/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 15024 - (show annotations) (download)
Mon Jul 26 20:00:02 2010 UTC (2 years, 9 months ago) by pabs
File size: 55107 byte(s)
warzone2100 updates
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy
14 <unfixed> if the issue is not yet fixed
15 <removed> if the package was removed from the archive
16 <itp> if the package is in the process of being packaged
17 <not-affected> if the package does not use the embedded copy
18 <unknown> if the version number can not be determined
19 <unfixable> for unavoidable cases (e.g., forks that add real value)
20 sort: static (linking statically against a lib)
21 embed (embeds a copy of the library into another source package)
22 modified-embed (embeds a code copy that differs from upstream code)
23 fork (a full-blown fork of another source package)
24 old-version (an older version of essentially the same code)
25
26 The srcpkg might be some string to identify the code if there is no
27 specific source package.
28
29 Everything up to the next line is ignored.
30 ---BEGIN
31 poppler
32 - pdftohtml <unknown>
33 [sarge] - pdftohtml <unfixed>
34 [etch] - pdftohtml <unfixed>
35 NOTE: has been replaced by poppler-utils
36 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37 - texlive-base 3.0-12 (embed)
38 - texlive-bin 2007-1 (embed)
39 - koffice 1:2.0.0-1 (embed; bug #436163)
40 - libextractor 0.5.12-1 (embed)
41 NOTE: libextractor is using its own pdf decoder now
42 - ipe <unfixed> (embed)
43 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 - ruby-gnome2 <unknown> (embed)
45 - pdfedit <unfixed> (embed; bug #510794)
46 - swftools <removed> (embed; bug #551293)
47 - xpdf 3.02-9 (fork)
48
49 pdksh (no longer developed since 1999)
50 - mksh <unfixable> (fork)
51 - posh <unfixable> (fork)
52
53 ppmd
54 - libcomplearn-mod-ppmd <unfixed> (fork)
55 NOTE: discussion in #458152
56
57 libevent
58 - transmission 1.71-1 (embed; bug #529372)
59 - chromium-browser 5.0.375.29~r46008-1
60
61 lrmi
62 - read-edid 2.0.0-1 (embed; bug #495131)
63 - s3switch <unfixed> (embed)
64 - xresprobe <unfixed> (embed)
65 - zhcon <unfixed> (embed)
66
67 php-htmlpurifier
68 - mahara 1.2.5-1 (embed)
69 - knowledgeroot <unfixed> (embed)
70 - moodle <unfixed> (embed)
71
72 peercast
73 - gnome-peercast <removed> (embed)
74 [etch] - gnome-peercast <unfixed> (embed)
75
76 silc-toolkit
77 - silc-client 1.1~beta6-1 (embed)
78
79 icclib
80 - ghostscript <unfixed> (embed)
81 - argyll <unfixed> (embed)
82
83 libusb
84 - argyll <unfixed> (embed)
85
86 dietlibc
87 - ccontrol 0.9.1+20071204-1 (static)
88 - mksh <unfixable> (static)
89 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
90
91 libmikmod
92 - sdl-mixer1.2 <unfixed> (embed)
93 TODO: report bug
94
95 libiax
96 - iaxmodem <unfixable> (embed; bug #548885)
97
98 spandsp
99 - iaxmodem <unfixable> (embed; bug #548885)
100
101 python-paramiko
102 - fabric 0.9.0-2 (embed; bug #561398)
103
104 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
105 - dpkg 1.15.6 (static)
106 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
107 - rsync <unfixed> (embed)
108 - cherokee <unfixed> (embed)
109 NOTE: somehow derived code base
110 - mono <unfixed> (embed)
111 TODO: check mozilla
112 - Linux kernels <unfixed> (embed)
113 - pvpgn 1.7.8-2 (embed)
114 - mrtg 2.12.2-1 (embed)
115 - rpm <unknown> (embed)
116 NOTE: pinged anibal since when rpm was fixed
117 - tuxcmd-modules <unfixed> (embed)
118 - zsync <unfixed>
119 - tra <unfixed>
120 - sash <unfixed>
121 - nsis <unfixed>
122 - pyfits 1:2.3.1-1
123 - mseide-msegui <unfixed>
124 NOTE: mseide
125 - mirrordir <unfixed>
126 - poco <unfixed>
127 - klibc <unfixed>
128 - emboss <unfixed>
129 - ghostscript <unfixed>
130 - freeimage <unfixed>
131 - clamav <unfixed> (fork)
132 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
133 - tuxonice-userui <unfixed> (static)
134 - plt-scheme <unfixed>
135 - perl <unfixed>
136 - paraview <unfixed>
137 - velvet 0.7.56~nozlibcopy-1
138 - gcvs <unfixed>
139 - dump <unfixed>
140 - aide <unfixed> (static)
141 - dar <unfixed> (static)
142 - avfs <unfixed>
143 - fpc <unfixed>
144 - winff <unfixed>
145 NOTE: inherited from fpc, see #472304
146 - lazarus <unfixed>
147 NOTE: inherited from fpc, see #472304
148 - erlang <unfixed> (embed)
149 - gamera 3.2.3-1 (embed)
150 - python2.4 <unfixed> (embed; bug #553403)
151 - python2.5 <unfixed> (embed; bug #553403)
152 - texlive-bin <unknown> (embed)
153
154 dulwich
155 - hg-git 0.1.0-1 (embed; bug #541996)
156
157 libvigraimpex
158 - hugin <unfixed> (embed; bug #542259)
159 - enblend-enfuse <unfixed> (embed; bug #542258)
160 - gamera 3.2.3-1 (embed)
161
162 libbz2
163 - dpkg 1.15.6 (static)
164 - amd64-libs <unfixed> (static)
165 NOTE: let's call it "static"
166 - dar <unfixed> (static)
167 - dump <unfixed> (static)
168 - unalz <unfixed> (embed)
169 NOTE: has code, by the maint, to use the system version but links against the internal copy
170
171 libyahoo2
172 - centerim <unfixed> (embed; bug #559783)
173
174 libmsn
175 - centerim <unfixed> (embed; bug #559783)
176
177 libgadu
178 - centerim <unfixed> (embed; bug #559783)
179 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
180 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
181 - kdenetwork 4:3.3.2-5 (embed)
182 NOTE: from kdenetwork: kopete
183 - ekg 1:1.8~rc0-1 (embed)
184 - kadu 0.6.0.2-3 (embed; bug #504430)
185 - gadu <itp> (embed)
186
187 xmlrpc (which package is the "origin" of this code?)
188 - drupal <unfixed> (embed)
189 - phpgroupware <unfixed> (embed)
190 - egroupware <unfixed> (embed)
191 - phpwiki <unfixed> (embed)
192 - php4 <removed> (embed)
193 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
194
195 shtool (affects build-time only)
196 - mysql-ocaml <unfixed> (embed)
197 - php4 <removed> (embed)
198 - php5 <unfixed> (embed)
199
200 xulrunner
201 - iceape <unfixed> (embed; bug #561749)
202 - iceweasel 2.0.0.19 (embed)
203 - icedove <unfixed> (embed; bug #561750)
204 - kompozer <unfixed> (embed; bug #532168)
205 - galeon 2.0.2-4 (embed)
206 - epiphany-browser 2.14.3-8 (embed)
207 - conkeror 0.9~git080629-2 (embed)
208 - kazehakase 0.4.2-1 (embed)
209
210 xli
211 - xloadimage <unfixed> (embed)
212
213 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
214 - openmotif <unfixed> (embed)
215
216 libxpm
217 - lesstif <unfixed> (embed; bug #575750)
218
219 kerberized apps with BSD origin
220 - krb4 <removed> (embed)
221 - krb5 <unfixed> (embed)
222 - heimdal <unfixed> (embed)
223
224 grip (which pkg is the origin?)
225 - libcdaudio <unfixed>
226 - grip <unfixed>
227 - gnome-vfs <unfixed>
228 TODO: check vfs2 as well
229
230 fudforum
231 [etch] - phpgroupware <unfixed> (embed)
232 NOTE: phpgroupware-fudforum
233 [sarge] - egroupware-fudforum <removed> (embed)
234
235 libbsd
236 - rdate 1:1.2-3 (embed)
237 - atheme-services <unfixed>
238 - libbsd-arc4random-perl <not-affected> (modified-embed)
239 NOTE: code not used, it links dynamically against libbsd instead
240 - isakmpd <unfixed>
241 - bsdgames <unfixed> (embed)
242 - bsd-mailx <unfixed> (embed)
243 - netcat-openbsd <unfixed> (embed; bug #550611)
244 - openssh <unfixed> (embed)
245 - unworkable <unfixed> (embed)
246 - mksh <unfixed> (modified-embed)
247 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
248 - mksh <not-affected> (modified-embed)
249 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
250
251 cvs
252 - gcvs <unfixed> (embed)
253 NOTE: see cvsunix/src in tarball
254
255 pcre3
256 - php4 <removed> (embed)
257 - analog 2:5.23-0woody1 (embed)
258 - goffice <unfixed> (embed)
259 NOTE: libgoffice-*
260 - vfu 4.06-4.1 (embed; bug #450754)
261 - tf5 5.0beta7-1 (embed)
262 - monotone 0.43-1 (embed)
263 NOTE: this only affects versions >= 0.37
264 - glib2.0 2.15.2-1 (embed)
265 - apache2 2.0.53-4 (embed)
266 - exim4 4.10-0.srh20.12 (embed)
267 - yacas <unfixed> (embed)
268 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
269 - gtamsanalyzer.app 0.42-5 (embed)
270 - tin 980117-1 (embed)
271 - kazehakase 0.5.2-1
272 - webkit 1.0.1-1 (embed)
273 - qt4-x11 <unfixed> (embed)
274 NOTE: embedded via webkit copy
275 - erlang <unfixed> (embed)
276 - ssed <unfixed> (embed)
277 - ircd-hybrid <unfixed> (static)
278 - emboss <unfixd>
279 - cherokee <unfixed> (embed)
280 - oftc-hybrid <unfixed> (embed)
281 - ratbox-services <unfixed> (embed)
282 - squeak-vm <unfixed> (embed)
283 - tinymux <unfixed> (embed)
284
285 tiff
286 - wxwindows2.4 2.2.1 (embed)
287 - gamera 3.2.3-1 (embed)
288 - freeimage <unfixed> (embed)
289 - libtk-img <unfixed> (embed)
290 NOTE: there are two copies, one under tiff/ other under libtiff/
291 - gdal <unfixed>
292
293 uudeview
294 - libconvert-uulib-perl <unfixed> (embed)
295 - pan <unfixed> (embed)
296
297 sqlite (not affected by security vulnerabilities so far)
298 - amarok <unfixed> (embed)
299 - monotone 0.43-1 (embed)
300 - iceweasel <unfixed> (embed)
301 - heimdal <unfixed> (embed; bug #559616)
302
303 util-linux/mount
304 - loop-aes-utils <unfixed> (embed)
305 NOTE: contains code from util-linux' mount in the mount-aes-udeb
306
307 sylpheed
308 - sylpheed-claws <unfixed> (fork)
309
310 phpsysinfo
311 - egroupware <unfixed> (embed)
312 - phpgroupware <unfixed> (embed)
313
314 phpldapadmin
315 [sarge] - egroupware <unfixed> (embed)
316 NOTE: removed from egroupware after sarge
317
318 chmlib
319 - kchmviewer <unknown> (embed)
320
321 ffmpeg (libavcodec/libavformat)
322 - mplayer 1.0~rc2-14 (embed; bug #395252)
323 - kino 1.0.0-1
324 - vlc <not-affected> (Links dynamically since initial release)
325 - smilutils 0.3.0-10
326 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
327 - motion 3.1.19-1
328 - gstreamer0.10-ffmpeg 0.10.3-2
329 - xmovie <removed> (static)
330 TODO: gimp-gap (potentially using ffmpeg code as well)
331 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
332 - audacity 1.3.7-2 (embed; bug #512278)
333 - chromium-browser <unfixed> (fork)
334
335 faad2
336 - mplayer 1.0~rc2-20 (embed)
337 - avifile <unfixed> (embed; bug #538750)
338 - ffmpeg-debian <removed> (embed)
339
340 libmad (MPEG decoding lib)
341 - xine-lib <unfixed> (embed)
342 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
343 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
344
345 libdts
346 - xine-lib <unfixed> (embed)
347
348 flac
349 - xine-lib <unfixed> (embed)
350
351 liba52
352 - a52dec <unfixed> (embed)
353 - xine-lib <unfixed> (embed)
354
355 mpeg2dec (libmpeg2)
356 - xine-lib <unfixed> (embed)
357
358 libmpeg3
359 - squeak-vm <unfixed> (embed)
360
361 libntlm
362 - wget <unfixed> (fork; bug #550436)
363 - curl <unfixed> (fork; bug #550437)
364 - cntlm <unfixed> (fork; bug #550438)
365
366 uw-imap
367 - pine <unfixed> (embed)
368 - alpine <unfixed> (embed)
369
370 imagemagick
371 - graphicsmagick <unfixed> (fork)
372
373 python-urlgrabber
374 - mercurial <unfixed> (embed; bug #531062)
375 - w3af <unfixed> (embed; bug #555372)
376 [experimental] - harvestman <unfixed> (embed; bug #555373)
377
378 beautifulsoup
379 - python-mechanize <unfixed> (embed; bug #555349)
380 - zope2.11 <removed> (embed; bug #555350)
381 - twill <unknown> (embed)
382
383 halibut
384 - nsis <unfixed> (fork)
385
386 libghttp
387 - hotway <unfixed> (embed)
388
389 libsndfile
390 - ardour 1:2.7.1-1 (embed)
391
392 glibmm2.4
393 - ardour 1:2.7.1-1 (embed)
394
395 libgnomecanvasmm2.6
396 - ardour 1:2.7.1-1 (embed)
397
398 libsigc++-2.0
399 - ardour 1:2.7.1-1 (embed)
400
401 soundtouch
402 - ardour 1:2.7.1-1 (embed)
403
404 libmms
405 - xine-lib <unfixed> (embed)
406 - mimms <unfixed> (embed)
407
408 fckeditor
409 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
410 - moin 1.8.2-2 (embed; bug #452599)
411 - karrigell <removed> (embed; bug #452598)
412 - gforge 4.6.99+svn6225-1 (embed)
413 - request-tracker3.8 <unfixed> (embed)
414 - otrs2 <unfixed> (embed)
415
416 ipatlas (not packaged in Debian)
417 - moodle <unfixed> (embed; bug #507185)
418
419 libphp-phpmailer
420 - moodle <unfixed> (embed; bug #507185)
421 - mahara <unfixed> (embed)
422 - symfony <unfixed> (embed; bug #566778)
423 [etch] - phpgroupware <unfixed> (embed)
424 NOTE: phpgroupware-felamimail is only in etch
425 - egroupware <unfixed> (embed; bug #504283)
426 - glpi <unfixed>
427
428 htmlArea (not packaged in Debian)
429 - moodle <unfixed> (embed)
430
431 giflib
432 - wine <unfixed> (embed; bug #466181)
433
434 bennu (not packaged in Debian, http://bennu.sourceforge.net)
435 - moodle <unfixed> (embed)
436
437 smarty
438 - moodle 1.8.2-2 (embed; bug #471158)
439 - gallery2 2.2.5-2 (embed; bug #471160)
440 - mahara 0.9.2-2 (embed; bug #471201)
441 - gosa 2.4beta1-1 (embed; bug #471200)
442
443 TinyMCE
444 - wordpress 2.5.1-3 (embed; bug #478257)
445 - moodle <unfixed> (embed; bug #507185)
446 - knowledgeroot <unfixed> (embed)
447 - joomla <itp> (bug #326398)
448
449 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
450 - scite <unfixed> (embed)
451 - qscintilla <unfixed> (embed)
452 - qscintilla2 <unfixed> (embed)
453 - geany <unfixed> (fork)
454 - anjuta <unfixed> (embed)
455
456 libphp-adodb
457 - moodle <unfixed> (embed; bug #507185)
458 NOTE: also AdoDB-XML Schema
459 - gallery2 <unfixed> (embed)
460 - phppgadmin <unfixed> (embed)
461 - egroupware <unfixed> (embed)
462 - phpwiki <unfixed> (embed)
463 - torrentflux 2.0beta1-2 (embed)
464 - ipplan <unfixed> (embed)
465 - typo3-src <unfixed> (embed)
466 - cacti <unknown> (embed)
467 [sarge] - cacti <unfixed> (embed)
468 NOTE: dependency exists, but internal version is used
469 - gforge 4.7~rc2-6 (embed)
470 - mahara <unfixed> (embed)
471
472 gzip
473 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
474 - klibc <unfixed> (embed)
475 NOTE: based on linux-kernel gzip code
476 - busybox <unfixed> (embed)
477 - pristine-tar <unfixed> (modified-embed)
478 NOTE: compression code only, not uncompression
479 - ncompress <unfixed> (old-version)
480
481 neon
482 - cadaver 0.22.3+debian-1 (embed; bug #188381)
483 - gnome-vfs2 <unfixed> (embed; bug #395874)
484 [etch] - litmus <unfixed> (embed; #395875)
485 - litmus <removed> (embed; #395875)
486 [sarge] - screem <unfixed> (embed)
487 - sitecopy 1:0.16.0-1 (embed; bug #395876)
488 [etch] - tla <unfixed> (embed; bug #395877)
489 [sarge] - tla <unfixed> (embed; bug #395877)
490
491 libmodplug
492 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
493
494 libvncserver
495 - vino <unfixed> (embed)
496
497 putty
498 - filezilla <unfixed> (embed)
499
500 tinyxml (not packaged in Debian; itp bug #531968)
501 - filezilla <unfixed>
502 - crystalspace <unfixed> (embed)
503 - libwfut <unfixed> (embed)
504 - rarian <unfixed> (embed)
505 - bulletml <unfixed> (embed)
506 - pokerth <unfixed> (embed)
507 - qutecom <unfixed> (embed)
508 - sofa-framework <unfixed> (embed)
509 - yate <unfixed> (embed)
510 - antigrav <unfixed> (embed)
511 - balder2d <unfixed> (embed)
512 - cal3d <unfixed> (embed)
513 - criticalmass <unfixed> (embed)
514 - ember <unfixed> (embed)
515 - epiphany <unfixed> (embed)
516 - gambit <unfixed> (embed)
517 - noiz2sa <unfixed> (embed)
518 - ogre <unfixed> (embed)
519 - opencity <unfixed> (embed)
520 - openmovieeditor <unfixed> (embed)
521 - pouetchess <unfixed> (embed)
522 - tecnoballz <unfixed> (embed)
523 - trigger-rally <unfixed> (embed)
524 - xmoto <unfixed> (embed)
525 - mapnik <unknown> (embed)
526 NOTE: uses a different XML parser by default
527 - rrootage 0.23a-6 <embed>
528 NOTE: links to libbulltetml
529 - boson <unknown> (embed)
530 NOTE: the embedded code is unused
531
532 gv
533 - evince <unfixed> (embed)
534 NOTE: ps/ tree from gv 3.5.8
535 NOTE: evince-gtk is affected (a component of evince source package)
536
537 libXbae
538 - paw <removed> (embed)
539 [etch] - paw <unfixed> (embed)
540
541 libgtkhtml
542 - claws-mail-extra-plugins <unfixed> (fork)
543
544 libXaw
545 - paw <removed> (embed)
546 [etch] - paw <unfixed> (embed)
547 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
548
549 libgd2
550 - graphviz <unfixed> (embed)
551 NOTE: lib/gd seems to be 2.0.33
552 - wml 2.0.11ds2-1 (embed)
553 - libwmf <unfixed> (embed)
554 NOTE: derived from gd 1.6.3
555 - texlive-bin 2009-1 (embed)
556
557 rar
558 - unrar-nonfree <unfixed> (embed)
559
560 unrar-free (maybe this code is derived from the original rar, too?)
561 - clamav <unfixed> (embed)
562 NOTE: seems to be disabled in default config
563
564 mplayer (DirectMedia Object loader)
565 - xine-lib <unfixed> (embed)
566 NOTE: src/libw32dll/
567 - vlc <unfixed> (embed)
568 NOTE: modules/codec/dmo/
569 - mplayer 1.0~rc2-20 (embed)
570
571 libwpd (WordPerfect converter)
572 - openoffice.org <unfixed> (embed)
573
574 fsplib (http://sourceforge.net/projects/fsp/)
575 - gftp <unfixed> (embed)
576 NOTE: lib/fsplib version 0.3
577
578 sprng
579 - tree-puzzle <unfixed> (embed)
580
581 librpcsecgss
582 - krb5 <unfixed> (embed)
583
584 jasper
585 - ghostscript 8.64~dfsg-2 (embed)
586
587 libiris
588 - psi <unfixed> (embed)
589 - kdenetwork <unfixed> (embed)
590 NOTE: kopete embeds libiris but links dynamically to libidn
591 - kdegames <unfixed> (embed)
592 NOTE: ksirk/kde4
593
594 libidn
595 - monotone 0.43-1 (embed)
596 - psi <unfixed> (embed)
597 NOTE: psi embeds libiris which embeds libidn
598 - kdegames <unfixed> (embed)
599 NOTE: kdegames/kde4 embeds libiris which embeds libidn
600
601 lua5.1
602 - monotone 0.43-1 (embed)
603 - nmap 5.00-1 (embed; bug #527997)
604 [lenny] - nmap <unfixed> (embed; bug #527997)
605 - ocropus <unfixed> (embed)
606 - enigma <unfixed> (embed)
607 NOTE: requires lua built with C++
608 - freeciv <unfixed> (embed)
609 - spring <unfixed> (embed)
610
611 libbotan
612 - monotone 0.43-1 (embed)
613
614 NetXX
615 - monotone 0.43-1 (embed)
616
617 libgc
618 - mono <unfixed> (embed)
619
620 lzma
621 - p7zip <unfixed> (embed)
622 - xz-utils <unfixed> (fork)
623
624 lzo
625 - grub2 <unfixed> (embed)
626
627 yassl
628 - mysql-dfsg-5.0 <unfixed> (embed)
629 - mysql-dfsg-5.1 <unfixed> (embed)
630
631 pax code
632 - tar <unfixed> (embed)
633 - cpio <unfixed> (embed)
634
635 t1lib
636 - tetex-bin 2.0.2-1 (embed)
637 - texlive-bin <unknown> (embed)
638
639 guichan
640 - boswars <unfixed> (embed)
641 NOTE: maintainer notified us, working on it
642
643 tolua
644 - boswars <unfixed> (embed)
645 NOTE: maintainer notified us, working on it
646 NOTE: actually tolua++
647 - ocropus <unfixed> (embed)
648 NOTE: actually tolua++
649 - freeciv <unfixed> (embed)
650 NOTE: actually tolua++
651 - enigma <unfixed> (embed)
652
653 asio-dev
654 - luxrender <removed> (embed)
655
656 xine-lib
657 - vlc <unfixed> (embed)
658 NOTE: only parts included in modules/access/rtsp
659
660 netpbm
661 - tcl8.3 <unfixed> (embed)
662 - tcl8.4 <unfixed> (embed)
663 - tcl8.5 <unfixed> (embed)
664 NOTE: generic/tkImgGIF.c
665
666 tk8.5
667 - tk8.0 <removed> (old-version)
668 - tk8.3 <unfixed> (old-version)
669 - tk8.4 <unfixed> (old-version)
670 - perl-tk <unfixable> (fork)
671
672 samba
673 - mc 2:4.6.2~git20080311-1 (embed)
674 NOTE: maintainer is aware of this, currently searching a solution
675
676 plib1.8.4c2
677 - boson <unfixed> (fork)
678 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
679
680 fribidi
681 - quesoglc 0.7.2-2 (embed)
682
683 glew
684 - quesoglc <unfixed> (embed; bug #489341)
685 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
686 - trigger 0.5.2.1-2 (embed)
687 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
688 - trigger-rally 0.5.2.1-2 (embed)
689 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
690 - chromium-browser 5.0.375.70~r48679-2
691
692 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
693 - transcend <unfixed> (embed)
694 - cultivation <unfixed> (embed)
695 - passage <unfixed> (embed)
696 - gravitation <unfixed> (embed)
697
698 tar
699 - libarchive <unfixed> (embed)
700 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
701
702 cpio
703 - libarchive <unfixed> (embed)
704 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
705
706 kde4libs
707 - kdelibs <unfixable> (old-version)
708
709 webkit
710 - qt4-x11 <unfixed> (embed; bug #479851)
711 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
712 - kde4libs <unfixable> (fork)
713 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
714 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
715 - chromium-browser <unfixed> (fork)
716
717 ftgl
718 - blender 2.46+dfsg-1 (embed)
719
720 wv
721 - abiword <unfixed>
722
723 qemu
724 - kvm <removed> (embed; bug #543159)
725 - qemu-kvm <unfixed> (embed; bug #560853)
726 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
727 - xen-3 3.4.2-2 (embed; bug #560856)
728 - xen-unstable <unfixed> (embed; bug #560856)
729
730 vgabios
731 - kvm <removed> (embed; bug #489442)
732 - qemu-kvm <unfixed> (embed)
733
734 bochs
735 - kvm <removed> (embed; bug #489442)
736 - qemu-kvm <unfixed> (embed)
737
738 speex
739 - vorbis-tools <unfixed> (embed)
740 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
741 - gst-plugins-good0.10 <unfixed> (embed)
742 - xine-lib <unfixed> (embed)
743 - libfishsound <unfixed> (embed)
744 - libannodex <removed> (embed)
745 - vlc <unfixed> (embed)
746 - xmms-speex <unfixed> (embed)
747 - libsdl-sound1.2 <unfixed> (embed)
748 - sweep <unfixed> (embed)
749
750 libreadline
751 - magic <itp> (old-version)
752
753 opcode
754 - ode <unfixed> (embed)
755 NOTE: opcode is not a package in debian, it is just embedded
756 NOTE: http://www.codercorner.com/Opcode.htm
757
758 gimpact
759 - ode <unfixed> (embed)
760 NOTE: gimpact is not a package in debian, it is just embedded
761 NOTE: http://gimpact.sf.net
762
763 mochikit
764 - mahara <unfixed> (embed)
765 NOTE: they require extra patches, still unmerged upstream
766 - ntop <unfixed> (embed)
767 - coherence 0.6.2-1 (embed)
768 - paste <unfixed> (embed)
769 - turbogears <unfixed> (embed)
770 - plone3 <removed> (embed)
771 - xulrunner <unfixed> (embed)
772 - libjifty-plugin-chart-perl <unfixed> (embed)
773 - sabnzbdplus <unfixed> (embed)
774 - tgmochikit <unfixed> (embed)
775
776 prototypejs
777 - netbeans-ide 6.0.1+dfsg-2 (embed)
778 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
779 - webcit <unfixed> (embed; bug #555219)
780 - asterisk 1:1.6.2.0~rc3-1 (embed)
781 - libjson-ruby 1.1.4-1 (embed; bug #555224)
782 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
783 - horde3 <unfixed> (embed)
784 - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
785 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
786 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
787 - ebug-http <removed> (embed; bug #555236)
788 - libaws 2.7-1 (embed; bug #555222)
789 - phpgedview <removed> (embed)
790 - poker-network 1.7.6-1 (embed; bug #555238)
791 - rails 2.1.0-6 (embed)
792 - wordpress 2.5.0-2 (embed; bug #555243)
793 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
794 TODO: search through all of the other zope packages
795 - ampache 3.4.1-2 (embed)
796 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
797 - hobix 0.5~svn20070319-4 (embed; bug #555247)
798 - zabbix 1.6.6-4 (embed; bug #555250)
799 - chora2 <unfixed> (embed; bug #555253)
800 - gollem <unfixed> (embed; bug # 555254)
801 - jscropperui 1.2.1-1 (embed; bug #555257)
802 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
803 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
804 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
805 - activeldap 1.2.1-1 (embed)
806 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
807 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
808 - otrs2 2.3.4-6 (embed; bug #555267)
809 - webcalendar 1.2~b1-2 (embed; bug #555269)
810 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
811 - jifty 0.90519-1 (embed; bug #555271)
812 - jquery 1.4-1 (embed; bug #555272)
813 - passenger 2.2.5debian1-1 (embed; bug #555273)
814 - plone3 <removed> (embed; bug #555275)
815 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
816 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
817 - xulrunner <unfixed> (embed)
818 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
819
820 gdb
821 - insight <unfixed> (embed)
822
823 e2fsprogs
824 - ldiskfsprogs <unfixable> (fork)
825
826 quazip (not packaged in Debian)
827 - qcake <unfixed> (embed)
828 NOTE: starting with upstream version 0.6.4
829
830 exo
831 - pcmanfm <unfixed> (embed; bug #499677)
832 NOTE: slightly modified source code
833
834 java
835 - openjdk-6 <unfixed>
836 - sun-java5 <unfixed>
837 - sun-java6 <unfixed>
838
839 libphp-snoopy
840 - ampache 3.4.1-2 (embed; bug #504169)
841 - gforge 4.6.99+svn6094-2 (embed)
842 - mahara 1.0.5-2 (embed; bug #504170)
843 - pixelpost 1.7.1-5 (embed; bug #504171)
844 - mediamate 0.9.3.6-5 (embed; bug #504172)
845 - opendb <removed> (embed; bug #504173)
846 [etch] - opendb <unfixed> (embed; bug #504173)
847 - wordpress 2.5.1-9 (embed; bug #443948)
848 - moodle <unfixed> (embed; bug #507185)
849 [etch] - phpgroupware <unfixed> (embed)
850 NOTE: phpgroupware-felamimail
851 - magpierss 0.72-3 (embed; bug #431089)
852
853 jquery
854 - zekr <unfixed> (embed)
855 - wordpress <unknown> (embed)
856 - yocto-reader <unfixed> (embed)
857 - textpattern <unfixed> (embed)
858 - genshi 0.5.1-1 (embed)
859 NOTE: compressed file under examples/ dir
860 - prewikka <unfixed> (embed)
861 - libramaze-ruby <unfixed> (embed)
862 - drupal5 <unfixed> (embed)
863 - b2evolution <unfixed> (embed)
864 - wesnoth <unfixed> (embed)
865
866 tablesorter (jquery plugin, not packaged yet)
867 - wesnoth <unfixed> (embed)
868
869 kses
870 - wordpress <unfixed> (embed; bug #504242)
871 NOTE: their copy has all methods renamed to wp_<foo>
872 NOTE: kses isn't in Debian, RFP: #504240
873 - moodle <unfixed> (embed; bug #507185)
874 - egroupware <unfixed> (embed)
875
876 magpierss
877 - wordpress <unfixed> (embed; bug #504242)
878 - moodle <unfixed>
879
880 php-gettext
881 - wordpress 2.8.4-1 (embed; bug #504242)
882 - docbookwiki <unfixed> (embed)
883 - knowledgeroot 0.9.9.5-1
884 NOTE: non-free
885
886 libphp-ixr (name may change, it is the Incutio XML-RPC)
887 - wordpress <unfixed> (embed; bug #504242)
888 NOTE: libphp-ixr isn't in Debian, RFP: #504236
889 - dokuwiki <unfixed> (embed)
890 - textpattern <unfixed> (embed)
891
892 libphp-cas
893 - glpi <unfixed> (embed)
894 - moodle <unfixed> (embed; bug #505984)
895
896 scriptaculous (prototype.js is among the embeds in the following)
897 - glpi <unfixed> (embed)
898 - libaws <unfixed> (embed; bug #555222)
899 - op-panel <unfixed> (embed)
900 - symfony <unfixed> (embed)
901 NOTE: maintainer says there are extra incompatible changes required
902 - pixelpost 1.7.1-6 (embed)
903 - webhelpers <unfixed> (embed)
904 - qwik <removed> (embed; bug #555241)
905 - smokeping <unfixed> (embed)
906 - turba2 <unfixed> (embed)
907 - typo3-src 4.2.3-1 (embed)
908 - request-tracker3.6 <unfixed> (embed)
909 - request-tracker3.8 <unfixed> (embed)
910 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
911 - wordpress 2.5.0-2 (embed)
912 - libhtml-prototype-perl 1.48-3 (embed)
913
914 libmarkdown-php
915 - moodle <unfixed> (embed; bug #507185)
916 - pixelpost 1.7.1-6 (embed)
917
918 php-openid
919 - wordpress-openid <itp> (embed)
920
921 geshi
922 - dokuwiki 0.0.20080505-3.1 (embed)
923 - pgfouine 1.0-1.1 (embed)
924 - websvn 2.1.0-1 (embed)
925
926 webcalendar
927 - gforge 4.7~rc2-6 (embed; bug #504758)
928
929 libical
930 - kdepim <unknown> (fork)
931 NOTE: fixed at some point during 4.0
932 - kdepimlibs 4.2.0-1 (fork)
933 - claws-mail-extra-plugins <unfixed> (fork)
934
935 harfbuzz
936 - qt4-x11 <unfixed> (embed)
937 - pango1.0 <unfixed> (embed)
938 - fontmatrix <unfixed> (embed)
939
940 libzip
941 - php5 <unfixable> (modified-embed)
942 - odt2txt <unfixed> (embed; bug #523808)
943
944 json.php (not packaged; should be replaced with php's built-in functions)
945 - moodle <unfixed>
946 - yui <unfixed>
947 - gallery2 <unfixed>
948 - dokuwiki <unfixed>
949 - typo3-src <unfixed>
950
951 php-fpdf
952 - tcpdf <itp> (fork)
953 - moodle <unfixed>
954 - phpwiki <unfixed>
955 - egroupware <unfixed>
956 - ldap-account-manager <unfixed> (fork)
957
958 tcpdf (itp: #495985)
959 - moodle <unfixed>
960 - phpmyadmin <unfixed>
961
962 typo3
963 - moodle <unfixed>
964
965 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
966 - moodle <unfixed>
967 - gosa <unfixed>
968
969 php-ole (itp: #487558)
970 - moodle <unfixed>
971
972 pieforms (http://www.catalyst.net.nz)
973 - mahara <unfixed>
974
975 savant2 (http://phpsavant.com)
976 - egroupware <unfixed>
977
978 rssparser (http://nwow.org)
979 - egroupware <unfixed>
980 - phpgroupware <unfixed>
981
982 lcms
983 - openjdk-6 <unfixed> (fork)
984 - gimp 2.4.0~rc2-2
985
986 libphp-phplayersmenu
987 - diogenes <unfixed>
988 - phpldapadmin <unfixed>
989
990 libphp-pclzip
991 - docvert <unfixed>
992 - moodle <unfixed>
993 - egroupware <unfixed>
994
995 libphp-simplepie
996 - dokuwiki <unfixed>
997 - wordpress <unfixed>
998
999 libphp-jpgraph
1000 - egroupware <unfixed>
1001
1002 php-simpletest
1003 - moodle <unfixed>
1004
1005 libpng
1006 - iceweasel <not-affected> (uses xulrunner)
1007 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1008 - iceape 1.0.13~pre080614i-0etch1 (embed)
1009 - xulrunner 1.9.0.13-1 (embed)
1010 [lenny] - xulrunner 1.9.0.11-0lenny1
1011 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1012 - gamera 3.2.3-1 (embed)
1013 - freeimage <unfixed> (embed)
1014 - tuxonice-userui (static)
1015
1016 irssi
1017 - silc-client <unfixed> (embed)
1018 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1019
1020 extc
1021 - mtasc <unfixed> (embed)
1022 - haxe <unfixed> (embed)
1023
1024 swflib
1025 - mtasc <unfixed> (embed)
1026 - haxe <unfixed> (embed)
1027
1028 libitext-java
1029 - bouncycastle 2.1.4-1 (embed)
1030
1031 python-ply
1032 - pyke <unfixed> (embed; bug #555363)
1033 - pywbem 0.7.0-4 (embed; bug #555364)
1034 - sepolgen <unfixed> (embed; bug #555365)
1035 - zope-textindexng3 <unknown> (embed)
1036 - iceweasel <not-affected> (uses xulrunner)
1037 - xulrunner <unknown> (embed)
1038 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1039
1040 libdumbnet (libdnet upstream)
1041 - nmap <unfixed> (fork)
1042
1043 gcc-4.4
1044 - gcc-mingw32 <unfixed> (embed)
1045
1046 camlimages
1047 - advi <unfixed> (static; bug #550441)
1048
1049 memcached
1050 - memcachedb <unfixed> (embed)
1051
1052 yajl
1053 - argyll <unfixed> (embed; bug #544223)
1054 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1055
1056 nusoap
1057 - gforge 4.8.2-1 (embed)
1058 - ampache <unfixed> (embed)
1059 - poker-network <unfixed> (embed)
1060 - moodle <unfixed> (embed)
1061 NOTE: code is not used when running under php5 and soap is enabled
1062 - phpwiki <unfixed> (embed)
1063 - gallery2 <unfixed> (embed)
1064 - typo3-src <unfixed> (embed)
1065
1066 libept
1067 - adept <unfixed> (embed; bug #540649)
1068
1069 libvorbis
1070 - iceweasel <not-affected> (uses xulrunner)
1071 - xulrunner <unfixed> (embed; bug #540959)
1072 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1073 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1074 - iceape <unfixed> (embed)
1075 [etch] - iceape <not-affected> (introduced in 2.0)
1076 [lenny] - iceape <not-affected> (introduced in 2.0)
1077
1078 cairo
1079 - iceweasel <not-affected> (uses xulrunner)
1080 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1081
1082 liboggz
1083 - iceweasel <not-affected> (uses xulrunner)
1084 - xulrunner <unfixed> (embed; bug #540959)
1085 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1086 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1087 - iceape <unfixed> (embed)
1088 [etch] - iceape <not-affected> (introduced in 2.0)
1089 [lenny] - iceape <not-affected> (introduced in 2.0)
1090
1091 liboggplay
1092 - iceweasel <not-affected> (uses xulrunner)
1093 - xulrunner <unfixed> (embed; bug #540959)
1094 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1095 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1096 - iceape <unfixed> (embed)
1097 [etch] - iceape <not-affected> (introduced in 2.0)
1098 [lenny] - iceape <not-affected> (introduced in 2.0)
1099
1100 php-net-dnsbl
1101 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1102
1103 php-onyx-rss
1104 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1105
1106 php-text-wiki
1107 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1108
1109 php-xml-rpc
1110 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1111
1112 polarssl (does not have a shared library)
1113 - pdkim <itp> (embed; bug #543150)
1114 - xyssl <unfixed> (old-version)
1115
1116 pidgin (libpurple)
1117 - gaim <removed> (old-version)
1118 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1119
1120 icu
1121 - webkit 1.0.1-1 (embed; bug #547214)
1122 - texlive-bin <unfixed> (fork)
1123 NOTE: texlive upstream working with icu upstream to merge their changes
1124 - chromium-browser 5.0.375.29~r46008-3
1125
1126 cyrus-imapd-2.2
1127 - kolab-cyrus-imapd <unfixed> (fork)
1128 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1129
1130 python-cxx-dev
1131 - freecad 0.9.2646.3-1 (embed; bug #547936)
1132
1133 zipios++
1134 - freecad 0.9.2646.3-1 (embed; bug #547941)
1135 - enigma 0.92.3-3 (embed)
1136 NOTE: likely fixed earlier, marking etch's version as fixed
1137
1138 linux-2.6
1139 - kvm <removed> (embed; bug #549973) [./kernel/*]
1140 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1141 - kernel-source-2.6.8 <removed> (old-version)
1142 - kernel-source-2.4.27 <removed> (old-version)
1143 - kernel-source-2.4.24 <removed> (old-version)
1144 - kernel-source-2.2.25 <removed> (old-version)
1145 - kernel-source-2.2.20 <removed> (old-version)
1146
1147 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1148 - kvm <removed> (embed) [./libfdt/*]
1149 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1150
1151 qweb (not packaged)
1152 - ajaxterm <unfixed>
1153
1154 opensaml2
1155 - opensaml <removed> (old-version)
1156
1157 shibboleth-sp2
1158 - shibboleth-sp <removed> (old-version)
1159
1160 tuxonice-userui
1161 - suspend2-userui <removed> (old-version)
1162
1163 expat
1164 - w3c-libwww <removed> (embed; bug #551941)
1165 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1166 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1167 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1168 - python2.4 <unfixable> (embed; bug #553403)
1169 - python-4suite <unfixed> (embed; bug #516935)
1170 - wxwindows2.4 <removed> (embed)
1171 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1172 - wxwidgets2.8 2.8.10.1-2 (embed)
1173 - celementtree 1.0.5-8 (embed)
1174 NOTE: Maybe that was fixed even earlier
1175 - audacity 1.3.2-1 (embed)
1176 - matanza <unfixed> (embed)
1177 - tdom 0.8.3~20080525-1 (embed)
1178 - udunits 2.1.8-4 (embed)
1179 - apr-util 1.2 (embed)
1180 - ayttm <unfxed> (embed; bug #561006)
1181 - cableswig <unfixed> (embed)
1182 - cadaver <unfixed> (embed)
1183 - cmake 2.6.0-6 (embed)
1184 - coin3 <unfixed> (embed)
1185 - gdcm 2.0.14-2 (embed)
1186 - ghostscript 8.71~dfsg-2 (embed)
1187 - grmonitor <removed> (embed)
1188 - iceape <unfixed> (embed)
1189 - insighttoolkit 3.16.0-1 (embed)
1190 NOTE: insighttoolkit might've been fixed earlier
1191 - libparagui1.1 1.0.2-1 (embed)
1192 - paraview 3.6.2-1 (embed)
1193 - poco 1.3.6p1-1 (embed)
1194 - simgear <unfixed> (embed)
1195 - sitecopy 1:0.16.0-1
1196 - smart <unfixed> (embed)
1197 NOTE: smart embeds celementree, and it includes expat
1198 - swish-e <not-affected> (Linked against libxml, which is used instead)
1199 - tla 1.3.5+dfsg-15 (embed)
1200 - vtk 4.1.20030227-1 (embed)
1201 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1202 - xmlrpc-c <unfixed> (embed)
1203 - iceweasel <unfixed> (embed)
1204 - kompozer <unfixed> (embed)
1205 - vxl 1.13.0-2 (embed)
1206 - xulrunner <unfixed> (embed)
1207 - apache2 2.2 (embed)
1208 - texlive-bin <not-affected> (Embedded code not compiled in)
1209 - vnc4 <unfixed> (embed)
1210 - xotcl 1.6.6-1 (embed)
1211 - chromium-browser 5.0.375.29~r46008-3
1212
1213 xerces-c
1214 - xerces-c2 <unfixed> (old-version)
1215 - xerces27 <removed> (old-version)
1216
1217 md5 (RSA's version; not the gnu version provided by coreutils)
1218 - w3c-libwww <removed> (embed; bug #551942)
1219 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1220
1221 libparagui1.1
1222 - asc <unfixable> (fork)
1223
1224 enet
1225 - sauerbraten <unfixed> (embed; #497194)
1226
1227 eglibc
1228 - glibc <removed> (old-version)
1229 - mksh <unfixable> (static)
1230 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1231
1232 galib
1233 - gamera 3.2.3-1 (embed)
1234
1235 configobj
1236 - bzr 2.1.0~rc2-1 (embed; bug #555336)
1237 - elisa <unfixed> (embed; bug #555337)
1238 - gaupol <unfixed> (embed; bug #555338)
1239 - ipython <unfixed> (embed; bug #555339)
1240 - pida <unfixed> (embed; bug #555340)
1241 - psychopy <unfixed> (embed; bug #555341)
1242 - rest2web <unfixed> (embed; bug #555342)
1243 - auth2db <unknown> (embed)
1244 - dynagen <unknown> (embed)
1245 - iceweasel <unknown> (embed)
1246 - sabnzbdplus <unknown> (embed)
1247 - xulrunner <unknown> (embed)
1248 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1249
1250 python-clientform
1251 - bibus <unfixed> (embed; bug #555332)
1252 - zope2.10 <unfixed> (embed; bug #555333)
1253 - zope2.11 <removed> (embed; bug #555334)
1254 - python-mechanize <unknown> (embed)
1255 - twill <unknown> (embed)
1256
1257 python-mechanize
1258 - zope2.10 <unfixed> (embed; bug #555337)
1259 - zope2.11 <removed> (embed; bug #555338)
1260 - twill <unknown> (embed; bug #555339)
1261
1262 pexpect
1263 - duplicity 0.6.06-1 (embed; bug #555361)
1264 - hplip <unfixed> (embed; bug #555362)
1265 - smart <unfixed> (embed; bug #555363)
1266
1267 pyparsing
1268 - bauble <unfixed> (embed; bug #555366)
1269 - boa-constructor 0.6.1-8 (embed; bug #555367)
1270 - calibre <unfixed> (embed; bug #555368)
1271 - matplotlib <unfixed> (embed; bug #531024)
1272 - zhpy 1.7.3.1-1 (embed; bug #555370)
1273 - polybori <unknown> (embed)
1274 - python-whoosh <unknown> (embed)
1275 - twill <unknown> (embed)
1276 - zope-textindexng3 <unknown> (embed)
1277
1278 python-pysqlite2
1279 - python2.4 <unfixed> (embed; bug #553403)
1280 - python2.5 <unfixed> (embed; bug #553403)
1281
1282 celementtree
1283 - python2.5 <unfixed> (embed)
1284 - smart <unfixed> (embed)
1285
1286 elementtree
1287 - python2.5 <unfixed> (embed)
1288 - python2.6 <unfixed> (embed)
1289 - bzr 2.1.0~rc2-1 (embed; bug #555343)
1290 - gedit 2.28.2-1 (embed; bug #555344)
1291 - smart <unfixed> (embed)
1292 - solfege <unfixed> (embed; bug #555345)
1293 - w3af <unfixed> (embed; bug #555346)
1294 - python-qt4 <unknown> (embed)
1295 - sphinx <unknown> (embed)
1296 - python-nltk <itp> (embed)
1297
1298 python2.5
1299 - python2.4 <unfixed> (old-version)
1300 - jython <unfixed> (embed)
1301 NOTE: embeds many stdlib modules
1302 - python-django <unfixed> (embed; bug #555419)
1303 NOTE: embeds stdlib modules: doctest, decimal
1304 - gamera 3.2.3-1 (embed)
1305 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1306 - boa-constructor <unfixed> (embed; bug #555426)
1307 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1308 - nicotine <unfixed> (embed; bug #555427)
1309 NOTE: embeds stdlib modules: ConfigParser
1310 - museek+ <unfixed> (embed; bug #555428)
1311 NOTE: embeds stdlib modules: ConfigParser
1312 - vegastrike-data <unfixed> (embed)
1313 NOTE: embeds many stdlib modules
1314 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1315 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1316 - config-manager <unfixed> (embed; bug #555423)
1317 NOTE: embeds stdlib modules: optparse
1318 - jhbuild 2.28.0-1 (embed; bug #555421)
1319 NOTE: embeds stdlib modules: optparse, subprocess
1320 - smart <unfixed> (embed; bug #555432)
1321 NOTE: embeds stdlib modules: optparse
1322 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1323 NOTE: embeds stdlib modules: doctest
1324 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1325 NOTE: embeds stdlib modules: doctest
1326 - distribute <unfixed> (embed)
1327 NOTE: embeds stdlib modules: doctest
1328 - python-setuptools <unfixed> (embed; bug #555435)
1329 NOTE: embeds stdlib modules: doctest
1330 - zope.testing <unfixed> (embed; bug #555436)
1331 NOTE: embeds stdlib modules: doctest
1332 - translate-toolkit <unfixed> (embed; bug #555422)
1333 NOTE: embeds stdlib modules: textwrap, contextlib
1334 - libtpclient-py <unfixed> (embed; bug #555424)
1335 NOTE: embeds stdlib modules: subprocess
1336 - grass <unfixed> (embed; bug #555425)
1337 NOTE: embeds stdlib modules: subprocess
1338 - coherence <unfixed> (embed; bug #555429)
1339 NOTE: embeds stdlib modules: uuid
1340 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1341 NOTE: embeds stdlib modules: uuid
1342 - setroubleshoot <unfixed> (embed; bug #555431)
1343 NOTE: embeds stdlib modules: uuid
1344 - linkchecker <unfixed> (embed; bug #555414)
1345 NOTE: embeds msgfmt.py script
1346 - imdbpy <unfixed> (embed)
1347 NOTE: embeds msgfmt.py script
1348 - kiwi <unfixed> (embed)
1349 NOTE: embeds msgfmt.py script
1350 - moin <unfixed> (embed)
1351 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1352 - plone3 <removed> (embed)
1353 NOTE: embeds msgfmt.py script
1354 - roundup <unfixed> (embed)
1355 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1356 - rednotebook <unfixed> (embed; bug #555415)
1357 NOTE: embeds msgfmt.py script
1358 - turbogears <unfixed> (embed)
1359 NOTE: embeds msgfmt.py script
1360 - elisa <unfixed> (embed)
1361 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1362 - calibre <unfixed> (embed)
1363 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1364 - mailman 1:2.1.13-1 (embed; #555416)
1365 NOTE: embeds msgfmt.py script
1366 - python-docutils <unknown> (embed)
1367 NOTE: embeds stdlib modules: optparse, textwrap
1368 - python-imaging <unknown> (embed)
1369 NOTE: embeds stdlib modules: doctest
1370 - python-mechanize <unknown> (embed)
1371 NOTE: embeds stdlib modules: doctest
1372 - twill <unknown> (embed)
1373 NOTE: embeds stdlib modules: subprocess
1374 - zeroc-ice <unknown> (embed)
1375 NOTE: embeds stdlib modules: subprocess
1376 - wxwidgets2.8 <unknown> (embed)
1377 NOTE: embeds stdlib modules: subprocess
1378 - cycle <unknown> (embed)
1379 NOTE: embeds msgfmt.py script
1380 - deluge <unknown> (embed)
1381 NOTE: embeds msgfmt.py script
1382 - opendict <unknown> (embed)
1383 NOTE: embeds msgfmt.py script
1384 - openerp-client <unknown> (embed)
1385 NOTE: embeds msgfmt.py script
1386 - rapidsvn <unknown> (embed)
1387 NOTE: embeds msgfmt.py script
1388 - wammu <unknown> (embed)
1389 NOTE: embeds msgfmt.py script
1390 - gaphor <unknown> (embed)
1391 NOTE: embeds msgfmt.py script
1392 - pida <unknown> (embed)
1393 NOTE: embeds msgfmt.py script
1394 - python-formencode <unknown> (embed)
1395 NOTE: embeds msgfmt.py script
1396 - duplicity <unfixed> (embed)
1397 NOTE: embeds stdlib module: urlparse, tarfile
1398 - pygopherd <unfixed> (embed)
1399 NOTE: embeds stdlib module: zipfile
1400
1401 argparse
1402 - twill <unfixed> (embed; bug #555347)
1403 - ipython <unfixed> (embed; bug #555348)
1404
1405 coherence
1406 - elisa <unfixed> (embed; bug #555335)
1407
1408 simpletal
1409 - plastex <unfixed> (embed; bug #555371)
1410
1411 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1412 - postr <unfixed> (embed)
1413 - elisa <unfixed> (embed)
1414
1415 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1416 - apertium-tolk <unfixed> (embed)
1417 - ipython <unfixed> (embed)
1418 - virtaal <unfixed> (embed)
1419
1420 distribute
1421 - setuptools <removed> (old-version)
1422
1423 rails
1424 - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1425 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1426 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1427 - thin <unfixed> (embed) [./spec/rails_app/*]
1428 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1429 NOTE: be dangerous if developers are naively basing their code off of the examples
1430 NOTE: prototype.js is among the example files
1431
1432 lucene2 (prototype.js is among the embeds in the following)
1433 - lucene <unfixed> (old-version)
1434 - pylucene <unfixed> (embed)
1435 - libpdfbox-java <unfixed> (embed)
1436 - libfontbox-java <unfixed> (embed)
1437 - libjempbox-java <unfixed> (embed)
1438 - solr <unfixed> (embed)
1439
1440 unicode-data
1441 - syslinux <unfixed> (embed)
1442 - camomile <unfixed> (embed)
1443 - fribidi <unfixed> (embed)
1444 - m17n-db <unfixed> (embed)
1445 - sbcl <unfixed> (embed)
1446 - heimdal <unfixed> (embed)
1447 - icu <unfixed> (embed)
1448 - icu4j <unfixed> (embed)
1449 - krb5 <unfixed> (embed)
1450 - moodle <unfixed> (embed)
1451 - openldap <unfixed> (embed)
1452 - pike7.6 <unfixed> (embed)
1453 - samba <unfixed> (embed)
1454 - samba4 <unfixed> (embed)
1455 - cmucl <unfixed> (embed)
1456 - typo3-src <unfixed> (embed)
1457 - mauve <unfixed> (embed)
1458 - texlive-bin <unfixed> (embed)
1459 - ypsilon <unfixed> (embed)
1460 - jeuclid <unfixed> (embed)
1461 - charmap.app <unfixed> (embed)
1462 - clisp <unfixed> (embed)
1463 - gnulib <unfixed> (embed)
1464 - opensrs-client <unfixed> (embed)
1465 - saxonb <unfixed> (embed)
1466 - rails <unfixed> (embed)
1467
1468 feedparser
1469 - rawdog <unfixed> (embed; bug #383422)
1470 - miro <unfixed> (embed; bug #555351)
1471 - calibre <unfixed> (embed; bug #555352)
1472 - freevo <unfixed> (embed; bug #555353)
1473 - pida <unfixed> (embed; bug #555354)
1474 - planet-venus <unfixed> (embed; bug #555355)
1475 - plone3 <removed> (embed; bug #555356)
1476 - exaile 0.2.14+debian-1 (embed)
1477 - screenlets 0.1.2-3 (embed)
1478 NOTE: included twice
1479
1480 agg:
1481 - matplotlib <unfixed> (embed: bug #377271)
1482 - contextfree <unfixed> (embed)
1483 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1484 - exactimage <unfixed> (embed)
1485 - python-enable <unfixed> (embed)
1486 - mapnik 0.5.1-3 (embed)
1487 NOTE: links statically to agg, but shared library is not available (bug #377271)
1488
1489 vtk
1490 - paraview <unfixable> (embed; bug #495426)
1491
1492 txt2tags
1493 - rednotebook <unfixed> (embed)
1494
1495 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1496 - gajim <unfixed> (embed)
1497 - emesene <unfixed> (embed)
1498 - convirt <unfixed> (embed)
1499 - pida <unfixed> (embed)
1500 - rednotebook <unfixed> (embed)
1501
1502 horde3 (prototype.js is among the embeds in the following)
1503 - mnemo2 <unfixed> (embed)
1504 - nag2 <unfixed> (embed)
1505 - wordpress <unfixed> (embed)
1506 NOTE: Text_Diff (wp-includes/Text/Diff*)
1507
1508 cimg
1509 - gmic <itp> (embed)
1510
1511 mootools
1512 - gmic <itp> (embed)
1513
1514 openldap
1515 - openldap2.3 <removed> (old-version)
1516
1517 grub2
1518 - grub <unfixed> (old-version)
1519
1520 gnupginterface
1521 - duplicity <unfixed> (embed)
1522
1523 python-dateutil
1524 - awn-extras-applets <unfixed> (embed)
1525 - matplotlib <unknown> (embed)
1526
1527 cups
1528 - cupsys <removed> (old-version)
1529
1530 yui
1531 - bcfg2 <not-affected> (present in source but not included in any binary files)
1532 - serendipity 1.5.3-1 (embed; bug #557746)
1533 - moodle 1.8.2.dfsg-5 (embed)
1534 - jifty 0.91117-1 (embed; bug #557748)
1535 - webgui 7.7.26-1 (embed)
1536 - loggerhead 1.17-1 (embed)
1537
1538 quake3 (vanilla source not packaged in debian)
1539 - openarena <unfixable> (fork)
1540
1541 quake2 (vanilla source not packaged in debian)
1542 - alien-arena <unfixable> (fork)
1543 - warsow <unfixable> (fork)
1544
1545 libtheora
1546 - iceweasel <not-affected> (uses xulrunner)
1547 - xulrunner <unfixed> (embed; bug #540959)
1548 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1549 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1550 - iceape <unfixed> (embed; bug #559276)
1551 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1552 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1553
1554 dtoa
1555 - bfilter <unfixed> (embed)
1556 - cacao <unfixed> (embed)
1557 - cdrdao <unfixed> (embed)
1558 - classpath <unfixed> (embed)
1559 - freej <unfixed> (embed)
1560 - iceape <unfixed> (embed)
1561 - iceweasel <unfixed> (embed)
1562 - jscoverage <unfixed> (embed)
1563 - kde4libs <unfixed> (embed)
1564 - kdelibs <unfixed> (embed)
1565 - kompozer <unfixed> (embed)
1566 - libv8 <unfixed> (embed)
1567 - mono <unfixed> (embed)
1568 - newlib <unfixed> (embed)
1569 - nspr <unfixed> (embed)
1570 - php5 <unfixed> (embed)
1571 - polyml <unfixed> (embed)
1572 - qt4-x11 <unfixed> (embed)
1573 - rhino <unfixed> (embed)
1574 NOTE: code translated to Java
1575 - ruby1.8 <unfixed> (embed)
1576 - ruby1.9 <unfixed> (embed)
1577 - ruby1.9.1 <unfixed> (embed)
1578 - sdd <unfixed> (embed)
1579 - sfind <unfixed> (embed)
1580 - star <unfixed> (embed)
1581 - tinymux <unfixed> (embed)
1582 - virtualbox-ose <unfixed> (embed)
1583 - webkit <unfixed> (embed)
1584 - xulrunner <unfixed> (embed)
1585
1586 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1587 - firegpg <unfixed> (embed)
1588 - enigmail <unfixed> (embed)
1589
1590 ptmalloc (not packaged in Debian)
1591 - crystalspace <unfixed> (embed)
1592 - qt4-x11 <unfixed> (embed)
1593
1594 svgalib
1595 - usplash <unfixed> (embed)
1596
1597 bogl
1598 - usplash <unfixed> (embed)
1599
1600 taglist
1601 - usplash <unfixed> (embed)
1602
1603 portaudio
1604 - audacity <unfixed> (embed; bug #323711)
1605
1606 nyquist
1607 - audacity <unfixed> (embed)
1608 NOTE: embeds a forked nyquist with support for a shared library
1609
1610 vamp-plugin-sdk
1611 - audacity <unfixed> (embed)
1612
1613 wordpress
1614 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1615 - wordpress-mu <removed> (fork)
1616
1617 php5
1618 - php4 <removed> (old-version)
1619
1620 classpath
1621 - libgnucrypto-java <removed> (embed; bug #559788)
1622
1623 libtool
1624 - apr <unfixed> (static; bug #489625)
1625 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1626 - arts <unfixed> (embed)
1627 - bochs 2.4.2-1 (embed; bug #560884)
1628 - camserv <unfixed> (embed)
1629 - collectd 4.8.2-1 (embed)
1630 - courier-authlib 0.58-4 (embed)
1631 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1632 - cvsnt 2.5.04.3236-1.2 (embed)
1633 - dico <not-affected> (Uses the system copy of ltdl)
1634 - freeradius 0.1+20010527-1 (embed)
1635 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1636 - ggobi 2.1.9~20091212-1 (embed)
1637 - glame 2.0.1-4 (embed)
1638 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1639 - gnash 0.8.7-2 (embed)
1640 - gnu-smalltalk <unfixed> (embed; bug #566777)
1641 - google-gadgets 0.10.5-0.3 (embed)
1642 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1643 - graphicsmagick 1.3.5-6 (embed)
1644 - graphviz 2.8-3 (embed)
1645 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1646 - guile-1.6 1.6.8-7 (embed)
1647 - hamlib 1.2.11-1 (embed)
1648 - hercules 3.06-1.2 (embed)
1649 - jags 1.0.4-3 (embed; bug #560864)
1650 - kdelibs <unfixed> (embed)
1651 - libannodex <removed> (embed)
1652 - libextractor 0.5.23+dfsg-4 (embed)
1653 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1654 - libtunepimp 0.5.3-7.3 (embed)
1655 - mp4h 1.3.1-4.1 (embed)
1656 - naim <removed> (embed)
1657 - parser-mysql <unfixed> (embed)
1658 - pinball 0.3.1-11 (embed)
1659 - redland <unfixed> (embed)
1660 - siproxd <unfixed> (embed)
1661 - ski <unfixed> (embed)
1662 - synfig 0.62.00-1 (embed)
1663 - unixodbc 2.2.4-5 (embed)
1664 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1665 - clamav 0.95+dfsg-1 (embed)
1666 - imagemagick 6:6.2.3.1-1 (embed)
1667 - hypre 2.4.0b-5 (embed)
1668 - lam <unfixed> (embed)
1669 - openmpi <unfixable> (embed; bug #559386)
1670 - parser <unfixed> (embed)
1671 - pdsh 2.18-5 (embed; bug #560892)
1672 - sbnc 1.2-8 (embed)
1673 - sdcc <unfixed> (embed)
1674 - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1675 - proftpd-dfsg <unfixed> (embed; bug #561748)
1676 - babel 1.4.0.dfsg-5 (embed)
1677 - libprelude 0.9.14-2 (embed)
1678 - heartbeat 2.1.4-7 (embed)
1679 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1680 NOTE: might've been fixed earlier
1681 - gcc-* <unknown> (embed)
1682
1683 ocamlgsl
1684 - orpie 1.5.1-7.1 (embed; bug #550058)
1685
1686 xdotool
1687 - keynav <unfixed> (embed; bug #560103)
1688
1689 bulletphysics (not packaged; http://www.bulletphysics.org/)
1690 - supertuxkart <unfixed> (embed)
1691 - blender <unfixed> (embed)
1692
1693 ghostscript
1694 - gs-gpl <removed> (old-version)
1695
1696 icedove
1697 - thunderbird <removed> (old-version)
1698
1699 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1700 - jquery <unfixed> (embed)
1701
1702 sed
1703 - ssed <unfixed> (fork)
1704
1705 phpatomlib (http://code.google.com/p/phpatomlib)
1706 - wordpress <unfixed> (embed)
1707
1708 Services_JSON (http://pear.php.net/package/Services_JSON)
1709 - wordpress <unfixed> (embed)
1710
1711 phpass (http://www.openwall.com/phpass/)
1712 - gallery2 <unfixed> (embed)
1713 - wordpress <unfixed> (embed)
1714 - typo3-src <unfixed> (modified-embed)
1715 NOTE: file refers to drupal, maybe there's a copy somewhere there
1716 NOTE: a copyright owner search didn't match anything
1717 - libauthen-passphrase-perl <unfixable> (fork)
1718 NOTE: perl implementation of phpass
1719
1720 squirrelmail
1721 - wordpress <unfixed> (embed)
1722 NOTE: class-pop3.php
1723
1724 ezSQL (http://www.woyano.com/jv/ezsql)
1725 - wordpress <unfixable> (fork)
1726 NOTE: wp-db.php
1727
1728 Diff.php (Clay Loveless' version/killersoft.com)
1729 - php-versioncontrol-svn <unfixed>
1730
1731 libm (provided by libc)
1732 - spring <unfixed> (embed)
1733 NOTE: embedded by embedded copy of streflop
1734 - aide <unfixed> (static)
1735 - busybox <unfixed> (static)
1736 - mindi-busybox <unfixed> (static)
1737 - qemu <unfixed> (static)
1738 NOTE: qemu-user-static
1739 - tuxonice-userui <unfixed> (static)
1740 - zsh <unfixed> (static)
1741 NOTE: zsh-static
1742
1743 streflop
1744 - spring <unfixed> (embed)
1745
1746 minizip
1747 - spring <unfixed> (embed)
1748
1749 oscpack
1750 - spring <unfixed> (embed)
1751
1752 hpiutil2
1753 - spring <unfixed> (embed)
1754
1755 p7zip
1756 - spring <unfixed> (embed)
1757
1758 pythonqt (doesn't seem to be python-qtN, unknown source)
1759 - fontmatrix <unfixed> (embed)
1760 - elmerfem <unfixed> (embed)
1761
1762 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1763 - docvert <unfixed> (embed)
1764 - jifty <unfixed> (embed)
1765 - kdenetwork <unfixed> (embed)
1766 - mediatomb <unfixed> (embed)
1767 - plastex <unfixed> (embed)
1768 - plone3 <removed> (embed)
1769 - python-chaco <unfixed> (embed)
1770 - python-docutils <unfixed> (embed)
1771 - s5 <unfixed> (embed)
1772 - zope2.10 <unfixed> (embed)
1773 - zope2.11 <removed> (embed)
1774 - cython <not-affcted> (embed)
1775 NOTE: part of documentation, which is not installed into the binary package
1776
1777 python-docutils
1778 - zope2.10 <unfixed> (embed)
1779 - zope2.11 <removed> (embed)
1780
1781 tesseract
1782 - ocropus <unfixed> (static)
1783
1784 antlr
1785 - kdevelop <unfixed> (embed)
1786
1787 libxerces2
1788 - openjdk-6 <unfixed> (embed)
1789
1790 kfreebsd-8
1791 - kfreebsd-7 <unfixed> (old-version)
1792 - kfreebsd-6 <removed> (old-version)
1793
1794 ruby1.9.1
1795 - ruby1.9 <unfixed> (old-version)
1796 - ruby1.8 <unfixed> (old-version)
1797
1798 maildrop
1799 - courier <unfixed> (embed) [./maildrop]
1800
1801 glee
1802 - warzone2100 <not-affected> (embed)
1803
1804 phing
1805 - symfony <unfixed> (embed)
1806
1807 pake
1808 - symfony <unfixed> (embed)
1809
1810 propel
1811 - symfony <unfixed> (embed)
1812
1813 creole
1814 - symfony <unfixed> (embed)
1815
1816 hfsutils
1817 - cdrkit <unfixed> (embed; bug #570187)
1818 NOTE: embeds hfsutils code in genisoimage
1819
1820 cdrkit
1821 - grub2 <unfixed> (embed; bug #570156)
1822 NOTE: genisoimage imported into grub-mkisofs
1823
1824 kdebase-workspace
1825 - kdebase <unfixed> (old-version)
1826
1827 file
1828 - php5 <unfixable> (modified-embed)
1829 [lenny] - php5 <not-affected>
1830
1831 cdb
1832 - php5 <unfixed> (embed)
1833
1834 libmbfl (itp: #570708)
1835 - php5 <unfixed> (embed)
1836 NOTE: PHP is actually the current upstream, ITP is of that code
1837
1838 libonig
1839 - php5 5.3.2-1 (embed)
1840
1841 xmlrpc-epi
1842 - php5 <unfixed> (embed)
1843
1844 swt-gtk
1845 - eclipse <unfixed> (embed; bug #538808)
1846
1847 txt2html
1848 - wml 2.0.11ds2-1 (embed)
1849
1850 ca-certificates
1851 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1852
1853 openexr
1854 - freeimage <unfixed> (embed)
1855
1856 libmng
1857 - freeimage <unfixed> (embed)
1858
1859 openjpeg
1860 - freeimage <unfixed> (embed)
1861
1862 libjpeg6b
1863 - freeimage <unfixed> (embed)
1864
1865 libjpeg (don't know what exact version)
1866 - dcmtk <unfixed>
1867 - gdcm <unfixed>
1868 - insighttoolkit <unfixed>
1869 - openarena <unfixed> (bug #495966)
1870 - outguess <unfixed>
1871 - squeak-vm <unfixed> (embed)
1872 - tremulous <unfixed>
1873 - tuxonice-userui <unfixed> (static)
1874 - fpc <unfixed> (static)
1875 - lazarus <unfixed> (static)
1876 NOTE: inherited from fpc, see #472304
1877 - mseide-msegui <unfixed> (static)
1878 NOTE: inherited from fpc, see #472304
1879 - easymp3gain <unfixed> (static)
1880 NOTE: inherited from fpc, see #472304
1881 - winff <unfixed> (static)
1882 NOTE: inherited from fpc, see #472304
1883 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1884
1885
1886 lxr
1887 - lxr-cvs (embed)
1888
1889 libfile-copy-recursive-perl
1890 - r-base <unfixed> (embed; bug #577427)
1891 - r-base-core-ra <unfixed> (embed; bug #577429)
1892
1893 delimmatch
1894 - r-base <unfixed> (embed; bug #577433)
1895 - r-base-core-ra <unfixed> (embed; bug #577434)
1896
1897 libsmf (ITP: #572558)
1898 - denemo <unfixed> (embed)
1899 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1900
1901 libselinux
1902 - dpkg 1.15.6 (static)
1903
1904 xinha (ITP: #479708)
1905 - horde3 <unfixed>
1906 - serendipity <unfixed>
1907 - openacs <unfixed>
1908 - dotlrn <unfixed>
1909
1910 dvipng
1911 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1912
1913 dvipdfmx
1914 - texlive-bin <unfixed> (embed)
1915 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1916
1917 lcdf-typetools
1918 - texlive-bin 2009-1 (embed)
1919
1920 tex4ht
1921 - texlive-bin 2009-1 (embed)
1922
1923 freetype
1924 - texlive-bin 2009-1 (embed)
1925
1926 freetype2
1927 - texlive-bin 2009-1 (embed)
1928
1929 silgraphite
1930 - texlive-bin <unfixed> (embed)
1931
1932 unzip
1933 - texlive-bin 2009-1 (embed)
1934
1935 jbig2dec
1936 - ghostscript 8.71~dfsg2-1 (embed)
1937
1938 libxml2
1939 - chromium-browser 5.0.375.29~r46008-1
1940
1941 protobuf
1942 - chromium-browser 5.0.375.70~r48679-2
1943
1944 libv8
1945 - chromium-browser 5.0.375.38~r46659-1
1946
1947 nspr
1948 - chromium-browser 5.0.375.29~r46008-3
1949
1950 yasm
1951 - chromium-browser 5.0.375.29~r46008-2
1952
1953 libxslt
1954 - chromium-browser 5.0.375.29~r46008-1
1955
1956 miniupnpc (not packaged in Debian; ITP bug #444392)
1957 - warzone2100 <unfixed> (embed)
1958
1959 iniparser (not packaged in Debian; RFP bug #582657)
1960 - warzone2100 <unfixed> (modified-embed)
1961

  ViewVC Help
Powered by ViewVC 1.1.5