/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 15272 - (show annotations) (download)
Sun Sep 5 23:36:41 2010 UTC (2 years, 8 months ago) by geissert
File size: 55534 byte(s)
mantis updates
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy
14 <unfixed> if the issue is not yet fixed
15 <removed> if the package was removed from the archive
16 <itp> if the package is in the process of being packaged
17 <not-affected> if the package does not use the embedded copy
18 <unknown> if the version number can not be determined
19 <unfixable> for unavoidable cases (e.g., forks that add real value)
20 sort: static (linking statically against a lib)
21 embed (embeds a copy of the library into another source package)
22 modified-embed (embeds a code copy that differs from upstream code)
23 fork (a full-blown fork of another source package)
24 old-version (an older version of essentially the same code)
25
26 The srcpkg might be some string to identify the code if there is no
27 specific source package.
28
29 Everything up to the next line is ignored.
30 ---BEGIN
31 poppler
32 - pdftohtml <unknown>
33 [sarge] - pdftohtml <unfixed>
34 [etch] - pdftohtml <unfixed>
35 NOTE: has been replaced by poppler-utils
36 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37 - texlive-base 3.0-12 (embed)
38 - texlive-bin 2007-1 (embed)
39 - koffice 1:2.0.0-1 (embed; bug #436163)
40 - libextractor 0.5.12-1 (embed)
41 NOTE: libextractor is using its own pdf decoder now
42 - ipe <unfixed> (embed)
43 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 - ruby-gnome2 <unknown> (embed)
45 - pdfedit <unfixed> (embed; bug #510794)
46 - swftools <removed> (embed; bug #551293)
47 - xpdf 3.02-9 (fork)
48
49 pdksh (no longer developed since 1999)
50 - mksh <unfixable> (fork)
51 - posh <unfixable> (fork)
52
53 ppmd
54 - libcomplearn-mod-ppmd <unfixed> (fork)
55 NOTE: discussion in #458152
56
57 libevent
58 - transmission 1.71-1 (embed; bug #529372)
59 - chromium-browser 5.0.375.29~r46008-1
60
61 lrmi
62 - read-edid 2.0.0-1 (embed; bug #495131)
63 - s3switch <unfixed> (embed)
64 - xresprobe <unfixed> (embed)
65 - zhcon <unfixed> (embed)
66
67 php-htmlpurifier
68 - mahara 1.2.5-1 (embed)
69 - knowledgeroot 0.9.9.5-5 (embed)
70 - moodle <unfixed> (embed)
71
72 peercast
73 - gnome-peercast <removed> (embed)
74 [etch] - gnome-peercast <unfixed> (embed)
75
76 silc-toolkit
77 - silc-client 1.1~beta6-1 (embed)
78
79 icclib
80 - ghostscript <unfixed> (embed)
81 - argyll <unfixed> (embed)
82
83 libusb
84 - argyll <unfixed> (embed)
85
86 dietlibc
87 - ccontrol 0.9.1+20071204-1 (static)
88 - mksh <unfixable> (static)
89 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
90
91 libmikmod
92 - sdl-mixer1.2 <unfixed> (embed)
93 TODO: report bug
94
95 libiax
96 - iaxmodem <unfixable> (embed; bug #548885)
97
98 spandsp
99 - iaxmodem <unfixable> (embed; bug #548885)
100
101 python-paramiko
102 - fabric 0.9.0-2 (embed; bug #561398)
103
104 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
105 - dpkg 1.15.6 (static)
106 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
107 - rsync <unfixed> (embed)
108 - cherokee <unfixed> (embed)
109 NOTE: somehow derived code base
110 - mono <unfixed> (embed)
111 TODO: check mozilla
112 - Linux kernels <unfixed> (embed)
113 - pvpgn 1.7.8-2 (embed)
114 - mrtg 2.12.2-1 (embed)
115 - rpm <unknown> (embed)
116 NOTE: pinged anibal since when rpm was fixed
117 - tuxcmd-modules <unfixed> (embed)
118 - zsync <unfixed>
119 - tra <unfixed>
120 - sash <unfixed>
121 - nsis <unfixed>
122 - pyfits 1:2.3.1-1
123 - mseide-msegui <unfixed>
124 NOTE: mseide
125 - mirrordir <unfixed>
126 - poco <unfixed>
127 - klibc <unfixed>
128 - emboss <unfixed>
129 - ghostscript <unfixed>
130 - freeimage <unfixed>
131 - clamav <unfixed> (fork)
132 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
133 - tuxonice-userui <unfixed> (static)
134 - plt-scheme <unfixed>
135 - perl <unfixed>
136 - paraview <unfixed>
137 - velvet 0.7.56~nozlibcopy-1
138 - gcvs <unfixed>
139 - dump <unfixed>
140 - aide <unfixed> (static)
141 - dar <unfixed> (static)
142 - avfs <unfixed>
143 - fpc <unfixed>
144 - winff <unfixed>
145 NOTE: inherited from fpc, see #472304
146 - lazarus <unfixed>
147 NOTE: inherited from fpc, see #472304
148 - erlang <unfixed> (embed)
149 - gamera 3.2.3-1 (embed)
150 - python2.4 <unfixed> (embed; bug #553403)
151 - python2.5 <unfixed> (embed; bug #553403)
152 - texlive-bin <unknown> (embed)
153
154 dulwich
155 - hg-git 0.1.0-1 (embed; bug #541996)
156
157 libvigraimpex
158 - hugin <unfixed> (embed; bug #542259)
159 - enblend-enfuse <unfixed> (embed; bug #542258)
160 - gamera 3.2.3-1 (embed)
161
162 libbz2
163 - dpkg 1.15.6 (static)
164 - amd64-libs <unfixed> (static)
165 NOTE: let's call it "static"
166 - dar <unfixed> (static)
167 - dump <unfixed> (static)
168 - unalz 0.64-1 (embed)
169 NOTE: has code, by the maint, to use the system version but links against the internal copy
170
171 libyahoo2
172 - centerim <unfixed> (embed; bug #559783)
173
174 libmsn
175 - centerim <unfixed> (embed; bug #559783)
176
177 libgadu
178 - centerim <unfixed> (embed; bug #559783)
179 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
180 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
181 - kdenetwork 4:3.3.2-5 (embed)
182 NOTE: from kdenetwork: kopete
183 - ekg 1:1.8~rc0-1 (embed)
184 - kadu 0.6.0.2-3 (embed; bug #504430)
185 - gadu <itp> (embed)
186
187 xmlrpc (which package is the "origin" of this code?)
188 - drupal <unfixed> (embed)
189 - phpgroupware <unfixed> (embed)
190 - egroupware <unfixed> (embed)
191 - phpwiki <unfixed> (embed)
192 - php4 <removed> (embed)
193 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
194
195 shtool (affects build-time only)
196 - mysql-ocaml <unfixed> (embed)
197 - php4 <removed> (embed)
198 - php5 <unfixed> (embed)
199
200 xulrunner
201 - iceape <unfixed> (embed; bug #561749)
202 - iceweasel 2.0.0.19 (embed)
203 - icedove <unfixed> (embed; bug #561750)
204 - kompozer <unfixed> (embed; bug #532168)
205 - galeon 2.0.2-4 (embed)
206 - epiphany-browser 2.14.3-8 (embed)
207 - conkeror 0.9~git080629-2 (embed)
208 - kazehakase 0.4.2-1 (embed)
209
210 xli
211 - xloadimage <unfixed> (embed)
212
213 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
214 - openmotif <unfixed> (embed)
215
216 libxpm
217 - lesstif2 <unfixed> (embed; bug #575750)
218
219 kerberized apps with BSD origin
220 - krb4 <removed> (embed)
221 - krb5 <unfixed> (embed)
222 - heimdal <unfixed> (embed)
223
224 grip (which pkg is the origin?)
225 - libcdaudio <unfixed>
226 - grip <unfixed>
227 - gnome-vfs <unfixed>
228 TODO: check vfs2 as well
229
230 fudforum
231 [etch] - phpgroupware <unfixed> (embed)
232 NOTE: phpgroupware-fudforum
233 [sarge] - egroupware-fudforum <removed> (embed)
234
235 libbsd
236 - rdate 1:1.2-3 (embed)
237 - atheme-services <unfixed>
238 - libbsd-arc4random-perl <not-affected> (modified-embed)
239 NOTE: code not used, it links dynamically against libbsd instead
240 - isakmpd <unfixed>
241 - bsdgames <unfixed> (embed)
242 - bsd-mailx <unfixed> (embed)
243 - netcat-openbsd <unfixed> (embed; bug #550611)
244 - openssh <unfixed> (embed)
245 - unworkable <unfixed> (embed)
246 - mksh <unfixed> (modified-embed)
247 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
248 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
249 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
250
251 cvs
252 - gcvs <unfixed> (embed)
253 NOTE: see cvsunix/src in tarball
254
255 pcre3
256 - php4 <removed> (embed)
257 - analog 2:5.23-0woody1 (embed)
258 - goffice <unfixed> (embed)
259 NOTE: libgoffice-*
260 - vfu 4.06-4.1 (embed; bug #450754)
261 - tf5 5.0beta7-1 (embed)
262 - monotone 0.43-1 (embed)
263 NOTE: this only affects versions >= 0.37
264 - glib2.0 2.15.2-1 (embed)
265 - apache2 2.0.53-4 (embed)
266 - exim4 4.10-0.srh20.12 (embed)
267 - yacas <unfixed> (embed)
268 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
269 - gtamsanalyzer.app 0.42-5 (embed)
270 - tin 980117-1 (embed)
271 - kazehakase 0.5.2-1
272 - webkit 1.0.1-1 (embed)
273 - qt4-x11 <unfixed> (embed)
274 NOTE: embedded via webkit copy
275 - erlang <unfixed> (embed)
276 - ssed <unfixed> (embed)
277 - ircd-hybrid <unfixed> (static)
278 - emboss <unfixd>
279 - cherokee <unfixed> (embed)
280 - oftc-hybrid <unfixed> (embed)
281 - ratbox-services <unfixed> (embed)
282 - squeak-vm <unfixed> (embed)
283 - tinymux <unfixed> (embed)
284
285 tiff
286 - wxwindows2.4 2.2.1 (embed)
287 - gamera 3.2.3-1 (embed)
288 - freeimage <unfixed> (embed)
289 - libtk-img <unfixed> (embed)
290 NOTE: there are two copies, one under tiff/ other under libtiff/
291 - gdal <unfixed>
292
293 uudeview
294 - libconvert-uulib-perl <unfixed> (embed)
295 - pan <unfixed> (embed)
296
297 sqlite (not affected by security vulnerabilities so far)
298 - amarok <unfixed> (embed)
299 - monotone 0.43-1 (embed)
300 - iceweasel <unfixed> (embed)
301 - heimdal <unfixed> (embed; bug #559616)
302
303 util-linux/mount
304 - loop-aes-utils <unfixed> (embed)
305 NOTE: contains code from util-linux' mount in the mount-aes-udeb
306
307 sylpheed
308 - sylpheed-claws <unfixed> (fork)
309
310 phpsysinfo
311 - egroupware <unfixed> (embed)
312 - phpgroupware <unfixed> (embed)
313
314 phpldapadmin
315 [sarge] - egroupware <unfixed> (embed)
316 NOTE: removed from egroupware after sarge
317
318 chmlib
319 - kchmviewer <unknown> (embed)
320
321 ffmpeg (libavcodec/libavformat)
322 - mplayer 1.0~rc2-14 (embed; bug #395252)
323 - kino 1.0.0-1
324 - vlc <not-affected> (Links dynamically since initial release)
325 - smilutils 0.3.0-10
326 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
327 - motion 3.1.19-1
328 - gstreamer0.10-ffmpeg 0.10.3-2
329 - xmovie <removed> (static)
330 TODO: gimp-gap (potentially using ffmpeg code as well)
331 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
332 - audacity 1.3.7-2 (embed; bug #512278)
333 - chromium-browser <unfixed> (fork)
334
335 faad2
336 - mplayer 1.0~rc2-20 (embed)
337 - avifile <unfixed> (embed; bug #538750)
338 - ffmpeg-debian <removed> (embed)
339
340 libmad (MPEG decoding lib)
341 - xine-lib <unfixed> (embed)
342 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
343 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
344
345 libdts
346 - xine-lib <unfixed> (embed)
347
348 flac
349 - xine-lib <unfixed> (embed)
350
351 liba52
352 - a52dec <unfixed> (embed)
353 - xine-lib <unfixed> (embed)
354
355 mpeg2dec (libmpeg2)
356 - xine-lib <unfixed> (embed)
357
358 libmpeg3
359 - squeak-vm <unfixed> (embed)
360
361 libntlm
362 - wget <unfixed> (fork; bug #550436)
363 - curl <unfixed> (fork; bug #550437)
364 - cntlm <unfixed> (fork; bug #550438)
365
366 uw-imap
367 - pine <unfixed> (embed)
368 - alpine <unfixed> (embed)
369
370 imagemagick
371 - graphicsmagick <unfixed> (fork)
372
373 python-urlgrabber
374 - mercurial <unfixed> (embed; bug #531062)
375 - w3af <unfixed> (embed; bug #555372)
376 [experimental] - harvestman <unfixed> (embed; bug #555373)
377
378 beautifulsoup
379 - python-mechanize <unfixed> (embed; bug #555349)
380 - zope2.11 <removed> (embed; bug #555350)
381 - twill <unknown> (embed)
382
383 halibut
384 - nsis <unfixed> (fork)
385
386 libghttp
387 - hotway <unfixed> (embed)
388
389 libsndfile
390 - ardour 1:2.7.1-1 (embed)
391
392 glibmm2.4
393 - ardour 1:2.7.1-1 (embed)
394
395 libgnomecanvasmm2.6
396 - ardour 1:2.7.1-1 (embed)
397
398 libsigc++-2.0
399 - ardour 1:2.7.1-1 (embed)
400
401 soundtouch
402 - ardour 1:2.7.1-1 (embed)
403
404 libmms
405 - xine-lib <unfixed> (embed)
406 - mimms <unfixed> (embed)
407
408 fckeditor
409 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
410 - moin 1.8.2-2 (embed; bug #452599)
411 - karrigell <removed> (embed; bug #452598)
412 - gforge 4.6.99+svn6225-1 (embed)
413 - request-tracker3.8 <unfixed> (embed)
414 - otrs2 <unfixed> (embed)
415
416 ipatlas (not packaged in Debian)
417 - moodle <unfixed> (embed; bug #507185)
418
419 libphp-phpmailer
420 - moodle <unfixed> (embed; bug #507185)
421 - mahara <unfixed> (embed)
422 - symfony <unfixed> (embed; bug #566778)
423 [etch] - phpgroupware <unfixed> (embed)
424 NOTE: phpgroupware-felamimail is only in etch
425 - egroupware <unfixed> (embed; bug #504283)
426 - glpi <unfixed>
427
428 htmlArea (not packaged in Debian)
429 - moodle <unfixed> (embed)
430
431 giflib
432 - wine <unfixed> (embed; bug #466181)
433
434 bennu (not packaged in Debian, http://bennu.sourceforge.net)
435 - moodle <unfixed> (embed)
436
437 smarty
438 - moodle 1.8.2-2 (embed; bug #471158)
439 - gallery2 2.2.5-2 (embed; bug #471160)
440 - mahara 0.9.2-2 (embed; bug #471201)
441 - gosa 2.4beta1-1 (embed; bug #471200)
442
443 TinyMCE
444 - wordpress 2.5.1-3 (embed; bug #478257)
445 - moodle <unfixed> (embed; bug #507185)
446 - knowledgeroot <unfixed> (embed)
447 - joomla <itp> (bug #326398)
448
449 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
450 - scite <unfixed> (embed)
451 - qscintilla <unfixed> (embed)
452 - qscintilla2 <unfixed> (embed)
453 - geany <unfixed> (fork)
454 - anjuta <unfixed> (embed)
455
456 libphp-adodb
457 - moodle <unfixed> (embed; bug #507185)
458 NOTE: also AdoDB-XML Schema
459 - gallery2 <unfixed> (embed)
460 - phppgadmin <unfixed> (embed)
461 - egroupware <unfixed> (embed)
462 - phpwiki <unfixed> (embed)
463 - torrentflux 2.0beta1-2 (embed)
464 - ipplan <unfixed> (embed)
465 - typo3-src <unfixed> (embed)
466 - cacti <unknown> (embed)
467 [sarge] - cacti <unfixed> (embed)
468 NOTE: dependency exists, but internal version is used
469 - gforge 4.7~rc2-6 (embed)
470 - mahara <unfixed> (embed)
471
472 gzip
473 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
474 - klibc <unfixed> (embed)
475 NOTE: based on linux-kernel gzip code
476 - busybox <unfixed> (embed)
477 - pristine-tar <unfixed> (modified-embed)
478 NOTE: compression code only, not uncompression
479 - ncompress <unfixed> (old-version)
480
481 neon
482 - cadaver 0.22.3+debian-1 (embed; bug #188381)
483 - gnome-vfs2 <unfixed> (embed; bug #395874)
484 [etch] - litmus <unfixed> (embed; #395875)
485 - litmus <removed> (embed; #395875)
486 [sarge] - screem <unfixed> (embed)
487 - sitecopy 1:0.16.0-1 (embed; bug #395876)
488 [etch] - tla <unfixed> (embed; bug #395877)
489 [sarge] - tla <unfixed> (embed; bug #395877)
490
491 libmodplug
492 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
493
494 libvncserver
495 - vino <unfixed> (embed)
496
497 putty
498 - filezilla <unfixed> (embed)
499
500 tinyxml (not packaged in Debian; itp bug #531968)
501 - filezilla <unfixed>
502 - crystalspace <unfixed> (embed)
503 - libwfut <unfixed> (embed)
504 - rarian <unfixed> (embed)
505 - bulletml <unfixed> (embed)
506 - pokerth <unfixed> (embed)
507 - qutecom <unfixed> (embed)
508 - sofa-framework <unfixed> (embed)
509 - yate <unfixed> (embed)
510 - antigrav <unfixed> (embed)
511 - balder2d <unfixed> (embed)
512 - cal3d <unfixed> (embed)
513 - criticalmass <unfixed> (embed)
514 - ember <unfixed> (embed)
515 - epiphany <unfixed> (embed)
516 - gambit <unfixed> (embed)
517 - noiz2sa <unfixed> (embed)
518 - ogre <unfixed> (embed)
519 - opencity <unfixed> (embed)
520 - openmovieeditor <unfixed> (embed)
521 - pouetchess <unfixed> (embed)
522 - tecnoballz <unfixed> (embed)
523 - trigger-rally <unfixed> (embed)
524 - xmoto <unfixed> (embed)
525 - mapnik <unknown> (embed)
526 NOTE: uses a different XML parser by default
527 - rrootage 0.23a-6 <embed>
528 NOTE: links to libbulltetml
529 - boson <unknown> (embed)
530 NOTE: the embedded code is unused
531
532 gv
533 - evince <unfixed> (embed)
534 NOTE: ps/ tree from gv 3.5.8
535 NOTE: evince-gtk is affected (a component of evince source package)
536
537 libXbae
538 - paw <unfixed> (embed)
539
540 libgtkhtml
541 - claws-mail-extra-plugins <unfixed> (fork)
542
543 libXaw
544 - paw <unfixed> (embed)
545 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
546
547 libgd2
548 - graphviz <unfixed> (embed)
549 NOTE: lib/gd seems to be 2.0.33
550 - wml 2.0.11ds2-1 (embed)
551 - libwmf <unfixed> (embed)
552 NOTE: derived from gd 1.6.3
553 - texlive-bin 2009-1 (embed)
554
555 rar
556 - unrar-nonfree <unfixed> (embed)
557
558 unrar-free (maybe this code is derived from the original rar, too?)
559 - clamav <unfixed> (embed)
560 NOTE: seems to be disabled in default config
561
562 mplayer (DirectMedia Object loader)
563 - xine-lib <unfixed> (embed)
564 NOTE: src/libw32dll/
565 - vlc <unfixed> (embed)
566 NOTE: modules/codec/dmo/
567 - mplayer 1.0~rc2-20 (embed)
568
569 libwpd (WordPerfect converter)
570 - openoffice.org <unfixed> (embed)
571
572 fsplib (http://sourceforge.net/projects/fsp/)
573 - gftp <unfixed> (embed)
574 NOTE: lib/fsplib version 0.3
575
576 sprng
577 - tree-puzzle <unfixed> (embed)
578
579 librpcsecgss
580 - krb5 <unfixed> (embed)
581
582 jasper
583 - ghostscript 8.64~dfsg-2 (embed)
584
585 libiris
586 - psi <unfixed> (embed)
587 - kdenetwork <unfixed> (embed)
588 NOTE: kopete embeds libiris but links dynamically to libidn
589 - kdegames <unfixed> (embed)
590 NOTE: ksirk/kde4
591
592 libidn
593 - monotone 0.43-1 (embed)
594 - psi <unfixed> (embed)
595 NOTE: psi embeds libiris which embeds libidn
596 - kdegames <unfixed> (embed)
597 NOTE: kdegames/kde4 embeds libiris which embeds libidn
598
599 lua5.1
600 - monotone 0.43-1 (embed)
601 - nmap 5.00-1 (embed; bug #527997)
602 [lenny] - nmap <unfixed> (embed; bug #527997)
603 - ocropus <unfixed> (embed)
604 - enigma <unfixed> (embed)
605 NOTE: requires lua built with C++
606 - freeciv <unfixed> (embed)
607 - spring <unfixed> (embed)
608
609 libbotan
610 - monotone 0.43-1 (embed)
611
612 NetXX
613 - monotone 0.43-1 (embed)
614
615 libgc
616 - mono <unfixed> (embed)
617
618 lzma
619 - p7zip <unfixed> (embed)
620 - xz-utils <unfixed> (fork)
621
622 lzo
623 - grub2 <unfixed> (embed)
624
625 yassl
626 - mysql-dfsg-5.0 <unfixed> (embed)
627 - mysql-5.1 <unfixed> (embed)
628
629 pax code
630 - tar <unfixed> (embed)
631 - cpio <unfixed> (embed)
632
633 t1lib
634 - tetex-bin 2.0.2-1 (embed)
635 - texlive-bin <unknown> (embed)
636
637 guichan
638 - boswars <unfixed> (embed)
639 NOTE: maintainer notified us, working on it
640
641 tolua
642 - boswars <unfixed> (embed)
643 NOTE: maintainer notified us, working on it
644 NOTE: actually tolua++
645 - ocropus <unfixed> (embed)
646 NOTE: actually tolua++
647 - freeciv <unfixed> (embed)
648 NOTE: actually tolua++
649 - enigma <unfixed> (embed)
650
651 asio-dev
652 - luxrender <removed> (embed)
653
654 xine-lib
655 - vlc <unfixed> (embed)
656 NOTE: only parts included in modules/access/rtsp
657
658 netpbm
659 - tcl8.3 <unfixed> (embed)
660 - tcl8.4 <unfixed> (embed)
661 - tcl8.5 <unfixed> (embed)
662 NOTE: generic/tkImgGIF.c
663
664 tk8.5
665 - tk8.0 <removed> (old-version)
666 - tk8.3 <unfixed> (old-version)
667 - tk8.4 <unfixed> (old-version)
668 - perl-tk <unfixable> (fork)
669
670 samba
671 - mc 2:4.6.2~git20080311-1 (embed)
672 NOTE: maintainer is aware of this, currently searching a solution
673
674 plib1.8.4c2
675 - boson <unfixed> (fork)
676 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
677
678 fribidi
679 - quesoglc 0.7.2-2 (embed)
680
681 glew
682 - quesoglc <unfixed> (embed; bug #489341)
683 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
684 - trigger 0.5.2.1-2 (embed)
685 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
686 - trigger-rally 0.5.2.1-2 (embed)
687 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
688 - chromium-browser 5.0.375.70~r48679-2
689
690 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
691 - transcend <unfixed> (embed)
692 - cultivation <unfixed> (embed)
693 - passage <unfixed> (embed)
694 - gravitation <unfixed> (embed)
695
696 tar
697 - libarchive <unfixed> (embed)
698 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
699
700 cpio
701 - libarchive <unfixed> (embed)
702 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
703
704 kde4libs
705 - kdelibs <unfixable> (old-version)
706
707 webkit
708 - qt4-x11 <unfixed> (embed; bug #479851)
709 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
710 - kde4libs <unfixable> (fork)
711 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
712 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
713 - chromium-browser <unfixed> (fork)
714
715 ftgl
716 - blender 2.46+dfsg-1 (embed)
717
718 wv
719 - abiword <unfixed>
720
721 qemu
722 - kvm <removed> (embed; bug #543159)
723 - qemu-kvm <unfixed> (embed; bug #560853)
724 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
725 - xen-3 3.4.2-2 (embed; bug #560856)
726 - xen-unstable <unfixed> (embed; bug #560856)
727
728 vgabios
729 - kvm <removed> (embed; bug #489442)
730 - qemu-kvm <unfixed> (embed)
731
732 bochs
733 - kvm <removed> (embed; bug #489442)
734 - qemu-kvm <unfixed> (embed)
735
736 speex
737 - vorbis-tools <unfixed> (embed)
738 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
739 - gst-plugins-good0.10 <unfixed> (embed)
740 - xine-lib <unfixed> (embed)
741 - libfishsound <unfixed> (embed)
742 - libannodex <removed> (embed)
743 - vlc <unfixed> (embed)
744 - xmms-speex <unfixed> (embed)
745 - libsdl-sound1.2 <unfixed> (embed)
746 - sweep <unfixed> (embed)
747
748 libreadline
749 - magic <itp> (old-version)
750
751 opcode
752 - ode <unfixed> (embed)
753 NOTE: opcode is not a package in debian, it is just embedded
754 NOTE: http://www.codercorner.com/Opcode.htm
755
756 gimpact
757 - ode <unfixed> (embed)
758 NOTE: gimpact is not a package in debian, it is just embedded
759 NOTE: http://gimpact.sf.net
760
761 mochikit
762 - mahara <unfixed> (embed)
763 NOTE: they require extra patches, still unmerged upstream
764 - ntop <unfixed> (embed)
765 - coherence 0.6.2-1 (embed)
766 - paste <unfixed> (embed)
767 - turbogears <unfixed> (embed)
768 - plone3 <removed> (embed)
769 - xulrunner <unfixed> (embed)
770 - libjifty-plugin-chart-perl <unfixed> (embed)
771 - sabnzbdplus <unfixed> (embed)
772 - tgmochikit <unfixed> (embed)
773
774 prototypejs
775 - netbeans-ide 6.0.1+dfsg-2 (embed)
776 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
777 - webcit <unfixed> (embed; bug #555219)
778 - asterisk 1:1.6.2.0~rc3-1 (embed)
779 - libjson-ruby 1.1.4-1 (embed; bug #555224)
780 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
781 - horde3 <unfixed> (embed)
782 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
783 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
784 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
785 - ebug-http <unfixed> (embed; bug #555236)
786 - libaws 2.7-1 (embed; bug #555222)
787 - phpgedview <removed> (embed)
788 - poker-network 1.7.6-1 (embed; bug #555238)
789 - rails 2.1.0-6 (embed)
790 - wordpress 2.5.0-2 (embed; bug #555243)
791 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
792 TODO: search through all of the other zope packages
793 - ampache 3.4.1-2 (embed)
794 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
795 - hobix 0.5~svn20070319-4 (embed; bug #555247)
796 - zabbix 1.6.6-4 (embed; bug #555250)
797 - chora2 2.1.1+debian0-1 (embed; bug #555253)
798 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
799 - jscropperui 1.2.1-1 (embed; bug #555257)
800 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
801 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
802 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
803 - activeldap 1.2.1-1 (embed)
804 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
805 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
806 - otrs2 2.3.4-6 (embed; bug #555267)
807 - webcalendar 1.2~b1-2 (embed; bug #555269)
808 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
809 - jifty 0.90519-1 (embed; bug #555271)
810 - jquery 1.4-1 (embed; bug #555272)
811 - passenger 2.2.5debian1-1 (embed; bug #555273)
812 - plone3 <removed> (embed; bug #555275)
813 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
814 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
815 - xulrunner <unfixed> (embed)
816 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
817 - jclicmoodle <unfixed> (embed)
818 - git-cola <unfixed> (embed)
819
820 gdb
821 - insight <unfixed> (embed)
822
823 e2fsprogs
824 - ldiskfsprogs <unfixable> (fork)
825
826 quazip (not packaged in Debian)
827 - qcake <unfixed> (embed)
828 NOTE: starting with upstream version 0.6.4
829
830 exo
831 - pcmanfm <unfixed> (embed; bug #499677)
832 NOTE: slightly modified source code
833
834 java
835 - openjdk-6 <unfixed>
836 - sun-java5 <unfixed>
837 - sun-java6 <unfixed>
838
839 libphp-snoopy
840 - ampache 3.4.1-2 (embed; bug #504169)
841 - gforge 4.6.99+svn6094-2 (embed)
842 - mahara 1.0.5-2 (embed; bug #504170)
843 - pixelpost 1.7.1-5 (embed; bug #504171)
844 - mediamate 0.9.3.6-5 (embed; bug #504172)
845 - opendb <removed> (embed; bug #504173)
846 [etch] - opendb <unfixed> (embed; bug #504173)
847 - wordpress 2.5.1-9 (embed; bug #443948)
848 - moodle <unfixed> (embed; bug #507185)
849 [etch] - phpgroupware <unfixed> (embed)
850 NOTE: phpgroupware-felamimail
851 - magpierss 0.72-3 (embed; bug #431089)
852
853 jquery
854 - zekr <unfixed> (embed)
855 - wordpress <unknown> (embed)
856 - yocto-reader <unfixed> (embed)
857 - textpattern <unfixed> (embed)
858 - genshi 0.5.1-1 (embed)
859 NOTE: compressed file under examples/ dir
860 - prewikka <unfixed> (embed)
861 - libramaze-ruby <unfixed> (embed)
862 - drupal6 <unfixed> (embed)
863 - b2evolution <unfixed> (embed)
864 - wesnoth <unfixed> (embed)
865
866 tablesorter (jquery plugin, not packaged yet)
867 - wesnoth <unfixed> (embed)
868
869 kses
870 - wordpress <unfixed> (embed; bug #504242)
871 NOTE: their copy has all methods renamed to wp_<foo>
872 NOTE: kses isn't in Debian, RFP: #504240
873 - moodle <unfixed> (embed; bug #507185)
874 - egroupware <unfixed> (embed)
875
876 magpierss
877 - wordpress <unfixed> (embed; bug #504242)
878 - moodle <unfixed>
879
880 php-gettext
881 - wordpress 2.8.4-1 (embed; bug #504242)
882 - docbookwiki <unfixed> (embed)
883 - knowledgeroot 0.9.9.5-1
884 NOTE: non-free
885
886 libphp-ixr (name may change, it is the Incutio XML-RPC)
887 - wordpress <unfixed> (embed; bug #504242)
888 NOTE: libphp-ixr isn't in Debian, RFP: #504236
889 - dokuwiki <unfixed> (embed)
890 - textpattern <unfixed> (embed)
891
892 libphp-cas
893 - glpi <unfixed> (embed)
894 - moodle <unfixed> (embed; bug #505984)
895
896 scriptaculous (prototype.js is among the embeds in the following)
897 - glpi <unfixed> (embed)
898 - libaws <unfixed> (embed; bug #555222)
899 - op-panel <unfixed> (embed)
900 - symfony <unfixed> (embed)
901 NOTE: maintainer says there are extra incompatible changes required
902 - pixelpost 1.7.1-6 (embed)
903 - webhelpers <unfixed> (embed)
904 - qwik <removed> (embed; bug #555241)
905 - smokeping <unfixed> (embed)
906 - turba2 <unfixed> (embed)
907 - typo3-src 4.2.3-1 (embed)
908 - request-tracker3.6 <unfixed> (embed)
909 - request-tracker3.8 <unfixed> (embed)
910 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
911 - wordpress 2.5.0-2 (embed)
912 - libhtml-prototype-perl 1.48-3 (embed)
913
914 libmarkdown-php
915 - moodle <unfixed> (embed; bug #507185)
916 - pixelpost 1.7.1-6 (embed)
917
918 php-openid
919 - wordpress-openid 3.3.2-1 (embed)
920
921 geshi
922 - dokuwiki 0.0.20080505-3.1 (embed)
923 - pgfouine 1.0-1.1 (embed)
924 - websvn 2.1.0-1 (embed)
925
926 webcalendar
927 - gforge 4.7~rc2-6 (embed; bug #504758)
928
929 libical
930 - kdepim <unknown> (fork)
931 NOTE: fixed at some point during 4.0
932 - kdepimlibs 4.2.0-1 (fork)
933 - claws-mail-extra-plugins <unfixed> (fork)
934
935 harfbuzz
936 - qt4-x11 <unfixed> (embed)
937 - pango1.0 <unfixed> (embed)
938 - fontmatrix <unfixed> (embed)
939
940 libzip
941 - php5 <unfixable> (modified-embed)
942 - odt2txt <unfixed> (embed; bug #523808)
943
944 json.php (not packaged; should be replaced with php's built-in functions)
945 - moodle <unfixed>
946 - yui <unfixed>
947 - gallery2 <unfixed>
948 - dokuwiki <unfixed>
949 - typo3-src <unfixed>
950
951 php-fpdf
952 - tcpdf <itp> (fork)
953 - moodle <unfixed>
954 - phpwiki <unfixed>
955 - egroupware <unfixed>
956 - ldap-account-manager <unfixed> (fork)
957
958 tcpdf (itp: #495985)
959 - moodle <unfixed>
960 - phpmyadmin <unfixed>
961
962 typo3
963 - moodle <unfixed>
964
965 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
966 - moodle <unfixed>
967 - gosa <unfixed>
968
969 php-ole (itp: #487558)
970 - moodle <unfixed>
971
972 pieforms (http://www.catalyst.net.nz)
973 - mahara <unfixed>
974
975 savant2 (http://phpsavant.com)
976 - egroupware <unfixed>
977
978 rssparser (http://nwow.org)
979 - egroupware <unfixed>
980 - phpgroupware <unfixed>
981
982 lcms
983 - openjdk-6 <unfixed> (fork)
984 - gimp 2.4.0~rc2-2
985
986 libphp-phplayersmenu
987 - diogenes <unfixed>
988 - phpldapadmin <unfixed>
989
990 libphp-pclzip
991 - docvert <unfixed>
992 - moodle <unfixed>
993 - egroupware <unfixed>
994
995 libphp-simplepie
996 - dokuwiki <unfixed>
997 - wordpress <unfixed>
998
999 libphp-jpgraph
1000 - egroupware <unfixed>
1001
1002 php-simpletest
1003 - moodle <unfixed>
1004
1005 libpng
1006 - iceweasel <not-affected> (uses xulrunner)
1007 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1008 - iceape 1.0.13~pre080614i-0etch1 (embed)
1009 - xulrunner 1.9.0.13-1 (embed)
1010 [lenny] - xulrunner 1.9.0.11-0lenny1
1011 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1012 - gamera 3.2.3-1 (embed)
1013 - freeimage <unfixed> (embed)
1014 - tuxonice-userui <unfixed> (static)
1015
1016 irssi
1017 - silc-client <unfixed> (embed)
1018 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1019
1020 extc
1021 - mtasc <unfixed> (embed)
1022 - haxe <unfixed> (embed)
1023
1024 swflib
1025 - mtasc <unfixed> (embed)
1026 - haxe <unfixed> (embed)
1027
1028 libitext-java
1029 - bouncycastle 2.1.4-1 (embed)
1030
1031 python-ply
1032 - pyke <unfixed> (embed; bug #555363)
1033 - pywbem 0.7.0-4 (embed; bug #555364)
1034 - sepolgen <unfixed> (embed; bug #555365)
1035 - zope-textindexng3 <unknown> (embed)
1036 - iceweasel <not-affected> (uses xulrunner)
1037 - xulrunner <unknown> (embed)
1038 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1039
1040 libdumbnet (libdnet upstream)
1041 - nmap <unfixed> (fork)
1042
1043 gcc-4.4
1044 - gcc-mingw32 <unfixed> (embed)
1045
1046 camlimages
1047 - advi <unfixed> (static; bug #550441)
1048
1049 memcached
1050 - memcachedb <unfixed> (embed)
1051
1052 yajl
1053 - argyll <unfixed> (embed; bug #544223)
1054 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1055
1056 nusoap
1057 - gforge 4.8.2-1 (embed)
1058 - ampache <unfixed> (embed)
1059 - poker-network <unfixed> (embed)
1060 - moodle <unfixed> (embed)
1061 NOTE: code is not used when running under php5 and soap is enabled
1062 - phpwiki <unfixed> (embed)
1063 - gallery2 <unfixed> (embed)
1064 - typo3-src <unfixed> (embed)
1065 - phpgacl 3.3.7-7 (embed)
1066 - mantis 1.1.8+dfsg-1 (embed)
1067
1068 libept
1069 - adept <unfixed> (embed; bug #540649)
1070
1071 libvorbis
1072 - iceweasel <not-affected> (uses xulrunner)
1073 - xulrunner <unfixed> (embed; bug #540959)
1074 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1075 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1076 - iceape <unfixed> (embed)
1077 [etch] - iceape <not-affected> (introduced in 2.0)
1078 [lenny] - iceape <not-affected> (introduced in 2.0)
1079
1080 cairo
1081 - iceweasel <not-affected> (uses xulrunner)
1082 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1083
1084 liboggz
1085 - iceweasel <not-affected> (uses xulrunner)
1086 - xulrunner <unfixed> (embed; bug #540959)
1087 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1088 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1089 - iceape <unfixed> (embed)
1090 [etch] - iceape <not-affected> (introduced in 2.0)
1091 [lenny] - iceape <not-affected> (introduced in 2.0)
1092
1093 liboggplay
1094 - iceweasel <not-affected> (uses xulrunner)
1095 - xulrunner <unfixed> (embed; bug #540959)
1096 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1097 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1098 - iceape <unfixed> (embed)
1099 [etch] - iceape <not-affected> (introduced in 2.0)
1100 [lenny] - iceape <not-affected> (introduced in 2.0)
1101
1102 php-net-dnsbl
1103 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1104
1105 php-onyx-rss
1106 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1107
1108 php-text-wiki
1109 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1110
1111 php-xml-rpc
1112 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1113
1114 polarssl (does not have a shared library)
1115 - pdkim <itp> (embed; bug #543150)
1116 - xyssl <unfixed> (old-version)
1117
1118 pidgin (libpurple)
1119 - gaim <removed> (old-version)
1120 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1121
1122 icu
1123 - webkit 1.0.1-1 (embed; bug #547214)
1124 - texlive-bin <unfixed> (fork)
1125 NOTE: texlive upstream working with icu upstream to merge their changes
1126 - chromium-browser 5.0.375.29~r46008-3
1127
1128 cyrus-imapd-2.2
1129 - kolab-cyrus-imapd <unfixed> (fork)
1130 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1131
1132 python-cxx-dev
1133 - freecad 0.9.2646.3-1 (embed; bug #547936)
1134
1135 zipios++
1136 - freecad 0.9.2646.3-1 (embed; bug #547941)
1137 - enigma 0.92.3-3 (embed)
1138 NOTE: likely fixed earlier, marking etch's version as fixed
1139
1140 linux-2.6
1141 - kvm <removed> (embed; bug #549973) [./kernel/*]
1142 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1143 - kernel-source-2.6.8 <removed> (old-version)
1144 - kernel-source-2.4.27 <removed> (old-version)
1145 - kernel-source-2.4.24 <removed> (old-version)
1146 - kernel-source-2.2.25 <removed> (old-version)
1147 - kernel-source-2.2.20 <removed> (old-version)
1148
1149 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1150 - kvm <removed> (embed) [./libfdt/*]
1151 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1152
1153 qweb (not packaged)
1154 - ajaxterm <unfixed>
1155
1156 opensaml2
1157 - opensaml <removed> (old-version)
1158
1159 shibboleth-sp2
1160 - shibboleth-sp <removed> (old-version)
1161
1162 tuxonice-userui
1163 - suspend2-userui <removed> (old-version)
1164
1165 expat
1166 - w3c-libwww <removed> (embed; bug #551941)
1167 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1168 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1169 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1170 - python2.4 <unfixable> (embed; bug #553403)
1171 - python-4suite <unfixed> (embed; bug #516935)
1172 - wxwindows2.4 <removed> (embed)
1173 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1174 - wxwidgets2.8 2.8.10.1-2 (embed)
1175 - celementtree 1.0.5-8 (embed)
1176 NOTE: Maybe that was fixed even earlier
1177 - audacity 1.3.2-1 (embed)
1178 - matanza <unfixed> (embed)
1179 - tdom 0.8.3~20080525-1 (embed)
1180 - udunits 2.1.8-4 (embed)
1181 - apr-util 1.2 (embed)
1182 - ayttm <unfxed> (embed; bug #561006)
1183 - cableswig <unfixed> (embed)
1184 - cadaver <unfixed> (embed)
1185 - cmake 2.6.0-6 (embed)
1186 - coin3 <unfixed> (embed)
1187 - gdcm 2.0.14-2 (embed)
1188 - ghostscript 8.71~dfsg-2 (embed)
1189 - grmonitor <removed> (embed)
1190 - iceape <unfixed> (embed)
1191 - insighttoolkit 3.16.0-1 (embed)
1192 NOTE: insighttoolkit might've been fixed earlier
1193 - libparagui1.1 1.0.2-1 (embed)
1194 - paraview 3.6.2-1 (embed)
1195 - poco 1.3.6p1-1 (embed)
1196 - simgear <unfixed> (embed)
1197 - sitecopy 1:0.16.0-1
1198 - smart <unfixed> (embed)
1199 NOTE: smart embeds celementree, and it includes expat
1200 - swish-e <not-affected> (Linked against libxml, which is used instead)
1201 - tla 1.3.5+dfsg-15 (embed)
1202 - vtk 4.1.20030227-1 (embed)
1203 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1204 - xmlrpc-c <unfixed> (embed)
1205 - iceweasel <unfixed> (embed)
1206 - kompozer <unfixed> (embed)
1207 - vxl 1.13.0-2 (embed)
1208 - xulrunner <unfixed> (embed)
1209 - apache2 2.2 (embed)
1210 - texlive-bin <not-affected> (Embedded code not compiled in)
1211 - vnc4 <unfixed> (embed)
1212 - xotcl 1.6.6-1 (embed)
1213 - chromium-browser 5.0.375.29~r46008-3
1214
1215 xerces-c
1216 - xerces-c2 <unfixed> (old-version)
1217 - xerces27 <removed> (old-version)
1218
1219 md5 (RSA's version; not the gnu version provided by coreutils)
1220 - w3c-libwww <removed> (embed; bug #551942)
1221 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1222
1223 libparagui1.1
1224 - asc <unfixable> (fork)
1225
1226 enet
1227 - sauerbraten <unfixed> (embed; #497194)
1228
1229 eglibc
1230 - glibc <removed> (old-version)
1231 - mksh <unfixable> (static)
1232 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1233
1234 galib
1235 - gamera 3.2.3-1 (embed)
1236
1237 configobj
1238 - bzr 2.1.0~rc2-1 (embed; bug #555336)
1239 - elisa <unfixed> (embed; bug #555337)
1240 - gaupol <unfixed> (embed; bug #555338)
1241 - ipython <unfixed> (embed; bug #555339)
1242 - pida <unfixed> (embed; bug #555340)
1243 - psychopy <unfixed> (embed; bug #555341)
1244 - rest2web <unfixed> (embed; bug #555342)
1245 - auth2db <unknown> (embed)
1246 - dynagen <unknown> (embed)
1247 - iceweasel <unknown> (embed)
1248 - sabnzbdplus <unknown> (embed)
1249 - xulrunner <unknown> (embed)
1250 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1251
1252 python-clientform
1253 - bibus <unfixed> (embed; bug #555332)
1254 - zope2.10 <unfixed> (embed; bug #555333)
1255 - zope2.11 <removed> (embed; bug #555334)
1256 - python-mechanize <unknown> (embed)
1257 - twill <unknown> (embed)
1258
1259 python-mechanize
1260 - zope2.10 <unfixed> (embed; bug #555337)
1261 - zope2.11 <removed> (embed; bug #555338)
1262 - twill <unknown> (embed; bug #555339)
1263
1264 pexpect
1265 - duplicity 0.6.06-1 (embed; bug #555361)
1266 - hplip <unfixed> (embed; bug #555362)
1267 - smart <unfixed> (embed; bug #555363)
1268
1269 pyparsing
1270 - bauble <unfixed> (embed; bug #555366)
1271 - boa-constructor 0.6.1-8 (embed; bug #555367)
1272 - calibre <unfixed> (embed; bug #555368)
1273 - matplotlib <unfixed> (embed; bug #531024)
1274 - zhpy 1.7.3.1-1 (embed; bug #555370)
1275 - polybori <unknown> (embed)
1276 - python-whoosh <unknown> (embed)
1277 - twill <unknown> (embed)
1278 - zope-textindexng3 <unknown> (embed)
1279
1280 python-pysqlite2
1281 - python2.4 <unfixed> (embed; bug #553403)
1282 - python2.5 <unfixed> (embed; bug #553403)
1283
1284 celementtree
1285 - python2.5 <unfixed> (embed)
1286 - smart <unfixed> (embed)
1287
1288 elementtree
1289 - python2.5 <unfixed> (embed)
1290 - python2.6 <unfixed> (embed)
1291 - bzr 2.1.0~rc2-1 (embed; bug #555343)
1292 - gedit 2.28.2-1 (embed; bug #555344)
1293 - smart <unfixed> (embed)
1294 - solfege <unfixed> (embed; bug #555345)
1295 - w3af <unfixed> (embed; bug #555346)
1296 - python-qt4 <unknown> (embed)
1297 - sphinx <unknown> (embed)
1298 - python-nltk <itp> (embed)
1299
1300 python2.5
1301 - python2.4 <unfixed> (old-version)
1302 - jython <unfixed> (embed)
1303 NOTE: embeds many stdlib modules
1304 - python-django <unfixed> (embed; bug #555419)
1305 NOTE: embeds stdlib modules: doctest, decimal
1306 - gamera 3.2.3-1 (embed)
1307 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1308 - boa-constructor <unfixed> (embed; bug #555426)
1309 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1310 - nicotine <unfixed> (embed; bug #555427)
1311 NOTE: embeds stdlib modules: ConfigParser
1312 - museek+ <unfixed> (embed; bug #555428)
1313 NOTE: embeds stdlib modules: ConfigParser
1314 - vegastrike-data <removed> (embed)
1315 NOTE: embeds many stdlib modules
1316 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1317 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1318 - config-manager <unfixed> (embed; bug #555423)
1319 NOTE: embeds stdlib modules: optparse
1320 - jhbuild 2.28.0-1 (embed; bug #555421)
1321 NOTE: embeds stdlib modules: optparse, subprocess
1322 - smart <unfixed> (embed; bug #555432)
1323 NOTE: embeds stdlib modules: optparse
1324 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1325 NOTE: embeds stdlib modules: doctest
1326 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1327 NOTE: embeds stdlib modules: doctest
1328 - distribute <unfixed> (embed)
1329 NOTE: embeds stdlib modules: doctest
1330 - python-setuptools <unfixed> (embed; bug #555435)
1331 NOTE: embeds stdlib modules: doctest
1332 - zope.testing <unfixed> (embed; bug #555436)
1333 NOTE: embeds stdlib modules: doctest
1334 - translate-toolkit <unfixed> (embed; bug #555422)
1335 NOTE: embeds stdlib modules: textwrap, contextlib
1336 - libtpclient-py <unfixed> (embed; bug #555424)
1337 NOTE: embeds stdlib modules: subprocess
1338 - grass <unfixed> (embed; bug #555425)
1339 NOTE: embeds stdlib modules: subprocess
1340 - coherence <unfixed> (embed; bug #555429)
1341 NOTE: embeds stdlib modules: uuid
1342 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1343 NOTE: embeds stdlib modules: uuid
1344 - setroubleshoot <removed> (embed; bug #555431)
1345 NOTE: embeds stdlib modules: uuid
1346 - linkchecker <unfixed> (embed; bug #555414)
1347 NOTE: embeds msgfmt.py script
1348 - imdbpy <unfixed> (embed)
1349 NOTE: embeds msgfmt.py script
1350 - kiwi <unfixed> (embed)
1351 NOTE: embeds msgfmt.py script
1352 - moin <unfixed> (embed)
1353 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1354 - plone3 <removed> (embed)
1355 NOTE: embeds msgfmt.py script
1356 - roundup <unfixed> (embed)
1357 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1358 - rednotebook <unfixed> (embed; bug #555415)
1359 NOTE: embeds msgfmt.py script
1360 - turbogears <unfixed> (embed)
1361 NOTE: embeds msgfmt.py script
1362 - elisa <unfixed> (embed)
1363 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1364 - calibre <unfixed> (embed)
1365 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1366 - mailman 1:2.1.13-1 (embed; #555416)
1367 NOTE: embeds msgfmt.py script
1368 - python-docutils <unknown> (embed)
1369 NOTE: embeds stdlib modules: optparse, textwrap
1370 - python-imaging <unknown> (embed)
1371 NOTE: embeds stdlib modules: doctest
1372 - python-mechanize <unknown> (embed)
1373 NOTE: embeds stdlib modules: doctest
1374 - twill <unknown> (embed)
1375 NOTE: embeds stdlib modules: subprocess
1376 - zeroc-ice <unknown> (embed)
1377 NOTE: embeds stdlib modules: subprocess
1378 - wxwidgets2.8 <unknown> (embed)
1379 NOTE: embeds stdlib modules: subprocess
1380 - cycle <unknown> (embed)
1381 NOTE: embeds msgfmt.py script
1382 - deluge <unknown> (embed)
1383 NOTE: embeds msgfmt.py script
1384 - opendict <unknown> (embed)
1385 NOTE: embeds msgfmt.py script
1386 - openerp-client <unknown> (embed)
1387 NOTE: embeds msgfmt.py script
1388 - rapidsvn <unknown> (embed)
1389 NOTE: embeds msgfmt.py script
1390 - wammu <unknown> (embed)
1391 NOTE: embeds msgfmt.py script
1392 - gaphor <unknown> (embed)
1393 NOTE: embeds msgfmt.py script
1394 - pida <unknown> (embed)
1395 NOTE: embeds msgfmt.py script
1396 - python-formencode <unknown> (embed)
1397 NOTE: embeds msgfmt.py script
1398 - duplicity <unfixed> (embed)
1399 NOTE: embeds stdlib module: urlparse, tarfile
1400 - pygopherd <unfixed> (embed)
1401 NOTE: embeds stdlib module: zipfile
1402
1403 argparse
1404 - twill <unfixed> (embed; bug #555347)
1405 - ipython <unfixed> (embed; bug #555348)
1406
1407 coherence
1408 - elisa <unfixed> (embed; bug #555335)
1409
1410 simpletal
1411 - plastex <unfixed> (embed; bug #555371)
1412
1413 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1414 - postr <unfixed> (embed)
1415 - elisa <unfixed> (embed)
1416
1417 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1418 - apertium-tolk <unfixed> (embed)
1419 - ipython <unfixed> (embed)
1420 - virtaal <unfixed> (embed)
1421
1422 distribute
1423 - setuptools <removed> (old-version)
1424
1425 rails
1426 - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1427 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1428 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1429 - thin <unfixed> (embed) [./spec/rails_app/*]
1430 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1431 NOTE: be dangerous if developers are naively basing their code off of the examples
1432 NOTE: prototype.js is among the example files
1433
1434 lucene2 (prototype.js is among the embeds in the following)
1435 - lucene <unfixed> (old-version)
1436 - pylucene <unfixed> (embed)
1437 - libpdfbox-java <unfixed> (embed)
1438 - libfontbox-java <unfixed> (embed)
1439 - libjempbox-java <unfixed> (embed)
1440 - solr <unfixed> (embed)
1441
1442 unicode-data
1443 - syslinux <unfixed> (embed)
1444 - camomile <unfixed> (embed)
1445 - fribidi <unfixed> (embed)
1446 - m17n-db <unfixed> (embed)
1447 - sbcl <unfixed> (embed)
1448 - heimdal <unfixed> (embed)
1449 - icu <unfixed> (embed)
1450 - icu4j <unfixed> (embed)
1451 - krb5 <unfixed> (embed)
1452 - moodle <unfixed> (embed)
1453 - openldap <unfixed> (embed)
1454 - pike7.6 <unfixed> (embed)
1455 - samba <unfixed> (embed)
1456 - samba4 <unfixed> (embed)
1457 - cmucl <unfixed> (embed)
1458 - typo3-src <unfixed> (embed)
1459 - mauve <unfixed> (embed)
1460 - texlive-bin <unfixed> (embed)
1461 - ypsilon <unfixed> (embed)
1462 - jeuclid <unfixed> (embed)
1463 - charmap.app <unfixed> (embed)
1464 - clisp <unfixed> (embed)
1465 - gnulib <unfixed> (embed)
1466 - opensrs-client <unfixed> (embed)
1467 - saxonb <unfixed> (embed)
1468 - rails <unfixed> (embed)
1469
1470 feedparser
1471 - rawdog <unfixed> (embed; bug #383422)
1472 - miro <unfixed> (embed; bug #555351)
1473 - calibre <unfixed> (embed; bug #555352)
1474 - freevo <unfixed> (embed; bug #555353)
1475 - pida <unfixed> (embed; bug #555354)
1476 - planet-venus <unfixed> (embed; bug #555355)
1477 - plone3 <removed> (embed; bug #555356)
1478 - exaile 0.2.14+debian-1 (embed)
1479 - screenlets 0.1.2-3 (embed)
1480 NOTE: included twice
1481
1482 agg:
1483 - matplotlib <unfixed> (embed: bug #377271)
1484 - contextfree <unfixed> (embed)
1485 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1486 - exactimage <unfixed> (embed)
1487 - python-enable <unfixed> (embed)
1488 - mapnik 0.5.1-3 (embed)
1489 NOTE: links statically to agg, but shared library is not available (bug #377271)
1490
1491 vtk
1492 - paraview <unfixable> (embed; bug #495426)
1493
1494 txt2tags
1495 - rednotebook <unfixed> (embed)
1496
1497 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1498 - gajim <unfixed> (embed)
1499 - emesene <unfixed> (embed)
1500 - convirt <unfixed> (embed)
1501 - pida <unfixed> (embed)
1502 - rednotebook <unfixed> (embed)
1503
1504 horde3 (prototype.js is among the embeds in the following)
1505 - mnemo2 <unfixed> (embed)
1506 - nag2 <unfixed> (embed)
1507 - wordpress <unfixed> (embed)
1508 NOTE: Text_Diff (wp-includes/Text/Diff*)
1509
1510 cimg
1511 - gmic <unfixed> (embed)
1512
1513 mootools
1514 - kdenetwork <unfixed> (embed)
1515 - gallery <unfixed> (embed)
1516 - jspwiki <unfixed> (embed)
1517 - vdr-plugin-live <unfixed> (embed)
1518 - perl-doc-html <unfixed> (embed)
1519
1520 openldap
1521 - openldap2.3 <removed> (old-version)
1522
1523 grub2
1524 - grub <unfixed> (old-version)
1525
1526 gnupginterface
1527 - duplicity <unfixed> (embed)
1528
1529 python-dateutil
1530 - awn-extras-applets <unfixed> (embed)
1531 - matplotlib <unknown> (embed)
1532
1533 cups
1534 - cupsys <removed> (old-version)
1535
1536 yui
1537 - bcfg2 <not-affected> (present in source but not included in any binary files)
1538 - serendipity 1.5.3-1 (embed; bug #557746)
1539 - moodle 1.8.2.dfsg-5 (embed)
1540 - jifty 0.91117-1 (embed; bug #557748)
1541 - webgui 7.7.26-1 (embed)
1542 - loggerhead 1.17-1 (embed)
1543 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1544
1545 quake3 (vanilla source not packaged in debian)
1546 - openarena <unfixable> (fork)
1547
1548 quake2 (vanilla source not packaged in debian)
1549 - alien-arena <unfixable> (fork)
1550 - warsow <unfixable> (fork)
1551
1552 libtheora
1553 - iceweasel <not-affected> (uses xulrunner)
1554 - xulrunner <unfixed> (embed; bug #540959)
1555 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1556 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1557 - iceape <unfixed> (embed; bug #559276)
1558 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1559 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1560
1561 dtoa
1562 - bfilter <unfixed> (embed)
1563 - cacao <removed> (embed)
1564 - cdrdao <unfixed> (embed)
1565 - classpath <unfixed> (embed)
1566 - freej <unfixed> (embed)
1567 - iceape <unfixed> (embed)
1568 - iceweasel <unfixed> (embed)
1569 - jscoverage <unfixed> (embed)
1570 - kde4libs <unfixed> (embed)
1571 - kdelibs <unfixed> (embed)
1572 - kompozer <unfixed> (embed)
1573 - libv8 <unfixed> (embed)
1574 - mono <unfixed> (embed)
1575 - newlib <unfixed> (embed)
1576 - nspr <unfixed> (embed)
1577 - php5 <unfixed> (embed)
1578 - polyml <unfixed> (embed)
1579 - qt4-x11 <unfixed> (embed)
1580 - rhino <unfixed> (embed)
1581 NOTE: code translated to Java
1582 - ruby1.8 <unfixed> (embed)
1583 - ruby1.9 <unfixed> (embed)
1584 - ruby1.9.1 <unfixed> (embed)
1585 - sdd <unfixed> (embed)
1586 - sfind <unfixed> (embed)
1587 - star <unfixed> (embed)
1588 - tinymux <unfixed> (embed)
1589 - virtualbox-ose <unfixed> (embed)
1590 - webkit <unfixed> (embed)
1591 - xulrunner <unfixed> (embed)
1592
1593 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1594 - firegpg <unfixed> (embed)
1595 - enigmail <unfixed> (embed)
1596
1597 ptmalloc (not packaged in Debian)
1598 - crystalspace <unfixed> (embed)
1599 - qt4-x11 <unfixed> (embed)
1600
1601 svgalib
1602 - usplash <unfixed> (embed)
1603
1604 bogl
1605 - usplash <unfixed> (embed)
1606
1607 taglist
1608 - usplash <unfixed> (embed)
1609
1610 portaudio
1611 - audacity <unfixed> (embed; bug #323711)
1612
1613 nyquist
1614 - audacity <unfixed> (embed)
1615 NOTE: embeds a forked nyquist with support for a shared library
1616
1617 vamp-plugin-sdk
1618 - audacity <unfixed> (embed)
1619
1620 wordpress
1621 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1622 - wordpress-mu <removed> (fork)
1623
1624 php5
1625 - php4 <removed> (old-version)
1626
1627 classpath
1628 - libgnucrypto-java <removed> (embed; bug #559788)
1629
1630 libtool
1631 - apr <unfixed> (static; bug #489625)
1632 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1633 - arts <unfixed> (embed)
1634 - bochs 2.4.2-1 (embed; bug #560884)
1635 - camserv <unfixed> (embed)
1636 - collectd 4.8.2-1 (embed)
1637 - courier-authlib 0.58-4 (embed)
1638 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1639 - cvsnt 2.5.04.3236-1.2 (embed)
1640 - dico <not-affected> (Uses the system copy of ltdl)
1641 - freeradius 0.1+20010527-1 (embed)
1642 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1643 - ggobi 2.1.9~20091212-1 (embed)
1644 - glame 2.0.1-4 (embed)
1645 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1646 - gnash 0.8.7-2 (embed)
1647 - gnu-smalltalk <unfixed> (embed; bug #566777)
1648 - google-gadgets 0.10.5-0.3 (embed)
1649 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1650 - graphicsmagick 1.3.5-6 (embed)
1651 - graphviz 2.8-3 (embed)
1652 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1653 - guile-1.6 1.6.8-7 (embed)
1654 - hamlib 1.2.11-1 (embed)
1655 - hercules 3.06-1.2 (embed)
1656 - jags 1.0.4-3 (embed; bug #560864)
1657 - kdelibs <unfixed> (embed)
1658 - libannodex <removed> (embed)
1659 - libextractor 0.5.23+dfsg-4 (embed)
1660 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1661 - libtunepimp 0.5.3-7.3 (embed)
1662 - mp4h 1.3.1-4.1 (embed)
1663 - naim <removed> (embed)
1664 - parser-mysql <unfixed> (embed)
1665 - pinball 0.3.1-11 (embed)
1666 - redland <unfixed> (embed)
1667 - siproxd <unfixed> (embed)
1668 - ski <unfixed> (embed)
1669 - synfig 0.62.00-1 (embed)
1670 - unixodbc 2.2.4-5 (embed)
1671 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1672 - clamav 0.95+dfsg-1 (embed)
1673 - imagemagick 6:6.2.3.1-1 (embed)
1674 - hypre 2.4.0b-5 (embed)
1675 - lam <unfixed> (embed)
1676 - openmpi <unfixable> (embed; bug #559386)
1677 - parser <unfixed> (embed)
1678 - pdsh 2.18-5 (embed; bug #560892)
1679 - sbnc 1.2-8 (embed)
1680 - sdcc <unfixed> (embed)
1681 - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1682 - proftpd-dfsg <unfixed> (embed; bug #561748)
1683 - babel 1.4.0.dfsg-5 (embed)
1684 - libprelude 0.9.14-2 (embed)
1685 - heartbeat 2.1.4-7 (embed)
1686 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1687 NOTE: might've been fixed earlier
1688 - gcc-* <unknown> (embed)
1689
1690 ocamlgsl
1691 - orpie 1.5.1-7.1 (embed; bug #550058)
1692
1693 xdotool
1694 - keynav <unfixed> (embed; bug #560103)
1695
1696 bulletphysics (not packaged; http://www.bulletphysics.org/)
1697 - supertuxkart <unfixed> (embed)
1698 - blender <unfixed> (embed)
1699
1700 ghostscript
1701 - gs-gpl <removed> (old-version)
1702
1703 icedove
1704 - thunderbird <removed> (old-version)
1705
1706 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1707 - jquery <unfixed> (embed)
1708
1709 sed
1710 - ssed <unfixed> (fork)
1711
1712 phpatomlib (http://code.google.com/p/phpatomlib)
1713 - wordpress <unfixed> (embed)
1714
1715 Services_JSON (http://pear.php.net/package/Services_JSON)
1716 - wordpress <unfixed> (embed)
1717
1718 phpass (http://www.openwall.com/phpass/)
1719 - gallery2 <unfixed> (embed)
1720 - wordpress <unfixed> (embed)
1721 - typo3-src <unfixed> (modified-embed)
1722 NOTE: file refers to drupal, maybe there's a copy somewhere there
1723 NOTE: a copyright owner search didn't match anything
1724 - libauthen-passphrase-perl <unfixable> (fork)
1725 NOTE: perl implementation of phpass
1726
1727 squirrelmail
1728 - wordpress <unfixed> (embed)
1729 NOTE: class-pop3.php
1730
1731 ezSQL (http://www.woyano.com/jv/ezsql)
1732 - wordpress <unfixable> (fork)
1733 NOTE: wp-db.php
1734
1735 Diff.php (Clay Loveless' version/killersoft.com)
1736 - php-versioncontrol-svn <unfixed>
1737
1738 libm (provided by libc)
1739 - spring <unfixed> (embed)
1740 NOTE: embedded by embedded copy of streflop
1741 - aide <unfixed> (static)
1742 - busybox <unfixed> (static)
1743 - mindi-busybox <unfixed> (static)
1744 - qemu <unfixed> (static)
1745 NOTE: qemu-user-static
1746 - tuxonice-userui <unfixed> (static)
1747 - zsh <unfixed> (static)
1748 NOTE: zsh-static
1749 - tripwire <unfixed>
1750
1751 streflop
1752 - spring <unfixed> (embed)
1753
1754 minizip
1755 - spring <unfixed> (embed)
1756
1757 oscpack
1758 - spring <unfixed> (embed)
1759
1760 hpiutil2
1761 - spring <unfixed> (embed)
1762
1763 p7zip
1764 - spring <unfixed> (embed)
1765
1766 pythonqt (doesn't seem to be python-qtN, unknown source)
1767 - fontmatrix <unfixed> (embed)
1768 - elmerfem <unfixed> (embed)
1769
1770 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1771 - docvert <unfixed> (embed)
1772 - jifty <unfixed> (embed)
1773 - kdenetwork <unfixed> (embed)
1774 - mediatomb <unfixed> (embed)
1775 - plastex <unfixed> (embed)
1776 - plone3 <removed> (embed)
1777 - python-chaco <unfixed> (embed)
1778 - python-docutils <unfixed> (embed)
1779 - s5 <unfixed> (embed)
1780 - zope2.10 <unfixed> (embed)
1781 - zope2.11 <removed> (embed)
1782 - cython <not-affcted> (embed)
1783 NOTE: part of documentation, which is not installed into the binary package
1784
1785 python-docutils
1786 - zope2.10 <unfixed> (embed)
1787 - zope2.11 <removed> (embed)
1788
1789 tesseract
1790 - ocropus <unfixed> (static)
1791
1792 antlr
1793 - kdevelop <unfixed> (embed)
1794
1795 libxerces2
1796 - openjdk-6 <unfixed> (embed)
1797
1798 kfreebsd-8
1799 - kfreebsd-7 <unfixed> (old-version)
1800 - kfreebsd-6 <removed> (old-version)
1801
1802 ruby1.9.1
1803 - ruby1.9 <unfixed> (old-version)
1804 - ruby1.8 <unfixed> (old-version)
1805
1806 maildrop
1807 - courier <unfixed> (embed) [./maildrop]
1808
1809 glee
1810 - warzone2100 <not-affected> (embed)
1811
1812 phing
1813 - symfony <unfixed> (embed)
1814
1815 pake
1816 - symfony <unfixed> (embed)
1817
1818 propel
1819 - symfony <unfixed> (embed)
1820
1821 creole
1822 - symfony <unfixed> (embed)
1823
1824 hfsutils
1825 - cdrkit <unfixed> (embed; bug #570187)
1826 NOTE: embeds hfsutils code in genisoimage
1827
1828 cdrkit
1829 - grub2 <unfixed> (embed; bug #570156)
1830 NOTE: genisoimage imported into grub-mkisofs
1831
1832 kdebase-workspace
1833 - kdebase <unfixed> (old-version)
1834
1835 file
1836 - php5 <unfixable> (modified-embed)
1837 [lenny] - php5 <not-affected>
1838
1839 cdb
1840 - php5 <unfixed> (embed)
1841
1842 libmbfl (itp: #570708)
1843 - php5 <unfixed> (embed)
1844 NOTE: PHP is actually the current upstream, ITP is of that code
1845
1846 libonig
1847 - php5 5.3.2-1 (embed)
1848
1849 xmlrpc-epi
1850 - php5 <unfixed> (embed)
1851
1852 swt-gtk
1853 - eclipse <unfixed> (embed; bug #538808)
1854
1855 txt2html
1856 - wml 2.0.11ds2-1 (embed)
1857
1858 ca-certificates
1859 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1860
1861 openexr
1862 - freeimage <unfixed> (embed)
1863
1864 libmng
1865 - freeimage <unfixed> (embed)
1866
1867 openjpeg
1868 - freeimage <unfixed> (embed)
1869
1870 libjpeg6b
1871 - freeimage <unfixed> (embed)
1872
1873 libjpeg (don't know what exact version)
1874 - dcmtk <unfixed>
1875 - gdcm <unfixed>
1876 - insighttoolkit <unfixed>
1877 - openarena <unfixed> (bug #495966)
1878 - outguess <unfixed>
1879 - squeak-vm <unfixed> (embed)
1880 - tremulous <unfixed>
1881 - tuxonice-userui <unfixed> (static)
1882 - fpc <unfixed> (static)
1883 - lazarus <unfixed> (static)
1884 NOTE: inherited from fpc, see #472304
1885 - mseide-msegui <unfixed> (static)
1886 NOTE: inherited from fpc, see #472304
1887 - easymp3gain <unfixed> (static)
1888 NOTE: inherited from fpc, see #472304
1889 - winff <unfixed> (static)
1890 NOTE: inherited from fpc, see #472304
1891 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1892
1893
1894 lxr
1895 - lxr-cvs <unfixed> (embed)
1896
1897 libfile-copy-recursive-perl
1898 - r-base <unfixed> (embed; bug #577427)
1899 - r-base-core-ra <unfixed> (embed; bug #577429)
1900
1901 delimmatch
1902 - r-base <unfixed> (embed; bug #577433)
1903 - r-base-core-ra <unfixed> (embed; bug #577434)
1904
1905 libsmf (ITP: #572558)
1906 - denemo <unfixed> (embed)
1907 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1908
1909 libselinux
1910 - dpkg 1.15.6 (static)
1911
1912 xinha (ITP: #479708)
1913 - horde3 <unfixed>
1914 - serendipity <unfixed>
1915 - openacs <unfixed>
1916 - dotlrn <unfixed>
1917
1918 dvipng
1919 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1920
1921 dvipdfmx
1922 - texlive-bin <unfixed> (embed)
1923 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1924
1925 lcdf-typetools
1926 - texlive-bin 2009-1 (embed)
1927
1928 tex4ht
1929 - texlive-bin 2009-1 (embed)
1930
1931 freetype
1932 - texlive-bin 2009-1 (embed)
1933
1934 freetype2
1935 - texlive-bin 2009-1 (embed)
1936
1937 silgraphite
1938 - texlive-bin <unfixed> (embed)
1939
1940 unzip
1941 - texlive-bin 2009-1 (embed)
1942
1943 jbig2dec
1944 - ghostscript 8.71~dfsg2-1 (embed)
1945
1946 libxml2
1947 - chromium-browser 5.0.375.29~r46008-1
1948
1949 protobuf
1950 - chromium-browser 5.0.375.70~r48679-2
1951
1952 libv8
1953 - chromium-browser 5.0.375.38~r46659-1
1954
1955 nspr
1956 - chromium-browser 5.0.375.29~r46008-3
1957
1958 yasm
1959 - chromium-browser 5.0.375.29~r46008-2
1960
1961 libxslt
1962 - chromium-browser 5.0.375.29~r46008-1
1963
1964 miniupnpc (not packaged in Debian; ITP bug #444392)
1965 - warzone2100 <unfixed> (embed)
1966
1967 iniparser (not packaged in Debian; RFP bug #582657)
1968 - warzone2100 <unfixed> (modified-embed)
1969
1970 pyglet
1971 - sympy <unfixed> (embed; bug #459716)
1972
1973 mpmath
1974 - sympy <unfixed> (embed; bug #541746)
1975

  ViewVC Help
Powered by ViewVC 1.1.5