/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 15565 - (show annotations) (download)
Fri Nov 5 00:16:37 2010 UTC (2 years, 6 months ago) by silvio-guest
File size: 58400 byte(s)
libmikmod is embedded in
	black-box
	uqm

However, both use the system wide library.

1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy
14 <unfixed> if the issue is not yet fixed
15 <removed> if the package was removed from the archive
16 <itp> if the package is in the process of being packaged
17 <not-affected> if the package does not use the embedded copy
18 <unknown> if the version number can not be determined
19 <unfixable> for unavoidable cases (e.g., forks that add real value)
20 sort: static (linking statically against a lib)
21 embed (embeds a copy of the library into another source package)
22 modified-embed (embeds a code copy that differs from upstream code)
23 fork (a full-blown fork of another source package)
24 old-version (an older version of essentially the same code)
25
26 The srcpkg might be some string to identify the code if there is no
27 specific source package.
28
29 Everything up to the next line is ignored.
30 ---BEGIN
31 poppler
32 - pdftohtml <unknown>
33 [sarge] - pdftohtml <unfixed>
34 [etch] - pdftohtml <unfixed>
35 NOTE: has been replaced by poppler-utils
36 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37 - texlive-base 3.0-12 (embed)
38 - texlive-bin 2007-1 (embed)
39 - koffice 1:2.0.0-1 (embed; bug #436163)
40 - libextractor 0.5.12-1 (embed)
41 NOTE: libextractor is using its own pdf decoder now
42 - ipe <unfixed> (embed)
43 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 - ruby-gnome2 <unknown> (embed)
45 - pdfedit <unfixed> (embed; bug #510794)
46 - swftools <removed> (embed; bug #551293)
47 - xpdf 3.02-9 (fork)
48
49 pdksh (no longer developed since 1999)
50 - mksh <unfixable> (fork)
51 - posh <unfixable> (fork)
52
53 ppmd
54 - libcomplearn-mod-ppmd <unfixed> (fork)
55 NOTE: discussion in #458152
56
57 libevent
58 - transmission 1.71-1 (embed; bug #529372)
59 - chromium-browser 5.0.375.29~r46008-1
60 - dnsproxy <unknown> (embed)
61
62 lrmi
63 - read-edid 2.0.0-1 (embed; bug #495131)
64 - s3switch <unfixed> (embed)
65 - xresprobe <unfixed> (embed)
66 - zhcon <unfixed> (embed)
67
68 php-htmlpurifier
69 - mahara 1.2.5-1 (embed)
70 - knowledgeroot 0.9.9.5-5 (embed)
71 - moodle <unfixed> (embed)
72
73 peercast
74 - gnome-peercast <removed> (embed)
75 [etch] - gnome-peercast <unfixed> (embed)
76
77 silc-toolkit
78 - silc-client 1.1~beta6-1 (embed)
79
80 icclib
81 - ghostscript <unfixed> (embed)
82 - argyll <unfixed> (embed)
83
84 libusb
85 - argyll <unfixed> (embed)
86
87 dietlibc
88 - ccontrol 0.9.1+20071204-1 (static)
89 - mksh <unfixable> (static)
90 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
91
92 libmikmod
93 - pysol-sound-server <unfixed> (modified-embed)
94 - sdl-mixer1.2 <unfixed> (embed)
95 TODO: report bug
96 - uqm 0.6.2.dfsg-8 (embed)
97 NOTE: Might be fixed earlier. Lenny version recorded.
98 - black-box 1.4.6-2.2 (embed)
99 NOTE: Might be fixed earlier. Lenny version recorded.
100
101 libiax
102 - iaxmodem <unfixable> (embed; bug #548885)
103
104 spandsp
105 - iaxmodem <unfixable> (embed; bug #548885)
106
107 python-paramiko
108 - fabric 0.9.0-2 (embed; bug #561398)
109
110 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
111 - dpkg 1.15.6 (static)
112 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
113 - rsync <unfixed> (embed)
114 - cherokee <unfixed> (embed)
115 NOTE: somehow derived code base
116 - mono <unfixed> (embed)
117 TODO: check mozilla
118 - Linux kernels <unfixed> (embed)
119 - pvpgn 1.7.8-2 (embed)
120 - mrtg 2.12.2-1 (embed)
121 - rpm <unknown> (embed)
122 NOTE: pinged anibal since when rpm was fixed
123 - tuxcmd-modules <unfixed> (embed)
124 - zsync <unfixed>
125 - tra <unfixed>
126 - sash <unfixed>
127 - nsis <unfixed>
128 - pyfits 1:2.3.1-1
129 - mseide-msegui <unfixed>
130 NOTE: mseide
131 - mirrordir <unfixed>
132 - poco <unfixed>
133 - klibc <unfixed>
134 - emboss <unfixed>
135 - ghostscript <unfixed>
136 - freeimage <unfixed>
137 - clamav <unfixed> (fork)
138 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
139 - tuxonice-userui <unfixed> (static)
140 - plt-scheme <unfixed>
141 - perl <unfixed>
142 - paraview <unfixed>
143 - velvet 0.7.56~nozlibcopy-1
144 - gcvs <unfixed>
145 - dump <unfixed>
146 - aide <unfixed> (static)
147 - dar <unfixed> (static)
148 - avfs <unfixed>
149 - fpc <unfixed>
150 - winff <unfixed>
151 NOTE: inherited from fpc, see #472304
152 - lazarus <unfixed>
153 NOTE: inherited from fpc, see #472304
154 - erlang <unfixed> (embed)
155 - gamera 3.2.3-1 (embed)
156 - python2.4 <unfixed> (embed; bug #553403)
157 - python2.5 <unfixed> (embed; bug #553403)
158 - texlive-bin <unknown> (embed)
159
160 dulwich
161 - hg-git 0.1.0-1 (embed; bug #541996)
162
163 libvigraimpex
164 - hugin <unfixed> (embed; bug #542259)
165 - enblend-enfuse <unfixed> (embed; bug #542258)
166 - gamera 3.2.3-1 (embed)
167
168 libbz2
169 - dpkg 1.15.6 (static)
170 - amd64-libs <unfixed> (static)
171 NOTE: let's call it "static"
172 - dar <unfixed> (static)
173 - dump <unfixed> (static)
174 - unalz 0.64-1 (embed)
175 NOTE: has code, by the maint, to use the system version but links against the internal copy
176 - clamav <unfixed> (embed)
177 NOTE: libclamav/nsis/bzlib*
178 - pristine-tar <unfixable> (modified-embed)
179 NOTE: compression code only, not uncompression
180 - r-base-core-ra 1.2.8 (static)
181 - r-base-core 2.11.1 (static)
182 NOTE: links dynamically in squeeze, statically in lenny
183 - rpm <unfixed> (static)
184 NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
185
186 libyahoo2
187 - centerim <unfixed> (embed; bug #559783)
188
189 libmsn
190 - centerim <unfixed> (embed; bug #559783)
191
192 libgadu
193 - centerim <unfixed> (embed; bug #559783)
194 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
195 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
196 - kdenetwork 4:3.3.2-5 (embed)
197 NOTE: from kdenetwork: kopete
198 - ekg 1:1.8~rc0-1 (embed)
199 - kadu 0.6.0.2-3 (embed; bug #504430)
200 - gadu <itp> (embed)
201
202 xmlrpc (which package is the "origin" of this code?)
203 - drupal <unfixed> (embed)
204 - phpgroupware <unfixed> (embed)
205 - egroupware <unfixed> (embed)
206 - phpwiki <unfixed> (embed)
207 - php4 <removed> (embed)
208 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
209
210 shtool (affects build-time only)
211 - mysql-ocaml <unfixed> (embed)
212 - php4 <removed> (embed)
213 - php5 <unfixed> (embed)
214
215 xulrunner
216 - iceape <unfixed> (embed; bug #561749)
217 - iceweasel 2.0.0.19 (embed)
218 - icedove <unfixed> (embed; bug #561750)
219 - kompozer <unfixed> (embed; bug #532168)
220 - galeon 2.0.2-4 (embed)
221 - epiphany-browser 2.14.3-8 (embed)
222 - conkeror 0.9~git080629-2 (embed)
223 - kazehakase 0.4.2-1 (embed)
224
225 xli
226 - xloadimage <unfixed> (embed)
227
228 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
229 - openmotif <unfixed> (embed)
230
231 libxpm
232 - lesstif2 <unfixed> (embed; bug #575750)
233
234 kerberized apps with BSD origin
235 - krb4 <removed> (embed)
236 - krb5 <unfixed> (embed)
237 - heimdal <unfixed> (embed)
238
239 grip (which pkg is the origin?)
240 - libcdaudio <unfixed>
241 - grip <unfixed>
242 - gnome-vfs <unfixed>
243 TODO: check vfs2 as well
244
245 fudforum
246 [etch] - phpgroupware <unfixed> (embed)
247 NOTE: phpgroupware-fudforum
248 [sarge] - egroupware-fudforum <removed> (embed)
249
250 libbsd
251 - rdate 1:1.2-3 (embed)
252 - atheme-services <unfixed>
253 - libbsd-arc4random-perl <not-affected> (modified-embed)
254 NOTE: code not used, it links dynamically against libbsd instead
255 - isakmpd <unfixed>
256 - bsdgames <unfixed> (embed)
257 - bsd-mailx <unfixed> (embed)
258 - netcat-openbsd <unfixed> (embed; bug #550611)
259 - openssh <unfixed> (embed)
260 - unworkable <unfixed> (embed)
261 - mksh <unfixed> (modified-embed)
262 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
263 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
264 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
265
266 cvs
267 - gcvs <unfixed> (embed)
268 NOTE: see cvsunix/src in tarball
269
270 pcre3
271 - php4 <removed> (embed)
272 - analog 2:5.23-0woody1 (embed)
273 - goffice <unfixed> (embed)
274 NOTE: libgoffice-*
275 - vfu 4.06-4.1 (embed; bug #450754)
276 - tf5 5.0beta7-1 (embed)
277 - monotone 0.43-1 (embed)
278 NOTE: this only affects versions >= 0.37
279 - glib2.0 2.15.2-1 (embed)
280 - apache2 2.0.53-4 (embed)
281 - exim4 4.10-0.srh20.12 (embed)
282 - yacas <unfixed> (embed)
283 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
284 - gtamsanalyzer.app 0.42-5 (embed)
285 - tin 980117-1 (embed)
286 - kazehakase 0.5.2-1
287 - webkit 1.0.1-1 (embed)
288 - qt4-x11 <unfixed> (embed)
289 NOTE: embedded via webkit copy
290 - erlang <unfixed> (embed)
291 - ssed <unfixed> (embed)
292 - ircd-hybrid <unfixed> (static)
293 - emboss <unfixd>
294 - cherokee <unfixed> (embed)
295 - oftc-hybrid 1.6.9.dfsg-1 (embed)
296 - ratbox-services <unfixed> (embed)
297 - squeak-vm <unfixed> (embed)
298 - tinymux <unfixed> (embed)
299
300 tiff
301 - wxwindows2.4 2.2.1 (embed)
302 - gamera 3.2.3-1 (embed)
303 - freeimage <unfixed> (embed)
304 - libtk-img <unfixed> (embed)
305 NOTE: there are two copies, one under tiff/ other under libtiff/
306 - gdal <unfixed>
307
308 uudeview
309 - libconvert-uulib-perl <unfixed> (embed)
310 - pan <unfixed> (embed)
311
312 sqlite (not affected by security vulnerabilities so far)
313 - amarok <unfixed> (embed)
314 - monotone 0.43-1 (embed)
315 - iceweasel <unfixed> (embed)
316 - heimdal <unfixed> (embed; bug #559616)
317
318 util-linux/mount
319 - loop-aes-utils <unfixed> (embed)
320 NOTE: contains code from util-linux' mount in the mount-aes-udeb
321
322 sylpheed
323 - sylpheed-claws <unfixed> (fork)
324
325 phpsysinfo
326 - egroupware <unfixed> (embed)
327 - phpgroupware <unfixed> (embed)
328
329 phpldapadmin
330 [sarge] - egroupware <unfixed> (embed)
331 NOTE: removed from egroupware after sarge
332
333 chmlib
334 - kchmviewer <unknown> (embed)
335
336 ffmpeg (libavcodec/libavformat)
337 - mplayer 1.0~rc2-14 (embed; bug #395252)
338 - kino 1.0.0-1
339 - vlc <not-affected> (Links dynamically since initial release)
340 - smilutils 0.3.0-10
341 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
342 - motion 3.1.19-1
343 - gstreamer0.10-ffmpeg 0.10.3-2
344 - xmovie <removed> (static)
345 TODO: gimp-gap (potentially using ffmpeg code as well)
346 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
347 - audacity 1.3.7-2 (embed; bug #512278)
348 - chromium-browser <unfixed> (fork)
349
350 faad2
351 - mplayer 1.0~rc2-20 (embed)
352 - avifile <unfixed> (embed; bug #538750)
353 - ffmpeg-debian <removed> (embed)
354
355 libmad (MPEG decoding lib)
356 - xine-lib <unfixed> (embed)
357 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
358 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
359
360 libdts
361 - xine-lib <unfixed> (embed)
362
363 flac
364 - xine-lib <unfixed> (embed)
365
366 liba52
367 - a52dec <unfixed> (embed)
368 - xine-lib <unfixed> (embed)
369
370 mpeg2dec (libmpeg2)
371 - xine-lib <unfixed> (embed)
372
373 libmpeg3
374 - squeak-vm <unfixed> (embed)
375
376 libntlm
377 - wget <unfixed> (fork; bug #550436)
378 - curl <unfixed> (fork; bug #550437)
379 - cntlm <unfixed> (fork; bug #550438)
380
381 uw-imap
382 - pine <unfixed> (embed)
383 - alpine <unfixed> (embed)
384
385 imagemagick
386 - graphicsmagick <unfixed> (fork)
387
388 python-urlgrabber
389 - mercurial <unfixed> (embed; bug #531062)
390 - w3af <unfixed> (embed; bug #555372)
391 [experimental] - harvestman <unfixed> (embed; bug #555373)
392
393 beautifulsoup
394 - python-mechanize <unfixed> (embed; bug #555349)
395 - zope2.11 <removed> (embed; bug #555350)
396 - twill <unknown> (embed)
397
398 halibut
399 - nsis <unfixed> (fork)
400
401 libghttp
402 - hotway <unfixed> (embed)
403
404 libsndfile
405 - ardour 1:2.7.1-1 (embed)
406
407 glibmm2.4
408 - ardour 1:2.7.1-1 (embed)
409
410 libgnomecanvasmm2.6
411 - ardour 1:2.7.1-1 (embed)
412
413 libsigc++-2.0
414 - ardour 1:2.7.1-1 (embed)
415
416 soundtouch
417 - ardour 1:2.7.1-1 (embed)
418
419 libmms
420 - xine-lib <unfixed> (embed)
421 - mimms <unfixed> (embed)
422
423 fckeditor
424 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
425 - moin 1.8.2-2 (embed; bug #452599)
426 - karrigell <removed> (embed; bug #452598)
427 - gforge 4.6.99+svn6225-1 (embed)
428 - request-tracker3.8 <unfixed> (embed)
429 - otrs2 <unfixed> (embed)
430
431 ipatlas (not packaged in Debian)
432 - moodle <unfixed> (embed; bug #507185)
433
434 libphp-phpmailer
435 - moodle <unfixed> (embed; bug #507185)
436 - mahara <unfixed> (embed)
437 - symfony <unfixed> (embed; bug #566778)
438 [etch] - phpgroupware <unfixed> (embed)
439 NOTE: phpgroupware-felamimail is only in etch
440 - egroupware <unfixed> (embed; bug #504283)
441 - glpi <unfixed>
442
443 htmlArea (not packaged in Debian)
444 - moodle <unfixed> (embed)
445
446 giflib
447 - wine <unfixed> (embed; bug #466181)
448
449 bennu (not packaged in Debian, http://bennu.sourceforge.net)
450 - moodle <unfixed> (embed)
451
452 smarty
453 - moodle 1.8.2-2 (embed; bug #471158)
454 - gallery2 2.2.5-2 (embed; bug #471160)
455 - mahara 0.9.2-2 (embed; bug #471201)
456 - gosa 2.4beta1-1 (embed; bug #471200)
457
458 TinyMCE
459 - wordpress 2.5.1-3 (embed; bug #478257)
460 - moodle <unfixed> (embed; bug #507185)
461 - knowledgeroot <unfixed> (embed)
462 - joomla <itp> (bug #326398)
463 - mahara 1.2.6-1 (embed; #597752)
464
465 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
466 - scite <unfixed> (embed)
467 - qscintilla <unfixed> (embed)
468 - qscintilla2 <unfixed> (embed)
469 - geany <unfixed> (fork)
470 - anjuta <unfixed> (embed)
471
472 libphp-adodb
473 - moodle <unfixed> (embed; bug #507185)
474 NOTE: also AdoDB-XML Schema
475 - gallery2 <unfixed> (embed)
476 - phppgadmin <unfixed> (embed)
477 - egroupware <unfixed> (embed)
478 - phpwiki <unfixed> (embed)
479 - torrentflux 2.0beta1-2 (embed)
480 - ipplan <unfixed> (embed)
481 - typo3-src <unfixed> (embed)
482 - cacti <unknown> (embed)
483 [sarge] - cacti <unfixed> (embed)
484 NOTE: dependency exists, but internal version is used
485 - gforge 4.7~rc2-6 (embed)
486 - mahara <unfixed> (embed)
487
488 gzip
489 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
490 - klibc <unfixed> (embed)
491 NOTE: based on linux-kernel gzip code
492 - busybox <unfixed> (embed)
493 - pristine-tar <unfixed> (modified-embed)
494 NOTE: compression code only, not uncompression
495 - ncompress <unfixed> (old-version)
496
497 neon
498 - cadaver 0.22.3+debian-1 (embed; bug #188381)
499 - gnome-vfs2 <unfixed> (embed; bug #395874)
500 [etch] - litmus <unfixed> (embed; #395875)
501 - litmus <removed> (embed; #395875)
502 [sarge] - screem <unfixed> (embed)
503 - sitecopy 1:0.16.0-1 (embed; bug #395876)
504 [etch] - tla <unfixed> (embed; bug #395877)
505 [sarge] - tla <unfixed> (embed; bug #395877)
506
507 libmodplug
508 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
509
510 libvncserver
511 - vino <unfixed> (embed)
512
513 putty
514 - filezilla <unfixed> (embed)
515
516 tinyxml (not packaged in Debian; itp bug #531968)
517 - filezilla <unfixed>
518 - crystalspace <unfixed> (embed)
519 - libwfut <unfixed> (embed)
520 - rarian <unfixed> (embed)
521 - bulletml <unfixed> (embed)
522 - pokerth <unfixed> (embed)
523 - qutecom <unfixed> (embed)
524 - sofa-framework <unfixed> (embed)
525 - yate <unfixed> (embed)
526 - antigrav <unfixed> (embed)
527 - balder2d <unfixed> (embed)
528 - cal3d <unfixed> (embed)
529 - criticalmass <unfixed> (embed)
530 - ember <unfixed> (embed)
531 - epiphany <unfixed> (embed)
532 - gambit <unfixed> (embed)
533 - noiz2sa <unfixed> (embed)
534 - ogre <unfixed> (embed)
535 - opencity <unfixed> (embed)
536 - openmovieeditor <unfixed> (embed)
537 - pouetchess <unfixed> (embed)
538 - tecnoballz <unfixed> (embed)
539 - trigger-rally <unfixed> (embed)
540 - xmoto <unfixed> (embed)
541 - mapnik <unknown> (embed)
542 NOTE: uses a different XML parser by default
543 - rrootage 0.23a-6 <embed>
544 NOTE: links to libbulltetml
545 - boson <unknown> (embed)
546 NOTE: the embedded code is unused
547
548 gv
549 - evince <unfixed> (embed)
550 NOTE: ps/ tree from gv 3.5.8
551 NOTE: evince-gtk is affected (a component of evince source package)
552
553 libXbae
554 - paw <unfixed> (embed)
555
556 libgtkhtml
557 - claws-mail-extra-plugins <unfixed> (fork)
558
559 libXaw
560 - paw <unfixed> (embed)
561 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
562
563 libgd2
564 - graphviz <unfixed> (embed)
565 NOTE: lib/gd seems to be 2.0.33
566 - wml 2.0.11ds2-1 (embed)
567 - libwmf <unfixed> (embed)
568 NOTE: derived from gd 1.6.3
569 - plt-scheme <unfixed> (embed; bug #601525)
570 - texlive-bin 2009-1 (embed)
571
572 rar
573 - unrar-nonfree <unfixed> (embed)
574
575 unrar-free (maybe this code is derived from the original rar, too?)
576 - clamav <unfixed> (embed)
577 NOTE: seems to be disabled in default config
578
579 mplayer (DirectMedia Object loader)
580 - xine-lib <unfixed> (embed)
581 NOTE: src/libw32dll/
582 - vlc <unfixed> (embed)
583 NOTE: modules/codec/dmo/
584 - mplayer 1.0~rc2-20 (embed)
585
586 libwpd (WordPerfect converter)
587 - openoffice.org <unfixed> (embed)
588
589 fsplib (http://sourceforge.net/projects/fsp/)
590 - gftp <unfixed> (embed)
591 NOTE: lib/fsplib version 0.3
592
593 sprng
594 - tree-puzzle <unfixed> (embed)
595
596 librpcsecgss
597 - krb5 <unfixed> (embed)
598
599 jasper
600 - ghostscript 8.64~dfsg-2 (embed)
601
602 libiris
603 - psi <unfixed> (embed)
604 - kdenetwork <unfixed> (embed)
605 NOTE: kopete embeds libiris but links dynamically to libidn
606 - kdegames <unfixed> (embed)
607 NOTE: ksirk/kde4
608
609 libidn
610 - monotone 0.43-1 (embed)
611 - psi <unfixed> (embed)
612 NOTE: psi embeds libiris which embeds libidn
613 - kdegames <unfixed> (embed)
614 NOTE: kdegames/kde4 embeds libiris which embeds libidn
615
616 lua5.1
617 - monotone 0.43-1 (embed)
618 - nmap 5.00-1 (embed; bug #527997)
619 [lenny] - nmap <unfixed> (embed; bug #527997)
620 - ocropus <unfixed> (embed)
621 - enigma <unfixed> (embed)
622 NOTE: requires lua built with C++
623 - freeciv <unfixed> (embed)
624 - spring <unfixed> (embed)
625
626 libbotan
627 - monotone 0.43-1 (embed)
628
629 NetXX
630 - monotone 0.43-1 (embed)
631
632 libgc
633 - mono <unfixed> (embed)
634
635 lzma
636 - p7zip <unfixed> (embed)
637 - xz-utils <unfixed> (fork)
638 - r-base <unfixed> (embed)
639 NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
640
641 lzo
642 - grub2 <unfixed> (embed)
643
644 yassl
645 - mysql-dfsg-5.0 <unfixed> (embed)
646 - mysql-5.1 <unfixed> (embed)
647
648 pax code
649 - tar <unfixed> (embed)
650 - cpio <unfixed> (embed)
651
652 t1lib
653 - tetex-bin 2.0.2-1 (embed)
654 - texlive-bin <unknown> (embed)
655 - grace 5.1.14-2 (embed)
656 NOTE: Might be fixed even earlier
657
658 guichan
659 - boswars <unfixed> (embed)
660 NOTE: maintainer notified us, working on it
661
662 tolua
663 - boswars <unfixed> (embed)
664 NOTE: maintainer notified us, working on it
665 NOTE: actually tolua++
666 - ocropus <unfixed> (embed)
667 NOTE: actually tolua++
668 - freeciv <unfixed> (embed)
669 NOTE: actually tolua++
670 - enigma <unfixed> (embed)
671
672 asio-dev
673 - luxrender <removed> (embed)
674
675 xine-lib
676 - vlc <unfixed> (embed)
677 NOTE: only parts included in modules/access/rtsp
678
679 netpbm
680 - tcl8.3 <unfixed> (embed)
681 - tcl8.4 <unfixed> (embed)
682 - tcl8.5 <unfixed> (embed)
683 NOTE: generic/tkImgGIF.c
684
685 tk8.5
686 - tk8.0 <removed> (old-version)
687 - tk8.3 <unfixed> (old-version)
688 - tk8.4 <unfixed> (old-version)
689 - perl-tk <unfixable> (fork)
690
691 samba
692 - mc 2:4.6.2~git20080311-1 (embed)
693 NOTE: maintainer is aware of this, currently searching a solution
694
695 plib1.8.4c2
696 - boson <unfixed> (fork)
697 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
698
699 fribidi
700 - quesoglc 0.7.2-2 (embed)
701
702 glew
703 - quesoglc <unfixed> (embed; bug #489341)
704 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
705 - trigger 0.5.2.1-2 (embed)
706 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
707 - trigger-rally 0.5.2.1-2 (embed)
708 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
709 - chromium-browser 5.0.375.70~r48679-2
710
711 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
712 - transcend <unfixed> (embed)
713 - cultivation <unfixed> (embed)
714 - passage <unfixed> (embed)
715 - gravitation <unfixed> (embed)
716
717 tar
718 - libarchive <unfixed> (embed)
719 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
720
721 cpio
722 - libarchive <unfixed> (embed)
723 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
724
725 kde4libs
726 - kdelibs <unfixable> (old-version)
727
728 webkit
729 - qt4-x11 <unfixed> (embed; bug #479851)
730 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
731 - kde4libs <unfixable> (fork)
732 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
733 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
734 - chromium-browser <unfixed> (fork)
735
736 ftgl
737 - blender 2.46+dfsg-1 (embed)
738
739 wv
740 - abiword <unfixed>
741
742 qemu
743 - kvm <removed> (embed; bug #543159)
744 - qemu-kvm <unfixed> (embed; bug #560853)
745 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
746 - xen-3 3.4.2-2 (embed; bug #560856)
747 - xen-unstable <unfixed> (embed; bug #560856)
748
749 vgabios
750 - kvm <removed> (embed; bug #489442)
751 - qemu-kvm <unfixed> (embed)
752
753 bochs
754 - kvm <removed> (embed; bug #489442)
755 - qemu-kvm <unfixed> (embed)
756
757 speex
758 - vorbis-tools <unfixed> (embed)
759 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
760 - gst-plugins-good0.10 <unfixed> (embed)
761 - xine-lib <unfixed> (embed)
762 - libfishsound <unfixed> (embed)
763 - libannodex <removed> (embed)
764 - opal 3.4.2~dfsg-2 (embed)
765 - mumble 1.2.0~beta1-1 (embed)
766 - vlc <unfixed> (embed)
767 - xmms-speex <unfixed> (embed)
768 - libsdl-sound1.2 <unfixed> (embed)
769 - sweep <unfixed> (embed)
770
771 libreadline
772 - magic <itp> (old-version)
773
774 opcode
775 - ode <unfixed> (embed)
776 NOTE: opcode is not a package in debian, it is just embedded
777 NOTE: http://www.codercorner.com/Opcode.htm
778
779 gimpact
780 - ode <unfixed> (embed)
781 NOTE: gimpact is not a package in debian, it is just embedded
782 NOTE: http://gimpact.sf.net
783
784 mochikit
785 - mahara <unfixed> (embed)
786 NOTE: they require extra patches, still unmerged upstream
787 - ntop <unfixed> (embed)
788 - coherence 0.6.2-1 (embed)
789 - paste <unfixed> (embed)
790 - turbogears <unfixed> (embed)
791 - plone3 <removed> (embed)
792 - xulrunner <unfixed> (embed)
793 - libjifty-plugin-chart-perl <unfixed> (embed)
794 - sabnzbdplus <unfixed> (embed)
795 - tgmochikit <unfixed> (embed)
796
797 prototypejs
798 - netbeans-ide 6.0.1+dfsg-2 (embed)
799 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
800 - webcit <unfixed> (embed; bug #555219)
801 - asterisk 1:1.6.2.0~rc3-1 (embed)
802 - libjson-ruby 1.1.4-1 (embed; bug #555224)
803 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
804 - horde3 <unfixed> (embed)
805 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
806 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
807 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
808 - ebug-http <unfixed> (embed; bug #555236)
809 - libaws 2.7-1 (embed; bug #555222)
810 - phpgedview <removed> (embed)
811 - poker-network 1.7.6-1 (embed; bug #555238)
812 - rails 2.1.0-6 (embed)
813 - wordpress 2.5.0-2 (embed; bug #555243)
814 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
815 TODO: search through all of the other zope packages
816 - ampache 3.4.1-2 (embed)
817 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
818 - hobix 0.5~svn20070319-4 (embed; bug #555247)
819 - zabbix 1.6.6-4 (embed; bug #555250)
820 - chora2 2.1.1+debian0-1 (embed; bug #555253)
821 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
822 - jscropperui 1.2.1-1 (embed; bug #555257)
823 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
824 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
825 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
826 - activeldap 1.2.1-1 (embed)
827 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
828 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
829 - otrs2 2.3.4-6 (embed; bug #555267)
830 - webcalendar 1.2~b1-2 (embed; bug #555269)
831 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
832 - jifty 0.90519-1 (embed; bug #555271)
833 - jquery 1.4-1 (embed; bug #555272)
834 - passenger 2.2.5debian1-1 (embed; bug #555273)
835 - plone3 <removed> (embed; bug #555275)
836 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
837 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
838 - xulrunner <unfixed> (embed)
839 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
840 - jclicmoodle <unfixed> (embed)
841 - git-cola <unfixed> (embed)
842
843 gdb
844 - insight <unfixed> (embed)
845
846 e2fsprogs
847 - ldiskfsprogs <unfixable> (fork)
848
849 quazip (not packaged in Debian)
850 - qcake <unfixed> (embed)
851 NOTE: starting with upstream version 0.6.4
852
853 exo
854 - pcmanfm <unfixed> (embed; bug #499677)
855 NOTE: slightly modified source code
856
857 java
858 - openjdk-6 <unfixed>
859 - sun-java5 <unfixed>
860 - sun-java6 <unfixed>
861
862 libphp-snoopy
863 - ampache 3.4.1-2 (embed; bug #504169)
864 - gforge 4.6.99+svn6094-2 (embed)
865 - mahara 1.0.5-2 (embed; bug #504170)
866 - pixelpost 1.7.1-5 (embed; bug #504171)
867 - mediamate 0.9.3.6-5 (embed; bug #504172)
868 - opendb <removed> (embed; bug #504173)
869 [etch] - opendb <unfixed> (embed; bug #504173)
870 - wordpress 2.5.1-9 (embed; bug #443948)
871 - moodle <unfixed> (embed; bug #507185)
872 [etch] - phpgroupware <unfixed> (embed)
873 NOTE: phpgroupware-felamimail
874 - magpierss 0.72-3 (embed; bug #431089)
875
876 jquery
877 - zekr <unfixed> (embed)
878 - wordpress <unknown> (embed)
879 - yocto-reader <unfixed> (embed)
880 - textpattern <unfixed> (embed)
881 - genshi 0.5.1-1 (embed)
882 NOTE: compressed file under examples/ dir
883 - prewikka <unfixed> (embed)
884 - libramaze-ruby <unfixed> (embed)
885 - drupal6 <unfixed> (embed)
886 - b2evolution <unfixed> (embed)
887 - wesnoth <unfixed> (embed)
888
889 tablesorter (jquery plugin, not packaged yet)
890 - wesnoth <unfixed> (embed)
891
892 kses
893 - wordpress <unfixed> (embed; bug #504242)
894 NOTE: their copy has all methods renamed to wp_<foo>
895 NOTE: kses isn't in Debian, RFP: #504240
896 - moodle <unfixed> (embed; bug #507185)
897 - egroupware <unfixed> (embed)
898
899 magpierss
900 - wordpress <unfixed> (embed; bug #504242)
901 - moodle <unfixed>
902
903 php-gettext
904 - wordpress 2.8.4-1 (embed; bug #504242)
905 - docbookwiki <unfixed> (embed)
906 - knowledgeroot 0.9.9.5-1
907 NOTE: non-free
908
909 libphp-ixr (name may change, it is the Incutio XML-RPC)
910 - wordpress <unfixed> (embed; bug #504242)
911 NOTE: libphp-ixr isn't in Debian, RFP: #504236
912 - dokuwiki <unfixed> (embed)
913 - textpattern <unfixed> (embed)
914
915 libphp-cas
916 - glpi <unfixed> (embed)
917 - moodle <unfixed> (embed; bug #505984)
918
919 scriptaculous (prototype.js is among the embeds in the following)
920 - glpi <unfixed> (embed)
921 - libaws <unfixed> (embed; bug #555222)
922 - op-panel <unfixed> (embed)
923 - symfony <unfixed> (embed)
924 NOTE: maintainer says there are extra incompatible changes required
925 - pixelpost 1.7.1-6 (embed)
926 - webhelpers <unfixed> (embed)
927 - qwik <removed> (embed; bug #555241)
928 - smokeping <unfixed> (embed)
929 - turba2 <unfixed> (embed)
930 - typo3-src 4.2.3-1 (embed)
931 - request-tracker3.6 <unfixed> (embed)
932 - request-tracker3.8 <unfixed> (embed)
933 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
934 - wordpress 2.5.0-2 (embed)
935 - libhtml-prototype-perl 1.48-3 (embed)
936
937 libmarkdown-php
938 - moodle <unfixed> (embed; bug #507185)
939 - pixelpost 1.7.1-6 (embed)
940
941 php-openid
942 - wordpress-openid 3.3.2-1 (embed)
943
944 geshi
945 - dokuwiki 0.0.20080505-3.1 (embed)
946 - pgfouine 1.0-1.1 (embed)
947 - websvn 2.1.0-1 (embed)
948
949 webcalendar
950 - gforge 4.7~rc2-6 (embed; bug #504758)
951
952 libical
953 - kdepim <unknown> (fork)
954 NOTE: fixed at some point during 4.0
955 - kdepimlibs 4.2.0-1 (fork)
956 - claws-mail-extra-plugins <unfixed> (fork)
957
958 harfbuzz
959 - qt4-x11 <unfixed> (embed)
960 - pango1.0 <unfixed> (embed)
961 - fontmatrix <unfixed> (embed)
962
963 libzip
964 - php5 <unfixable> (modified-embed)
965 - odt2txt <unfixed> (embed; bug #523808)
966
967 json.php (not packaged; should be replaced with php's built-in functions)
968 - moodle <unfixed>
969 - yui <unfixed>
970 - gallery2 <unfixed>
971 - dokuwiki <unfixed>
972 - typo3-src <unfixed>
973
974 php-fpdf
975 - tcpdf <itp> (fork)
976 - moodle <unfixed>
977 - phpwiki <unfixed>
978 - egroupware <unfixed>
979 - ldap-account-manager <unfixed> (fork)
980
981 tcpdf (itp: #495985)
982 - moodle <unfixed>
983 - phpmyadmin <unfixed>
984
985 typo3
986 - moodle <unfixed>
987
988 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
989 - moodle <unfixed>
990 - gosa <unfixed>
991
992 php-ole (itp: #487558)
993 - moodle <unfixed>
994
995 pieforms (http://www.catalyst.net.nz)
996 - mahara <unfixed>
997
998 savant2 (http://phpsavant.com)
999 - egroupware <unfixed>
1000
1001 rssparser (http://nwow.org)
1002 - egroupware <unfixed>
1003 - phpgroupware <unfixed>
1004
1005 lcms
1006 - openjdk-6 <unfixed> (fork)
1007 - gimp 2.4.0~rc2-2
1008
1009 libphp-phplayersmenu
1010 - diogenes <unfixed>
1011 - phpldapadmin <unfixed>
1012
1013 libphp-pclzip
1014 - docvert <unfixed>
1015 - moodle <unfixed>
1016 - egroupware <unfixed>
1017
1018 libphp-simplepie
1019 - dokuwiki <unfixed>
1020 - wordpress <unfixed>
1021
1022 libphp-jpgraph
1023 - egroupware <unfixed>
1024
1025 php-simpletest
1026 - moodle <unfixed>
1027
1028 libpng
1029 - doxygen 1.5.6-2 (embed)
1030 NOTE: Might be fixed earlier. Lenny version recorded.
1031 - gdal 1.5.2-3 (embed)
1032 NOTE: Might be fixed earlier. Lenny version recorded.
1033 - iceweasel <not-affected> (uses xulrunner)
1034 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1035 - iceape 1.0.13~pre080614i-0etch1 (embed)
1036 - libfltk1.1 1.1.9-6 (embed)
1037 NOTE: Might be fixed earlier. Lenny version recorded.
1038 - libtk-img <unfixed> (embed)
1039 - htmldoc 1.8.27-3 (embed)
1040 NOTE: Might be fixed earlier. Lenny version recorded.
1041 - xulrunner 1.9.0.13-1 (embed)
1042 [lenny] - xulrunner 1.9.0.11-0lenny1
1043 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1044 - gamera 3.2.3-1 (embed)
1045 - freeimage <unfixed> (embed)
1046 - syslinux-common <unfixable> (embed)
1047 - tuxonice-userui <unfixed> (static)
1048 - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1049 NOTE: Might be fixed earlier. Lenny version recorded.
1050 - vice 1.22.dfsg1-0.1 (embed)
1051 NOTE: Might be fixed earlier. Lenny version recorded.
1052 - visualboyadvance 1.8.0-4 (embed)
1053 NOTE: Might be fixed earlier. Lenny version recorded.
1054
1055 irssi
1056 - silc-client <unfixed> (embed)
1057 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1058
1059 extc
1060 - mtasc <unfixed> (embed)
1061 - haxe <unfixed> (embed)
1062
1063 swflib
1064 - mtasc <unfixed> (embed)
1065 - haxe <unfixed> (embed)
1066
1067 libitext-java
1068 - bouncycastle 2.1.4-1 (embed)
1069
1070 python-ply
1071 - pyke <unfixed> (embed; bug #555363)
1072 - pywbem 0.7.0-4 (embed; bug #555364)
1073 - sepolgen <unfixed> (embed; bug #555365)
1074 - zope-textindexng3 <unknown> (embed)
1075 - iceweasel <not-affected> (uses xulrunner)
1076 - xulrunner <unknown> (embed)
1077 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1078
1079 libdumbnet (libdnet upstream)
1080 - nmap <unfixed> (fork)
1081
1082 gcc-4.4
1083 - gcc-mingw32 <unfixed> (embed)
1084
1085 camlimages
1086 - advi <unfixed> (static; bug #550441)
1087
1088 memcached
1089 - memcachedb <unfixed> (embed)
1090
1091 yajl
1092 - argyll <unfixed> (embed; bug #544223)
1093 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1094
1095 nusoap
1096 - gforge 4.8.2-1 (embed)
1097 - ampache <unfixed> (embed)
1098 - poker-network <unfixed> (embed)
1099 - moodle <unfixed> (embed)
1100 NOTE: code is not used when running under php5 and soap is enabled
1101 - phpwiki <unfixed> (embed)
1102 - gallery2 <unfixed> (embed)
1103 - typo3-src <unfixed> (embed)
1104 - phpgacl 3.3.7-7 (embed)
1105 - mantis 1.1.8+dfsg-1 (embed)
1106
1107 libept
1108 - adept <unfixed> (embed; bug #540649)
1109
1110 libvorbis
1111 - iceweasel <not-affected> (uses xulrunner)
1112 - xulrunner <unfixed> (embed; bug #540959)
1113 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1114 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1115 - iceape <unfixed> (embed)
1116 [etch] - iceape <not-affected> (introduced in 2.0)
1117 [lenny] - iceape <not-affected> (introduced in 2.0)
1118
1119 cairo
1120 - iceweasel <not-affected> (uses xulrunner)
1121 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1122
1123 liboggz
1124 - iceweasel <not-affected> (uses xulrunner)
1125 - xulrunner <unfixed> (embed; bug #540959)
1126 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1127 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1128 - iceape <unfixed> (embed)
1129 [etch] - iceape <not-affected> (introduced in 2.0)
1130 [lenny] - iceape <not-affected> (introduced in 2.0)
1131
1132 liboggplay
1133 - iceweasel <not-affected> (uses xulrunner)
1134 - xulrunner <unfixed> (embed; bug #540959)
1135 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1136 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1137 - iceape <unfixed> (embed)
1138 [etch] - iceape <not-affected> (introduced in 2.0)
1139 [lenny] - iceape <not-affected> (introduced in 2.0)
1140
1141 php-net-dnsbl
1142 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1143
1144 php-onyx-rss
1145 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1146
1147 php-text-wiki
1148 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1149
1150 php-xml-rpc
1151 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1152
1153 polarssl (does not have a shared library)
1154 - pdkim <itp> (embed; bug #543150)
1155 - xyssl <unfixed> (old-version)
1156
1157 pidgin (libpurple)
1158 - gaim <removed> (old-version)
1159 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1160
1161 icu
1162 - webkit 1.0.1-1 (embed; bug #547214)
1163 - texlive-bin <unfixed> (fork)
1164 NOTE: texlive upstream working with icu upstream to merge their changes
1165 - chromium-browser 5.0.375.29~r46008-3
1166
1167 cyrus-imapd-2.2
1168 - kolab-cyrus-imapd <unfixed> (fork)
1169 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1170
1171 python-cxx-dev
1172 - freecad 0.9.2646.3-1 (embed; bug #547936)
1173
1174 zipios++
1175 - freecad 0.9.2646.3-1 (embed; bug #547941)
1176 - enigma 0.92.3-3 (embed)
1177 NOTE: likely fixed earlier, marking etch's version as fixed
1178
1179 linux-2.6
1180 - kvm <removed> (embed; bug #549973) [./kernel/*]
1181 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1182 - kernel-source-2.6.8 <removed> (old-version)
1183 - kernel-source-2.4.27 <removed> (old-version)
1184 - kernel-source-2.4.24 <removed> (old-version)
1185 - kernel-source-2.2.25 <removed> (old-version)
1186 - kernel-source-2.2.20 <removed> (old-version)
1187
1188 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1189 - kvm <removed> (embed) [./libfdt/*]
1190 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1191
1192 qweb (not packaged)
1193 - ajaxterm <unfixed>
1194
1195 opensaml2
1196 - opensaml <removed> (old-version)
1197
1198 shibboleth-sp2
1199 - shibboleth-sp <removed> (old-version)
1200
1201 tuxonice-userui
1202 - suspend2-userui <removed> (old-version)
1203
1204 expat
1205 - w3c-libwww <removed> (embed; bug #551941)
1206 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1207 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1208 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1209 - python2.4 <unfixable> (embed; bug #553403)
1210 - python2.7 2.7-6 (embed)
1211 - mcabber 0.10.0-1 (low; bug #601053)
1212 - python-4suite <unfixed> (embed; bug #516935)
1213 - wxwindows2.4 <removed> (embed)
1214 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1215 - wxwidgets2.8 2.8.10.1-2 (embed)
1216 - albert <unfixed> (embed; bug #600974)
1217 - celementtree 1.0.5-8 (embed)
1218 NOTE: Maybe that was fixed even earlier
1219 - centerim <unfixed> (embed; bug #559783)
1220 - audacity 1.3.2-1 (embed)
1221 - matanza <unfixed> (embed)
1222 - tdom 0.8.3~20080525-1 (embed)
1223 - udunits 2.1.8-4 (embed)
1224 - apr-util 1.2 (embed)
1225 - ayttm <unfxed> (embed; bug #561006)
1226 - cableswig <unfixed> (embed)
1227 - cadaver <unfixed> (embed)
1228 - cmake 2.6.0-6 (embed)
1229 - coin3 <unfixed> (embed)
1230 - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1231 NOTE: Might be fixed earlier. Lenny version recorded.
1232 - dasher 4.7.3-1 (embed)
1233 NOTE: Might be fixed earlier. Lenny version recorded.
1234 - gdcm 2.0.14-2 (embed)
1235 - ghostscript 8.71~dfsg-2 (embed)
1236 - grmonitor <removed> (embed)
1237 - iceape <unfixed> (embed)
1238 - insighttoolkit 3.16.0-1 (embed)
1239 NOTE: insighttoolkit might've been fixed earlier
1240 - jabber 1.4.3-3.4 (embed)
1241 NOTE: Might be fixed earlier. Lenny version recorded.
1242 - libparagui1.1 1.0.2-1 (embed)
1243 - libspiff1 0.8.3-1 (embed)
1244 NOTE: Might be fixed earlier. Lenny version recorded.
1245 - mcabber <unfixed> (embed; bug #601053)
1246 - paraview 3.6.2-1 (embed)
1247 - poco 1.3.6p1-1 (embed)
1248 - scorched3d 41.3dfsg-1+b1 (embed)
1249 NOTE: Might be fixed earlier. Lenny version recorded.
1250 - simgear <unfixed> (embed)
1251 - sitecopy 1:0.16.0-1
1252 - smart <unfixed> (embed)
1253 NOTE: smart embeds celementree, and it includes expat
1254 - swish-e <not-affected> (Linked against libxml, which is used instead)
1255 - tla 1.3.5+dfsg-15 (embed)
1256 - vtk 4.1.20030227-1 (embed)
1257 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1258 - xmlrpc-c <unfixed> (embed)
1259 - iceweasel <unfixed> (embed)
1260 - kompozer <unfixed> (embed)
1261 - vxl 1.13.0-2 (embed)
1262 - xulrunner <unfixed> (embed)
1263 - xmame 0.106-2.1 (embed)
1264 NOTE: Might be fixed earlier. Lenny version recorded.
1265 - apache2 2.2 (embed)
1266 - texlive-bin <not-affected> (Embedded code not compiled in)
1267 - vnc4 <unfixed> (embed)
1268 - xotcl 1.6.6-1 (embed)
1269 - chromium-browser 5.0.375.29~r46008-3
1270
1271 xerces-c
1272 - xerces-c2 <unfixed> (old-version)
1273 - xerces27 <removed> (old-version)
1274
1275 md5 (RSA's version; not the gnu version provided by coreutils)
1276 - w3c-libwww <removed> (embed; bug #551942)
1277 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1278
1279 libparagui1.1
1280 - asc <unfixable> (fork)
1281
1282 enet
1283 - sauerbraten <unfixed> (embed; #497194)
1284
1285 eglibc
1286 - glibc <removed> (old-version)
1287 - mksh <unfixable> (static)
1288 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1289
1290 galib
1291 - gamera 3.2.3-1 (embed)
1292
1293 configobj
1294 - bzr 2.1.0~rc2-1 (embed; bug #555336)
1295 - elisa <unfixed> (embed; bug #555337)
1296 - gaupol <unfixed> (embed; bug #555338)
1297 - ipython <unfixed> (embed; bug #555339)
1298 - pida <unfixed> (embed; bug #555340)
1299 - psychopy <unfixed> (embed; bug #555341)
1300 - rest2web <unfixed> (embed; bug #555342)
1301 - auth2db <unknown> (embed)
1302 - dynagen <unknown> (embed)
1303 - iceweasel <unknown> (embed)
1304 - sabnzbdplus <unknown> (embed)
1305 - xulrunner <unknown> (embed)
1306 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1307
1308 python-clientform
1309 - bibus <unfixed> (embed; bug #555332)
1310 - zope2.10 <unfixed> (embed; bug #555333)
1311 - zope2.11 <removed> (embed; bug #555334)
1312 - python-mechanize <unknown> (embed)
1313 - twill <unknown> (embed)
1314
1315 python-mechanize
1316 - zope2.10 <unfixed> (embed; bug #555337)
1317 - zope2.11 <removed> (embed; bug #555338)
1318 - twill <unknown> (embed; bug #555339)
1319
1320 pexpect
1321 - duplicity 0.6.06-1 (embed; bug #555361)
1322 - hplip <unfixed> (embed; bug #555362)
1323 - smart <unfixed> (embed; bug #555363)
1324
1325 pyparsing
1326 - bauble <unfixed> (embed; bug #555366)
1327 - boa-constructor 0.6.1-8 (embed; bug #555367)
1328 - calibre <unfixed> (embed; bug #555368)
1329 - matplotlib <unfixed> (embed; bug #531024)
1330 - zhpy 1.7.3.1-1 (embed; bug #555370)
1331 - polybori <unknown> (embed)
1332 - python-whoosh <unknown> (embed)
1333 - twill <unknown> (embed)
1334 - zope-textindexng3 <unknown> (embed)
1335
1336 python-pysqlite2
1337 - python2.4 <unfixed> (embed; bug #553403)
1338 - python2.5 <unfixed> (embed; bug #553403)
1339
1340 celementtree
1341 - python2.5 <unfixed> (embed)
1342 - smart <unfixed> (embed)
1343
1344 elementtree
1345 - python2.5 <unfixed> (embed)
1346 - python2.6 <unfixed> (embed)
1347 - bzr 2.1.0~rc2-1 (embed; bug #555343)
1348 - gedit 2.28.2-1 (embed; bug #555344)
1349 - smart <unfixed> (embed)
1350 - solfege <unfixed> (embed; bug #555345)
1351 - w3af <unfixed> (embed; bug #555346)
1352 - python-qt4 <unknown> (embed)
1353 - sphinx <unknown> (embed)
1354 - python-nltk <itp> (embed)
1355
1356 python2.5
1357 - python2.4 <unfixed> (old-version)
1358 - jython <unfixed> (embed)
1359 NOTE: embeds many stdlib modules
1360 - python-django <unfixed> (embed; bug #555419)
1361 NOTE: embeds stdlib modules: doctest, decimal
1362 - gamera 3.2.3-1 (embed)
1363 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1364 - boa-constructor <unfixed> (embed; bug #555426)
1365 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1366 - nicotine <unfixed> (embed; bug #555427)
1367 NOTE: embeds stdlib modules: ConfigParser
1368 - museek+ <unfixed> (embed; bug #555428)
1369 NOTE: embeds stdlib modules: ConfigParser
1370 - vegastrike-data <removed> (embed)
1371 NOTE: embeds many stdlib modules
1372 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1373 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1374 - config-manager <unfixed> (embed; bug #555423)
1375 NOTE: embeds stdlib modules: optparse
1376 - jhbuild 2.28.0-1 (embed; bug #555421)
1377 NOTE: embeds stdlib modules: optparse, subprocess
1378 - smart <unfixed> (embed; bug #555432)
1379 NOTE: embeds stdlib modules: optparse
1380 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1381 NOTE: embeds stdlib modules: doctest
1382 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1383 NOTE: embeds stdlib modules: doctest
1384 - distribute <unfixed> (embed)
1385 NOTE: embeds stdlib modules: doctest
1386 - python-setuptools <unfixed> (embed; bug #555435)
1387 NOTE: embeds stdlib modules: doctest
1388 - zope.testing <unfixed> (embed; bug #555436)
1389 NOTE: embeds stdlib modules: doctest
1390 - translate-toolkit <unfixed> (embed; bug #555422)
1391 NOTE: embeds stdlib modules: textwrap, contextlib
1392 - libtpclient-py <unfixed> (embed; bug #555424)
1393 NOTE: embeds stdlib modules: subprocess
1394 - grass <unfixed> (embed; bug #555425)
1395 NOTE: embeds stdlib modules: subprocess
1396 - coherence <unfixed> (embed; bug #555429)
1397 NOTE: embeds stdlib modules: uuid
1398 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1399 NOTE: embeds stdlib modules: uuid
1400 - setroubleshoot <removed> (embed; bug #555431)
1401 NOTE: embeds stdlib modules: uuid
1402 - linkchecker <unfixed> (embed; bug #555414)
1403 NOTE: embeds msgfmt.py script
1404 - imdbpy <unfixed> (embed)
1405 NOTE: embeds msgfmt.py script
1406 - kiwi <unfixed> (embed)
1407 NOTE: embeds msgfmt.py script
1408 - moin <unfixed> (embed)
1409 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1410 - plone3 <removed> (embed)
1411 NOTE: embeds msgfmt.py script
1412 - roundup <unfixed> (embed)
1413 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1414 - rednotebook <unfixed> (embed; bug #555415)
1415 NOTE: embeds msgfmt.py script
1416 - turbogears <unfixed> (embed)
1417 NOTE: embeds msgfmt.py script
1418 - elisa <unfixed> (embed)
1419 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1420 - calibre <unfixed> (embed)
1421 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1422 - mailman 1:2.1.13-1 (embed; #555416)
1423 NOTE: embeds msgfmt.py script
1424 - python-docutils <unknown> (embed)
1425 NOTE: embeds stdlib modules: optparse, textwrap
1426 - python-imaging <unknown> (embed)
1427 NOTE: embeds stdlib modules: doctest
1428 - python-mechanize <unknown> (embed)
1429 NOTE: embeds stdlib modules: doctest
1430 - twill <unknown> (embed)
1431 NOTE: embeds stdlib modules: subprocess
1432 - zeroc-ice <unknown> (embed)
1433 NOTE: embeds stdlib modules: subprocess
1434 - wxwidgets2.8 <unknown> (embed)
1435 NOTE: embeds stdlib modules: subprocess
1436 - cycle <unknown> (embed)
1437 NOTE: embeds msgfmt.py script
1438 - deluge <unknown> (embed)
1439 NOTE: embeds msgfmt.py script
1440 - opendict <unknown> (embed)
1441 NOTE: embeds msgfmt.py script
1442 - openerp-client <unknown> (embed)
1443 NOTE: embeds msgfmt.py script
1444 - rapidsvn <unknown> (embed)
1445 NOTE: embeds msgfmt.py script
1446 - wammu <unknown> (embed)
1447 NOTE: embeds msgfmt.py script
1448 - gaphor <unknown> (embed)
1449 NOTE: embeds msgfmt.py script
1450 - pida <unknown> (embed)
1451 NOTE: embeds msgfmt.py script
1452 - python-formencode <unknown> (embed)
1453 NOTE: embeds msgfmt.py script
1454 - duplicity <unfixed> (embed)
1455 NOTE: embeds stdlib module: urlparse, tarfile
1456 - pygopherd <unfixed> (embed)
1457 NOTE: embeds stdlib module: zipfile
1458
1459 argparse
1460 - twill <unfixed> (embed; bug #555347)
1461 - ipython <unfixed> (embed; bug #555348)
1462
1463 coherence
1464 - elisa <unfixed> (embed; bug #555335)
1465
1466 simpletal
1467 - plastex <unfixed> (embed; bug #555371)
1468
1469 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1470 - postr <unfixed> (embed)
1471 - elisa <unfixed> (embed)
1472
1473 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1474 - apertium-tolk <unfixed> (embed)
1475 - ipython <unfixed> (embed)
1476 - virtaal <unfixed> (embed)
1477
1478 distribute
1479 - setuptools <removed> (old-version)
1480
1481 rails
1482 - jruby1.2 <removed> (embed) [./bench/rails/*]
1483 NOTE: jruby is in non-free, it probably includes rails too
1484 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1485 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1486 - thin <unfixed> (embed) [./spec/rails_app/*]
1487 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1488 NOTE: be dangerous if developers are naively basing their code off of the examples
1489 NOTE: prototype.js is among the example files
1490
1491 lucene2 (prototype.js is among the embeds in the following)
1492 - lucene <unfixed> (old-version)
1493 - pylucene <unfixed> (embed)
1494 - libpdfbox-java <unfixed> (embed)
1495 - libfontbox-java <unfixed> (embed)
1496 - libjempbox-java <unfixed> (embed)
1497 - solr <unfixed> (embed)
1498
1499 unicode-data
1500 - syslinux <unfixed> (embed)
1501 - camomile <unfixed> (embed)
1502 - fribidi <unfixed> (embed)
1503 - m17n-db <unfixed> (embed)
1504 - sbcl <unfixed> (embed)
1505 - heimdal <unfixed> (embed)
1506 - icu <unfixed> (embed)
1507 - icu4j <unfixed> (embed)
1508 - krb5 <unfixed> (embed)
1509 - moodle <unfixed> (embed)
1510 - openldap <unfixed> (embed)
1511 - pike7.6 <unfixed> (embed)
1512 - samba <unfixed> (embed)
1513 - samba4 <unfixed> (embed)
1514 - cmucl <unfixed> (embed)
1515 - typo3-src <unfixed> (embed)
1516 - mauve <unfixed> (embed)
1517 - texlive-bin <unfixed> (embed)
1518 - ypsilon <unfixed> (embed)
1519 - jeuclid <unfixed> (embed)
1520 - charmap.app <unfixed> (embed)
1521 - clisp <unfixed> (embed)
1522 - gnulib <unfixed> (embed)
1523 - opensrs-client <unfixed> (embed)
1524 - saxonb <unfixed> (embed)
1525 - rails <unfixed> (embed)
1526
1527 feedparser
1528 - rawdog <unfixed> (embed; bug #383422)
1529 - miro <unfixed> (embed; bug #555351)
1530 - calibre <unfixed> (embed; bug #555352)
1531 - freevo <unfixed> (embed; bug #555353)
1532 - pida <unfixed> (embed; bug #555354)
1533 - planet-venus <unfixed> (embed; bug #555355)
1534 - plone3 <removed> (embed; bug #555356)
1535 - exaile 0.2.14+debian-1 (embed)
1536 - screenlets 0.1.2-3 (embed)
1537 NOTE: included twice
1538
1539 agg:
1540 - matplotlib <unfixed> (embed: bug #377271)
1541 - contextfree <unfixed> (embed)
1542 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1543 - exactimage <unfixed> (embed)
1544 - python-enable <unfixed> (embed)
1545 - mapnik 0.5.1-3 (embed)
1546 NOTE: links statically to agg, but shared library is not available (bug #377271)
1547
1548 vtk
1549 - paraview <unfixable> (embed; bug #495426)
1550
1551 txt2tags
1552 - rednotebook <unfixed> (embed)
1553
1554 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1555 - gajim <unfixed> (embed)
1556 - emesene <unfixed> (embed)
1557 - convirt <unfixed> (embed)
1558 - pida <unfixed> (embed)
1559 - rednotebook <unfixed> (embed)
1560
1561 horde3 (prototype.js is among the embeds in the following)
1562 - mnemo2 <unfixed> (embed)
1563 - nag2 <unfixed> (embed)
1564 - wordpress <unfixed> (embed)
1565 NOTE: Text_Diff (wp-includes/Text/Diff*)
1566
1567 cimg
1568 - gmic <unfixed> (embed)
1569
1570 mootools
1571 - kdenetwork <unfixed> (embed)
1572 - gallery <unfixed> (embed)
1573 - jspwiki <unfixed> (embed)
1574 - vdr-plugin-live <unfixed> (embed)
1575 - perl-doc-html <unfixed> (embed)
1576
1577 openldap
1578 - openldap2.3 <removed> (old-version)
1579
1580 grub2
1581 - grub <unfixed> (old-version)
1582
1583 gnupginterface
1584 - duplicity <unfixed> (embed)
1585
1586 python-dateutil
1587 - awn-extras-applets <unfixed> (embed)
1588 - matplotlib <unknown> (embed)
1589
1590 cups
1591 - cupsys <removed> (old-version)
1592
1593 yui
1594 - bcfg2 <not-affected> (present in source but not included in any binary files)
1595 - serendipity 1.5.3-1 (embed; bug #557746)
1596 - moodle 1.8.2.dfsg-5 (embed)
1597 - jifty 0.91117-1 (embed; bug #557748)
1598 - webgui 7.7.26-1 (embed)
1599 - loggerhead 1.17-1 (embed)
1600 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1601
1602 quake3 (vanilla source not packaged in debian)
1603 - openarena <unfixable> (fork)
1604
1605 quake2 (vanilla source not packaged in debian)
1606 - alien-arena <unfixable> (fork)
1607 - warsow <unfixable> (fork)
1608
1609 libtheora
1610 - iceweasel <not-affected> (uses xulrunner)
1611 - xulrunner <unfixed> (embed; bug #540959)
1612 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1613 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1614 - iceape <unfixed> (embed; bug #559276)
1615 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1616 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1617
1618 dtoa
1619 - bfilter <unfixed> (embed)
1620 - cacao <removed> (embed)
1621 - cdrdao <unfixed> (embed)
1622 - classpath <unfixed> (embed)
1623 - freej <unfixed> (embed)
1624 - iceape <unfixed> (embed)
1625 - iceweasel <unfixed> (embed)
1626 - jscoverage <unfixed> (embed)
1627 - kde4libs <unfixed> (embed)
1628 - kdelibs <unfixed> (embed)
1629 - kompozer <unfixed> (embed)
1630 - libv8 <unfixed> (embed)
1631 - mono <unfixed> (embed)
1632 - newlib <unfixed> (embed)
1633 - nspr <unfixed> (embed)
1634 - php5 <unfixed> (embed)
1635 - polyml <unfixed> (embed)
1636 - qt4-x11 <unfixed> (embed)
1637 - rhino <unfixed> (embed)
1638 NOTE: code translated to Java
1639 - ruby1.8 <unfixed> (embed)
1640 - ruby1.9 <unfixed> (embed)
1641 - ruby1.9.1 <unfixed> (embed)
1642 - sdd <unfixed> (embed)
1643 - sfind <unfixed> (embed)
1644 - star <unfixed> (embed)
1645 - tinymux <unfixed> (embed)
1646 - virtualbox-ose <unfixed> (embed)
1647 - webkit <unfixed> (embed)
1648 - xulrunner <unfixed> (embed)
1649
1650 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1651 - firegpg <unfixed> (embed)
1652 - enigmail <unfixed> (embed)
1653
1654 ptmalloc (not packaged in Debian)
1655 - crystalspace <unfixed> (embed)
1656 - qt4-x11 <unfixed> (embed)
1657
1658 svgalib
1659 - usplash <unfixed> (embed)
1660
1661 bogl
1662 - usplash <unfixed> (embed)
1663
1664 taglist
1665 - usplash <unfixed> (embed)
1666
1667 portaudio
1668 - audacity <unfixed> (embed; bug #323711)
1669
1670 nyquist
1671 - audacity <unfixed> (embed)
1672 NOTE: embeds a forked nyquist with support for a shared library
1673
1674 vamp-plugin-sdk
1675 - audacity <unfixed> (embed)
1676
1677 wordpress
1678 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1679 - wordpress-mu <removed> (fork)
1680
1681 php5
1682 - php4 <removed> (old-version)
1683
1684 classpath
1685 - libgnucrypto-java <removed> (embed; bug #559788)
1686
1687 libtool
1688 - apr <unfixed> (static; bug #489625)
1689 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1690 - arts <unfixed> (embed)
1691 - bochs 2.4.2-1 (embed; bug #560884)
1692 - camserv <unfixed> (embed)
1693 - collectd 4.8.2-1 (embed)
1694 - courier-authlib 0.58-4 (embed)
1695 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1696 - cvsnt 2.5.04.3236-1.2 (embed)
1697 - dico <not-affected> (Uses the system copy of ltdl)
1698 - freeradius 0.1+20010527-1 (embed)
1699 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1700 - ggobi 2.1.9~20091212-1 (embed)
1701 - glame 2.0.1-4 (embed)
1702 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1703 - gnash 0.8.7-2 (embed)
1704 - gnu-smalltalk <unfixed> (embed; bug #566777)
1705 - google-gadgets 0.10.5-0.3 (embed)
1706 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1707 - graphicsmagick 1.3.5-6 (embed)
1708 - graphviz 2.8-3 (embed)
1709 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1710 - guile-1.6 1.6.8-7 (embed)
1711 - hamlib 1.2.11-1 (embed)
1712 - hercules 3.06-1.2 (embed)
1713 - jags 1.0.4-3 (embed; bug #560864)
1714 - kdelibs <unfixed> (embed)
1715 - libannodex <removed> (embed)
1716 - libextractor 0.5.23+dfsg-4 (embed)
1717 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1718 - libtunepimp 0.5.3-7.3 (embed)
1719 - mp4h 1.3.1-4.1 (embed)
1720 - naim <removed> (embed)
1721 - parser-mysql <unfixed> (embed)
1722 - pinball 0.3.1-11 (embed)
1723 - redland <unfixed> (embed)
1724 - siproxd <unfixed> (embed)
1725 - ski <unfixed> (embed)
1726 - synfig 0.62.00-1 (embed)
1727 - unixodbc 2.2.4-5 (embed)
1728 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1729 - clamav 0.95+dfsg-1 (embed)
1730 - imagemagick 6:6.2.3.1-1 (embed)
1731 - hypre 2.4.0b-5 (embed)
1732 - lam <unfixed> (embed)
1733 - openmpi <unfixable> (embed; bug #559386)
1734 - parser <unfixed> (embed)
1735 - pdsh 2.18-5 (embed; bug #560892)
1736 - sbnc 1.2-8 (embed)
1737 - sdcc <unfixed> (embed)
1738 - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1739 - proftpd-dfsg <unfixed> (embed; bug #561748)
1740 - babel 1.4.0.dfsg-5 (embed)
1741 - libprelude 0.9.14-2 (embed)
1742 - heartbeat 2.1.4-7 (embed)
1743 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1744 NOTE: might've been fixed earlier
1745 - gcc-* <unknown> (embed)
1746
1747 ocamlgsl
1748 - orpie 1.5.1-7.1 (embed; bug #550058)
1749
1750 xdotool
1751 - keynav <unfixed> (embed; bug #560103)
1752
1753 bulletphysics (not packaged; http://www.bulletphysics.org/)
1754 - supertuxkart <unfixed> (embed)
1755 - blender <unfixed> (embed)
1756
1757 ghostscript
1758 - gs-gpl <removed> (old-version)
1759
1760 icedove
1761 - thunderbird <removed> (old-version)
1762
1763 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1764 - jquery <unfixed> (embed)
1765
1766 sed
1767 - ssed <unfixed> (fork)
1768
1769 phpatomlib (http://code.google.com/p/phpatomlib)
1770 - wordpress <unfixed> (embed)
1771
1772 Services_JSON (http://pear.php.net/package/Services_JSON)
1773 - wordpress <unfixed> (embed)
1774
1775 phpass (http://www.openwall.com/phpass/)
1776 - gallery2 <unfixed> (embed)
1777 - wordpress <unfixed> (embed)
1778 - typo3-src <unfixed> (modified-embed)
1779 NOTE: file refers to drupal, maybe there's a copy somewhere there
1780 NOTE: a copyright owner search didn't match anything
1781 - libauthen-passphrase-perl <unfixable> (fork)
1782 NOTE: perl implementation of phpass
1783
1784 squirrelmail
1785 - wordpress <unfixed> (embed)
1786 NOTE: class-pop3.php
1787
1788 ezSQL (http://www.woyano.com/jv/ezsql)
1789 - wordpress <unfixable> (fork)
1790 NOTE: wp-db.php
1791
1792 Diff.php (Clay Loveless' version/killersoft.com)
1793 - php-versioncontrol-svn <unfixed>
1794
1795 libm (provided by libc)
1796 - spring <unfixed> (embed)
1797 NOTE: embedded by embedded copy of streflop
1798 - aide <unfixed> (static)
1799 - busybox <unfixed> (static)
1800 - mindi-busybox <unfixed> (static)
1801 - qemu <unfixed> (static)
1802 NOTE: qemu-user-static
1803 - tuxonice-userui <unfixed> (static)
1804 - zsh <unfixed> (static)
1805 NOTE: zsh-static
1806 - tripwire <unfixed>
1807
1808 streflop
1809 - spring <unfixed> (embed)
1810
1811 minizip
1812 - spring <unfixed> (embed)
1813
1814 oscpack
1815 - spring <unfixed> (embed)
1816
1817 hpiutil2
1818 - spring <unfixed> (embed)
1819
1820 p7zip
1821 - spring <unfixed> (embed)
1822
1823 pythonqt (doesn't seem to be python-qtN, unknown source)
1824 - fontmatrix <unfixed> (embed)
1825 - elmerfem <unfixed> (embed)
1826
1827 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1828 - docvert <unfixed> (embed)
1829 - jifty <unfixed> (embed)
1830 - kdenetwork <unfixed> (embed)
1831 - mediatomb <unfixed> (embed)
1832 - plastex <unfixed> (embed)
1833 - plone3 <removed> (embed)
1834 - python-chaco <unfixed> (embed)
1835 - python-docutils <unfixed> (embed)
1836 - s5 <unfixed> (embed)
1837 - zope2.10 <unfixed> (embed)
1838 - zope2.11 <removed> (embed)
1839 - cython <not-affcted> (embed)
1840 NOTE: part of documentation, which is not installed into the binary package
1841
1842 python-docutils
1843 - zope2.10 <unfixed> (embed)
1844 - zope2.11 <removed> (embed)
1845
1846 tesseract
1847 - ocropus <unfixed> (static)
1848
1849 antlr
1850 - kdevelop <unfixed> (embed)
1851
1852 libxerces2
1853 - openjdk-6 <unfixed> (embed)
1854
1855 kfreebsd-8
1856 - kfreebsd-7 <unfixed> (old-version)
1857 - kfreebsd-6 <removed> (old-version)
1858
1859 ruby1.9.1
1860 - ruby1.9 <unfixed> (old-version)
1861 - ruby1.8 <unfixed> (old-version)
1862
1863 maildrop
1864 - courier <unfixed> (embed) [./maildrop]
1865
1866 glee
1867 - warzone2100 <not-affected> (embed)
1868
1869 phing
1870 - symfony <unfixed> (embed)
1871
1872 pake
1873 - symfony <unfixed> (embed)
1874
1875 propel
1876 - symfony <unfixed> (embed)
1877
1878 creole
1879 - symfony <unfixed> (embed)
1880
1881 hfsutils
1882 - cdrkit <unfixed> (embed; bug #570187)
1883 NOTE: embeds hfsutils code in genisoimage
1884
1885 cdrkit
1886 - grub2 <unfixed> (embed; bug #570156)
1887 NOTE: genisoimage imported into grub-mkisofs
1888
1889 kdebase-workspace
1890 - kdebase <unfixed> (old-version)
1891
1892 file
1893 - php5 <unfixable> (modified-embed)
1894 [lenny] - php5 <not-affected>
1895
1896 cdb
1897 - php5 <unfixed> (embed)
1898
1899 libmbfl (itp: #570708)
1900 - php5 <unfixed> (embed)
1901 NOTE: PHP is actually the current upstream, ITP is of that code
1902
1903 libonig
1904 - php5 5.3.2-1 (embed)
1905
1906 xmlrpc-epi
1907 - php5 <unfixed> (embed)
1908
1909 swt-gtk
1910 - eclipse <unfixed> (embed; bug #538808)
1911
1912 txt2html
1913 - wml 2.0.11ds2-1 (embed)
1914
1915 ca-certificates
1916 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1917
1918 openexr
1919 - freeimage <unfixed> (embed)
1920
1921 libmng
1922 - freeimage <unfixed> (embed)
1923
1924 openjpeg
1925 - freeimage <unfixed> (embed)
1926
1927 libjpeg6b
1928 - freeimage <unfixed> (embed)
1929
1930 libjpeg (don't know what exact version)
1931 - dcmtk <unfixed>
1932 - gdcm <unfixed>
1933 - insighttoolkit <unfixed>
1934 - openarena 0.8.5-5+exp1 (bug #495966)
1935 - outguess <unfixed>
1936 - squeak-vm <unfixed> (embed)
1937 - tremulous <unfixed>
1938 - tuxonice-userui <unfixed> (static)
1939 - fpc <unfixed> (static)
1940 - lazarus <unfixed> (static)
1941 NOTE: inherited from fpc, see #472304
1942 - mseide-msegui <unfixed> (static)
1943 NOTE: inherited from fpc, see #472304
1944 - easymp3gain <unfixed> (static)
1945 NOTE: inherited from fpc, see #472304
1946 - winff <unfixed> (static)
1947 NOTE: inherited from fpc, see #472304
1948 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1949
1950
1951 lxr
1952 - lxr-cvs <unfixed> (embed)
1953
1954 libfile-copy-recursive-perl
1955 - r-base <unfixed> (embed; bug #577427)
1956 - r-base-core-ra <unfixed> (embed; bug #577429)
1957
1958 delimmatch
1959 - r-base <unfixed> (embed; bug #577433)
1960 - r-base-core-ra <unfixed> (embed; bug #577434)
1961
1962 libsmf (ITP: #572558)
1963 - denemo <unfixed> (embed)
1964 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1965
1966 libselinux
1967 - dpkg 1.15.6 (static)
1968
1969 xinha (ITP: #479708)
1970 - horde3 <unfixed>
1971 - serendipity <unfixed>
1972 - openacs <unfixed>
1973 - dotlrn <unfixed>
1974
1975 dvipng
1976 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1977
1978 dvipdfmx
1979 - texlive-bin <unfixed> (embed)
1980 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1981
1982 lcdf-typetools
1983 - texlive-bin 2009-1 (embed)
1984
1985 tex4ht
1986 - texlive-bin 2009-1 (embed)
1987
1988 freetype
1989 - texlive-bin 2009-1 (embed)
1990
1991 freetype2
1992 - texlive-bin 2009-1 (embed)
1993
1994 silgraphite
1995 - texlive-bin <unfixed> (embed)
1996
1997 unzip
1998 - texlive-bin 2009-1 (embed)
1999
2000 jbig2dec
2001 - ghostscript 8.71~dfsg2-1 (embed)
2002
2003 libxml2
2004 - chromium-browser 5.0.375.29~r46008-1
2005
2006 protobuf
2007 - chromium-browser 5.0.375.70~r48679-2
2008
2009 libv8
2010 - chromium-browser 5.0.375.38~r46659-1
2011
2012 nspr
2013 - chromium-browser 5.0.375.29~r46008-3
2014
2015 yasm
2016 - chromium-browser 5.0.375.29~r46008-2
2017
2018 libxslt
2019 - chromium-browser 5.0.375.29~r46008-1
2020
2021 miniupnpc (not packaged in Debian; ITP bug #444392)
2022 - warzone2100 <unfixed> (embed)
2023
2024 iniparser (not packaged in Debian; RFP bug #582657)
2025 - warzone2100 <unfixed> (modified-embed)
2026
2027 pyglet
2028 - sympy <unfixed> (embed; bug #459716)
2029
2030 mpmath
2031 - sympy <unfixed> (embed; bug #541746)
2032
2033 curl
2034 - cmake 2.6.0-6 (embed)
2035 NOTE: Might be fixed earlier. Lenny version recorded.
2036 - criticalmass <unfixed> (static; bug #599061)
2037 - wengophone 2.1.0~beta1-svn9983-1 (embed)
2038
2039 lib3ds
2040 - boson <unfixed> (embed; bug #600900)
2041 - openscenegraph <unfixed> (embed; bug #601181)
2042
2043 gaim
2044 - wengophone <unfixed> (embed; bug #601425)
2045
2046 xcftools
2047 - gnome-xcf-thumbnailer <unfixed> (embed)

  ViewVC Help
Powered by ViewVC 1.1.5