/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 15320 - (show annotations) (download)
Mon Sep 13 21:24:28 2010 UTC (2 years, 8 months ago) by jamie-guest
File size: 55605 byte(s)
clamav has embedded libbz2
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy
14 <unfixed> if the issue is not yet fixed
15 <removed> if the package was removed from the archive
16 <itp> if the package is in the process of being packaged
17 <not-affected> if the package does not use the embedded copy
18 <unknown> if the version number can not be determined
19 <unfixable> for unavoidable cases (e.g., forks that add real value)
20 sort: static (linking statically against a lib)
21 embed (embeds a copy of the library into another source package)
22 modified-embed (embeds a code copy that differs from upstream code)
23 fork (a full-blown fork of another source package)
24 old-version (an older version of essentially the same code)
25
26 The srcpkg might be some string to identify the code if there is no
27 specific source package.
28
29 Everything up to the next line is ignored.
30 ---BEGIN
31 poppler
32 - pdftohtml <unknown>
33 [sarge] - pdftohtml <unfixed>
34 [etch] - pdftohtml <unfixed>
35 NOTE: has been replaced by poppler-utils
36 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37 - texlive-base 3.0-12 (embed)
38 - texlive-bin 2007-1 (embed)
39 - koffice 1:2.0.0-1 (embed; bug #436163)
40 - libextractor 0.5.12-1 (embed)
41 NOTE: libextractor is using its own pdf decoder now
42 - ipe <unfixed> (embed)
43 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 - ruby-gnome2 <unknown> (embed)
45 - pdfedit <unfixed> (embed; bug #510794)
46 - swftools <removed> (embed; bug #551293)
47 - xpdf 3.02-9 (fork)
48
49 pdksh (no longer developed since 1999)
50 - mksh <unfixable> (fork)
51 - posh <unfixable> (fork)
52
53 ppmd
54 - libcomplearn-mod-ppmd <unfixed> (fork)
55 NOTE: discussion in #458152
56
57 libevent
58 - transmission 1.71-1 (embed; bug #529372)
59 - chromium-browser 5.0.375.29~r46008-1
60
61 lrmi
62 - read-edid 2.0.0-1 (embed; bug #495131)
63 - s3switch <unfixed> (embed)
64 - xresprobe <unfixed> (embed)
65 - zhcon <unfixed> (embed)
66
67 php-htmlpurifier
68 - mahara 1.2.5-1 (embed)
69 - knowledgeroot 0.9.9.5-5 (embed)
70 - moodle <unfixed> (embed)
71
72 peercast
73 - gnome-peercast <removed> (embed)
74 [etch] - gnome-peercast <unfixed> (embed)
75
76 silc-toolkit
77 - silc-client 1.1~beta6-1 (embed)
78
79 icclib
80 - ghostscript <unfixed> (embed)
81 - argyll <unfixed> (embed)
82
83 libusb
84 - argyll <unfixed> (embed)
85
86 dietlibc
87 - ccontrol 0.9.1+20071204-1 (static)
88 - mksh <unfixable> (static)
89 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
90
91 libmikmod
92 - sdl-mixer1.2 <unfixed> (embed)
93 TODO: report bug
94
95 libiax
96 - iaxmodem <unfixable> (embed; bug #548885)
97
98 spandsp
99 - iaxmodem <unfixable> (embed; bug #548885)
100
101 python-paramiko
102 - fabric 0.9.0-2 (embed; bug #561398)
103
104 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
105 - dpkg 1.15.6 (static)
106 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
107 - rsync <unfixed> (embed)
108 - cherokee <unfixed> (embed)
109 NOTE: somehow derived code base
110 - mono <unfixed> (embed)
111 TODO: check mozilla
112 - Linux kernels <unfixed> (embed)
113 - pvpgn 1.7.8-2 (embed)
114 - mrtg 2.12.2-1 (embed)
115 - rpm <unknown> (embed)
116 NOTE: pinged anibal since when rpm was fixed
117 - tuxcmd-modules <unfixed> (embed)
118 - zsync <unfixed>
119 - tra <unfixed>
120 - sash <unfixed>
121 - nsis <unfixed>
122 - pyfits 1:2.3.1-1
123 - mseide-msegui <unfixed>
124 NOTE: mseide
125 - mirrordir <unfixed>
126 - poco <unfixed>
127 - klibc <unfixed>
128 - emboss <unfixed>
129 - ghostscript <unfixed>
130 - freeimage <unfixed>
131 - clamav <unfixed> (fork)
132 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
133 - tuxonice-userui <unfixed> (static)
134 - plt-scheme <unfixed>
135 - perl <unfixed>
136 - paraview <unfixed>
137 - velvet 0.7.56~nozlibcopy-1
138 - gcvs <unfixed>
139 - dump <unfixed>
140 - aide <unfixed> (static)
141 - dar <unfixed> (static)
142 - avfs <unfixed>
143 - fpc <unfixed>
144 - winff <unfixed>
145 NOTE: inherited from fpc, see #472304
146 - lazarus <unfixed>
147 NOTE: inherited from fpc, see #472304
148 - erlang <unfixed> (embed)
149 - gamera 3.2.3-1 (embed)
150 - python2.4 <unfixed> (embed; bug #553403)
151 - python2.5 <unfixed> (embed; bug #553403)
152 - texlive-bin <unknown> (embed)
153
154 dulwich
155 - hg-git 0.1.0-1 (embed; bug #541996)
156
157 libvigraimpex
158 - hugin <unfixed> (embed; bug #542259)
159 - enblend-enfuse <unfixed> (embed; bug #542258)
160 - gamera 3.2.3-1 (embed)
161
162 libbz2
163 - dpkg 1.15.6 (static)
164 - amd64-libs <unfixed> (static)
165 NOTE: let's call it "static"
166 - dar <unfixed> (static)
167 - dump <unfixed> (static)
168 - unalz 0.64-1 (embed)
169 NOTE: has code, by the maint, to use the system version but links against the internal copy
170 - clamav <unfixed> (embed)
171 NOTE: libclamav/nsis/bzlib*
172
173 libyahoo2
174 - centerim <unfixed> (embed; bug #559783)
175
176 libmsn
177 - centerim <unfixed> (embed; bug #559783)
178
179 libgadu
180 - centerim <unfixed> (embed; bug #559783)
181 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
182 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
183 - kdenetwork 4:3.3.2-5 (embed)
184 NOTE: from kdenetwork: kopete
185 - ekg 1:1.8~rc0-1 (embed)
186 - kadu 0.6.0.2-3 (embed; bug #504430)
187 - gadu <itp> (embed)
188
189 xmlrpc (which package is the "origin" of this code?)
190 - drupal <unfixed> (embed)
191 - phpgroupware <unfixed> (embed)
192 - egroupware <unfixed> (embed)
193 - phpwiki <unfixed> (embed)
194 - php4 <removed> (embed)
195 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
196
197 shtool (affects build-time only)
198 - mysql-ocaml <unfixed> (embed)
199 - php4 <removed> (embed)
200 - php5 <unfixed> (embed)
201
202 xulrunner
203 - iceape <unfixed> (embed; bug #561749)
204 - iceweasel 2.0.0.19 (embed)
205 - icedove <unfixed> (embed; bug #561750)
206 - kompozer <unfixed> (embed; bug #532168)
207 - galeon 2.0.2-4 (embed)
208 - epiphany-browser 2.14.3-8 (embed)
209 - conkeror 0.9~git080629-2 (embed)
210 - kazehakase 0.4.2-1 (embed)
211
212 xli
213 - xloadimage <unfixed> (embed)
214
215 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
216 - openmotif <unfixed> (embed)
217
218 libxpm
219 - lesstif2 <unfixed> (embed; bug #575750)
220
221 kerberized apps with BSD origin
222 - krb4 <removed> (embed)
223 - krb5 <unfixed> (embed)
224 - heimdal <unfixed> (embed)
225
226 grip (which pkg is the origin?)
227 - libcdaudio <unfixed>
228 - grip <unfixed>
229 - gnome-vfs <unfixed>
230 TODO: check vfs2 as well
231
232 fudforum
233 [etch] - phpgroupware <unfixed> (embed)
234 NOTE: phpgroupware-fudforum
235 [sarge] - egroupware-fudforum <removed> (embed)
236
237 libbsd
238 - rdate 1:1.2-3 (embed)
239 - atheme-services <unfixed>
240 - libbsd-arc4random-perl <not-affected> (modified-embed)
241 NOTE: code not used, it links dynamically against libbsd instead
242 - isakmpd <unfixed>
243 - bsdgames <unfixed> (embed)
244 - bsd-mailx <unfixed> (embed)
245 - netcat-openbsd <unfixed> (embed; bug #550611)
246 - openssh <unfixed> (embed)
247 - unworkable <unfixed> (embed)
248 - mksh <unfixed> (modified-embed)
249 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
250 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
251 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
252
253 cvs
254 - gcvs <unfixed> (embed)
255 NOTE: see cvsunix/src in tarball
256
257 pcre3
258 - php4 <removed> (embed)
259 - analog 2:5.23-0woody1 (embed)
260 - goffice <unfixed> (embed)
261 NOTE: libgoffice-*
262 - vfu 4.06-4.1 (embed; bug #450754)
263 - tf5 5.0beta7-1 (embed)
264 - monotone 0.43-1 (embed)
265 NOTE: this only affects versions >= 0.37
266 - glib2.0 2.15.2-1 (embed)
267 - apache2 2.0.53-4 (embed)
268 - exim4 4.10-0.srh20.12 (embed)
269 - yacas <unfixed> (embed)
270 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
271 - gtamsanalyzer.app 0.42-5 (embed)
272 - tin 980117-1 (embed)
273 - kazehakase 0.5.2-1
274 - webkit 1.0.1-1 (embed)
275 - qt4-x11 <unfixed> (embed)
276 NOTE: embedded via webkit copy
277 - erlang <unfixed> (embed)
278 - ssed <unfixed> (embed)
279 - ircd-hybrid <unfixed> (static)
280 - emboss <unfixd>
281 - cherokee <unfixed> (embed)
282 - oftc-hybrid <unfixed> (embed)
283 - ratbox-services <unfixed> (embed)
284 - squeak-vm <unfixed> (embed)
285 - tinymux <unfixed> (embed)
286
287 tiff
288 - wxwindows2.4 2.2.1 (embed)
289 - gamera 3.2.3-1 (embed)
290 - freeimage <unfixed> (embed)
291 - libtk-img <unfixed> (embed)
292 NOTE: there are two copies, one under tiff/ other under libtiff/
293 - gdal <unfixed>
294
295 uudeview
296 - libconvert-uulib-perl <unfixed> (embed)
297 - pan <unfixed> (embed)
298
299 sqlite (not affected by security vulnerabilities so far)
300 - amarok <unfixed> (embed)
301 - monotone 0.43-1 (embed)
302 - iceweasel <unfixed> (embed)
303 - heimdal <unfixed> (embed; bug #559616)
304
305 util-linux/mount
306 - loop-aes-utils <unfixed> (embed)
307 NOTE: contains code from util-linux' mount in the mount-aes-udeb
308
309 sylpheed
310 - sylpheed-claws <unfixed> (fork)
311
312 phpsysinfo
313 - egroupware <unfixed> (embed)
314 - phpgroupware <unfixed> (embed)
315
316 phpldapadmin
317 [sarge] - egroupware <unfixed> (embed)
318 NOTE: removed from egroupware after sarge
319
320 chmlib
321 - kchmviewer <unknown> (embed)
322
323 ffmpeg (libavcodec/libavformat)
324 - mplayer 1.0~rc2-14 (embed; bug #395252)
325 - kino 1.0.0-1
326 - vlc <not-affected> (Links dynamically since initial release)
327 - smilutils 0.3.0-10
328 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
329 - motion 3.1.19-1
330 - gstreamer0.10-ffmpeg 0.10.3-2
331 - xmovie <removed> (static)
332 TODO: gimp-gap (potentially using ffmpeg code as well)
333 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
334 - audacity 1.3.7-2 (embed; bug #512278)
335 - chromium-browser <unfixed> (fork)
336
337 faad2
338 - mplayer 1.0~rc2-20 (embed)
339 - avifile <unfixed> (embed; bug #538750)
340 - ffmpeg-debian <removed> (embed)
341
342 libmad (MPEG decoding lib)
343 - xine-lib <unfixed> (embed)
344 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
345 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
346
347 libdts
348 - xine-lib <unfixed> (embed)
349
350 flac
351 - xine-lib <unfixed> (embed)
352
353 liba52
354 - a52dec <unfixed> (embed)
355 - xine-lib <unfixed> (embed)
356
357 mpeg2dec (libmpeg2)
358 - xine-lib <unfixed> (embed)
359
360 libmpeg3
361 - squeak-vm <unfixed> (embed)
362
363 libntlm
364 - wget <unfixed> (fork; bug #550436)
365 - curl <unfixed> (fork; bug #550437)
366 - cntlm <unfixed> (fork; bug #550438)
367
368 uw-imap
369 - pine <unfixed> (embed)
370 - alpine <unfixed> (embed)
371
372 imagemagick
373 - graphicsmagick <unfixed> (fork)
374
375 python-urlgrabber
376 - mercurial <unfixed> (embed; bug #531062)
377 - w3af <unfixed> (embed; bug #555372)
378 [experimental] - harvestman <unfixed> (embed; bug #555373)
379
380 beautifulsoup
381 - python-mechanize <unfixed> (embed; bug #555349)
382 - zope2.11 <removed> (embed; bug #555350)
383 - twill <unknown> (embed)
384
385 halibut
386 - nsis <unfixed> (fork)
387
388 libghttp
389 - hotway <unfixed> (embed)
390
391 libsndfile
392 - ardour 1:2.7.1-1 (embed)
393
394 glibmm2.4
395 - ardour 1:2.7.1-1 (embed)
396
397 libgnomecanvasmm2.6
398 - ardour 1:2.7.1-1 (embed)
399
400 libsigc++-2.0
401 - ardour 1:2.7.1-1 (embed)
402
403 soundtouch
404 - ardour 1:2.7.1-1 (embed)
405
406 libmms
407 - xine-lib <unfixed> (embed)
408 - mimms <unfixed> (embed)
409
410 fckeditor
411 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
412 - moin 1.8.2-2 (embed; bug #452599)
413 - karrigell <removed> (embed; bug #452598)
414 - gforge 4.6.99+svn6225-1 (embed)
415 - request-tracker3.8 <unfixed> (embed)
416 - otrs2 <unfixed> (embed)
417
418 ipatlas (not packaged in Debian)
419 - moodle <unfixed> (embed; bug #507185)
420
421 libphp-phpmailer
422 - moodle <unfixed> (embed; bug #507185)
423 - mahara <unfixed> (embed)
424 - symfony <unfixed> (embed; bug #566778)
425 [etch] - phpgroupware <unfixed> (embed)
426 NOTE: phpgroupware-felamimail is only in etch
427 - egroupware <unfixed> (embed; bug #504283)
428 - glpi <unfixed>
429
430 htmlArea (not packaged in Debian)
431 - moodle <unfixed> (embed)
432
433 giflib
434 - wine <unfixed> (embed; bug #466181)
435
436 bennu (not packaged in Debian, http://bennu.sourceforge.net)
437 - moodle <unfixed> (embed)
438
439 smarty
440 - moodle 1.8.2-2 (embed; bug #471158)
441 - gallery2 2.2.5-2 (embed; bug #471160)
442 - mahara 0.9.2-2 (embed; bug #471201)
443 - gosa 2.4beta1-1 (embed; bug #471200)
444
445 TinyMCE
446 - wordpress 2.5.1-3 (embed; bug #478257)
447 - moodle <unfixed> (embed; bug #507185)
448 - knowledgeroot <unfixed> (embed)
449 - joomla <itp> (bug #326398)
450
451 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
452 - scite <unfixed> (embed)
453 - qscintilla <unfixed> (embed)
454 - qscintilla2 <unfixed> (embed)
455 - geany <unfixed> (fork)
456 - anjuta <unfixed> (embed)
457
458 libphp-adodb
459 - moodle <unfixed> (embed; bug #507185)
460 NOTE: also AdoDB-XML Schema
461 - gallery2 <unfixed> (embed)
462 - phppgadmin <unfixed> (embed)
463 - egroupware <unfixed> (embed)
464 - phpwiki <unfixed> (embed)
465 - torrentflux 2.0beta1-2 (embed)
466 - ipplan <unfixed> (embed)
467 - typo3-src <unfixed> (embed)
468 - cacti <unknown> (embed)
469 [sarge] - cacti <unfixed> (embed)
470 NOTE: dependency exists, but internal version is used
471 - gforge 4.7~rc2-6 (embed)
472 - mahara <unfixed> (embed)
473
474 gzip
475 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
476 - klibc <unfixed> (embed)
477 NOTE: based on linux-kernel gzip code
478 - busybox <unfixed> (embed)
479 - pristine-tar <unfixed> (modified-embed)
480 NOTE: compression code only, not uncompression
481 - ncompress <unfixed> (old-version)
482
483 neon
484 - cadaver 0.22.3+debian-1 (embed; bug #188381)
485 - gnome-vfs2 <unfixed> (embed; bug #395874)
486 [etch] - litmus <unfixed> (embed; #395875)
487 - litmus <removed> (embed; #395875)
488 [sarge] - screem <unfixed> (embed)
489 - sitecopy 1:0.16.0-1 (embed; bug #395876)
490 [etch] - tla <unfixed> (embed; bug #395877)
491 [sarge] - tla <unfixed> (embed; bug #395877)
492
493 libmodplug
494 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
495
496 libvncserver
497 - vino <unfixed> (embed)
498
499 putty
500 - filezilla <unfixed> (embed)
501
502 tinyxml (not packaged in Debian; itp bug #531968)
503 - filezilla <unfixed>
504 - crystalspace <unfixed> (embed)
505 - libwfut <unfixed> (embed)
506 - rarian <unfixed> (embed)
507 - bulletml <unfixed> (embed)
508 - pokerth <unfixed> (embed)
509 - qutecom <unfixed> (embed)
510 - sofa-framework <unfixed> (embed)
511 - yate <unfixed> (embed)
512 - antigrav <unfixed> (embed)
513 - balder2d <unfixed> (embed)
514 - cal3d <unfixed> (embed)
515 - criticalmass <unfixed> (embed)
516 - ember <unfixed> (embed)
517 - epiphany <unfixed> (embed)
518 - gambit <unfixed> (embed)
519 - noiz2sa <unfixed> (embed)
520 - ogre <unfixed> (embed)
521 - opencity <unfixed> (embed)
522 - openmovieeditor <unfixed> (embed)
523 - pouetchess <unfixed> (embed)
524 - tecnoballz <unfixed> (embed)
525 - trigger-rally <unfixed> (embed)
526 - xmoto <unfixed> (embed)
527 - mapnik <unknown> (embed)
528 NOTE: uses a different XML parser by default
529 - rrootage 0.23a-6 <embed>
530 NOTE: links to libbulltetml
531 - boson <unknown> (embed)
532 NOTE: the embedded code is unused
533
534 gv
535 - evince <unfixed> (embed)
536 NOTE: ps/ tree from gv 3.5.8
537 NOTE: evince-gtk is affected (a component of evince source package)
538
539 libXbae
540 - paw <unfixed> (embed)
541
542 libgtkhtml
543 - claws-mail-extra-plugins <unfixed> (fork)
544
545 libXaw
546 - paw <unfixed> (embed)
547 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
548
549 libgd2
550 - graphviz <unfixed> (embed)
551 NOTE: lib/gd seems to be 2.0.33
552 - wml 2.0.11ds2-1 (embed)
553 - libwmf <unfixed> (embed)
554 NOTE: derived from gd 1.6.3
555 - texlive-bin 2009-1 (embed)
556
557 rar
558 - unrar-nonfree <unfixed> (embed)
559
560 unrar-free (maybe this code is derived from the original rar, too?)
561 - clamav <unfixed> (embed)
562 NOTE: seems to be disabled in default config
563
564 mplayer (DirectMedia Object loader)
565 - xine-lib <unfixed> (embed)
566 NOTE: src/libw32dll/
567 - vlc <unfixed> (embed)
568 NOTE: modules/codec/dmo/
569 - mplayer 1.0~rc2-20 (embed)
570
571 libwpd (WordPerfect converter)
572 - openoffice.org <unfixed> (embed)
573
574 fsplib (http://sourceforge.net/projects/fsp/)
575 - gftp <unfixed> (embed)
576 NOTE: lib/fsplib version 0.3
577
578 sprng
579 - tree-puzzle <unfixed> (embed)
580
581 librpcsecgss
582 - krb5 <unfixed> (embed)
583
584 jasper
585 - ghostscript 8.64~dfsg-2 (embed)
586
587 libiris
588 - psi <unfixed> (embed)
589 - kdenetwork <unfixed> (embed)
590 NOTE: kopete embeds libiris but links dynamically to libidn
591 - kdegames <unfixed> (embed)
592 NOTE: ksirk/kde4
593
594 libidn
595 - monotone 0.43-1 (embed)
596 - psi <unfixed> (embed)
597 NOTE: psi embeds libiris which embeds libidn
598 - kdegames <unfixed> (embed)
599 NOTE: kdegames/kde4 embeds libiris which embeds libidn
600
601 lua5.1
602 - monotone 0.43-1 (embed)
603 - nmap 5.00-1 (embed; bug #527997)
604 [lenny] - nmap <unfixed> (embed; bug #527997)
605 - ocropus <unfixed> (embed)
606 - enigma <unfixed> (embed)
607 NOTE: requires lua built with C++
608 - freeciv <unfixed> (embed)
609 - spring <unfixed> (embed)
610
611 libbotan
612 - monotone 0.43-1 (embed)
613
614 NetXX
615 - monotone 0.43-1 (embed)
616
617 libgc
618 - mono <unfixed> (embed)
619
620 lzma
621 - p7zip <unfixed> (embed)
622 - xz-utils <unfixed> (fork)
623
624 lzo
625 - grub2 <unfixed> (embed)
626
627 yassl
628 - mysql-dfsg-5.0 <unfixed> (embed)
629 - mysql-5.1 <unfixed> (embed)
630
631 pax code
632 - tar <unfixed> (embed)
633 - cpio <unfixed> (embed)
634
635 t1lib
636 - tetex-bin 2.0.2-1 (embed)
637 - texlive-bin <unknown> (embed)
638
639 guichan
640 - boswars <unfixed> (embed)
641 NOTE: maintainer notified us, working on it
642
643 tolua
644 - boswars <unfixed> (embed)
645 NOTE: maintainer notified us, working on it
646 NOTE: actually tolua++
647 - ocropus <unfixed> (embed)
648 NOTE: actually tolua++
649 - freeciv <unfixed> (embed)
650 NOTE: actually tolua++
651 - enigma <unfixed> (embed)
652
653 asio-dev
654 - luxrender <removed> (embed)
655
656 xine-lib
657 - vlc <unfixed> (embed)
658 NOTE: only parts included in modules/access/rtsp
659
660 netpbm
661 - tcl8.3 <unfixed> (embed)
662 - tcl8.4 <unfixed> (embed)
663 - tcl8.5 <unfixed> (embed)
664 NOTE: generic/tkImgGIF.c
665
666 tk8.5
667 - tk8.0 <removed> (old-version)
668 - tk8.3 <unfixed> (old-version)
669 - tk8.4 <unfixed> (old-version)
670 - perl-tk <unfixable> (fork)
671
672 samba
673 - mc 2:4.6.2~git20080311-1 (embed)
674 NOTE: maintainer is aware of this, currently searching a solution
675
676 plib1.8.4c2
677 - boson <unfixed> (fork)
678 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
679
680 fribidi
681 - quesoglc 0.7.2-2 (embed)
682
683 glew
684 - quesoglc <unfixed> (embed; bug #489341)
685 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
686 - trigger 0.5.2.1-2 (embed)
687 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
688 - trigger-rally 0.5.2.1-2 (embed)
689 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
690 - chromium-browser 5.0.375.70~r48679-2
691
692 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
693 - transcend <unfixed> (embed)
694 - cultivation <unfixed> (embed)
695 - passage <unfixed> (embed)
696 - gravitation <unfixed> (embed)
697
698 tar
699 - libarchive <unfixed> (embed)
700 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
701
702 cpio
703 - libarchive <unfixed> (embed)
704 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
705
706 kde4libs
707 - kdelibs <unfixable> (old-version)
708
709 webkit
710 - qt4-x11 <unfixed> (embed; bug #479851)
711 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
712 - kde4libs <unfixable> (fork)
713 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
714 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
715 - chromium-browser <unfixed> (fork)
716
717 ftgl
718 - blender 2.46+dfsg-1 (embed)
719
720 wv
721 - abiword <unfixed>
722
723 qemu
724 - kvm <removed> (embed; bug #543159)
725 - qemu-kvm <unfixed> (embed; bug #560853)
726 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
727 - xen-3 3.4.2-2 (embed; bug #560856)
728 - xen-unstable <unfixed> (embed; bug #560856)
729
730 vgabios
731 - kvm <removed> (embed; bug #489442)
732 - qemu-kvm <unfixed> (embed)
733
734 bochs
735 - kvm <removed> (embed; bug #489442)
736 - qemu-kvm <unfixed> (embed)
737
738 speex
739 - vorbis-tools <unfixed> (embed)
740 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
741 - gst-plugins-good0.10 <unfixed> (embed)
742 - xine-lib <unfixed> (embed)
743 - libfishsound <unfixed> (embed)
744 - libannodex <removed> (embed)
745 - vlc <unfixed> (embed)
746 - xmms-speex <unfixed> (embed)
747 - libsdl-sound1.2 <unfixed> (embed)
748 - sweep <unfixed> (embed)
749
750 libreadline
751 - magic <itp> (old-version)
752
753 opcode
754 - ode <unfixed> (embed)
755 NOTE: opcode is not a package in debian, it is just embedded
756 NOTE: http://www.codercorner.com/Opcode.htm
757
758 gimpact
759 - ode <unfixed> (embed)
760 NOTE: gimpact is not a package in debian, it is just embedded
761 NOTE: http://gimpact.sf.net
762
763 mochikit
764 - mahara <unfixed> (embed)
765 NOTE: they require extra patches, still unmerged upstream
766 - ntop <unfixed> (embed)
767 - coherence 0.6.2-1 (embed)
768 - paste <unfixed> (embed)
769 - turbogears <unfixed> (embed)
770 - plone3 <removed> (embed)
771 - xulrunner <unfixed> (embed)
772 - libjifty-plugin-chart-perl <unfixed> (embed)
773 - sabnzbdplus <unfixed> (embed)
774 - tgmochikit <unfixed> (embed)
775
776 prototypejs
777 - netbeans-ide 6.0.1+dfsg-2 (embed)
778 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
779 - webcit <unfixed> (embed; bug #555219)
780 - asterisk 1:1.6.2.0~rc3-1 (embed)
781 - libjson-ruby 1.1.4-1 (embed; bug #555224)
782 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
783 - horde3 <unfixed> (embed)
784 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
785 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
786 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
787 - ebug-http <unfixed> (embed; bug #555236)
788 - libaws 2.7-1 (embed; bug #555222)
789 - phpgedview <removed> (embed)
790 - poker-network 1.7.6-1 (embed; bug #555238)
791 - rails 2.1.0-6 (embed)
792 - wordpress 2.5.0-2 (embed; bug #555243)
793 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
794 TODO: search through all of the other zope packages
795 - ampache 3.4.1-2 (embed)
796 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
797 - hobix 0.5~svn20070319-4 (embed; bug #555247)
798 - zabbix 1.6.6-4 (embed; bug #555250)
799 - chora2 2.1.1+debian0-1 (embed; bug #555253)
800 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
801 - jscropperui 1.2.1-1 (embed; bug #555257)
802 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
803 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
804 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
805 - activeldap 1.2.1-1 (embed)
806 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
807 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
808 - otrs2 2.3.4-6 (embed; bug #555267)
809 - webcalendar 1.2~b1-2 (embed; bug #555269)
810 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
811 - jifty 0.90519-1 (embed; bug #555271)
812 - jquery 1.4-1 (embed; bug #555272)
813 - passenger 2.2.5debian1-1 (embed; bug #555273)
814 - plone3 <removed> (embed; bug #555275)
815 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
816 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
817 - xulrunner <unfixed> (embed)
818 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
819 - jclicmoodle <unfixed> (embed)
820 - git-cola <unfixed> (embed)
821
822 gdb
823 - insight <unfixed> (embed)
824
825 e2fsprogs
826 - ldiskfsprogs <unfixable> (fork)
827
828 quazip (not packaged in Debian)
829 - qcake <unfixed> (embed)
830 NOTE: starting with upstream version 0.6.4
831
832 exo
833 - pcmanfm <unfixed> (embed; bug #499677)
834 NOTE: slightly modified source code
835
836 java
837 - openjdk-6 <unfixed>
838 - sun-java5 <unfixed>
839 - sun-java6 <unfixed>
840
841 libphp-snoopy
842 - ampache 3.4.1-2 (embed; bug #504169)
843 - gforge 4.6.99+svn6094-2 (embed)
844 - mahara 1.0.5-2 (embed; bug #504170)
845 - pixelpost 1.7.1-5 (embed; bug #504171)
846 - mediamate 0.9.3.6-5 (embed; bug #504172)
847 - opendb <removed> (embed; bug #504173)
848 [etch] - opendb <unfixed> (embed; bug #504173)
849 - wordpress 2.5.1-9 (embed; bug #443948)
850 - moodle <unfixed> (embed; bug #507185)
851 [etch] - phpgroupware <unfixed> (embed)
852 NOTE: phpgroupware-felamimail
853 - magpierss 0.72-3 (embed; bug #431089)
854
855 jquery
856 - zekr <unfixed> (embed)
857 - wordpress <unknown> (embed)
858 - yocto-reader <unfixed> (embed)
859 - textpattern <unfixed> (embed)
860 - genshi 0.5.1-1 (embed)
861 NOTE: compressed file under examples/ dir
862 - prewikka <unfixed> (embed)
863 - libramaze-ruby <unfixed> (embed)
864 - drupal6 <unfixed> (embed)
865 - b2evolution <unfixed> (embed)
866 - wesnoth <unfixed> (embed)
867
868 tablesorter (jquery plugin, not packaged yet)
869 - wesnoth <unfixed> (embed)
870
871 kses
872 - wordpress <unfixed> (embed; bug #504242)
873 NOTE: their copy has all methods renamed to wp_<foo>
874 NOTE: kses isn't in Debian, RFP: #504240
875 - moodle <unfixed> (embed; bug #507185)
876 - egroupware <unfixed> (embed)
877
878 magpierss
879 - wordpress <unfixed> (embed; bug #504242)
880 - moodle <unfixed>
881
882 php-gettext
883 - wordpress 2.8.4-1 (embed; bug #504242)
884 - docbookwiki <unfixed> (embed)
885 - knowledgeroot 0.9.9.5-1
886 NOTE: non-free
887
888 libphp-ixr (name may change, it is the Incutio XML-RPC)
889 - wordpress <unfixed> (embed; bug #504242)
890 NOTE: libphp-ixr isn't in Debian, RFP: #504236
891 - dokuwiki <unfixed> (embed)
892 - textpattern <unfixed> (embed)
893
894 libphp-cas
895 - glpi <unfixed> (embed)
896 - moodle <unfixed> (embed; bug #505984)
897
898 scriptaculous (prototype.js is among the embeds in the following)
899 - glpi <unfixed> (embed)
900 - libaws <unfixed> (embed; bug #555222)
901 - op-panel <unfixed> (embed)
902 - symfony <unfixed> (embed)
903 NOTE: maintainer says there are extra incompatible changes required
904 - pixelpost 1.7.1-6 (embed)
905 - webhelpers <unfixed> (embed)
906 - qwik <removed> (embed; bug #555241)
907 - smokeping <unfixed> (embed)
908 - turba2 <unfixed> (embed)
909 - typo3-src 4.2.3-1 (embed)
910 - request-tracker3.6 <unfixed> (embed)
911 - request-tracker3.8 <unfixed> (embed)
912 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
913 - wordpress 2.5.0-2 (embed)
914 - libhtml-prototype-perl 1.48-3 (embed)
915
916 libmarkdown-php
917 - moodle <unfixed> (embed; bug #507185)
918 - pixelpost 1.7.1-6 (embed)
919
920 php-openid
921 - wordpress-openid 3.3.2-1 (embed)
922
923 geshi
924 - dokuwiki 0.0.20080505-3.1 (embed)
925 - pgfouine 1.0-1.1 (embed)
926 - websvn 2.1.0-1 (embed)
927
928 webcalendar
929 - gforge 4.7~rc2-6 (embed; bug #504758)
930
931 libical
932 - kdepim <unknown> (fork)
933 NOTE: fixed at some point during 4.0
934 - kdepimlibs 4.2.0-1 (fork)
935 - claws-mail-extra-plugins <unfixed> (fork)
936
937 harfbuzz
938 - qt4-x11 <unfixed> (embed)
939 - pango1.0 <unfixed> (embed)
940 - fontmatrix <unfixed> (embed)
941
942 libzip
943 - php5 <unfixable> (modified-embed)
944 - odt2txt <unfixed> (embed; bug #523808)
945
946 json.php (not packaged; should be replaced with php's built-in functions)
947 - moodle <unfixed>
948 - yui <unfixed>
949 - gallery2 <unfixed>
950 - dokuwiki <unfixed>
951 - typo3-src <unfixed>
952
953 php-fpdf
954 - tcpdf <itp> (fork)
955 - moodle <unfixed>
956 - phpwiki <unfixed>
957 - egroupware <unfixed>
958 - ldap-account-manager <unfixed> (fork)
959
960 tcpdf (itp: #495985)
961 - moodle <unfixed>
962 - phpmyadmin <unfixed>
963
964 typo3
965 - moodle <unfixed>
966
967 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
968 - moodle <unfixed>
969 - gosa <unfixed>
970
971 php-ole (itp: #487558)
972 - moodle <unfixed>
973
974 pieforms (http://www.catalyst.net.nz)
975 - mahara <unfixed>
976
977 savant2 (http://phpsavant.com)
978 - egroupware <unfixed>
979
980 rssparser (http://nwow.org)
981 - egroupware <unfixed>
982 - phpgroupware <unfixed>
983
984 lcms
985 - openjdk-6 <unfixed> (fork)
986 - gimp 2.4.0~rc2-2
987
988 libphp-phplayersmenu
989 - diogenes <unfixed>
990 - phpldapadmin <unfixed>
991
992 libphp-pclzip
993 - docvert <unfixed>
994 - moodle <unfixed>
995 - egroupware <unfixed>
996
997 libphp-simplepie
998 - dokuwiki <unfixed>
999 - wordpress <unfixed>
1000
1001 libphp-jpgraph
1002 - egroupware <unfixed>
1003
1004 php-simpletest
1005 - moodle <unfixed>
1006
1007 libpng
1008 - iceweasel <not-affected> (uses xulrunner)
1009 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1010 - iceape 1.0.13~pre080614i-0etch1 (embed)
1011 - xulrunner 1.9.0.13-1 (embed)
1012 [lenny] - xulrunner 1.9.0.11-0lenny1
1013 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1014 - gamera 3.2.3-1 (embed)
1015 - freeimage <unfixed> (embed)
1016 - tuxonice-userui <unfixed> (static)
1017
1018 irssi
1019 - silc-client <unfixed> (embed)
1020 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1021
1022 extc
1023 - mtasc <unfixed> (embed)
1024 - haxe <unfixed> (embed)
1025
1026 swflib
1027 - mtasc <unfixed> (embed)
1028 - haxe <unfixed> (embed)
1029
1030 libitext-java
1031 - bouncycastle 2.1.4-1 (embed)
1032
1033 python-ply
1034 - pyke <unfixed> (embed; bug #555363)
1035 - pywbem 0.7.0-4 (embed; bug #555364)
1036 - sepolgen <unfixed> (embed; bug #555365)
1037 - zope-textindexng3 <unknown> (embed)
1038 - iceweasel <not-affected> (uses xulrunner)
1039 - xulrunner <unknown> (embed)
1040 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1041
1042 libdumbnet (libdnet upstream)
1043 - nmap <unfixed> (fork)
1044
1045 gcc-4.4
1046 - gcc-mingw32 <unfixed> (embed)
1047
1048 camlimages
1049 - advi <unfixed> (static; bug #550441)
1050
1051 memcached
1052 - memcachedb <unfixed> (embed)
1053
1054 yajl
1055 - argyll <unfixed> (embed; bug #544223)
1056 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1057
1058 nusoap
1059 - gforge 4.8.2-1 (embed)
1060 - ampache <unfixed> (embed)
1061 - poker-network <unfixed> (embed)
1062 - moodle <unfixed> (embed)
1063 NOTE: code is not used when running under php5 and soap is enabled
1064 - phpwiki <unfixed> (embed)
1065 - gallery2 <unfixed> (embed)
1066 - typo3-src <unfixed> (embed)
1067 - phpgacl 3.3.7-7 (embed)
1068 - mantis 1.1.8+dfsg-1 (embed)
1069
1070 libept
1071 - adept <unfixed> (embed; bug #540649)
1072
1073 libvorbis
1074 - iceweasel <not-affected> (uses xulrunner)
1075 - xulrunner <unfixed> (embed; bug #540959)
1076 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1077 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1078 - iceape <unfixed> (embed)
1079 [etch] - iceape <not-affected> (introduced in 2.0)
1080 [lenny] - iceape <not-affected> (introduced in 2.0)
1081
1082 cairo
1083 - iceweasel <not-affected> (uses xulrunner)
1084 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1085
1086 liboggz
1087 - iceweasel <not-affected> (uses xulrunner)
1088 - xulrunner <unfixed> (embed; bug #540959)
1089 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1090 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1091 - iceape <unfixed> (embed)
1092 [etch] - iceape <not-affected> (introduced in 2.0)
1093 [lenny] - iceape <not-affected> (introduced in 2.0)
1094
1095 liboggplay
1096 - iceweasel <not-affected> (uses xulrunner)
1097 - xulrunner <unfixed> (embed; bug #540959)
1098 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1099 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1100 - iceape <unfixed> (embed)
1101 [etch] - iceape <not-affected> (introduced in 2.0)
1102 [lenny] - iceape <not-affected> (introduced in 2.0)
1103
1104 php-net-dnsbl
1105 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1106
1107 php-onyx-rss
1108 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1109
1110 php-text-wiki
1111 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1112
1113 php-xml-rpc
1114 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1115
1116 polarssl (does not have a shared library)
1117 - pdkim <itp> (embed; bug #543150)
1118 - xyssl <unfixed> (old-version)
1119
1120 pidgin (libpurple)
1121 - gaim <removed> (old-version)
1122 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1123
1124 icu
1125 - webkit 1.0.1-1 (embed; bug #547214)
1126 - texlive-bin <unfixed> (fork)
1127 NOTE: texlive upstream working with icu upstream to merge their changes
1128 - chromium-browser 5.0.375.29~r46008-3
1129
1130 cyrus-imapd-2.2
1131 - kolab-cyrus-imapd <unfixed> (fork)
1132 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1133
1134 python-cxx-dev
1135 - freecad 0.9.2646.3-1 (embed; bug #547936)
1136
1137 zipios++
1138 - freecad 0.9.2646.3-1 (embed; bug #547941)
1139 - enigma 0.92.3-3 (embed)
1140 NOTE: likely fixed earlier, marking etch's version as fixed
1141
1142 linux-2.6
1143 - kvm <removed> (embed; bug #549973) [./kernel/*]
1144 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1145 - kernel-source-2.6.8 <removed> (old-version)
1146 - kernel-source-2.4.27 <removed> (old-version)
1147 - kernel-source-2.4.24 <removed> (old-version)
1148 - kernel-source-2.2.25 <removed> (old-version)
1149 - kernel-source-2.2.20 <removed> (old-version)
1150
1151 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1152 - kvm <removed> (embed) [./libfdt/*]
1153 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1154
1155 qweb (not packaged)
1156 - ajaxterm <unfixed>
1157
1158 opensaml2
1159 - opensaml <removed> (old-version)
1160
1161 shibboleth-sp2
1162 - shibboleth-sp <removed> (old-version)
1163
1164 tuxonice-userui
1165 - suspend2-userui <removed> (old-version)
1166
1167 expat
1168 - w3c-libwww <removed> (embed; bug #551941)
1169 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1170 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1171 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1172 - python2.4 <unfixable> (embed; bug #553403)
1173 - python-4suite <unfixed> (embed; bug #516935)
1174 - wxwindows2.4 <removed> (embed)
1175 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1176 - wxwidgets2.8 2.8.10.1-2 (embed)
1177 - celementtree 1.0.5-8 (embed)
1178 NOTE: Maybe that was fixed even earlier
1179 - audacity 1.3.2-1 (embed)
1180 - matanza <unfixed> (embed)
1181 - tdom 0.8.3~20080525-1 (embed)
1182 - udunits 2.1.8-4 (embed)
1183 - apr-util 1.2 (embed)
1184 - ayttm <unfxed> (embed; bug #561006)
1185 - cableswig <unfixed> (embed)
1186 - cadaver <unfixed> (embed)
1187 - cmake 2.6.0-6 (embed)
1188 - coin3 <unfixed> (embed)
1189 - gdcm 2.0.14-2 (embed)
1190 - ghostscript 8.71~dfsg-2 (embed)
1191 - grmonitor <removed> (embed)
1192 - iceape <unfixed> (embed)
1193 - insighttoolkit 3.16.0-1 (embed)
1194 NOTE: insighttoolkit might've been fixed earlier
1195 - libparagui1.1 1.0.2-1 (embed)
1196 - paraview 3.6.2-1 (embed)
1197 - poco 1.3.6p1-1 (embed)
1198 - simgear <unfixed> (embed)
1199 - sitecopy 1:0.16.0-1
1200 - smart <unfixed> (embed)
1201 NOTE: smart embeds celementree, and it includes expat
1202 - swish-e <not-affected> (Linked against libxml, which is used instead)
1203 - tla 1.3.5+dfsg-15 (embed)
1204 - vtk 4.1.20030227-1 (embed)
1205 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1206 - xmlrpc-c <unfixed> (embed)
1207 - iceweasel <unfixed> (embed)
1208 - kompozer <unfixed> (embed)
1209 - vxl 1.13.0-2 (embed)
1210 - xulrunner <unfixed> (embed)
1211 - apache2 2.2 (embed)
1212 - texlive-bin <not-affected> (Embedded code not compiled in)
1213 - vnc4 <unfixed> (embed)
1214 - xotcl 1.6.6-1 (embed)
1215 - chromium-browser 5.0.375.29~r46008-3
1216
1217 xerces-c
1218 - xerces-c2 <unfixed> (old-version)
1219 - xerces27 <removed> (old-version)
1220
1221 md5 (RSA's version; not the gnu version provided by coreutils)
1222 - w3c-libwww <removed> (embed; bug #551942)
1223 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1224
1225 libparagui1.1
1226 - asc <unfixable> (fork)
1227
1228 enet
1229 - sauerbraten <unfixed> (embed; #497194)
1230
1231 eglibc
1232 - glibc <removed> (old-version)
1233 - mksh <unfixable> (static)
1234 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1235
1236 galib
1237 - gamera 3.2.3-1 (embed)
1238
1239 configobj
1240 - bzr 2.1.0~rc2-1 (embed; bug #555336)
1241 - elisa <unfixed> (embed; bug #555337)
1242 - gaupol <unfixed> (embed; bug #555338)
1243 - ipython <unfixed> (embed; bug #555339)
1244 - pida <unfixed> (embed; bug #555340)
1245 - psychopy <unfixed> (embed; bug #555341)
1246 - rest2web <unfixed> (embed; bug #555342)
1247 - auth2db <unknown> (embed)
1248 - dynagen <unknown> (embed)
1249 - iceweasel <unknown> (embed)
1250 - sabnzbdplus <unknown> (embed)
1251 - xulrunner <unknown> (embed)
1252 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1253
1254 python-clientform
1255 - bibus <unfixed> (embed; bug #555332)
1256 - zope2.10 <unfixed> (embed; bug #555333)
1257 - zope2.11 <removed> (embed; bug #555334)
1258 - python-mechanize <unknown> (embed)
1259 - twill <unknown> (embed)
1260
1261 python-mechanize
1262 - zope2.10 <unfixed> (embed; bug #555337)
1263 - zope2.11 <removed> (embed; bug #555338)
1264 - twill <unknown> (embed; bug #555339)
1265
1266 pexpect
1267 - duplicity 0.6.06-1 (embed; bug #555361)
1268 - hplip <unfixed> (embed; bug #555362)
1269 - smart <unfixed> (embed; bug #555363)
1270
1271 pyparsing
1272 - bauble <unfixed> (embed; bug #555366)
1273 - boa-constructor 0.6.1-8 (embed; bug #555367)
1274 - calibre <unfixed> (embed; bug #555368)
1275 - matplotlib <unfixed> (embed; bug #531024)
1276 - zhpy 1.7.3.1-1 (embed; bug #555370)
1277 - polybori <unknown> (embed)
1278 - python-whoosh <unknown> (embed)
1279 - twill <unknown> (embed)
1280 - zope-textindexng3 <unknown> (embed)
1281
1282 python-pysqlite2
1283 - python2.4 <unfixed> (embed; bug #553403)
1284 - python2.5 <unfixed> (embed; bug #553403)
1285
1286 celementtree
1287 - python2.5 <unfixed> (embed)
1288 - smart <unfixed> (embed)
1289
1290 elementtree
1291 - python2.5 <unfixed> (embed)
1292 - python2.6 <unfixed> (embed)
1293 - bzr 2.1.0~rc2-1 (embed; bug #555343)
1294 - gedit 2.28.2-1 (embed; bug #555344)
1295 - smart <unfixed> (embed)
1296 - solfege <unfixed> (embed; bug #555345)
1297 - w3af <unfixed> (embed; bug #555346)
1298 - python-qt4 <unknown> (embed)
1299 - sphinx <unknown> (embed)
1300 - python-nltk <itp> (embed)
1301
1302 python2.5
1303 - python2.4 <unfixed> (old-version)
1304 - jython <unfixed> (embed)
1305 NOTE: embeds many stdlib modules
1306 - python-django <unfixed> (embed; bug #555419)
1307 NOTE: embeds stdlib modules: doctest, decimal
1308 - gamera 3.2.3-1 (embed)
1309 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1310 - boa-constructor <unfixed> (embed; bug #555426)
1311 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1312 - nicotine <unfixed> (embed; bug #555427)
1313 NOTE: embeds stdlib modules: ConfigParser
1314 - museek+ <unfixed> (embed; bug #555428)
1315 NOTE: embeds stdlib modules: ConfigParser
1316 - vegastrike-data <removed> (embed)
1317 NOTE: embeds many stdlib modules
1318 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1319 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1320 - config-manager <unfixed> (embed; bug #555423)
1321 NOTE: embeds stdlib modules: optparse
1322 - jhbuild 2.28.0-1 (embed; bug #555421)
1323 NOTE: embeds stdlib modules: optparse, subprocess
1324 - smart <unfixed> (embed; bug #555432)
1325 NOTE: embeds stdlib modules: optparse
1326 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1327 NOTE: embeds stdlib modules: doctest
1328 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1329 NOTE: embeds stdlib modules: doctest
1330 - distribute <unfixed> (embed)
1331 NOTE: embeds stdlib modules: doctest
1332 - python-setuptools <unfixed> (embed; bug #555435)
1333 NOTE: embeds stdlib modules: doctest
1334 - zope.testing <unfixed> (embed; bug #555436)
1335 NOTE: embeds stdlib modules: doctest
1336 - translate-toolkit <unfixed> (embed; bug #555422)
1337 NOTE: embeds stdlib modules: textwrap, contextlib
1338 - libtpclient-py <unfixed> (embed; bug #555424)
1339 NOTE: embeds stdlib modules: subprocess
1340 - grass <unfixed> (embed; bug #555425)
1341 NOTE: embeds stdlib modules: subprocess
1342 - coherence <unfixed> (embed; bug #555429)
1343 NOTE: embeds stdlib modules: uuid
1344 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1345 NOTE: embeds stdlib modules: uuid
1346 - setroubleshoot <removed> (embed; bug #555431)
1347 NOTE: embeds stdlib modules: uuid
1348 - linkchecker <unfixed> (embed; bug #555414)
1349 NOTE: embeds msgfmt.py script
1350 - imdbpy <unfixed> (embed)
1351 NOTE: embeds msgfmt.py script
1352 - kiwi <unfixed> (embed)
1353 NOTE: embeds msgfmt.py script
1354 - moin <unfixed> (embed)
1355 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1356 - plone3 <removed> (embed)
1357 NOTE: embeds msgfmt.py script
1358 - roundup <unfixed> (embed)
1359 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1360 - rednotebook <unfixed> (embed; bug #555415)
1361 NOTE: embeds msgfmt.py script
1362 - turbogears <unfixed> (embed)
1363 NOTE: embeds msgfmt.py script
1364 - elisa <unfixed> (embed)
1365 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1366 - calibre <unfixed> (embed)
1367 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1368 - mailman 1:2.1.13-1 (embed; #555416)
1369 NOTE: embeds msgfmt.py script
1370 - python-docutils <unknown> (embed)
1371 NOTE: embeds stdlib modules: optparse, textwrap
1372 - python-imaging <unknown> (embed)
1373 NOTE: embeds stdlib modules: doctest
1374 - python-mechanize <unknown> (embed)
1375 NOTE: embeds stdlib modules: doctest
1376 - twill <unknown> (embed)
1377 NOTE: embeds stdlib modules: subprocess
1378 - zeroc-ice <unknown> (embed)
1379 NOTE: embeds stdlib modules: subprocess
1380 - wxwidgets2.8 <unknown> (embed)
1381 NOTE: embeds stdlib modules: subprocess
1382 - cycle <unknown> (embed)
1383 NOTE: embeds msgfmt.py script
1384 - deluge <unknown> (embed)
1385 NOTE: embeds msgfmt.py script
1386 - opendict <unknown> (embed)
1387 NOTE: embeds msgfmt.py script
1388 - openerp-client <unknown> (embed)
1389 NOTE: embeds msgfmt.py script
1390 - rapidsvn <unknown> (embed)
1391 NOTE: embeds msgfmt.py script
1392 - wammu <unknown> (embed)
1393 NOTE: embeds msgfmt.py script
1394 - gaphor <unknown> (embed)
1395 NOTE: embeds msgfmt.py script
1396 - pida <unknown> (embed)
1397 NOTE: embeds msgfmt.py script
1398 - python-formencode <unknown> (embed)
1399 NOTE: embeds msgfmt.py script
1400 - duplicity <unfixed> (embed)
1401 NOTE: embeds stdlib module: urlparse, tarfile
1402 - pygopherd <unfixed> (embed)
1403 NOTE: embeds stdlib module: zipfile
1404
1405 argparse
1406 - twill <unfixed> (embed; bug #555347)
1407 - ipython <unfixed> (embed; bug #555348)
1408
1409 coherence
1410 - elisa <unfixed> (embed; bug #555335)
1411
1412 simpletal
1413 - plastex <unfixed> (embed; bug #555371)
1414
1415 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1416 - postr <unfixed> (embed)
1417 - elisa <unfixed> (embed)
1418
1419 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1420 - apertium-tolk <unfixed> (embed)
1421 - ipython <unfixed> (embed)
1422 - virtaal <unfixed> (embed)
1423
1424 distribute
1425 - setuptools <removed> (old-version)
1426
1427 rails
1428 - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1429 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1430 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1431 - thin <unfixed> (embed) [./spec/rails_app/*]
1432 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1433 NOTE: be dangerous if developers are naively basing their code off of the examples
1434 NOTE: prototype.js is among the example files
1435
1436 lucene2 (prototype.js is among the embeds in the following)
1437 - lucene <unfixed> (old-version)
1438 - pylucene <unfixed> (embed)
1439 - libpdfbox-java <unfixed> (embed)
1440 - libfontbox-java <unfixed> (embed)
1441 - libjempbox-java <unfixed> (embed)
1442 - solr <unfixed> (embed)
1443
1444 unicode-data
1445 - syslinux <unfixed> (embed)
1446 - camomile <unfixed> (embed)
1447 - fribidi <unfixed> (embed)
1448 - m17n-db <unfixed> (embed)
1449 - sbcl <unfixed> (embed)
1450 - heimdal <unfixed> (embed)
1451 - icu <unfixed> (embed)
1452 - icu4j <unfixed> (embed)
1453 - krb5 <unfixed> (embed)
1454 - moodle <unfixed> (embed)
1455 - openldap <unfixed> (embed)
1456 - pike7.6 <unfixed> (embed)
1457 - samba <unfixed> (embed)
1458 - samba4 <unfixed> (embed)
1459 - cmucl <unfixed> (embed)
1460 - typo3-src <unfixed> (embed)
1461 - mauve <unfixed> (embed)
1462 - texlive-bin <unfixed> (embed)
1463 - ypsilon <unfixed> (embed)
1464 - jeuclid <unfixed> (embed)
1465 - charmap.app <unfixed> (embed)
1466 - clisp <unfixed> (embed)
1467 - gnulib <unfixed> (embed)
1468 - opensrs-client <unfixed> (embed)
1469 - saxonb <unfixed> (embed)
1470 - rails <unfixed> (embed)
1471
1472 feedparser
1473 - rawdog <unfixed> (embed; bug #383422)
1474 - miro <unfixed> (embed; bug #555351)
1475 - calibre <unfixed> (embed; bug #555352)
1476 - freevo <unfixed> (embed; bug #555353)
1477 - pida <unfixed> (embed; bug #555354)
1478 - planet-venus <unfixed> (embed; bug #555355)
1479 - plone3 <removed> (embed; bug #555356)
1480 - exaile 0.2.14+debian-1 (embed)
1481 - screenlets 0.1.2-3 (embed)
1482 NOTE: included twice
1483
1484 agg:
1485 - matplotlib <unfixed> (embed: bug #377271)
1486 - contextfree <unfixed> (embed)
1487 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1488 - exactimage <unfixed> (embed)
1489 - python-enable <unfixed> (embed)
1490 - mapnik 0.5.1-3 (embed)
1491 NOTE: links statically to agg, but shared library is not available (bug #377271)
1492
1493 vtk
1494 - paraview <unfixable> (embed; bug #495426)
1495
1496 txt2tags
1497 - rednotebook <unfixed> (embed)
1498
1499 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1500 - gajim <unfixed> (embed)
1501 - emesene <unfixed> (embed)
1502 - convirt <unfixed> (embed)
1503 - pida <unfixed> (embed)
1504 - rednotebook <unfixed> (embed)
1505
1506 horde3 (prototype.js is among the embeds in the following)
1507 - mnemo2 <unfixed> (embed)
1508 - nag2 <unfixed> (embed)
1509 - wordpress <unfixed> (embed)
1510 NOTE: Text_Diff (wp-includes/Text/Diff*)
1511
1512 cimg
1513 - gmic <unfixed> (embed)
1514
1515 mootools
1516 - kdenetwork <unfixed> (embed)
1517 - gallery <unfixed> (embed)
1518 - jspwiki <unfixed> (embed)
1519 - vdr-plugin-live <unfixed> (embed)
1520 - perl-doc-html <unfixed> (embed)
1521
1522 openldap
1523 - openldap2.3 <removed> (old-version)
1524
1525 grub2
1526 - grub <unfixed> (old-version)
1527
1528 gnupginterface
1529 - duplicity <unfixed> (embed)
1530
1531 python-dateutil
1532 - awn-extras-applets <unfixed> (embed)
1533 - matplotlib <unknown> (embed)
1534
1535 cups
1536 - cupsys <removed> (old-version)
1537
1538 yui
1539 - bcfg2 <not-affected> (present in source but not included in any binary files)
1540 - serendipity 1.5.3-1 (embed; bug #557746)
1541 - moodle 1.8.2.dfsg-5 (embed)
1542 - jifty 0.91117-1 (embed; bug #557748)
1543 - webgui 7.7.26-1 (embed)
1544 - loggerhead 1.17-1 (embed)
1545 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1546
1547 quake3 (vanilla source not packaged in debian)
1548 - openarena <unfixable> (fork)
1549
1550 quake2 (vanilla source not packaged in debian)
1551 - alien-arena <unfixable> (fork)
1552 - warsow <unfixable> (fork)
1553
1554 libtheora
1555 - iceweasel <not-affected> (uses xulrunner)
1556 - xulrunner <unfixed> (embed; bug #540959)
1557 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1558 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1559 - iceape <unfixed> (embed; bug #559276)
1560 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1561 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1562
1563 dtoa
1564 - bfilter <unfixed> (embed)
1565 - cacao <removed> (embed)
1566 - cdrdao <unfixed> (embed)
1567 - classpath <unfixed> (embed)
1568 - freej <unfixed> (embed)
1569 - iceape <unfixed> (embed)
1570 - iceweasel <unfixed> (embed)
1571 - jscoverage <unfixed> (embed)
1572 - kde4libs <unfixed> (embed)
1573 - kdelibs <unfixed> (embed)
1574 - kompozer <unfixed> (embed)
1575 - libv8 <unfixed> (embed)
1576 - mono <unfixed> (embed)
1577 - newlib <unfixed> (embed)
1578 - nspr <unfixed> (embed)
1579 - php5 <unfixed> (embed)
1580 - polyml <unfixed> (embed)
1581 - qt4-x11 <unfixed> (embed)
1582 - rhino <unfixed> (embed)
1583 NOTE: code translated to Java
1584 - ruby1.8 <unfixed> (embed)
1585 - ruby1.9 <unfixed> (embed)
1586 - ruby1.9.1 <unfixed> (embed)
1587 - sdd <unfixed> (embed)
1588 - sfind <unfixed> (embed)
1589 - star <unfixed> (embed)
1590 - tinymux <unfixed> (embed)
1591 - virtualbox-ose <unfixed> (embed)
1592 - webkit <unfixed> (embed)
1593 - xulrunner <unfixed> (embed)
1594
1595 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1596 - firegpg <unfixed> (embed)
1597 - enigmail <unfixed> (embed)
1598
1599 ptmalloc (not packaged in Debian)
1600 - crystalspace <unfixed> (embed)
1601 - qt4-x11 <unfixed> (embed)
1602
1603 svgalib
1604 - usplash <unfixed> (embed)
1605
1606 bogl
1607 - usplash <unfixed> (embed)
1608
1609 taglist
1610 - usplash <unfixed> (embed)
1611
1612 portaudio
1613 - audacity <unfixed> (embed; bug #323711)
1614
1615 nyquist
1616 - audacity <unfixed> (embed)
1617 NOTE: embeds a forked nyquist with support for a shared library
1618
1619 vamp-plugin-sdk
1620 - audacity <unfixed> (embed)
1621
1622 wordpress
1623 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1624 - wordpress-mu <removed> (fork)
1625
1626 php5
1627 - php4 <removed> (old-version)
1628
1629 classpath
1630 - libgnucrypto-java <removed> (embed; bug #559788)
1631
1632 libtool
1633 - apr <unfixed> (static; bug #489625)
1634 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1635 - arts <unfixed> (embed)
1636 - bochs 2.4.2-1 (embed; bug #560884)
1637 - camserv <unfixed> (embed)
1638 - collectd 4.8.2-1 (embed)
1639 - courier-authlib 0.58-4 (embed)
1640 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1641 - cvsnt 2.5.04.3236-1.2 (embed)
1642 - dico <not-affected> (Uses the system copy of ltdl)
1643 - freeradius 0.1+20010527-1 (embed)
1644 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1645 - ggobi 2.1.9~20091212-1 (embed)
1646 - glame 2.0.1-4 (embed)
1647 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1648 - gnash 0.8.7-2 (embed)
1649 - gnu-smalltalk <unfixed> (embed; bug #566777)
1650 - google-gadgets 0.10.5-0.3 (embed)
1651 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1652 - graphicsmagick 1.3.5-6 (embed)
1653 - graphviz 2.8-3 (embed)
1654 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1655 - guile-1.6 1.6.8-7 (embed)
1656 - hamlib 1.2.11-1 (embed)
1657 - hercules 3.06-1.2 (embed)
1658 - jags 1.0.4-3 (embed; bug #560864)
1659 - kdelibs <unfixed> (embed)
1660 - libannodex <removed> (embed)
1661 - libextractor 0.5.23+dfsg-4 (embed)
1662 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1663 - libtunepimp 0.5.3-7.3 (embed)
1664 - mp4h 1.3.1-4.1 (embed)
1665 - naim <removed> (embed)
1666 - parser-mysql <unfixed> (embed)
1667 - pinball 0.3.1-11 (embed)
1668 - redland <unfixed> (embed)
1669 - siproxd <unfixed> (embed)
1670 - ski <unfixed> (embed)
1671 - synfig 0.62.00-1 (embed)
1672 - unixodbc 2.2.4-5 (embed)
1673 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1674 - clamav 0.95+dfsg-1 (embed)
1675 - imagemagick 6:6.2.3.1-1 (embed)
1676 - hypre 2.4.0b-5 (embed)
1677 - lam <unfixed> (embed)
1678 - openmpi <unfixable> (embed; bug #559386)
1679 - parser <unfixed> (embed)
1680 - pdsh 2.18-5 (embed; bug #560892)
1681 - sbnc 1.2-8 (embed)
1682 - sdcc <unfixed> (embed)
1683 - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1684 - proftpd-dfsg <unfixed> (embed; bug #561748)
1685 - babel 1.4.0.dfsg-5 (embed)
1686 - libprelude 0.9.14-2 (embed)
1687 - heartbeat 2.1.4-7 (embed)
1688 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1689 NOTE: might've been fixed earlier
1690 - gcc-* <unknown> (embed)
1691
1692 ocamlgsl
1693 - orpie 1.5.1-7.1 (embed; bug #550058)
1694
1695 xdotool
1696 - keynav <unfixed> (embed; bug #560103)
1697
1698 bulletphysics (not packaged; http://www.bulletphysics.org/)
1699 - supertuxkart <unfixed> (embed)
1700 - blender <unfixed> (embed)
1701
1702 ghostscript
1703 - gs-gpl <removed> (old-version)
1704
1705 icedove
1706 - thunderbird <removed> (old-version)
1707
1708 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1709 - jquery <unfixed> (embed)
1710
1711 sed
1712 - ssed <unfixed> (fork)
1713
1714 phpatomlib (http://code.google.com/p/phpatomlib)
1715 - wordpress <unfixed> (embed)
1716
1717 Services_JSON (http://pear.php.net/package/Services_JSON)
1718 - wordpress <unfixed> (embed)
1719
1720 phpass (http://www.openwall.com/phpass/)
1721 - gallery2 <unfixed> (embed)
1722 - wordpress <unfixed> (embed)
1723 - typo3-src <unfixed> (modified-embed)
1724 NOTE: file refers to drupal, maybe there's a copy somewhere there
1725 NOTE: a copyright owner search didn't match anything
1726 - libauthen-passphrase-perl <unfixable> (fork)
1727 NOTE: perl implementation of phpass
1728
1729 squirrelmail
1730 - wordpress <unfixed> (embed)
1731 NOTE: class-pop3.php
1732
1733 ezSQL (http://www.woyano.com/jv/ezsql)
1734 - wordpress <unfixable> (fork)
1735 NOTE: wp-db.php
1736
1737 Diff.php (Clay Loveless' version/killersoft.com)
1738 - php-versioncontrol-svn <unfixed>
1739
1740 libm (provided by libc)
1741 - spring <unfixed> (embed)
1742 NOTE: embedded by embedded copy of streflop
1743 - aide <unfixed> (static)
1744 - busybox <unfixed> (static)
1745 - mindi-busybox <unfixed> (static)
1746 - qemu <unfixed> (static)
1747 NOTE: qemu-user-static
1748 - tuxonice-userui <unfixed> (static)
1749 - zsh <unfixed> (static)
1750 NOTE: zsh-static
1751 - tripwire <unfixed>
1752
1753 streflop
1754 - spring <unfixed> (embed)
1755
1756 minizip
1757 - spring <unfixed> (embed)
1758
1759 oscpack
1760 - spring <unfixed> (embed)
1761
1762 hpiutil2
1763 - spring <unfixed> (embed)
1764
1765 p7zip
1766 - spring <unfixed> (embed)
1767
1768 pythonqt (doesn't seem to be python-qtN, unknown source)
1769 - fontmatrix <unfixed> (embed)
1770 - elmerfem <unfixed> (embed)
1771
1772 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1773 - docvert <unfixed> (embed)
1774 - jifty <unfixed> (embed)
1775 - kdenetwork <unfixed> (embed)
1776 - mediatomb <unfixed> (embed)
1777 - plastex <unfixed> (embed)
1778 - plone3 <removed> (embed)
1779 - python-chaco <unfixed> (embed)
1780 - python-docutils <unfixed> (embed)
1781 - s5 <unfixed> (embed)
1782 - zope2.10 <unfixed> (embed)
1783 - zope2.11 <removed> (embed)
1784 - cython <not-affcted> (embed)
1785 NOTE: part of documentation, which is not installed into the binary package
1786
1787 python-docutils
1788 - zope2.10 <unfixed> (embed)
1789 - zope2.11 <removed> (embed)
1790
1791 tesseract
1792 - ocropus <unfixed> (static)
1793
1794 antlr
1795 - kdevelop <unfixed> (embed)
1796
1797 libxerces2
1798 - openjdk-6 <unfixed> (embed)
1799
1800 kfreebsd-8
1801 - kfreebsd-7 <unfixed> (old-version)
1802 - kfreebsd-6 <removed> (old-version)
1803
1804 ruby1.9.1
1805 - ruby1.9 <unfixed> (old-version)
1806 - ruby1.8 <unfixed> (old-version)
1807
1808 maildrop
1809 - courier <unfixed> (embed) [./maildrop]
1810
1811 glee
1812 - warzone2100 <not-affected> (embed)
1813
1814 phing
1815 - symfony <unfixed> (embed)
1816
1817 pake
1818 - symfony <unfixed> (embed)
1819
1820 propel
1821 - symfony <unfixed> (embed)
1822
1823 creole
1824 - symfony <unfixed> (embed)
1825
1826 hfsutils
1827 - cdrkit <unfixed> (embed; bug #570187)
1828 NOTE: embeds hfsutils code in genisoimage
1829
1830 cdrkit
1831 - grub2 <unfixed> (embed; bug #570156)
1832 NOTE: genisoimage imported into grub-mkisofs
1833
1834 kdebase-workspace
1835 - kdebase <unfixed> (old-version)
1836
1837 file
1838 - php5 <unfixable> (modified-embed)
1839 [lenny] - php5 <not-affected>
1840
1841 cdb
1842 - php5 <unfixed> (embed)
1843
1844 libmbfl (itp: #570708)
1845 - php5 <unfixed> (embed)
1846 NOTE: PHP is actually the current upstream, ITP is of that code
1847
1848 libonig
1849 - php5 5.3.2-1 (embed)
1850
1851 xmlrpc-epi
1852 - php5 <unfixed> (embed)
1853
1854 swt-gtk
1855 - eclipse <unfixed> (embed; bug #538808)
1856
1857 txt2html
1858 - wml 2.0.11ds2-1 (embed)
1859
1860 ca-certificates
1861 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1862
1863 openexr
1864 - freeimage <unfixed> (embed)
1865
1866 libmng
1867 - freeimage <unfixed> (embed)
1868
1869 openjpeg
1870 - freeimage <unfixed> (embed)
1871
1872 libjpeg6b
1873 - freeimage <unfixed> (embed)
1874
1875 libjpeg (don't know what exact version)
1876 - dcmtk <unfixed>
1877 - gdcm <unfixed>
1878 - insighttoolkit <unfixed>
1879 - openarena <unfixed> (bug #495966)
1880 - outguess <unfixed>
1881 - squeak-vm <unfixed> (embed)
1882 - tremulous <unfixed>
1883 - tuxonice-userui <unfixed> (static)
1884 - fpc <unfixed> (static)
1885 - lazarus <unfixed> (static)
1886 NOTE: inherited from fpc, see #472304
1887 - mseide-msegui <unfixed> (static)
1888 NOTE: inherited from fpc, see #472304
1889 - easymp3gain <unfixed> (static)
1890 NOTE: inherited from fpc, see #472304
1891 - winff <unfixed> (static)
1892 NOTE: inherited from fpc, see #472304
1893 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1894
1895
1896 lxr
1897 - lxr-cvs <unfixed> (embed)
1898
1899 libfile-copy-recursive-perl
1900 - r-base <unfixed> (embed; bug #577427)
1901 - r-base-core-ra <unfixed> (embed; bug #577429)
1902
1903 delimmatch
1904 - r-base <unfixed> (embed; bug #577433)
1905 - r-base-core-ra <unfixed> (embed; bug #577434)
1906
1907 libsmf (ITP: #572558)
1908 - denemo <unfixed> (embed)
1909 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1910
1911 libselinux
1912 - dpkg 1.15.6 (static)
1913
1914 xinha (ITP: #479708)
1915 - horde3 <unfixed>
1916 - serendipity <unfixed>
1917 - openacs <unfixed>
1918 - dotlrn <unfixed>
1919
1920 dvipng
1921 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1922
1923 dvipdfmx
1924 - texlive-bin <unfixed> (embed)
1925 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1926
1927 lcdf-typetools
1928 - texlive-bin 2009-1 (embed)
1929
1930 tex4ht
1931 - texlive-bin 2009-1 (embed)
1932
1933 freetype
1934 - texlive-bin 2009-1 (embed)
1935
1936 freetype2
1937 - texlive-bin 2009-1 (embed)
1938
1939 silgraphite
1940 - texlive-bin <unfixed> (embed)
1941
1942 unzip
1943 - texlive-bin 2009-1 (embed)
1944
1945 jbig2dec
1946 - ghostscript 8.71~dfsg2-1 (embed)
1947
1948 libxml2
1949 - chromium-browser 5.0.375.29~r46008-1
1950
1951 protobuf
1952 - chromium-browser 5.0.375.70~r48679-2
1953
1954 libv8
1955 - chromium-browser 5.0.375.38~r46659-1
1956
1957 nspr
1958 - chromium-browser 5.0.375.29~r46008-3
1959
1960 yasm
1961 - chromium-browser 5.0.375.29~r46008-2
1962
1963 libxslt
1964 - chromium-browser 5.0.375.29~r46008-1
1965
1966 miniupnpc (not packaged in Debian; ITP bug #444392)
1967 - warzone2100 <unfixed> (embed)
1968
1969 iniparser (not packaged in Debian; RFP bug #582657)
1970 - warzone2100 <unfixed> (modified-embed)
1971
1972 pyglet
1973 - sympy <unfixed> (embed; bug #459716)
1974
1975 mpmath
1976 - sympy <unfixed> (embed; bug #541746)
1977

  ViewVC Help
Powered by ViewVC 1.1.5