/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 11923 by nion, Mon May 18 23:28:15 2009 UTC revision 15338 by jmm-guest, Thu Sep 16 21:31:44 2010 UTC
# Line 10  Format: Line 10  Format:
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>,  status: version number fixing the embedded copy
14          <itp> or <unknown> if the version number can not be determined          <unfixed> if the issue is not yet fixed
15          <unfixable> for unavoidable cases (e.g., forks that add real value)          <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
21        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
22        fork (the package is not just embedding code but it is a fork and        modified-embed (embeds a code copy that differs from upstream code)
23              thus might share parts of the source code)        fork (a full-blown fork of another source package)
24        old-version (the package is an older version of essentially        old-version (an older version of essentially the same code)
                    the same code)  
25    
26  The srcpkg might be some string to identify the code if there is no  The srcpkg might be some string to identify the code if there is no
27  specific source package.  specific source package.
28    
29  Everything up to the next line is ignored.  Everything up to the next line is ignored.
30  ---BEGIN  ---BEGIN
31  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  poppler
         NOTE: Fixed packages link to poppler library unless otherwise noted  
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
32          - pdftohtml <unknown>          - pdftohtml <unknown>
33          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
34          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
# Line 37  xpdf (some srcpkgs use xpdf2 code, some Line 36  xpdf (some srcpkgs use xpdf2 code, some
36          - kdegraphics 4:4.2.2-1 (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37          - texlive-base 3.0-12 (embed)          - texlive-base 3.0-12 (embed)
38          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
39          NOTE: links to poppler          - koffice 1:2.0.0-1 (embed; bug #436163)
         - koffice <unfixed> (embed; bug #436163)  
40          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
41          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - pdfkit.framework 0.8-4 (embed)  
42          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
43          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
         NOTE: copy only present in source but links to poppler  
45          - pdfedit <unfixed> (embed; bug #510794)          - pdfedit <unfixed> (embed; bug #510794)
46          - swftools <unfixed> (embed)          - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53  ppmd  ppmd
54          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60    
61    lrmi
62            - read-edid 2.0.0-1 (embed; bug #495131)
63            - s3switch <unfixed> (embed)
64            - xresprobe <unfixed> (embed)
65            - zhcon <unfixed> (embed)
66    
67    php-htmlpurifier
68            - mahara 1.2.5-1 (embed)
69            - knowledgeroot 0.9.9.5-5 (embed)
70            - moodle <unfixed> (embed)
71    
72  peercast  peercast
73          - gnome-peercast <unfixed> (embed)          - gnome-peercast <removed> (embed)
74          NOTE: gnome-peercast may better be removed, see #466539          [etch] - gnome-peercast <unfixed> (embed)
75    
76  silc-toolkit  silc-toolkit
77          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
# Line 63  icclib Line 80  icclib
80          - ghostscript <unfixed> (embed)          - ghostscript <unfixed> (embed)
81          - argyll <unfixed> (embed)          - argyll <unfixed> (embed)
82    
83    libusb
84            - argyll <unfixed> (embed)
85    
86  dietlibc  dietlibc
87          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
88            - mksh <unfixable> (static)
89            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
90    
91  libmikmod  libmikmod
92          - sdl-mixer1.2 <unfixed> (embed)          - sdl-mixer1.2 <unfixed> (embed)
93          TODO: report bug          TODO: report bug
94    
95  libiax  libiax
96          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
97    
98    spandsp
99            - iaxmodem <unfixable> (embed; bug #548885)
100    
101    python-paramiko
102            - fabric 0.9.0-2 (embed; bug #561398)
103    
104  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
105          - dpkg <unfixed> (embed)          - dpkg 1.15.6 (static)
106          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
107          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
108            - cherokee <unfixed> (embed)
109          NOTE: somehow derived code base          NOTE: somehow derived code base
110          - mono <unfixed> (embed)          - mono <unfixed> (embed)
111          TODO: check mozilla          TODO: check mozilla
# Line 90  zlib (lots of apps embed a copy, but lin Line 119  zlib (lots of apps embed a copy, but lin
119          - tra <unfixed>          - tra <unfixed>
120          - sash <unfixed>          - sash <unfixed>
121          - nsis <unfixed>          - nsis <unfixed>
122            - pyfits 1:2.3.1-1
123          - mseide-msegui <unfixed>          - mseide-msegui <unfixed>
124          NOTE: mseide          NOTE: mseide
125          - mirrordir <unfixed>          - mirrordir <unfixed>
126          - poco <unfixed>          - poco <unfixed>
127          - klibc <unfixed>          - klibc <unfixed>
128            - emboss <unfixed>
129          - ghostscript <unfixed>          - ghostscript <unfixed>
130          - freeimage <unfixed>          - freeimage <unfixed>
131          - clamav <unfixed> (fork)          - clamav <unfixed> (fork)
132          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
133          - tuxonice-userui <unfixed>          - tuxonice-userui <unfixed> (static)
134          - plt-scheme <unfixed>          - plt-scheme <unfixed>
135          - perl <unfixed>          - perl <unfixed>
136          - paraview <unfixed>          - paraview <unfixed>
137            - velvet 0.7.56~nozlibcopy-1
138          - gcvs <unfixed>          - gcvs <unfixed>
         - erlang <unfixed>  
139          - dump <unfixed>          - dump <unfixed>
140          - aide <unfixed> (static)          - aide <unfixed> (static)
141          - dar <unfixed> (static)          - dar <unfixed> (static)
# Line 114  zlib (lots of apps embed a copy, but lin Line 145  zlib (lots of apps embed a copy, but lin
145          NOTE: inherited from fpc, see #472304          NOTE: inherited from fpc, see #472304
146          - lazarus <unfixed>          - lazarus <unfixed>
147          NOTE: inherited from fpc, see #472304          NOTE: inherited from fpc, see #472304
148            - erlang <unfixed> (embed)
149            - gamera 3.2.3-1 (embed)
150            - python2.4 <unfixed> (embed; bug #553403)
151            - python2.5 <unfixed> (embed; bug #553403)
152            - texlive-bin <unknown> (embed)
153    
154    dulwich
155            - hg-git 0.1.0-1 (embed; bug #541996)
156    
157    libvigraimpex
158            - hugin <unfixed> (embed; bug #542259)
159            - enblend-enfuse <unfixed> (embed; bug #542258)
160            - gamera 3.2.3-1 (embed)
161    
162  libbz2  libbz2
163          - dpkg <unfixed> (static)          - dpkg 1.15.6 (static)
164            - amd64-libs <unfixed> (static)
165  libgadu:          NOTE: let's call it "static"
166          - centericq <unfixed> (embed)          - dar <unfixed> (static)
167          - gaim <unfixed> (embed)          - dump <unfixed> (static)
168          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)          - unalz 0.64-1 (embed)
169            NOTE: has code, by the maint, to use the system version but links against the internal copy
170            - clamav <unfixed> (embed)
171            NOTE: libclamav/nsis/bzlib*
172    
173    libyahoo2
174            - centerim <unfixed> (embed; bug #559783)
175    
176    libmsn
177            - centerim <unfixed> (embed; bug #559783)
178    
179    libgadu
180            - centerim <unfixed> (embed; bug #559783)
181            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
182            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
183          - kdenetwork 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
184          NOTE: from kdenetwork: kopete          NOTE: from kdenetwork: kopete
         - gadu <unfixed> (embed)  
185          - ekg 1:1.8~rc0-1 (embed)          - ekg 1:1.8~rc0-1 (embed)
186          - kadu 0.6.0.2-3 (embed; bug #504430)          - kadu 0.6.0.2-3 (embed; bug #504430)
187          NOTE: gadu not packaged in Debian yet          - gadu <itp> (embed)
188    
189  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
190          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
191          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
192          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
193          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
194          - php4 <unfixed> (embed)          - php4 <removed> (embed)
195          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
196    
197  shtool (affects build-time only)  shtool (affects build-time only)
198          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
199          - php4 <unfixed> (embed)          - php4 <removed> (embed)
200            - php5 <unfixed> (embed)
201    
202  mozilla source code  xulrunner
203          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
204          - mozilla-thunderbird <unfixed>          - iceweasel 2.0.0.19 (embed)
205          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
206          - thunderbird <removed>          - kompozer <unfixed> (embed; bug #532168)
207          - iceweasel <unfixed> (embed)          - galeon 2.0.2-4 (embed)
208          - iceape <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
209          - icedove <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
210          - xulrunner <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - nvu <removed> (embed)  
211    
212  xli  xli
213          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
214    
215  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
216          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
217          - libxpm <unfixed> (embed)  
218    libxpm
219            - lesstif2 <unfixed> (embed; bug #575750)
220    
221  kerberized apps with BSD origin  kerberized apps with BSD origin
222          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
223          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
224          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
225    
# Line 175  fudforum Line 234  fudforum
234          NOTE: phpgroupware-fudforum          NOTE: phpgroupware-fudforum
235          [sarge] - egroupware-fudforum <removed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
236    
237    libbsd
238            - rdate 1:1.2-3 (embed)
239            - atheme-services <unfixed>
240            - libbsd-arc4random-perl <not-affected> (modified-embed)
241            NOTE: code not used, it links dynamically against libbsd instead
242            - isakmpd <unfixed>
243            - bsdgames <unfixed> (embed)
244            - bsd-mailx <unfixed> (embed)
245            - netcat-openbsd <unfixed> (embed; bug #550611)
246            - openssh <unfixed> (embed)
247            - unworkable <unfixed> (embed)
248            - mksh <unfixed> (modified-embed)
249            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
250            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
251            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
252    
253  cvs  cvs
254          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
255          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
256    
257  pcre  pcre3
258          - python* <unfixed> (embed)          - php4 <removed> (embed)
         - php4 <unknown> (embed)  
259          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
260          - goffice <unfixed> (embed)          - goffice <unfixed> (embed)
261          NOTE: libgoffice-*          NOTE: libgoffice-*
# Line 195  pcre Line 269  pcre
269          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
270          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
271          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
272          - tin <unknown> (embed)          - tin 980117-1 (embed)
273          - kazehakase 0.5.2-1          - kazehakase 0.5.2-1
274          - webkit <unfixed> (embed)          - webkit 1.0.1-1 (embed)
275          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
276          NOTE: embedded via webkit copy          NOTE: embedded via webkit copy
277            - erlang <unfixed> (embed)
278            - ssed <unfixed> (embed)
279            - ircd-hybrid <unfixed> (static)
280            - emboss <unfixd>
281            - cherokee <unfixed> (embed)
282            - oftc-hybrid 1.6.9.dfsg-1 (embed)
283            - ratbox-services <unfixed> (embed)
284            - squeak-vm <unfixed> (embed)
285            - tinymux <unfixed> (embed)
286    
287  tiff  tiff
288          - wxwindows2.4 2.2.1 (embed)          - wxwindows2.4 2.2.1 (embed)
289            - gamera 3.2.3-1 (embed)
290            - freeimage <unfixed> (embed)
291            - libtk-img <unfixed> (embed)
292            NOTE: there are two copies, one under tiff/ other under libtiff/
293            - gdal <unfixed>
294    
295  uudeview  uudeview
296          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
# Line 212  sqlite (not affected by security vulnera Line 300  sqlite (not affected by security vulnera
300          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
301          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
302          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
303            - heimdal <unfixed> (embed; bug #559616)
304    
305  util-linux/mount  util-linux/mount
306          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
307          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
308    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
309  sylpheed  sylpheed
310          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
311    
# Line 235  phpldapadmin Line 320  phpldapadmin
320  chmlib  chmlib
321          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
322    
323  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
324          - mplayer 1.0~rc2-14 (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
325          - kino 1.0.0-1          - kino 1.0.0-1
326          - vlc <not-affected> (Links dynamically since initial release)          - vlc <not-affected> (Links dynamically since initial release)
# Line 243  libavcodec/libavformat (source: ffmpeg) Line 328  libavcodec/libavformat (source: ffmpeg)
328          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
329          - motion 3.1.19-1          - motion 3.1.19-1
330          - gstreamer0.10-ffmpeg 0.10.3-2          - gstreamer0.10-ffmpeg 0.10.3-2
331          - xmovie <unfixed>          - xmovie <removed> (static)
332          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
333            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
334            - audacity 1.3.7-2 (embed; bug #512278)
335            - chromium-browser <unfixed> (fork)
336    
337  faad2  faad2
338          - mplayer 1.0~rc2-20 (embed)          - mplayer 1.0~rc2-20 (embed)
339            - avifile <unfixed> (embed; bug #538750)
340            - ffmpeg-debian <removed> (embed)
341    
342  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
343          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
344            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
345            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
346    
347  libdts  libdts
348          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 263  liba52 Line 354  liba52
354          - a52dec <unfixed> (embed)          - a52dec <unfixed> (embed)
355          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
356    
357  libmpeg2  mpeg2dec (libmpeg2)
         - mpeg2dec <unfixed> (embed)  
358          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
359    
360  curl  libmpeg3
361          - wget <unfixed> (embed)          - squeak-vm <unfixed> (embed)
362          NOTE: code for NTLM authentication  
363    libntlm
364            - wget <unfixed> (fork; bug #550436)
365            - curl <unfixed> (fork; bug #550437)
366            - cntlm <unfixed> (fork; bug #550438)
367    
368  uw-imap  uw-imap
369          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 278  uw-imap Line 372  uw-imap
372  imagemagick  imagemagick
373          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
374    
375    python-urlgrabber
376            - mercurial <unfixed> (embed; bug #531062)
377            - w3af <unfixed> (embed; bug #555372)
378            [experimental] - harvestman <unfixed> (embed; bug #555373)
379    
380    beautifulsoup
381            - python-mechanize <unfixed> (embed; bug #555349)
382            - zope2.11 <removed> (embed; bug #555350)
383            - twill <unknown> (embed)
384    
385  halibut  halibut
386          - nsis <unfixed> (fork)          - nsis <unfixed> (fork)
387    
# Line 308  fckeditor Line 412  fckeditor
412          - moin 1.8.2-2 (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
413          - karrigell <removed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
414          - gforge 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
415            - request-tracker3.8 <unfixed> (embed)
416            - otrs2 <unfixed> (embed)
417    
418  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
419          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
# Line 315  ipatlas (not packaged in Debian) Line 421  ipatlas (not packaged in Debian)
421  libphp-phpmailer  libphp-phpmailer
422          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
423          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
424          - symfony <unfixed> (embed)          - symfony <unfixed> (embed; bug #566778)
425          [etch] - phpgroupware <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
426          NOTE: phpgroupware-felamimail is only in etch          NOTE: phpgroupware-felamimail is only in etch
427          - egroupware <unfixed> (embed; bug #504283)          - egroupware <unfixed> (embed; bug #504283)
# Line 324  libphp-phpmailer Line 430  libphp-phpmailer
430  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
431          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
432    
433  giflib:  giflib
434          - wine <unfixed> (embed; bug #466181)          - wine <unfixed> (embed; bug #466181)
435    
436  bennu (not packaged in Debian, http://bennu.sourceforge.net)  bennu (not packaged in Debian, http://bennu.sourceforge.net)
437          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
438    
439  smarty:  smarty
440          - moodle 1.8.2-2 (embed; bug #471158)          - moodle 1.8.2-2 (embed; bug #471158)
441          - gallery2 2.2.5-2 (embed; bug #471160)          - gallery2 2.2.5-2 (embed; bug #471160)
442          - mahara 0.9.2-2 (embed; bug #471201)          - mahara 0.9.2-2 (embed; bug #471201)
# Line 366  libphp-adodb Line 472  libphp-adodb
472          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
473    
474  gzip  gzip
475          - linux-kernel <unfixed> (embed)          - linux-2.6 <unfixed> (embed) [lib/inflate.c]
         NOTE: lib/inflate.c  
476          - klibc <unfixed> (embed)          - klibc <unfixed> (embed)
477          NOTE: based on linux-kernel gzip code          NOTE: based on linux-kernel gzip code
478          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
479            - pristine-tar <unfixed> (modified-embed)
480            NOTE: compression code only, not uncompression
481            - ncompress <unfixed> (old-version)
482    
483  neon  neon
484          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
485          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
486          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
487            - litmus <removed> (embed; #395875)
488          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
489          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
490          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
491          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
492    
493  libmodplug  libmodplug
494          - gst-plugins-bad0.10 <unfixed> (embed)          - gst-plugins-bad0.10 0.10.10.2-1 (embed)
495    
496  libvncserver  libvncserver
497          - vino <unfixed> (embed)          - vino <unfixed> (embed)
# Line 390  libvncserver Line 499  libvncserver
499  putty  putty
500          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
501    
502  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
503          - filezilla <unfixed>          - filezilla <unfixed>
504            - crystalspace <unfixed> (embed)
505            - libwfut <unfixed> (embed)
506            - rarian <unfixed> (embed)
507            - bulletml <unfixed> (embed)
508            - pokerth <unfixed> (embed)
509            - qutecom <unfixed> (embed)
510            - sofa-framework <unfixed> (embed)
511            - yate <unfixed> (embed)
512            - antigrav <unfixed> (embed)
513            - balder2d <unfixed> (embed)
514            - cal3d <unfixed> (embed)
515            - criticalmass <unfixed> (embed)
516            - ember <unfixed> (embed)
517            - epiphany <unfixed> (embed)
518            - gambit <unfixed> (embed)
519            - noiz2sa <unfixed> (embed)
520            - ogre <unfixed> (embed)
521            - opencity <unfixed> (embed)
522            - openmovieeditor <unfixed> (embed)
523            - pouetchess <unfixed> (embed)
524            - tecnoballz <unfixed> (embed)
525            - trigger-rally <unfixed> (embed)
526            - xmoto <unfixed> (embed)
527            - mapnik <unknown> (embed)
528            NOTE: uses a different XML parser by default
529            - rrootage 0.23a-6 <embed>
530            NOTE: links to libbulltetml
531            - boson <unknown> (embed)
532            NOTE: the embedded code is unused
533    
534  gv  gv
535          - evince <unfixed> (embed)          - evince <unfixed> (embed)
536          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
537          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
538    
539  libXbae  libXbae
540          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <unfixed> (embed)
541          NOTE: from Cernlib  
542    libgtkhtml
543            - claws-mail-extra-plugins <unfixed> (fork)
544    
545  libXaw  libXaw
546          [etch] - libpawlib2-lesstif <unfixed>          - paw <unfixed> (embed)
         NOTE: from Cernlib  
547          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
548    
549  libgd2  libgd2
550          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
551          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
552          - wml <unfixed> (embed)          - wml 2.0.11ds2-1 (embed)
553          - libwmf <unfixed> (embed)          - libwmf <unfixed> (embed)
554          NOTE: derived from gd 1.6.3          NOTE: derived from gd 1.6.3
555            - texlive-bin 2009-1 (embed)
556    
557  rar  rar
558          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 443  librpcsecgss Line 582  librpcsecgss
582          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
583    
584  jasper  jasper
585          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
586    
587  libiris  libiris
588          - psi <unfixed> (embed)          - psi <unfixed> (embed)
# Line 460  libidn Line 598  libidn
598          - kdegames <unfixed> (embed)          - kdegames <unfixed> (embed)
599          NOTE: kdegames/kde4 embeds libiris which embeds libidn          NOTE: kdegames/kde4 embeds libiris which embeds libidn
600    
601  liblua  lua5.1
602          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
603          - nmap <unfixed> (embed; bug #527997)          - nmap 5.00-1 (embed; bug #527997)
604          NOTE: fixed upstream as of nmap svn rev13336.          [lenny] - nmap <unfixed> (embed; bug #527997)
605            - ocropus <unfixed> (embed)
606            - enigma <unfixed> (embed)
607            NOTE: requires lua built with C++
608            - freeciv <unfixed> (embed)
609            - spring <unfixed> (embed)
610    
611  libbotan  libbotan
612          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
# Line 476  libgc Line 619  libgc
619    
620  lzma  lzma
621          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
622            - xz-utils <unfixed> (fork)
623    
624  lzo  lzo
625          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
626    
627  yassl  yassl
628          - mysql-dfsg-5.0 <unfixed> (embed)          - mysql-dfsg-5.0 <unfixed> (embed)
629            - mysql-5.1 <unfixed> (embed)
630    
631  pax code  pax code
632          - tar <unfixed> (embed)          - tar <unfixed> (embed)
# Line 498  guichan Line 643  guichan
643  tolua  tolua
644          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
645          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
646            NOTE: actually tolua++
647            - ocropus <unfixed> (embed)
648            NOTE: actually tolua++
649            - freeciv <unfixed> (embed)
650            NOTE: actually tolua++
651            - enigma <unfixed> (embed)
652    
653  asio-dev  asio-dev
654          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
655    
656  xine-lib  xine-lib
657          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 529  plib1.8.4c2 Line 678  plib1.8.4c2
678          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
679    
680  fribidi  fribidi
681          - quesoglc <unfixed> (embed)          - quesoglc 0.7.2-2 (embed)
         NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system  
682    
683  glew  glew
684          - quesoglc <unfixed> (embed; bug #489341)          - quesoglc <unfixed> (embed; bug #489341)
685          NOTE: waiting on GLEW_MX version of glew (see bug #474488)          NOTE: waiting on GLEW_MX version of glew (see bug #474488)
686            - trigger 0.5.2.1-2 (embed)
687            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
688            - trigger-rally 0.5.2.1-2 (embed)
689            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
690            - chromium-browser 5.0.375.70~r48679-2
691    
692  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
693          - transcend <unfixed> (embed)          - transcend <unfixed> (embed)
# Line 550  cpio Line 703  cpio
703          - libarchive <unfixed> (embed)          - libarchive <unfixed> (embed)
704          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
705    
706    kde4libs
707            - kdelibs <unfixable> (old-version)
708    
709  webkit  webkit
710          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed; bug #479851)
711            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
712            - kde4libs <unfixable> (fork)
713            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
714            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
715            - chromium-browser <unfixed> (fork)
716    
717  ftgl  ftgl
718          - blender 2.46+dfsg-1 (embed)          - blender 2.46+dfsg-1 (embed)
# Line 560  wv Line 721  wv
721          - abiword <unfixed>          - abiword <unfixed>
722    
723  qemu  qemu
724          - kvm <unfixed> (embed)          - kvm <removed> (embed; bug #543159)
725          - xen-3 <unfixed> (embed)          - qemu-kvm <unfixed> (embed; bug #560853)
726          - xen-unstable <unfixed> (embed)          NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
727            - xen-3 3.4.2-2 (embed; bug #560856)
728            - xen-unstable <unfixed> (embed; bug #560856)
729    
730    vgabios
731            - kvm <removed> (embed; bug #489442)
732            - qemu-kvm <unfixed> (embed)
733    
734  bochs  bochs
735          - kvm <unfixed> (embed; bug #489442)          - kvm <removed> (embed; bug #489442)
736            - qemu-kvm <unfixed> (embed)
737    
738  speex  speex
739          - vorbis-tools <unfixed> (embed)          - vorbis-tools <unfixed> (embed)
# Line 573  speex Line 741  speex
741          - gst-plugins-good0.10 <unfixed> (embed)          - gst-plugins-good0.10 <unfixed> (embed)
742          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
743          - libfishsound <unfixed> (embed)          - libfishsound <unfixed> (embed)
744          - libannodex <unfixed> (embed)          - libannodex <removed> (embed)
745          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
746          - xmms-speex <unfixed> (embed)          - xmms-speex <unfixed> (embed)
747          - libsdl-sound1.2 <unfixed> (embed)          - libsdl-sound1.2 <unfixed> (embed)
748          - sweep <unfixed> (embed)          - sweep <unfixed> (embed)
749    
750  libreadline  libreadline
751          - magic <unfixed> (old-version)          - magic <itp> (old-version)
         NOTE: magic is currently an RFS  
752    
753  opcode  opcode
754          - ode <unfixed> (embed)          - ode <unfixed> (embed)
# Line 597  mochikit Line 764  mochikit
764          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
765          NOTE: they require extra patches, still unmerged upstream          NOTE: they require extra patches, still unmerged upstream
766          - ntop <unfixed> (embed)          - ntop <unfixed> (embed)
767          - coherence <unfixed> (embed)          - coherence 0.6.2-1 (embed)
         NOTE: python-coherence  
768          - paste <unfixed> (embed)          - paste <unfixed> (embed)
         NOTE: python-paste  
769          - turbogears <unfixed> (embed)          - turbogears <unfixed> (embed)
770          NOTE: python-turbogears          - plone3 <removed> (embed)
771          - plone3 <unfixed> (embed)          - xulrunner <unfixed> (embed)
772          NOTE: zope-plone3          - libjifty-plugin-chart-perl <unfixed> (embed)
773            - sabnzbdplus <unfixed> (embed)
774  prototype          - tgmochikit <unfixed> (embed)
775          - netbeans-ide <unfixed> (embed)  
776          - auth2db-frontend <unfixed> (embed)  prototypejs
777          - webcit <unfixed> (embed)          - netbeans-ide 6.0.1+dfsg-2 (embed)
778          NOTE: citadel-webcit          - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
779          - asterisk <unfixed> (embed)          - webcit <unfixed> (embed; bug #555219)
780          - doc-iana <unfixed> (embed)          - asterisk 1:1.6.2.0~rc3-1 (embed)
781          - libaws <unfixed> (embed)          - libjson-ruby 1.1.4-1 (embed; bug #555224)
782          NOTE: libaws-doc          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
783          - libgettext-ruby <unfixed> (embed)          - horde3 <unfixed> (embed)
784          NOTE: libgettext-ruby-data          - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
785          - libjson-ruby <unfixed> (embed)          - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
786          NOTE: libjson-ruby-doc          - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
787          - lucene2 <unfixed> (embed)          - ebug-http <unfixed> (embed; bug #555236)
788          NOTE: liblucene2-java-doc          - libaws 2.7-1 (embed; bug #555222)
         - libopenid-ruby <unfixed> (embed)  
         - solr <unfixed> (embed)  
         NOTE: solr-common  
         - glpi <unfixed> (embed)  
         - hobbix <unfixed> (embed)  
         - mnemo2 <unfixed> (embed)  
         - nag2 <unfixed> (embed)  
         - knowledgeroot <unfixed> (embed)  
         - mediatomb <unfixed> (embed)  
         NOTE: mediatomb-common  
         - mt-daapd <unfixed> (embed)  
         - op-panel <unfixed> (embed)  
         - ebug-http <unfixed> (embed)  
789          - phpgedview <removed> (embed)          - phpgedview <removed> (embed)
790          - poker-network <unfixed> (embed)          - poker-network 1.7.6-1 (embed; bug #555238)
791          NOTE: poker-web          - rails 2.1.0-6 (embed)
792          - webhelpers <unfixed> (embed)          - wordpress 2.5.0-2 (embed; bug #555243)
793          NOTE: python-webhelpers          - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
794          - qwik <unfixed> (embed)          TODO: search through all of the other zope packages
         - rails <unfixed> (embed)  
         - typo3-src <unfixed> (embed)  
         - wordpress <unfixed> (embed)  
         - zope <unfixed> (embed)  
         NOTE: zope-plone3  
         - smokeping <unfixed> (embed)  
795          - ampache 3.4.1-2 (embed)          - ampache 3.4.1-2 (embed)
796          - exaile <unfixed> (embed)          - exaile 0.2.14+debian-2.1 (embed; bug #555245)
797          - hobix <unfixed> (embed)          - hobix 0.5~svn20070319-4 (embed; bug #555247)
798          - pixelpost <unfixed> (embed)          - zabbix 1.6.6-4 (embed; bug #555250)
799          - symfony <unfixed> (embed)          - chora2 2.1.1+debian0-1 (embed; bug #555253)
800          NOTE: it's been said that there are custom changes          - gollem 1.1.1+debian0-1 (embed; bug # 555254)
801          - zabbix <unfixed> (embed)          - jscropperui 1.2.1-1 (embed; bug #555257)
802          NOTE: zabbix-frontend-php          - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
803          - turba2 <unfixed> (embed)          - ingo1 1.2.3+debian0-1 (embed; bug #555261)
804            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
805            - activeldap 1.2.1-1 (embed)
806            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
807            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
808            - otrs2 2.3.4-6 (embed; bug #555267)
809            - webcalendar 1.2~b1-2 (embed; bug #555269)
810            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
811            - jifty 0.90519-1 (embed; bug #555271)
812            - jquery 1.4-1 (embed; bug #555272)
813            - passenger 2.2.5debian1-1 (embed; bug #555273)
814            - plone3 <removed> (embed; bug #555275)
815            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
816            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
817            - xulrunner <unfixed> (embed)
818            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
819            - jclicmoodle <unfixed> (embed)
820            - git-cola <unfixed> (embed)
821    
822  gdb  gdb
823          - insight <unfixed> (embed)          - insight <unfixed> (embed)
# Line 677  java Line 840  java
840    
841  libphp-snoopy  libphp-snoopy
842          - ampache 3.4.1-2 (embed; bug #504169)          - ampache 3.4.1-2 (embed; bug #504169)
843            - gforge 4.6.99+svn6094-2 (embed)
844          - mahara 1.0.5-2 (embed; bug #504170)          - mahara 1.0.5-2 (embed; bug #504170)
845          - pixelpost <unfixed> (embed; bug #504171)          - pixelpost 1.7.1-5 (embed; bug #504171)
846          - mediamate 0.9.3.6-5 (embed; bug #504172)          - mediamate 0.9.3.6-5 (embed; bug #504172)
847          - opendb <unfixed> (embed; bug #504173)          - opendb <removed> (embed; bug #504173)
848            [etch] - opendb <unfixed> (embed; bug #504173)
849          - wordpress 2.5.1-9 (embed; bug #443948)          - wordpress 2.5.1-9 (embed; bug #443948)
850          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
851          [etch] - phpgroupware <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
# Line 689  libphp-snoopy Line 854  libphp-snoopy
854    
855  jquery  jquery
856          - zekr <unfixed> (embed)          - zekr <unfixed> (embed)
857          - wordpress <unfixed> (embed)          - wordpress <unknown> (embed)
858          - yocto-reader <unfixed> (embed)          - yocto-reader <unfixed> (embed)
859          - textpattern <unfixed> (embed)          - textpattern <unfixed> (embed)
860          - genshi 0.5.1-1 (embed)          - genshi 0.5.1-1 (embed)
861          NOTE: compressed file under examples/ dir          NOTE: compressed file under examples/ dir
862          - prewikka <unfixed> (embed)          - prewikka <unfixed> (embed)
863          - libramaze-ruby <unfixed> (embed)          - libramaze-ruby <unfixed> (embed)
864          - drupal5 <unfixed> (embed)          - drupal6 <unfixed> (embed)
865          - b2evolution <unfixed> (embed)          - b2evolution <unfixed> (embed)
866          - wesnoth <unfixed> (embed)          - wesnoth <unfixed> (embed)
867    
# Line 706  tablesorter (jquery plugin, not packaged Line 871  tablesorter (jquery plugin, not packaged
871  kses  kses
872          - wordpress <unfixed> (embed; bug #504242)          - wordpress <unfixed> (embed; bug #504242)
873          NOTE: their copy has all methods renamed to wp_<foo>          NOTE: their copy has all methods renamed to wp_<foo>
874            NOTE: kses isn't in Debian, RFP: #504240
875          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
876          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
877    
# Line 714  magpierss Line 880  magpierss
880          - moodle <unfixed>          - moodle <unfixed>
881    
882  php-gettext  php-gettext
883          - wordpress <unfixed> (embed; bug #504242)          - wordpress 2.8.4-1 (embed; bug #504242)
884            - docbookwiki <unfixed> (embed)
885            - knowledgeroot 0.9.9.5-1
886            NOTE: non-free
887    
888  libphp-ixr (name may change, it is the Incutio XML-RPC)  libphp-ixr (name may change, it is the Incutio XML-RPC)
889          - wordpress <unfixed> (embed; bug #504242)          - wordpress <unfixed> (embed; bug #504242)
890            NOTE: libphp-ixr isn't in Debian, RFP: #504236
891          - dokuwiki <unfixed> (embed)          - dokuwiki <unfixed> (embed)
892          - textpattern <unfixed> (embed)          - textpattern <unfixed> (embed)
893    
894  libphp-cas  libphp-cas
895          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
896          - moodle <unfixed> (embed; bug #496069)          - moodle <unfixed> (embed; bug #505984)
897    
898  scriptaculous  scriptaculous (prototype.js is among the embeds in the following)
899          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
900          - libaws <unfixed> (embed)          - libaws <unfixed> (embed; bug #555222)
         NOTE: libaws-doc  
901          - op-panel <unfixed> (embed)          - op-panel <unfixed> (embed)
902          - symfony <unfixed> (embed)          - symfony <unfixed> (embed)
903          NOTE: maintainer says there are extra incompatible changes required          NOTE: maintainer says there are extra incompatible changes required
904          - pixelpost <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
905          - webhelpers <unfixed> (embed)          - webhelpers <unfixed> (embed)
906          NOTE: python-webhelpers          - qwik <removed> (embed; bug #555241)
         - qwik <unfixed> (embed)  
907          - smokeping <unfixed> (embed)          - smokeping <unfixed> (embed)
908          - turba2 <unfixed> (embed)          - turba2 <unfixed> (embed)
909          - typo3-src 4.2.3-1 (embed)          - typo3-src 4.2.3-1 (embed)
910            - request-tracker3.6 <unfixed> (embed)
911            - request-tracker3.8 <unfixed> (embed)
912            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
913            - wordpress 2.5.0-2 (embed)
914            - libhtml-prototype-perl 1.48-3 (embed)
915    
916  libmarkdown-php  libmarkdown-php
917          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
918          - pixelpost <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
919    
920  php-openid  php-openid
921          - wordpress-openid <itp> (embed)          - wordpress-openid 3.3.2-1 (embed)
922    
923  geshi  geshi
924          - dokuwiki 0.0.20080505-3.1 (embed)          - dokuwiki 0.0.20080505-3.1 (embed)
# Line 753  geshi Line 926  geshi
926          - websvn 2.1.0-1 (embed)          - websvn 2.1.0-1 (embed)
927    
928  webcalendar  webcalendar
929          - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)          - gforge 4.7~rc2-6 (embed; bug #504758)
930    
931  libical  libical
932          - kdepim <unfixed> (fork)          - kdepim <unknown> (fork)
933          - kdepimlibs <unfixed> (fork)          NOTE: fixed at some point during 4.0
934          NOTE: fixed in KDE4 post 4.1.x series          - kdepimlibs 4.2.0-1 (fork)
935            - claws-mail-extra-plugins <unfixed> (fork)
 libltdl3  
         - kdelibs <unfixed> (embed)  
         NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it  
         - synfig <unfixed> (embed)  
936    
937  harfbuzz  harfbuzz
938          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
939            - pango1.0 <unfixed> (embed)
940            - fontmatrix <unfixed> (embed)
941    
942  libzip  libzip
943          - php5 <unfixed> (fork)          - php5 <unfixable> (modified-embed)
944            - odt2txt <unfixed> (embed; bug #523808)
945    
946  json.php (not packaged; should be replaced with php's built-in functions)  json.php (not packaged; should be replaced with php's built-in functions)
947          - moodle <unfixed>          - moodle <unfixed>
# Line 811  rssparser (http://nwow.org) Line 983  rssparser (http://nwow.org)
983    
984  lcms  lcms
985          - openjdk-6 <unfixed> (fork)          - openjdk-6 <unfixed> (fork)
986            - gimp 2.4.0~rc2-2
987    
988  libphp-phplayersmenu  libphp-phplayersmenu
989          - diogenes <unfixed>          - diogenes <unfixed>
# Line 823  libphp-pclzip Line 996  libphp-pclzip
996    
997  libphp-simplepie  libphp-simplepie
998          - dokuwiki <unfixed>          - dokuwiki <unfixed>
999            - wordpress <unfixed>
1000    
1001  libphp-jpgraph  libphp-jpgraph
1002          - egroupware <unfixed>          - egroupware <unfixed>
# Line 831  php-simpletest Line 1005  php-simpletest
1005          - moodle <unfixed>          - moodle <unfixed>
1006    
1007  libpng  libpng
1008          - iceweasel <unfixed> (embed)          - iceweasel <not-affected> (uses xulrunner)
1009          NOTE: 3.0 uses embedded copy, 2.0 uses system libpng          - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
         - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)  
1010          - iceape 1.0.13~pre080614i-0etch1 (embed)          - iceape 1.0.13~pre080614i-0etch1 (embed)
1011          - xulrunner <unfixed> (embed)          - xulrunner 1.9.0.13-1 (embed)
1012          NOTE: Debian 1.9.0.6 uses embedded copy          [lenny] - xulrunner 1.9.0.11-0lenny1
1013          NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng          [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1014          - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)          - gamera 3.2.3-1 (embed)
1015          NOTE: Ubuntu only          - freeimage <unfixed> (embed)
1016          - firefox-3.0 <unfixed> (embed)          - tuxonice-userui <unfixed> (static)
         NOTE: Ubuntu only  
         - firefox-3.1 <unfixed> (embed)  
         NOTE: Ubuntu only  
         - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)  
         NOTE: Ubuntu only  
         - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)  
         NOTE: Ubuntu only  
         - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)  
         NOTE: Ubuntu only  
1017    
1018  irssi  irssi
1019          - silc-client <unfixed> (embed)          - silc-client <unfixed> (embed)
# Line 867  libitext-java Line 1031  libitext-java
1031          - bouncycastle 2.1.4-1 (embed)          - bouncycastle 2.1.4-1 (embed)
1032    
1033  python-ply  python-ply
1034          - pyke <unfixed> (embed)          - pyke <unfixed> (embed; bug #555363)
1035            - pywbem 0.7.0-4 (embed; bug #555364)
1036            - sepolgen <unfixed> (embed; bug #555365)
1037            - zope-textindexng3 <unknown> (embed)
1038            - iceweasel <not-affected> (uses xulrunner)
1039            - xulrunner <unknown> (embed)
1040            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1041    
1042  libdumbnet (libdnet upstream)  libdumbnet (libdnet upstream)
1043          - nmap <unfixed> (fork)          - nmap <unfixed> (fork)
1044    
1045    gcc-4.4
1046            - gcc-mingw32 <unfixed> (embed)
1047    
1048    camlimages
1049            - advi <unfixed> (static; bug #550441)
1050    
1051    memcached
1052            - memcachedb <unfixed> (embed)
1053    
1054    yajl
1055            - argyll <unfixed> (embed; bug #544223)
1056            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1057    
1058    nusoap
1059            - gforge 4.8.2-1 (embed)
1060            - ampache <unfixed> (embed)
1061            - poker-network <unfixed> (embed)
1062            - moodle <unfixed> (embed)
1063            NOTE: code is not used when running under php5 and soap is enabled
1064            - phpwiki <unfixed> (embed)
1065            - gallery2 <unfixed> (embed)
1066            - typo3-src <unfixed> (embed)
1067            - phpgacl 3.3.7-7 (embed)
1068            - mantis 1.1.8+dfsg-1 (embed)
1069    
1070    libept
1071            - adept <unfixed> (embed; bug #540649)
1072    
1073    libvorbis
1074            - iceweasel <not-affected> (uses xulrunner)
1075            - xulrunner <unfixed> (embed; bug #540959)
1076            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1077            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1078            - iceape <unfixed> (embed)
1079            [etch] - iceape <not-affected> (introduced in 2.0)
1080            [lenny] - iceape <not-affected> (introduced in 2.0)
1081    
1082    cairo
1083            - iceweasel <not-affected> (uses xulrunner)
1084            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1085    
1086    liboggz
1087            - iceweasel <not-affected> (uses xulrunner)
1088            - xulrunner <unfixed> (embed; bug #540959)
1089            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1090            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1091            - iceape <unfixed> (embed)
1092            [etch] - iceape <not-affected> (introduced in 2.0)
1093            [lenny] - iceape <not-affected> (introduced in 2.0)
1094    
1095    liboggplay
1096            - iceweasel <not-affected> (uses xulrunner)
1097            - xulrunner <unfixed> (embed; bug #540959)
1098            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1099            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1100            - iceape <unfixed> (embed)
1101            [etch] - iceape <not-affected> (introduced in 2.0)
1102            [lenny] - iceape <not-affected> (introduced in 2.0)
1103    
1104    php-net-dnsbl
1105            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1106    
1107    php-onyx-rss
1108            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1109    
1110    php-text-wiki
1111            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1112    
1113    php-xml-rpc
1114            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1115    
1116    polarssl (does not have a shared library)
1117            - pdkim <itp> (embed; bug #543150)
1118            - xyssl <unfixed> (old-version)
1119    
1120    pidgin (libpurple)
1121            - gaim <removed> (old-version)
1122            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1123    
1124    icu
1125            - webkit 1.0.1-1 (embed; bug #547214)
1126            - texlive-bin <unfixed> (fork)
1127            NOTE: texlive upstream working with icu upstream to merge their changes
1128            - chromium-browser 5.0.375.29~r46008-3
1129    
1130    cyrus-imapd-2.2
1131            - kolab-cyrus-imapd <unfixed> (fork)
1132            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1133    
1134    python-cxx-dev
1135            - freecad 0.9.2646.3-1 (embed; bug #547936)
1136    
1137    zipios++
1138            - freecad 0.9.2646.3-1 (embed; bug #547941)
1139            - enigma 0.92.3-3 (embed)
1140            NOTE: likely fixed earlier, marking etch's version as fixed
1141    
1142    linux-2.6
1143            - kvm <removed> (embed; bug #549973) [./kernel/*]
1144            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1145            - kernel-source-2.6.8 <removed> (old-version)
1146            - kernel-source-2.4.27 <removed> (old-version)
1147            - kernel-source-2.4.24 <removed> (old-version)
1148            - kernel-source-2.2.25 <removed> (old-version)
1149            - kernel-source-2.2.20 <removed> (old-version)
1150    
1151    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1152            - kvm <removed> (embed) [./libfdt/*]
1153            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1154    
1155    qweb (not packaged)
1156            - ajaxterm <unfixed>
1157    
1158    opensaml2
1159            - opensaml <removed> (old-version)
1160    
1161    shibboleth-sp2
1162            - shibboleth-sp <removed> (old-version)
1163    
1164    tuxonice-userui
1165            - suspend2-userui <removed> (old-version)
1166    
1167    expat
1168            - w3c-libwww <removed> (embed; bug #551941)
1169            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1170            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1171            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1172            - python2.4 <unfixable> (embed; bug #553403)
1173            - python2.7 2.7-6 (embed)
1174            - python-4suite <unfixed> (embed; bug #516935)
1175            - wxwindows2.4 <removed> (embed)
1176            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1177            - wxwidgets2.8 2.8.10.1-2 (embed)
1178            - celementtree 1.0.5-8 (embed)
1179            NOTE: Maybe that was fixed even earlier
1180            - audacity 1.3.2-1 (embed)
1181            - matanza <unfixed> (embed)
1182            - tdom 0.8.3~20080525-1 (embed)
1183            - udunits 2.1.8-4 (embed)
1184            - apr-util 1.2 (embed)
1185            - ayttm <unfxed> (embed; bug #561006)
1186            - cableswig <unfixed> (embed)
1187            - cadaver <unfixed> (embed)
1188            - cmake 2.6.0-6 (embed)
1189            - coin3 <unfixed> (embed)
1190            - gdcm 2.0.14-2 (embed)
1191            - ghostscript 8.71~dfsg-2 (embed)
1192            - grmonitor <removed> (embed)
1193            - iceape <unfixed> (embed)
1194            - insighttoolkit 3.16.0-1 (embed)
1195            NOTE: insighttoolkit might've been fixed earlier
1196            - libparagui1.1 1.0.2-1 (embed)
1197            - paraview 3.6.2-1 (embed)
1198            - poco 1.3.6p1-1 (embed)
1199            - simgear <unfixed> (embed)
1200            - sitecopy 1:0.16.0-1
1201            - smart <unfixed> (embed)
1202            NOTE: smart embeds celementree, and it includes expat
1203            - swish-e <not-affected> (Linked against libxml, which is used instead)
1204            - tla 1.3.5+dfsg-15 (embed)
1205            - vtk 4.1.20030227-1 (embed)
1206            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1207            - xmlrpc-c <unfixed> (embed)
1208            - iceweasel <unfixed> (embed)
1209            - kompozer <unfixed> (embed)
1210            - vxl 1.13.0-2 (embed)
1211            - xulrunner <unfixed> (embed)
1212            - apache2 2.2 (embed)
1213            - texlive-bin <not-affected> (Embedded code not compiled in)
1214            - vnc4 <unfixed> (embed)
1215            - xotcl 1.6.6-1 (embed)
1216            - chromium-browser 5.0.375.29~r46008-3
1217    
1218    xerces-c
1219            - xerces-c2 <unfixed> (old-version)
1220            - xerces27 <removed> (old-version)
1221    
1222    md5 (RSA's version; not the gnu version provided by coreutils)
1223            - w3c-libwww <removed> (embed; bug #551942)
1224            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1225    
1226    libparagui1.1
1227            - asc <unfixable> (fork)
1228    
1229    enet
1230            - sauerbraten <unfixed> (embed; #497194)
1231    
1232    eglibc
1233            - glibc <removed> (old-version)
1234            - mksh <unfixable> (static)
1235              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1236    
1237    galib
1238            - gamera 3.2.3-1 (embed)
1239    
1240    configobj
1241            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1242            - elisa <unfixed> (embed; bug #555337)
1243            - gaupol <unfixed> (embed; bug #555338)
1244            - ipython <unfixed> (embed; bug #555339)
1245            - pida <unfixed> (embed; bug #555340)
1246            - psychopy <unfixed> (embed; bug #555341)
1247            - rest2web <unfixed> (embed; bug #555342)
1248            - auth2db <unknown> (embed)
1249            - dynagen <unknown> (embed)
1250            - iceweasel <unknown> (embed)
1251            - sabnzbdplus <unknown> (embed)
1252            - xulrunner <unknown> (embed)
1253            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1254    
1255    python-clientform
1256            - bibus <unfixed> (embed; bug #555332)
1257            - zope2.10 <unfixed> (embed; bug #555333)
1258            - zope2.11 <removed> (embed; bug #555334)
1259            - python-mechanize <unknown> (embed)
1260            - twill <unknown> (embed)
1261    
1262    python-mechanize
1263            - zope2.10 <unfixed> (embed; bug #555337)
1264            - zope2.11 <removed> (embed; bug #555338)
1265            - twill <unknown> (embed; bug #555339)
1266    
1267    pexpect
1268            - duplicity 0.6.06-1 (embed; bug #555361)
1269            - hplip <unfixed> (embed; bug #555362)
1270            - smart <unfixed> (embed; bug #555363)
1271    
1272    pyparsing
1273            - bauble <unfixed> (embed; bug #555366)
1274            - boa-constructor 0.6.1-8 (embed; bug #555367)
1275            - calibre <unfixed> (embed; bug #555368)
1276            - matplotlib <unfixed> (embed; bug #531024)
1277            - zhpy 1.7.3.1-1 (embed; bug #555370)
1278            - polybori <unknown> (embed)
1279            - python-whoosh <unknown> (embed)
1280            - twill <unknown> (embed)
1281            - zope-textindexng3 <unknown> (embed)
1282    
1283    python-pysqlite2
1284            - python2.4 <unfixed> (embed; bug #553403)
1285            - python2.5 <unfixed> (embed; bug #553403)
1286    
1287    celementtree
1288            - python2.5 <unfixed> (embed)
1289            - smart <unfixed> (embed)
1290    
1291    elementtree
1292            - python2.5 <unfixed> (embed)
1293            - python2.6 <unfixed> (embed)
1294            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1295            - gedit 2.28.2-1 (embed; bug #555344)
1296            - smart <unfixed> (embed)
1297            - solfege <unfixed> (embed; bug #555345)
1298            - w3af <unfixed> (embed; bug #555346)
1299            - python-qt4 <unknown> (embed)
1300            - sphinx <unknown> (embed)
1301            - python-nltk <itp> (embed)
1302    
1303    python2.5
1304            - python2.4 <unfixed> (old-version)
1305            - jython <unfixed> (embed)
1306            NOTE: embeds many stdlib modules
1307            - python-django <unfixed> (embed; bug #555419)
1308            NOTE: embeds stdlib modules: doctest, decimal
1309            - gamera 3.2.3-1 (embed)
1310            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1311            - boa-constructor <unfixed> (embed; bug #555426)
1312            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1313            - nicotine <unfixed> (embed; bug #555427)
1314            NOTE: embeds stdlib modules: ConfigParser
1315            - museek+ <unfixed> (embed; bug #555428)
1316            NOTE: embeds stdlib modules: ConfigParser
1317            - vegastrike-data <removed> (embed)
1318            NOTE: embeds many stdlib modules
1319            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1320            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1321            - config-manager <unfixed> (embed; bug #555423)
1322            NOTE: embeds stdlib modules: optparse
1323            - jhbuild 2.28.0-1 (embed; bug #555421)
1324            NOTE: embeds stdlib modules: optparse, subprocess
1325            - smart <unfixed> (embed; bug #555432)
1326            NOTE: embeds stdlib modules: optparse
1327            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1328            NOTE: embeds stdlib modules: doctest
1329            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1330            NOTE: embeds stdlib modules: doctest
1331            - distribute <unfixed> (embed)
1332            NOTE: embeds stdlib modules: doctest
1333            - python-setuptools <unfixed> (embed; bug #555435)
1334            NOTE: embeds stdlib modules: doctest
1335            - zope.testing <unfixed> (embed; bug #555436)
1336            NOTE: embeds stdlib modules: doctest
1337            - translate-toolkit <unfixed> (embed; bug #555422)
1338            NOTE: embeds stdlib modules: textwrap, contextlib
1339            - libtpclient-py <unfixed> (embed; bug #555424)
1340            NOTE: embeds stdlib modules: subprocess
1341            - grass <unfixed> (embed; bug #555425)
1342            NOTE: embeds stdlib modules: subprocess
1343            - coherence <unfixed> (embed; bug #555429)
1344            NOTE: embeds stdlib modules: uuid
1345            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1346            NOTE: embeds stdlib modules: uuid
1347            - setroubleshoot <removed> (embed; bug #555431)
1348            NOTE: embeds stdlib modules: uuid
1349            - linkchecker <unfixed> (embed; bug #555414)
1350            NOTE: embeds msgfmt.py script
1351            - imdbpy <unfixed> (embed)
1352            NOTE: embeds msgfmt.py script
1353            - kiwi <unfixed> (embed)
1354            NOTE: embeds msgfmt.py script
1355            - moin <unfixed> (embed)
1356            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1357            - plone3 <removed> (embed)
1358            NOTE: embeds msgfmt.py script
1359            - roundup <unfixed> (embed)
1360            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1361            - rednotebook <unfixed> (embed; bug #555415)
1362            NOTE: embeds msgfmt.py script
1363            - turbogears <unfixed> (embed)
1364            NOTE: embeds msgfmt.py script
1365            - elisa <unfixed> (embed)
1366            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1367            - calibre <unfixed> (embed)
1368            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1369            - mailman 1:2.1.13-1 (embed; #555416)
1370            NOTE: embeds msgfmt.py script
1371            - python-docutils <unknown> (embed)
1372            NOTE: embeds stdlib modules: optparse, textwrap
1373            - python-imaging <unknown> (embed)
1374            NOTE: embeds stdlib modules: doctest
1375            - python-mechanize <unknown> (embed)
1376            NOTE: embeds stdlib modules: doctest
1377            - twill <unknown> (embed)
1378            NOTE: embeds stdlib modules: subprocess
1379            - zeroc-ice <unknown> (embed)
1380            NOTE: embeds stdlib modules: subprocess
1381            - wxwidgets2.8 <unknown> (embed)
1382            NOTE: embeds stdlib modules: subprocess
1383            - cycle <unknown> (embed)
1384            NOTE: embeds msgfmt.py script
1385            - deluge <unknown> (embed)
1386            NOTE: embeds msgfmt.py script
1387            - opendict <unknown> (embed)
1388            NOTE: embeds msgfmt.py script
1389            - openerp-client <unknown> (embed)
1390            NOTE: embeds msgfmt.py script
1391            - rapidsvn <unknown> (embed)
1392            NOTE: embeds msgfmt.py script
1393            - wammu <unknown> (embed)
1394            NOTE: embeds msgfmt.py script
1395            - gaphor <unknown> (embed)
1396            NOTE: embeds msgfmt.py script
1397            - pida <unknown> (embed)
1398            NOTE: embeds msgfmt.py script
1399            - python-formencode <unknown> (embed)
1400            NOTE: embeds msgfmt.py script
1401            - duplicity <unfixed> (embed)
1402            NOTE: embeds stdlib module: urlparse, tarfile
1403            - pygopherd <unfixed> (embed)
1404            NOTE: embeds stdlib module: zipfile
1405    
1406    argparse
1407            - twill <unfixed> (embed; bug #555347)
1408            - ipython <unfixed> (embed; bug #555348)
1409    
1410    coherence
1411            - elisa <unfixed> (embed; bug #555335)
1412    
1413    simpletal
1414            - plastex <unfixed> (embed; bug #555371)
1415    
1416    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1417            - postr <unfixed> (embed)
1418            - elisa <unfixed> (embed)
1419    
1420    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1421            - apertium-tolk <unfixed> (embed)
1422            - ipython <unfixed> (embed)
1423            - virtaal <unfixed> (embed)
1424    
1425    distribute
1426            - setuptools <removed> (old-version)
1427    
1428    rails
1429            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1430            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1431            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1432            - thin <unfixed> (embed) [./spec/rails_app/*]
1433            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1434            NOTE: be dangerous if developers are naively basing their code off of the examples
1435            NOTE: prototype.js is among the example files
1436    
1437    lucene2 (prototype.js is among the embeds in the following)
1438            - lucene <unfixed> (old-version)
1439            - pylucene <unfixed> (embed)
1440            - libpdfbox-java <unfixed> (embed)
1441            - libfontbox-java <unfixed> (embed)
1442            - libjempbox-java <unfixed> (embed)
1443            - solr <unfixed> (embed)
1444    
1445    unicode-data
1446            - syslinux <unfixed> (embed)
1447            - camomile <unfixed> (embed)
1448            - fribidi <unfixed> (embed)
1449            - m17n-db <unfixed> (embed)
1450            - sbcl <unfixed> (embed)
1451            - heimdal <unfixed> (embed)
1452            - icu <unfixed> (embed)
1453            - icu4j <unfixed> (embed)
1454            - krb5 <unfixed> (embed)
1455            - moodle <unfixed> (embed)
1456            - openldap <unfixed> (embed)
1457            - pike7.6 <unfixed> (embed)
1458            - samba <unfixed> (embed)
1459            - samba4 <unfixed> (embed)
1460            - cmucl <unfixed> (embed)
1461            - typo3-src <unfixed> (embed)
1462            - mauve <unfixed> (embed)
1463            - texlive-bin <unfixed> (embed)
1464            - ypsilon <unfixed> (embed)
1465            - jeuclid <unfixed> (embed)
1466            - charmap.app <unfixed> (embed)
1467            - clisp <unfixed> (embed)
1468            - gnulib <unfixed> (embed)
1469            - opensrs-client <unfixed> (embed)
1470            - saxonb <unfixed> (embed)
1471            - rails <unfixed> (embed)
1472    
1473    feedparser
1474            - rawdog <unfixed> (embed; bug #383422)
1475            - miro <unfixed> (embed; bug #555351)
1476            - calibre <unfixed> (embed; bug #555352)
1477            - freevo <unfixed> (embed; bug #555353)
1478            - pida <unfixed> (embed; bug #555354)
1479            - planet-venus <unfixed> (embed; bug #555355)
1480            - plone3 <removed> (embed; bug #555356)
1481            - exaile 0.2.14+debian-1 (embed)
1482            - screenlets 0.1.2-3 (embed)
1483            NOTE: included twice
1484    
1485    agg:
1486            - matplotlib <unfixed> (embed: bug #377271)
1487            - contextfree <unfixed> (embed)
1488            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1489            - exactimage <unfixed> (embed)
1490            - python-enable <unfixed> (embed)
1491            - mapnik 0.5.1-3 (embed)
1492            NOTE: links statically to agg, but shared library is not available (bug #377271)
1493    
1494    vtk
1495            - paraview <unfixable> (embed; bug #495426)
1496    
1497    txt2tags
1498            - rednotebook <unfixed> (embed)
1499    
1500    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1501            - gajim <unfixed> (embed)
1502            - emesene <unfixed> (embed)
1503            - convirt <unfixed> (embed)
1504            - pida <unfixed> (embed)
1505            - rednotebook <unfixed> (embed)
1506    
1507    horde3 (prototype.js is among the embeds in the following)
1508            - mnemo2 <unfixed> (embed)
1509            - nag2 <unfixed> (embed)
1510            - wordpress <unfixed> (embed)
1511            NOTE: Text_Diff (wp-includes/Text/Diff*)
1512    
1513    cimg
1514            - gmic <unfixed> (embed)
1515    
1516    mootools
1517            - kdenetwork <unfixed> (embed)
1518            - gallery <unfixed> (embed)
1519            - jspwiki <unfixed> (embed)
1520            - vdr-plugin-live <unfixed> (embed)
1521            - perl-doc-html <unfixed> (embed)
1522    
1523    openldap
1524            - openldap2.3 <removed> (old-version)
1525    
1526    grub2
1527            - grub <unfixed> (old-version)
1528    
1529    gnupginterface
1530            - duplicity <unfixed> (embed)
1531    
1532    python-dateutil
1533            - awn-extras-applets <unfixed> (embed)
1534            - matplotlib <unknown> (embed)
1535    
1536    cups
1537            - cupsys <removed> (old-version)
1538    
1539    yui
1540            - bcfg2 <not-affected> (present in source but not included in any binary files)
1541            - serendipity 1.5.3-1 (embed; bug #557746)
1542            - moodle 1.8.2.dfsg-5 (embed)
1543            - jifty 0.91117-1 (embed; bug #557748)
1544            - webgui 7.7.26-1 (embed)
1545            - loggerhead 1.17-1 (embed)
1546            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1547    
1548    quake3 (vanilla source not packaged in debian)
1549            - openarena <unfixable> (fork)
1550    
1551    quake2 (vanilla source not packaged in debian)
1552            - alien-arena <unfixable> (fork)
1553            - warsow <unfixable> (fork)
1554    
1555    libtheora
1556            - iceweasel <not-affected> (uses xulrunner)
1557            - xulrunner <unfixed> (embed; bug #540959)
1558            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1559            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1560            - iceape <unfixed> (embed; bug #559276)
1561            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1562            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1563    
1564    dtoa
1565            - bfilter <unfixed> (embed)
1566            - cacao <removed> (embed)
1567            - cdrdao <unfixed> (embed)
1568            - classpath <unfixed> (embed)
1569            - freej <unfixed> (embed)
1570            - iceape <unfixed> (embed)
1571            - iceweasel <unfixed> (embed)
1572            - jscoverage <unfixed> (embed)
1573            - kde4libs <unfixed> (embed)
1574            - kdelibs <unfixed> (embed)
1575            - kompozer <unfixed> (embed)
1576            - libv8 <unfixed> (embed)
1577            - mono <unfixed> (embed)
1578            - newlib <unfixed> (embed)
1579            - nspr <unfixed> (embed)
1580            - php5 <unfixed> (embed)
1581            - polyml <unfixed> (embed)
1582            - qt4-x11 <unfixed> (embed)
1583            - rhino <unfixed> (embed)
1584            NOTE: code translated to Java
1585            - ruby1.8 <unfixed> (embed)
1586            - ruby1.9 <unfixed> (embed)
1587            - ruby1.9.1 <unfixed> (embed)
1588            - sdd <unfixed> (embed)
1589            - sfind <unfixed> (embed)
1590            - star <unfixed> (embed)
1591            - tinymux <unfixed> (embed)
1592            - virtualbox-ose <unfixed> (embed)
1593            - webkit <unfixed> (embed)
1594            - xulrunner <unfixed> (embed)
1595    
1596    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1597            - firegpg <unfixed> (embed)
1598            - enigmail <unfixed> (embed)
1599    
1600    ptmalloc (not packaged in Debian)
1601            - crystalspace <unfixed> (embed)
1602            - qt4-x11 <unfixed> (embed)
1603    
1604    svgalib
1605            - usplash <unfixed> (embed)
1606    
1607    bogl
1608            - usplash <unfixed> (embed)
1609    
1610    taglist
1611            - usplash <unfixed> (embed)
1612    
1613    portaudio
1614            - audacity <unfixed> (embed; bug #323711)
1615    
1616    nyquist
1617            - audacity <unfixed> (embed)
1618            NOTE: embeds a forked nyquist with support for a shared library
1619    
1620    vamp-plugin-sdk
1621            - audacity <unfixed> (embed)
1622    
1623    wordpress
1624            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1625            - wordpress-mu <removed> (fork)
1626    
1627    php5
1628            - php4 <removed> (old-version)
1629    
1630    classpath
1631            - libgnucrypto-java <removed> (embed; bug #559788)
1632    
1633    libtool
1634            - apr <unfixed> (static; bug #489625)
1635            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1636            - arts <unfixed> (embed)
1637            - bochs 2.4.2-1 (embed; bug #560884)
1638            - camserv <unfixed> (embed)
1639            - collectd 4.8.2-1 (embed)
1640            - courier-authlib 0.58-4 (embed)
1641            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1642            - cvsnt 2.5.04.3236-1.2 (embed)
1643            - dico <not-affected> (Uses the system copy of ltdl)
1644            - freeradius 0.1+20010527-1 (embed)
1645            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1646            - ggobi 2.1.9~20091212-1 (embed)
1647            - glame 2.0.1-4 (embed)
1648            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1649            - gnash 0.8.7-2 (embed)
1650            - gnu-smalltalk <unfixed> (embed; bug #566777)
1651            - google-gadgets 0.10.5-0.3 (embed)
1652            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1653            - graphicsmagick 1.3.5-6 (embed)
1654            - graphviz 2.8-3 (embed)
1655            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1656            - guile-1.6 1.6.8-7 (embed)
1657            - hamlib 1.2.11-1 (embed)
1658            - hercules 3.06-1.2 (embed)
1659            - jags 1.0.4-3 (embed; bug #560864)
1660            - kdelibs <unfixed> (embed)
1661            - libannodex <removed> (embed)
1662            - libextractor 0.5.23+dfsg-4 (embed)
1663            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1664            - libtunepimp 0.5.3-7.3 (embed)
1665            - mp4h 1.3.1-4.1 (embed)
1666            - naim <removed> (embed)
1667            - parser-mysql <unfixed> (embed)
1668            - pinball 0.3.1-11 (embed)
1669            - redland <unfixed> (embed)
1670            - siproxd <unfixed> (embed)
1671            - ski <unfixed> (embed)
1672            - synfig 0.62.00-1 (embed)
1673            - unixodbc 2.2.4-5 (embed)
1674            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1675            - clamav 0.95+dfsg-1 (embed)
1676            - imagemagick 6:6.2.3.1-1 (embed)
1677            - hypre 2.4.0b-5 (embed)
1678            - lam <unfixed> (embed)
1679            - openmpi <unfixable> (embed; bug #559386)
1680            - parser <unfixed> (embed)
1681            - pdsh 2.18-5 (embed; bug #560892)
1682            - sbnc 1.2-8 (embed)
1683            - sdcc <unfixed> (embed)
1684            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1685            - proftpd-dfsg <unfixed> (embed; bug #561748)
1686            - babel 1.4.0.dfsg-5 (embed)
1687            - libprelude 0.9.14-2 (embed)
1688            - heartbeat 2.1.4-7 (embed)
1689            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1690            NOTE: might've been fixed earlier
1691            - gcc-* <unknown> (embed)
1692    
1693    ocamlgsl
1694            - orpie 1.5.1-7.1 (embed; bug #550058)
1695    
1696    xdotool
1697            - keynav <unfixed> (embed; bug #560103)
1698    
1699    bulletphysics (not packaged; http://www.bulletphysics.org/)
1700            - supertuxkart <unfixed> (embed)
1701            - blender <unfixed> (embed)
1702    
1703    ghostscript
1704            - gs-gpl <removed> (old-version)
1705    
1706    icedove
1707            - thunderbird <removed> (old-version)
1708    
1709    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1710            - jquery <unfixed> (embed)
1711    
1712    sed
1713            - ssed <unfixed> (fork)
1714    
1715    phpatomlib (http://code.google.com/p/phpatomlib)
1716            - wordpress <unfixed> (embed)
1717    
1718    Services_JSON (http://pear.php.net/package/Services_JSON)
1719            - wordpress <unfixed> (embed)
1720    
1721    phpass (http://www.openwall.com/phpass/)
1722            - gallery2 <unfixed> (embed)
1723            - wordpress <unfixed> (embed)
1724            - typo3-src <unfixed> (modified-embed)
1725            NOTE: file refers to drupal, maybe there's a copy somewhere there
1726            NOTE: a copyright owner search didn't match anything
1727            - libauthen-passphrase-perl <unfixable> (fork)
1728            NOTE: perl implementation of phpass
1729    
1730    squirrelmail
1731            - wordpress <unfixed> (embed)
1732            NOTE: class-pop3.php
1733    
1734    ezSQL (http://www.woyano.com/jv/ezsql)
1735            - wordpress <unfixable> (fork)
1736            NOTE: wp-db.php
1737    
1738    Diff.php (Clay Loveless' version/killersoft.com)
1739            - php-versioncontrol-svn <unfixed>
1740    
1741    libm (provided by libc)
1742            - spring <unfixed> (embed)
1743            NOTE: embedded by embedded copy of streflop
1744            - aide <unfixed> (static)
1745            - busybox <unfixed> (static)
1746            - mindi-busybox <unfixed> (static)
1747            - qemu <unfixed> (static)
1748            NOTE: qemu-user-static
1749            - tuxonice-userui <unfixed> (static)
1750            - zsh <unfixed> (static)
1751            NOTE: zsh-static
1752            - tripwire <unfixed>
1753    
1754    streflop
1755            - spring <unfixed> (embed)
1756    
1757    minizip
1758            - spring <unfixed> (embed)
1759    
1760    oscpack
1761            - spring <unfixed> (embed)
1762    
1763    hpiutil2
1764            - spring <unfixed> (embed)
1765    
1766    p7zip
1767            - spring <unfixed> (embed)
1768    
1769    pythonqt (doesn't seem to be python-qtN, unknown source)
1770            - fontmatrix <unfixed> (embed)
1771            - elmerfem <unfixed> (embed)
1772    
1773    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1774            - docvert <unfixed> (embed)
1775            - jifty <unfixed> (embed)
1776            - kdenetwork <unfixed> (embed)
1777            - mediatomb <unfixed> (embed)
1778            - plastex <unfixed> (embed)
1779            - plone3 <removed> (embed)
1780            - python-chaco <unfixed> (embed)
1781            - python-docutils <unfixed> (embed)
1782            - s5 <unfixed> (embed)
1783            - zope2.10 <unfixed> (embed)
1784            - zope2.11 <removed> (embed)
1785            - cython <not-affcted> (embed)
1786            NOTE: part of documentation, which is not installed into the binary package
1787    
1788    python-docutils
1789            - zope2.10 <unfixed> (embed)
1790            - zope2.11 <removed> (embed)
1791    
1792    tesseract
1793            - ocropus <unfixed> (static)
1794    
1795    antlr
1796            - kdevelop <unfixed> (embed)
1797    
1798    libxerces2
1799            - openjdk-6 <unfixed> (embed)
1800    
1801    kfreebsd-8
1802            - kfreebsd-7 <unfixed> (old-version)
1803            - kfreebsd-6 <removed> (old-version)
1804    
1805    ruby1.9.1
1806            - ruby1.9 <unfixed> (old-version)
1807            - ruby1.8 <unfixed> (old-version)
1808    
1809    maildrop
1810            - courier <unfixed> (embed) [./maildrop]
1811    
1812    glee
1813            - warzone2100 <not-affected> (embed)
1814    
1815    phing
1816            - symfony <unfixed> (embed)
1817    
1818    pake
1819            - symfony <unfixed> (embed)
1820    
1821    propel
1822            - symfony <unfixed> (embed)
1823    
1824    creole
1825            - symfony <unfixed> (embed)
1826    
1827    hfsutils
1828            - cdrkit <unfixed> (embed; bug #570187)
1829            NOTE: embeds hfsutils code in genisoimage
1830    
1831    cdrkit
1832            - grub2 <unfixed> (embed; bug #570156)
1833            NOTE: genisoimage imported into grub-mkisofs
1834    
1835    kdebase-workspace
1836            - kdebase <unfixed> (old-version)
1837    
1838    file
1839            - php5 <unfixable> (modified-embed)
1840            [lenny] - php5 <not-affected>
1841    
1842    cdb
1843            - php5 <unfixed> (embed)
1844    
1845    libmbfl (itp: #570708)
1846            - php5 <unfixed> (embed)
1847            NOTE: PHP is actually the current upstream, ITP is of that code
1848    
1849    libonig
1850            - php5 5.3.2-1 (embed)
1851    
1852    xmlrpc-epi
1853            - php5 <unfixed> (embed)
1854    
1855    swt-gtk
1856            - eclipse <unfixed> (embed; bug #538808)
1857    
1858    txt2html
1859            - wml 2.0.11ds2-1 (embed)
1860    
1861    ca-certificates
1862            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1863    
1864    openexr
1865            - freeimage <unfixed> (embed)
1866    
1867    libmng
1868            - freeimage <unfixed> (embed)
1869    
1870    openjpeg
1871            - freeimage <unfixed> (embed)
1872    
1873    libjpeg6b
1874            - freeimage <unfixed> (embed)
1875    
1876    libjpeg (don't know what exact version)
1877            - dcmtk <unfixed>
1878            - gdcm <unfixed>
1879            - insighttoolkit <unfixed>
1880            - openarena <unfixed> (bug #495966)
1881            - outguess <unfixed>
1882            - squeak-vm <unfixed> (embed)
1883            - tremulous <unfixed>
1884            - tuxonice-userui <unfixed> (static)
1885            - fpc <unfixed> (static)
1886            - lazarus <unfixed> (static)
1887            NOTE: inherited from fpc, see #472304
1888            - mseide-msegui <unfixed> (static)
1889            NOTE: inherited from fpc, see #472304
1890            - easymp3gain <unfixed> (static)
1891            NOTE: inherited from fpc, see #472304
1892            - winff <unfixed> (static)
1893            NOTE: inherited from fpc, see #472304
1894            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1895    
1896    
1897    lxr
1898            - lxr-cvs <unfixed> (embed)
1899    
1900    libfile-copy-recursive-perl
1901            - r-base <unfixed> (embed; bug #577427)
1902            - r-base-core-ra <unfixed> (embed; bug #577429)
1903    
1904    delimmatch
1905            - r-base <unfixed> (embed; bug #577433)
1906            - r-base-core-ra <unfixed> (embed; bug #577434)
1907    
1908    libsmf (ITP: #572558)
1909            - denemo <unfixed> (embed)
1910            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1911    
1912    libselinux
1913            - dpkg 1.15.6 (static)
1914    
1915    xinha (ITP: #479708)
1916            - horde3 <unfixed>
1917            - serendipity <unfixed>
1918            - openacs <unfixed>
1919            - dotlrn <unfixed>
1920    
1921    dvipng
1922            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1923    
1924    dvipdfmx
1925            - texlive-bin <unfixed> (embed)
1926            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1927    
1928    lcdf-typetools
1929            - texlive-bin 2009-1 (embed)
1930    
1931    tex4ht
1932            - texlive-bin 2009-1 (embed)
1933    
1934    freetype
1935            - texlive-bin 2009-1 (embed)
1936    
1937    freetype2
1938            - texlive-bin 2009-1 (embed)
1939    
1940    silgraphite
1941            - texlive-bin <unfixed> (embed)
1942    
1943    unzip
1944            - texlive-bin 2009-1 (embed)
1945    
1946    jbig2dec
1947            - ghostscript 8.71~dfsg2-1 (embed)
1948    
1949    libxml2
1950            - chromium-browser 5.0.375.29~r46008-1
1951    
1952    protobuf
1953            - chromium-browser 5.0.375.70~r48679-2
1954    
1955    libv8
1956            - chromium-browser 5.0.375.38~r46659-1
1957    
1958    nspr
1959            - chromium-browser 5.0.375.29~r46008-3
1960    
1961    yasm
1962            - chromium-browser 5.0.375.29~r46008-2
1963    
1964    libxslt
1965            - chromium-browser 5.0.375.29~r46008-1
1966    
1967    miniupnpc (not packaged in Debian; ITP bug #444392)
1968            - warzone2100 <unfixed> (embed)
1969    
1970    iniparser (not packaged in Debian; RFP bug #582657)
1971            - warzone2100 <unfixed> (modified-embed)
1972    
1973    pyglet
1974            - sympy <unfixed> (embed; bug #459716)
1975    
1976    mpmath
1977            - sympy <unfixed> (embed; bug #541746)
1978    
Legend:
Removed from v.11923  
changed lines
  Added in v.15338
  ViewVC Help
Powered by ViewVC 1.1.5