/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7923 by stef-guest, Mon Jan 14 21:43:39 2008 UTC revision 13695 by geissert, Sat Jan 2 02:09:05 2010 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>, <itp> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and thus might share parts of the source code)        modified-embed (embeds a code copy that differs from upstream code)
20          fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22    
23  The srcpkg might be some string to identify the code if there is no specific source package.  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26  Everything up to the next line is ignored  Everything up to the next line is ignored.
27  ---BEGIN  ---BEGIN
28  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
30          - pdftohtml <unknown>          - pdftohtml <unknown>
31          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
32          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
33          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
34          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
36          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
37          NOTE: links to poppler          NOTE: links to poppler
38          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
39          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
40          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
41          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
42          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
44          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <unfixed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48    
49  ppmd  ppmd
50          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
51            NOTE: discussion in #458152
52    
53    libevent
54            - transmission 1.71-1 (embed; bug #529372)
55    
56    lrmi
57            - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59            - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61    
62    peercast
63            - gnome-peercast <removed> (embed)
64            [etch] - gnome-peercast <unfixed> (embed)
65    
66  silc-toolkit  silc-toolkit
67          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
68    
69    icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73  dietlibc  dietlibc
74          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
75    
76    libmikmod
77            - sdl-mixer1.2 <unfixed> (embed)
78            TODO: report bug
79    
80  libiax  libiax
81          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
82    
83    spandsp
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
87          - dpkg <unfixed> (embed)          - dpkg <unfixed> (static)
88          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
89          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
90          NOTE: somehow derived code base          NOTE: somehow derived code base
# Line 67  zlib (lots of apps embed a copy, but lin Line 95  zlib (lots of apps embed a copy, but lin
95          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
96          - rpm <unknown> (embed)          - rpm <unknown> (embed)
97          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
98            - tuxcmd-modules <unfixed> (embed)
99            - zsync <unfixed>
100            - tra <unfixed>
101            - sash <unfixed>
102            - nsis <unfixed>
103            - mseide-msegui <unfixed>
104            NOTE: mseide
105            - mirrordir <unfixed>
106            - poco <unfixed>
107            - klibc <unfixed>
108            - ghostscript <unfixed>
109            - freeimage <unfixed>
110            - clamav <unfixed> (fork)
111            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
112            - tuxonice-userui <unfixed>
113            - plt-scheme <unfixed>
114            - perl <unfixed>
115            - paraview <unfixed>
116            - gcvs <unfixed>
117            - dump <unfixed>
118            - aide <unfixed> (static)
119            - dar <unfixed> (static)
120            - avfs <unfixed>
121            - fpc <unfixed>
122            - winff <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - lazarus <unfixed>
125            NOTE: inherited from fpc, see #472304
126            - erlang <unfixed> (embed)
127            - gamera 3.2.3-1 (embed)
128            - python2.4 <unfixed> (embed; bug #553403)
129            - python2.5 <unfixed> (embed; bug #553403)
130    
131    dulwich
132            - hg-git 0.1.0-1 (embed; bug #541996)
133    
134    libvigraimpex
135            - hugin <unfixed> (embed; bug #542259)
136            - enblend-enfuse <unfixed> (embed; bug #542258)
137            - gamera 3.2.3-1 (embed)
138    
139  libbz2  libbz2
140          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
141    
142  ekg  libgadu
143          - centericq <unfixed> (embed)          - centerim <unfixed> (embed; bug #559783)
144          - gaim <unfixed> (embed)          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
145          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
146          - kopete 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
147          - kadu <unfixed> (embed)          NOTE: from kdenetwork: kopete
148          - gadu <unfixed> (embed)          - ekg 1:1.8~rc0-1 (embed)
149          NOTE: g/kadu not packaged in Debian yet          - kadu 0.6.0.2-3 (embed; bug #504430)
150            - gadu <itp> (embed)
151    
152  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
153          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
154          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
155          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
156          - phpwiki (embed)          - phpwiki <unfixed> (embed)
157          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
158          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
159    
# Line 92  shtool (affects build-time only) Line 161  shtool (affects build-time only)
161          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
162          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
163    
164  mozilla source code  xulrunner
165          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
166          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
167          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
168          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
169          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
170          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
171          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
172          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
173    
174  xli  xli
175          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
176    
177  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
178          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
179          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed)
         NOTE: in libxpm  
180    
181  kerberized apps with BSD origin  kerberized apps with BSD origin
182          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
183          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
184          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
185    
186  grip (which pkg is the origin?)  grip (which pkg is the origin?)
187          - libcdaudio          - libcdaudio <unfixed>
188          - grip          - grip <unfixed>
189          - gnome-vfs          - gnome-vfs <unfixed>
190          TODO: check vfs2 as well          TODO: check vfs2 as well
191    
192  fudforum  fudforum
193          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
194          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
195          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
196    
197    libbsd
198            - rdate 1:1.2-3 (embed)
199            - atheme-services <unfixed>
200            - libbsd-arc4random-perl <unfixed>
201            - isakmpd <unfixed>
202            - bsdgames <unfixed> (embed)
203            - bsd-mailx <unfixed> (embed)
204            - netcat-openbsd <unfixed> (embed; bug #550611)
205            - openssh <unfixed> (embed)
206            - unworkable <unfixed> (embed)
207    
208  cvs  cvs
209          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
210          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
211    
212  pcre  pcre3
         - python* <unfixed> (embed)  
213          - php4 <unknown> (embed)          - php4 <unknown> (embed)
214          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
215          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
216            NOTE: libgoffice-*
217          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
218          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
219          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
220          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
221          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
222          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
223          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
224          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
225          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
226          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
227            - tin 980117-1 (embed)
228            - kazehakase 0.5.2-1
229            - webkit 1.0.1-1 (embed)
230            - qt4-x11 <unfixed> (embed)
231            NOTE: embedded via webkit copy
232            - erlang <unfixed> (embed)
233            - ssed <unfixed> (embed)
234    
235  tiff  tiff
236          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
237          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
238    
239  uudeview  uudeview
240          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
241            - pan <unfixed> (embed)
242    
243  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
244          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
245          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
246          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
247            - heimdal <unfixed> (embed; bug #559616)
248    
249  util-linux/mount  util-linux/mount
250          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
251          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
252    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
253  sylpheed  sylpheed
254          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
255    
# Line 184  phpldapadmin Line 264  phpldapadmin
264  chmlib  chmlib
265          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
266    
267  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
268          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
269          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
270          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
271          - vlc <unfixed> (static)          - smilutils 0.3.0-10
272          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
273          - motion <unfixed> (static)          - motion 3.1.19-1
274          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
275          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed> (static)
         - xmovie <unfixed>  
276          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
277            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
278            - audacity 1.3.7-2 (embed; bug #512278)
279    
280    faad2
281            - mplayer 1.0~rc2-20 (embed)
282            - avifile <unfixed> (embed; bug #538750)
283            - ffmpeg-debian <removed> (old-version)
284    
285  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
286          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
287            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
288            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
289    
290  libdts  libdts
291          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 214  libmpeg2 Line 301  libmpeg2
301          - mpeg2dec <unfixed> (embed)          - mpeg2dec <unfixed> (embed)
302          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
303    
304  curl  libntlm
305          - wget <unfixed> (embed)          - wget <unfixed> (fork; bug #550436)
306          NOTE: code for NTLM authentication          - curl <unfixed> (fork; bug #550437)
307            - cntlm <unfixed> (fork; bug #550438)
308    
309  uw-imap  uw-imap
310          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 225  uw-imap Line 313  uw-imap
313  imagemagick  imagemagick
314          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
315    
316    python-urlgrabber
317            - mercurial <unfixed> (embed; bug #531062)
318            - w3af <unfixed> (embed; bug #555372)
319            [experimental] - harvestman <unfixed> (embed; bug #555373)
320    
321    beautifulsoup
322            - python-mechanize <unfixed> (embed; bug #555349)
323            - zope2.11 <unfixed> (embed; bug #555350)
324            - twill <unknown> (embed)
325    
326  halibut  halibut
327          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
328    
329  libghttp  libghttp
330          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
331    
332  libsndfile  libsndfile
333          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
334    
335  glibmm2.4  glibmm2.4
336          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
337    
338  libgnomecanvasmm2.6  libgnomecanvasmm2.6
339          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
340    
341  libsigc++-2.0  libsigc++-2.0
342          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
343    
344  soundtouch  soundtouch
345          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
346    
347  libmms  libmms
348          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
349          - mimms <unfixed> (embed)          - mimms <unfixed> (embed)
350    
351  fckeditor  fckeditor
352          - knowledgeroot <unfixed> (embed)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
353          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
354          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
355          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
356            - request-tracker3.8 <unfixed> (embed)
357            - otrs2 2.4.5-3 (embed)
358    
359  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
360          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
361    
362  libphp-phpmailer  libphp-phpmailer
363          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
364            - mahara <unfixed> (embed)
365            - symfony <unfixed> (embed)
366            [etch] - phpgroupware <unfixed> (embed)
367            NOTE: phpgroupware-felamimail is only in etch
368            - egroupware <unfixed> (embed; bug #504283)
369            - glpi <unfixed>
370    
371  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
372          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
373    
374  bennu (not packaged in Debian)  giflib
375          - moodle <unfixed> (embed)          - wine <unfixed> (embed; bug #466181)
376    
377  smarty:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
378          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
379    
380    smarty
381            - moodle 1.8.2-2 (embed; bug #471158)
382            - gallery2 2.2.5-2 (embed; bug #471160)
383            - mahara 0.9.2-2 (embed; bug #471201)
384            - gosa 2.4beta1-1 (embed; bug #471200)
385    
386  TinyMCE  TinyMCE
387          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
388          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
389          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
390          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
391    
392  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
393          - scite <unfixed> (embed)          - scite <unfixed> (embed)
394          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
395          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
396          - geany <unfixed> (embed)          - geany <unfixed> (fork)
397            - anjuta <unfixed> (embed)
398    
399  libphp-adodb  libphp-adodb
400          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
401          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
402          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
403          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
404          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
405          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
406            - torrentflux 2.0beta1-2 (embed)
407          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
408          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
409          - cacti <unknown> (embed)          - cacti <unknown> (embed)
410          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
411          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
412            - gforge 4.7~rc2-6 (embed)
413            - mahara <unfixed> (embed)
414    
415  gzip  gzip
416          - linux-kernel <unfixed> (embed)          - linux-kernel <unfixed> (embed)
# Line 305  gzip Line 420  gzip
420          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
421    
422  neon  neon
423          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
424          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
425          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
426            - litmus <removed> (embed; #395875)
427          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
428          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
429          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
430          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
431    
# Line 322  libvncserver Line 438  libvncserver
438  putty  putty
439          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
440    
441  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
442          - filezilla <unfixed>          - filezilla <unfixed>
443            - crystalspace <unfixed> (embed)
444            - libwfut <unfixed> (embed)
445            - rarian <unfixed> (embed)
446            - bulletml <unfixed> (embed)
447            - pokerth <unfixed> (embed)
448            - qutecom <unfixed> (embed)
449            - sofa-framework <unfixed> (embed)
450            - yate <unfixed> (embed)
451            - antigrav <unfixed> (embed)
452            - balder2d <unfixed> (embed)
453            - cal3d <unfixed> (embed)
454            - criticalmass <unfixed> (embed)
455            - ember <unfixed> (embed)
456            - epiphany <unfixed> (embed)
457            - gambit <unfixed> (embed)
458            - noiz2sa <unfixed> (embed)
459            - ogre <unfixed> (embed)
460            - opencity <unfixed> (embed)
461            - openmovieeditor <unfixed> (embed)
462            - pouetchess <unfixed> (embed)
463            - tecnoballz <unfixed> (embed)
464            - trigger-rally <unfixed> (embed)
465            - xmoto <unfixed> (embed)
466            - mapnik <unknown> (embed)
467            NOTE: uses a different XML parser by default
468            - rrootage 0.23a-6 <embed>
469            NOTE: links to libbulltetml
470            - boson <unknown> (embed)
471            NOTE: the embedded code is unused
472    
473  gv  gv
474          - evince <unfixed> (embed)          - evince <unfixed> (embed)
475          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
476          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
477    
478  libXbae  libXbae
479          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
480          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
481    
482    libgtkhtml
483            - claws-mail-extra-plugins <unfixed> (fork)
484    
485  libXaw  libXaw
486          [etc] - libpawlib2-lesstif          - paw <removed> (embed)
487          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
488          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
489    
490  libgd2  libgd2
491          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
492          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
493            - wml <unfixed> (embed)
494            - libwmf <unfixed> (embed)
495            NOTE: derived from gd 1.6.3
496    
497  rar  rar
498          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 356  mplayer (DirectMedia Object loader) Line 506  mplayer (DirectMedia Object loader)
506          NOTE: src/libw32dll/          NOTE: src/libw32dll/
507          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
508          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
509            - mplayer 1.0~rc2-20 (embed)
510    
511  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
512          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 364  fsplib (http://sourceforge.net/projects/ Line 515  fsplib (http://sourceforge.net/projects/
515          - gftp <unfixed> (embed)          - gftp <unfixed> (embed)
516          NOTE: lib/fsplib version 0.3          NOTE: lib/fsplib version 0.3
517    
518    sprng
519            - tree-puzzle <unfixed> (embed)
520    
521  librpcsecgss  librpcsecgss
522          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
523    
524  jasper  jasper
525          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
526    
527    libiris
528            - psi <unfixed> (embed)
529            - kdenetwork <unfixed> (embed)
530            NOTE: kopete embeds libiris but links dynamically to libidn
531            - kdegames <unfixed> (embed)
532            NOTE: ksirk/kde4
533    
534  libidn  libidn
535          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
536            - psi <unfixed> (embed)
537            NOTE: psi embeds libiris which embeds libidn
538            - kdegames <unfixed> (embed)
539            NOTE: kdegames/kde4 embeds libiris which embeds libidn
540    
541  liblua  liblua
542          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
543            - nmap 5.00-1 (embed; bug #527997)
544            [lenny] - nmap <unfixed> (embed; bug #527997)
545            - ocropus <unfixed> (embed)
546            - enigma <unfixed> (embed)
547            NOTE: requires lua built with C++
548            - freeciv <unfixed> (embed)
549    
550  libbotan  libbotan
551          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
552    
553  NetXX  NetXX
554          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
555    
556  libgc  libgc
557          - mono <unfixed> (embed)          - mono <unfixed> (embed)
558    
559  lzma  lzma
560          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
561            - xz-utils <unfixed> (fork)
562    
563  lzo  lzo
564          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
565    
566    yassl
567            - mysql-dfsg-5.0 <unfixed> (embed)
568    
569  pax code  pax code
570          - tar <unfixed> (embed)          - tar <unfixed> (embed)
571          - cpio <unfixed> (embed)          - cpio <unfixed> (embed)
# Line 399  pax code Line 573  pax code
573  t1lib  t1lib
574          - tetex-bin 2.0.2-1 (embed)          - tetex-bin 2.0.2-1 (embed)
575          - texlive-bin <unknown> (embed)          - texlive-bin <unknown> (embed)
576    
577    guichan
578            - boswars <unfixed> (embed)
579            NOTE: maintainer notified us, working on it
580    
581    tolua
582            - boswars <unfixed> (embed)
583            NOTE: maintainer notified us, working on it
584            NOTE: actually tolua++
585            - ocropus <unfixed> (embed)
586            NOTE: actually tolua++
587            - freeciv <unfixed> (embed)
588            NOTE: actually tolua++
589            - enigma <unfixed> (embed)
590    
591    asio-dev
592            - luxrender <removed> (embed)
593    
594    xine-lib
595            - vlc <unfixed> (embed)
596            NOTE: only parts included in modules/access/rtsp
597    
598    netpbm
599            - tcl8.3 <unfixed> (embed)
600            - tcl8.4 <unfixed> (embed)
601            - tcl8.5 <unfixed> (embed)
602            NOTE: generic/tkImgGIF.c
603    
604    tk8.5
605            - tk8.0 <removed> (old-version)
606            - tk8.3 <unfixed> (old-version)
607            - tk8.4 <unfixed> (old-version)
608            - perl-tk <unfixable> (fork)
609    
610    samba
611            - mc 2:4.6.2~git20080311-1 (embed)
612            NOTE: maintainer is aware of this, currently searching a solution
613    
614    plib1.8.4c2
615            - boson <unfixed> (fork)
616            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
617    
618    fribidi
619            - quesoglc <unfixed> (embed)
620            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
621    
622    glew
623            - quesoglc <unfixed> (embed; bug #489341)
624            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
625            - trigger <unfixed> (embed)
626            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
627            - trigger-rally <unfixed> (embed)
628            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
629    
630    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
631            - transcend <unfixed> (embed)
632            - cultivation <unfixed> (embed)
633            - passage <unfixed> (embed)
634            - gravitation <unfixed> (embed)
635    
636    tar
637            - libarchive <unfixed> (embed)
638            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
639    
640    cpio
641            - libarchive <unfixed> (embed)
642            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
643    
644    webkit
645            - qt4-x11 <unfixed> (embed; bug #479851)
646            - kdelibs <unfixed> (old-version)
647            - kde4libs <unfixed> (fork)
648    
649    ftgl
650            - blender 2.46+dfsg-1 (embed)
651    
652    wv
653            - abiword <unfixed>
654    
655    qemu
656            - kvm <unfixed> (embed; bug #543159)
657            NOTE: the kvm package will be removed from sid and squeeze soon (after
658            NOTE: which it will only be in experimental). superceded by qemu-kvm.
659            - qemu-kvm <unfixed> (embed; bug #560853)
660            - xen-3 3.4.2-2 (embed; bug #560856)
661            - xen-unstable <unfixed> (embed; bug #560856)
662    
663    vgabios
664            - kvm <unfixed> (embed; bug #489442)
665    
666    bochs
667            - kvm <unfixed> (embed; bug #489442)
668    
669    speex
670            - vorbis-tools <unfixed> (embed)
671            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
672            - gst-plugins-good0.10 <unfixed> (embed)
673            - xine-lib <unfixed> (embed)
674            - libfishsound <unfixed> (embed)
675            - libannodex <removed> (embed)
676            - vlc <unfixed> (embed)
677            - xmms-speex <unfixed> (embed)
678            - libsdl-sound1.2 <unfixed> (embed)
679            - sweep <unfixed> (embed)
680    
681    libreadline
682            - magic <itp> (old-version)
683    
684    opcode
685            - ode <unfixed> (embed)
686            NOTE: opcode is not a package in debian, it is just embedded
687            NOTE: http://www.codercorner.com/Opcode.htm
688    
689    gimpact
690            - ode <unfixed> (embed)
691            NOTE: gimpact is not a package in debian, it is just embedded
692            NOTE: http://gimpact.sf.net
693    
694    mochikit
695            - mahara <unfixed> (embed)
696            NOTE: they require extra patches, still unmerged upstream
697            - ntop <unfixed> (embed)
698            - coherence 0.6.2-1 (embed)
699            - paste <unfixed> (embed)
700            - turbogears <unfixed> (embed)
701            - plone3 <unfixed> (embed)
702            - xulrunner <unfixed> (embed)
703            - libjifty-plugin-chart-perl <unfixed> (embed)
704            - sabnzbdplus <unfixed> (embed)
705            - tgmochikit <unfixed> (embed)
706    
707    prototypejs
708            - netbeans-ide 6.0.1+dfsg-2 (embed)
709            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
710            - webcit <unfixed> (embed; bug #555219)
711            - asterisk 1:1.6.2.0~rc3-1 (embed)
712            - libjson-ruby 1.1.4-1 (embed; bug #555224)
713            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
714            - horde3 <unfixed> (embed)
715            - knowledgeroot <unfixed> (embed; bug #555230)
716            - mediatomb <unfixed> (embed; bug #555233)
717            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
718            - ebug-http <removed> (embed; bug #555236)
719            - libaws 2.7-1 (embed; bug #555222)
720            - phpgedview <removed> (embed)
721            - poker-network <removed> (embed; bug #555238)
722            - rails 2.1.0-6 (embed)
723            - wordpress 2.5.0-2 (embed; bug #555243)
724            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
725            TODO: search through all of the other zope packages
726            - ampache 3.4.1-2 (embed)
727            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
728            - hobix 0.5~svn20070319-4 (embed; bug #555247)
729            - zabbix 1.6.6-4 (embed; bug #555250)
730            - chora2 <unfixed> (embed; bug #555253)
731            - gollem <unfixed> (embed; bug # 555254)
732            - jscropperui 1.2.1-1 (embed; bug #555257)
733            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
734            - ingo1 <unfixed> (embed; bug #555261)
735            - kronolith2 <unfixed> (embed; bug #555262)
736            - activeldap <unfixed> (embed)
737            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
738            - mantis <unfixed> (embed; bug #555265)
739            - otrs2 2.3.4-6 (embed; bug #555267)
740            - webcalendar <unfixed> (embed; bug #555269)
741            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
742            - jifty 0.90519-1 (embed; bug #555271)
743            - jquery <unfixed> (embed; bug #555272)
744            - passenger 2.2.5debian1-1 (embed; bug #555273)
745            - plone3 <unfixed> (embed; bug #555275)
746            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
747            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
748            - xulrunner <unfixed> (embed)
749            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
750    
751    gdb
752            - insight <unfixed> (embed)
753    
754    e2fsprogs
755            - ldiskfsprogs <unfixable> (fork)
756    
757    quazip (not packaged in Debian)
758            - qcake <unfixed> (embed)
759            NOTE: starting with upstream version 0.6.4
760    
761    exo
762            - pcmanfm <unfixed> (embed; bug #499677)
763            NOTE: slightly modified source code
764    
765    java
766            - openjdk-6 <unfixed>
767            - sun-java5 <unfixed>
768            - sun-java6 <unfixed>
769    
770    libphp-snoopy
771            - ampache 3.4.1-2 (embed; bug #504169)
772            - gforge 4.6.99+svn6094-2 (embed)
773            - mahara 1.0.5-2 (embed; bug #504170)
774            - pixelpost 1.7.1-5 (embed; bug #504171)
775            - mediamate 0.9.3.6-5 (embed; bug #504172)
776            - opendb <removed> (embed; bug #504173)
777            [etch] - opendb <unfixed> (embed; bug #504173)
778            - wordpress 2.5.1-9 (embed; bug #443948)
779            - moodle <unfixed> (embed; bug #507185)
780            [etch] - phpgroupware <unfixed> (embed)
781            NOTE: phpgroupware-felamimail
782            - magpierss 0.72-3 (embed; bug #431089)
783    
784    jquery
785            - zekr <unfixed> (embed)
786            - wordpress <unknown> (embed)
787            - yocto-reader <unfixed> (embed)
788            - textpattern <unfixed> (embed)
789            - genshi 0.5.1-1 (embed)
790            NOTE: compressed file under examples/ dir
791            - prewikka <unfixed> (embed)
792            - libramaze-ruby <unfixed> (embed)
793            - drupal5 <unfixed> (embed)
794            - b2evolution <unfixed> (embed)
795            - wesnoth <unfixed> (embed)
796    
797    tablesorter (jquery plugin, not packaged yet)
798            - wesnoth <unfixed> (embed)
799    
800    kses
801            - wordpress <unfixed> (embed; bug #504242)
802            NOTE: their copy has all methods renamed to wp_<foo>
803            NOTE: kses isn't in Debian, RFP: #504240
804            - moodle <unfixed> (embed; bug #507185)
805            - egroupware <unfixed> (embed)
806    
807    magpierss
808            - wordpress <unfixed> (embed; bug #504242)
809            - moodle <unfixed>
810    
811    php-gettext
812            - wordpress 2.8.4-1 (embed; bug #504242)
813    
814    libphp-ixr (name may change, it is the Incutio XML-RPC)
815            - wordpress <unfixed> (embed; bug #504242)
816            NOTE: libphp-ixr isn't in Debian, RFP: #504236
817            - dokuwiki <unfixed> (embed)
818            - textpattern <unfixed> (embed)
819    
820    libphp-cas
821            - glpi <unfixed> (embed)
822            - moodle <unfixed> (embed; bug #505984)
823    
824    scriptaculous (prototype.js is among the embeds in the following)
825            - glpi <unfixed> (embed)
826            - libaws <unfixed> (embed; bug #555222)
827            - op-panel <unfixed> (embed)
828            - symfony <unfixed> (embed)
829            NOTE: maintainer says there are extra incompatible changes required
830            - pixelpost 1.7.1-6 (embed)
831            - webhelpers <unfixed> (embed)
832            - qwik <removed> (embed; bug #555241)
833            - smokeping <unfixed> (embed)
834            - turba2 <unfixed> (embed)
835            - typo3-src 4.2.3-1 (embed)
836            - request-tracker3.6 <unfixed> (embed)
837            - request-tracker3.8 <unfixed> (embed)
838            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
839            - wordpress 2.5.0-2 (embed)
840            - libhtml-prototype-perl 1.48-3 (embed)
841    
842    libmarkdown-php
843            - moodle <unfixed> (embed; bug #507185)
844            - pixelpost 1.7.1-6 (embed)
845    
846    php-openid
847            - wordpress-openid <itp> (embed)
848    
849    geshi
850            - dokuwiki 0.0.20080505-3.1 (embed)
851            - pgfouine 1.0-1.1 (embed)
852            - websvn 2.1.0-1 (embed)
853    
854    webcalendar
855            - gforge 4.7~rc2-6 (embed; bug #504758)
856    
857    libical
858            - kdepim <unfixed> (fork)
859            - kdepimlibs <unfixed> (fork)
860            NOTE: fixed in KDE4 post 4.1.x series
861            - claws-mail-extra-plugins <unfixed> (fork)
862    
863    libltdl3
864            - kdelibs <unfixed> (embed)
865            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
866            - synfig <unfixed> (embed)
867    
868    harfbuzz
869            - qt4-x11 <unfixed> (embed)
870    
871    libzip
872            - php5 <unfixable> (modified-embed)
873            - odt2txt <unfixed> (embed; bug #523808)
874    
875    json.php (not packaged; should be replaced with php's built-in functions)
876            - moodle <unfixed>
877            - yui <unfixed>
878            - gallery2 <unfixed>
879            - dokuwiki <unfixed>
880            - typo3-src <unfixed>
881    
882    php-fpdf
883            - tcpdf <itp> (fork)
884            - moodle <unfixed>
885            - phpwiki <unfixed>
886            - egroupware <unfixed>
887            - ldap-account-manager <unfixed> (fork)
888    
889    tcpdf (itp: #495985)
890            - moodle <unfixed>
891            - phpmyadmin <unfixed>
892    
893    typo3
894            - moodle <unfixed>
895    
896    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
897            - moodle <unfixed>
898            - gosa <unfixed>
899    
900    php-ole (itp: #487558)
901            - moodle <unfixed>
902    
903    pieforms (http://www.catalyst.net.nz)
904            - mahara <unfixed>
905    
906    savant2 (http://phpsavant.com)
907            - egroupware <unfixed>
908    
909    rssparser (http://nwow.org)
910            - egroupware <unfixed>
911            - phpgroupware <unfixed>
912    
913    lcms
914            - openjdk-6 <unfixed> (fork)
915    
916    libphp-phplayersmenu
917            - diogenes <unfixed>
918            - phpldapadmin <unfixed>
919    
920    libphp-pclzip
921            - docvert <unfixed>
922            - moodle <unfixed>
923            - egroupware <unfixed>
924    
925    libphp-simplepie
926            - dokuwiki <unfixed>
927    
928    libphp-jpgraph
929            - egroupware <unfixed>
930    
931    php-simpletest
932            - moodle <unfixed>
933    
934    libpng
935            - iceweasel <not-affected> (uses xulrunner)
936            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
937            - iceape 1.0.13~pre080614i-0etch1 (embed)
938            - xulrunner 1.9.0.13-1 (embed)
939            [lenny] - xulrunner 1.9.0.11-0lenny1
940            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
941            - gamera 3.2.3-1 (embed)
942    
943    irssi
944            - silc-client <unfixed> (embed)
945            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
946    
947    extc
948            - mtasc <unfixed> (embed)
949            - haxe <unfixed> (embed)
950    
951    swflib
952            - mtasc <unfixed> (embed)
953            - haxe <unfixed> (embed)
954    
955    libitext-java
956            - bouncycastle 2.1.4-1 (embed)
957    
958    python-ply
959            - pyke <unfixed> (embed; bug #555363)
960            - pywbem 0.7.0-4 (embed; bug #555364)
961            - sepolgen <unfixed> (embed; bug #555365)
962            - zope-textindexng3 <unknown> (embed)
963            - iceweasel <not-affected> (uses xulrunner)
964            - xulrunner <unknown> (embed)
965            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
966    
967    libdumbnet (libdnet upstream)
968            - nmap <unfixed> (fork)
969    
970    gcc-4.4
971            - gcc-mingw32 <unfixed> (embed)
972    
973    camlimages
974            - advi <unfixed> (static; bug #550441)
975    
976    memcached
977            - memcachedb <unfixed> (embed)
978    
979    yajl
980            - argyll <unfixed> (embed; bug #544223)
981            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
982    
983    nusoap
984            - gforge 4.8.2-1 (embed)
985            - ampache <unfixed> (embed)
986            - poker-web <unfixed> (old-version)
987            - moodle <unfixed> (old-version)
988            NOTE: code is not used when running under php5 and soap is enabled
989            - phpwiki <unfixed> (old-version)
990            - gallery2 <unfixed> (old-version)
991            - typo3-src <unfixed> (old-version)
992    
993    libept
994            - adept <unfixed> (embed; bug #540649)
995    
996    libvorbis
997            - iceweasel <not-affected> (uses xulrunner)
998            - xulrunner <unfixed> (embed; bug #540959)
999            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1000            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1001            - iceape <unfixed> (embed)
1002            [etch] - iceape <not-affected> (introduced in 2.0)
1003            [lenny] - iceape <not-affected> (introduced in 2.0)
1004    
1005    cairo
1006            - iceweasel <not-affected> (uses xulrunner)
1007            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1008    
1009    liboggz
1010            - iceweasel <not-affected> (uses xulrunner)
1011            - xulrunner <unfixed> (embed; bug #540959)
1012            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1013            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1014            - iceape <unfixed> (embed)
1015            [etch] - iceape <not-affected> (introduced in 2.0)
1016            [lenny] - iceape <not-affected> (introduced in 2.0)
1017    
1018    liboggplay
1019            - iceweasel <not-affected> (uses xulrunner)
1020            - xulrunner <unfixed> (embed; bug #540959)
1021            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1022            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1023            - iceape <unfixed> (embed)
1024            [etch] - iceape <not-affected> (introduced in 2.0)
1025            [lenny] - iceape <not-affected> (introduced in 2.0)
1026    
1027    php-net-dnsbl
1028            - serendipity <unfixed> (embed)
1029    
1030    php-onyx-rss
1031            - serendipity <unfixed> (embed)
1032    
1033    php-text-wiki
1034            - serendipity <unfixed> (embed)
1035    
1036    php-xml-rpc
1037            - serendipity <unfixed> (embed)
1038    
1039    polarssl (does not have a shared library)
1040            - pdkim <itp> (embed; bug #543150)
1041            - xyssl <unfixed> (old-version)
1042    
1043    pidgin
1044            - gaim <removed> (old-version)
1045            - qutecom <unfixed> (embed; bug #559785)
1046    
1047    icu
1048            - webkit 1.0.1-1 (embed; bug #547214)
1049            - texlive-bin <unfixed> (fork)
1050            NOTE: texlive upstream working with icu upstream to merge their changes
1051    
1052    cyrus-imapd-2.2
1053            - kolab-cyrus-imapd <unfixed> (fork)
1054            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1055    
1056    python-cxx-dev
1057            - freecad 0.9.2646.3-1 (embed; bug #547936)
1058    
1059    zipios++
1060            - freecad 0.9.2646.3-1 (embed; bug #547941)
1061            - enigma 0.92.3-3 (embed)
1062            NOTE: likely fixed earlier, marking etch's version as fixed
1063    
1064    linux-2.6
1065            - kvm <removed> (embed; bug #549973) [./kernel/*]
1066            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1067            - kernel-source-2.6.8 <removed> (old-version)
1068            - kernel-source-2.4.27 <removed> (old-version)
1069            - kernel-source-2.4.24 <removed> (old-version)
1070            - kernel-source-2.2.25 <removed> (old-version)
1071            - kernel-source-2.2.20 <removed> (old-version)
1072    
1073    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1074            - kvm <removed> (embed) [./libfdt/*]
1075            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1076    
1077    qweb (not packaged)
1078            - ajaxterm <unfixed>
1079    
1080    opensaml2
1081            - opensaml <removed> (old-version)
1082    
1083    shibboleth-sp2
1084            - shibboleth-sp <removed> (old-version)
1085    
1086    tuxonice-userui
1087            - suspend2-userui <removed> (old-version)
1088    
1089    expat
1090            - w3c-libwww <removed> (embed; bug #551941)
1091            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1092            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1093            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1094            - python2.4 <unfixable> (embed; bug #553403)
1095            - python-4suite <unfixed> (embed; bug #516935)
1096            - wxwindows2.4 <removed> (embed)
1097            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1098            - wxwidgets2.8 2.8.10.1-2 (embed)
1099            - celementtree 1.0.5-8 (embed)
1100            NOTE: Maybe that was fixed even earlier
1101            - audacity 1.3.2-1 (embed)
1102            - matanza <unfixed> (embed)
1103            - tdom <unfixed> (embed)
1104            - udunits 2.1.8-4 (embed)
1105            - apr-util 1.2 (embed)
1106            - ayttm <unfxed> (embed; bug #561006)
1107            - cableswig <unfixed> (embed)
1108            - cadaver <unfixed> (embed)
1109            - cmake 2.6.0-6 (embed)
1110            - coin3 <unfixed> (embed)
1111            - gdcm 2.0.14-2 (embed)
1112            - ghostscript <unfixed> (embed)
1113            - grmonitor <removed> (embed)
1114            - iceape <unfixed> (embed)
1115            - insighttoolkit 3.16.0-1 (embed)
1116            NOTE: insighttoolkit might've been fixed earlier
1117            - libparagui1.1 <unfixed> (embed)
1118            - paraview <unfixed> (embed)
1119            - poco <unfixed> (embed)
1120            - simgear <unfixed> (embed)
1121            - sitecopy 1:0.16.0-1
1122            - smart 1.0-1 (embed)
1123            - swish-e <unfixed> (embed)
1124            - tla <unfixed> (embed)
1125            - vtk 4.1.20030227-1 (embed)
1126            - wbxml2 <unfixed> (embed)
1127            - xmlrpc-c <unfixed> (embed)
1128            - iceweasel <unfixed> (embed)
1129            - kompozer <unfixed> (embed)
1130            - vxl 1.13.0-2 (embed)
1131            - xulrunner <unfixed> (embed)
1132            - apache2 2.2 (embed)
1133            - texlive-bin <not-affected> (Embedded code not compiled in)
1134            - vnc4 <unfixed> (embed)
1135            - xotcl <unfixed> (embed)
1136    
1137    xerces-c
1138            - xerces-c2 <unfixed> (old-version)
1139            - xerces27 <removed> (old-version)
1140    
1141    md5 (RSA's version; not the gnu version provided by coreutils)
1142            - w3c-libwww <removed> (embed; bug #551942)
1143            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1144    
1145    enet
1146            - sauerbraten <unfixed> (embed; #497194)
1147    
1148    eglibc
1149            - glibc <removed> (old-version)
1150    
1151    galib
1152            - gamera 3.2.3-1 (embed)
1153    
1154    configobj
1155            - bzr <unfixed> (embed; bug #555336)
1156            - elisa <unfixed> (embed; bug #555337)
1157            - gaupol <unfixed> (embed; bug #555338)
1158            - ipython <unfixed> (embed; bug #555339)
1159            - pida <unfixed> (embed; bug #555340)
1160            - psychopy <unfixed> (embed; bug #555341)
1161            - rest2web <unfixed> (embed; bug #555342)
1162            - auth2db <unknown> (embed)
1163            - dynagen <unknown> (embed)
1164            - iceweasel <unknown> (embed)
1165            - sabnzbdplus <unknown> (embed)
1166            - xulrunner <unknown> (embed)
1167            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1168    
1169    python-clientform
1170            - bibus <unfixed> (embed; bug #555332)
1171            - zope2.10 <unfixed> (embed; bug #555333)
1172            - zope2.11 <unfixed> (embed; bug #555334)
1173            - python-mechanize <unknown> (embed)
1174            - twill <unknown> (embed)
1175    
1176    python-mechanize
1177            - zope2.10 <unfixed> (embed; bug #555337)
1178            - zope2.11 <unfixed> (embed; bug #555338)
1179            - twill <unknown> (embed; bug #555339)
1180    
1181    pexpect
1182            - duplicity 0.6.06-1 (embed; bug #555361)
1183            - hplip <unfixed> (embed; bug #555362)
1184            - smart <unfixed> (embed; bug #555363)
1185    
1186    pyparsing
1187            - bauble <unfixed> (embed; bug #555366)
1188            - boa-constructor 0.6.1-8 (embed; bug #555367)
1189            - calibre <unfixed> (embed; bug #555368)
1190            - matplotlib <unfixed> (embed; bug #531024)
1191            - zhpy <unfixed> (embed; bug #555370)
1192            - polybori <unknown> (embed)
1193            - python-whoosh <unknown> (embed)
1194            - twill <unknown> (embed)
1195            - zope-textindexng3 <unknown> (embed)
1196    
1197    python-pysqlite2
1198            - python2.4 <unfixed> (embed; bug #553403)
1199            - python2.5 <unfixed> (embed; bug #553403)
1200    
1201    celementtree
1202            - python2.5 <unfixed> (embed)
1203            - smart 1.0-1 (embed)
1204            [etch] - smart <unfixed> (embed)
1205    
1206    elementtree
1207            - python2.5 <unfixed> (embed)
1208            - bzr <unfixed> (embed; bug #555343)
1209            - gedit 2.28.2-1 (embed; bug #555344)
1210            - smart 1.0-1 (embed)
1211            [etch] - smart <unfixed> (embed)
1212            - solfege <unfixed> (embed; bug #555345)
1213            - w3af <unfixed> (embed; bug #555346)
1214            - python-qt4 <unknown> (embed)
1215            - sphinx <unknown> (embed)
1216            - python-nltk <itp> (embed)
1217    
1218    python2.5
1219            - python2.4 <unfixed> (old-version)
1220            - jython <unfixed> (embed)
1221            NOTE: embeds many stdlib modules
1222            - python-django <unfixed> (embed; bug #555419)
1223            NOTE: embeds stdlib modules: doctest, decimal
1224            - gamera 3.2.3-1 (embed)
1225            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1226            - boa-constructor <unfixed> (embed; bug #555426)
1227            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1228            - nicotine <unfixed> (embed; bug #555427)
1229            NOTE: embeds stdlib modules: ConfigParser
1230            - museek+ <unfixed> (embed; bug #555428)
1231            NOTE: embeds stdlib modules: ConfigParser
1232            - vegastrike-data <unfixed> (embed)
1233            NOTE: embeds many stdlib modules
1234            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1235            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1236            - config-manager <unfixed> (embed; bug #555423)
1237            NOTE: embeds stdlib modules: optparse
1238            - jhbuild 2.28.0-1 (embed; bug #555421)
1239            NOTE: embeds stdlib modules: optparse, subprocess
1240            - smart <unfixed> (embed; bug #555432)
1241            NOTE: embeds stdlib modules: optparse
1242            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1243            NOTE: embeds stdlib modules: doctest
1244            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1245            NOTE: embeds stdlib modules: doctest
1246            - distribute <unfixed> (embed)
1247            NOTE: embeds stdlib modules: doctest
1248            - python-setuptools <unfixed> (embed; bug #555435)
1249            NOTE: embeds stdlib modules: doctest
1250            - zope.testing <unfixed> (embed; bug #555436)
1251            NOTE: embeds stdlib modules: doctest
1252            - translate-toolkit <unfixed> (embed; bug #555422)
1253            NOTE: embeds stdlib modules: textwrap, contextlib
1254            - libtpclient-py <unfixed> (embed; bug #555424)
1255            NOTE: embeds stdlib modules: subprocess
1256            - grass <unfixed> (embed; bug #555425)
1257            NOTE: embeds stdlib modules: subprocess
1258            - coherence <unfixed> (embed; bug #555429)
1259            NOTE: embeds stdlib modules: uuid
1260            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1261            NOTE: embeds stdlib modules: uuid
1262            - setroubleshoot <unfixed> (embed; bug #555431)
1263            NOTE: embeds stdlib modules: uuid
1264            - linkchecker <unfixed> (embed; bug #555414)
1265            NOTE: embeds msgfmt.py script
1266            - imdbpy <unfixed> (embed)
1267            NOTE: embeds msgfmt.py script
1268            - kiwi <unfixed> (embed)
1269            NOTE: embeds msgfmt.py script
1270            - moin <unfixed> (embed)
1271            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1272            - plone3 <unfixed> (embed)
1273            NOTE: embeds msgfmt.py script
1274            - roundup <unfixed> (embed)
1275            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1276            - rednotebook <unfixed> (embed; bug #555415)
1277            NOTE: embeds msgfmt.py script
1278            - turbogears <unfixed> (embed)
1279            NOTE: embeds msgfmt.py script
1280            - elisa <unfixed> (embed)
1281            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1282            - calibre <unfixed> (embed)
1283            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1284            - mailman <unfixed> (embed; #555416)
1285            NOTE: embeds msgfmt.py script
1286            - python-docutils <unknown> (embed)
1287            NOTE: embeds stdlib modules: optparse, textwrap
1288            - python-imaging <unknown> (embed)
1289            NOTE: embeds stdlib modules: doctest
1290            - python-mechanize <unknown> (embed)
1291            NOTE: embeds stdlib modules: doctest
1292            - twill <unknown> (embed)
1293            NOTE: embeds stdlib modules: subprocess
1294            - zeroc-ice <unknown> (embed)
1295            NOTE: embeds stdlib modules: subprocess
1296            - wxwidgets2.8 <unknown> (embed)
1297            NOTE: embeds stdlib modules: subprocess
1298            - cycle <unknown> (embed)
1299            NOTE: embeds msgfmt.py script
1300            - deluge <unknown> (embed)
1301            NOTE: embeds msgfmt.py script
1302            - opendict <unknown> (embed)
1303            NOTE: embeds msgfmt.py script
1304            - openerp-client <unknown> (embed)
1305            NOTE: embeds msgfmt.py script
1306            - rapidsvn <unknown> (embed)
1307            NOTE: embeds msgfmt.py script
1308            - wammu <unknown> (embed)
1309            NOTE: embeds msgfmt.py script
1310            - gaphor <unknown> (embed)
1311            NOTE: embeds msgfmt.py script
1312            - pida <unknown> (embed)
1313            NOTE: embeds msgfmt.py script
1314            - python-formencode <unknown> (embed)
1315            NOTE: embeds msgfmt.py script
1316            - duplicity <unfixed> (embed)
1317            NOTE: embeds stdlib module: urlparse, tarfile
1318            - pygopherd <unfixed> (embed)
1319            NOTE: embeds stdlib module: zipfile
1320    
1321    argparse
1322            - twill <unfixed> (embed; bug #555347)
1323            - ipython <unfixed> (embed; bug #555348)
1324    
1325    coherence
1326            - elisa <unfixed> (embed; bug #555335)
1327    
1328    simpletal
1329            - plastex <unfixed> (embed; bug #555371)
1330    
1331    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1332            - postr <unfixed> (embed)
1333            - elisa <unfixed> (embed)
1334    
1335    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1336            - apertium-tolk <unfixed> (embed)
1337            - ipython <unfixed> (embed)
1338            - virtaal <unfixed> (embed)
1339    
1340    distribute
1341            - setuptools <removed> (old-version)
1342    
1343    rails
1344            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1345            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1346            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1347            - thin <unfixed> (embed) [./spec/rails_app/*]
1348            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1349            NOTE: be dangerous if developers are naively basing their code off of the examples
1350            NOTE: prototype.js is among the example files
1351    
1352    lucene2 (prototype.js is among the embeds in the following)
1353            - lucene <unfixed> (old-version)
1354            - pylucene <unfixed> (embed)
1355            - libpdfbox-java <unfixed> (embed)
1356            - libfontbox-java <unfixed> (embed)
1357            - libjempbox-java <unfixed> (embed)
1358            - solr <unfixed> (embed)
1359    
1360    unicode-data
1361            - syslinux <unfixed> (embed)
1362            - camomile <unfixed> (embed)
1363            - fribidi <unfixed> (embed)
1364            - m17n-db <unfixed> (embed)
1365            - sbcl <unfixed> (embed)
1366            - heimdal <unfixed> (embed)
1367            - icu <unfixed> (embed)
1368            - icu4j <unfixed> (embed)
1369            - krb5 <unfixed> (embed)
1370            - moodle <unfixed> (embed)
1371            - openldap <unfixed> (embed)
1372            - pike7.6 <unfixed> (embed)
1373            - samba <unfixed> (embed)
1374            - samba4 <unfixed> (embed)
1375            - cmucl <unfixed> (embed)
1376            - typo3-src <unfixed> (embed)
1377            - mauve <unfixed> (embed)
1378            - texlive-bin <unfixed> (embed)
1379            - ypsilon <unfixed> (embed)
1380            - jeuclid <unfixed> (embed)
1381            - charmap.app <unfixed> (embed)
1382            - clisp <unfixed> (embed)
1383            - gnulib <unfixed> (embed)
1384            - opensrs-client <unfixed> (embed)
1385            - saxonb <unfixed> (embed)
1386            - rails <unfixed> (embed)
1387    
1388    feedparser
1389            - rawdog <unfixed> (embed; bug #383422)
1390            - miro <unfixed> (embed; bug #555351)
1391            - calibre <unfixed> (embed; bug #555352)
1392            - freevo <unfixed> (embed; bug #555353)
1393            - pida <unfixed> (embed; bug #555354)
1394            - planet-venus <unfixed> (embed; bug #555355)
1395            - plone3 <unfixed> (embed; bug #555356)
1396            - exaile 0.2.14+debian-1 (embed)
1397            - screenlets 0.1.2-3 (embed)
1398            NOTE: included twice
1399    
1400    agg:
1401            - matplotlib <unfixed> (embed: bug #377271)
1402            - contextfree <unfixed> (embed)
1403            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1404            - exactimage <unfixed> (embed)
1405            - python-enable <unfixed> (embed)
1406            - mapnik 0.5.1-3 (embed)
1407            NOTE: links statically to agg, but shared library is not available (bug #377271)
1408    
1409    vtk
1410            - paraview <unfixable> (embed; bug #495426)
1411    
1412    txt2tags
1413            - rednotebook <unfixed> (embed)
1414    
1415    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1416            - gajim <unfixed> (embed)
1417            - emesene <unfixed> (embed)
1418            - convirt <unfixed> (embed)
1419            - pida <unfixed> (embed)
1420            - rednotebook <unfixed> (embed)
1421    
1422    horde3 (prototype.js is among the embeds in the following)
1423            - mnemo2 <unfixed> (embed)
1424            - nag2 <unfixed> (embed)
1425    
1426    cimg
1427            - gmic <itp> (embed)
1428    
1429    mootools
1430            - gmic <itp> (embed)
1431    
1432    openldap
1433            - openldap2.3 <removed> (old-version)
1434    
1435    grub2
1436            - grub <unfixed> (old-version)
1437    
1438    gnupginterface
1439            - duplicity <unfixed> (embed)
1440    
1441    python-dateutil
1442            - awn-extras-applets <unfixed> (embed)
1443            - matplotlib <unknown> (embed)
1444    
1445    cups
1446            - cupsys <removed> (old-version)
1447    
1448    yui
1449            - bcfg2 <not-affected> (present in source but not included in any binary files)
1450            - serendipity <unfixed> (embed; bug #557746)
1451            - moodle 1.8.2.dfsg-5 (embed)
1452            - jifty 0.91117-1 (embed; bug #557748)
1453            - webgui 7.7.26-1 (embed)
1454            - loggerhead 1.17-1 (embed)
1455    
1456    quake3 (vanilla source not packaged in debian)
1457            - openarena <unfixable> (fork)
1458    
1459    quake2 (vanilla source not packaged in debian)
1460            - alien-arena <unfixable> (fork)
1461            - warsow <unfixable> (fork)
1462    
1463    libtheora
1464            - iceweasel <not-affected> (uses xulrunner)
1465            - xulrunner <unfixed> (embed; bug #540959)
1466            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1467            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1468            - iceape <unfixed> (embed; bug #559276)
1469            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1470            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1471    
1472    dtoa
1473            - bfilter <unfixed> (embed)
1474            - cacao <unfixed> (embed)
1475            - cdrdao <unfixed> (embed)
1476            - classpath <unfixed> (embed)
1477            - freej <unfixed> (embed)
1478            - iceape <unfixed> (embed)
1479            - iceweasel <unfixed> (embed)
1480            - jscoverage <unfixed> (embed)
1481            - kde4libs <unfixed> (embed)
1482            - kdelibs <unfixed> (embed)
1483            - kompozer <unfixed> (embed)
1484            - libv8 <unfixed> (embed)
1485            - mono <unfixed> (embed)
1486            - newlib <unfixed> (embed)
1487            - nspr <unfixed> (embed)
1488            - php5 <unfixed> (embed)
1489            - polyml <unfixed> (embed)
1490            - qt4-x11 <unfixed> (embed)
1491            - rhino <unfixed> (embed)
1492            NOTE: code translated to Java
1493            - ruby1.8 <unfixed> (embed)
1494            - ruby1.9 <unfixed> (embed)
1495            - ruby1.9.1 <unfixed> (embed)
1496            - sdd <unfixed> (embed)
1497            - sfind <unfixed> (embed)
1498            - star <unfixed> (embed)
1499            - tinymux <unfixed> (embed)
1500            - virtualbox-ose <unfixed> (embed)
1501            - webkit <unfixed> (embed)
1502            - xulrunner <unfixed> (embed)
1503    
1504    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1505            - firegpg <unfixed> (embed)
1506            - enigmail <unfixed> (embed)
1507    
1508    ptmalloc (not packaged in Debian)
1509            - crystalspace <unfixed> (embed)
1510            - qt4-x11 <unfixed> (embed)
1511    
1512    svgalib
1513            - usplash <unfixed> (embed)
1514    
1515    bogl
1516            - usplash <unfixed> (embed)
1517    
1518    taglist
1519            - usplash <unfixed> (embed)
1520    
1521    portaudio
1522            - audacity <unfixed> (embed; bug #323711)
1523    
1524    nyquist
1525            - audacity <unfixed> (embed)
1526            NOTE: embeds a forked nyquist with support for a shared library
1527    
1528    vamp-plugin-sdk
1529            - audacity <unfixed> (embed)
1530    
1531    wordpress
1532            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1533    
1534    php5
1535            - php4 <removed> (old-version)
1536    
1537    classpath
1538            - libgnucrypto-java <unfixed> (embed; bug #559788)
1539    
1540    libtool
1541            - apr <unfixed> (static; bug #489625)
1542            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1543            - arts <unfixed> (embed)
1544            - bochs 2.4.2-1 (embed; bug #560884)
1545            - camserv <unfixed> (embed)
1546            - collectd <unfixed> (embed)
1547            - courier-authlib 0.58-4 (embed)
1548            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1549            - cvsnt <unfixed> (embed)
1550            - dico <not-affected> (Uses the system copy of ltdl)
1551            - freeradius 0.1+20010527-1 (embed)
1552            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1553            - ggobi 2.1.9~20091212-1 (embed)
1554            - glame 2.0.1-4 (embed)
1555            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1556            - gnash <unfixed> (embed)
1557            - gnu-smalltalk <unfixed> (embed)
1558            - google-gadgets 0.10.5-0.3 (embed)
1559            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1560            - graphicsmagick 1.3.5-6 (embed)
1561            - graphviz 2.8-3 (embed)
1562            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1563            - guile-1.6 1.6.8-7 (embed)
1564            - hamlib <unfixed> (embed)
1565            - hercules <unfixed> (embed)
1566            - jags 1.0.4-3 (embed; bug #560864)
1567            - kdelibs <unfixed> (embed)
1568            - libannodex <removed> (embed)
1569            - libextractor <unfixed> (embed)
1570            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1571            - libtunepimp <unfixed> (embed)
1572            - mp4h <unfixed> (embed)
1573            - naim <unfixed> (embed)
1574            - parser-mysql <unfixed> (embed)
1575            - pinball <unfixed> (embed)
1576            - redland <unfixed> (embed)
1577            - siproxd <unfixed> (embed)
1578            - ski <unfixed> (embed)
1579            - synfig <unfixed> (embed)
1580            - unixodbc 2.2.4-5 (embed)
1581            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1582            - clamav 0.95+dfsg-1 (embed)
1583            - imagemagick 6:6.2.3.1-1 (embed)
1584            - hypre 2.4.0b-5 (embed)
1585            - lam <unfixed> (embed)
1586            - openmpi <unfixable> (embed; bug #559386)
1587            - parser <unfixed> (embed)
1588            - pdsh 2.18-5 (embed; bug #560892)
1589            - sbnc 1.2-8 (embed)
1590            - sdcc <unfixed> (embed)
1591            - wml <unfixed> (embed)
1592            - proftpd-dfsg <unfixed> (embed; bug #561748)
1593            - babel 1.4.0.dfsg-5 (embed)
1594            - libprelude 0.9.14-2 (embed)
1595            - heartbeat 2.1.4-7 (embed)
1596            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1597            NOTE: might've been fixed earlier
1598            - gcc-* <unknown> (embed)
1599    
1600    ocamlgsl
1601            - orpie 1.5.1-7.1 (embed; bug #550058)
1602    
1603    xdotool
1604            - keynav <unfixed> (embed; bug #560103)
1605    
1606    bulletphysics (not packaged; http://www.bulletphysics.org/)
1607            - supertuxkart <unfixed> (embed)
1608            - blender <unfixed> (embed)
1609    
1610    ghostscript
1611            - gs-gpl <removed> (old-version)
1612    
1613    icedove
1614            - thunderbird <removed> (old-version)
1615    
1616    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1617            - libjs-jquery <unfixed> (embed)
1618    
1619    sed
1620            - ssed <unfixed> (fork)

Legend:
Removed from v.7923  
changed lines
  Added in v.13695

  ViewVC Help
Powered by ViewVC 1.1.5