/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 14667 - (show annotations) (download)
Mon May 10 23:33:03 2010 UTC (3 years, 1 month ago) by gilbert-guest
File size: 52599 byte(s)
dpkg code copies fixed
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy, <unfixed>, <removed>,
14 <itp>, <not-affected>, <unknown> if the version number can not
15 be determined, or <unfixable> for unavoidable cases (e.g., forks
16 that add real value)
17 sort: static (linking statically against a lib)
18 embed (embeds a copy of the library into another source package)
19 modified-embed (embeds a code copy that differs from upstream code)
20 fork (a full-blown fork of another source package)
21 old-version (an older version of essentially the same code)
22
23 The srcpkg might be some string to identify the code if there is no
24 specific source package.
25
26 Everything up to the next line is ignored.
27 ---BEGIN
28 xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29 NOTE: Fixed packages link to poppler library unless otherwise noted
30 - pdftohtml <unknown>
31 [sarge] - pdftohtml <unfixed>
32 [etch] - pdftohtml <unfixed>
33 NOTE: has been replaced by poppler-utils
34 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35 - texlive-base 3.0-12 (embed)
36 - texlive-bin 2007-1 (embed)
37 NOTE: links to poppler
38 - koffice <unfixed> (embed; bug #436163)
39 - libextractor 0.5.12-1 (embed)
40 NOTE: libextractor is using its own pdf decoder now
41 - ipe <unfixed> (embed)
42 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43 - ruby-gnome2 <unknown> (embed)
44 NOTE: copy only present in source but links to poppler
45 - pdfedit <unfixed> (embed; bug #510794)
46 - swftools <removed> (embed; bug #551293)
47 - poppler <unfixable> (fork)
48
49 ppmd
50 - libcomplearn-mod-ppmd <unfixed> (fork)
51 NOTE: discussion in #458152
52
53 libevent
54 - transmission 1.71-1 (embed; bug #529372)
55
56 lrmi
57 - read-edid 2.0.0-1 (embed; bug #495131)
58 - s3switch <unfixed> (embed)
59 - xresprobe <unfixed> (embed)
60 - zhcon <unfixed> (embed)
61
62 peercast
63 - gnome-peercast <removed> (embed)
64 [etch] - gnome-peercast <unfixed> (embed)
65
66 silc-toolkit
67 - silc-client 1.1~beta6-1 (embed)
68
69 icclib
70 - ghostscript <unfixed> (embed)
71 - argyll <unfixed> (embed)
72
73 libusb
74 - argyll <unfixed> (embed)
75
76 dietlibc
77 - ccontrol 0.9.1+20071204-1 (static)
78
79 libmikmod
80 - sdl-mixer1.2 <unfixed> (embed)
81 TODO: report bug
82
83 libiax
84 - iaxmodem <unfixable> (embed; bug #548885)
85
86 spandsp
87 - iaxmodem <unfixable> (embed; bug #548885)
88
89 python-paramiko
90 - fabric 0.9.0-2 (embed; bug #561398)
91
92 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
93 - dpkg 1.15.6 (static)
94 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
95 - rsync <unfixed> (embed)
96 - cherokee <unfixed> (embed)
97 NOTE: somehow derived code base
98 - mono <unfixed> (embed)
99 TODO: check mozilla
100 - Linux kernels <unfixed> (embed)
101 - pvpgn 1.7.8-2 (embed)
102 - mrtg 2.12.2-1 (embed)
103 - rpm <unknown> (embed)
104 NOTE: pinged anibal since when rpm was fixed
105 - tuxcmd-modules <unfixed> (embed)
106 - zsync <unfixed>
107 - tra <unfixed>
108 - sash <unfixed>
109 - nsis <unfixed>
110 - mseide-msegui <unfixed>
111 NOTE: mseide
112 - mirrordir <unfixed>
113 - poco <unfixed>
114 - klibc <unfixed>
115 - ghostscript <unfixed>
116 - freeimage <unfixed>
117 - clamav <unfixed> (fork)
118 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
119 - tuxonice-userui <unfixed> (static)
120 - plt-scheme <unfixed>
121 - perl <unfixed>
122 - paraview <unfixed>
123 - velvet 0.7.56~nozlibcopy-1
124 - gcvs <unfixed>
125 - dump <unfixed>
126 - aide <unfixed> (static)
127 - dar <unfixed> (static)
128 - avfs <unfixed>
129 - fpc <unfixed>
130 - winff <unfixed>
131 NOTE: inherited from fpc, see #472304
132 - lazarus <unfixed>
133 NOTE: inherited from fpc, see #472304
134 - erlang <unfixed> (embed)
135 - gamera 3.2.3-1 (embed)
136 - python2.4 <unfixed> (embed; bug #553403)
137 - python2.5 <unfixed> (embed; bug #553403)
138
139 dulwich
140 - hg-git 0.1.0-1 (embed; bug #541996)
141
142 libvigraimpex
143 - hugin <unfixed> (embed; bug #542259)
144 - enblend-enfuse <unfixed> (embed; bug #542258)
145 - gamera 3.2.3-1 (embed)
146
147 libbz2
148 - dpkg 1.15.6 (static)
149 - amd64-libs <unfixed> (static)
150 NOTE: let's call it "static"
151 - dar <unfixed> (static)
152 - dump <unfixed> (static)
153 - unalz <unfixed> (embed)
154 NOTE: has code, by the maint, to use the system version but links against the internal copy
155
156 libyahoo2
157 - centerim <unfixed> (embed; bug #559783)
158
159 libmsn
160 - centerim <unfixed> (embed; bug #559783)
161
162 libgadu
163 - centerim <unfixed> (embed; bug #559783)
164 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
165 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
166 - kdenetwork 4:3.3.2-5 (embed)
167 NOTE: from kdenetwork: kopete
168 - ekg 1:1.8~rc0-1 (embed)
169 - kadu 0.6.0.2-3 (embed; bug #504430)
170 - gadu <itp> (embed)
171
172 xmlrpc (which package is the "origin" of this code?)
173 - drupal <unfixed> (embed)
174 - phpgroupware <unfixed> (embed)
175 - egroupware <unfixed> (embed)
176 - phpwiki <unfixed> (embed)
177 - php4 <removed> (embed)
178 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
179
180 shtool (affects build-time only)
181 - mysql-ocaml <unfixed> (embed)
182 - php4 <removed> (embed)
183 - php5 <unfixed> (embed)
184
185 xulrunner
186 - iceape <unfixed> (embed; bug #561749)
187 - iceweasel 2.0.0.19 (embed)
188 - icedove <unfixed> (embed; bug #561750)
189 - kompozer <unfixed> (embed; bug #532168)
190 - galeon 2.0.2-4 (embed)
191 - epiphany-browser 2.14.3-8 (embed)
192 - conkeror 0.9~git080629-2 (embed)
193 - kazehakase 0.4.2-1 (embed)
194
195 xli
196 - xloadimage <unfixed> (embed)
197
198 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
199 - openmotif <unfixed> (embed)
200 - libxpm <unfixed> (embed; bug #575750)
201
202 kerberized apps with BSD origin
203 - krb4 <removed> (embed)
204 - krb5 <unfixed> (embed)
205 - heimdal <unfixed> (embed)
206
207 grip (which pkg is the origin?)
208 - libcdaudio <unfixed>
209 - grip <unfixed>
210 - gnome-vfs <unfixed>
211 TODO: check vfs2 as well
212
213 fudforum
214 [etch] - phpgroupware <unfixed> (embed)
215 NOTE: phpgroupware-fudforum
216 [sarge] - egroupware-fudforum <removed> (embed)
217
218 libbsd
219 - rdate 1:1.2-3 (embed)
220 - atheme-services <unfixed>
221 - libbsd-arc4random-perl <unfixed>
222 - isakmpd <unfixed>
223 - bsdgames <unfixed> (embed)
224 - bsd-mailx <unfixed> (embed)
225 - netcat-openbsd <unfixed> (embed; bug #550611)
226 - openssh <unfixed> (embed)
227 - unworkable <unfixed> (embed)
228
229 cvs
230 - gcvs <unfixed> (embed)
231 NOTE: see cvsunix/src in tarball
232
233 pcre3
234 - php4 <removed> (embed)
235 - analog 2:5.23-0woody1 (embed)
236 - goffice <unfixed> (embed)
237 NOTE: libgoffice-*
238 - vfu 4.06-4.1 (embed; bug #450754)
239 - tf5 5.0beta7-1 (embed)
240 - monotone 0.43-1 (embed)
241 NOTE: this only affects versions >= 0.37
242 - glib2.0 2.15.2-1 (embed)
243 - apache2 2.0.53-4 (embed)
244 - exim4 4.10-0.srh20.12 (embed)
245 - yacas <unfixed> (embed)
246 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
247 - gtamsanalyzer.app 0.42-5 (embed)
248 - tin 980117-1 (embed)
249 - kazehakase 0.5.2-1
250 - webkit 1.0.1-1 (embed)
251 - qt4-x11 <unfixed> (embed)
252 NOTE: embedded via webkit copy
253 - erlang <unfixed> (embed)
254 - ssed <unfixed> (embed)
255 - ircd-hybrid <unfixed> (static)
256 - emboss <unfixd>
257 - cherokee <unfixed> (embed)
258 - oftc-hybrid <unfixed> (embed)
259 - ratbox-services <unfixed> (embed)
260 - squeak-vm <unfixed> (embed)
261 - tinymux <unfixed> (embed)
262
263 tiff
264 - wxwindows2.4 2.2.1 (embed)
265 - gamera 3.2.3-1 (embed)
266 - freeimage <unfixed> (embed)
267 - libtk-img <unfixed> (embed)
268 NOTE: there are two copies, one under tiff/ other under libtiff/
269 - gdal <unfixed>
270
271 uudeview
272 - libconvert-uulib-perl <unfixed> (embed)
273 - pan <unfixed> (embed)
274
275 sqlite (not affected by security vulnerabilities so far)
276 - amarok <unfixed> (embed)
277 - monotone 0.43-1 (embed)
278 - iceweasel <unfixed> (embed)
279 - heimdal <unfixed> (embed; bug #559616)
280
281 util-linux/mount
282 - loop-aes-utils <unfixed> (embed)
283 NOTE: contains code from util-linux' mount in the mount-aes-udeb
284
285 sylpheed
286 - sylpheed-claws <unfixed> (fork)
287
288 phpsysinfo
289 - egroupware <unfixed> (embed)
290 - phpgroupware <unfixed> (embed)
291
292 phpldapadmin
293 [sarge] - egroupware <unfixed> (embed)
294 NOTE: removed from egroupware after sarge
295
296 chmlib
297 - kchmviewer <unknown> (embed)
298
299 ffmpeg (libavcodec/libavformat)
300 - mplayer 1.0~rc2-14 (embed; bug #395252)
301 - kino 1.0.0-1
302 - vlc <not-affected> (Links dynamically since initial release)
303 - smilutils 0.3.0-10
304 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
305 - motion 3.1.19-1
306 - gstreamer0.10-ffmpeg 0.10.3-2
307 - xmovie <removed> (static)
308 TODO: gimp-gap (potentially using ffmpeg code as well)
309 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
310 - audacity 1.3.7-2 (embed; bug #512278)
311
312 faad2
313 - mplayer 1.0~rc2-20 (embed)
314 - avifile <unfixed> (embed; bug #538750)
315 - ffmpeg-debian <removed> (embed)
316
317 libmad (MPEG decoding lib)
318 - xine-lib <unfixed> (embed)
319 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
320 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
321
322 libdts
323 - xine-lib <unfixed> (embed)
324
325 flac
326 - xine-lib <unfixed> (embed)
327
328 liba52
329 - a52dec <unfixed> (embed)
330 - xine-lib <unfixed> (embed)
331
332 mpeg2dec (libmpeg2)
333 - xine-lib <unfixed> (embed)
334
335 libmpeg3
336 - squeak-vm <unfixed> (embed)
337
338 libntlm
339 - wget <unfixed> (fork; bug #550436)
340 - curl <unfixed> (fork; bug #550437)
341 - cntlm <unfixed> (fork; bug #550438)
342
343 uw-imap
344 - pine <unfixed> (embed)
345 - alpine <unfixed> (embed)
346
347 imagemagick
348 - graphicsmagick <unfixed> (fork)
349
350 python-urlgrabber
351 - mercurial <unfixed> (embed; bug #531062)
352 - w3af <unfixed> (embed; bug #555372)
353 [experimental] - harvestman <unfixed> (embed; bug #555373)
354
355 beautifulsoup
356 - python-mechanize <unfixed> (embed; bug #555349)
357 - zope2.11 <removed> (embed; bug #555350)
358 - twill <unknown> (embed)
359
360 halibut
361 - nsis <unfixed> (fork)
362
363 libghttp
364 - hotway <unfixed> (embed)
365
366 libsndfile
367 - ardour 1:2.7.1-1 (embed)
368
369 glibmm2.4
370 - ardour 1:2.7.1-1 (embed)
371
372 libgnomecanvasmm2.6
373 - ardour 1:2.7.1-1 (embed)
374
375 libsigc++-2.0
376 - ardour 1:2.7.1-1 (embed)
377
378 soundtouch
379 - ardour 1:2.7.1-1 (embed)
380
381 libmms
382 - xine-lib <unfixed> (embed)
383 - mimms <unfixed> (embed)
384
385 fckeditor
386 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
387 - moin 1.8.2-2 (embed; bug #452599)
388 - karrigell <removed> (embed; bug #452598)
389 - gforge 4.6.99+svn6225-1 (embed)
390 - request-tracker3.8 <unfixed> (embed)
391 - otrs2 <unfixed> (embed)
392
393 ipatlas (not packaged in Debian)
394 - moodle <unfixed> (embed; bug #507185)
395
396 libphp-phpmailer
397 - moodle <unfixed> (embed; bug #507185)
398 - mahara <unfixed> (embed)
399 - symfony <unfixed> (embed; bug #566778)
400 [etch] - phpgroupware <unfixed> (embed)
401 NOTE: phpgroupware-felamimail is only in etch
402 - egroupware <unfixed> (embed; bug #504283)
403 - glpi <unfixed>
404
405 htmlArea (not packaged in Debian)
406 - moodle <unfixed> (embed)
407
408 giflib
409 - wine <unfixed> (embed; bug #466181)
410
411 bennu (not packaged in Debian, http://bennu.sourceforge.net)
412 - moodle <unfixed> (embed)
413
414 smarty
415 - moodle 1.8.2-2 (embed; bug #471158)
416 - gallery2 2.2.5-2 (embed; bug #471160)
417 - mahara 0.9.2-2 (embed; bug #471201)
418 - gosa 2.4beta1-1 (embed; bug #471200)
419
420 TinyMCE
421 - wordpress 2.5.1-3 (embed; bug #478257)
422 - moodle <unfixed> (embed; bug #507185)
423 - knowledgeroot <unfixed> (embed)
424 - joomla <itp> (bug #326398)
425
426 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
427 - scite <unfixed> (embed)
428 - qscintilla <unfixed> (embed)
429 - qscintilla2 <unfixed> (embed)
430 - geany <unfixed> (fork)
431 - anjuta <unfixed> (embed)
432
433 libphp-adodb
434 - moodle <unfixed> (embed; bug #507185)
435 NOTE: also AdoDB-XML Schema
436 - gallery2 <unfixed> (embed)
437 - phppgadmin <unfixed> (embed)
438 - egroupware <unfixed> (embed)
439 - phpwiki <unfixed> (embed)
440 - torrentflux 2.0beta1-2 (embed)
441 - ipplan <unfixed> (embed)
442 - typo3-src <unfixed> (embed)
443 - cacti <unknown> (embed)
444 [sarge] - cacti <unfixed> (embed)
445 NOTE: dependency exists, but internal version is used
446 - gforge 4.7~rc2-6 (embed)
447 - mahara <unfixed> (embed)
448
449 gzip
450 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
451 - klibc <unfixed> (embed)
452 NOTE: based on linux-kernel gzip code
453 - busybox <unfixed> (embed)
454 - pristine-tar <unfixed> (modified-embed)
455 NOTE: compression code only, not uncompression
456
457 neon
458 - cadaver 0.22.3+debian-1 (embed; bug #188381)
459 - gnome-vfs2 <unfixed> (embed; bug #395874)
460 [etch] - litmus <unfixed> (embed; #395875)
461 - litmus <removed> (embed; #395875)
462 [sarge] - screem <unfixed> (embed)
463 - sitecopy 1:0.16.0-1 (embed; bug #395876)
464 [etch] - tla <unfixed> (embed; bug #395877)
465 [sarge] - tla <unfixed> (embed; bug #395877)
466
467 libmodplug
468 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
469
470 libvncserver
471 - vino <unfixed> (embed)
472
473 putty
474 - filezilla <unfixed> (embed)
475
476 tinyxml (not packaged in Debian; itp bug #531968)
477 - filezilla <unfixed>
478 - crystalspace <unfixed> (embed)
479 - libwfut <unfixed> (embed)
480 - rarian <unfixed> (embed)
481 - bulletml <unfixed> (embed)
482 - pokerth <unfixed> (embed)
483 - qutecom <unfixed> (embed)
484 - sofa-framework <unfixed> (embed)
485 - yate <unfixed> (embed)
486 - antigrav <unfixed> (embed)
487 - balder2d <unfixed> (embed)
488 - cal3d <unfixed> (embed)
489 - criticalmass <unfixed> (embed)
490 - ember <unfixed> (embed)
491 - epiphany <unfixed> (embed)
492 - gambit <unfixed> (embed)
493 - noiz2sa <unfixed> (embed)
494 - ogre <unfixed> (embed)
495 - opencity <unfixed> (embed)
496 - openmovieeditor <unfixed> (embed)
497 - pouetchess <unfixed> (embed)
498 - tecnoballz <unfixed> (embed)
499 - trigger-rally <unfixed> (embed)
500 - xmoto <unfixed> (embed)
501 - mapnik <unknown> (embed)
502 NOTE: uses a different XML parser by default
503 - rrootage 0.23a-6 <embed>
504 NOTE: links to libbulltetml
505 - boson <unknown> (embed)
506 NOTE: the embedded code is unused
507
508 gv
509 - evince <unfixed> (embed)
510 NOTE: ps/ tree from gv 3.5.8
511 NOTE: evince-gtk is affected (a component of evince source package)
512
513 libXbae
514 - paw <removed> (embed)
515 [etch] - paw <unfixed> (embed)
516
517 libgtkhtml
518 - claws-mail-extra-plugins <unfixed> (fork)
519
520 libXaw
521 - paw <removed> (embed)
522 [etch] - paw <unfixed> (embed)
523 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
524
525 libgd2
526 - graphviz <unfixed> (embed)
527 NOTE: lib/gd seems to be 2.0.33
528 - wml 2.0.11ds2-1 (embed)
529 - libwmf <unfixed> (embed)
530 NOTE: derived from gd 1.6.3
531
532 rar
533 - unrar-nonfree <unfixed> (embed)
534
535 unrar-free (maybe this code is derived from the original rar, too?)
536 - clamav <unfixed> (embed)
537 NOTE: seems to be disabled in default config
538
539 mplayer (DirectMedia Object loader)
540 - xine-lib <unfixed> (embed)
541 NOTE: src/libw32dll/
542 - vlc <unfixed> (embed)
543 NOTE: modules/codec/dmo/
544 - mplayer 1.0~rc2-20 (embed)
545
546 libwpd (WordPerfect converter)
547 - openoffice.org <unfixed> (embed)
548
549 fsplib (http://sourceforge.net/projects/fsp/)
550 - gftp <unfixed> (embed)
551 NOTE: lib/fsplib version 0.3
552
553 sprng
554 - tree-puzzle <unfixed> (embed)
555
556 librpcsecgss
557 - krb5 <unfixed> (embed)
558
559 jasper
560 - ghostscript 8.64~dfsg-2 (embed)
561
562 libiris
563 - psi <unfixed> (embed)
564 - kdenetwork <unfixed> (embed)
565 NOTE: kopete embeds libiris but links dynamically to libidn
566 - kdegames <unfixed> (embed)
567 NOTE: ksirk/kde4
568
569 libidn
570 - monotone 0.43-1 (embed)
571 - psi <unfixed> (embed)
572 NOTE: psi embeds libiris which embeds libidn
573 - kdegames <unfixed> (embed)
574 NOTE: kdegames/kde4 embeds libiris which embeds libidn
575
576 lua5.1
577 - monotone 0.43-1 (embed)
578 - nmap 5.00-1 (embed; bug #527997)
579 [lenny] - nmap <unfixed> (embed; bug #527997)
580 - ocropus <unfixed> (embed)
581 - enigma <unfixed> (embed)
582 NOTE: requires lua built with C++
583 - freeciv <unfixed> (embed)
584 - spring <unfixed> (embed)
585
586 libbotan
587 - monotone 0.43-1 (embed)
588
589 NetXX
590 - monotone 0.43-1 (embed)
591
592 libgc
593 - mono <unfixed> (embed)
594
595 lzma
596 - p7zip <unfixed> (embed)
597 - xz-utils <unfixed> (fork)
598
599 lzo
600 - grub2 <unfixed> (embed)
601
602 yassl
603 - mysql-dfsg-5.0 <unfixed> (embed)
604 - mysql-dfsg-5.1 <unfixed> (embed)
605
606 pax code
607 - tar <unfixed> (embed)
608 - cpio <unfixed> (embed)
609
610 t1lib
611 - tetex-bin 2.0.2-1 (embed)
612 - texlive-bin <unknown> (embed)
613
614 guichan
615 - boswars <unfixed> (embed)
616 NOTE: maintainer notified us, working on it
617
618 tolua
619 - boswars <unfixed> (embed)
620 NOTE: maintainer notified us, working on it
621 NOTE: actually tolua++
622 - ocropus <unfixed> (embed)
623 NOTE: actually tolua++
624 - freeciv <unfixed> (embed)
625 NOTE: actually tolua++
626 - enigma <unfixed> (embed)
627
628 asio-dev
629 - luxrender <removed> (embed)
630
631 xine-lib
632 - vlc <unfixed> (embed)
633 NOTE: only parts included in modules/access/rtsp
634
635 netpbm
636 - tcl8.3 <unfixed> (embed)
637 - tcl8.4 <unfixed> (embed)
638 - tcl8.5 <unfixed> (embed)
639 NOTE: generic/tkImgGIF.c
640
641 tk8.5
642 - tk8.0 <removed> (old-version)
643 - tk8.3 <unfixed> (old-version)
644 - tk8.4 <unfixed> (old-version)
645 - perl-tk <unfixable> (fork)
646
647 samba
648 - mc 2:4.6.2~git20080311-1 (embed)
649 NOTE: maintainer is aware of this, currently searching a solution
650
651 plib1.8.4c2
652 - boson <unfixed> (fork)
653 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
654
655 fribidi
656 - quesoglc <unfixed> (embed)
657 NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
658
659 glew
660 - quesoglc <unfixed> (embed; bug #489341)
661 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
662 - trigger 0.5.2.1-2 (embed)
663 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
664 - trigger-rally 0.5.2.1-2 (embed)
665 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
666
667 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
668 - transcend <unfixed> (embed)
669 - cultivation <unfixed> (embed)
670 - passage <unfixed> (embed)
671 - gravitation <unfixed> (embed)
672
673 tar
674 - libarchive <unfixed> (embed)
675 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
676
677 cpio
678 - libarchive <unfixed> (embed)
679 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
680
681 kde4libs
682 - kdelibs <unfixable> (old-version)
683
684 webkit
685 - qt4-x11 <unfixed> (embed; bug #479851)
686 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
687 - kde4libs <unfixable> (fork)
688 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
689 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
690
691 ftgl
692 - blender 2.46+dfsg-1 (embed)
693
694 wv
695 - abiword <unfixed>
696
697 qemu
698 - kvm <removed> (embed; bug #543159)
699 - qemu-kvm <unfixed> (embed; bug #560853)
700 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
701 - xen-3 3.4.2-2 (embed; bug #560856)
702 - xen-unstable <unfixed> (embed; bug #560856)
703
704 vgabios
705 - kvm <removed> (embed; bug #489442)
706 - qemu-kvm <unfixed> (embed)
707
708 bochs
709 - kvm <removed> (embed; bug #489442)
710 - qemu-kvm <unfixed> (embed)
711
712 speex
713 - vorbis-tools <unfixed> (embed)
714 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
715 - gst-plugins-good0.10 <unfixed> (embed)
716 - xine-lib <unfixed> (embed)
717 - libfishsound <unfixed> (embed)
718 - libannodex <removed> (embed)
719 - vlc <unfixed> (embed)
720 - xmms-speex <unfixed> (embed)
721 - libsdl-sound1.2 <unfixed> (embed)
722 - sweep <unfixed> (embed)
723
724 libreadline
725 - magic <itp> (old-version)
726
727 opcode
728 - ode <unfixed> (embed)
729 NOTE: opcode is not a package in debian, it is just embedded
730 NOTE: http://www.codercorner.com/Opcode.htm
731
732 gimpact
733 - ode <unfixed> (embed)
734 NOTE: gimpact is not a package in debian, it is just embedded
735 NOTE: http://gimpact.sf.net
736
737 mochikit
738 - mahara <unfixed> (embed)
739 NOTE: they require extra patches, still unmerged upstream
740 - ntop <unfixed> (embed)
741 - coherence 0.6.2-1 (embed)
742 - paste <unfixed> (embed)
743 - turbogears <unfixed> (embed)
744 - plone3 <removed> (embed)
745 - xulrunner <unfixed> (embed)
746 - libjifty-plugin-chart-perl <unfixed> (embed)
747 - sabnzbdplus <unfixed> (embed)
748 - tgmochikit <unfixed> (embed)
749
750 prototypejs
751 - netbeans-ide 6.0.1+dfsg-2 (embed)
752 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
753 - webcit <unfixed> (embed; bug #555219)
754 - asterisk 1:1.6.2.0~rc3-1 (embed)
755 - libjson-ruby 1.1.4-1 (embed; bug #555224)
756 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
757 - horde3 <unfixed> (embed)
758 - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
759 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
760 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
761 - ebug-http <removed> (embed; bug #555236)
762 - libaws 2.7-1 (embed; bug #555222)
763 - phpgedview <removed> (embed)
764 - poker-network 1.7.6-1 (embed; bug #555238)
765 - rails 2.1.0-6 (embed)
766 - wordpress 2.5.0-2 (embed; bug #555243)
767 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
768 TODO: search through all of the other zope packages
769 - ampache 3.4.1-2 (embed)
770 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
771 - hobix 0.5~svn20070319-4 (embed; bug #555247)
772 - zabbix 1.6.6-4 (embed; bug #555250)
773 - chora2 <unfixed> (embed; bug #555253)
774 - gollem <unfixed> (embed; bug # 555254)
775 - jscropperui 1.2.1-1 (embed; bug #555257)
776 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
777 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
778 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
779 - activeldap <unfixed> (embed)
780 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
781 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
782 - otrs2 2.3.4-6 (embed; bug #555267)
783 - webcalendar 1.2~b1-2 (embed; bug #555269)
784 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
785 - jifty 0.90519-1 (embed; bug #555271)
786 - jquery 1.4-1 (embed; bug #555272)
787 - passenger 2.2.5debian1-1 (embed; bug #555273)
788 - plone3 <removed> (embed; bug #555275)
789 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
790 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
791 - xulrunner <unfixed> (embed)
792 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
793
794 gdb
795 - insight <unfixed> (embed)
796
797 e2fsprogs
798 - ldiskfsprogs <unfixable> (fork)
799
800 quazip (not packaged in Debian)
801 - qcake <unfixed> (embed)
802 NOTE: starting with upstream version 0.6.4
803
804 exo
805 - pcmanfm <unfixed> (embed; bug #499677)
806 NOTE: slightly modified source code
807
808 java
809 - openjdk-6 <unfixed>
810 - sun-java5 <unfixed>
811 - sun-java6 <unfixed>
812
813 libphp-snoopy
814 - ampache 3.4.1-2 (embed; bug #504169)
815 - gforge 4.6.99+svn6094-2 (embed)
816 - mahara 1.0.5-2 (embed; bug #504170)
817 - pixelpost 1.7.1-5 (embed; bug #504171)
818 - mediamate 0.9.3.6-5 (embed; bug #504172)
819 - opendb <removed> (embed; bug #504173)
820 [etch] - opendb <unfixed> (embed; bug #504173)
821 - wordpress 2.5.1-9 (embed; bug #443948)
822 - moodle <unfixed> (embed; bug #507185)
823 [etch] - phpgroupware <unfixed> (embed)
824 NOTE: phpgroupware-felamimail
825 - magpierss 0.72-3 (embed; bug #431089)
826
827 jquery
828 - zekr <unfixed> (embed)
829 - wordpress <unknown> (embed)
830 - yocto-reader <unfixed> (embed)
831 - textpattern <unfixed> (embed)
832 - genshi 0.5.1-1 (embed)
833 NOTE: compressed file under examples/ dir
834 - prewikka <unfixed> (embed)
835 - libramaze-ruby <unfixed> (embed)
836 - drupal5 <unfixed> (embed)
837 - b2evolution <unfixed> (embed)
838 - wesnoth <unfixed> (embed)
839
840 tablesorter (jquery plugin, not packaged yet)
841 - wesnoth <unfixed> (embed)
842
843 kses
844 - wordpress <unfixed> (embed; bug #504242)
845 NOTE: their copy has all methods renamed to wp_<foo>
846 NOTE: kses isn't in Debian, RFP: #504240
847 - moodle <unfixed> (embed; bug #507185)
848 - egroupware <unfixed> (embed)
849
850 magpierss
851 - wordpress <unfixed> (embed; bug #504242)
852 - moodle <unfixed>
853
854 php-gettext
855 - wordpress 2.8.4-1 (embed; bug #504242)
856 - docbookwiki <unfixed> (embed)
857 - knowledgeroot 0.9.9.5-1
858 NOTE: non-free
859
860 libphp-ixr (name may change, it is the Incutio XML-RPC)
861 - wordpress <unfixed> (embed; bug #504242)
862 NOTE: libphp-ixr isn't in Debian, RFP: #504236
863 - dokuwiki <unfixed> (embed)
864 - textpattern <unfixed> (embed)
865
866 libphp-cas
867 - glpi <unfixed> (embed)
868 - moodle <unfixed> (embed; bug #505984)
869
870 scriptaculous (prototype.js is among the embeds in the following)
871 - glpi <unfixed> (embed)
872 - libaws <unfixed> (embed; bug #555222)
873 - op-panel <unfixed> (embed)
874 - symfony <unfixed> (embed)
875 NOTE: maintainer says there are extra incompatible changes required
876 - pixelpost 1.7.1-6 (embed)
877 - webhelpers <unfixed> (embed)
878 - qwik <removed> (embed; bug #555241)
879 - smokeping <unfixed> (embed)
880 - turba2 <unfixed> (embed)
881 - typo3-src 4.2.3-1 (embed)
882 - request-tracker3.6 <unfixed> (embed)
883 - request-tracker3.8 <unfixed> (embed)
884 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
885 - wordpress 2.5.0-2 (embed)
886 - libhtml-prototype-perl 1.48-3 (embed)
887
888 libmarkdown-php
889 - moodle <unfixed> (embed; bug #507185)
890 - pixelpost 1.7.1-6 (embed)
891
892 php-openid
893 - wordpress-openid <itp> (embed)
894
895 geshi
896 - dokuwiki 0.0.20080505-3.1 (embed)
897 - pgfouine 1.0-1.1 (embed)
898 - websvn 2.1.0-1 (embed)
899
900 webcalendar
901 - gforge 4.7~rc2-6 (embed; bug #504758)
902
903 libical
904 - kdepim <unknown> (fork)
905 NOTE: fixed at some point during 4.0
906 - kdepimlibs 4.2.0-1 (fork)
907 - claws-mail-extra-plugins <unfixed> (fork)
908
909 harfbuzz
910 - qt4-x11 <unfixed> (embed)
911 - pango1.0 <unfixed> (embed)
912 - fontmatrix <unfixed> (embed)
913
914 libzip
915 - php5 <unfixable> (modified-embed)
916 - odt2txt <unfixed> (embed; bug #523808)
917
918 json.php (not packaged; should be replaced with php's built-in functions)
919 - moodle <unfixed>
920 - yui <unfixed>
921 - gallery2 <unfixed>
922 - dokuwiki <unfixed>
923 - typo3-src <unfixed>
924
925 php-fpdf
926 - tcpdf <itp> (fork)
927 - moodle <unfixed>
928 - phpwiki <unfixed>
929 - egroupware <unfixed>
930 - ldap-account-manager <unfixed> (fork)
931
932 tcpdf (itp: #495985)
933 - moodle <unfixed>
934 - phpmyadmin <unfixed>
935
936 typo3
937 - moodle <unfixed>
938
939 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
940 - moodle <unfixed>
941 - gosa <unfixed>
942
943 php-ole (itp: #487558)
944 - moodle <unfixed>
945
946 pieforms (http://www.catalyst.net.nz)
947 - mahara <unfixed>
948
949 savant2 (http://phpsavant.com)
950 - egroupware <unfixed>
951
952 rssparser (http://nwow.org)
953 - egroupware <unfixed>
954 - phpgroupware <unfixed>
955
956 lcms
957 - openjdk-6 <unfixed> (fork)
958 - gimp 2.4.0~rc2-2
959
960 libphp-phplayersmenu
961 - diogenes <unfixed>
962 - phpldapadmin <unfixed>
963
964 libphp-pclzip
965 - docvert <unfixed>
966 - moodle <unfixed>
967 - egroupware <unfixed>
968
969 libphp-simplepie
970 - dokuwiki <unfixed>
971 - wordpress <unfixed>
972
973 libphp-jpgraph
974 - egroupware <unfixed>
975
976 php-simpletest
977 - moodle <unfixed>
978
979 libpng
980 - iceweasel <not-affected> (uses xulrunner)
981 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
982 - iceape 1.0.13~pre080614i-0etch1 (embed)
983 - xulrunner 1.9.0.13-1 (embed)
984 [lenny] - xulrunner 1.9.0.11-0lenny1
985 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
986 - gamera 3.2.3-1 (embed)
987 - freeimage <unfixed> (embed)
988 - tuxonice-userui (static)
989
990 irssi
991 - silc-client <unfixed> (embed)
992 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
993
994 extc
995 - mtasc <unfixed> (embed)
996 - haxe <unfixed> (embed)
997
998 swflib
999 - mtasc <unfixed> (embed)
1000 - haxe <unfixed> (embed)
1001
1002 libitext-java
1003 - bouncycastle 2.1.4-1 (embed)
1004
1005 python-ply
1006 - pyke <unfixed> (embed; bug #555363)
1007 - pywbem 0.7.0-4 (embed; bug #555364)
1008 - sepolgen <unfixed> (embed; bug #555365)
1009 - zope-textindexng3 <unknown> (embed)
1010 - iceweasel <not-affected> (uses xulrunner)
1011 - xulrunner <unknown> (embed)
1012 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1013
1014 libdumbnet (libdnet upstream)
1015 - nmap <unfixed> (fork)
1016
1017 gcc-4.4
1018 - gcc-mingw32 <unfixed> (embed)
1019
1020 camlimages
1021 - advi <unfixed> (static; bug #550441)
1022
1023 memcached
1024 - memcachedb <unfixed> (embed)
1025
1026 yajl
1027 - argyll <unfixed> (embed; bug #544223)
1028 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1029
1030 nusoap
1031 - gforge 4.8.2-1 (embed)
1032 - ampache <unfixed> (embed)
1033 - poker-network <unfixed> (embed)
1034 - moodle <unfixed> (embed)
1035 NOTE: code is not used when running under php5 and soap is enabled
1036 - phpwiki <unfixed> (embed)
1037 - gallery2 <unfixed> (embed)
1038 - typo3-src <unfixed> (embed)
1039
1040 libept
1041 - adept <unfixed> (embed; bug #540649)
1042
1043 libvorbis
1044 - iceweasel <not-affected> (uses xulrunner)
1045 - xulrunner <unfixed> (embed; bug #540959)
1046 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1047 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1048 - iceape <unfixed> (embed)
1049 [etch] - iceape <not-affected> (introduced in 2.0)
1050 [lenny] - iceape <not-affected> (introduced in 2.0)
1051
1052 cairo
1053 - iceweasel <not-affected> (uses xulrunner)
1054 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1055
1056 liboggz
1057 - iceweasel <not-affected> (uses xulrunner)
1058 - xulrunner <unfixed> (embed; bug #540959)
1059 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1060 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1061 - iceape <unfixed> (embed)
1062 [etch] - iceape <not-affected> (introduced in 2.0)
1063 [lenny] - iceape <not-affected> (introduced in 2.0)
1064
1065 liboggplay
1066 - iceweasel <not-affected> (uses xulrunner)
1067 - xulrunner <unfixed> (embed; bug #540959)
1068 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1069 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1070 - iceape <unfixed> (embed)
1071 [etch] - iceape <not-affected> (introduced in 2.0)
1072 [lenny] - iceape <not-affected> (introduced in 2.0)
1073
1074 php-net-dnsbl
1075 - serendipity <unfixed> (embed; bug #541740)
1076
1077 php-onyx-rss
1078 - serendipity <unfixed> (embed; bug #541740)
1079
1080 php-text-wiki
1081 - serendipity <unfixed> (embed; bug #541740)
1082
1083 php-xml-rpc
1084 - serendipity <unfixed> (embed; bug #541740)
1085
1086 polarssl (does not have a shared library)
1087 - pdkim <itp> (embed; bug #543150)
1088 - xyssl <unfixed> (old-version)
1089
1090 pidgin (libpurple)
1091 - gaim <removed> (old-version)
1092 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1093
1094 icu
1095 - webkit 1.0.1-1 (embed; bug #547214)
1096 - texlive-bin <unfixed> (fork)
1097 NOTE: texlive upstream working with icu upstream to merge their changes
1098
1099 cyrus-imapd-2.2
1100 - kolab-cyrus-imapd <unfixed> (fork)
1101 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1102
1103 python-cxx-dev
1104 - freecad 0.9.2646.3-1 (embed; bug #547936)
1105
1106 zipios++
1107 - freecad 0.9.2646.3-1 (embed; bug #547941)
1108 - enigma 0.92.3-3 (embed)
1109 NOTE: likely fixed earlier, marking etch's version as fixed
1110
1111 linux-2.6
1112 - kvm <removed> (embed; bug #549973) [./kernel/*]
1113 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1114 - kernel-source-2.6.8 <removed> (old-version)
1115 - kernel-source-2.4.27 <removed> (old-version)
1116 - kernel-source-2.4.24 <removed> (old-version)
1117 - kernel-source-2.2.25 <removed> (old-version)
1118 - kernel-source-2.2.20 <removed> (old-version)
1119
1120 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1121 - kvm <removed> (embed) [./libfdt/*]
1122 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1123
1124 qweb (not packaged)
1125 - ajaxterm <unfixed>
1126
1127 opensaml2
1128 - opensaml <removed> (old-version)
1129
1130 shibboleth-sp2
1131 - shibboleth-sp <removed> (old-version)
1132
1133 tuxonice-userui
1134 - suspend2-userui <removed> (old-version)
1135
1136 expat
1137 - w3c-libwww <removed> (embed; bug #551941)
1138 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1139 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1140 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1141 - python2.4 <unfixable> (embed; bug #553403)
1142 - python-4suite <unfixed> (embed; bug #516935)
1143 - wxwindows2.4 <removed> (embed)
1144 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1145 - wxwidgets2.8 2.8.10.1-2 (embed)
1146 - celementtree 1.0.5-8 (embed)
1147 NOTE: Maybe that was fixed even earlier
1148 - audacity 1.3.2-1 (embed)
1149 - matanza <unfixed> (embed)
1150 - tdom 0.8.3~20080525-1 (embed)
1151 - udunits 2.1.8-4 (embed)
1152 - apr-util 1.2 (embed)
1153 - ayttm <unfxed> (embed; bug #561006)
1154 - cableswig <unfixed> (embed)
1155 - cadaver <unfixed> (embed)
1156 - cmake 2.6.0-6 (embed)
1157 - coin3 <unfixed> (embed)
1158 - gdcm 2.0.14-2 (embed)
1159 - ghostscript 8.71~dfsg-2 (embed)
1160 - grmonitor <removed> (embed)
1161 - iceape <unfixed> (embed)
1162 - insighttoolkit 3.16.0-1 (embed)
1163 NOTE: insighttoolkit might've been fixed earlier
1164 - libparagui1.1 1.0.2-1 (embed)
1165 - paraview 3.6.2-1 (embed)
1166 - poco 1.3.6p1-1 (embed)
1167 - simgear <unfixed> (embed)
1168 - sitecopy 1:0.16.0-1
1169 - smart <unfixed> (embed)
1170 NOTE: smart embeds celementree, and it includes expat
1171 - swish-e <not-affected> (Linked against libxml, which is used instead)
1172 - tla 1.3.5+dfsg-15 (embed)
1173 - vtk 4.1.20030227-1 (embed)
1174 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1175 - xmlrpc-c <unfixed> (embed)
1176 - iceweasel <unfixed> (embed)
1177 - kompozer <unfixed> (embed)
1178 - vxl 1.13.0-2 (embed)
1179 - xulrunner <unfixed> (embed)
1180 - apache2 2.2 (embed)
1181 - texlive-bin <not-affected> (Embedded code not compiled in)
1182 - vnc4 <unfixed> (embed)
1183 - xotcl 1.6.6-1 (embed)
1184
1185 xerces-c
1186 - xerces-c2 <unfixed> (old-version)
1187 - xerces27 <removed> (old-version)
1188
1189 md5 (RSA's version; not the gnu version provided by coreutils)
1190 - w3c-libwww <removed> (embed; bug #551942)
1191 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1192
1193 libparagui1.1
1194 - asc <unfixable> (fork)
1195
1196 enet
1197 - sauerbraten <unfixed> (embed; #497194)
1198
1199 eglibc
1200 - glibc <removed> (old-version)
1201
1202 galib
1203 - gamera 3.2.3-1 (embed)
1204
1205 configobj
1206 - bzr 2.1.0~rc2-1 (embed; bug #555336)
1207 - elisa <unfixed> (embed; bug #555337)
1208 - gaupol <unfixed> (embed; bug #555338)
1209 - ipython <unfixed> (embed; bug #555339)
1210 - pida <unfixed> (embed; bug #555340)
1211 - psychopy <unfixed> (embed; bug #555341)
1212 - rest2web <unfixed> (embed; bug #555342)
1213 - auth2db <unknown> (embed)
1214 - dynagen <unknown> (embed)
1215 - iceweasel <unknown> (embed)
1216 - sabnzbdplus <unknown> (embed)
1217 - xulrunner <unknown> (embed)
1218 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1219
1220 python-clientform
1221 - bibus <unfixed> (embed; bug #555332)
1222 - zope2.10 <unfixed> (embed; bug #555333)
1223 - zope2.11 <removed> (embed; bug #555334)
1224 - python-mechanize <unknown> (embed)
1225 - twill <unknown> (embed)
1226
1227 python-mechanize
1228 - zope2.10 <unfixed> (embed; bug #555337)
1229 - zope2.11 <removed> (embed; bug #555338)
1230 - twill <unknown> (embed; bug #555339)
1231
1232 pexpect
1233 - duplicity 0.6.06-1 (embed; bug #555361)
1234 - hplip <unfixed> (embed; bug #555362)
1235 - smart <unfixed> (embed; bug #555363)
1236
1237 pyparsing
1238 - bauble <unfixed> (embed; bug #555366)
1239 - boa-constructor 0.6.1-8 (embed; bug #555367)
1240 - calibre <unfixed> (embed; bug #555368)
1241 - matplotlib <unfixed> (embed; bug #531024)
1242 - zhpy 1.7.3.1-1 (embed; bug #555370)
1243 - polybori <unknown> (embed)
1244 - python-whoosh <unknown> (embed)
1245 - twill <unknown> (embed)
1246 - zope-textindexng3 <unknown> (embed)
1247
1248 python-pysqlite2
1249 - python2.4 <unfixed> (embed; bug #553403)
1250 - python2.5 <unfixed> (embed; bug #553403)
1251
1252 celementtree
1253 - python2.5 <unfixed> (embed)
1254 - smart <unfixed> (embed)
1255
1256 elementtree
1257 - python2.5 <unfixed> (embed)
1258 - python2.6 <unfixed> (embed)
1259 - bzr 2.1.0~rc2-1 (embed; bug #555343)
1260 - gedit 2.28.2-1 (embed; bug #555344)
1261 - smart <unfixed> (embed)
1262 - solfege <unfixed> (embed; bug #555345)
1263 - w3af <unfixed> (embed; bug #555346)
1264 - python-qt4 <unknown> (embed)
1265 - sphinx <unknown> (embed)
1266 - python-nltk <itp> (embed)
1267
1268 python2.5
1269 - python2.4 <unfixed> (old-version)
1270 - jython <unfixed> (embed)
1271 NOTE: embeds many stdlib modules
1272 - python-django <unfixed> (embed; bug #555419)
1273 NOTE: embeds stdlib modules: doctest, decimal
1274 - gamera 3.2.3-1 (embed)
1275 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1276 - boa-constructor <unfixed> (embed; bug #555426)
1277 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1278 - nicotine <unfixed> (embed; bug #555427)
1279 NOTE: embeds stdlib modules: ConfigParser
1280 - museek+ <unfixed> (embed; bug #555428)
1281 NOTE: embeds stdlib modules: ConfigParser
1282 - vegastrike-data <unfixed> (embed)
1283 NOTE: embeds many stdlib modules
1284 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1285 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1286 - config-manager <unfixed> (embed; bug #555423)
1287 NOTE: embeds stdlib modules: optparse
1288 - jhbuild 2.28.0-1 (embed; bug #555421)
1289 NOTE: embeds stdlib modules: optparse, subprocess
1290 - smart <unfixed> (embed; bug #555432)
1291 NOTE: embeds stdlib modules: optparse
1292 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1293 NOTE: embeds stdlib modules: doctest
1294 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1295 NOTE: embeds stdlib modules: doctest
1296 - distribute <unfixed> (embed)
1297 NOTE: embeds stdlib modules: doctest
1298 - python-setuptools <unfixed> (embed; bug #555435)
1299 NOTE: embeds stdlib modules: doctest
1300 - zope.testing <unfixed> (embed; bug #555436)
1301 NOTE: embeds stdlib modules: doctest
1302 - translate-toolkit <unfixed> (embed; bug #555422)
1303 NOTE: embeds stdlib modules: textwrap, contextlib
1304 - libtpclient-py <unfixed> (embed; bug #555424)
1305 NOTE: embeds stdlib modules: subprocess
1306 - grass <unfixed> (embed; bug #555425)
1307 NOTE: embeds stdlib modules: subprocess
1308 - coherence <unfixed> (embed; bug #555429)
1309 NOTE: embeds stdlib modules: uuid
1310 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1311 NOTE: embeds stdlib modules: uuid
1312 - setroubleshoot <unfixed> (embed; bug #555431)
1313 NOTE: embeds stdlib modules: uuid
1314 - linkchecker <unfixed> (embed; bug #555414)
1315 NOTE: embeds msgfmt.py script
1316 - imdbpy <unfixed> (embed)
1317 NOTE: embeds msgfmt.py script
1318 - kiwi <unfixed> (embed)
1319 NOTE: embeds msgfmt.py script
1320 - moin <unfixed> (embed)
1321 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1322 - plone3 <removed> (embed)
1323 NOTE: embeds msgfmt.py script
1324 - roundup <unfixed> (embed)
1325 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1326 - rednotebook <unfixed> (embed; bug #555415)
1327 NOTE: embeds msgfmt.py script
1328 - turbogears <unfixed> (embed)
1329 NOTE: embeds msgfmt.py script
1330 - elisa <unfixed> (embed)
1331 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1332 - calibre <unfixed> (embed)
1333 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1334 - mailman 1:2.1.13-1 (embed; #555416)
1335 NOTE: embeds msgfmt.py script
1336 - python-docutils <unknown> (embed)
1337 NOTE: embeds stdlib modules: optparse, textwrap
1338 - python-imaging <unknown> (embed)
1339 NOTE: embeds stdlib modules: doctest
1340 - python-mechanize <unknown> (embed)
1341 NOTE: embeds stdlib modules: doctest
1342 - twill <unknown> (embed)
1343 NOTE: embeds stdlib modules: subprocess
1344 - zeroc-ice <unknown> (embed)
1345 NOTE: embeds stdlib modules: subprocess
1346 - wxwidgets2.8 <unknown> (embed)
1347 NOTE: embeds stdlib modules: subprocess
1348 - cycle <unknown> (embed)
1349 NOTE: embeds msgfmt.py script
1350 - deluge <unknown> (embed)
1351 NOTE: embeds msgfmt.py script
1352 - opendict <unknown> (embed)
1353 NOTE: embeds msgfmt.py script
1354 - openerp-client <unknown> (embed)
1355 NOTE: embeds msgfmt.py script
1356 - rapidsvn <unknown> (embed)
1357 NOTE: embeds msgfmt.py script
1358 - wammu <unknown> (embed)
1359 NOTE: embeds msgfmt.py script
1360 - gaphor <unknown> (embed)
1361 NOTE: embeds msgfmt.py script
1362 - pida <unknown> (embed)
1363 NOTE: embeds msgfmt.py script
1364 - python-formencode <unknown> (embed)
1365 NOTE: embeds msgfmt.py script
1366 - duplicity <unfixed> (embed)
1367 NOTE: embeds stdlib module: urlparse, tarfile
1368 - pygopherd <unfixed> (embed)
1369 NOTE: embeds stdlib module: zipfile
1370
1371 argparse
1372 - twill <unfixed> (embed; bug #555347)
1373 - ipython <unfixed> (embed; bug #555348)
1374
1375 coherence
1376 - elisa <unfixed> (embed; bug #555335)
1377
1378 simpletal
1379 - plastex <unfixed> (embed; bug #555371)
1380
1381 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1382 - postr <unfixed> (embed)
1383 - elisa <unfixed> (embed)
1384
1385 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1386 - apertium-tolk <unfixed> (embed)
1387 - ipython <unfixed> (embed)
1388 - virtaal <unfixed> (embed)
1389
1390 distribute
1391 - setuptools <removed> (old-version)
1392
1393 rails
1394 - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1395 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1396 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1397 - thin <unfixed> (embed) [./spec/rails_app/*]
1398 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1399 NOTE: be dangerous if developers are naively basing their code off of the examples
1400 NOTE: prototype.js is among the example files
1401
1402 lucene2 (prototype.js is among the embeds in the following)
1403 - lucene <unfixed> (old-version)
1404 - pylucene <unfixed> (embed)
1405 - libpdfbox-java <unfixed> (embed)
1406 - libfontbox-java <unfixed> (embed)
1407 - libjempbox-java <unfixed> (embed)
1408 - solr <unfixed> (embed)
1409
1410 unicode-data
1411 - syslinux <unfixed> (embed)
1412 - camomile <unfixed> (embed)
1413 - fribidi <unfixed> (embed)
1414 - m17n-db <unfixed> (embed)
1415 - sbcl <unfixed> (embed)
1416 - heimdal <unfixed> (embed)
1417 - icu <unfixed> (embed)
1418 - icu4j <unfixed> (embed)
1419 - krb5 <unfixed> (embed)
1420 - moodle <unfixed> (embed)
1421 - openldap <unfixed> (embed)
1422 - pike7.6 <unfixed> (embed)
1423 - samba <unfixed> (embed)
1424 - samba4 <unfixed> (embed)
1425 - cmucl <unfixed> (embed)
1426 - typo3-src <unfixed> (embed)
1427 - mauve <unfixed> (embed)
1428 - texlive-bin <unfixed> (embed)
1429 - ypsilon <unfixed> (embed)
1430 - jeuclid <unfixed> (embed)
1431 - charmap.app <unfixed> (embed)
1432 - clisp <unfixed> (embed)
1433 - gnulib <unfixed> (embed)
1434 - opensrs-client <unfixed> (embed)
1435 - saxonb <unfixed> (embed)
1436 - rails <unfixed> (embed)
1437
1438 feedparser
1439 - rawdog <unfixed> (embed; bug #383422)
1440 - miro <unfixed> (embed; bug #555351)
1441 - calibre <unfixed> (embed; bug #555352)
1442 - freevo <unfixed> (embed; bug #555353)
1443 - pida <unfixed> (embed; bug #555354)
1444 - planet-venus <unfixed> (embed; bug #555355)
1445 - plone3 <removed> (embed; bug #555356)
1446 - exaile 0.2.14+debian-1 (embed)
1447 - screenlets 0.1.2-3 (embed)
1448 NOTE: included twice
1449
1450 agg:
1451 - matplotlib <unfixed> (embed: bug #377271)
1452 - contextfree <unfixed> (embed)
1453 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1454 - exactimage <unfixed> (embed)
1455 - python-enable <unfixed> (embed)
1456 - mapnik 0.5.1-3 (embed)
1457 NOTE: links statically to agg, but shared library is not available (bug #377271)
1458
1459 vtk
1460 - paraview <unfixable> (embed; bug #495426)
1461
1462 txt2tags
1463 - rednotebook <unfixed> (embed)
1464
1465 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1466 - gajim <unfixed> (embed)
1467 - emesene <unfixed> (embed)
1468 - convirt <unfixed> (embed)
1469 - pida <unfixed> (embed)
1470 - rednotebook <unfixed> (embed)
1471
1472 horde3 (prototype.js is among the embeds in the following)
1473 - mnemo2 <unfixed> (embed)
1474 - nag2 <unfixed> (embed)
1475 - wordpress <unfixed> (embed)
1476 NOTE: Text_Diff (wp-includes/Text/Diff*)
1477
1478 cimg
1479 - gmic <itp> (embed)
1480
1481 mootools
1482 - gmic <itp> (embed)
1483
1484 openldap
1485 - openldap2.3 <removed> (old-version)
1486
1487 grub2
1488 - grub <unfixed> (old-version)
1489
1490 gnupginterface
1491 - duplicity <unfixed> (embed)
1492
1493 python-dateutil
1494 - awn-extras-applets <unfixed> (embed)
1495 - matplotlib <unknown> (embed)
1496
1497 cups
1498 - cupsys <removed> (old-version)
1499
1500 yui
1501 - bcfg2 <not-affected> (present in source but not included in any binary files)
1502 - serendipity <unfixed> (embed; bug #557746)
1503 - moodle 1.8.2.dfsg-5 (embed)
1504 - jifty 0.91117-1 (embed; bug #557748)
1505 - webgui 7.7.26-1 (embed)
1506 - loggerhead 1.17-1 (embed)
1507
1508 quake3 (vanilla source not packaged in debian)
1509 - openarena <unfixable> (fork)
1510
1511 quake2 (vanilla source not packaged in debian)
1512 - alien-arena <unfixable> (fork)
1513 - warsow <unfixable> (fork)
1514
1515 libtheora
1516 - iceweasel <not-affected> (uses xulrunner)
1517 - xulrunner <unfixed> (embed; bug #540959)
1518 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1519 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1520 - iceape <unfixed> (embed; bug #559276)
1521 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1522 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1523
1524 dtoa
1525 - bfilter <unfixed> (embed)
1526 - cacao <unfixed> (embed)
1527 - cdrdao <unfixed> (embed)
1528 - classpath <unfixed> (embed)
1529 - freej <unfixed> (embed)
1530 - iceape <unfixed> (embed)
1531 - iceweasel <unfixed> (embed)
1532 - jscoverage <unfixed> (embed)
1533 - kde4libs <unfixed> (embed)
1534 - kdelibs <unfixed> (embed)
1535 - kompozer <unfixed> (embed)
1536 - libv8 <unfixed> (embed)
1537 - mono <unfixed> (embed)
1538 - newlib <unfixed> (embed)
1539 - nspr <unfixed> (embed)
1540 - php5 <unfixed> (embed)
1541 - polyml <unfixed> (embed)
1542 - qt4-x11 <unfixed> (embed)
1543 - rhino <unfixed> (embed)
1544 NOTE: code translated to Java
1545 - ruby1.8 <unfixed> (embed)
1546 - ruby1.9 <unfixed> (embed)
1547 - ruby1.9.1 <unfixed> (embed)
1548 - sdd <unfixed> (embed)
1549 - sfind <unfixed> (embed)
1550 - star <unfixed> (embed)
1551 - tinymux <unfixed> (embed)
1552 - virtualbox-ose <unfixed> (embed)
1553 - webkit <unfixed> (embed)
1554 - xulrunner <unfixed> (embed)
1555
1556 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1557 - firegpg <unfixed> (embed)
1558 - enigmail <unfixed> (embed)
1559
1560 ptmalloc (not packaged in Debian)
1561 - crystalspace <unfixed> (embed)
1562 - qt4-x11 <unfixed> (embed)
1563
1564 svgalib
1565 - usplash <unfixed> (embed)
1566
1567 bogl
1568 - usplash <unfixed> (embed)
1569
1570 taglist
1571 - usplash <unfixed> (embed)
1572
1573 portaudio
1574 - audacity <unfixed> (embed; bug #323711)
1575
1576 nyquist
1577 - audacity <unfixed> (embed)
1578 NOTE: embeds a forked nyquist with support for a shared library
1579
1580 vamp-plugin-sdk
1581 - audacity <unfixed> (embed)
1582
1583 wordpress
1584 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1585 - wordpress-mu <removed> (fork)
1586
1587 php5
1588 - php4 <removed> (old-version)
1589
1590 classpath
1591 - libgnucrypto-java <removed> (embed; bug #559788)
1592
1593 libtool
1594 - apr <unfixed> (static; bug #489625)
1595 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1596 - arts <unfixed> (embed)
1597 - bochs 2.4.2-1 (embed; bug #560884)
1598 - camserv <unfixed> (embed)
1599 - collectd 4.8.2-1 (embed)
1600 - courier-authlib 0.58-4 (embed)
1601 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1602 - cvsnt 2.5.04.3236-1.2 (embed)
1603 - dico <not-affected> (Uses the system copy of ltdl)
1604 - freeradius 0.1+20010527-1 (embed)
1605 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1606 - ggobi 2.1.9~20091212-1 (embed)
1607 - glame 2.0.1-4 (embed)
1608 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1609 - gnash 0.8.7-2 (embed)
1610 - gnu-smalltalk <unfixed> (embed; bug #566777)
1611 - google-gadgets 0.10.5-0.3 (embed)
1612 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1613 - graphicsmagick 1.3.5-6 (embed)
1614 - graphviz 2.8-3 (embed)
1615 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1616 - guile-1.6 1.6.8-7 (embed)
1617 - hamlib <unfixed> (embed)
1618 - hercules 3.06-1.2 (embed)
1619 - jags 1.0.4-3 (embed; bug #560864)
1620 - kdelibs <unfixed> (embed)
1621 - libannodex <removed> (embed)
1622 - libextractor 0.5.23+dfsg-4 (embed)
1623 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1624 - libtunepimp 0.5.3-7.3 (embed)
1625 - mp4h 1.3.1-4.1 (embed)
1626 - naim <removed> (embed)
1627 - parser-mysql <unfixed> (embed)
1628 - pinball 0.3.1-11 (embed)
1629 - redland <unfixed> (embed)
1630 - siproxd <unfixed> (embed)
1631 - ski <unfixed> (embed)
1632 - synfig 0.62.00-1 (embed)
1633 - unixodbc 2.2.4-5 (embed)
1634 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1635 - clamav 0.95+dfsg-1 (embed)
1636 - imagemagick 6:6.2.3.1-1 (embed)
1637 - hypre 2.4.0b-5 (embed)
1638 - lam <unfixed> (embed)
1639 - openmpi <unfixable> (embed; bug #559386)
1640 - parser <unfixed> (embed)
1641 - pdsh 2.18-5 (embed; bug #560892)
1642 - sbnc 1.2-8 (embed)
1643 - sdcc <unfixed> (embed)
1644 - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1645 - proftpd-dfsg <unfixed> (embed; bug #561748)
1646 - babel 1.4.0.dfsg-5 (embed)
1647 - libprelude 0.9.14-2 (embed)
1648 - heartbeat 2.1.4-7 (embed)
1649 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1650 NOTE: might've been fixed earlier
1651 - gcc-* <unknown> (embed)
1652
1653 ocamlgsl
1654 - orpie 1.5.1-7.1 (embed; bug #550058)
1655
1656 xdotool
1657 - keynav <unfixed> (embed; bug #560103)
1658
1659 bulletphysics (not packaged; http://www.bulletphysics.org/)
1660 - supertuxkart <unfixed> (embed)
1661 - blender <unfixed> (embed)
1662
1663 ghostscript
1664 - gs-gpl <removed> (old-version)
1665
1666 icedove
1667 - thunderbird <removed> (old-version)
1668
1669 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1670 - jquery <unfixed> (embed)
1671
1672 sed
1673 - ssed <unfixed> (fork)
1674
1675 phpatomlib (http://code.google.com/p/phpatomlib)
1676 - wordpress <unfixed> (embed)
1677
1678 Services_JSON (http://pear.php.net/package/Services_JSON)
1679 - wordpress <unfixed> (embed)
1680
1681 phpass (http://www.openwall.com/phpass/)
1682 - gallery2 <unfixed> (embed)
1683 - wordpress <unfixed> (embed)
1684 - typo3-src <unfixed> (modified-embed)
1685 NOTE: file refers to drupal, maybe there's a copy somewhere there
1686 NOTE: a copyright owner search didn't match anything
1687 - libauthen-passphrase-perl <unfixable> (fork)
1688 NOTE: perl implementation of phpass
1689
1690 squirrelmail
1691 - wordpress <unfixed> (embed)
1692 NOTE: class-pop3.php
1693
1694 ezSQL (http://www.woyano.com/jv/ezsql)
1695 - wordpress <unfixable> (fork)
1696 NOTE: wp-db.php
1697
1698 Diff.php (Clay Loveless' version/killersoft.com)
1699 - php-versioncontrol-svn <unfixed>
1700
1701 libm (provided by libc)
1702 - spring <unfixed> (embed)
1703 NOTE: embedded by embedded copy of streflop
1704 - aide <unfixed> (static)
1705 - busybox <unfixed> (static)
1706 - mindi-busybox <unfixed> (static)
1707 - qemu <unfixed> (static)
1708 NOTE: qemu-user-static
1709 - tuxonice-userui <unfixed> (static)
1710 - zsh <unfixed> (static)
1711 NOTE: zsh-static
1712
1713 streflop
1714 - spring <unfixed> (embed)
1715
1716 minizip
1717 - spring <unfixed> (embed)
1718
1719 oscpack
1720 - spring <unfixed> (embed)
1721
1722 hpiutil2
1723 - spring <unfixed> (embed)
1724
1725 p7zip
1726 - spring <unfixed> (embed)
1727
1728 pythonqt (doesn't seem to be python-qtN, unknown source)
1729 - fontmatrix <unfixed> (embed)
1730 - elmerfem <unfixed> (embed)
1731
1732 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1733 - docvert <unfixed> (embed)
1734 - jifty <unfixed> (embed)
1735 - kdenetwork <unfixed> (embed)
1736 - mediatomb <unfixed> (embed)
1737 - plastex <unfixed> (embed)
1738 - plone3 <removed> (embed)
1739 - python-chaco <unfixed> (embed)
1740 - python-docutils <unfixed> (embed)
1741 - s5 <unfixed> (embed)
1742 - zope2.10 <unfixed> (embed)
1743 - zope2.11 <removed> (embed)
1744 - cython <not-affcted> (embed)
1745 NOTE: part of documentation, which is not installed into the binary package
1746
1747 python-docutils
1748 - zope2.10 <unfixed> (embed)
1749 - zope2.11 <removed> (embed)
1750
1751 tesseract
1752 - ocropus <unfixed> (static)
1753
1754 antlr
1755 - kdevelop <unfixed> (embed)
1756
1757 libxerces2
1758 - openjdk-6 <unfixed> (embed)
1759
1760 kfreebsd-8
1761 - kfreebsd-7 <unfixed> (old-version)
1762 - kfreebsd-6 <removed> (old-version)
1763
1764 ruby1.9.1
1765 - ruby1.9 <unfixed> (old-version)
1766 - ruby1.8 <unfixed> (old-version)
1767
1768 maildrop
1769 - courier <unfixed> (embed) [./maildrop]
1770
1771 glee
1772 - warzone2100 <unfixed> (embed)
1773
1774 phing
1775 - symfony <unfixed> (embed)
1776
1777 pake
1778 - symfony <unfixed> (embed)
1779
1780 propel
1781 - symfony <unfixed> (embed)
1782
1783 creole
1784 - symfony <unfixed> (embed)
1785
1786 hfsutils
1787 - cdrkit <unfixed> (embed; bug #570187)
1788 NOTE: embeds hfsutils code in genisoimage
1789
1790 cdrkit
1791 - grub2 <unfixed> (embed; bug #570156)
1792 NOTE: genisoimage imported into grub-mkisofs
1793
1794 kdebase-workspace
1795 - kdebase <unfixed> (old-version)
1796
1797 file
1798 - php5 <unfixable> (modified-embed)
1799 [lenny] - php5 <not-affected>
1800
1801 cdb
1802 - php5 <unfixed> (embed)
1803
1804 libmbfl (itp: #570708)
1805 - php5 <unfixed> (embed)
1806 NOTE: PHP is actually the current upstream, ITP is of that code
1807
1808 libonig
1809 - php5 5.3.2-1 (embed)
1810
1811 xmlrpc-epi
1812 - php5 <unfixed> (embed)
1813
1814 swt-gtk
1815 - eclipse <unfixed> (embed; bug #538808)
1816
1817 txt2html
1818 - wml 2.0.11ds2-1 (embed)
1819
1820 ca-certificates
1821 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1822
1823 openexr
1824 - freeimage <unfixed> (embed)
1825
1826 libmng
1827 - freeimage <unfixed> (embed)
1828
1829 openjpeg
1830 - freeimage <unfixed> (embed)
1831
1832 libjpeg6b
1833 - freeimage <unfixed> (embed)
1834
1835 libjpeg (don't know what exact version)
1836 - dcmtk <unfixed>
1837 - gdcm <unfixed>
1838 - insighttoolkit <unfixed>
1839 - openarena <unfixed>
1840 - outguess <unfixed>
1841 - squeak-vm <unfixed> (embed)
1842 - tremulous <unfixed>
1843 - tuxonice-userui <unfixed> (static)
1844 - fpc <unfixed> (static)
1845 - lazarus <unfixed> (static)
1846 NOTE: inherited from fpc, see #472304
1847 - mseide-msegui <unfixed> (static)
1848 NOTE: inherited from fpc, see #472304
1849 - easymp3gain <unfixed> (static)
1850 NOTE: inherited from fpc, see #472304
1851 - winff <unfixed> (static)
1852 NOTE: inherited from fpc, see #472304
1853
1854 libfile-copy-recursive-perl
1855 - r-base <unfixed> (embed; bug #577427)
1856 - r-base-core-ra <unfixed> (embed; bug #577429)
1857
1858 delimmatch
1859 - r-base <unfixed> (embed; bug #577433)
1860 - r-base-core-ra <unfixed> (embed; bug #577434)
1861
1862 libsmf (ITP: #572558)
1863 - denemo <unfixed> (embed)
1864 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1865
1866 libselinux
1867 - dpkg 1.15.6 (static)

  ViewVC Help
Powered by ViewVC 1.1.5