/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 4767 by micah, Tue Sep 26 04:57:36 2006 UTC revision 14425 by geissert, Wed Apr 7 17:43:57 2010 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embeds a copy of the library into another source package)
19          modified-embed (embeds a code copy that differs from upstream code)
20          fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30            - pdftohtml <unknown>
31            [sarge] - pdftohtml <unfixed>
32            [etch] - pdftohtml <unfixed>
33            NOTE: has been replaced by poppler-utils
34            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35            - texlive-base 3.0-12 (embed)
36            - texlive-bin 2007-1 (embed)
37            NOTE: links to poppler
38            - koffice <unfixed> (embed; bug #436163)
39            - libextractor 0.5.12-1 (embed)
40            NOTE: libextractor is using its own pdf decoder now
41            - ipe <unfixed> (embed)
42            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43            - ruby-gnome2 <unknown> (embed)
44            NOTE: copy only present in source but links to poppler
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48    
49    ppmd
50            - libcomplearn-mod-ppmd <unfixed> (fork)
51            NOTE: discussion in #458152
52    
53    libevent
54            - transmission 1.71-1 (embed; bug #529372)
55    
56    lrmi
57            - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59            - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61    
62    peercast
63            - gnome-peercast <removed> (embed)
64            [etch] - gnome-peercast <unfixed> (embed)
65    
66    silc-toolkit
67            - silc-client 1.1~beta6-1 (embed)
68    
69    icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    libusb
74            - argyll <unfixed> (embed)
75    
76    dietlibc
77            - ccontrol 0.9.1+20071204-1 (static)
78    
79    libmikmod
80            - sdl-mixer1.2 <unfixed> (embed)
81            TODO: report bug
82    
83    libiax
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86    spandsp
87            - iaxmodem <unfixable> (embed; bug #548885)
88    
89    python-paramiko
90            - fabric 0.9.0-2 (embed; bug #561398)
91    
92    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
93            - dpkg <unfixed> (static)
94            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
95            - rsync <unfixed> (embed)
96            - cherokee <unfixed> (embed)
97            NOTE: somehow derived code base
98            - mono <unfixed> (embed)
99            TODO: check mozilla
100            - Linux kernels <unfixed> (embed)
101            - pvpgn 1.7.8-2 (embed)
102            - mrtg 2.12.2-1 (embed)
103            - rpm <unknown> (embed)
104            NOTE: pinged anibal since when rpm was fixed
105            - tuxcmd-modules <unfixed> (embed)
106            - zsync <unfixed>
107            - tra <unfixed>
108            - sash <unfixed>
109            - nsis <unfixed>
110            - mseide-msegui <unfixed>
111            NOTE: mseide
112            - mirrordir <unfixed>
113            - poco <unfixed>
114            - klibc <unfixed>
115            - ghostscript <unfixed>
116            - freeimage <unfixed>
117            - clamav <unfixed> (fork)
118            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
119            - tuxonice-userui <unfixed> (static)
120            - plt-scheme <unfixed>
121            - perl <unfixed>
122            - paraview <unfixed>
123            - velvet 0.7.56~nozlibcopy-1
124            - gcvs <unfixed>
125            - dump <unfixed>
126            - aide <unfixed> (static)
127            - dar <unfixed> (static)
128            - avfs <unfixed>
129            - fpc <unfixed>
130            - winff <unfixed>
131            NOTE: inherited from fpc, see #472304
132            - lazarus <unfixed>
133            NOTE: inherited from fpc, see #472304
134            - erlang <unfixed> (embed)
135            - gamera 3.2.3-1 (embed)
136            - python2.4 <unfixed> (embed; bug #553403)
137            - python2.5 <unfixed> (embed; bug #553403)
138    
139    dulwich
140            - hg-git 0.1.0-1 (embed; bug #541996)
141    
142    libvigraimpex
143            - hugin <unfixed> (embed; bug #542259)
144            - enblend-enfuse <unfixed> (embed; bug #542258)
145            - gamera 3.2.3-1 (embed)
146    
147    libbz2
148            - dpkg <unfixed> (static)
149    
150    libyahoo2
151            - centerim <unfixed> (embed; bug #559783)
152    
153    libmsn
154            - centerim <unfixed> (embed; bug #559783)
155    
156    libgadu
157            - centerim <unfixed> (embed; bug #559783)
158            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
159            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
160            - kdenetwork 4:3.3.2-5 (embed)
161            NOTE: from kdenetwork: kopete
162            - ekg 1:1.8~rc0-1 (embed)
163            - kadu 0.6.0.2-3 (embed; bug #504430)
164            - gadu <itp> (embed)
165    
166    xmlrpc (which package is the "origin" of this code?)
167            - drupal <unfixed> (embed)
168            - phpgroupware <unfixed> (embed)
169            - egroupware <unfixed> (embed)
170            - phpwiki <unfixed> (embed)
171            - php4 <removed> (embed)
172            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
173    
174    shtool (affects build-time only)
175            - mysql-ocaml <unfixed> (embed)
176            - php4 <removed> (embed)
177            - php5 <unfixed> (embed)
178    
179    xulrunner
180            - iceape <unfixed> (embed; bug #561749)
181            - iceweasel 2.0.0.19 (embed)
182            - icedove <unfixed> (embed; bug #561750)
183            - kompozer <unfixed> (embed; bug #532168)
184            - galeon 2.0.2-4 (embed)
185            - epiphany-browser 2.14.3-8 (embed)
186            - conkeror 0.9~git080629-2 (embed)
187            - kazehakase 0.4.2-1 (embed)
188    
189    xli
190            - xloadimage <unfixed> (embed)
191    
192    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
193            - openmotif <unfixed> (embed)
194            - libxpm <unfixed> (embed; bug #575750)
195    
196    kerberized apps with BSD origin
197            - krb4 <removed> (embed)
198            - krb5 <unfixed> (embed)
199            - heimdal <unfixed> (embed)
200    
201    grip (which pkg is the origin?)
202            - libcdaudio <unfixed>
203            - grip <unfixed>
204            - gnome-vfs <unfixed>
205            TODO: check vfs2 as well
206    
207    fudforum
208            [etch] - phpgroupware <unfixed> (embed)
209            NOTE: phpgroupware-fudforum
210            [sarge] - egroupware-fudforum <removed> (embed)
211    
212    libbsd
213            - rdate 1:1.2-3 (embed)
214            - atheme-services <unfixed>
215            - libbsd-arc4random-perl <unfixed>
216            - isakmpd <unfixed>
217            - bsdgames <unfixed> (embed)
218            - bsd-mailx <unfixed> (embed)
219            - netcat-openbsd <unfixed> (embed; bug #550611)
220            - openssh <unfixed> (embed)
221            - unworkable <unfixed> (embed)
222    
223    cvs
224            - gcvs <unfixed> (embed)
225            NOTE: see cvsunix/src in tarball
226    
227    pcre3
228            - php4 <removed> (embed)
229            - analog 2:5.23-0woody1 (embed)
230            - goffice <unfixed> (embed)
231            NOTE: libgoffice-*
232            - vfu 4.06-4.1 (embed; bug #450754)
233            - tf5 5.0beta7-1 (embed)
234            - monotone 0.43-1 (embed)
235            NOTE: this only affects versions >= 0.37
236            - glib2.0 2.15.2-1 (embed)
237            - apache2 2.0.53-4 (embed)
238            - exim4 4.10-0.srh20.12 (embed)
239            - yacas <unfixed> (embed)
240            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
241            - gtamsanalyzer.app 0.42-5 (embed)
242            - tin 980117-1 (embed)
243            - kazehakase 0.5.2-1
244            - webkit 1.0.1-1 (embed)
245            - qt4-x11 <unfixed> (embed)
246            NOTE: embedded via webkit copy
247            - erlang <unfixed> (embed)
248            - ssed <unfixed> (embed)
249    
250    tiff
251            - wxwindows2.4 2.2.1 (embed)
252            - gamera 3.2.3-1 (embed)
253            - freeimage <unfixed> (embed)
254    
255    uudeview
256            - libconvert-uulib-perl <unfixed> (embed)
257            - pan <unfixed> (embed)
258    
259    sqlite (not affected by security vulnerabilities so far)
260            - amarok <unfixed> (embed)
261            - monotone 0.43-1 (embed)
262            - iceweasel <unfixed> (embed)
263            - heimdal <unfixed> (embed; bug #559616)
264    
265    util-linux/mount
266            - loop-aes-utils <unfixed> (embed)
267            NOTE: contains code from util-linux' mount in the mount-aes-udeb
268    
269    sylpheed
270            - sylpheed-claws <unfixed> (fork)
271    
272    phpsysinfo
273            - egroupware <unfixed> (embed)
274            - phpgroupware <unfixed> (embed)
275    
276    phpldapadmin
277            [sarge] - egroupware <unfixed> (embed)
278            NOTE: removed from egroupware after sarge
279    
280    chmlib
281            - kchmviewer <unknown> (embed)
282    
283    ffmpeg (libavcodec/libavformat)
284            - mplayer 1.0~rc2-14 (embed; bug #395252)
285            - kino 1.0.0-1
286            - vlc <not-affected> (Links dynamically since initial release)
287            - smilutils 0.3.0-10
288            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
289            - motion 3.1.19-1
290            - gstreamer0.10-ffmpeg 0.10.3-2
291            - xmovie <removed> (static)
292            TODO: gimp-gap (potentially using ffmpeg code as well)
293            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
294            - audacity 1.3.7-2 (embed; bug #512278)
295    
296    faad2
297            - mplayer 1.0~rc2-20 (embed)
298            - avifile <unfixed> (embed; bug #538750)
299            - ffmpeg-debian <removed> (embed)
300    
301    libmad (MPEG decoding lib)
302            - xine-lib <unfixed> (embed)
303            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
304            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
305    
 xpdf code: (some use xpdf 2, some xpdf 3)  
 gpdf (will be replaced by evince in Gnome 2.12)  
 pdftohtml (current poppler source package has a ported version, pinged maintainer)  
 kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
 tetex-bin (links to poppler since 3.0-12)  
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
 poppler  
 koffice (upstream is working on using poppler, probably not in time for Etch)  
 libextractor (uses internal pdf decoder since 0.5.12-1)  
 pdfkit.framework (links to poppler since 0.8-4)  
   
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
306  libdts  libdts
307  xine-lib          - xine-lib <unfixed> (embed)
308    
 flac:  
309  flac  flac
310  xine-lib          - xine-lib <unfixed> (embed)
311    
312  liba52:  liba52
313  a52dec          - a52dec <unfixed> (embed)
314  xine-lib          - xine-lib <unfixed> (embed)
315    
316  libmpeg2:  libmpeg2
317  mpeg2dec          - mpeg2dec <unfixed> (embed)
318  xine-lib          - xine-lib <unfixed> (embed)
319    
320    libntlm
321            - wget <unfixed> (fork; bug #550436)
322            - curl <unfixed> (fork; bug #550437)
323            - cntlm <unfixed> (fork; bug #550438)
324    
325    uw-imap
326            - pine <unfixed> (embed)
327            - alpine <unfixed> (embed)
328    
329    imagemagick
330            - graphicsmagick <unfixed> (fork)
331    
332    python-urlgrabber
333            - mercurial <unfixed> (embed; bug #531062)
334            - w3af <unfixed> (embed; bug #555372)
335            [experimental] - harvestman <unfixed> (embed; bug #555373)
336    
337    beautifulsoup
338            - python-mechanize <unfixed> (embed; bug #555349)
339            - zope2.11 <removed> (embed; bug #555350)
340            - twill <unknown> (embed)
341    
342    halibut
343            - nsis <unfixed> (fork)
344    
345    libghttp
346            - hotway <unfixed> (embed)
347    
348    libsndfile
349            - ardour 1:2.7.1-1 (embed)
350    
351    glibmm2.4
352            - ardour 1:2.7.1-1 (embed)
353    
354    libgnomecanvasmm2.6
355            - ardour 1:2.7.1-1 (embed)
356    
357    libsigc++-2.0
358            - ardour 1:2.7.1-1 (embed)
359    
360    soundtouch
361            - ardour 1:2.7.1-1 (embed)
362    
363    libmms
364            - xine-lib <unfixed> (embed)
365            - mimms <unfixed> (embed)
366    
367    fckeditor
368            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
369            - moin 1.8.2-2 (embed; bug #452599)
370            - karrigell <removed> (embed; bug #452598)
371            - gforge 4.6.99+svn6225-1 (embed)
372            - request-tracker3.8 <unfixed> (embed)
373            - otrs2 <unfixed> (embed)
374    
375    ipatlas (not packaged in Debian)
376            - moodle <unfixed> (embed; bug #507185)
377    
378    libphp-phpmailer
379            - moodle <unfixed> (embed; bug #507185)
380            - mahara <unfixed> (embed)
381            - symfony <unfixed> (embed; bug #566778)
382            [etch] - phpgroupware <unfixed> (embed)
383            NOTE: phpgroupware-felamimail is only in etch
384            - egroupware <unfixed> (embed; bug #504283)
385            - glpi <unfixed>
386    
387    htmlArea (not packaged in Debian)
388            - moodle <unfixed> (embed)
389    
390    giflib
391            - wine <unfixed> (embed; bug #466181)
392    
393    bennu (not packaged in Debian, http://bennu.sourceforge.net)
394            - moodle <unfixed> (embed)
395    
396    smarty
397            - moodle 1.8.2-2 (embed; bug #471158)
398            - gallery2 2.2.5-2 (embed; bug #471160)
399            - mahara 0.9.2-2 (embed; bug #471201)
400            - gosa 2.4beta1-1 (embed; bug #471200)
401    
402    TinyMCE
403            - wordpress 2.5.1-3 (embed; bug #478257)
404            - moodle <unfixed> (embed; bug #507185)
405            - knowledgeroot <unfixed> (embed)
406            - joomla <itp> (bug #326398)
407    
408    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
409            - scite <unfixed> (embed)
410            - qscintilla <unfixed> (embed)
411            - qscintilla2 <unfixed> (embed)
412            - geany <unfixed> (fork)
413            - anjuta <unfixed> (embed)
414    
415    libphp-adodb
416            - moodle <unfixed> (embed; bug #507185)
417            NOTE: also AdoDB-XML Schema
418            - gallery2 <unfixed> (embed)
419            - phppgadmin <unfixed> (embed)
420            - egroupware <unfixed> (embed)
421            - phpwiki <unfixed> (embed)
422            - torrentflux 2.0beta1-2 (embed)
423            - ipplan <unfixed> (embed)
424            - typo3-src <unfixed> (embed)
425            - cacti <unknown> (embed)
426            [sarge] - cacti <unfixed> (embed)
427            NOTE: dependency exists, but internal version is used
428            - gforge 4.7~rc2-6 (embed)
429            - mahara <unfixed> (embed)
430    
431    gzip
432            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
433            - klibc <unfixed> (embed)
434            NOTE: based on linux-kernel gzip code
435            - busybox <unfixed> (embed)
436            - pristine-tar <unfixed> (modified-embed)
437            NOTE: compression code only, not uncompression
438    
439    neon
440            - cadaver 0.22.3+debian-1 (embed; bug #188381)
441            - gnome-vfs2 <unfixed> (embed; bug #395874)
442            [etch] - litmus <unfixed> (embed; #395875)
443            - litmus <removed> (embed; #395875)
444            [sarge] - screem <unfixed> (embed)
445            - sitecopy 1:0.16.0-1 (embed; bug #395876)
446            [etch] - tla <unfixed> (embed; bug #395877)
447            [sarge] - tla <unfixed> (embed; bug #395877)
448    
449    libmodplug
450            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
451    
452    libvncserver
453            - vino <unfixed> (embed)
454    
455    putty
456            - filezilla <unfixed> (embed)
457    
458    tinyxml (not packaged in Debian; itp bug #531968)
459            - filezilla <unfixed>
460            - crystalspace <unfixed> (embed)
461            - libwfut <unfixed> (embed)
462            - rarian <unfixed> (embed)
463            - bulletml <unfixed> (embed)
464            - pokerth <unfixed> (embed)
465            - qutecom <unfixed> (embed)
466            - sofa-framework <unfixed> (embed)
467            - yate <unfixed> (embed)
468            - antigrav <unfixed> (embed)
469            - balder2d <unfixed> (embed)
470            - cal3d <unfixed> (embed)
471            - criticalmass <unfixed> (embed)
472            - ember <unfixed> (embed)
473            - epiphany <unfixed> (embed)
474            - gambit <unfixed> (embed)
475            - noiz2sa <unfixed> (embed)
476            - ogre <unfixed> (embed)
477            - opencity <unfixed> (embed)
478            - openmovieeditor <unfixed> (embed)
479            - pouetchess <unfixed> (embed)
480            - tecnoballz <unfixed> (embed)
481            - trigger-rally <unfixed> (embed)
482            - xmoto <unfixed> (embed)
483            - mapnik <unknown> (embed)
484            NOTE: uses a different XML parser by default
485            - rrootage 0.23a-6 <embed>
486            NOTE: links to libbulltetml
487            - boson <unknown> (embed)
488            NOTE: the embedded code is unused
489    
490    gv
491            - evince <unfixed> (embed)
492            NOTE: ps/ tree from gv 3.5.8
493            NOTE: evince-gtk is affected (a component of evince source package)
494    
495    libXbae
496            - paw <removed> (embed)
497            [etch] - paw <unfixed> (embed)
498    
499    libgtkhtml
500            - claws-mail-extra-plugins <unfixed> (fork)
501    
502    libXaw
503            - paw <removed> (embed)
504            [etch] - paw <unfixed> (embed)
505            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
506    
507    libgd2
508            - graphviz <unfixed> (embed)
509            NOTE: lib/gd seems to be 2.0.33
510            - wml 2.0.11ds2-1 (embed)
511            - libwmf <unfixed> (embed)
512            NOTE: derived from gd 1.6.3
513    
514    rar
515            - unrar-nonfree <unfixed> (embed)
516    
517    unrar-free (maybe this code is derived from the original rar, too?)
518            - clamav <unfixed> (embed)
519            NOTE: seems to be disabled in default config
520    
521    mplayer (DirectMedia Object loader)
522            - xine-lib <unfixed> (embed)
523            NOTE: src/libw32dll/
524            - vlc <unfixed> (embed)
525            NOTE: modules/codec/dmo/
526            - mplayer 1.0~rc2-20 (embed)
527    
528    libwpd (WordPerfect converter)
529            - openoffice.org <unfixed> (embed)
530    
531    fsplib (http://sourceforge.net/projects/fsp/)
532            - gftp <unfixed> (embed)
533            NOTE: lib/fsplib version 0.3
534    
535    sprng
536            - tree-puzzle <unfixed> (embed)
537    
538    librpcsecgss
539            - krb5 <unfixed> (embed)
540    
541    jasper
542            - ghostscript 8.64~dfsg-2 (embed)
543    
544    libiris
545            - psi <unfixed> (embed)
546            - kdenetwork <unfixed> (embed)
547            NOTE: kopete embeds libiris but links dynamically to libidn
548            - kdegames <unfixed> (embed)
549            NOTE: ksirk/kde4
550    
551    libidn
552            - monotone 0.43-1 (embed)
553            - psi <unfixed> (embed)
554            NOTE: psi embeds libiris which embeds libidn
555            - kdegames <unfixed> (embed)
556            NOTE: kdegames/kde4 embeds libiris which embeds libidn
557    
558    lua5.1
559            - monotone 0.43-1 (embed)
560            - nmap 5.00-1 (embed; bug #527997)
561            [lenny] - nmap <unfixed> (embed; bug #527997)
562            - ocropus <unfixed> (embed)
563            - enigma <unfixed> (embed)
564            NOTE: requires lua built with C++
565            - freeciv <unfixed> (embed)
566            - spring <unfixed> (embed)
567    
568    libbotan
569            - monotone 0.43-1 (embed)
570    
571    NetXX
572            - monotone 0.43-1 (embed)
573    
574    libgc
575            - mono <unfixed> (embed)
576    
577    lzma
578            - p7zip <unfixed> (embed)
579            - xz-utils <unfixed> (fork)
580    
581    lzo
582            - grub2 <unfixed> (embed)
583    
584    yassl
585            - mysql-dfsg-5.0 <unfixed> (embed)
586            - mysql-dfsg-5.1 <unfixed> (embed)
587    
588    pax code
589            - tar <unfixed> (embed)
590            - cpio <unfixed> (embed)
591    
592    t1lib
593            - tetex-bin 2.0.2-1 (embed)
594            - texlive-bin <unknown> (embed)
595    
596    guichan
597            - boswars <unfixed> (embed)
598            NOTE: maintainer notified us, working on it
599    
600    tolua
601            - boswars <unfixed> (embed)
602            NOTE: maintainer notified us, working on it
603            NOTE: actually tolua++
604            - ocropus <unfixed> (embed)
605            NOTE: actually tolua++
606            - freeciv <unfixed> (embed)
607            NOTE: actually tolua++
608            - enigma <unfixed> (embed)
609    
610  curl:  asio-dev
611  wget (code for NTLM authentication)          - luxrender <removed> (embed)
612    
613  TODO evaluate:  xine-lib
614  gimp-gap (potentially using ffmpeg code as well)          - vlc <unfixed> (embed)
615            NOTE: only parts included in modules/access/rtsp
616    
617  uw-imap:  netpbm
618  pine          - tcl8.3 <unfixed> (embed)
619            - tcl8.4 <unfixed> (embed)
620            - tcl8.5 <unfixed> (embed)
621            NOTE: generic/tkImgGIF.c
622    
623    tk8.5
624            - tk8.0 <removed> (old-version)
625            - tk8.3 <unfixed> (old-version)
626            - tk8.4 <unfixed> (old-version)
627            - perl-tk <unfixable> (fork)
628    
629    samba
630            - mc 2:4.6.2~git20080311-1 (embed)
631            NOTE: maintainer is aware of this, currently searching a solution
632    
633    plib1.8.4c2
634            - boson <unfixed> (fork)
635            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
636    
637    fribidi
638            - quesoglc <unfixed> (embed)
639            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
640    
641    glew
642            - quesoglc <unfixed> (embed; bug #489341)
643            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
644            - trigger <unfixed> (embed)
645            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
646            - trigger-rally <unfixed> (embed)
647            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
648    
649    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
650            - transcend <unfixed> (embed)
651            - cultivation <unfixed> (embed)
652            - passage <unfixed> (embed)
653            - gravitation <unfixed> (embed)
654    
655    tar
656            - libarchive <unfixed> (embed)
657            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
658    
659    cpio
660            - libarchive <unfixed> (embed)
661            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
662    
663    kde4libs
664            - kdelibs <unfixable> (old-version)
665    
666    webkit
667            - qt4-x11 <unfixed> (embed; bug #479851)
668            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
669            - kde4libs <unfixable> (fork)
670            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
671            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
672    
673    ftgl
674            - blender 2.46+dfsg-1 (embed)
675    
676    wv
677            - abiword <unfixed>
678    
679    qemu
680            - kvm <removed> (embed; bug #543159)
681            - qemu-kvm <unfixed> (embed; bug #560853)
682            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
683            - xen-3 3.4.2-2 (embed; bug #560856)
684            - xen-unstable <unfixed> (embed; bug #560856)
685    
686    vgabios
687            - kvm <removed> (embed; bug #489442)
688            - qemu-kvm <unfixed> (embed)
689    
690    bochs
691            - kvm <removed> (embed; bug #489442)
692            - qemu-kvm <unfixed> (embed)
693    
694    speex
695            - vorbis-tools <unfixed> (embed)
696            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
697            - gst-plugins-good0.10 <unfixed> (embed)
698            - xine-lib <unfixed> (embed)
699            - libfishsound <unfixed> (embed)
700            - libannodex <removed> (embed)
701            - vlc <unfixed> (embed)
702            - xmms-speex <unfixed> (embed)
703            - libsdl-sound1.2 <unfixed> (embed)
704            - sweep <unfixed> (embed)
705    
706    libreadline
707            - magic <itp> (old-version)
708    
709    opcode
710            - ode <unfixed> (embed)
711            NOTE: opcode is not a package in debian, it is just embedded
712            NOTE: http://www.codercorner.com/Opcode.htm
713    
714    gimpact
715            - ode <unfixed> (embed)
716            NOTE: gimpact is not a package in debian, it is just embedded
717            NOTE: http://gimpact.sf.net
718    
719    mochikit
720            - mahara <unfixed> (embed)
721            NOTE: they require extra patches, still unmerged upstream
722            - ntop <unfixed> (embed)
723            - coherence 0.6.2-1 (embed)
724            - paste <unfixed> (embed)
725            - turbogears <unfixed> (embed)
726            - plone3 <removed> (embed)
727            - xulrunner <unfixed> (embed)
728            - libjifty-plugin-chart-perl <unfixed> (embed)
729            - sabnzbdplus <unfixed> (embed)
730            - tgmochikit <unfixed> (embed)
731    
732    prototypejs
733            - netbeans-ide 6.0.1+dfsg-2 (embed)
734            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
735            - webcit <unfixed> (embed; bug #555219)
736            - asterisk 1:1.6.2.0~rc3-1 (embed)
737            - libjson-ruby 1.1.4-1 (embed; bug #555224)
738            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
739            - horde3 <unfixed> (embed)
740            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
741            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
742            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
743            - ebug-http <removed> (embed; bug #555236)
744            - libaws 2.7-1 (embed; bug #555222)
745            - phpgedview <removed> (embed)
746            - poker-network 1.7.6-1 (embed; bug #555238)
747            - rails 2.1.0-6 (embed)
748            - wordpress 2.5.0-2 (embed; bug #555243)
749            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
750            TODO: search through all of the other zope packages
751            - ampache 3.4.1-2 (embed)
752            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
753            - hobix 0.5~svn20070319-4 (embed; bug #555247)
754            - zabbix 1.6.6-4 (embed; bug #555250)
755            - chora2 <unfixed> (embed; bug #555253)
756            - gollem <unfixed> (embed; bug # 555254)
757            - jscropperui 1.2.1-1 (embed; bug #555257)
758            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
759            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
760            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
761            - activeldap <unfixed> (embed)
762            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
763            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
764            - otrs2 2.3.4-6 (embed; bug #555267)
765            - webcalendar 1.2~b1-2 (embed; bug #555269)
766            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
767            - jifty 0.90519-1 (embed; bug #555271)
768            - jquery 1.4-1 (embed; bug #555272)
769            - passenger 2.2.5debian1-1 (embed; bug #555273)
770            - plone3 <removed> (embed; bug #555275)
771            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
772            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
773            - xulrunner <unfixed> (embed)
774            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
775    
776    gdb
777            - insight <unfixed> (embed)
778    
779    e2fsprogs
780            - ldiskfsprogs <unfixable> (fork)
781    
782    quazip (not packaged in Debian)
783            - qcake <unfixed> (embed)
784            NOTE: starting with upstream version 0.6.4
785    
786    exo
787            - pcmanfm <unfixed> (embed; bug #499677)
788            NOTE: slightly modified source code
789    
790    java
791            - openjdk-6 <unfixed>
792            - sun-java5 <unfixed>
793            - sun-java6 <unfixed>
794    
795    libphp-snoopy
796            - ampache 3.4.1-2 (embed; bug #504169)
797            - gforge 4.6.99+svn6094-2 (embed)
798            - mahara 1.0.5-2 (embed; bug #504170)
799            - pixelpost 1.7.1-5 (embed; bug #504171)
800            - mediamate 0.9.3.6-5 (embed; bug #504172)
801            - opendb <removed> (embed; bug #504173)
802            [etch] - opendb <unfixed> (embed; bug #504173)
803            - wordpress 2.5.1-9 (embed; bug #443948)
804            - moodle <unfixed> (embed; bug #507185)
805            [etch] - phpgroupware <unfixed> (embed)
806            NOTE: phpgroupware-felamimail
807            - magpierss 0.72-3 (embed; bug #431089)
808    
809    jquery
810            - zekr <unfixed> (embed)
811            - wordpress <unknown> (embed)
812            - yocto-reader <unfixed> (embed)
813            - textpattern <unfixed> (embed)
814            - genshi 0.5.1-1 (embed)
815            NOTE: compressed file under examples/ dir
816            - prewikka <unfixed> (embed)
817            - libramaze-ruby <unfixed> (embed)
818            - drupal5 <unfixed> (embed)
819            - b2evolution <unfixed> (embed)
820            - wesnoth <unfixed> (embed)
821    
822    tablesorter (jquery plugin, not packaged yet)
823            - wesnoth <unfixed> (embed)
824    
825    kses
826            - wordpress <unfixed> (embed; bug #504242)
827            NOTE: their copy has all methods renamed to wp_<foo>
828            NOTE: kses isn't in Debian, RFP: #504240
829            - moodle <unfixed> (embed; bug #507185)
830            - egroupware <unfixed> (embed)
831    
832    magpierss
833            - wordpress <unfixed> (embed; bug #504242)
834            - moodle <unfixed>
835    
836    php-gettext
837            - wordpress 2.8.4-1 (embed; bug #504242)
838            - docbookwiki <unfixed> (embed)
839            - knowledgeroot 0.9.9.5-1
840            NOTE: non-free
841    
842    libphp-ixr (name may change, it is the Incutio XML-RPC)
843            - wordpress <unfixed> (embed; bug #504242)
844            NOTE: libphp-ixr isn't in Debian, RFP: #504236
845            - dokuwiki <unfixed> (embed)
846            - textpattern <unfixed> (embed)
847    
848    libphp-cas
849            - glpi <unfixed> (embed)
850            - moodle <unfixed> (embed; bug #505984)
851    
852    scriptaculous (prototype.js is among the embeds in the following)
853            - glpi <unfixed> (embed)
854            - libaws <unfixed> (embed; bug #555222)
855            - op-panel <unfixed> (embed)
856            - symfony <unfixed> (embed)
857            NOTE: maintainer says there are extra incompatible changes required
858            - pixelpost 1.7.1-6 (embed)
859            - webhelpers <unfixed> (embed)
860            - qwik <removed> (embed; bug #555241)
861            - smokeping <unfixed> (embed)
862            - turba2 <unfixed> (embed)
863            - typo3-src 4.2.3-1 (embed)
864            - request-tracker3.6 <unfixed> (embed)
865            - request-tracker3.8 <unfixed> (embed)
866            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
867            - wordpress 2.5.0-2 (embed)
868            - libhtml-prototype-perl 1.48-3 (embed)
869    
870    libmarkdown-php
871            - moodle <unfixed> (embed; bug #507185)
872            - pixelpost 1.7.1-6 (embed)
873    
874    php-openid
875            - wordpress-openid <itp> (embed)
876    
877    geshi
878            - dokuwiki 0.0.20080505-3.1 (embed)
879            - pgfouine 1.0-1.1 (embed)
880            - websvn 2.1.0-1 (embed)
881    
882    webcalendar
883            - gforge 4.7~rc2-6 (embed; bug #504758)
884    
885    libical
886            - kdepim <unknown> (fork)
887            NOTE: fixed at some point during 4.0
888            - kdepimlibs 4.2.0-1 (fork)
889            - claws-mail-extra-plugins <unfixed> (fork)
890    
891    harfbuzz
892            - qt4-x11 <unfixed> (embed)
893            - pango1.0 <unfixed> (embed)
894            - fontmatrix <unfixed> (embed)
895    
896    libzip
897            - php5 <unfixable> (modified-embed)
898            - odt2txt <unfixed> (embed; bug #523808)
899    
900    json.php (not packaged; should be replaced with php's built-in functions)
901            - moodle <unfixed>
902            - yui <unfixed>
903            - gallery2 <unfixed>
904            - dokuwiki <unfixed>
905            - typo3-src <unfixed>
906    
907    php-fpdf
908            - tcpdf <itp> (fork)
909            - moodle <unfixed>
910            - phpwiki <unfixed>
911            - egroupware <unfixed>
912            - ldap-account-manager <unfixed> (fork)
913    
914    tcpdf (itp: #495985)
915            - moodle <unfixed>
916            - phpmyadmin <unfixed>
917    
918    typo3
919            - moodle <unfixed>
920    
921    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
922            - moodle <unfixed>
923            - gosa <unfixed>
924    
925    php-ole (itp: #487558)
926            - moodle <unfixed>
927    
928    pieforms (http://www.catalyst.net.nz)
929            - mahara <unfixed>
930    
931    savant2 (http://phpsavant.com)
932            - egroupware <unfixed>
933    
934    rssparser (http://nwow.org)
935            - egroupware <unfixed>
936            - phpgroupware <unfixed>
937    
938    lcms
939            - openjdk-6 <unfixed> (fork)
940            - gimp 2.4.0~rc2-2
941    
942    libphp-phplayersmenu
943            - diogenes <unfixed>
944            - phpldapadmin <unfixed>
945    
946    libphp-pclzip
947            - docvert <unfixed>
948            - moodle <unfixed>
949            - egroupware <unfixed>
950    
951    libphp-simplepie
952            - dokuwiki <unfixed>
953            - wordpress <unfixed>
954    
955    libphp-jpgraph
956            - egroupware <unfixed>
957    
958    php-simpletest
959            - moodle <unfixed>
960    
961    libpng
962            - iceweasel <not-affected> (uses xulrunner)
963            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
964            - iceape 1.0.13~pre080614i-0etch1 (embed)
965            - xulrunner 1.9.0.13-1 (embed)
966            [lenny] - xulrunner 1.9.0.11-0lenny1
967            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
968            - gamera 3.2.3-1 (embed)
969            - freeimage <unfixed> (embed)
970            - tuxonice-userui (static)
971    
972    irssi
973            - silc-client <unfixed> (embed)
974            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
975    
976    extc
977            - mtasc <unfixed> (embed)
978            - haxe <unfixed> (embed)
979    
980    swflib
981            - mtasc <unfixed> (embed)
982            - haxe <unfixed> (embed)
983    
984    libitext-java
985            - bouncycastle 2.1.4-1 (embed)
986    
987    python-ply
988            - pyke <unfixed> (embed; bug #555363)
989            - pywbem 0.7.0-4 (embed; bug #555364)
990            - sepolgen <unfixed> (embed; bug #555365)
991            - zope-textindexng3 <unknown> (embed)
992            - iceweasel <not-affected> (uses xulrunner)
993            - xulrunner <unknown> (embed)
994            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
995    
996    libdumbnet (libdnet upstream)
997            - nmap <unfixed> (fork)
998    
999    gcc-4.4
1000            - gcc-mingw32 <unfixed> (embed)
1001    
1002    camlimages
1003            - advi <unfixed> (static; bug #550441)
1004    
1005    memcached
1006            - memcachedb <unfixed> (embed)
1007    
1008    yajl
1009            - argyll <unfixed> (embed; bug #544223)
1010            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1011    
1012    nusoap
1013            - gforge 4.8.2-1 (embed)
1014            - ampache <unfixed> (embed)
1015            - poker-network <unfixed> (embed)
1016            - moodle <unfixed> (embed)
1017            NOTE: code is not used when running under php5 and soap is enabled
1018            - phpwiki <unfixed> (embed)
1019            - gallery2 <unfixed> (embed)
1020            - typo3-src <unfixed> (embed)
1021    
1022    libept
1023            - adept <unfixed> (embed; bug #540649)
1024    
1025    libvorbis
1026            - iceweasel <not-affected> (uses xulrunner)
1027            - xulrunner <unfixed> (embed; bug #540959)
1028            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1029            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1030            - iceape <unfixed> (embed)
1031            [etch] - iceape <not-affected> (introduced in 2.0)
1032            [lenny] - iceape <not-affected> (introduced in 2.0)
1033    
1034    cairo
1035            - iceweasel <not-affected> (uses xulrunner)
1036            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1037    
1038    liboggz
1039            - iceweasel <not-affected> (uses xulrunner)
1040            - xulrunner <unfixed> (embed; bug #540959)
1041            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1042            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1043            - iceape <unfixed> (embed)
1044            [etch] - iceape <not-affected> (introduced in 2.0)
1045            [lenny] - iceape <not-affected> (introduced in 2.0)
1046    
1047    liboggplay
1048            - iceweasel <not-affected> (uses xulrunner)
1049            - xulrunner <unfixed> (embed; bug #540959)
1050            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1051            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1052            - iceape <unfixed> (embed)
1053            [etch] - iceape <not-affected> (introduced in 2.0)
1054            [lenny] - iceape <not-affected> (introduced in 2.0)
1055    
1056    php-net-dnsbl
1057            - serendipity <unfixed> (embed; bug #541740)
1058    
1059    php-onyx-rss
1060            - serendipity <unfixed> (embed; bug #541740)
1061    
1062    php-text-wiki
1063            - serendipity <unfixed> (embed; bug #541740)
1064    
1065    php-xml-rpc
1066            - serendipity <unfixed> (embed; bug #541740)
1067    
1068    polarssl (does not have a shared library)
1069            - pdkim <itp> (embed; bug #543150)
1070            - xyssl <unfixed> (old-version)
1071    
1072    pidgin (libpurple)
1073            - gaim <removed> (old-version)
1074            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1075    
1076    icu
1077            - webkit 1.0.1-1 (embed; bug #547214)
1078            - texlive-bin <unfixed> (fork)
1079            NOTE: texlive upstream working with icu upstream to merge their changes
1080    
1081    cyrus-imapd-2.2
1082            - kolab-cyrus-imapd <unfixed> (fork)
1083            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1084    
1085    python-cxx-dev
1086            - freecad 0.9.2646.3-1 (embed; bug #547936)
1087    
1088    zipios++
1089            - freecad 0.9.2646.3-1 (embed; bug #547941)
1090            - enigma 0.92.3-3 (embed)
1091            NOTE: likely fixed earlier, marking etch's version as fixed
1092    
1093    linux-2.6
1094            - kvm <removed> (embed; bug #549973) [./kernel/*]
1095            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1096            - kernel-source-2.6.8 <removed> (old-version)
1097            - kernel-source-2.4.27 <removed> (old-version)
1098            - kernel-source-2.4.24 <removed> (old-version)
1099            - kernel-source-2.2.25 <removed> (old-version)
1100            - kernel-source-2.2.20 <removed> (old-version)
1101    
1102    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1103            - kvm <removed> (embed) [./libfdt/*]
1104            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1105    
1106    qweb (not packaged)
1107            - ajaxterm <unfixed>
1108    
1109    opensaml2
1110            - opensaml <removed> (old-version)
1111    
1112    shibboleth-sp2
1113            - shibboleth-sp <removed> (old-version)
1114    
1115    tuxonice-userui
1116            - suspend2-userui <removed> (old-version)
1117    
1118    expat
1119            - w3c-libwww <removed> (embed; bug #551941)
1120            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1121            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1122            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1123            - python2.4 <unfixable> (embed; bug #553403)
1124            - python-4suite <unfixed> (embed; bug #516935)
1125            - wxwindows2.4 <removed> (embed)
1126            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1127            - wxwidgets2.8 2.8.10.1-2 (embed)
1128            - celementtree 1.0.5-8 (embed)
1129            NOTE: Maybe that was fixed even earlier
1130            - audacity 1.3.2-1 (embed)
1131            - matanza <unfixed> (embed)
1132            - tdom 0.8.3~20080525-1 (embed)
1133            - udunits 2.1.8-4 (embed)
1134            - apr-util 1.2 (embed)
1135            - ayttm <unfxed> (embed; bug #561006)
1136            - cableswig <unfixed> (embed)
1137            - cadaver <unfixed> (embed)
1138            - cmake 2.6.0-6 (embed)
1139            - coin3 <unfixed> (embed)
1140            - gdcm 2.0.14-2 (embed)
1141            - ghostscript 8.71~dfsg-2 (embed)
1142            - grmonitor <removed> (embed)
1143            - iceape <unfixed> (embed)
1144            - insighttoolkit 3.16.0-1 (embed)
1145            NOTE: insighttoolkit might've been fixed earlier
1146            - libparagui1.1 1.0.2-1 (embed)
1147            - paraview 3.6.2-1 (embed)
1148            - poco 1.3.6p1-1 (embed)
1149            - simgear <unfixed> (embed)
1150            - sitecopy 1:0.16.0-1
1151            - smart <unfixed> (embed)
1152            NOTE: smart embeds celementree, and it includes expat
1153            - swish-e <not-affected> (Linked against libxml, which is used instead)
1154            - tla 1.3.5+dfsg-15 (embed)
1155            - vtk 4.1.20030227-1 (embed)
1156            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1157            - xmlrpc-c <unfixed> (embed)
1158            - iceweasel <unfixed> (embed)
1159            - kompozer <unfixed> (embed)
1160            - vxl 1.13.0-2 (embed)
1161            - xulrunner <unfixed> (embed)
1162            - apache2 2.2 (embed)
1163            - texlive-bin <not-affected> (Embedded code not compiled in)
1164            - vnc4 <unfixed> (embed)
1165            - xotcl <unfixed> (embed)
1166    
1167    xerces-c
1168            - xerces-c2 <unfixed> (old-version)
1169            - xerces27 <removed> (old-version)
1170    
1171    md5 (RSA's version; not the gnu version provided by coreutils)
1172            - w3c-libwww <removed> (embed; bug #551942)
1173            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1174    
1175    libparagui1.1
1176            - asc <unfixable> (fork)
1177    
1178    enet
1179            - sauerbraten <unfixed> (embed; #497194)
1180    
1181    eglibc
1182            - glibc <removed> (old-version)
1183    
1184    galib
1185            - gamera 3.2.3-1 (embed)
1186    
1187    configobj
1188            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1189            - elisa <unfixed> (embed; bug #555337)
1190            - gaupol <unfixed> (embed; bug #555338)
1191            - ipython <unfixed> (embed; bug #555339)
1192            - pida <unfixed> (embed; bug #555340)
1193            - psychopy <unfixed> (embed; bug #555341)
1194            - rest2web <unfixed> (embed; bug #555342)
1195            - auth2db <unknown> (embed)
1196            - dynagen <unknown> (embed)
1197            - iceweasel <unknown> (embed)
1198            - sabnzbdplus <unknown> (embed)
1199            - xulrunner <unknown> (embed)
1200            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1201    
1202    python-clientform
1203            - bibus <unfixed> (embed; bug #555332)
1204            - zope2.10 <unfixed> (embed; bug #555333)
1205            - zope2.11 <removed> (embed; bug #555334)
1206            - python-mechanize <unknown> (embed)
1207            - twill <unknown> (embed)
1208    
1209    python-mechanize
1210            - zope2.10 <unfixed> (embed; bug #555337)
1211            - zope2.11 <removed> (embed; bug #555338)
1212            - twill <unknown> (embed; bug #555339)
1213    
1214    pexpect
1215            - duplicity 0.6.06-1 (embed; bug #555361)
1216            - hplip <unfixed> (embed; bug #555362)
1217            - smart <unfixed> (embed; bug #555363)
1218    
1219    pyparsing
1220            - bauble <unfixed> (embed; bug #555366)
1221            - boa-constructor 0.6.1-8 (embed; bug #555367)
1222            - calibre <unfixed> (embed; bug #555368)
1223            - matplotlib <unfixed> (embed; bug #531024)
1224            - zhpy 1.7.3.1-1 (embed; bug #555370)
1225            - polybori <unknown> (embed)
1226            - python-whoosh <unknown> (embed)
1227            - twill <unknown> (embed)
1228            - zope-textindexng3 <unknown> (embed)
1229    
1230    python-pysqlite2
1231            - python2.4 <unfixed> (embed; bug #553403)
1232            - python2.5 <unfixed> (embed; bug #553403)
1233    
1234    celementtree
1235            - python2.5 <unfixed> (embed)
1236            - smart <unfixed> (embed)
1237    
1238    elementtree
1239            - python2.5 <unfixed> (embed)
1240            - python2.6 <unfixed> (embed)
1241            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1242            - gedit 2.28.2-1 (embed; bug #555344)
1243            - smart <unfixed> (embed)
1244            - solfege <unfixed> (embed; bug #555345)
1245            - w3af <unfixed> (embed; bug #555346)
1246            - python-qt4 <unknown> (embed)
1247            - sphinx <unknown> (embed)
1248            - python-nltk <itp> (embed)
1249    
1250    python2.5
1251            - python2.4 <unfixed> (old-version)
1252            - jython <unfixed> (embed)
1253            NOTE: embeds many stdlib modules
1254            - python-django <unfixed> (embed; bug #555419)
1255            NOTE: embeds stdlib modules: doctest, decimal
1256            - gamera 3.2.3-1 (embed)
1257            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1258            - boa-constructor <unfixed> (embed; bug #555426)
1259            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1260            - nicotine <unfixed> (embed; bug #555427)
1261            NOTE: embeds stdlib modules: ConfigParser
1262            - museek+ <unfixed> (embed; bug #555428)
1263            NOTE: embeds stdlib modules: ConfigParser
1264            - vegastrike-data <unfixed> (embed)
1265            NOTE: embeds many stdlib modules
1266            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1267            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1268            - config-manager <unfixed> (embed; bug #555423)
1269            NOTE: embeds stdlib modules: optparse
1270            - jhbuild 2.28.0-1 (embed; bug #555421)
1271            NOTE: embeds stdlib modules: optparse, subprocess
1272            - smart <unfixed> (embed; bug #555432)
1273            NOTE: embeds stdlib modules: optparse
1274            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1275            NOTE: embeds stdlib modules: doctest
1276            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1277            NOTE: embeds stdlib modules: doctest
1278            - distribute <unfixed> (embed)
1279            NOTE: embeds stdlib modules: doctest
1280            - python-setuptools <unfixed> (embed; bug #555435)
1281            NOTE: embeds stdlib modules: doctest
1282            - zope.testing <unfixed> (embed; bug #555436)
1283            NOTE: embeds stdlib modules: doctest
1284            - translate-toolkit <unfixed> (embed; bug #555422)
1285            NOTE: embeds stdlib modules: textwrap, contextlib
1286            - libtpclient-py <unfixed> (embed; bug #555424)
1287            NOTE: embeds stdlib modules: subprocess
1288            - grass <unfixed> (embed; bug #555425)
1289            NOTE: embeds stdlib modules: subprocess
1290            - coherence <unfixed> (embed; bug #555429)
1291            NOTE: embeds stdlib modules: uuid
1292            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1293            NOTE: embeds stdlib modules: uuid
1294            - setroubleshoot <unfixed> (embed; bug #555431)
1295            NOTE: embeds stdlib modules: uuid
1296            - linkchecker <unfixed> (embed; bug #555414)
1297            NOTE: embeds msgfmt.py script
1298            - imdbpy <unfixed> (embed)
1299            NOTE: embeds msgfmt.py script
1300            - kiwi <unfixed> (embed)
1301            NOTE: embeds msgfmt.py script
1302            - moin <unfixed> (embed)
1303            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1304            - plone3 <removed> (embed)
1305            NOTE: embeds msgfmt.py script
1306            - roundup <unfixed> (embed)
1307            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1308            - rednotebook <unfixed> (embed; bug #555415)
1309            NOTE: embeds msgfmt.py script
1310            - turbogears <unfixed> (embed)
1311            NOTE: embeds msgfmt.py script
1312            - elisa <unfixed> (embed)
1313            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1314            - calibre <unfixed> (embed)
1315            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1316            - mailman 1:2.1.13-1 (embed; #555416)
1317            NOTE: embeds msgfmt.py script
1318            - python-docutils <unknown> (embed)
1319            NOTE: embeds stdlib modules: optparse, textwrap
1320            - python-imaging <unknown> (embed)
1321            NOTE: embeds stdlib modules: doctest
1322            - python-mechanize <unknown> (embed)
1323            NOTE: embeds stdlib modules: doctest
1324            - twill <unknown> (embed)
1325            NOTE: embeds stdlib modules: subprocess
1326            - zeroc-ice <unknown> (embed)
1327            NOTE: embeds stdlib modules: subprocess
1328            - wxwidgets2.8 <unknown> (embed)
1329            NOTE: embeds stdlib modules: subprocess
1330            - cycle <unknown> (embed)
1331            NOTE: embeds msgfmt.py script
1332            - deluge <unknown> (embed)
1333            NOTE: embeds msgfmt.py script
1334            - opendict <unknown> (embed)
1335            NOTE: embeds msgfmt.py script
1336            - openerp-client <unknown> (embed)
1337            NOTE: embeds msgfmt.py script
1338            - rapidsvn <unknown> (embed)
1339            NOTE: embeds msgfmt.py script
1340            - wammu <unknown> (embed)
1341            NOTE: embeds msgfmt.py script
1342            - gaphor <unknown> (embed)
1343            NOTE: embeds msgfmt.py script
1344            - pida <unknown> (embed)
1345            NOTE: embeds msgfmt.py script
1346            - python-formencode <unknown> (embed)
1347            NOTE: embeds msgfmt.py script
1348            - duplicity <unfixed> (embed)
1349            NOTE: embeds stdlib module: urlparse, tarfile
1350            - pygopherd <unfixed> (embed)
1351            NOTE: embeds stdlib module: zipfile
1352    
1353    argparse
1354            - twill <unfixed> (embed; bug #555347)
1355            - ipython <unfixed> (embed; bug #555348)
1356    
1357    coherence
1358            - elisa <unfixed> (embed; bug #555335)
1359    
1360    simpletal
1361            - plastex <unfixed> (embed; bug #555371)
1362    
1363    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1364            - postr <unfixed> (embed)
1365            - elisa <unfixed> (embed)
1366    
1367    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1368            - apertium-tolk <unfixed> (embed)
1369            - ipython <unfixed> (embed)
1370            - virtaal <unfixed> (embed)
1371    
1372    distribute
1373            - setuptools <removed> (old-version)
1374    
1375    rails
1376            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1377            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1378            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1379            - thin <unfixed> (embed) [./spec/rails_app/*]
1380            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1381            NOTE: be dangerous if developers are naively basing their code off of the examples
1382            NOTE: prototype.js is among the example files
1383    
1384    lucene2 (prototype.js is among the embeds in the following)
1385            - lucene <unfixed> (old-version)
1386            - pylucene <unfixed> (embed)
1387            - libpdfbox-java <unfixed> (embed)
1388            - libfontbox-java <unfixed> (embed)
1389            - libjempbox-java <unfixed> (embed)
1390            - solr <unfixed> (embed)
1391    
1392    unicode-data
1393            - syslinux <unfixed> (embed)
1394            - camomile <unfixed> (embed)
1395            - fribidi <unfixed> (embed)
1396            - m17n-db <unfixed> (embed)
1397            - sbcl <unfixed> (embed)
1398            - heimdal <unfixed> (embed)
1399            - icu <unfixed> (embed)
1400            - icu4j <unfixed> (embed)
1401            - krb5 <unfixed> (embed)
1402            - moodle <unfixed> (embed)
1403            - openldap <unfixed> (embed)
1404            - pike7.6 <unfixed> (embed)
1405            - samba <unfixed> (embed)
1406            - samba4 <unfixed> (embed)
1407            - cmucl <unfixed> (embed)
1408            - typo3-src <unfixed> (embed)
1409            - mauve <unfixed> (embed)
1410            - texlive-bin <unfixed> (embed)
1411            - ypsilon <unfixed> (embed)
1412            - jeuclid <unfixed> (embed)
1413            - charmap.app <unfixed> (embed)
1414            - clisp <unfixed> (embed)
1415            - gnulib <unfixed> (embed)
1416            - opensrs-client <unfixed> (embed)
1417            - saxonb <unfixed> (embed)
1418            - rails <unfixed> (embed)
1419    
1420    feedparser
1421            - rawdog <unfixed> (embed; bug #383422)
1422            - miro <unfixed> (embed; bug #555351)
1423            - calibre <unfixed> (embed; bug #555352)
1424            - freevo <unfixed> (embed; bug #555353)
1425            - pida <unfixed> (embed; bug #555354)
1426            - planet-venus <unfixed> (embed; bug #555355)
1427            - plone3 <removed> (embed; bug #555356)
1428            - exaile 0.2.14+debian-1 (embed)
1429            - screenlets 0.1.2-3 (embed)
1430            NOTE: included twice
1431    
1432    agg:
1433            - matplotlib <unfixed> (embed: bug #377271)
1434            - contextfree <unfixed> (embed)
1435            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1436            - exactimage <unfixed> (embed)
1437            - python-enable <unfixed> (embed)
1438            - mapnik 0.5.1-3 (embed)
1439            NOTE: links statically to agg, but shared library is not available (bug #377271)
1440    
1441    vtk
1442            - paraview <unfixable> (embed; bug #495426)
1443    
1444    txt2tags
1445            - rednotebook <unfixed> (embed)
1446    
1447    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1448            - gajim <unfixed> (embed)
1449            - emesene <unfixed> (embed)
1450            - convirt <unfixed> (embed)
1451            - pida <unfixed> (embed)
1452            - rednotebook <unfixed> (embed)
1453    
1454    horde3 (prototype.js is among the embeds in the following)
1455            - mnemo2 <unfixed> (embed)
1456            - nag2 <unfixed> (embed)
1457            - wordpress <unfixed> (embed)
1458            NOTE: Text_Diff (wp-includes/Text/Diff*)
1459    
1460    cimg
1461            - gmic <itp> (embed)
1462    
1463    mootools
1464            - gmic <itp> (embed)
1465    
1466    openldap
1467            - openldap2.3 <removed> (old-version)
1468    
1469    grub2
1470            - grub <unfixed> (old-version)
1471    
1472    gnupginterface
1473            - duplicity <unfixed> (embed)
1474    
1475    python-dateutil
1476            - awn-extras-applets <unfixed> (embed)
1477            - matplotlib <unknown> (embed)
1478    
1479    cups
1480            - cupsys <removed> (old-version)
1481    
1482    yui
1483            - bcfg2 <not-affected> (present in source but not included in any binary files)
1484            - serendipity <unfixed> (embed; bug #557746)
1485            - moodle 1.8.2.dfsg-5 (embed)
1486            - jifty 0.91117-1 (embed; bug #557748)
1487            - webgui 7.7.26-1 (embed)
1488            - loggerhead 1.17-1 (embed)
1489    
1490    quake3 (vanilla source not packaged in debian)
1491            - openarena <unfixable> (fork)
1492    
1493    quake2 (vanilla source not packaged in debian)
1494            - alien-arena <unfixable> (fork)
1495            - warsow <unfixable> (fork)
1496    
1497    libtheora
1498            - iceweasel <not-affected> (uses xulrunner)
1499            - xulrunner <unfixed> (embed; bug #540959)
1500            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1501            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1502            - iceape <unfixed> (embed; bug #559276)
1503            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1504            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1505    
1506    dtoa
1507            - bfilter <unfixed> (embed)
1508            - cacao <unfixed> (embed)
1509            - cdrdao <unfixed> (embed)
1510            - classpath <unfixed> (embed)
1511            - freej <unfixed> (embed)
1512            - iceape <unfixed> (embed)
1513            - iceweasel <unfixed> (embed)
1514            - jscoverage <unfixed> (embed)
1515            - kde4libs <unfixed> (embed)
1516            - kdelibs <unfixed> (embed)
1517            - kompozer <unfixed> (embed)
1518            - libv8 <unfixed> (embed)
1519            - mono <unfixed> (embed)
1520            - newlib <unfixed> (embed)
1521            - nspr <unfixed> (embed)
1522            - php5 <unfixed> (embed)
1523            - polyml <unfixed> (embed)
1524            - qt4-x11 <unfixed> (embed)
1525            - rhino <unfixed> (embed)
1526            NOTE: code translated to Java
1527            - ruby1.8 <unfixed> (embed)
1528            - ruby1.9 <unfixed> (embed)
1529            - ruby1.9.1 <unfixed> (embed)
1530            - sdd <unfixed> (embed)
1531            - sfind <unfixed> (embed)
1532            - star <unfixed> (embed)
1533            - tinymux <unfixed> (embed)
1534            - virtualbox-ose <unfixed> (embed)
1535            - webkit <unfixed> (embed)
1536            - xulrunner <unfixed> (embed)
1537    
1538    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1539            - firegpg <unfixed> (embed)
1540            - enigmail <unfixed> (embed)
1541    
1542    ptmalloc (not packaged in Debian)
1543            - crystalspace <unfixed> (embed)
1544            - qt4-x11 <unfixed> (embed)
1545    
1546    svgalib
1547            - usplash <unfixed> (embed)
1548    
1549    bogl
1550            - usplash <unfixed> (embed)
1551    
1552    taglist
1553            - usplash <unfixed> (embed)
1554    
1555    portaudio
1556            - audacity <unfixed> (embed; bug #323711)
1557    
1558    nyquist
1559            - audacity <unfixed> (embed)
1560            NOTE: embeds a forked nyquist with support for a shared library
1561    
1562  imagemagick:  vamp-plugin-sdk
1563  graphicsmagick          - audacity <unfixed> (embed)
1564    
1565  halibut:  wordpress
1566  nsis          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1567            - wordpress-mu <unfixed> (fork)
1568    
1569  libghttp:  php5
1570  hotway          - php4 <removed> (old-version)
1571    
1572  etl-dev (will be renamed to libetl-dev soon):  classpath
1573  synfig          - libgnucrypto-java <removed> (embed; bug #559788)
1574    
1575  libphp-adodb:  libtool
1576  moodle          - apr <unfixed> (static; bug #489625)
1577  cacti (dependency exists, but internal version is used)          NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1578            - arts <unfixed> (embed)
1579            - bochs 2.4.2-1 (embed; bug #560884)
1580            - camserv <unfixed> (embed)
1581            - collectd 4.8.2-1 (embed)
1582            - courier-authlib 0.58-4 (embed)
1583            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1584            - cvsnt 2.5.04.3236-1.2 (embed)
1585            - dico <not-affected> (Uses the system copy of ltdl)
1586            - freeradius 0.1+20010527-1 (embed)
1587            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1588            - ggobi 2.1.9~20091212-1 (embed)
1589            - glame 2.0.1-4 (embed)
1590            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1591            - gnash 0.8.7-2 (embed)
1592            - gnu-smalltalk <unfixed> (embed; bug #566777)
1593            - google-gadgets 0.10.5-0.3 (embed)
1594            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1595            - graphicsmagick 1.3.5-6 (embed)
1596            - graphviz 2.8-3 (embed)
1597            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1598            - guile-1.6 1.6.8-7 (embed)
1599            - hamlib <unfixed> (embed)
1600            - hercules 3.06-1.2 (embed)
1601            - jags 1.0.4-3 (embed; bug #560864)
1602            - kdelibs <unfixed> (embed)
1603            - libannodex <removed> (embed)
1604            - libextractor 0.5.23+dfsg-4 (embed)
1605            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1606            - libtunepimp 0.5.3-7.3 (embed)
1607            - mp4h 1.3.1-4.1 (embed)
1608            - naim <removed> (embed)
1609            - parser-mysql <unfixed> (embed)
1610            - pinball 0.3.1-11 (embed)
1611            - redland <unfixed> (embed)
1612            - siproxd <unfixed> (embed)
1613            - ski <unfixed> (embed)
1614            - synfig 0.62.00-1 (embed)
1615            - unixodbc 2.2.4-5 (embed)
1616            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1617            - clamav 0.95+dfsg-1 (embed)
1618            - imagemagick 6:6.2.3.1-1 (embed)
1619            - hypre 2.4.0b-5 (embed)
1620            - lam <unfixed> (embed)
1621            - openmpi <unfixable> (embed; bug #559386)
1622            - parser <unfixed> (embed)
1623            - pdsh 2.18-5 (embed; bug #560892)
1624            - sbnc 1.2-8 (embed)
1625            - sdcc <unfixed> (embed)
1626            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1627            - proftpd-dfsg <unfixed> (embed; bug #561748)
1628            - babel 1.4.0.dfsg-5 (embed)
1629            - libprelude 0.9.14-2 (embed)
1630            - heartbeat 2.1.4-7 (embed)
1631            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1632            NOTE: might've been fixed earlier
1633            - gcc-* <unknown> (embed)
1634    
1635    ocamlgsl
1636            - orpie 1.5.1-7.1 (embed; bug #550058)
1637    
1638    xdotool
1639            - keynav <unfixed> (embed; bug #560103)
1640    
1641    bulletphysics (not packaged; http://www.bulletphysics.org/)
1642            - supertuxkart <unfixed> (embed)
1643            - blender <unfixed> (embed)
1644    
1645    ghostscript
1646            - gs-gpl <removed> (old-version)
1647    
1648    icedove
1649            - thunderbird <removed> (old-version)
1650    
1651    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1652            - jquery <unfixed> (embed)
1653    
1654    sed
1655            - ssed <unfixed> (fork)
1656    
1657    phpatomlib (http://code.google.com/p/phpatomlib)
1658            - wordpress <unfixed> (embed)
1659    
1660    Services_JSON (http://pear.php.net/package/Services_JSON)
1661            - wordpress <unfixed> (embed)
1662    
1663    phpass (http://www.openwall.com/phpass/)
1664            - gallery2 <unfixed> (embed)
1665            - wordpress <unfixed> (embed)
1666            - typo3-src <unfixed> (modified-embed)
1667            NOTE: file refers to drupal, maybe there's a copy somewhere there
1668            NOTE: a copyright owner search didn't match anything
1669            - libauthen-passphrase-perl <unfixable> (fork)
1670            NOTE: perl implementation of phpass
1671    
1672    squirrelmail
1673            - wordpress <unfixed> (embed)
1674            NOTE: class-pop3.php
1675    
1676    ezSQL (http://www.woyano.com/jv/ezsql)
1677            - wordpress <unfixable> (fork)
1678            NOTE: wp-db.php
1679    
1680    Diff.php (Clay Loveless' version/killersoft.com)
1681            - php-versioncontrol-svn <unfixed>
1682    
1683    libm
1684            - spring <unfixed> (embed)
1685            NOTE: embedded by embedded copy of streflop
1686    
1687    streflop
1688            - spring <unfixed> (embed)
1689    
1690    minizip
1691            - spring <unfixed> (embed)
1692    
1693    oscpack
1694            - spring <unfixed> (embed)
1695    
1696    hpiutil2
1697            - spring <unfixed> (embed)
1698    
1699    p7zip
1700            - spring <unfixed> (embed)
1701    
1702    pythonqt (doesn't seem to be python-qtN, unknown source)
1703            - fontmatrix <unfixed> (embed)
1704            - elmerfem <unfixed> (embed)
1705    
1706    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1707            - docvert <unfixed> (embed)
1708            - jifty <unfixed> (embed)
1709            - kdenetwork <unfixed> (embed)
1710            - mediatomb <unfixed> (embed)
1711            - plastex <unfixed> (embed)
1712            - plone3 <removed> (embed)
1713            - python-chaco <unfixed> (embed)
1714            - python-docutils <unfixed> (embed)
1715            - s5 <unfixed> (embed)
1716            - zope2.10 <unfixed> (embed)
1717            - zope2.11 <removed> (embed)
1718            - cython <not-affcted> (embed)
1719            NOTE: part of documentation, which is not installed into the binary package
1720    
1721    python-docutils
1722            - zope2.10 <unfixed> (embed)
1723            - zope2.11 <removed> (embed)
1724    
1725    tesseract
1726            - ocropus <unfixed> (static)
1727    
1728    antlr
1729            - kdevelop <unfixed> (embed)
1730    
1731    libxerces2
1732            - openjdk-6 <unfixed> (embed)
1733    
1734    kfreebsd-8
1735            - kfreebsd-7 <unfixed> (old-version)
1736            - kfreebsd-6 <removed> (old-version)
1737    
1738    ruby1.9.1
1739            - ruby1.9 <unfixed> (old-version)
1740            - ruby1.8 <unfixed> (old-version)
1741    
1742    maildrop
1743            - courier <unfixed> (embed) [./maildrop]
1744    
1745    glee
1746            - warzone2100 <unfixed> (embed)
1747    
1748    phing
1749            - symfony <unfixed> (embed)
1750    
1751    pake
1752            - symfony <unfixed> (embed)
1753    
1754    propel
1755            - symfony <unfixed> (embed)
1756    
1757    creole
1758            - symfony <unfixed> (embed)
1759    
1760    hfsutils
1761            - cdrkit <unfixed> (embed; bug #570187)
1762            NOTE: embeds hfsutils code in genisoimage
1763    
1764    cdrkit
1765            - grub2 <unfixed> (embed; bug #570156)
1766            NOTE: genisoimage imported into grub-mkisofs
1767    
1768    kdebase-workspace
1769            - kdebase <unfixed> (old-version)
1770    
1771    file
1772            - php5 <unfixable> (modified-embed)
1773            [lenny] - php5 <not-affected>
1774    
1775    cdb
1776            - php5 <unfixed> (embed)
1777    
1778    libmbfl (itp: #570708)
1779            - php5 <unfixed> (embed)
1780            NOTE: PHP is actually the current upstream, ITP is of that code
1781    
1782    libonig
1783            - php5 5.3.2-1 (emed)
1784    
1785    xmlrpc-epi
1786            - php5 <unfixed> (emed)
1787    
1788    swt-gtk
1789            - eclipse <unfixed> (embed; bug #538808)
1790    
1791    txt2html
1792            - wml 2.0.11ds2-1 (embed)
1793    
1794    ca-certificates
1795            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1796    
1797    openexr
1798            - freeimage <unfixed> (embed)
1799    
1800  libmms:  libmng
1801  xine-lib          - freeimage <unfixed> (embed)
 mimms  
1802    
1803  FCKeditor:  openjpeg
1804  knowledgeroot          - freeimage <unfixed> (embed)
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
1805    
1806    libjpeg6b
1807            - freeimage <unfixed> (embed)

Legend:
Removed from v.4767  
changed lines
  Added in v.14425

  ViewVC Help
Powered by ViewVC 1.1.5