/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 16388 - (show annotations) (download)
Wed Mar 16 10:22:30 2011 UTC (2 years, 2 months ago) by pabs
File size: 66763 byte(s)
miniupnpc was uploaded, warzone2100 switched to external miniupnpc
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy
14 <unfixed> if the issue is not yet fixed
15 <removed> if the package was removed from the archive
16 <itp> if the package is in the process of being packaged
17 <not-affected> if the package does not use the embedded copy
18 <unknown> if the version number can not be determined
19 <unfixable> for unavoidable cases (e.g., forks that add real value)
20 sort: static (linking statically against a lib)
21 embed (embeds a copy of the library into another source package)
22 modified-embed (embeds a code copy that differs from upstream code)
23 fork (a full-blown fork of another source package)
24 old-version (an older version of essentially the same code)
25
26 The srcpkg might be some string to identify the code if there is no
27 specific source package.
28
29 Everything up to the next line is ignored.
30 ---BEGIN
31 poppler
32 - pdftohtml <unknown>
33 [sarge] - pdftohtml <unfixed>
34 [etch] - pdftohtml <unfixed>
35 NOTE: has been replaced by poppler-utils
36 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37 - texlive-base 3.0-12 (embed)
38 - texlive-bin 2007-1 (embed)
39 - koffice 1:2.0.0-1 (embed; bug #436163)
40 - libextractor 0.5.12-1 (embed)
41 NOTE: libextractor is using its own pdf decoder now
42 - ipe <unfixed> (embed)
43 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 - ruby-gnome2 <unknown> (embed)
45 - pdfedit <unfixed> (embed; bug #510794)
46 - swftools <removed> (embed; bug #551293)
47 - xpdf 3.02-9 (fork)
48
49 pdksh (no longer developed since 1999)
50 - mksh <unfixable> (fork)
51 - posh <unfixable> (fork)
52
53 ppmd
54 - libcomplearn-mod-ppmd <unfixed> (fork)
55 NOTE: discussion in #458152
56
57 libevent
58 - transmission 1.71-1 (embed; bug #529372)
59 - chromium-browser 5.0.375.29~r46008-1
60 - dnsproxy <unknown> (embed)
61
62 lrmi
63 - read-edid 2.0.0-1 (embed; bug #495131)
64 - s3switch <unfixed> (embed)
65 - xresprobe <unfixed> (embed)
66 - zhcon <unfixed> (embed)
67
68 php-htmlpurifier
69 - mahara 1.2.5-1 (embed)
70 - knowledgeroot 0.9.9.5-5 (embed)
71 - moodle <unfixed> (embed)
72
73 peercast
74 - gnome-peercast <removed> (embed)
75 [etch] - gnome-peercast <unfixed> (embed)
76
77 silc-toolkit
78 - silc-client 1.1~beta6-1 (embed)
79
80 icclib
81 - ghostscript <unfixed> (embed)
82 - argyll <unfixed> (embed)
83
84 libusb
85 - argyll <unfixed> (embed)
86 - ia32-libs <unfixable> (embed)
87
88 dietlibc
89 - ccontrol 0.9.1+20071204-1 (static)
90 - mksh <unfixable> (static)
91 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
92
93 libmikmod
94 - pysol-sound-server <unfixed> (modified-embed)
95 - sdl-mixer1.2 <unfixed> (embed)
96 TODO: report bug
97 - uqm 0.6.2.dfsg-8 (embed)
98 NOTE: Might be fixed earlier. Lenny version recorded.
99 - black-box 1.4.6-2.2 (embed)
100 NOTE: Might be fixed earlier. Lenny version recorded.
101
102 libiax
103 - iaxmodem <unfixable> (embed; bug #548885)
104
105 spandsp
106 - iaxmodem <unfixable> (embed; bug #548885)
107
108 python-paramiko
109 - fabric 0.9.0-2 (embed; bug #561398)
110
111 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
112 - dpkg 1.15.6 (static)
113 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
114 - rsync <unfixed> (embed)
115 - cherokee <unfixed> (embed)
116 NOTE: somehow derived code base
117 - mono <unfixed> (embed)
118 TODO: check mozilla
119 - linux-2.6 <unfixed> (embed)
120 - pvpgn 1.7.8-2 (embed)
121 - mrtg 2.12.2-1 (embed)
122 - rpm <unknown> (embed)
123 NOTE: pinged anibal since when rpm was fixed
124 - tuxcmd-modules <unfixed> (embed)
125 - zsync <unfixed>
126 - tra <unfixed>
127 - sash <unfixed>
128 - nsis <unfixed>
129 - pyfits 1:2.3.1-1
130 - mseide-msegui <unfixed>
131 NOTE: mseide
132 - mirrordir <unfixed>
133 - poco <unfixed>
134 - klibc <unfixed>
135 - emboss 6.3.1-1 (embed)
136 - ghostscript 8.71~dfsg2-6 (embed)
137 NOTE: ghostscript fixed sometime before this, but this is the version i checked
138 - freeimage <unfixed>
139 - clamav <unfixed> (fork)
140 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
141 - tuxonice-userui <unfixed> (static)
142 - plt-scheme <unfixed>
143 - perl <unfixed>
144 - paraview <unfixed>
145 - velvet 0.7.56~nozlibcopy-1
146 - gcvs <unfixed>
147 - dump <unfixed>
148 - aide <unfixed> (static)
149 - dar <unfixed> (static)
150 - avfs <unfixed>
151 - fpc <unfixed>
152 - winff <unfixed>
153 NOTE: inherited from fpc, see #472304
154 - lazarus <unfixed>
155 NOTE: inherited from fpc, see #472304
156 - erlang <unfixed> (embed)
157 - gamera 3.2.3-1 (embed)
158 - python2.4 <unfixed> (embed; bug #553403)
159 - python2.5 <unfixed> (embed; bug #553403)
160 - texlive-bin <unknown> (embed)
161
162 dulwich
163 - hg-git 0.1.0-1 (embed; bug #541996)
164
165 libvigraimpex
166 - hugin <unfixed> (embed; bug #542259)
167 - enblend-enfuse <unfixed> (embed; bug #542258)
168 - gamera 3.2.3-1 (embed)
169
170 libbz2
171 - dpkg 1.15.6 (static)
172 - amd64-libs <unfixed> (static)
173 NOTE: let's call it "static"
174 - dar <unfixed> (static)
175 - dump <unfixed> (static)
176 - unalz 0.64-1 (embed)
177 NOTE: has code, by the maint, to use the system version but links against the internal copy
178 - clamav <unfixed> (embed)
179 NOTE: libclamav/nsis/bzlib*
180 - pristine-tar <unfixable> (modified-embed)
181 NOTE: compression code only, not uncompression
182 - r-base-core-ra 1.2.8 (static)
183 - r-base-core 2.11.1 (static)
184 NOTE: links dynamically in squeeze, statically in lenny
185 - rpm <unfixed> (static)
186 NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
187
188 libyahoo2
189 - centerim <unfixed> (embed; bug #559783)
190
191 libmsn
192 - centerim <unfixed> (embed; bug #559783)
193
194 libgadu
195 - centerim <unfixed> (embed; bug #559783)
196 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
197 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
198 - kdenetwork 4:3.3.2-5 (embed)
199 NOTE: from kdenetwork: kopete
200 - ekg 1:1.8~rc0-1 (embed)
201 - kadu 0.6.0.2-3 (embed; bug #504430)
202 - gadu <itp> (embed)
203
204 xmlrpc (which package is the "origin" of this code?)
205 - drupal <unfixed> (embed)
206 - phpgroupware <unfixed> (embed)
207 - egroupware <unfixed> (embed)
208 - phpwiki <unfixed> (embed)
209 - php4 <removed> (embed)
210 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
211
212 shtool (affects build-time only)
213 - mysql-ocaml <unfixed> (embed)
214 - php4 <removed> (embed)
215 - php5 <unfixed> (embed)
216
217 xulrunner
218 - iceape <unfixed> (embed; bug #561749)
219 - iceweasel 2.0.0.19 (embed)
220 - icedove <unfixed> (embed; bug #561750)
221 - kompozer <unfixed> (embed; bug #532168)
222 - galeon 2.0.2-4 (embed)
223 - epiphany-browser 2.14.3-8 (embed)
224 - conkeror 0.9~git080629-2 (embed)
225 - kazehakase 0.4.2-1 (embed)
226
227 xli
228 - xloadimage <unfixed> (embed)
229
230 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
231 - openmotif <unfixed> (embed)
232
233 libxpm
234 - lesstif2 <unfixed> (embed; bug #575750)
235 - ia32-libs <unfixable> (embed)
236
237 kerberized apps with BSD origin
238 - krb4 <removed> (embed)
239 - krb5 <unfixed> (embed)
240 - heimdal <unfixed> (embed)
241
242 grip (which pkg is the origin?)
243 - libcdaudio <unfixed>
244 - grip <unfixed>
245 - gnome-vfs <unfixed>
246 TODO: check vfs2 as well
247
248 fudforum
249 [etch] - phpgroupware <unfixed> (embed)
250 NOTE: phpgroupware-fudforum
251 [sarge] - egroupware-fudforum <removed> (embed)
252
253 libbsd
254 - rdate 1:1.2-3 (embed)
255 - atheme-services <unfixed>
256 - libbsd-arc4random-perl <not-affected> (modified-embed)
257 NOTE: code not used, it links dynamically against libbsd instead
258 - isakmpd <unfixed>
259 - bsdgames <unfixed> (embed)
260 - bsd-mailx <unfixed> (embed)
261 - netcat-openbsd <unfixed> (embed; bug #550611)
262 - openssh <unfixed> (embed)
263 - unworkable <unfixed> (embed)
264 - mksh <unfixed> (modified-embed)
265 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
266 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
267 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
268 - ia32-libs <unfixable> (embed)
269
270 cvs
271 - gcvs <unfixed> (embed)
272 NOTE: see cvsunix/src in tarball
273
274 pcre3
275 - php4 <removed> (embed)
276 - analog 2:5.23-0woody1 (embed)
277 - chicken 3.2.7-2 (embed)
278 NOTE: Might be fixed earlier. Lenny version recorded.
279 - goffice <unfixed> (embed)
280 NOTE: libgoffice-*
281 - hypermail 2.2.0.dfsg-2 (embed)
282 NOTE: Might be fixed earlier. Lenny version recorded.
283 - privoxy 3.0.9-1 (embed)
284 NOTE: Might be fixed earlier. Lenny version recorded.
285 - vfu 4.06-4.1 (embed; bug #450754)
286 - tf5 5.0beta7-1 (embed)
287 - monotone 0.43-1 (embed)
288 NOTE: this only affects versions >= 0.37
289 - glib2.0 2.15.2-1 (embed)
290 - apache2 2.0.53-4 (embed)
291 - exim4 4.10-0.srh20.12 (embed)
292 - yacas <unfixed> (embed)
293 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
294 - gtamsanalyzer.app 0.42-5 (embed)
295 - tin 980117-1 (embed)
296 - kazehakase 0.5.2-1
297 - webkit 1.0.1-1 (embed)
298 - qt4-x11 <unfixed> (embed)
299 NOTE: embedded via webkit copy
300 - erlang <unfixed> (embed)
301 - ssed <unfixed> (embed)
302 - ircd-hybrid <unfixed> (static)
303 - emboss <unfixed> (fork)
304 - cherokee <unfixed> (embed)
305 - oftc-hybrid 1.6.9.dfsg-1 (embed)
306 - ratbox-services <unfixed> (embed)
307 - squeak-vm <unfixed> (embed)
308 - tinymux <unfixed> (embed)
309
310 tiff
311 - wxwindows2.4 2.2.1 (embed)
312 - gamera 3.2.3-1 (embed)
313 - freeimage <unfixed> (embed)
314 - libtk-img <unfixed> (embed)
315 NOTE: there are two copies, one under tiff/ other under libtiff/
316 - gdal <unfixed>
317 - ia32-libs <unfixable> (embed)
318
319 uudeview
320 - libconvert-uulib-perl <unfixed> (embed)
321 - pan <unfixed> (embed)
322
323 sqlite
324 - amarok <unfixed> (embed)
325 - monotone 0.43-1 (embed)
326 - iceweasel <unfixed> (embed)
327 - heimdal <unfixed> (embed; bug #559616)
328
329 util-linux
330 - loop-aes-utils <unfixed> (embed)
331 NOTE: contains code from util-linux' mount in the mount-aes-udeb
332 - ia32-libs <unfixable> (embed)
333
334 sylpheed
335 - sylpheed-claws <unfixed> (fork)
336
337 phpsysinfo
338 - egroupware <unfixed> (embed)
339 - phpgroupware <unfixed> (embed)
340
341 phpldapadmin
342 [sarge] - egroupware <unfixed> (embed)
343 NOTE: removed from egroupware after sarge
344
345 chmlib
346 - kchmviewer <unknown> (embed)
347
348 ffmpeg (libavcodec/libavformat)
349 - mplayer 1.0~rc2-14 (embed; bug #395252)
350 - kino 1.0.0-1
351 - vlc <not-affected> (Links dynamically since initial release)
352 - smilutils 0.3.0-10
353 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
354 - motion 3.1.19-1
355 - gstreamer0.10-ffmpeg 0.10.3-2
356 - xmovie <removed> (static)
357 TODO: gimp-gap (potentially using ffmpeg code as well)
358 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
359 - audacity 1.3.7-2 (embed; bug #512278)
360 - chromium-browser <unfixed> (fork)
361
362 faad2
363 - mplayer 1.0~rc2-20 (embed)
364 - avifile <unfixed> (embed; bug #538750)
365 - ffmpeg-debian <removed> (embed)
366
367 libmad (MPEG decoding lib)
368 - xine-lib <unfixed> (embed)
369 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
370 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
371
372 libdts
373 - xine-lib <unfixed> (embed)
374
375 flac
376 - xine-lib <unfixed> (embed)
377 - ia32-libs <unfixable> (embed)
378
379 liba52
380 - a52dec <unfixed> (embed)
381 - xine-lib <unfixed> (embed)
382
383 mpeg2dec (libmpeg2)
384 - xine-lib <unfixed> (embed)
385
386 libmpeg3
387 - squeak-vm <unfixed> (embed)
388
389 libntlm
390 - wget <unfixed> (fork; bug #550436)
391 - curl <unfixed> (fork; bug #550437)
392 - cntlm <unfixed> (fork; bug #550438)
393
394 uw-imap
395 - pine <unfixed> (embed)
396 - alpine <unfixed> (embed)
397
398 imagemagick
399 - graphicsmagick <unfixed> (fork)
400
401 python-urlgrabber
402 - mercurial <unfixed> (embed; bug #531062)
403 - w3af <unfixed> (embed; bug #555372)
404 [experimental] - harvestman <unfixed> (embed; bug #555373)
405
406 beautifulsoup
407 - python-mechanize <unfixed> (embed; bug #555349)
408 - zope2.11 <removed> (embed; bug #555350)
409 - twill <unknown> (embed)
410
411 halibut
412 - nsis <unfixed> (fork)
413
414 libghttp
415 - hotway <unfixed> (embed)
416
417 libsndfile
418 - ardour 1:2.7.1-1 (embed)
419 - ia32-libs <unfixable> (embed)
420
421 glibmm2.4
422 - ardour 1:2.7.1-1 (embed)
423
424 libgnomecanvasmm2.6
425 - ardour 1:2.7.1-1 (embed)
426
427 libsigc++-2.0
428 - ardour 1:2.7.1-1 (embed)
429 - ia32-libs <unfixable> (embed)
430
431 soundtouch
432 - ardour 1:2.7.1-1 (embed)
433
434 libmms
435 - xine-lib <unfixed> (embed)
436 - mimms <unfixed> (embed)
437
438 fckeditor
439 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
440 - moin 1.8.2-2 (embed; bug #452599)
441 - karrigell <removed> (embed; bug #452598)
442 - gforge 4.6.99+svn6225-1 (embed)
443 - request-tracker3.8 <unfixed> (embed)
444 - otrs2 <unfixed> (embed)
445
446 ipatlas (not packaged in Debian)
447 - moodle <unfixed> (embed; bug #507185)
448
449 libphp-phpmailer
450 - moodle <unfixed> (embed; bug #507185)
451 - mahara <unfixed> (embed)
452 - symfony <unfixed> (embed; bug #566778)
453 [etch] - phpgroupware <unfixed> (embed)
454 NOTE: phpgroupware-felamimail is only in etch
455 - egroupware <unfixed> (embed; bug #504283)
456 - glpi <unfixed>
457
458 htmlArea (not packaged in Debian)
459 - moodle <unfixed> (embed)
460
461 giflib
462 - wine <unfixed> (embed; bug #466181)
463
464 bennu (not packaged in Debian, http://bennu.sourceforge.net)
465 - moodle <unfixed> (embed)
466
467 smarty
468 - moodle 1.8.2-2 (embed; bug #471158)
469 - gallery2 2.2.5-2 (embed; bug #471160)
470 - mahara 0.9.2-2 (embed; bug #471201)
471 - gosa 2.4beta1-1 (embed; bug #471200)
472
473 TinyMCE
474 - wordpress 2.5.1-3 (embed; bug #478257)
475 - moodle <unfixed> (embed; bug #507185)
476 - knowledgeroot <unfixed> (embed)
477 - joomla <itp> (bug #326398)
478 - mahara 1.2.6-1 (embed; #597752)
479
480 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
481 - scite <unfixed> (embed)
482 - qscintilla <unfixed> (embed)
483 - qscintilla2 <unfixed> (embed)
484 - geany <unfixed> (fork)
485 - anjuta <unfixed> (embed)
486
487 libphp-adodb
488 - moodle <unfixed> (embed; bug #507185)
489 NOTE: also AdoDB-XML Schema
490 - gallery2 <unfixed> (embed)
491 - phppgadmin <unfixed> (embed)
492 - egroupware <unfixed> (embed)
493 - phpwiki <unfixed> (embed)
494 - torrentflux 2.0beta1-2 (embed)
495 - ipplan <unfixed> (embed)
496 - typo3-src <unfixed> (embed)
497 - cacti <unknown> (embed)
498 [sarge] - cacti <unfixed> (embed)
499 NOTE: dependency exists, but internal version is used
500 - gforge 4.7~rc2-6 (embed)
501 - mahara <unfixed> (embed)
502
503 gzip
504 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
505 - klibc <unfixed> (embed)
506 NOTE: based on linux-kernel gzip code
507 - busybox <unfixed> (embed)
508 - pristine-tar <unfixed> (modified-embed)
509 NOTE: compression code only, not uncompression
510 - ncompress <unfixed> (old-version)
511
512 neon
513 - cadaver 0.22.3+debian-1 (embed; bug #188381)
514 - gnome-vfs2 <unfixed> (embed; bug #395874)
515 [etch] - litmus <unfixed> (embed; #395875)
516 - litmus <removed> (embed; #395875)
517 [sarge] - screem <unfixed> (embed)
518 - sitecopy 1:0.16.0-1 (embed; bug #395876)
519 [etch] - tla <unfixed> (embed; bug #395877)
520 [sarge] - tla <unfixed> (embed; bug #395877)
521
522 libmodplug
523 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
524
525 libvncserver
526 - vino <unfixed> (embed)
527
528 putty
529 - filezilla <unfixed> (embed)
530
531 tinyxml
532 - filezilla <unfixed>
533 - crystalspace <unfixed> (embed)
534 - libwfut <unfixed> (embed)
535 - rarian <unfixed> (embed)
536 - bulletml <unfixed> (embed)
537 - pokerth <unfixed> (embed)
538 - qutecom <unfixed> (embed)
539 - sofa-framework <unfixed> (embed)
540 - yate <unfixed> (embed)
541 - antigrav <unfixed> (embed)
542 - balder2d <unfixed> (embed)
543 - cal3d <unfixed> (embed)
544 - criticalmass <unfixed> (embed)
545 - ember <unfixed> (embed)
546 - epiphany <unfixed> (embed)
547 - gambit <unfixed> (embed)
548 - noiz2sa <unfixed> (embed)
549 - ogre <unfixed> (embed)
550 - opencity <unfixed> (embed)
551 - openmovieeditor <unfixed> (embed)
552 - pouetchess <unfixed> (embed)
553 - tecnoballz <unfixed> (embed)
554 - trigger-rally <unfixed> (embed)
555 - xmoto <unfixed> (embed)
556 - mapnik <unknown> (embed)
557 NOTE: uses a different XML parser by default
558 - rrootage 0.23a-6 <embed>
559 NOTE: links to libbulltetml
560 - boson <unknown> (embed)
561 NOTE: the embedded code is unused
562 - cppcheck <unfixed> (embed)
563 NOTE: introduced in 1.47, will use system's version in 1.48
564 [squeeze] - cppcheck <not-affected>
565
566 gv
567 - evince <unfixed> (embed)
568 NOTE: ps/ tree from gv 3.5.8
569 NOTE: evince-gtk is affected (a component of evince source package)
570
571 libXbae
572 - paw <unfixed> (embed)
573
574 libgtkhtml
575 - claws-mail-extra-plugins <unfixed> (fork)
576
577 libXaw
578 - paw <unfixed> (embed)
579 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
580 - ia32-libs <unfixable> (embed)
581
582 libgd2
583 - graphviz 2.16-1 (embed)
584 NOTE: lib/gd seems to be 2.0.33
585 - wml 2.0.11ds2-1 (embed)
586 - libwmf <unfixed> (embed)
587 NOTE: derived from gd 1.6.3, but only used to write images
588 - plt-scheme <unfixed> (embed; bug #601525)
589 - texlive-bin 2009-1 (embed)
590
591 rar
592 - unrar-nonfree <unfixed> (embed)
593
594 unrar-free (maybe this code is derived from the original rar, too?)
595 - clamav <unfixed> (embed)
596 NOTE: seems to be disabled in default config
597
598 mplayer (DirectMedia Object loader)
599 - xine-lib <unfixed> (embed)
600 NOTE: src/libw32dll/
601 - vlc <unfixed> (embed)
602 NOTE: modules/codec/dmo/
603 - mplayer 1.0~rc2-20 (embed)
604
605 libwpd (WordPerfect converter)
606 - openoffice.org <unfixed> (embed)
607
608 fsplib (http://sourceforge.net/projects/fsp/)
609 - gftp <unfixed> (embed)
610 NOTE: lib/fsplib version 0.3
611
612 sprng
613 - tree-puzzle <unfixed> (embed)
614
615 librpcsecgss
616 - krb5 <unfixed> (embed)
617
618 jasper
619 - ghostscript 8.64~dfsg-2 (embed)
620
621 libiris
622 - psi <unfixed> (embed)
623 - kdenetwork <unfixed> (embed)
624 NOTE: kopete embeds libiris but links dynamically to libidn
625 - kdegames <unfixed> (embed)
626 NOTE: ksirk/kde4
627
628 libidn
629 - monotone 0.43-1 (embed)
630 - psi <unfixed> (embed)
631 NOTE: psi embeds libiris which embeds libidn
632 - kdegames <unfixed> (embed)
633 NOTE: kdegames/kde4 embeds libiris which embeds libidn
634 - ia32-libs <unfixable> (embed)
635
636 lua5.1
637 - monotone 0.43-1 (embed)
638 - nmap 5.00-1 (embed; bug #527997)
639 [lenny] - nmap <unfixed> (embed; bug #527997)
640 - ocropus <unfixed> (embed)
641 - enigma <unfixed> (embed)
642 NOTE: requires lua built with C++
643 - freeciv <unfixed> (embed)
644 - spring <unfixed> (embed)
645
646 libbotan
647 - monotone 0.43-1 (embed)
648
649 NetXX
650 - monotone 0.43-1 (embed)
651
652 libgc
653 - mono <unfixed> (embed)
654
655 lzma
656 - p7zip <unfixed> (embed)
657 - xz-utils <unfixed> (fork)
658 - r-base <unfixed> (embed)
659 NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
660
661 lzo
662 - grub2 <unfixed> (embed)
663
664 yassl
665 - mysql-dfsg-5.0 <unfixed> (embed)
666 - mysql-5.1 <unfixed> (embed)
667
668 pax code
669 - tar <unfixed> (embed)
670 - cpio <unfixed> (embed)
671
672 t1lib
673 - tetex-bin 2.0.2-1 (embed)
674 - texlive-bin <unknown> (embed)
675 - grace 5.1.14-2 (embed)
676 NOTE: Might be fixed even earlier
677
678 guichan
679 - boswars <unfixed> (embed)
680 NOTE: maintainer notified us, working on it
681
682 tolua
683 - boswars <unfixed> (embed)
684 NOTE: maintainer notified us, working on it
685 NOTE: actually tolua++
686 - ocropus <unfixed> (embed)
687 NOTE: actually tolua++
688 - freeciv <unfixed> (embed)
689 NOTE: actually tolua++
690 - enigma <unfixed> (embed)
691
692 asio-dev
693 - luxrender <removed> (embed)
694
695 xine-lib
696 - vlc <unfixed> (embed)
697 NOTE: only parts included in modules/access/rtsp
698
699 netpbm
700 - tcl8.3 <unfixed> (embed)
701 - tcl8.4 <unfixed> (embed)
702 - tcl8.5 <unfixed> (embed)
703 NOTE: generic/tkImgGIF.c
704
705 tk8.5
706 - tk8.0 <removed> (old-version)
707 - tk8.3 <unfixed> (old-version)
708 - tk8.4 <unfixed> (old-version)
709 - perl-tk <unfixable> (fork)
710
711 samba
712 - mc 2:4.6.2~git20080311-1 (embed)
713 NOTE: maintainer is aware of this, currently searching a solution
714
715 plib1.8.4c2
716 - boson <unfixed> (fork)
717 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
718
719 fribidi
720 - quesoglc 0.7.2-2 (embed)
721
722 glew
723 - quesoglc <unfixed> (embed; bug #489341)
724 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
725 - trigger 0.5.2.1-2 (embed)
726 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
727 - trigger-rally 0.5.2.1-2 (embed)
728 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
729 - chromium-browser 5.0.375.70~r48679-2
730
731 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
732 - transcend <unfixed> (embed)
733 - cultivation <unfixed> (embed)
734 - passage <unfixed> (embed)
735 - gravitation <unfixed> (embed)
736
737 tar
738 - libarchive <unfixed> (embed)
739 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
740
741 cpio
742 - libarchive <unfixed> (embed)
743 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
744
745 kde4libs
746 - kdelibs <unfixable> (old-version)
747
748 webkit
749 - qt4-x11 <unfixed> (embed; bug #479851)
750 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
751 - kde4libs <unfixable> (fork)
752 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
753 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
754 - chromium-browser <unfixed> (fork)
755
756 ftgl
757 - blender 2.46+dfsg-1 (embed)
758 - vtk <unfixed> (embed)
759 - paraview <unfixed> (embed)
760 NOTE: as part of its copy of vtk
761 - tulip <unfixed> (embed)
762 NOTE: depends on -dev but string found on binary
763 - root-system <unknown> (embed)
764 NOTE: depends on -dev package; not confirmed at source
765 - rgl <unknown> (embed)
766 NOTE: not sure if it is built
767 - mysql-gui-tools <unknown> (embed)
768 NOTE: not sure if it is built
769 - k3d <unfixed> (embed)
770 - extremetuxracer <unknown> (embed)
771 NOTE: not sure if it is built
772 - critterding <unknown> (embed)
773 - lightspeed <unfixed>
774 NOTE: depends on -dev but string found on binary
775
776 wv
777 - abiword <unfixed>
778
779 qemu
780 - kvm <removed> (embed; bug #543159)
781 - qemu-kvm <unfixed> (embed; bug #560853)
782 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
783 - xen-3 3.4.2-2 (embed; bug #560856)
784 - xen-unstable <unfixed> (embed; bug #560856)
785
786 vgabios
787 - kvm <removed> (embed; bug #489442)
788 - qemu-kvm <unfixed> (embed)
789
790 bochs
791 - kvm <removed> (embed; bug #489442)
792 - qemu-kvm <unfixed> (embed)
793
794 speex
795 - vorbis-tools <unfixed> (embed)
796 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
797 - gst-plugins-good0.10 <unfixed> (embed)
798 - xine-lib <unfixed> (embed)
799 - libfishsound <unfixed> (embed)
800 - libannodex <removed> (embed)
801 - opal 3.4.2~dfsg-2 (embed)
802 - mumble 1.2.0~beta1-1 (embed)
803 - vlc <unfixed> (embed)
804 - xmms-speex <unfixed> (embed)
805 - libsdl-sound1.2 <unfixed> (embed)
806 - sweep <unfixed> (embed)
807
808 libreadline
809 - magic <itp> (old-version)
810
811 opcode
812 - ode <unfixed> (embed)
813 NOTE: opcode is not a package in debian, it is just embedded
814 NOTE: http://www.codercorner.com/Opcode.htm
815
816 gimpact
817 - ode <unfixed> (embed)
818 NOTE: gimpact is not a package in debian, it is just embedded
819 NOTE: http://gimpact.sf.net
820
821 mochikit
822 - mahara <unfixed> (embed)
823 NOTE: they require extra patches, still unmerged upstream
824 - ntop <unfixed> (embed)
825 - coherence 0.6.2-1 (embed)
826 - paste <unfixed> (embed)
827 - turbogears <unfixed> (embed)
828 - plone3 <removed> (embed)
829 - xulrunner <unfixed> (embed)
830 - libjifty-plugin-chart-perl <unfixed> (embed)
831 - sabnzbdplus <unfixed> (embed)
832 - tgmochikit <unfixed> (embed)
833
834 prototypejs
835 - netbeans-ide 6.0.1+dfsg-2 (embed)
836 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
837 - webcit <unfixed> (embed; bug #555219)
838 - asterisk 1:1.6.2.0~rc3-1 (embed)
839 - libjson-ruby 1.1.4-1 (embed; bug #555224)
840 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
841 - horde3 <unfixed> (embed)
842 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
843 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
844 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
845 - ebug-http <unfixed> (embed; bug #555236)
846 - libaws 2.7-1 (embed; bug #555222)
847 - phpgedview <removed> (embed)
848 - poker-network 1.7.6-1 (embed; bug #555238)
849 - rails 2.1.0-6 (embed)
850 - wordpress 2.5.0-2 (embed; bug #555243)
851 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
852 TODO: search through all of the other zope packages
853 - ampache 3.4.1-2 (embed)
854 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
855 - hobix 0.5~svn20070319-4 (embed; bug #555247)
856 - zabbix 1.6.6-4 (embed; bug #555250)
857 - chora2 2.1.1+debian0-1 (embed; bug #555253)
858 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
859 - jscropperui 1.2.1-1 (embed; bug #555257)
860 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
861 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
862 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
863 - activeldap 1.2.1-1 (embed)
864 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
865 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
866 - otrs2 2.3.4-6 (embed; bug #555267)
867 - webcalendar 1.2~b1-2 (embed; bug #555269)
868 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
869 - jifty 0.90519-1 (embed; bug #555271)
870 - jquery 1.4-1 (embed; bug #555272)
871 - passenger 2.2.5debian1-1 (embed; bug #555273)
872 - plone3 <removed> (embed; bug #555275)
873 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
874 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
875 - xulrunner <unfixed> (embed)
876 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
877 - jclicmoodle <unfixed> (embed)
878 - git-cola <unfixed> (embed)
879
880 gdb
881 - insight <unfixed> (embed)
882
883 e2fsprogs
884 - ldiskfsprogs <unfixable> (fork)
885 - ia32-libs <unfixable> (embed)
886
887 quazip (not packaged in Debian)
888 - qcake <unfixed> (embed)
889 NOTE: starting with upstream version 0.6.4
890
891 exo
892 - pcmanfm <unfixed> (embed; bug #499677)
893 NOTE: slightly modified source code
894
895 java
896 - openjdk-6 <unfixed>
897 - sun-java5 <unfixed>
898 - sun-java6 <unfixed>
899
900 libphp-snoopy
901 - ampache 3.4.1-2 (embed; bug #504169)
902 - gforge 4.6.99+svn6094-2 (embed)
903 - mahara 1.0.5-2 (embed; bug #504170)
904 - pixelpost 1.7.1-5 (embed; bug #504171)
905 - mediamate 0.9.3.6-5 (embed; bug #504172)
906 - opendb <removed> (embed; bug #504173)
907 [etch] - opendb <unfixed> (embed; bug #504173)
908 - wordpress 2.5.1-9 (embed; bug #443948)
909 - moodle <unfixed> (embed; bug #507185)
910 [etch] - phpgroupware <unfixed> (embed)
911 NOTE: phpgroupware-felamimail
912 - magpierss 0.72-3 (embed; bug #431089)
913
914 jquery
915 - zekr <unfixed> (embed)
916 - wordpress <unknown> (embed)
917 - yocto-reader <unfixed> (embed)
918 - textpattern <unfixed> (embed)
919 - genshi 0.5.1-1 (embed)
920 NOTE: compressed file under examples/ dir
921 - prewikka <unfixed> (embed)
922 - libramaze-ruby <unfixed> (embed)
923 - drupal6 <unfixed> (embed)
924 - b2evolution <unfixed> (embed)
925 - wesnoth <unfixed> (embed)
926 - gammu 1.28.95-1 (embed)
927
928 tablesorter (jquery plugin, not packaged yet)
929 - wesnoth <unfixed> (embed)
930
931 kses
932 - wordpress <unfixed> (embed; bug #504242)
933 NOTE: their copy has all methods renamed to wp_<foo>
934 NOTE: kses isn't in Debian, RFP: #504240
935 - moodle <unfixed> (embed; bug #507185)
936 - egroupware <unfixed> (embed)
937
938 magpierss
939 - wordpress <unfixed> (embed; bug #504242)
940 - moodle <unfixed>
941
942 php-gettext
943 - wordpress 2.8.4-1 (embed; bug #504242)
944 - docbookwiki <unfixed> (embed)
945 - knowledgeroot 0.9.9.5-1
946 NOTE: non-free
947
948 libphp-ixr (name may change, it is the Incutio XML-RPC)
949 - wordpress <unfixed> (embed; bug #504242)
950 NOTE: libphp-ixr isn't in Debian, RFP: #504236
951 - dokuwiki <unfixed> (embed)
952 - textpattern <unfixed> (embed)
953
954 libphp-cas
955 - glpi <unfixed> (embed)
956 - moodle <unfixed> (embed; bug #505984)
957
958 scriptaculous (prototype.js is among the embeds in the following)
959 - glpi <unfixed> (embed)
960 - libaws <unfixed> (embed; bug #555222)
961 - op-panel <unfixed> (embed)
962 - symfony <unfixed> (embed)
963 NOTE: maintainer says there are extra incompatible changes required
964 - pixelpost 1.7.1-6 (embed)
965 - webhelpers <unfixed> (embed)
966 - qwik <removed> (embed; bug #555241)
967 - smokeping <unfixed> (embed)
968 - turba2 <unfixed> (embed)
969 - typo3-src 4.2.3-1 (embed)
970 - request-tracker3.6 <unfixed> (embed)
971 - request-tracker3.8 <unfixed> (embed)
972 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
973 - wordpress 2.5.0-2 (embed)
974 - libhtml-prototype-perl 1.48-3 (embed)
975
976 libmarkdown-php
977 - moodle <unfixed> (embed; bug #507185)
978 - pixelpost 1.7.1-6 (embed)
979
980 php-openid
981 - wordpress-openid 3.3.2-1 (embed)
982
983 geshi
984 - dokuwiki 0.0.20080505-3.1 (embed)
985 - pgfouine 1.0-1.1 (embed)
986 - websvn 2.1.0-1 (embed)
987
988 webcalendar
989 - gforge 4.7~rc2-6 (embed; bug #504758)
990
991 libical
992 - kdepim <unknown> (fork)
993 NOTE: fixed at some point during 4.0
994 - kdepimlibs 4.2.0-1 (fork)
995 - claws-mail-extra-plugins <unfixed> (fork)
996
997 harfbuzz
998 - qt4-x11 <unfixed> (embed)
999 - pango1.0 <unfixed> (embed)
1000 - fontmatrix <unfixed> (embed)
1001
1002 libzip
1003 - php5 <unfixable> (modified-embed)
1004 - odt2txt <unfixed> (embed; bug #523808)
1005
1006 json.php (not packaged; should be replaced with php's built-in functions)
1007 - moodle <unfixed>
1008 - yui <unfixed>
1009 - gallery2 <unfixed>
1010 - dokuwiki <unfixed>
1011 - typo3-src <unfixed>
1012
1013 php-fpdf
1014 - tcpdf <itp> (fork)
1015 - moodle <unfixed>
1016 - phpwiki <unfixed>
1017 - egroupware <unfixed>
1018 - ldap-account-manager <unfixed> (fork)
1019
1020 tcpdf (itp: #495985)
1021 - moodle <unfixed>
1022 - phpmyadmin <unfixed>
1023
1024 typo3
1025 - moodle <unfixed>
1026
1027 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1028 - moodle <unfixed>
1029 - gosa <unfixed>
1030
1031 php-ole (itp: #487558)
1032 - moodle <unfixed>
1033
1034 pieforms (http://www.catalyst.net.nz)
1035 - mahara <unfixed>
1036
1037 savant2 (http://phpsavant.com)
1038 - egroupware <unfixed>
1039
1040 rssparser (http://nwow.org)
1041 - egroupware <unfixed>
1042 - phpgroupware <unfixed>
1043
1044 lcms
1045 - openjdk-6 <unfixed> (fork)
1046 - gimp 2.4.0~rc2-2
1047 - ia32-libs <unfixable> (embed)
1048
1049 libphp-phplayersmenu
1050 - diogenes <unfixed>
1051 - phpldapadmin <unfixed>
1052
1053 libphp-pclzip
1054 - docvert <unfixed>
1055 - moodle <unfixed>
1056 - egroupware <unfixed>
1057
1058 libphp-simplepie
1059 - dokuwiki <unfixed>
1060 - wordpress <unfixed>
1061
1062 libphp-jpgraph
1063 - egroupware <unfixed>
1064
1065 php-simpletest
1066 - moodle <unfixed>
1067
1068 libpng
1069 - doxygen 1.5.6-2 (embed)
1070 NOTE: Might be fixed earlier. Lenny version recorded.
1071 - gdal 1.5.2-3 (embed)
1072 NOTE: Might be fixed earlier. Lenny version recorded.
1073 - iceweasel <not-affected> (uses xulrunner)
1074 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1075 - iceape 1.0.13~pre080614i-0etch1 (embed)
1076 - libfltk1.1 1.1.9-6 (embed)
1077 NOTE: Might be fixed earlier. Lenny version recorded.
1078 - libtk-img <unfixed> (embed)
1079 - htmldoc 1.8.27-3 (embed)
1080 NOTE: Might be fixed earlier. Lenny version recorded.
1081 - xulrunner 1.9.0.13-1 (embed)
1082 [lenny] - xulrunner 1.9.0.11-0lenny1
1083 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1084 - gamera 3.2.3-1 (embed)
1085 - freeimage <unfixed> (embed)
1086 - syslinux-common <unfixable> (embed)
1087 - tuxonice-userui <unfixed> (static)
1088 - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1089 NOTE: Might be fixed earlier. Lenny version recorded.
1090 - vice 1.22.dfsg1-0.1 (embed)
1091 NOTE: Might be fixed earlier. Lenny version recorded.
1092 - visualboyadvance 1.8.0-4 (embed)
1093 NOTE: Might be fixed earlier. Lenny version recorded.
1094 - ia32-libs <unfixable> (embed)
1095
1096 irssi
1097 - silc-client <unfixed> (embed)
1098 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1099
1100 extc
1101 - mtasc <unfixed> (embed)
1102 - haxe <unfixed> (embed)
1103
1104 swflib
1105 - mtasc <unfixed> (embed)
1106 - haxe <unfixed> (embed)
1107
1108 libitext-java
1109 - bouncycastle 2.1.4-1 (embed)
1110
1111 python-ply
1112 - pyke <unfixed> (embed; bug #555363)
1113 - pywbem 0.7.0-4 (embed; bug #555364)
1114 - sepolgen <unfixed> (embed; bug #555365)
1115 - zope-textindexng3 <unknown> (embed)
1116 - iceweasel <not-affected> (uses xulrunner)
1117 - xulrunner <unknown> (embed)
1118 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1119
1120 libdumbnet (libdnet upstream)
1121 - nmap <unfixed> (fork)
1122
1123 gcc-4.4
1124 - gcc-mingw32 <unfixed> (embed)
1125
1126 camlimages
1127 - advi <unfixed> (static; bug #550441)
1128
1129 memcached
1130 - memcachedb <unfixed> (embed)
1131
1132 yajl
1133 - argyll <unfixed> (embed; bug #544223)
1134 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1135
1136 nusoap
1137 - gforge 4.8.2-1 (embed)
1138 - ampache <unfixed> (embed)
1139 - poker-network <unfixed> (embed)
1140 - moodle <unfixed> (embed)
1141 NOTE: code is not used when running under php5 and soap is enabled
1142 - phpwiki <unfixed> (embed)
1143 - gallery2 <unfixed> (embed)
1144 - typo3-src <unfixed> (embed)
1145 - phpgacl 3.3.7-7 (embed)
1146 - mantis 1.1.8+dfsg-1 (embed)
1147
1148 libept
1149 - adept <unfixed> (embed; bug #540649)
1150
1151 libvorbis
1152 - iceweasel <not-affected> (uses xulrunner)
1153 - xulrunner <unfixed> (embed; bug #540959)
1154 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1155 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1156 - iceape <unfixed> (embed)
1157 [etch] - iceape <not-affected> (introduced in 2.0)
1158 [lenny] - iceape <not-affected> (introduced in 2.0)
1159 - ia32-libs <unfixable> (embed)
1160
1161 cairo
1162 - iceweasel <not-affected> (uses xulrunner)
1163 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1164
1165 liboggz
1166 - iceweasel <not-affected> (uses xulrunner)
1167 - xulrunner <unfixed> (embed; bug #540959)
1168 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1169 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1170 - iceape <unfixed> (embed)
1171 [etch] - iceape <not-affected> (introduced in 2.0)
1172 [lenny] - iceape <not-affected> (introduced in 2.0)
1173
1174 liboggplay
1175 - iceweasel <not-affected> (uses xulrunner)
1176 - xulrunner <unfixed> (embed; bug #540959)
1177 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1178 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1179 - iceape <unfixed> (embed)
1180 [etch] - iceape <not-affected> (introduced in 2.0)
1181 [lenny] - iceape <not-affected> (introduced in 2.0)
1182
1183 php-net-dnsbl
1184 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1185
1186 php-onyx-rss
1187 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1188
1189 php-text-wiki
1190 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1191
1192 php-xml-rpc
1193 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1194
1195 polarssl (does not have a shared library)
1196 - pdkim <itp> (embed; bug #543150)
1197 - xyssl <unfixed> (old-version)
1198
1199 pidgin (libpurple)
1200 - gaim <removed> (old-version)
1201 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1202 - wengophone <unfixed> (embed; bug #601425)
1203
1204 icu
1205 - webkit 1.0.1-1 (embed; bug #547214)
1206 - texlive-bin <unfixed> (fork)
1207 NOTE: texlive upstream working with icu upstream to merge their changes
1208 - chromium-browser 5.0.375.29~r46008-3
1209
1210 cyrus-imapd-2.2
1211 - kolab-cyrus-imapd <unfixed> (fork)
1212 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1213
1214 python-cxx-dev
1215 - freecad 0.9.2646.3-1 (embed; bug #547936)
1216
1217 zipios++
1218 - freecad 0.9.2646.3-1 (embed; bug #547941)
1219 - enigma 0.92.3-3 (embed)
1220 NOTE: likely fixed earlier, marking etch's version as fixed
1221
1222 linux-2.6
1223 - kvm <removed> (embed; bug #549973) [./kernel/*]
1224 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1225 - kernel-source-2.6.8 <removed> (old-version)
1226 - kernel-source-2.4.27 <removed> (old-version)
1227 - kernel-source-2.4.24 <removed> (old-version)
1228 - kernel-source-2.2.25 <removed> (old-version)
1229 - kernel-source-2.2.20 <removed> (old-version)
1230
1231 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1232 - kvm <removed> (embed) [./libfdt/*]
1233 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1234
1235 qweb (not packaged)
1236 - ajaxterm <unfixed>
1237
1238 opensaml2
1239 - opensaml <removed> (old-version)
1240
1241 shibboleth-sp2
1242 - shibboleth-sp <removed> (old-version)
1243
1244 tuxonice-userui
1245 - suspend2-userui <removed> (old-version)
1246
1247 expat
1248 - w3c-libwww <removed> (embed; bug #551941)
1249 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1250 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1251 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1252 - python2.4 <unfixable> (embed; bug #553403)
1253 - python2.7 2.7-6 (embed)
1254 - mcabber 0.10.0-1 (low; bug #601053)
1255 - python-4suite <unfixed> (embed; bug #516935)
1256 - wxwindows2.4 <removed> (embed)
1257 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1258 - wxwidgets2.8 2.8.10.1-2 (embed)
1259 - albert <unfixed> (embed; bug #600974)
1260 - celementtree 1.0.5-8 (embed)
1261 NOTE: Maybe that was fixed even earlier
1262 - centerim <unfixed> (embed; bug #559783)
1263 - audacity 1.3.2-1 (embed)
1264 - matanza <unfixed> (embed)
1265 - tdom 0.8.3~20080525-1 (embed)
1266 - udunits 2.1.8-4 (embed)
1267 - apr-util 1.2 (embed)
1268 - ayttm <unfxed> (embed; bug #561006)
1269 - cableswig <unfixed> (embed)
1270 - cadaver <unfixed> (embed)
1271 - cmake 2.6.0-6 (embed)
1272 - coin3 <unfixed> (embed)
1273 - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1274 NOTE: Might be fixed earlier. Lenny version recorded.
1275 - dasher 4.7.3-1 (embed)
1276 NOTE: Might be fixed earlier. Lenny version recorded.
1277 - emboss 6.3.1-1 (embed)
1278 - gdcm 2.0.14-2 (embed)
1279 - ghostscript 8.71~dfsg-2 (embed)
1280 - grmonitor <removed> (embed)
1281 - iceape <unfixed> (embed)
1282 - insighttoolkit 3.16.0-1 (embed)
1283 NOTE: insighttoolkit might've been fixed earlier
1284 - jabber 1.4.3-3.4 (embed)
1285 NOTE: Might be fixed earlier. Lenny version recorded.
1286 - libparagui1.1 1.0.2-1 (embed)
1287 - libspiff1 0.8.3-1 (embed)
1288 NOTE: Might be fixed earlier. Lenny version recorded.
1289 - paraview 3.6.2-1 (embed)
1290 - poco 1.3.6p1-1 (embed)
1291 - scorched3d 41.3dfsg-1+b1 (embed)
1292 NOTE: Might be fixed earlier. Lenny version recorded.
1293 - simgear <unfixed> (embed)
1294 - sitecopy 1:0.16.0-1
1295 - smart <unfixed> (embed)
1296 NOTE: smart embeds celementree, and it includes expat
1297 - swish-e <not-affected> (Linked against libxml, which is used instead)
1298 - tla 1.3.5+dfsg-15 (embed)
1299 - vtk 4.1.20030227-1 (embed)
1300 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1301 - xmlrpc-c <unfixed> (embed)
1302 - iceweasel <unfixed> (embed)
1303 - kompozer <unfixed> (embed)
1304 - vxl 1.13.0-2 (embed)
1305 - xulrunner <unfixed> (embed)
1306 - xmame 0.106-2.1 (embed)
1307 NOTE: Might be fixed earlier. Lenny version recorded.
1308 - apache2 2.2 (embed)
1309 - texlive-bin <not-affected> (Embedded code not compiled in)
1310 - vnc4 <unfixed> (embed)
1311 - xotcl 1.6.6-1 (embed)
1312 - chromium-browser 5.0.375.29~r46008-3
1313 - ia32-libs <unfixable> (embed)
1314
1315 xerces-c
1316 - xerces-c2 <unfixed> (old-version)
1317 - xerces27 <removed> (old-version)
1318
1319 md5 (RSA's version; not the gnu version provided by coreutils)
1320 - w3c-libwww <removed> (embed; bug #551942)
1321 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1322
1323 libparagui1.1
1324 - asc <unfixable> (fork)
1325
1326 enet
1327 - sauerbraten <unfixed> (embed; #497194)
1328
1329 eglibc
1330 - glibc <removed> (old-version)
1331 - mksh <unfixable> (static)
1332 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1333
1334 galib
1335 - gamera 3.2.3-1 (embed)
1336
1337 configobj
1338 - bzr <unfixed> (embed; bug #555336)
1339 - elisa <unfixed> (embed; bug #555337)
1340 - gaupol <unfixed> (embed; bug #555338)
1341 - ipython <unfixed> (embed; bug #555339)
1342 - pida <unfixed> (embed; bug #555340)
1343 - psychopy <unfixed> (embed; bug #555341)
1344 - rest2web <unfixed> (embed; bug #555342)
1345 - auth2db <unknown> (embed)
1346 - dynagen <unknown> (embed)
1347 - iceweasel <unknown> (embed)
1348 - sabnzbdplus <unknown> (embed)
1349 - xulrunner <unknown> (embed)
1350 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1351
1352 python-clientform
1353 - bibus <unfixed> (embed; bug #555332)
1354 - zope2.10 <unfixed> (embed; bug #555333)
1355 - zope2.11 <removed> (embed; bug #555334)
1356 - python-mechanize <unknown> (embed)
1357 - twill <unknown> (embed)
1358
1359 python-mechanize
1360 - zope2.10 <unfixed> (embed; bug #555337)
1361 - zope2.11 <removed> (embed; bug #555338)
1362 - twill <unknown> (embed; bug #555339)
1363
1364 pexpect
1365 - duplicity 0.6.06-1 (embed; bug #555361)
1366 - hplip <unfixed> (embed; bug #555362)
1367 - smart <unfixed> (embed; bug #555363)
1368
1369 pyparsing
1370 - bauble <unfixed> (embed; bug #555366)
1371 - boa-constructor 0.6.1-8 (embed; bug #555367)
1372 - calibre <unfixed> (embed; bug #555368)
1373 - matplotlib <unfixed> (embed; bug #531024)
1374 - zhpy 1.7.3.1-1 (embed; bug #555370)
1375 - polybori <unknown> (embed)
1376 - python-whoosh <unknown> (embed)
1377 - twill <unknown> (embed)
1378 - zope-textindexng3 <unknown> (embed)
1379
1380 python-pysqlite2
1381 - python2.4 <unfixed> (embed; bug #553403)
1382 - python2.5 <unfixed> (embed; bug #553403)
1383
1384 celementtree
1385 - python2.5 <unfixed> (embed)
1386 - smart <unfixed> (embed)
1387
1388 elementtree
1389 - python2.5 <unfixed> (embed)
1390 - python2.6 <unfixed> (embed)
1391 - bzr <unfixed> (embed; bug #555343)
1392 - gedit 2.28.2-1 (embed; bug #555344)
1393 - smart <unfixed> (embed)
1394 - solfege <unfixed> (embed; bug #555345)
1395 - w3af <unfixed> (embed; bug #555346)
1396 - python-qt4 <unknown> (embed)
1397 - sphinx <unknown> (embed)
1398 - python-nltk <itp> (embed)
1399
1400 python2.5
1401 - python2.4 <unfixed> (old-version)
1402 - jython <unfixed> (embed)
1403 NOTE: embeds many stdlib modules
1404 - python-django <unfixed> (embed; bug #555419)
1405 NOTE: embeds stdlib modules: doctest, decimal
1406 - gamera 3.2.3-1 (embed)
1407 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1408 - boa-constructor <unfixed> (embed; bug #555426)
1409 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1410 - nicotine <unfixed> (embed; bug #555427)
1411 NOTE: embeds stdlib modules: ConfigParser
1412 - museek+ <unfixed> (embed; bug #555428)
1413 NOTE: embeds stdlib modules: ConfigParser
1414 - vegastrike-data <removed> (embed)
1415 NOTE: embeds many stdlib modules
1416 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1417 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1418 - config-manager <unfixed> (embed; bug #555423)
1419 NOTE: embeds stdlib modules: optparse
1420 - jhbuild 2.28.0-1 (embed; bug #555421)
1421 NOTE: embeds stdlib modules: optparse, subprocess
1422 - smart <unfixed> (embed; bug #555432)
1423 NOTE: embeds stdlib modules: optparse
1424 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1425 NOTE: embeds stdlib modules: doctest
1426 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1427 NOTE: embeds stdlib modules: doctest
1428 - distribute <unfixed> (embed)
1429 NOTE: embeds stdlib modules: doctest
1430 - python-setuptools <unfixed> (embed; bug #555435)
1431 NOTE: embeds stdlib modules: doctest
1432 - zope.testing <unfixed> (embed; bug #555436)
1433 NOTE: embeds stdlib modules: doctest
1434 - translate-toolkit <unfixed> (embed; bug #555422)
1435 NOTE: embeds stdlib modules: textwrap, contextlib
1436 - libtpclient-py <unfixed> (embed; bug #555424)
1437 NOTE: embeds stdlib modules: subprocess
1438 - grass <unfixed> (embed; bug #555425)
1439 NOTE: embeds stdlib modules: subprocess
1440 - coherence <unfixed> (embed; bug #555429)
1441 NOTE: embeds stdlib modules: uuid
1442 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1443 NOTE: embeds stdlib modules: uuid
1444 - setroubleshoot <removed> (embed; bug #555431)
1445 NOTE: embeds stdlib modules: uuid
1446 - linkchecker <unfixed> (embed; bug #555414)
1447 NOTE: embeds msgfmt.py script
1448 - imdbpy <unfixed> (embed)
1449 NOTE: embeds msgfmt.py script
1450 - kiwi <unfixed> (embed)
1451 NOTE: embeds msgfmt.py script
1452 - moin <unfixed> (embed)
1453 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1454 - plone3 <removed> (embed)
1455 NOTE: embeds msgfmt.py script
1456 - roundup <unfixed> (embed)
1457 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1458 - rednotebook <unfixed> (embed; bug #555415)
1459 NOTE: embeds msgfmt.py script
1460 - turbogears <unfixed> (embed)
1461 NOTE: embeds msgfmt.py script
1462 - elisa <unfixed> (embed)
1463 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1464 - calibre <unfixed> (embed)
1465 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1466 - mailman 1:2.1.13-1 (embed; #555416)
1467 NOTE: embeds msgfmt.py script
1468 - python-docutils <unknown> (embed)
1469 NOTE: embeds stdlib modules: optparse, textwrap
1470 - python-imaging <unknown> (embed)
1471 NOTE: embeds stdlib modules: doctest
1472 - python-mechanize <unknown> (embed)
1473 NOTE: embeds stdlib modules: doctest
1474 - twill <unknown> (embed)
1475 NOTE: embeds stdlib modules: subprocess
1476 - zeroc-ice <unknown> (embed)
1477 NOTE: embeds stdlib modules: subprocess
1478 - wxwidgets2.8 <unknown> (embed)
1479 NOTE: embeds stdlib modules: subprocess
1480 - cycle <unknown> (embed)
1481 NOTE: embeds msgfmt.py script
1482 - deluge <unknown> (embed)
1483 NOTE: embeds msgfmt.py script
1484 - opendict <unknown> (embed)
1485 NOTE: embeds msgfmt.py script
1486 - openerp-client <unknown> (embed)
1487 NOTE: embeds msgfmt.py script
1488 - rapidsvn <unknown> (embed)
1489 NOTE: embeds msgfmt.py script
1490 - wammu <unknown> (embed)
1491 NOTE: embeds msgfmt.py script
1492 - gaphor <unknown> (embed)
1493 NOTE: embeds msgfmt.py script
1494 - pida <unknown> (embed)
1495 NOTE: embeds msgfmt.py script
1496 - python-formencode <unknown> (embed)
1497 NOTE: embeds msgfmt.py script
1498 - duplicity <unfixed> (embed)
1499 NOTE: embeds stdlib module: urlparse, tarfile
1500 - pygopherd <unfixed> (embed)
1501 NOTE: embeds stdlib module: zipfile
1502
1503 argparse
1504 - twill <unfixed> (embed; bug #555347)
1505 - ipython <unfixed> (embed; bug #555348)
1506
1507 coherence
1508 - elisa <unfixed> (embed; bug #555335)
1509
1510 simpletal
1511 - plastex <unfixed> (embed; bug #555371)
1512
1513 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1514 - postr <unfixed> (embed)
1515 - elisa <unfixed> (embed)
1516
1517 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1518 - apertium-tolk <unfixed> (embed)
1519 - ipython <unfixed> (embed)
1520 - virtaal <unfixed> (embed)
1521
1522 distribute
1523 - setuptools <removed> (old-version)
1524
1525 rails
1526 - jruby1.2 <removed> (embed) [./bench/rails/*]
1527 NOTE: jruby is in non-free, it probably includes rails too
1528 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1529 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1530 - thin <unfixed> (embed) [./spec/rails_app/*]
1531 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1532 NOTE: be dangerous if developers are naively basing their code off of the examples
1533 NOTE: prototype.js is among the example files
1534
1535 lucene2 (prototype.js is among the embeds in the following)
1536 - lucene <unfixed> (old-version)
1537 - pylucene <unfixed> (embed)
1538 - libpdfbox-java <unfixed> (embed)
1539 - libfontbox-java <unfixed> (embed)
1540 - libjempbox-java <unfixed> (embed)
1541 - solr <unfixed> (embed)
1542
1543 unicode-data
1544 - syslinux <unfixed> (embed)
1545 - camomile <unfixed> (embed)
1546 - fribidi <unfixed> (embed)
1547 - m17n-db <unfixed> (embed)
1548 - sbcl <unfixed> (embed)
1549 - heimdal <unfixed> (embed)
1550 - icu <unfixed> (embed)
1551 - icu4j <unfixed> (embed)
1552 - krb5 <unfixed> (embed)
1553 - moodle <unfixed> (embed)
1554 - openldap <unfixed> (embed)
1555 - pike7.6 <unfixed> (embed)
1556 - samba <unfixed> (embed)
1557 - samba4 <unfixed> (embed)
1558 - cmucl <unfixed> (embed)
1559 - typo3-src <unfixed> (embed)
1560 - mauve <unfixed> (embed)
1561 - texlive-bin <unfixed> (embed)
1562 - ypsilon <unfixed> (embed)
1563 - jeuclid <unfixed> (embed)
1564 - charmap.app <unfixed> (embed)
1565 - clisp <unfixed> (embed)
1566 - gnulib <unfixed> (embed)
1567 - opensrs-client <unfixed> (embed)
1568 - saxonb <unfixed> (embed)
1569 - rails <unfixed> (embed)
1570
1571 feedparser
1572 - rawdog <unfixed> (embed; bug #383422)
1573 - miro <unfixed> (embed; bug #555351)
1574 - calibre <unfixed> (embed; bug #555352)
1575 - freevo <unfixed> (embed; bug #555353)
1576 - pida <unfixed> (embed; bug #555354)
1577 - planet-venus <unfixed> (embed; bug #555355)
1578 - plone3 <removed> (embed; bug #555356)
1579 - exaile 0.2.14+debian-1 (embed)
1580 - screenlets 0.1.2-3 (embed)
1581 NOTE: included twice
1582
1583 agg:
1584 - matplotlib <unfixed> (embed: bug #377271)
1585 - contextfree <unfixed> (embed)
1586 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1587 - exactimage <unfixed> (embed)
1588 - python-enable <unfixed> (embed)
1589 - mapnik 0.5.1-3 (embed)
1590 NOTE: links statically to agg, but shared library is not available (bug #377271)
1591
1592 vtk
1593 - paraview <unfixable> (embed; bug #495426)
1594 - libmesh <unfixed>
1595 NOTE: embeds exodus; not sure if there's a version external to vtk
1596
1597 txt2tags
1598 - rednotebook <unfixed> (embed)
1599
1600 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1601 - gajim <unfixed> (embed)
1602 - emesene <unfixed> (embed)
1603 - convirt <unfixed> (embed)
1604 - pida <unfixed> (embed)
1605 - rednotebook <unfixed> (embed)
1606
1607 horde3 (prototype.js is among the embeds in the following)
1608 - mnemo2 <unfixed> (embed)
1609 - nag2 <unfixed> (embed)
1610 - wordpress <unfixed> (embed)
1611 NOTE: Text_Diff (wp-includes/Text/Diff*)
1612
1613 cimg
1614 - gmic <unfixed> (embed)
1615
1616 mootools
1617 - kdenetwork <unfixed> (embed)
1618 - gallery <unfixed> (embed)
1619 - jspwiki <unfixed> (embed)
1620 - vdr-plugin-live <unfixed> (embed)
1621 - perl-doc-html <unfixed> (embed)
1622
1623 openldap
1624 - openldap2.3 <removed> (old-version)
1625 - ia32-libs <unfixable> (embed)
1626
1627 grub2
1628 - grub <unfixed> (old-version)
1629
1630 gnupginterface
1631 - duplicity <unfixed> (embed)
1632
1633 python-dateutil
1634 - awn-extras-applets <unfixed> (embed)
1635 - matplotlib <unknown> (embed)
1636
1637 cups
1638 - cupsys <removed> (old-version)
1639 - ia32-libs <unfixable> (embed)
1640
1641 yui
1642 - bcfg2 <not-affected> (present in source but not included in any binary files)
1643 - serendipity 1.5.3-1 (embed; bug #557746)
1644 - moodle 1.8.2.dfsg-5 (embed)
1645 - jifty 0.91117-1 (embed; bug #557748)
1646 - webgui 7.7.26-1 (embed)
1647 - loggerhead 1.17-1 (embed)
1648 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1649
1650 quake3 (vanilla source not packaged in debian)
1651 - openarena <unfixable> (fork)
1652
1653 quake2 (vanilla source not packaged in debian)
1654 - alien-arena <unfixable> (fork)
1655 - warsow <unfixable> (fork)
1656
1657 libtheora
1658 - iceweasel <not-affected> (uses xulrunner)
1659 - xulrunner <unfixed> (embed; bug #540959)
1660 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1661 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1662 - iceape <unfixed> (embed; bug #559276)
1663 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1664 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1665
1666 dtoa
1667 - bfilter <unfixed> (embed)
1668 - cacao <removed> (embed)
1669 - cdrdao <unfixed> (embed)
1670 - classpath <unfixed> (embed)
1671 - freej <unfixed> (embed)
1672 - iceape <unfixed> (embed)
1673 - iceweasel <unfixed> (embed)
1674 - jscoverage <unfixed> (embed)
1675 - kde4libs <unfixed> (embed)
1676 - kdelibs <unfixed> (embed)
1677 - kompozer <unfixed> (embed)
1678 - libv8 <unfixed> (embed)
1679 - mono <unfixed> (embed)
1680 - newlib <unfixed> (embed)
1681 - nspr <unfixed> (embed)
1682 - php5 <unfixed> (embed)
1683 - polyml <unfixed> (embed)
1684 - qt4-x11 <unfixed> (embed)
1685 - rhino <unfixed> (embed)
1686 NOTE: code translated to Java
1687 - ruby1.8 <unfixed> (embed)
1688 - ruby1.9 <unfixed> (embed)
1689 - ruby1.9.1 <unfixed> (embed)
1690 - sdd <unfixed> (embed)
1691 - sfind <unfixed> (embed)
1692 - star <unfixed> (embed)
1693 - tinymux <unfixed> (embed)
1694 - virtualbox-ose <unfixed> (embed)
1695 - webkit <unfixed> (embed)
1696 - xulrunner <unfixed> (embed)
1697
1698 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1699 - firegpg <unfixed> (embed)
1700 - enigmail <unfixed> (embed)
1701
1702 ptmalloc (not packaged in Debian)
1703 - crystalspace <unfixed> (embed)
1704 - qt4-x11 <unfixed> (embed)
1705
1706 svgalib
1707 - usplash <unfixed> (embed)
1708 - ia32-libs <unfixable> (embed)
1709
1710 bogl
1711 - usplash <unfixed> (embed)
1712
1713 taglist
1714 - usplash <unfixed> (embed)
1715
1716 portaudio
1717 - audacity <unfixed> (embed; bug #323711)
1718
1719 nyquist
1720 - audacity <unfixed> (embed)
1721 NOTE: embeds a forked nyquist with support for a shared library
1722
1723 vamp-plugin-sdk
1724 - audacity <unfixed> (embed)
1725
1726 wordpress
1727 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1728 - wordpress-mu <removed> (fork)
1729
1730 php5
1731 - php4 <removed> (old-version)
1732
1733 classpath
1734 - libgnucrypto-java <removed> (embed; bug #559788)
1735
1736 libtool
1737 - apr <unfixed> (static; bug #489625)
1738 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1739 - arts <unfixed> (embed)
1740 - bochs 2.4.2-1 (embed; bug #560884)
1741 - camserv <unfixed> (embed)
1742 - collectd 4.8.2-1 (embed)
1743 - courier-authlib 0.58-4 (embed)
1744 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1745 - cvsnt 2.5.04.3236-1.2 (embed)
1746 - dico <not-affected> (Uses the system copy of ltdl)
1747 - freeradius 0.1+20010527-1 (embed)
1748 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1749 - ggobi 2.1.9~20091212-1 (embed)
1750 - glame 2.0.1-4 (embed)
1751 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1752 - gnash 0.8.7-2 (embed)
1753 - gnu-smalltalk <unfixed> (embed; bug #566777)
1754 - google-gadgets 0.10.5-0.3 (embed)
1755 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1756 - graphicsmagick 1.3.5-6 (embed)
1757 - graphviz 2.8-3 (embed)
1758 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1759 - guile-1.6 1.6.8-7 (embed)
1760 - hamlib 1.2.11-1 (embed)
1761 - hercules 3.06-1.2 (embed)
1762 - jags 1.0.4-3 (embed; bug #560864)
1763 - kdelibs <unfixed> (embed)
1764 - libannodex <removed> (embed)
1765 - libextractor 0.5.23+dfsg-4 (embed)
1766 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1767 - libtunepimp 0.5.3-7.3 (embed)
1768 - mp4h 1.3.1-4.1 (embed)
1769 - naim <removed> (embed)
1770 - parser-mysql <unfixed> (embed)
1771 - pinball 0.3.1-11 (embed)
1772 - redland <unfixed> (embed)
1773 - siproxd <unfixed> (embed)
1774 - ski <unfixed> (embed)
1775 - synfig 0.62.00-1 (embed)
1776 - unixodbc 2.2.4-5 (embed)
1777 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1778 - clamav 0.95+dfsg-1 (embed)
1779 - imagemagick 6:6.2.3.1-1 (embed)
1780 - hypre 2.4.0b-5 (embed)
1781 - lam <unfixed> (embed)
1782 - openmpi <unfixable> (embed; bug #559386)
1783 - parser <unfixed> (embed)
1784 - pdsh 2.18-5 (embed; bug #560892)
1785 - sbnc 1.2-8 (embed)
1786 - sdcc <unfixed> (embed)
1787 - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1788 - proftpd-dfsg <unfixed> (embed; bug #561748)
1789 - babel 1.4.0.dfsg-5 (embed)
1790 - libprelude 0.9.14-2 (embed)
1791 - heartbeat 2.1.4-7 (embed)
1792 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1793 NOTE: might've been fixed earlier
1794 - gcc-* <unknown> (embed)
1795 - ia32-libs <unfixable> (embed)
1796
1797 ocamlgsl
1798 - orpie 1.5.1-7.1 (embed; bug #550058)
1799
1800 xdotool
1801 - keynav <unfixed> (embed; bug #560103)
1802
1803 bulletphysics (not packaged; http://www.bulletphysics.org/)
1804 - supertuxkart <unfixed> (embed)
1805 - blender <unfixed> (embed)
1806
1807 ghostscript
1808 - gs-gpl <removed> (old-version)
1809
1810 icedove
1811 - thunderbird <removed> (old-version)
1812
1813 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1814 - jquery <unfixed> (embed)
1815
1816 sed
1817 - ssed <unfixed> (fork)
1818
1819 phpatomlib (http://code.google.com/p/phpatomlib)
1820 - wordpress <unfixed> (embed)
1821
1822 Services_JSON (http://pear.php.net/package/Services_JSON)
1823 - wordpress <unfixed> (embed)
1824
1825 phpass (http://www.openwall.com/phpass/)
1826 - gallery2 <unfixed> (embed)
1827 - wordpress <unfixed> (embed)
1828 - typo3-src <unfixed> (modified-embed)
1829 NOTE: file refers to drupal, maybe there's a copy somewhere there
1830 NOTE: a copyright owner search didn't match anything
1831 - libauthen-passphrase-perl <unfixable> (fork)
1832 NOTE: perl implementation of phpass
1833 - phpbb3 <unfixed>
1834 NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1835
1836 squirrelmail
1837 - wordpress <unfixed> (embed)
1838 NOTE: class-pop3.php
1839
1840 ezSQL (http://www.woyano.com/jv/ezsql)
1841 - wordpress <unfixable> (fork)
1842 NOTE: wp-db.php
1843
1844 Diff.php (Clay Loveless' version/killersoft.com)
1845 - php-versioncontrol-svn <unfixed>
1846
1847 libm (provided by libc)
1848 - spring <unfixed> (embed)
1849 NOTE: embedded by embedded copy of streflop
1850 - aide <unfixed> (static)
1851 - busybox <unfixed> (static)
1852 - mindi-busybox <unfixed> (static)
1853 - qemu <unfixed> (static)
1854 NOTE: qemu-user-static
1855 - tuxonice-userui <unfixed> (static)
1856 - zsh <unfixed> (static)
1857 NOTE: zsh-static
1858 - tripwire <unfixed>
1859
1860 streflop
1861 - spring <unfixed> (embed)
1862
1863 minizip
1864 - spring <unfixed> (embed)
1865
1866 oscpack
1867 - spring <unfixed> (embed)
1868
1869 hpiutil2
1870 - spring <unfixed> (embed)
1871
1872 p7zip
1873 - spring <unfixed> (embed)
1874
1875 pythonqt (doesn't seem to be python-qtN, unknown source)
1876 - fontmatrix <unfixed> (embed)
1877 - elmerfem <unfixed> (embed)
1878
1879 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1880 - docvert <unfixed> (embed)
1881 - jifty <unfixed> (embed)
1882 - kdenetwork <unfixed> (embed)
1883 - mediatomb <unfixed> (embed)
1884 - plastex <unfixed> (embed)
1885 - plone3 <removed> (embed)
1886 - python-chaco <unfixed> (embed)
1887 - python-docutils <unfixed> (embed)
1888 - s5 <unfixed> (embed)
1889 - zope2.10 <unfixed> (embed)
1890 - zope2.11 <removed> (embed)
1891 - cython <not-affcted> (embed)
1892 NOTE: part of documentation, which is not installed into the binary package
1893
1894 python-docutils
1895 - zope2.10 <unfixed> (embed)
1896 - zope2.11 <removed> (embed)
1897
1898 tesseract
1899 - ocropus <unfixed> (static)
1900
1901 antlr
1902 - kdevelop <unfixed> (embed)
1903
1904 libxerces2
1905 - openjdk-6 <unfixed> (embed)
1906
1907 kfreebsd-8
1908 - kfreebsd-7 <unfixed> (old-version)
1909 - kfreebsd-6 <removed> (old-version)
1910
1911 ruby1.9.1
1912 - ruby1.9 <unfixed> (old-version)
1913 - ruby1.8 <unfixed> (old-version)
1914
1915 maildrop
1916 - courier <unfixed> (embed) [./maildrop]
1917
1918 glee
1919 - warzone2100 <not-affected> (embed)
1920
1921 phing
1922 - symfony <unfixed> (embed)
1923
1924 pake
1925 - symfony <unfixed> (embed)
1926
1927 propel
1928 - symfony <unfixed> (embed)
1929
1930 creole
1931 - symfony <unfixed> (embed)
1932
1933 hfsutils
1934 - cdrkit <unfixed> (embed; bug #570187)
1935 NOTE: embeds hfsutils code in genisoimage
1936
1937 cdrkit
1938 - grub2 <unfixed> (embed; bug #570156)
1939 NOTE: genisoimage imported into grub-mkisofs
1940
1941 kdebase-workspace
1942 - kdebase <unfixed> (old-version)
1943
1944 file
1945 - php5 <unfixable> (modified-embed)
1946 [lenny] - php5 <not-affected>
1947
1948 cdb
1949 - php5 <unfixed> (embed)
1950
1951 libmbfl (itp: #570708)
1952 - php5 <unfixed> (embed)
1953 NOTE: PHP is actually the current upstream, ITP is of that code
1954
1955 libonig
1956 - php5 5.3.2-1 (embed)
1957
1958 xmlrpc-epi
1959 - php5 <unfixed> (embed)
1960
1961 swt-gtk
1962 - eclipse <unfixed> (embed; bug #538808)
1963
1964 txt2html
1965 - wml 2.0.11ds2-1 (embed)
1966
1967 ca-certificates
1968 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1969
1970 openexr
1971 - freeimage <unfixed> (embed)
1972
1973 libmng
1974 - freeimage <unfixed> (embed)
1975
1976 openjpeg
1977 - freeimage <unfixed> (embed)
1978
1979 libjpeg6b
1980 - freeimage <unfixed> (embed)
1981 - ia32-libs <unfixable> (embed)
1982
1983 libjpeg (don't know what exact version)
1984 - dcmtk <unfixed>
1985 - gdcm <unfixed>
1986 - insighttoolkit <unfixed>
1987 - openarena 0.8.5-5+exp1 (bug #495966)
1988 - outguess <unfixed>
1989 - squeak-vm <unfixed> (embed)
1990 - tremulous <unfixed>
1991 - tuxonice-userui <unfixed> (static)
1992 - fpc <unfixed> (static)
1993 - lazarus <unfixed> (static)
1994 NOTE: inherited from fpc, see #472304
1995 - mseide-msegui <unfixed> (static)
1996 NOTE: inherited from fpc, see #472304
1997 - easymp3gain <unfixed> (static)
1998 NOTE: inherited from fpc, see #472304
1999 - winff <unfixed> (static)
2000 NOTE: inherited from fpc, see #472304
2001 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2002
2003
2004 lxr
2005 - lxr-cvs <unfixed> (embed)
2006
2007 libfile-copy-recursive-perl
2008 - r-base <unfixed> (embed; bug #577427)
2009 - r-base-core-ra <unfixed> (embed; bug #577429)
2010
2011 delimmatch
2012 - r-base <unfixed> (embed; bug #577433)
2013 - r-base-core-ra <unfixed> (embed; bug #577434)
2014
2015 libsmf (ITP: #572558)
2016 - denemo <unfixed> (embed)
2017 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2018
2019 libselinux
2020 - dpkg 1.15.6 (static)
2021 - ia32-libs <unfixable> (embed)
2022
2023 xinha (ITP: #479708)
2024 - horde3 <unfixed>
2025 - serendipity <unfixed>
2026 - openacs <unfixed>
2027 - dotlrn <unfixed>
2028
2029 dvipng
2030 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2031
2032 dvipdfmx
2033 - texlive-bin <unfixed> (embed)
2034 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2035
2036 lcdf-typetools
2037 - texlive-bin 2009-1 (embed)
2038
2039 tex4ht
2040 - texlive-bin 2009-1 (embed)
2041
2042 freetype
2043 - texlive-bin 2009-1 (embed)
2044 - ia32-libs <unfixable> (embed)
2045
2046 freetype2
2047 - texlive-bin 2009-1 (embed)
2048 - tuxonice-userui <unfixed> (static)
2049 - instantbird <unfixed>
2050 - qt4-x11 <unknown> (embed)
2051 - vtk <unknown> (embed)
2052 - paraview <unknown> (embed)
2053 NOTE: from embedded copy of vtk
2054
2055 silgraphite
2056 - texlive-bin <unfixed> (embed)
2057
2058 unzip
2059 - texlive-bin 2009-1 (embed)
2060
2061 jbig2dec
2062 - ghostscript 8.71~dfsg2-1 (embed)
2063
2064 libxml2
2065 - chromium-browser 5.0.375.29~r46008-1
2066 - ia32-libs <unfixable> (embed)
2067
2068 protobuf
2069 - chromium-browser 5.0.375.70~r48679-2
2070
2071 libv8
2072 - chromium-browser 5.0.375.38~r46659-1
2073
2074 nspr
2075 - chromium-browser 5.0.375.29~r46008-3
2076 - ia32-libs <unfixable> (embed)
2077
2078 yasm
2079 - chromium-browser 5.0.375.29~r46008-2
2080
2081 libxslt
2082 - chromium-browser 5.0.375.29~r46008-1
2083 - ia32-libs <unfixable> (embed)
2084
2085 miniupnpc
2086 - warzone2100 2.3.7-2
2087 NOTE: code still present in tarball but removed during build and unused
2088
2089 iniparser (not packaged in Debian; RFP bug #582657)
2090 - warzone2100 <unfixed> (modified-embed)
2091
2092 pyglet
2093 - sympy <unfixed> (embed; bug #459716)
2094
2095 mpmath
2096 - sympy <unfixed> (embed; bug #541746)
2097
2098 openssh
2099 - libpam-ssh <unfixed> (embed; bug #598522)
2100
2101 curl
2102 - cmake 2.6.0-6 (embed)
2103 NOTE: Might be fixed earlier. Lenny version recorded.
2104 - criticalmass <unfixed> (static; bug #599061)
2105 - wengophone 2.1.0~beta1-svn9983-1 (embed)
2106 - ia32-libs <unfixable> (embed)
2107
2108 lib3ds
2109 - boson <unfixed> (embed; bug #600900)
2110 - openscenegraph <unfixed> (embed; bug #601181)
2111
2112 xcftools
2113 - gnome-xcf-thumbnailer <unfixed> (embed)
2114
2115 simplejson
2116 - exaile <unfixed> (embed; bug #604547)
2117
2118 libasycns
2119 - loudmouth <unfixed> (embed; bug #566143)
2120
2121 plplot
2122 - emboss <unfixed> (fork)
2123
2124 acl
2125 - ia32-libs <unfixable> (embed)
2126
2127 arts
2128 - ia32-libs <unfixable> (embed)
2129
2130 attr
2131 - ia32-libs <unfixable> (embed)
2132
2133 audiofile
2134 - ia32-libs <unfixable> (embed)
2135
2136 avahi
2137 - ia32-libs <unfixable> (embed)
2138
2139 celt
2140 - ia32-libs <unfixable> (embed)
2141
2142 coreutils
2143 - ia32-libs <unfixable> (embed)
2144
2145 cyrus-sasl2
2146 - ia32-libs <unfixable> (embed)
2147
2148 db4.8
2149 - ia32-libs <unfixable> (embed)
2150
2151 dbus
2152 - ia32-libs <unfixable> (embed)
2153
2154 directfb
2155 - ia32-libs <unfixable> (embed)
2156
2157 esound
2158 - ia32-libs <unfixable> (embed)
2159
2160 fltk1.1
2161 - ia32-libs <unfixable> (embed)
2162
2163 fontconfig
2164 - ia32-libs <unfixable> (embed)
2165
2166 freeglut
2167 - ia32-libs <unfixable> (embed)
2168
2169 gcc-3.3
2170 - ia32-libs <unfixable> (embed)
2171
2172 gdbm
2173 - ia32-libs <unfixable> (embed)
2174
2175 gnutls26
2176 - ia32-libs <unfixable> (embed)
2177
2178 hal
2179 - ia32-libs <unfixable> (embed)
2180
2181 isdnutils
2182 - ia32-libs <unfixable> (embed)
2183
2184 jack-audio-connection-kit
2185 - ia32-libs <unfixable> (embed)
2186
2187 keyutils
2188 - ia32-libs <unfixable> (embed)
2189
2190 krb5
2191 - ia32-libs <unfixable> (embed)
2192
2193 lesstif2
2194 - ia32-libs <unfixable> (embed)
2195
2196 libaio
2197 - ia32-libs <unfixable> (embed)
2198
2199 libasyncns
2200 - ia32-libs <unfixable> (embed)
2201
2202 libcap2
2203 - ia32-libs <unfixable> (embed)
2204
2205 libdrm
2206 - ia32-libs <unfixable> (embed)
2207
2208 libedit
2209 - ia32-libs <unfixable> (embed)
2210
2211 libexif
2212 - ia32-libs <unfixable> (embed)
2213
2214 libgcrypt11
2215 - ia32-libs <unfixable> (embed)
2216
2217 libgpg-error
2218 - ia32-libs <unfixable> (embed)
2219
2220 libgphoto2
2221 - ia32-libs <unfixable> (embed)
2222
2223 libice
2224 - ia32-libs <unfixable> (embed)
2225
2226 libieee1284
2227 - ia32-libs <unfixable> (embed)
2228
2229 libjpeg8
2230 - ia32-libs <unfixable> (embed)
2231
2232 libnss-ldap
2233 - ia32-libs <unfixable> (embed)
2234
2235 libogg
2236 - ia32-libs <unfixable> (embed)
2237
2238 libpam-ldap
2239 - ia32-libs <unfixable> (embed)
2240
2241 libsamplerate
2242 - ia32-libs <unfixable> (embed)
2243
2244 libsdl1.2
2245 - ia32-libs <unfixable> (embed)
2246
2247 libsm
2248 - ia32-libs <unfixable> (embed)
2249
2250 libssh2
2251 - ia32-libs <unfixable> (embed)
2252
2253 libtasn1-3
2254 - ia32-libs <unfixable> (embed)
2255
2256 libx11
2257 - ia32-libs <unfixable> (embed)
2258
2259 libx86
2260 - ia32-libs <unfixable> (embed)
2261
2262 libxau
2263 - ia32-libs <unfixable> (embed)
2264
2265 libxcb
2266 - ia32-libs <unfixable> (embed)
2267
2268 libxcomposite
2269 - ia32-libs <unfixable> (embed)
2270
2271 libxcursor
2272 - ia32-libs <unfixable> (embed)
2273
2274 libxdamage
2275 - ia32-libs <unfixable> (embed)
2276
2277 libxdmcp
2278 - ia32-libs <unfixable> (embed)
2279
2280 libxext
2281 - ia32-libs <unfixable> (embed)
2282
2283 libxfixes
2284 - ia32-libs <unfixable> (embed)
2285
2286 libxi
2287 - ia32-libs <unfixable> (embed)
2288
2289 libxinerama
2290 - ia32-libs <unfixable> (embed)
2291
2292 libxmu
2293 - ia32-libs <unfixable> (embed)
2294
2295 libxp
2296 - ia32-libs <unfixable> (embed)
2297
2298 libxrandr
2299 - ia32-libs <unfixable> (embed)
2300
2301 libxrender
2302 - ia32-libs <unfixable> (embed)
2303
2304 libxss
2305 - ia32-libs <unfixable> (embed)
2306
2307 libxt
2308 - ia32-libs <unfixable> (embed)
2309
2310 libxtst
2311 - ia32-libs <unfixable> (embed)
2312
2313 libxv
2314 - ia32-libs <unfixable> (embed)
2315
2316 libxxf86vm
2317 - ia32-libs <unfixable> (embed)
2318
2319 lzo2
2320 - ia32-libs <unfixable> (embed)
2321
2322 mesa
2323 - ia32-libs <unfixable> (embed)
2324
2325 mpg123
2326 - ia32-libs <unfixable> (embed)
2327
2328 nas
2329 - ia32-libs <unfixable> (embed)
2330
2331 nss
2332 - ia32-libs <unfixable> (embed)
2333
2334 openal-soft
2335 - ia32-libs <unfixable> (embed)
2336
2337 openssl
2338 - ia32-libs <unfixable> (embed)
2339
2340 pam
2341 - ia32-libs <unfixable> (embed)
2342
2343 popt
2344 - ia32-libs <unfixable> (embed)
2345
2346 pulseaudio
2347 - ia32-libs <unfixable> (embed)
2348
2349 sane-backends
2350 - ia32-libs <unfixable> (embed)
2351
2352 sqlite3
2353 - ia32-libs <unfixable> (embed)
2354 - chromium-browser <unfixed> (embed)
2355
2356 sysfsutils
2357 - ia32-libs <unfixable> (embed)
2358
2359 tcp-wrappers
2360 - ia32-libs <unfixable> (embed)
2361
2362 tdb
2363 - thunar 1.2.1-3 (old-version)
2364 - ia32-libs <unfixable> (embed)
2365
2366 tslib
2367 - ia32-libs <unfixable> (embed)
2368
2369 unixodbc
2370 - ia32-libs <unfixable> (embed)
2371
2372 xaw3d
2373 - ia32-libs <unfixable> (embed)
2374
2375 xbitmaps
2376 - ia32-libs <unfixable> (embed)
2377
2378 xcb-util
2379 - ia32-libs <unfixable> (embed)
2380
2381 xcursor-themes
2382 - ia32-libs <unfixable> (embed)
2383
2384 xft
2385 - ia32-libs <unfixable> (embed)
2386
2387 dicomparser
2388 - vtk <unfixed>
2389 - paraview <unfixed>
2390 NOTE: as part of its copy of vtk
2391 - insighttoolkit <unfixed>
2392
2393 proj
2394 - vtk <unfixed>
2395 - paraview <unfixed>
2396 NOTE: as part of its copy of vtk
2397 - therion <unfixed>
2398 - python-pyproj 1.8.6-1
2399
2400 netcdf
2401 - vtk <unfixed>
2402 - paraview <unfixed>
2403 NOTE: as part of its copy of vtk
2404
2405 insighttoolkit
2406 - vtk <unfixed> (embed)
2407 NOTE: embeds at least MetaIO
2408 - paraview <unfixed> (embed)
2409 NOTE: embeds at least MetaIO
2410
2411 gl2ps
2412 - vtk <unfixed>
2413 - paraview <unfixed>
2414 NOTE: as part of its copy of vtk
2415 - avogadro <unfixed>
2416 - gabedit <unknown> (embed)
2417 NOTE: not sure if it is built
2418 - drawxtl <unfixed> (embed)
2419 - rgl <unfixed> (embed)
2420 - gmsh <unfixed>
2421 - mcrl2 <unfixed> (embed)
2422 - mysql-gui-tools <unknown> (embed)
2423 NOTE: not sure if it is built
2424 - opencascade <unfixed> (embed)
2425 - orsa <unfixed> (embed)
2426 - qtiplot <unfixed> (embed)
2427 - qwtplot3d <unfixed> (embed)
2428 - root-system <unknown> (embed)
2429 NOTE: not sure if it is built
2430 - scilab <unfixed> (embed)
2431 - snd <unknown> (embed)
2432 NOTE: not sure if it is built
2433 - xmakemol <unfixed> (embed)
2434
2435 qwtplot3d
2436 - qtiplot <unfixed>
2437
2438 parseafm (from Adobe)
2439 - vftool <unfixed>
2440 - gnustep-back <unknown>
2441 NOTE: looks like it isn't built
2442 - evince <unfixed>
2443
2444 bugzilla
2445 - perl <unknown>
2446 - libcgi-pm-perl <unknown>

  ViewVC Help
Powered by ViewVC 1.1.5