/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1712 by jmm-guest, Mon Aug 29 07:40:19 2005 UTC revision 14979 by geissert, Mon Jul 12 04:59:53 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
7  kdegraphics/kpdf  
8  tetex-bin  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26    The srcpkg might be some string to identify the code if there is no
27    specific source package.
28    
29    Everything up to the next line is ignored.
30    ---BEGIN
31    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
32            NOTE: Fixed packages link to poppler library unless otherwise noted
33            - pdftohtml <unknown>
34            [sarge] - pdftohtml <unfixed>
35            [etch] - pdftohtml <unfixed>
36            NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38            - texlive-base 3.0-12 (embed)
39            - texlive-bin 2007-1 (embed)
40            - koffice 1:2.0.0-1 (embed; bug #436163)
41            - libextractor 0.5.12-1 (embed)
42            NOTE: libextractor is using its own pdf decoder now
43            - ipe <unfixed> (embed)
44            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45            - ruby-gnome2 <unknown> (embed)
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <removed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50    ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56            - chromium-browser 5.0.375.29~r46008-1
57    
58    lrmi
59            - read-edid 2.0.0-1 (embed; bug #495131)
60            - s3switch <unfixed> (embed)
61            - xresprobe <unfixed> (embed)
62            - zhcon <unfixed> (embed)
63    
64    php-htmlpurifier
65            - mahara 1.2.5-1 (embed)
66            - knowledgeroot <unfixed> (embed)
67            - moodle <unfixed> (embed)
68    
69    peercast
70            - gnome-peercast <removed> (embed)
71            [etch] - gnome-peercast <unfixed> (embed)
72    
73    silc-toolkit
74            - silc-client 1.1~beta6-1 (embed)
75    
76    icclib
77            - ghostscript <unfixed> (embed)
78            - argyll <unfixed> (embed)
79    
80    libusb
81            - argyll <unfixed> (embed)
82    
83    dietlibc
84            - ccontrol 0.9.1+20071204-1 (static)
85    
86    libmikmod
87            - sdl-mixer1.2 <unfixed> (embed)
88            TODO: report bug
89    
90    libiax
91            - iaxmodem <unfixable> (embed; bug #548885)
92    
93    spandsp
94            - iaxmodem <unfixable> (embed; bug #548885)
95    
96    python-paramiko
97            - fabric 0.9.0-2 (embed; bug #561398)
98    
99    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
100            - dpkg 1.15.6 (static)
101            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
102            - rsync <unfixed> (embed)
103            - cherokee <unfixed> (embed)
104            NOTE: somehow derived code base
105            - mono <unfixed> (embed)
106            TODO: check mozilla
107            - Linux kernels <unfixed> (embed)
108            - pvpgn 1.7.8-2 (embed)
109            - mrtg 2.12.2-1 (embed)
110            - rpm <unknown> (embed)
111            NOTE: pinged anibal since when rpm was fixed
112            - tuxcmd-modules <unfixed> (embed)
113            - zsync <unfixed>
114            - tra <unfixed>
115            - sash <unfixed>
116            - nsis <unfixed>
117            - pyfits 1:2.3.1-1
118            - mseide-msegui <unfixed>
119            NOTE: mseide
120            - mirrordir <unfixed>
121            - poco <unfixed>
122            - klibc <unfixed>
123            - emboss <unfixed>
124            - ghostscript <unfixed>
125            - freeimage <unfixed>
126            - clamav <unfixed> (fork)
127            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
128            - tuxonice-userui <unfixed> (static)
129            - plt-scheme <unfixed>
130            - perl <unfixed>
131            - paraview <unfixed>
132            - velvet 0.7.56~nozlibcopy-1
133            - gcvs <unfixed>
134            - dump <unfixed>
135            - aide <unfixed> (static)
136            - dar <unfixed> (static)
137            - avfs <unfixed>
138            - fpc <unfixed>
139            - winff <unfixed>
140            NOTE: inherited from fpc, see #472304
141            - lazarus <unfixed>
142            NOTE: inherited from fpc, see #472304
143            - erlang <unfixed> (embed)
144            - gamera 3.2.3-1 (embed)
145            - python2.4 <unfixed> (embed; bug #553403)
146            - python2.5 <unfixed> (embed; bug #553403)
147            - texlive-bin <unknown> (embed)
148    
149    dulwich
150            - hg-git 0.1.0-1 (embed; bug #541996)
151    
152    libvigraimpex
153            - hugin <unfixed> (embed; bug #542259)
154            - enblend-enfuse <unfixed> (embed; bug #542258)
155            - gamera 3.2.3-1 (embed)
156    
157    libbz2
158            - dpkg 1.15.6 (static)
159            - amd64-libs <unfixed> (static)
160            NOTE: let's call it "static"
161            - dar <unfixed> (static)
162            - dump <unfixed> (static)
163            - unalz <unfixed> (embed)
164            NOTE: has code, by the maint, to use the system version but links against the internal copy
165    
166    libyahoo2
167            - centerim <unfixed> (embed; bug #559783)
168    
169    libmsn
170            - centerim <unfixed> (embed; bug #559783)
171    
172    libgadu
173            - centerim <unfixed> (embed; bug #559783)
174            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
175            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
176            - kdenetwork 4:3.3.2-5 (embed)
177            NOTE: from kdenetwork: kopete
178            - ekg 1:1.8~rc0-1 (embed)
179            - kadu 0.6.0.2-3 (embed; bug #504430)
180            - gadu <itp> (embed)
181    
182    xmlrpc (which package is the "origin" of this code?)
183            - drupal <unfixed> (embed)
184            - phpgroupware <unfixed> (embed)
185            - egroupware <unfixed> (embed)
186            - phpwiki <unfixed> (embed)
187            - php4 <removed> (embed)
188            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
189    
190    shtool (affects build-time only)
191            - mysql-ocaml <unfixed> (embed)
192            - php4 <removed> (embed)
193            - php5 <unfixed> (embed)
194    
195    xulrunner
196            - iceape <unfixed> (embed; bug #561749)
197            - iceweasel 2.0.0.19 (embed)
198            - icedove <unfixed> (embed; bug #561750)
199            - kompozer <unfixed> (embed; bug #532168)
200            - galeon 2.0.2-4 (embed)
201            - epiphany-browser 2.14.3-8 (embed)
202            - conkeror 0.9~git080629-2 (embed)
203            - kazehakase 0.4.2-1 (embed)
204    
205    xli
206            - xloadimage <unfixed> (embed)
207    
208    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
209            - openmotif <unfixed> (embed)
210    
211    libxpm
212            - lesstif <unfixed> (embed; bug #575750)
213    
214    kerberized apps with BSD origin
215            - krb4 <removed> (embed)
216            - krb5 <unfixed> (embed)
217            - heimdal <unfixed> (embed)
218    
219    grip (which pkg is the origin?)
220            - libcdaudio <unfixed>
221            - grip <unfixed>
222            - gnome-vfs <unfixed>
223            TODO: check vfs2 as well
224    
225    fudforum
226            [etch] - phpgroupware <unfixed> (embed)
227            NOTE: phpgroupware-fudforum
228            [sarge] - egroupware-fudforum <removed> (embed)
229    
230    libbsd
231            - rdate 1:1.2-3 (embed)
232            - atheme-services <unfixed>
233            - libbsd-arc4random-perl <unfixed>
234            - isakmpd <unfixed>
235            - bsdgames <unfixed> (embed)
236            - bsd-mailx <unfixed> (embed)
237            - netcat-openbsd <unfixed> (embed; bug #550611)
238            - openssh <unfixed> (embed)
239            - unworkable <unfixed> (embed)
240    
241    cvs
242            - gcvs <unfixed> (embed)
243            NOTE: see cvsunix/src in tarball
244    
245    pcre3
246            - php4 <removed> (embed)
247            - analog 2:5.23-0woody1 (embed)
248            - goffice <unfixed> (embed)
249            NOTE: libgoffice-*
250            - vfu 4.06-4.1 (embed; bug #450754)
251            - tf5 5.0beta7-1 (embed)
252            - monotone 0.43-1 (embed)
253            NOTE: this only affects versions >= 0.37
254            - glib2.0 2.15.2-1 (embed)
255            - apache2 2.0.53-4 (embed)
256            - exim4 4.10-0.srh20.12 (embed)
257            - yacas <unfixed> (embed)
258            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
259            - gtamsanalyzer.app 0.42-5 (embed)
260            - tin 980117-1 (embed)
261            - kazehakase 0.5.2-1
262            - webkit 1.0.1-1 (embed)
263            - qt4-x11 <unfixed> (embed)
264            NOTE: embedded via webkit copy
265            - erlang <unfixed> (embed)
266            - ssed <unfixed> (embed)
267            - ircd-hybrid <unfixed> (static)
268            - emboss <unfixd>
269            - cherokee <unfixed> (embed)
270            - oftc-hybrid <unfixed> (embed)
271            - ratbox-services <unfixed> (embed)
272            - squeak-vm <unfixed> (embed)
273            - tinymux <unfixed> (embed)
274    
275    tiff
276            - wxwindows2.4 2.2.1 (embed)
277            - gamera 3.2.3-1 (embed)
278            - freeimage <unfixed> (embed)
279            - libtk-img <unfixed> (embed)
280            NOTE: there are two copies, one under tiff/ other under libtiff/
281            - gdal <unfixed>
282    
283    uudeview
284            - libconvert-uulib-perl <unfixed> (embed)
285            - pan <unfixed> (embed)
286    
287    sqlite (not affected by security vulnerabilities so far)
288            - amarok <unfixed> (embed)
289            - monotone 0.43-1 (embed)
290            - iceweasel <unfixed> (embed)
291            - heimdal <unfixed> (embed; bug #559616)
292    
293    util-linux/mount
294            - loop-aes-utils <unfixed> (embed)
295            NOTE: contains code from util-linux' mount in the mount-aes-udeb
296    
297    sylpheed
298            - sylpheed-claws <unfixed> (fork)
299    
300    phpsysinfo
301            - egroupware <unfixed> (embed)
302            - phpgroupware <unfixed> (embed)
303    
304    phpldapadmin
305            [sarge] - egroupware <unfixed> (embed)
306            NOTE: removed from egroupware after sarge
307    
308    chmlib
309            - kchmviewer <unknown> (embed)
310    
311    ffmpeg (libavcodec/libavformat)
312            - mplayer 1.0~rc2-14 (embed; bug #395252)
313            - kino 1.0.0-1
314            - vlc <not-affected> (Links dynamically since initial release)
315            - smilutils 0.3.0-10
316            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
317            - motion 3.1.19-1
318            - gstreamer0.10-ffmpeg 0.10.3-2
319            - xmovie <removed> (static)
320            TODO: gimp-gap (potentially using ffmpeg code as well)
321            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
322            - audacity 1.3.7-2 (embed; bug #512278)
323            - chromium-browser <unfixed> (fork)
324    
325    faad2
326            - mplayer 1.0~rc2-20 (embed)
327            - avifile <unfixed> (embed; bug #538750)
328            - ffmpeg-debian <removed> (embed)
329    
330    libmad (MPEG decoding lib)
331            - xine-lib <unfixed> (embed)
332            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
333            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
334    
335    libdts
336            - xine-lib <unfixed> (embed)
337    
338    flac
339            - xine-lib <unfixed> (embed)
340    
341    liba52
342            - a52dec <unfixed> (embed)
343            - xine-lib <unfixed> (embed)
344    
345    mpeg2dec (libmpeg2)
346            - xine-lib <unfixed> (embed)
347    
348    libmpeg3
349            - squeak-vm <unfixed> (embed)
350    
351    libntlm
352            - wget <unfixed> (fork; bug #550436)
353            - curl <unfixed> (fork; bug #550437)
354            - cntlm <unfixed> (fork; bug #550438)
355    
356    uw-imap
357            - pine <unfixed> (embed)
358            - alpine <unfixed> (embed)
359    
360    imagemagick
361            - graphicsmagick <unfixed> (fork)
362    
363    python-urlgrabber
364            - mercurial <unfixed> (embed; bug #531062)
365            - w3af <unfixed> (embed; bug #555372)
366            [experimental] - harvestman <unfixed> (embed; bug #555373)
367    
368    beautifulsoup
369            - python-mechanize <unfixed> (embed; bug #555349)
370            - zope2.11 <removed> (embed; bug #555350)
371            - twill <unknown> (embed)
372    
373    halibut
374            - nsis <unfixed> (fork)
375    
376    libghttp
377            - hotway <unfixed> (embed)
378    
379    libsndfile
380            - ardour 1:2.7.1-1 (embed)
381    
382    glibmm2.4
383            - ardour 1:2.7.1-1 (embed)
384    
385    libgnomecanvasmm2.6
386            - ardour 1:2.7.1-1 (embed)
387    
388    libsigc++-2.0
389            - ardour 1:2.7.1-1 (embed)
390    
391    soundtouch
392            - ardour 1:2.7.1-1 (embed)
393    
394    libmms
395            - xine-lib <unfixed> (embed)
396            - mimms <unfixed> (embed)
397    
398    fckeditor
399            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
400            - moin 1.8.2-2 (embed; bug #452599)
401            - karrigell <removed> (embed; bug #452598)
402            - gforge 4.6.99+svn6225-1 (embed)
403            - request-tracker3.8 <unfixed> (embed)
404            - otrs2 <unfixed> (embed)
405    
406    ipatlas (not packaged in Debian)
407            - moodle <unfixed> (embed; bug #507185)
408    
409    libphp-phpmailer
410            - moodle <unfixed> (embed; bug #507185)
411            - mahara <unfixed> (embed)
412            - symfony <unfixed> (embed; bug #566778)
413            [etch] - phpgroupware <unfixed> (embed)
414            NOTE: phpgroupware-felamimail is only in etch
415            - egroupware <unfixed> (embed; bug #504283)
416            - glpi <unfixed>
417    
418    htmlArea (not packaged in Debian)
419            - moodle <unfixed> (embed)
420    
421    giflib
422            - wine <unfixed> (embed; bug #466181)
423    
424    bennu (not packaged in Debian, http://bennu.sourceforge.net)
425            - moodle <unfixed> (embed)
426    
427    smarty
428            - moodle 1.8.2-2 (embed; bug #471158)
429            - gallery2 2.2.5-2 (embed; bug #471160)
430            - mahara 0.9.2-2 (embed; bug #471201)
431            - gosa 2.4beta1-1 (embed; bug #471200)
432    
433    TinyMCE
434            - wordpress 2.5.1-3 (embed; bug #478257)
435            - moodle <unfixed> (embed; bug #507185)
436            - knowledgeroot <unfixed> (embed)
437            - joomla <itp> (bug #326398)
438    
439    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
440            - scite <unfixed> (embed)
441            - qscintilla <unfixed> (embed)
442            - qscintilla2 <unfixed> (embed)
443            - geany <unfixed> (fork)
444            - anjuta <unfixed> (embed)
445    
446    libphp-adodb
447            - moodle <unfixed> (embed; bug #507185)
448            NOTE: also AdoDB-XML Schema
449            - gallery2 <unfixed> (embed)
450            - phppgadmin <unfixed> (embed)
451            - egroupware <unfixed> (embed)
452            - phpwiki <unfixed> (embed)
453            - torrentflux 2.0beta1-2 (embed)
454            - ipplan <unfixed> (embed)
455            - typo3-src <unfixed> (embed)
456            - cacti <unknown> (embed)
457            [sarge] - cacti <unfixed> (embed)
458            NOTE: dependency exists, but internal version is used
459            - gforge 4.7~rc2-6 (embed)
460            - mahara <unfixed> (embed)
461    
462    gzip
463            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
464            - klibc <unfixed> (embed)
465            NOTE: based on linux-kernel gzip code
466            - busybox <unfixed> (embed)
467            - pristine-tar <unfixed> (modified-embed)
468            NOTE: compression code only, not uncompression
469            - ncompress <unfixed> (old-version)
470    
471    neon
472            - cadaver 0.22.3+debian-1 (embed; bug #188381)
473            - gnome-vfs2 <unfixed> (embed; bug #395874)
474            [etch] - litmus <unfixed> (embed; #395875)
475            - litmus <removed> (embed; #395875)
476            [sarge] - screem <unfixed> (embed)
477            - sitecopy 1:0.16.0-1 (embed; bug #395876)
478            [etch] - tla <unfixed> (embed; bug #395877)
479            [sarge] - tla <unfixed> (embed; bug #395877)
480    
481    libmodplug
482            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
483    
484    libvncserver
485            - vino <unfixed> (embed)
486    
487    putty
488            - filezilla <unfixed> (embed)
489    
490    tinyxml (not packaged in Debian; itp bug #531968)
491            - filezilla <unfixed>
492            - crystalspace <unfixed> (embed)
493            - libwfut <unfixed> (embed)
494            - rarian <unfixed> (embed)
495            - bulletml <unfixed> (embed)
496            - pokerth <unfixed> (embed)
497            - qutecom <unfixed> (embed)
498            - sofa-framework <unfixed> (embed)
499            - yate <unfixed> (embed)
500            - antigrav <unfixed> (embed)
501            - balder2d <unfixed> (embed)
502            - cal3d <unfixed> (embed)
503            - criticalmass <unfixed> (embed)
504            - ember <unfixed> (embed)
505            - epiphany <unfixed> (embed)
506            - gambit <unfixed> (embed)
507            - noiz2sa <unfixed> (embed)
508            - ogre <unfixed> (embed)
509            - opencity <unfixed> (embed)
510            - openmovieeditor <unfixed> (embed)
511            - pouetchess <unfixed> (embed)
512            - tecnoballz <unfixed> (embed)
513            - trigger-rally <unfixed> (embed)
514            - xmoto <unfixed> (embed)
515            - mapnik <unknown> (embed)
516            NOTE: uses a different XML parser by default
517            - rrootage 0.23a-6 <embed>
518            NOTE: links to libbulltetml
519            - boson <unknown> (embed)
520            NOTE: the embedded code is unused
521    
522    gv
523            - evince <unfixed> (embed)
524            NOTE: ps/ tree from gv 3.5.8
525            NOTE: evince-gtk is affected (a component of evince source package)
526    
527    libXbae
528            - paw <removed> (embed)
529            [etch] - paw <unfixed> (embed)
530    
531    libgtkhtml
532            - claws-mail-extra-plugins <unfixed> (fork)
533    
534    libXaw
535            - paw <removed> (embed)
536            [etch] - paw <unfixed> (embed)
537            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
538    
539    libgd2
540            - graphviz <unfixed> (embed)
541            NOTE: lib/gd seems to be 2.0.33
542            - wml 2.0.11ds2-1 (embed)
543            - libwmf <unfixed> (embed)
544            NOTE: derived from gd 1.6.3
545            - texlive-bin 2009-1 (embed)
546    
547    rar
548            - unrar-nonfree <unfixed> (embed)
549    
550    unrar-free (maybe this code is derived from the original rar, too?)
551            - clamav <unfixed> (embed)
552            NOTE: seems to be disabled in default config
553    
554    mplayer (DirectMedia Object loader)
555            - xine-lib <unfixed> (embed)
556            NOTE: src/libw32dll/
557            - vlc <unfixed> (embed)
558            NOTE: modules/codec/dmo/
559            - mplayer 1.0~rc2-20 (embed)
560    
561    libwpd (WordPerfect converter)
562            - openoffice.org <unfixed> (embed)
563    
564    fsplib (http://sourceforge.net/projects/fsp/)
565            - gftp <unfixed> (embed)
566            NOTE: lib/fsplib version 0.3
567    
568    sprng
569            - tree-puzzle <unfixed> (embed)
570    
571    librpcsecgss
572            - krb5 <unfixed> (embed)
573    
574    jasper
575            - ghostscript 8.64~dfsg-2 (embed)
576    
577    libiris
578            - psi <unfixed> (embed)
579            - kdenetwork <unfixed> (embed)
580            NOTE: kopete embeds libiris but links dynamically to libidn
581            - kdegames <unfixed> (embed)
582            NOTE: ksirk/kde4
583    
584    libidn
585            - monotone 0.43-1 (embed)
586            - psi <unfixed> (embed)
587            NOTE: psi embeds libiris which embeds libidn
588            - kdegames <unfixed> (embed)
589            NOTE: kdegames/kde4 embeds libiris which embeds libidn
590    
591    lua5.1
592            - monotone 0.43-1 (embed)
593            - nmap 5.00-1 (embed; bug #527997)
594            [lenny] - nmap <unfixed> (embed; bug #527997)
595            - ocropus <unfixed> (embed)
596            - enigma <unfixed> (embed)
597            NOTE: requires lua built with C++
598            - freeciv <unfixed> (embed)
599            - spring <unfixed> (embed)
600    
601    libbotan
602            - monotone 0.43-1 (embed)
603    
604    NetXX
605            - monotone 0.43-1 (embed)
606    
607    libgc
608            - mono <unfixed> (embed)
609    
610    lzma
611            - p7zip <unfixed> (embed)
612            - xz-utils <unfixed> (fork)
613    
614    lzo
615            - grub2 <unfixed> (embed)
616    
617    yassl
618            - mysql-dfsg-5.0 <unfixed> (embed)
619            - mysql-dfsg-5.1 <unfixed> (embed)
620    
621    pax code
622            - tar <unfixed> (embed)
623            - cpio <unfixed> (embed)
624    
625    t1lib
626            - tetex-bin 2.0.2-1 (embed)
627            - texlive-bin <unknown> (embed)
628    
629    guichan
630            - boswars <unfixed> (embed)
631            NOTE: maintainer notified us, working on it
632    
633    tolua
634            - boswars <unfixed> (embed)
635            NOTE: maintainer notified us, working on it
636            NOTE: actually tolua++
637            - ocropus <unfixed> (embed)
638            NOTE: actually tolua++
639            - freeciv <unfixed> (embed)
640            NOTE: actually tolua++
641            - enigma <unfixed> (embed)
642    
643    asio-dev
644            - luxrender <removed> (embed)
645    
646    xine-lib
647            - vlc <unfixed> (embed)
648            NOTE: only parts included in modules/access/rtsp
649    
650    netpbm
651            - tcl8.3 <unfixed> (embed)
652            - tcl8.4 <unfixed> (embed)
653            - tcl8.5 <unfixed> (embed)
654            NOTE: generic/tkImgGIF.c
655    
656    tk8.5
657            - tk8.0 <removed> (old-version)
658            - tk8.3 <unfixed> (old-version)
659            - tk8.4 <unfixed> (old-version)
660            - perl-tk <unfixable> (fork)
661    
662    samba
663            - mc 2:4.6.2~git20080311-1 (embed)
664            NOTE: maintainer is aware of this, currently searching a solution
665    
666    plib1.8.4c2
667            - boson <unfixed> (fork)
668            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
669    
670    fribidi
671            - quesoglc 0.7.2-2 (embed)
672    
673    glew
674            - quesoglc <unfixed> (embed; bug #489341)
675            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
676            - trigger 0.5.2.1-2 (embed)
677            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
678            - trigger-rally 0.5.2.1-2 (embed)
679            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
680            - chromium-browser 5.0.375.70~r48679-2
681    
682    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
683            - transcend <unfixed> (embed)
684            - cultivation <unfixed> (embed)
685            - passage <unfixed> (embed)
686            - gravitation <unfixed> (embed)
687    
688    tar
689            - libarchive <unfixed> (embed)
690            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
691    
692    cpio
693            - libarchive <unfixed> (embed)
694            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
695    
696    kde4libs
697            - kdelibs <unfixable> (old-version)
698    
699    webkit
700            - qt4-x11 <unfixed> (embed; bug #479851)
701            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
702            - kde4libs <unfixable> (fork)
703            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
704            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
705    
706    ftgl
707            - blender 2.46+dfsg-1 (embed)
708    
709    wv
710            - abiword <unfixed>
711    
712    qemu
713            - kvm <removed> (embed; bug #543159)
714            - qemu-kvm <unfixed> (embed; bug #560853)
715            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
716            - xen-3 3.4.2-2 (embed; bug #560856)
717            - xen-unstable <unfixed> (embed; bug #560856)
718    
719    vgabios
720            - kvm <removed> (embed; bug #489442)
721            - qemu-kvm <unfixed> (embed)
722    
723    bochs
724            - kvm <removed> (embed; bug #489442)
725            - qemu-kvm <unfixed> (embed)
726    
727    speex
728            - vorbis-tools <unfixed> (embed)
729            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
730            - gst-plugins-good0.10 <unfixed> (embed)
731            - xine-lib <unfixed> (embed)
732            - libfishsound <unfixed> (embed)
733            - libannodex <removed> (embed)
734            - vlc <unfixed> (embed)
735            - xmms-speex <unfixed> (embed)
736            - libsdl-sound1.2 <unfixed> (embed)
737            - sweep <unfixed> (embed)
738    
739    libreadline
740            - magic <itp> (old-version)
741    
742    opcode
743            - ode <unfixed> (embed)
744            NOTE: opcode is not a package in debian, it is just embedded
745            NOTE: http://www.codercorner.com/Opcode.htm
746    
747    gimpact
748            - ode <unfixed> (embed)
749            NOTE: gimpact is not a package in debian, it is just embedded
750            NOTE: http://gimpact.sf.net
751    
752    mochikit
753            - mahara <unfixed> (embed)
754            NOTE: they require extra patches, still unmerged upstream
755            - ntop <unfixed> (embed)
756            - coherence 0.6.2-1 (embed)
757            - paste <unfixed> (embed)
758            - turbogears <unfixed> (embed)
759            - plone3 <removed> (embed)
760            - xulrunner <unfixed> (embed)
761            - libjifty-plugin-chart-perl <unfixed> (embed)
762            - sabnzbdplus <unfixed> (embed)
763            - tgmochikit <unfixed> (embed)
764    
765    prototypejs
766            - netbeans-ide 6.0.1+dfsg-2 (embed)
767            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
768            - webcit <unfixed> (embed; bug #555219)
769            - asterisk 1:1.6.2.0~rc3-1 (embed)
770            - libjson-ruby 1.1.4-1 (embed; bug #555224)
771            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
772            - horde3 <unfixed> (embed)
773            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
774            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
775            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
776            - ebug-http <removed> (embed; bug #555236)
777            - libaws 2.7-1 (embed; bug #555222)
778            - phpgedview <removed> (embed)
779            - poker-network 1.7.6-1 (embed; bug #555238)
780            - rails 2.1.0-6 (embed)
781            - wordpress 2.5.0-2 (embed; bug #555243)
782            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
783            TODO: search through all of the other zope packages
784            - ampache 3.4.1-2 (embed)
785            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
786            - hobix 0.5~svn20070319-4 (embed; bug #555247)
787            - zabbix 1.6.6-4 (embed; bug #555250)
788            - chora2 <unfixed> (embed; bug #555253)
789            - gollem <unfixed> (embed; bug # 555254)
790            - jscropperui 1.2.1-1 (embed; bug #555257)
791            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
792            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
793            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
794            - activeldap 1.2.1-1 (embed)
795            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
796            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
797            - otrs2 2.3.4-6 (embed; bug #555267)
798            - webcalendar 1.2~b1-2 (embed; bug #555269)
799            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
800            - jifty 0.90519-1 (embed; bug #555271)
801            - jquery 1.4-1 (embed; bug #555272)
802            - passenger 2.2.5debian1-1 (embed; bug #555273)
803            - plone3 <removed> (embed; bug #555275)
804            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
805            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
806            - xulrunner <unfixed> (embed)
807            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
808    
809    gdb
810            - insight <unfixed> (embed)
811    
812    e2fsprogs
813            - ldiskfsprogs <unfixable> (fork)
814    
815    quazip (not packaged in Debian)
816            - qcake <unfixed> (embed)
817            NOTE: starting with upstream version 0.6.4
818    
819    exo
820            - pcmanfm <unfixed> (embed; bug #499677)
821            NOTE: slightly modified source code
822    
823    java
824            - openjdk-6 <unfixed>
825            - sun-java5 <unfixed>
826            - sun-java6 <unfixed>
827    
828    libphp-snoopy
829            - ampache 3.4.1-2 (embed; bug #504169)
830            - gforge 4.6.99+svn6094-2 (embed)
831            - mahara 1.0.5-2 (embed; bug #504170)
832            - pixelpost 1.7.1-5 (embed; bug #504171)
833            - mediamate 0.9.3.6-5 (embed; bug #504172)
834            - opendb <removed> (embed; bug #504173)
835            [etch] - opendb <unfixed> (embed; bug #504173)
836            - wordpress 2.5.1-9 (embed; bug #443948)
837            - moodle <unfixed> (embed; bug #507185)
838            [etch] - phpgroupware <unfixed> (embed)
839            NOTE: phpgroupware-felamimail
840            - magpierss 0.72-3 (embed; bug #431089)
841    
842    jquery
843            - zekr <unfixed> (embed)
844            - wordpress <unknown> (embed)
845            - yocto-reader <unfixed> (embed)
846            - textpattern <unfixed> (embed)
847            - genshi 0.5.1-1 (embed)
848            NOTE: compressed file under examples/ dir
849            - prewikka <unfixed> (embed)
850            - libramaze-ruby <unfixed> (embed)
851            - drupal5 <unfixed> (embed)
852            - b2evolution <unfixed> (embed)
853            - wesnoth <unfixed> (embed)
854    
855    tablesorter (jquery plugin, not packaged yet)
856            - wesnoth <unfixed> (embed)
857    
858    kses
859            - wordpress <unfixed> (embed; bug #504242)
860            NOTE: their copy has all methods renamed to wp_<foo>
861            NOTE: kses isn't in Debian, RFP: #504240
862            - moodle <unfixed> (embed; bug #507185)
863            - egroupware <unfixed> (embed)
864    
865    magpierss
866            - wordpress <unfixed> (embed; bug #504242)
867            - moodle <unfixed>
868    
869    php-gettext
870            - wordpress 2.8.4-1 (embed; bug #504242)
871            - docbookwiki <unfixed> (embed)
872            - knowledgeroot 0.9.9.5-1
873            NOTE: non-free
874    
875    libphp-ixr (name may change, it is the Incutio XML-RPC)
876            - wordpress <unfixed> (embed; bug #504242)
877            NOTE: libphp-ixr isn't in Debian, RFP: #504236
878            - dokuwiki <unfixed> (embed)
879            - textpattern <unfixed> (embed)
880    
881    libphp-cas
882            - glpi <unfixed> (embed)
883            - moodle <unfixed> (embed; bug #505984)
884    
885    scriptaculous (prototype.js is among the embeds in the following)
886            - glpi <unfixed> (embed)
887            - libaws <unfixed> (embed; bug #555222)
888            - op-panel <unfixed> (embed)
889            - symfony <unfixed> (embed)
890            NOTE: maintainer says there are extra incompatible changes required
891            - pixelpost 1.7.1-6 (embed)
892            - webhelpers <unfixed> (embed)
893            - qwik <removed> (embed; bug #555241)
894            - smokeping <unfixed> (embed)
895            - turba2 <unfixed> (embed)
896            - typo3-src 4.2.3-1 (embed)
897            - request-tracker3.6 <unfixed> (embed)
898            - request-tracker3.8 <unfixed> (embed)
899            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
900            - wordpress 2.5.0-2 (embed)
901            - libhtml-prototype-perl 1.48-3 (embed)
902    
903    libmarkdown-php
904            - moodle <unfixed> (embed; bug #507185)
905            - pixelpost 1.7.1-6 (embed)
906    
907    php-openid
908            - wordpress-openid <itp> (embed)
909    
910    geshi
911            - dokuwiki 0.0.20080505-3.1 (embed)
912            - pgfouine 1.0-1.1 (embed)
913            - websvn 2.1.0-1 (embed)
914    
915    webcalendar
916            - gforge 4.7~rc2-6 (embed; bug #504758)
917    
918    libical
919            - kdepim <unknown> (fork)
920            NOTE: fixed at some point during 4.0
921            - kdepimlibs 4.2.0-1 (fork)
922            - claws-mail-extra-plugins <unfixed> (fork)
923    
924    harfbuzz
925            - qt4-x11 <unfixed> (embed)
926            - pango1.0 <unfixed> (embed)
927            - fontmatrix <unfixed> (embed)
928    
929    libzip
930            - php5 <unfixable> (modified-embed)
931            - odt2txt <unfixed> (embed; bug #523808)
932    
933    json.php (not packaged; should be replaced with php's built-in functions)
934            - moodle <unfixed>
935            - yui <unfixed>
936            - gallery2 <unfixed>
937            - dokuwiki <unfixed>
938            - typo3-src <unfixed>
939    
940    php-fpdf
941            - tcpdf <itp> (fork)
942            - moodle <unfixed>
943            - phpwiki <unfixed>
944            - egroupware <unfixed>
945            - ldap-account-manager <unfixed> (fork)
946    
947    tcpdf (itp: #495985)
948            - moodle <unfixed>
949            - phpmyadmin <unfixed>
950    
951    typo3
952            - moodle <unfixed>
953    
954    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
955            - moodle <unfixed>
956            - gosa <unfixed>
957    
958    php-ole (itp: #487558)
959            - moodle <unfixed>
960    
961    pieforms (http://www.catalyst.net.nz)
962            - mahara <unfixed>
963    
964    savant2 (http://phpsavant.com)
965            - egroupware <unfixed>
966    
967    rssparser (http://nwow.org)
968            - egroupware <unfixed>
969            - phpgroupware <unfixed>
970    
971    lcms
972            - openjdk-6 <unfixed> (fork)
973            - gimp 2.4.0~rc2-2
974    
975    libphp-phplayersmenu
976            - diogenes <unfixed>
977            - phpldapadmin <unfixed>
978    
979    libphp-pclzip
980            - docvert <unfixed>
981            - moodle <unfixed>
982            - egroupware <unfixed>
983    
984    libphp-simplepie
985            - dokuwiki <unfixed>
986            - wordpress <unfixed>
987    
988    libphp-jpgraph
989            - egroupware <unfixed>
990    
991    php-simpletest
992            - moodle <unfixed>
993    
994    libpng
995            - iceweasel <not-affected> (uses xulrunner)
996            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
997            - iceape 1.0.13~pre080614i-0etch1 (embed)
998            - xulrunner 1.9.0.13-1 (embed)
999            [lenny] - xulrunner 1.9.0.11-0lenny1
1000            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1001            - gamera 3.2.3-1 (embed)
1002            - freeimage <unfixed> (embed)
1003            - tuxonice-userui (static)
1004    
1005    irssi
1006            - silc-client <unfixed> (embed)
1007            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1008    
1009    extc
1010            - mtasc <unfixed> (embed)
1011            - haxe <unfixed> (embed)
1012    
1013    swflib
1014            - mtasc <unfixed> (embed)
1015            - haxe <unfixed> (embed)
1016    
1017    libitext-java
1018            - bouncycastle 2.1.4-1 (embed)
1019    
1020    python-ply
1021            - pyke <unfixed> (embed; bug #555363)
1022            - pywbem 0.7.0-4 (embed; bug #555364)
1023            - sepolgen <unfixed> (embed; bug #555365)
1024            - zope-textindexng3 <unknown> (embed)
1025            - iceweasel <not-affected> (uses xulrunner)
1026            - xulrunner <unknown> (embed)
1027            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1028    
1029    libdumbnet (libdnet upstream)
1030            - nmap <unfixed> (fork)
1031    
1032    gcc-4.4
1033            - gcc-mingw32 <unfixed> (embed)
1034    
1035    camlimages
1036            - advi <unfixed> (static; bug #550441)
1037    
1038    memcached
1039            - memcachedb <unfixed> (embed)
1040    
1041    yajl
1042            - argyll <unfixed> (embed; bug #544223)
1043            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1044    
1045    nusoap
1046            - gforge 4.8.2-1 (embed)
1047            - ampache <unfixed> (embed)
1048            - poker-network <unfixed> (embed)
1049            - moodle <unfixed> (embed)
1050            NOTE: code is not used when running under php5 and soap is enabled
1051            - phpwiki <unfixed> (embed)
1052            - gallery2 <unfixed> (embed)
1053            - typo3-src <unfixed> (embed)
1054    
1055    libept
1056            - adept <unfixed> (embed; bug #540649)
1057    
1058    libvorbis
1059            - iceweasel <not-affected> (uses xulrunner)
1060            - xulrunner <unfixed> (embed; bug #540959)
1061            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1062            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1063            - iceape <unfixed> (embed)
1064            [etch] - iceape <not-affected> (introduced in 2.0)
1065            [lenny] - iceape <not-affected> (introduced in 2.0)
1066    
1067    cairo
1068            - iceweasel <not-affected> (uses xulrunner)
1069            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1070    
1071    liboggz
1072            - iceweasel <not-affected> (uses xulrunner)
1073            - xulrunner <unfixed> (embed; bug #540959)
1074            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1075            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1076            - iceape <unfixed> (embed)
1077            [etch] - iceape <not-affected> (introduced in 2.0)
1078            [lenny] - iceape <not-affected> (introduced in 2.0)
1079    
1080    liboggplay
1081            - iceweasel <not-affected> (uses xulrunner)
1082            - xulrunner <unfixed> (embed; bug #540959)
1083            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1084            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1085            - iceape <unfixed> (embed)
1086            [etch] - iceape <not-affected> (introduced in 2.0)
1087            [lenny] - iceape <not-affected> (introduced in 2.0)
1088    
1089    php-net-dnsbl
1090            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1091    
1092    php-onyx-rss
1093            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1094    
1095    php-text-wiki
1096            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1097    
1098    php-xml-rpc
1099            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1100    
1101    polarssl (does not have a shared library)
1102            - pdkim <itp> (embed; bug #543150)
1103            - xyssl <unfixed> (old-version)
1104    
1105    pidgin (libpurple)
1106            - gaim <removed> (old-version)
1107            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1108    
1109    icu
1110            - webkit 1.0.1-1 (embed; bug #547214)
1111            - texlive-bin <unfixed> (fork)
1112            NOTE: texlive upstream working with icu upstream to merge their changes
1113            - chromium-browser 5.0.375.29~r46008-3
1114    
1115    cyrus-imapd-2.2
1116            - kolab-cyrus-imapd <unfixed> (fork)
1117            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1118    
1119    python-cxx-dev
1120            - freecad 0.9.2646.3-1 (embed; bug #547936)
1121    
1122    zipios++
1123            - freecad 0.9.2646.3-1 (embed; bug #547941)
1124            - enigma 0.92.3-3 (embed)
1125            NOTE: likely fixed earlier, marking etch's version as fixed
1126    
1127    linux-2.6
1128            - kvm <removed> (embed; bug #549973) [./kernel/*]
1129            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1130            - kernel-source-2.6.8 <removed> (old-version)
1131            - kernel-source-2.4.27 <removed> (old-version)
1132            - kernel-source-2.4.24 <removed> (old-version)
1133            - kernel-source-2.2.25 <removed> (old-version)
1134            - kernel-source-2.2.20 <removed> (old-version)
1135    
1136    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1137            - kvm <removed> (embed) [./libfdt/*]
1138            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1139    
1140    qweb (not packaged)
1141            - ajaxterm <unfixed>
1142    
1143    opensaml2
1144            - opensaml <removed> (old-version)
1145    
1146    shibboleth-sp2
1147            - shibboleth-sp <removed> (old-version)
1148    
1149    tuxonice-userui
1150            - suspend2-userui <removed> (old-version)
1151    
1152    expat
1153            - w3c-libwww <removed> (embed; bug #551941)
1154            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1155            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1156            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1157            - python2.4 <unfixable> (embed; bug #553403)
1158            - python-4suite <unfixed> (embed; bug #516935)
1159            - wxwindows2.4 <removed> (embed)
1160            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1161            - wxwidgets2.8 2.8.10.1-2 (embed)
1162            - celementtree 1.0.5-8 (embed)
1163            NOTE: Maybe that was fixed even earlier
1164            - audacity 1.3.2-1 (embed)
1165            - matanza <unfixed> (embed)
1166            - tdom 0.8.3~20080525-1 (embed)
1167            - udunits 2.1.8-4 (embed)
1168            - apr-util 1.2 (embed)
1169            - ayttm <unfxed> (embed; bug #561006)
1170            - cableswig <unfixed> (embed)
1171            - cadaver <unfixed> (embed)
1172            - cmake 2.6.0-6 (embed)
1173            - coin3 <unfixed> (embed)
1174            - gdcm 2.0.14-2 (embed)
1175            - ghostscript 8.71~dfsg-2 (embed)
1176            - grmonitor <removed> (embed)
1177            - iceape <unfixed> (embed)
1178            - insighttoolkit 3.16.0-1 (embed)
1179            NOTE: insighttoolkit might've been fixed earlier
1180            - libparagui1.1 1.0.2-1 (embed)
1181            - paraview 3.6.2-1 (embed)
1182            - poco 1.3.6p1-1 (embed)
1183            - simgear <unfixed> (embed)
1184            - sitecopy 1:0.16.0-1
1185            - smart <unfixed> (embed)
1186            NOTE: smart embeds celementree, and it includes expat
1187            - swish-e <not-affected> (Linked against libxml, which is used instead)
1188            - tla 1.3.5+dfsg-15 (embed)
1189            - vtk 4.1.20030227-1 (embed)
1190            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1191            - xmlrpc-c <unfixed> (embed)
1192            - iceweasel <unfixed> (embed)
1193            - kompozer <unfixed> (embed)
1194            - vxl 1.13.0-2 (embed)
1195            - xulrunner <unfixed> (embed)
1196            - apache2 2.2 (embed)
1197            - texlive-bin <not-affected> (Embedded code not compiled in)
1198            - vnc4 <unfixed> (embed)
1199            - xotcl 1.6.6-1 (embed)
1200            - chromium-browser 5.0.375.29~r46008-3
1201    
1202    xerces-c
1203            - xerces-c2 <unfixed> (old-version)
1204            - xerces27 <removed> (old-version)
1205    
1206    md5 (RSA's version; not the gnu version provided by coreutils)
1207            - w3c-libwww <removed> (embed; bug #551942)
1208            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1209    
1210    libparagui1.1
1211            - asc <unfixable> (fork)
1212    
1213    enet
1214            - sauerbraten <unfixed> (embed; #497194)
1215    
1216    eglibc
1217            - glibc <removed> (old-version)
1218    
1219    galib
1220            - gamera 3.2.3-1 (embed)
1221    
1222    configobj
1223            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1224            - elisa <unfixed> (embed; bug #555337)
1225            - gaupol <unfixed> (embed; bug #555338)
1226            - ipython <unfixed> (embed; bug #555339)
1227            - pida <unfixed> (embed; bug #555340)
1228            - psychopy <unfixed> (embed; bug #555341)
1229            - rest2web <unfixed> (embed; bug #555342)
1230            - auth2db <unknown> (embed)
1231            - dynagen <unknown> (embed)
1232            - iceweasel <unknown> (embed)
1233            - sabnzbdplus <unknown> (embed)
1234            - xulrunner <unknown> (embed)
1235            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1236    
1237    python-clientform
1238            - bibus <unfixed> (embed; bug #555332)
1239            - zope2.10 <unfixed> (embed; bug #555333)
1240            - zope2.11 <removed> (embed; bug #555334)
1241            - python-mechanize <unknown> (embed)
1242            - twill <unknown> (embed)
1243    
1244    python-mechanize
1245            - zope2.10 <unfixed> (embed; bug #555337)
1246            - zope2.11 <removed> (embed; bug #555338)
1247            - twill <unknown> (embed; bug #555339)
1248    
1249    pexpect
1250            - duplicity 0.6.06-1 (embed; bug #555361)
1251            - hplip <unfixed> (embed; bug #555362)
1252            - smart <unfixed> (embed; bug #555363)
1253    
1254    pyparsing
1255            - bauble <unfixed> (embed; bug #555366)
1256            - boa-constructor 0.6.1-8 (embed; bug #555367)
1257            - calibre <unfixed> (embed; bug #555368)
1258            - matplotlib <unfixed> (embed; bug #531024)
1259            - zhpy 1.7.3.1-1 (embed; bug #555370)
1260            - polybori <unknown> (embed)
1261            - python-whoosh <unknown> (embed)
1262            - twill <unknown> (embed)
1263            - zope-textindexng3 <unknown> (embed)
1264    
1265    python-pysqlite2
1266            - python2.4 <unfixed> (embed; bug #553403)
1267            - python2.5 <unfixed> (embed; bug #553403)
1268    
1269    celementtree
1270            - python2.5 <unfixed> (embed)
1271            - smart <unfixed> (embed)
1272    
1273    elementtree
1274            - python2.5 <unfixed> (embed)
1275            - python2.6 <unfixed> (embed)
1276            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1277            - gedit 2.28.2-1 (embed; bug #555344)
1278            - smart <unfixed> (embed)
1279            - solfege <unfixed> (embed; bug #555345)
1280            - w3af <unfixed> (embed; bug #555346)
1281            - python-qt4 <unknown> (embed)
1282            - sphinx <unknown> (embed)
1283            - python-nltk <itp> (embed)
1284    
1285    python2.5
1286            - python2.4 <unfixed> (old-version)
1287            - jython <unfixed> (embed)
1288            NOTE: embeds many stdlib modules
1289            - python-django <unfixed> (embed; bug #555419)
1290            NOTE: embeds stdlib modules: doctest, decimal
1291            - gamera 3.2.3-1 (embed)
1292            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1293            - boa-constructor <unfixed> (embed; bug #555426)
1294            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1295            - nicotine <unfixed> (embed; bug #555427)
1296            NOTE: embeds stdlib modules: ConfigParser
1297            - museek+ <unfixed> (embed; bug #555428)
1298            NOTE: embeds stdlib modules: ConfigParser
1299            - vegastrike-data <unfixed> (embed)
1300            NOTE: embeds many stdlib modules
1301            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1302            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1303            - config-manager <unfixed> (embed; bug #555423)
1304            NOTE: embeds stdlib modules: optparse
1305            - jhbuild 2.28.0-1 (embed; bug #555421)
1306            NOTE: embeds stdlib modules: optparse, subprocess
1307            - smart <unfixed> (embed; bug #555432)
1308            NOTE: embeds stdlib modules: optparse
1309            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1310            NOTE: embeds stdlib modules: doctest
1311            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1312            NOTE: embeds stdlib modules: doctest
1313            - distribute <unfixed> (embed)
1314            NOTE: embeds stdlib modules: doctest
1315            - python-setuptools <unfixed> (embed; bug #555435)
1316            NOTE: embeds stdlib modules: doctest
1317            - zope.testing <unfixed> (embed; bug #555436)
1318            NOTE: embeds stdlib modules: doctest
1319            - translate-toolkit <unfixed> (embed; bug #555422)
1320            NOTE: embeds stdlib modules: textwrap, contextlib
1321            - libtpclient-py <unfixed> (embed; bug #555424)
1322            NOTE: embeds stdlib modules: subprocess
1323            - grass <unfixed> (embed; bug #555425)
1324            NOTE: embeds stdlib modules: subprocess
1325            - coherence <unfixed> (embed; bug #555429)
1326            NOTE: embeds stdlib modules: uuid
1327            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1328            NOTE: embeds stdlib modules: uuid
1329            - setroubleshoot <unfixed> (embed; bug #555431)
1330            NOTE: embeds stdlib modules: uuid
1331            - linkchecker <unfixed> (embed; bug #555414)
1332            NOTE: embeds msgfmt.py script
1333            - imdbpy <unfixed> (embed)
1334            NOTE: embeds msgfmt.py script
1335            - kiwi <unfixed> (embed)
1336            NOTE: embeds msgfmt.py script
1337            - moin <unfixed> (embed)
1338            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1339            - plone3 <removed> (embed)
1340            NOTE: embeds msgfmt.py script
1341            - roundup <unfixed> (embed)
1342            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1343            - rednotebook <unfixed> (embed; bug #555415)
1344            NOTE: embeds msgfmt.py script
1345            - turbogears <unfixed> (embed)
1346            NOTE: embeds msgfmt.py script
1347            - elisa <unfixed> (embed)
1348            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1349            - calibre <unfixed> (embed)
1350            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1351            - mailman 1:2.1.13-1 (embed; #555416)
1352            NOTE: embeds msgfmt.py script
1353            - python-docutils <unknown> (embed)
1354            NOTE: embeds stdlib modules: optparse, textwrap
1355            - python-imaging <unknown> (embed)
1356            NOTE: embeds stdlib modules: doctest
1357            - python-mechanize <unknown> (embed)
1358            NOTE: embeds stdlib modules: doctest
1359            - twill <unknown> (embed)
1360            NOTE: embeds stdlib modules: subprocess
1361            - zeroc-ice <unknown> (embed)
1362            NOTE: embeds stdlib modules: subprocess
1363            - wxwidgets2.8 <unknown> (embed)
1364            NOTE: embeds stdlib modules: subprocess
1365            - cycle <unknown> (embed)
1366            NOTE: embeds msgfmt.py script
1367            - deluge <unknown> (embed)
1368            NOTE: embeds msgfmt.py script
1369            - opendict <unknown> (embed)
1370            NOTE: embeds msgfmt.py script
1371            - openerp-client <unknown> (embed)
1372            NOTE: embeds msgfmt.py script
1373            - rapidsvn <unknown> (embed)
1374            NOTE: embeds msgfmt.py script
1375            - wammu <unknown> (embed)
1376            NOTE: embeds msgfmt.py script
1377            - gaphor <unknown> (embed)
1378            NOTE: embeds msgfmt.py script
1379            - pida <unknown> (embed)
1380            NOTE: embeds msgfmt.py script
1381            - python-formencode <unknown> (embed)
1382            NOTE: embeds msgfmt.py script
1383            - duplicity <unfixed> (embed)
1384            NOTE: embeds stdlib module: urlparse, tarfile
1385            - pygopherd <unfixed> (embed)
1386            NOTE: embeds stdlib module: zipfile
1387    
1388    argparse
1389            - twill <unfixed> (embed; bug #555347)
1390            - ipython <unfixed> (embed; bug #555348)
1391    
1392    coherence
1393            - elisa <unfixed> (embed; bug #555335)
1394    
1395    simpletal
1396            - plastex <unfixed> (embed; bug #555371)
1397    
1398    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1399            - postr <unfixed> (embed)
1400            - elisa <unfixed> (embed)
1401    
1402    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1403            - apertium-tolk <unfixed> (embed)
1404            - ipython <unfixed> (embed)
1405            - virtaal <unfixed> (embed)
1406    
1407    distribute
1408            - setuptools <removed> (old-version)
1409    
1410    rails
1411            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1412            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1413            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1414            - thin <unfixed> (embed) [./spec/rails_app/*]
1415            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1416            NOTE: be dangerous if developers are naively basing their code off of the examples
1417            NOTE: prototype.js is among the example files
1418    
1419    lucene2 (prototype.js is among the embeds in the following)
1420            - lucene <unfixed> (old-version)
1421            - pylucene <unfixed> (embed)
1422            - libpdfbox-java <unfixed> (embed)
1423            - libfontbox-java <unfixed> (embed)
1424            - libjempbox-java <unfixed> (embed)
1425            - solr <unfixed> (embed)
1426    
1427    unicode-data
1428            - syslinux <unfixed> (embed)
1429            - camomile <unfixed> (embed)
1430            - fribidi <unfixed> (embed)
1431            - m17n-db <unfixed> (embed)
1432            - sbcl <unfixed> (embed)
1433            - heimdal <unfixed> (embed)
1434            - icu <unfixed> (embed)
1435            - icu4j <unfixed> (embed)
1436            - krb5 <unfixed> (embed)
1437            - moodle <unfixed> (embed)
1438            - openldap <unfixed> (embed)
1439            - pike7.6 <unfixed> (embed)
1440            - samba <unfixed> (embed)
1441            - samba4 <unfixed> (embed)
1442            - cmucl <unfixed> (embed)
1443            - typo3-src <unfixed> (embed)
1444            - mauve <unfixed> (embed)
1445            - texlive-bin <unfixed> (embed)
1446            - ypsilon <unfixed> (embed)
1447            - jeuclid <unfixed> (embed)
1448            - charmap.app <unfixed> (embed)
1449            - clisp <unfixed> (embed)
1450            - gnulib <unfixed> (embed)
1451            - opensrs-client <unfixed> (embed)
1452            - saxonb <unfixed> (embed)
1453            - rails <unfixed> (embed)
1454    
1455    feedparser
1456            - rawdog <unfixed> (embed; bug #383422)
1457            - miro <unfixed> (embed; bug #555351)
1458            - calibre <unfixed> (embed; bug #555352)
1459            - freevo <unfixed> (embed; bug #555353)
1460            - pida <unfixed> (embed; bug #555354)
1461            - planet-venus <unfixed> (embed; bug #555355)
1462            - plone3 <removed> (embed; bug #555356)
1463            - exaile 0.2.14+debian-1 (embed)
1464            - screenlets 0.1.2-3 (embed)
1465            NOTE: included twice
1466    
1467    agg:
1468            - matplotlib <unfixed> (embed: bug #377271)
1469            - contextfree <unfixed> (embed)
1470            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1471            - exactimage <unfixed> (embed)
1472            - python-enable <unfixed> (embed)
1473            - mapnik 0.5.1-3 (embed)
1474            NOTE: links statically to agg, but shared library is not available (bug #377271)
1475    
1476    vtk
1477            - paraview <unfixable> (embed; bug #495426)
1478    
1479    txt2tags
1480            - rednotebook <unfixed> (embed)
1481    
1482    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1483            - gajim <unfixed> (embed)
1484            - emesene <unfixed> (embed)
1485            - convirt <unfixed> (embed)
1486            - pida <unfixed> (embed)
1487            - rednotebook <unfixed> (embed)
1488    
1489    horde3 (prototype.js is among the embeds in the following)
1490            - mnemo2 <unfixed> (embed)
1491            - nag2 <unfixed> (embed)
1492            - wordpress <unfixed> (embed)
1493            NOTE: Text_Diff (wp-includes/Text/Diff*)
1494    
1495    cimg
1496            - gmic <itp> (embed)
1497    
1498    mootools
1499            - gmic <itp> (embed)
1500    
1501    openldap
1502            - openldap2.3 <removed> (old-version)
1503    
1504    grub2
1505            - grub <unfixed> (old-version)
1506    
1507    gnupginterface
1508            - duplicity <unfixed> (embed)
1509    
1510    python-dateutil
1511            - awn-extras-applets <unfixed> (embed)
1512            - matplotlib <unknown> (embed)
1513    
1514    cups
1515            - cupsys <removed> (old-version)
1516    
1517    yui
1518            - bcfg2 <not-affected> (present in source but not included in any binary files)
1519            - serendipity 1.5.3-1 (embed; bug #557746)
1520            - moodle 1.8.2.dfsg-5 (embed)
1521            - jifty 0.91117-1 (embed; bug #557748)
1522            - webgui 7.7.26-1 (embed)
1523            - loggerhead 1.17-1 (embed)
1524    
1525    quake3 (vanilla source not packaged in debian)
1526            - openarena <unfixable> (fork)
1527    
1528    quake2 (vanilla source not packaged in debian)
1529            - alien-arena <unfixable> (fork)
1530            - warsow <unfixable> (fork)
1531    
1532    libtheora
1533            - iceweasel <not-affected> (uses xulrunner)
1534            - xulrunner <unfixed> (embed; bug #540959)
1535            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1536            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1537            - iceape <unfixed> (embed; bug #559276)
1538            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1539            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1540    
1541    dtoa
1542            - bfilter <unfixed> (embed)
1543            - cacao <unfixed> (embed)
1544            - cdrdao <unfixed> (embed)
1545            - classpath <unfixed> (embed)
1546            - freej <unfixed> (embed)
1547            - iceape <unfixed> (embed)
1548            - iceweasel <unfixed> (embed)
1549            - jscoverage <unfixed> (embed)
1550            - kde4libs <unfixed> (embed)
1551            - kdelibs <unfixed> (embed)
1552            - kompozer <unfixed> (embed)
1553            - libv8 <unfixed> (embed)
1554            - mono <unfixed> (embed)
1555            - newlib <unfixed> (embed)
1556            - nspr <unfixed> (embed)
1557            - php5 <unfixed> (embed)
1558            - polyml <unfixed> (embed)
1559            - qt4-x11 <unfixed> (embed)
1560            - rhino <unfixed> (embed)
1561            NOTE: code translated to Java
1562            - ruby1.8 <unfixed> (embed)
1563            - ruby1.9 <unfixed> (embed)
1564            - ruby1.9.1 <unfixed> (embed)
1565            - sdd <unfixed> (embed)
1566            - sfind <unfixed> (embed)
1567            - star <unfixed> (embed)
1568            - tinymux <unfixed> (embed)
1569            - virtualbox-ose <unfixed> (embed)
1570            - webkit <unfixed> (embed)
1571            - xulrunner <unfixed> (embed)
1572    
1573    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1574            - firegpg <unfixed> (embed)
1575            - enigmail <unfixed> (embed)
1576    
1577    ptmalloc (not packaged in Debian)
1578            - crystalspace <unfixed> (embed)
1579            - qt4-x11 <unfixed> (embed)
1580    
1581    svgalib
1582            - usplash <unfixed> (embed)
1583    
1584    bogl
1585            - usplash <unfixed> (embed)
1586    
1587    taglist
1588            - usplash <unfixed> (embed)
1589    
1590    portaudio
1591            - audacity <unfixed> (embed; bug #323711)
1592    
1593    nyquist
1594            - audacity <unfixed> (embed)
1595            NOTE: embeds a forked nyquist with support for a shared library
1596    
1597    vamp-plugin-sdk
1598            - audacity <unfixed> (embed)
1599    
1600    wordpress
1601            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1602            - wordpress-mu <removed> (fork)
1603    
1604    php5
1605            - php4 <removed> (old-version)
1606    
1607    classpath
1608            - libgnucrypto-java <removed> (embed; bug #559788)
1609    
1610    libtool
1611            - apr <unfixed> (static; bug #489625)
1612            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1613            - arts <unfixed> (embed)
1614            - bochs 2.4.2-1 (embed; bug #560884)
1615            - camserv <unfixed> (embed)
1616            - collectd 4.8.2-1 (embed)
1617            - courier-authlib 0.58-4 (embed)
1618            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1619            - cvsnt 2.5.04.3236-1.2 (embed)
1620            - dico <not-affected> (Uses the system copy of ltdl)
1621            - freeradius 0.1+20010527-1 (embed)
1622            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1623            - ggobi 2.1.9~20091212-1 (embed)
1624            - glame 2.0.1-4 (embed)
1625            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1626            - gnash 0.8.7-2 (embed)
1627            - gnu-smalltalk <unfixed> (embed; bug #566777)
1628            - google-gadgets 0.10.5-0.3 (embed)
1629            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1630            - graphicsmagick 1.3.5-6 (embed)
1631            - graphviz 2.8-3 (embed)
1632            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1633            - guile-1.6 1.6.8-7 (embed)
1634            - hamlib 1.2.11-1 (embed)
1635            - hercules 3.06-1.2 (embed)
1636            - jags 1.0.4-3 (embed; bug #560864)
1637            - kdelibs <unfixed> (embed)
1638            - libannodex <removed> (embed)
1639            - libextractor 0.5.23+dfsg-4 (embed)
1640            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1641            - libtunepimp 0.5.3-7.3 (embed)
1642            - mp4h 1.3.1-4.1 (embed)
1643            - naim <removed> (embed)
1644            - parser-mysql <unfixed> (embed)
1645            - pinball 0.3.1-11 (embed)
1646            - redland <unfixed> (embed)
1647            - siproxd <unfixed> (embed)
1648            - ski <unfixed> (embed)
1649            - synfig 0.62.00-1 (embed)
1650            - unixodbc 2.2.4-5 (embed)
1651            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1652            - clamav 0.95+dfsg-1 (embed)
1653            - imagemagick 6:6.2.3.1-1 (embed)
1654            - hypre 2.4.0b-5 (embed)
1655            - lam <unfixed> (embed)
1656            - openmpi <unfixable> (embed; bug #559386)
1657            - parser <unfixed> (embed)
1658            - pdsh 2.18-5 (embed; bug #560892)
1659            - sbnc 1.2-8 (embed)
1660            - sdcc <unfixed> (embed)
1661            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1662            - proftpd-dfsg <unfixed> (embed; bug #561748)
1663            - babel 1.4.0.dfsg-5 (embed)
1664            - libprelude 0.9.14-2 (embed)
1665            - heartbeat 2.1.4-7 (embed)
1666            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1667            NOTE: might've been fixed earlier
1668            - gcc-* <unknown> (embed)
1669    
1670    ocamlgsl
1671            - orpie 1.5.1-7.1 (embed; bug #550058)
1672    
1673    xdotool
1674            - keynav <unfixed> (embed; bug #560103)
1675    
1676    bulletphysics (not packaged; http://www.bulletphysics.org/)
1677            - supertuxkart <unfixed> (embed)
1678            - blender <unfixed> (embed)
1679    
1680    ghostscript
1681            - gs-gpl <removed> (old-version)
1682    
1683    icedove
1684            - thunderbird <removed> (old-version)
1685    
1686    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1687            - jquery <unfixed> (embed)
1688    
1689    sed
1690            - ssed <unfixed> (fork)
1691    
1692    phpatomlib (http://code.google.com/p/phpatomlib)
1693            - wordpress <unfixed> (embed)
1694    
1695    Services_JSON (http://pear.php.net/package/Services_JSON)
1696            - wordpress <unfixed> (embed)
1697    
1698    phpass (http://www.openwall.com/phpass/)
1699            - gallery2 <unfixed> (embed)
1700            - wordpress <unfixed> (embed)
1701            - typo3-src <unfixed> (modified-embed)
1702            NOTE: file refers to drupal, maybe there's a copy somewhere there
1703            NOTE: a copyright owner search didn't match anything
1704            - libauthen-passphrase-perl <unfixable> (fork)
1705            NOTE: perl implementation of phpass
1706    
1707    squirrelmail
1708            - wordpress <unfixed> (embed)
1709            NOTE: class-pop3.php
1710    
1711    ezSQL (http://www.woyano.com/jv/ezsql)
1712            - wordpress <unfixable> (fork)
1713            NOTE: wp-db.php
1714    
1715    Diff.php (Clay Loveless' version/killersoft.com)
1716            - php-versioncontrol-svn <unfixed>
1717    
1718    libm (provided by libc)
1719            - spring <unfixed> (embed)
1720            NOTE: embedded by embedded copy of streflop
1721            - aide <unfixed> (static)
1722            - busybox <unfixed> (static)
1723            - mindi-busybox <unfixed> (static)
1724            - qemu <unfixed> (static)
1725            NOTE: qemu-user-static
1726            - tuxonice-userui <unfixed> (static)
1727            - zsh <unfixed> (static)
1728            NOTE: zsh-static
1729    
1730    streflop
1731            - spring <unfixed> (embed)
1732    
1733    minizip
1734            - spring <unfixed> (embed)
1735    
1736    oscpack
1737            - spring <unfixed> (embed)
1738    
1739    hpiutil2
1740            - spring <unfixed> (embed)
1741    
1742    p7zip
1743            - spring <unfixed> (embed)
1744    
1745    pythonqt (doesn't seem to be python-qtN, unknown source)
1746            - fontmatrix <unfixed> (embed)
1747            - elmerfem <unfixed> (embed)
1748    
1749    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1750            - docvert <unfixed> (embed)
1751            - jifty <unfixed> (embed)
1752            - kdenetwork <unfixed> (embed)
1753            - mediatomb <unfixed> (embed)
1754            - plastex <unfixed> (embed)
1755            - plone3 <removed> (embed)
1756            - python-chaco <unfixed> (embed)
1757            - python-docutils <unfixed> (embed)
1758            - s5 <unfixed> (embed)
1759            - zope2.10 <unfixed> (embed)
1760            - zope2.11 <removed> (embed)
1761            - cython <not-affcted> (embed)
1762            NOTE: part of documentation, which is not installed into the binary package
1763    
1764    python-docutils
1765            - zope2.10 <unfixed> (embed)
1766            - zope2.11 <removed> (embed)
1767    
1768    tesseract
1769            - ocropus <unfixed> (static)
1770    
1771    antlr
1772            - kdevelop <unfixed> (embed)
1773    
1774    libxerces2
1775            - openjdk-6 <unfixed> (embed)
1776    
1777    kfreebsd-8
1778            - kfreebsd-7 <unfixed> (old-version)
1779            - kfreebsd-6 <removed> (old-version)
1780    
1781    ruby1.9.1
1782            - ruby1.9 <unfixed> (old-version)
1783            - ruby1.8 <unfixed> (old-version)
1784    
1785    maildrop
1786            - courier <unfixed> (embed) [./maildrop]
1787    
1788    glee
1789            - warzone2100 <unfixed> (embed)
1790    
1791    phing
1792            - symfony <unfixed> (embed)
1793    
1794    pake
1795            - symfony <unfixed> (embed)
1796    
1797    propel
1798            - symfony <unfixed> (embed)
1799    
1800    creole
1801            - symfony <unfixed> (embed)
1802    
1803    hfsutils
1804            - cdrkit <unfixed> (embed; bug #570187)
1805            NOTE: embeds hfsutils code in genisoimage
1806    
1807    cdrkit
1808            - grub2 <unfixed> (embed; bug #570156)
1809            NOTE: genisoimage imported into grub-mkisofs
1810    
1811    kdebase-workspace
1812            - kdebase <unfixed> (old-version)
1813    
1814    file
1815            - php5 <unfixable> (modified-embed)
1816            [lenny] - php5 <not-affected>
1817    
1818    cdb
1819            - php5 <unfixed> (embed)
1820    
1821    libmbfl (itp: #570708)
1822            - php5 <unfixed> (embed)
1823            NOTE: PHP is actually the current upstream, ITP is of that code
1824    
1825    libonig
1826            - php5 5.3.2-1 (embed)
1827    
1828    xmlrpc-epi
1829            - php5 <unfixed> (embed)
1830    
1831    swt-gtk
1832            - eclipse <unfixed> (embed; bug #538808)
1833    
1834    txt2html
1835            - wml 2.0.11ds2-1 (embed)
1836    
1837    ca-certificates
1838            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1839    
1840    openexr
1841            - freeimage <unfixed> (embed)
1842    
1843    libmng
1844            - freeimage <unfixed> (embed)
1845    
1846    openjpeg
1847            - freeimage <unfixed> (embed)
1848    
1849    libjpeg6b
1850            - freeimage <unfixed> (embed)
1851    
1852    libjpeg (don't know what exact version)
1853            - dcmtk <unfixed>
1854            - gdcm <unfixed>
1855            - insighttoolkit <unfixed>
1856            - openarena <unfixed> (bug #495966)
1857            - outguess <unfixed>
1858            - squeak-vm <unfixed> (embed)
1859            - tremulous <unfixed>
1860            - tuxonice-userui <unfixed> (static)
1861            - fpc <unfixed> (static)
1862            - lazarus <unfixed> (static)
1863            NOTE: inherited from fpc, see #472304
1864            - mseide-msegui <unfixed> (static)
1865            NOTE: inherited from fpc, see #472304
1866            - easymp3gain <unfixed> (static)
1867            NOTE: inherited from fpc, see #472304
1868            - winff <unfixed> (static)
1869            NOTE: inherited from fpc, see #472304
1870            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1871    
1872    
1873    lxr
1874            - lxr-cvs (embed)
1875    
1876    libfile-copy-recursive-perl
1877            - r-base <unfixed> (embed; bug #577427)
1878            - r-base-core-ra <unfixed> (embed; bug #577429)
1879    
1880    delimmatch
1881            - r-base <unfixed> (embed; bug #577433)
1882            - r-base-core-ra <unfixed> (embed; bug #577434)
1883    
1884    libsmf (ITP: #572558)
1885            - denemo <unfixed> (embed)
1886            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1887    
1888    libselinux
1889            - dpkg 1.15.6 (static)
1890    
1891    xinha (ITP: #479708)
1892            - horde3 <unfixed>
1893            - serendipity <unfixed>
1894            - openacs <unfixed>
1895            - dotlrn <unfixed>
1896    
1897    dvipng
1898            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1899    
1900    dvipdfmx
1901            - texlive-bin <unfixed> (embed)
1902            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1903    
1904    lcdf-typetools
1905            - texlive-bin 2009-1 (embed)
1906    
1907    tex4ht
1908            - texlive-bin 2009-1 (embed)
1909    
1910    freetype
1911            - texlive-bin 2009-1 (embed)
1912    
1913    freetype2
1914            - texlive-bin 2009-1 (embed)
1915    
1916    silgraphite
1917            - texlive-bin <unfixed> (embed)
1918    
1919    unzip
1920            - texlive-bin 2009-1 (embed)
1921    
1922    jbig2dec
1923            - ghostscript 8.71~dfsg2-1 (embed)
1924    
1925    libxml2
1926            - chromium-browser 5.0.375.29~r46008-1
1927    
1928    protobuf
1929            - chromium-browser 5.0.375.70~r48679-2
1930    
1931    libv8
1932            - chromium-browser 5.0.375.38~r46659-1
1933    
1934  zlib code: (separate between 1.2 and 1.1)  nspr
1935  dpkg          - chromium-browser 5.0.375.29~r46008-3
 rsync  
 mozilla-firefox  
 mozilla(?)  
 Linux kernels  
1936    
1937    yasm
1938            - chromium-browser 5.0.375.29~r46008-2
1939    
1940  libgadu/ekg:  libxslt
1941  centericq          - chromium-browser 5.0.375.29~r46008-1
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm, still the case with x.org?  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
   
 cvs:  
 gcvs (at least partially? double check me)  
   
 pcre:  
 gnumeric(?)  
 python(?)  

Legend:
Removed from v.1712  
changed lines
  Added in v.14979

  ViewVC Help
Powered by ViewVC 1.1.5