 <removed> (embed)
1754            - cython <not-affcted> (embed)
1755            NOTE: part of documentation, which is not installed into the binary package
1756    
1757    python-docutils
1758            - zope2.10 <unfixed> (embed)
1759            - zope2.11 <removed> (embed)
1760    
1761    tesseract
1762            - ocropus <unfixed> (static)
1763    
1764    antlr
1765            - kdevelop <unfixed> (embed)
1766    
1767    libxerces2
1768            - openjdk-6 <unfixed> (embed)
1769    
1770    kfreebsd-8
1771            - kfreebsd-7 <unfixed> (old-version)
1772            - kfreebsd-6 <removed> (old-version)
1773    
1774    ruby1.9.1
1775            - ruby1.9 <unfixed> (old-version)
1776            - ruby1.8 <unfixed> (old-version)
1777    
1778    maildrop
1779            - courier <unfixed> (embed) [./maildrop]
1780    
1781    glee
1782            - warzone2100 <unfixed> (embed)
1783    
1784    phing
1785            - symfony <unfixed> (embed)
1786    
1787    pake
1788            - symfony <unfixed> (embed)
1789    
1790    propel
1791            - symfony <unfixed> (embed)
1792    
1793    creole
1794            - symfony <unfixed> (embed)
1795    
1796    hfsutils
1797            - cdrkit <unfixed> (embed; bug #570187)
1798            NOTE: embeds hfsutils code in genisoimage
1799    
1800    cdrkit
1801            - grub2 <unfixed> (embed; bug #570156)
1802            NOTE: genisoimage imported into grub-mkisofs
1803    
1804    kdebase-workspace
1805            - kdebase <unfixed> (old-version)
1806    
1807    file
1808            - php5 <unfixable> (modified-embed)
1809            [lenny] - php5 <not-affected>
1810    
1811    cdb
1812            - php5 <unfixed> (embed)
1813    
1814    libmbfl (itp: #570708)
1815            - php5 <unfixed> (embed)
1816            NOTE: PHP is actually the current upstream, ITP is of that code
1817    
1818    libonig
1819            - php5 5.3.2-1 (embed)
1820    
1821    xmlrpc-epi
1822            - php5 <unfixed> (embed)
1823    
1824    swt-gtk
1825            - eclipse <unfixed> (embed; bug #538808)
1826    
1827    txt2html
1828            - wml 2.0.11ds2-1 (embed)
1829    
1830    ca-certificates
1831            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1832    
1833    openexr
1834            - freeimage <unfixed> (embed)
1835    
1836    libmng
1837            - freeimage <unfixed> (embed)
1838    
1839    openjpeg
1840            - freeimage <unfixed> (embed)
1841    
1842    libjpeg6b
1843            - freeimage <unfixed> (embed)
1844    
1845    libjpeg (don't know what exact version)
1846            - dcmtk <unfixed>
1847            - gdcm <unfixed>
1848            - insighttoolkit <unfixed>
1849            - openarena <unfixed> (bug #495966)
1850            - outguess <unfixed>
1851            - squeak-vm <unfixed> (embed)
1852            - tremulous <unfixed>
1853            - tuxonice-userui <unfixed> (static)
1854            - fpc <unfixed> (static)
1855            - lazarus <unfixed> (static)
1856            NOTE: inherited from fpc, see #472304
1857            - mseide-msegui <unfixed> (static)
1858            NOTE: inherited from fpc, see #472304
1859            - easymp3gain <unfixed> (static)
1860            NOTE: inherited from fpc, see #472304
1861            - winff <unfixed> (static)
1862            NOTE: inherited from fpc, see #472304
1863            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1864    
1865    
1866    lxr
1867            - lxr-cvs (embed)
1868    
1869    libfile-copy-recursive-perl
1870            - r-base <unfixed> (embed; bug #577427)
1871            - r-base-core-ra <unfixed> (embed; bug #577429)
1872    
1873    delimmatch
1874            - r-base <unfixed> (embed; bug #577433)
1875            - r-base-core-ra <unfixed> (embed; bug #577434)
1876    
1877    libsmf (ITP: #572558)
1878            - denemo <unfixed> (embed)
1879            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1880    
1881    libselinux
1882            - dpkg 1.15.6 (static)
1883    
1884    xinha (ITP: #479708)
1885            - horde3 <unfixed>
1886            - serendipity <unfixed>
1887            - openacs <unfixed>
1888            - dotlrn <unfixed>
1889    
1890    dvipng
1891            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1892    
1893    dvipdfmx
1894            - texlive-bin <unfixed> (embed)
1895            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1896    
1897    lcdf-typetools
1898            - texlive-bin 2009-1 (embed)
1899    
1900    tex4ht
1901            - texlive-bin 2009-1 (embed)
1902    
1903    freetype
1904            - texlive-bin 2009-1 (embed)
1905    
1906    freetype2
1907            - texlive-bin 2009-1 (embed)
1908    
1909    silgraphite
1910            - texlive-bin <unfixed> (embed)
1911    
1912    unzip
1913            - texlive-bin 2009-1 (embed)
1914    
1915    jbig2dec
1916            - ghostscript 8.71~dfsg2-1 (embed)
Legend:
Removed from v.9382  
changed lines
  Added in v.14964
  ViewVC Help
Powered by ViewVC 1.1.5