/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 4891 by neilm, Sat Oct 28 11:05:37 2006 UTC revision 16761 by micah, Fri Jun 3 15:20:17 2011 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (will be replaced by evince in Gnome 2.12)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (current poppler source package has a ported version, pinged maintainer)  to be applied in multiple source packages.
7  kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26    The srcpkg might be some string to identify the code if there is no
27    specific source package.
28    
29    Everything up to the next line is ignored.
30    ---BEGIN
31  poppler  poppler
32  koffice (upstream is working on using poppler, probably not in time for Etch)          - pdftohtml <unknown>
33  libextractor (uses internal pdf decoder since 0.5.12-1)          [sarge] - pdftohtml <unfixed>
34  pdfkit.framework (links to poppler since 0.8-4)          [etch] - pdftohtml <unfixed>
35            NOTE: has been replaced by poppler-utils
36            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37            - texlive-base 3.0-12 (embed)
38            - texlive-bin 2007-1 (embed)
39            - koffice 1:2.0.0-1 (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53    ppmd
54            - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60            - dnsproxy <unknown> (embed)
61    
62    lrmi
63            - read-edid 2.0.0-1 (embed; bug #495131)
64            - s3switch <unfixed> (embed)
65            - xresprobe <unfixed> (embed)
66            - zhcon <unfixed> (embed)
67    
68    php-htmlpurifier
69            - mahara 1.2.5-1 (embed)
70            - knowledgeroot 0.9.9.5-5 (embed)
71            - moodle <unfixed> (embed)
72    
73    peercast
74            - gnome-peercast <removed> (embed)
75            [etch] - gnome-peercast <unfixed> (embed)
76    
77    silc-toolkit
78            - silc-client 1.1~beta6-1 (embed)
79    
80    icclib
81            - ghostscript <unfixed> (embed)
82            - argyll <unfixed> (embed)
83    
84    libusb
85            - argyll <unfixed> (embed)
86            - ia32-libs <unfixable> (embed)
87    
88    dietlibc
89            - ccontrol 0.9.1+20071204-1 (static)
90            - mksh <unfixable> (static)
91            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
92    
93    libmikmod
94            - pysol-sound-server <unfixed> (modified-embed)
95            - sdl-mixer1.2 <unfixed> (embed)
96            TODO: report bug
97            - uqm 0.6.2.dfsg-8 (embed)
98            NOTE: Might be fixed earlier. Lenny version recorded.
99            - black-box 1.4.6-2.2 (embed)
100            NOTE: Might be fixed earlier. Lenny version recorded.
101    
102    libiax
103            - iaxmodem <unfixable> (embed; bug #548885)
104    
105    spandsp
106            - iaxmodem <unfixable> (embed; bug #548885)
107    
108    python-paramiko
109            - fabric 0.9.0-2 (embed; bug #561398)
110    
111    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
112            - dpkg 1.15.6 (static)
113            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
114            - rsync <unfixed> (embed)
115            - cherokee <unfixed> (embed)
116            NOTE: somehow derived code base
117            - mono <unfixed> (embed)
118            TODO: check mozilla
119            - linux-2.6 <unfixed> (embed)
120            - pvpgn 1.7.8-2 (embed)
121            - mrtg 2.12.2-1 (embed)
122            - rpm <unknown> (embed)
123            NOTE: pinged anibal since when rpm was fixed
124            - tuxcmd-modules <unfixed> (embed)
125            - zsync <unfixed>
126            - tra <unfixed>
127            - sash <unfixed>
128            - nsis <unfixed>
129            - pyfits 1:2.3.1-1
130            - mseide-msegui <unfixed>
131            NOTE: mseide
132            - mirrordir <unfixed>
133            - poco <unfixed>
134            - klibc <unfixed>
135            - emboss 6.3.1-1 (embed)
136            - ghostscript 8.71~dfsg2-6 (embed)
137            NOTE: ghostscript fixed sometime before this, but this is the version i checked
138            - freeimage <unfixed>
139            - clamav <unfixed> (fork)
140            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
141            - tuxonice-userui <unfixed> (static)
142            - plt-scheme <unfixed>
143            - perl <unfixed>
144            - paraview <unfixed>
145            - velvet 0.7.56~nozlibcopy-1
146            - gcvs <unfixed>
147            - dump <unfixed>
148            - aide <unfixed> (static)
149            - dar <unfixed> (static)
150            - avfs <unfixed>
151            - fpc <unfixed>
152            - winff <unfixed>
153            NOTE: inherited from fpc, see #472304
154            - lazarus <unfixed>
155            NOTE: inherited from fpc, see #472304
156            - erlang <unfixed> (embed)
157            - gamera 3.2.3-1 (embed)
158            - python2.4 <unfixed> (embed; bug #553403)
159            - python2.5 <unfixed> (embed; bug #553403)
160            - texlive-bin <unknown> (embed)
161    
162    dulwich
163            - hg-git 0.1.0-1 (embed; bug #541996)
164    
165    libvigraimpex
166            - hugin <unfixed> (embed; bug #542259)
167            - enblend-enfuse <unfixed> (embed; bug #542258)
168            - gamera 3.2.3-1 (embed)
169    
170    libbz2
171            - dpkg 1.15.6 (static)
172            - amd64-libs <unfixed> (static)
173            NOTE: let's call it "static"
174            - dar <unfixed> (static)
175            - dump <unfixed> (static)
176            - unalz 0.64-1 (embed)
177            NOTE: has code, by the maint, to use the system version but links against the internal copy
178            - clamav <unfixed> (embed)
179            NOTE: libclamav/nsis/bzlib*
180            - pristine-tar <unfixable> (modified-embed)
181            NOTE: compression code only, not uncompression
182            - r-base-core-ra 1.2.8 (static)
183            - r-base-core 2.11.1 (static)
184            NOTE: links dynamically in squeeze, statically in lenny
185            - rpm <unfixed> (static)
186            NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
187    
188    libyahoo2
189            - centerim <unfixed> (embed; bug #559783)
190    
191    libmsn
192            - centerim <unfixed> (embed; bug #559783)
193    
194    libgadu
195            - centerim <unfixed> (embed; bug #559783)
196            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
197            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
198            - kdenetwork 4:3.3.2-5 (embed)
199            NOTE: from kdenetwork: kopete
200            - ekg 1:1.8~rc0-1 (embed)
201            - kadu 0.6.0.2-3 (embed; bug #504430)
202            - gadu <itp> (embed)
203    
204    xmlrpc (which package is the "origin" of this code?)
205            - drupal <unfixed> (embed)
206            - phpgroupware <unfixed> (embed)
207            - egroupware <unfixed> (embed)
208            - phpwiki <unfixed> (embed)
209            - php4 <removed> (embed)
210            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
211    
212    shtool (affects build-time only)
213            - mysql-ocaml <unfixed> (embed)
214            - php4 <removed> (embed)
215            - php5 <unfixed> (embed)
216    
217    xulrunner
218            - iceape <unfixed> (embed; bug #561749)
219            - iceweasel 2.0.0.19 (embed)
220            - icedove <unfixed> (embed; bug #561750)
221            - kompozer <unfixed> (embed; bug #532168)
222            - galeon 2.0.2-4 (embed)
223            - epiphany-browser 2.14.3-8 (embed)
224            - conkeror 0.9~git080629-2 (embed)
225            - kazehakase 0.4.2-1 (embed)
226    
227    xli
228            - xloadimage <unfixed> (embed)
229    
230    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
231            - openmotif <unfixed> (embed)
232    
233    libxpm
234            - lesstif2 <unfixed> (embed; bug #575750)
235            - ia32-libs <unfixable> (embed)
236    
237    kerberized apps with BSD origin
238            - krb4 <removed> (embed)
239            - krb5 <unfixed> (embed)
240            - heimdal <unfixed> (embed)
241    
242    grip (which pkg is the origin?)
243            - libcdaudio <unfixed>
244            - grip <unfixed>
245            - gnome-vfs <unfixed>
246            TODO: check vfs2 as well
247    
248    fudforum
249            [etch] - phpgroupware <unfixed> (embed)
250            NOTE: phpgroupware-fudforum
251            [sarge] - egroupware-fudforum <removed> (embed)
252    
253    libbsd
254            - rdate 1:1.2-3 (embed)
255            - atheme-services <unfixed>
256            - libbsd-arc4random-perl <not-affected> (modified-embed)
257            NOTE: code not used, it links dynamically against libbsd instead
258            - isakmpd <unfixed>
259            - bsdgames <unfixed> (embed)
260            - bsd-mailx <unfixed> (embed)
261            - netcat-openbsd <unfixed> (embed; bug #550611)
262            - openssh <unfixed> (embed)
263            - unworkable <unfixed> (embed)
264            - mksh <unfixed> (modified-embed)
265            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
266            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
267            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
268            - ia32-libs <unfixable> (embed)
269    
270    cvs
271            - gcvs <unfixed> (embed)
272            NOTE: see cvsunix/src in tarball
273    
274    pcre3
275            - php4 <removed> (embed)
276            - analog 2:5.23-0woody1 (embed)
277            - chicken 3.2.7-2 (embed)
278            NOTE: Might be fixed earlier. Lenny version recorded.
279            - goffice <unfixed> (embed)
280            NOTE: libgoffice-*
281            - hypermail 2.2.0.dfsg-2 (embed)
282            NOTE: Might be fixed earlier. Lenny version recorded.
283            - privoxy 3.0.9-1 (embed)
284            NOTE: Might be fixed earlier. Lenny version recorded.
285            - vfu 4.06-4.1 (embed; bug #450754)
286            - tf5 5.0beta7-1 (embed)
287            - monotone 0.43-1 (embed)
288            NOTE: this only affects versions >= 0.37
289            - glib2.0 2.15.2-1 (embed)
290            - apache2 2.0.53-4 (embed)
291            - exim4 4.10-0.srh20.12 (embed)
292            - yacas <unfixed> (embed)
293            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
294            - gtamsanalyzer.app 0.42-5 (embed)
295            - tin 980117-1 (embed)
296            - kazehakase 0.5.2-1
297            - webkit 1.0.1-1 (embed)
298            - qt4-x11 <unfixed> (embed)
299            NOTE: embedded via webkit copy
300            - erlang <unfixed> (embed)
301            - ssed <unfixed> (embed)
302            - ircd-hybrid <unfixed> (static)
303            - emboss <unfixed> (fork)
304            - cherokee <unfixed> (embed)
305            - oftc-hybrid 1.6.9.dfsg-1 (embed)
306            - ratbox-services <unfixed> (embed)
307            - squeak-vm <unfixed> (embed)
308            - tinymux <unfixed> (embed)
309    
310    tiff
311            - wxwindows2.4 2.2.1 (embed)
312            - gamera 3.2.3-1 (embed)
313            - freeimage <unfixed> (embed)
314            - libtk-img <unfixed> (embed)
315            NOTE: there are two copies, one under tiff/ other under libtiff/
316            - gdal <unfixed>
317            - ia32-libs <unfixable> (embed)
318    
319    uudeview
320            - libconvert-uulib-perl <unfixed> (embed)
321            - pan <unfixed> (embed)
322    
323    sqlite
324            - amarok <unfixed> (embed)
325            - monotone 0.43-1 (embed)
326            - iceweasel <unfixed> (embed)
327            - heimdal <unfixed> (embed; bug #559616)
328    
329    util-linux
330            - loop-aes-utils <unfixed> (embed)
331            NOTE: contains code from util-linux' mount in the mount-aes-udeb
332            - ia32-libs <unfixable> (embed)
333    
334    sylpheed
335            - sylpheed-claws <unfixed> (fork)
336    
337    phpsysinfo
338            - egroupware <unfixed> (embed)
339            - phpgroupware <unfixed> (embed)
340    
341    phpldapadmin
342            [sarge] - egroupware <unfixed> (embed)
343            NOTE: removed from egroupware after sarge
344    
345    chmlib
346            - kchmviewer <unknown> (embed)
347    
348    ffmpeg (libavcodec/libavformat)
349            - mplayer 1.0~rc2-14 (embed; bug #395252)
350            - kino 1.0.0-1
351            - vlc <not-affected> (Links dynamically since initial release)
352            - smilutils 0.3.0-10
353            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
354            - motion 3.1.19-1
355            - gstreamer0.10-ffmpeg 0.10.3-2
356            - xmovie <removed> (static)
357            TODO: gimp-gap (potentially using ffmpeg code as well)
358            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
359            - audacity 1.3.7-2 (embed; bug #512278)
360            - chromium-browser <unfixed> (fork)
361    
362    faad2
363            - mplayer 1.0~rc2-20 (embed)
364            - avifile <unfixed> (embed; bug #538750)
365            - ffmpeg-debian <removed> (embed)
366    
367    libmad (MPEG decoding lib)
368            - xine-lib <unfixed> (embed)
369            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
370            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
371    
372    libdts
373            - xine-lib <unfixed> (embed)
374    
375  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  flac
376  dpkg          - xine-lib <unfixed> (embed)
377  rsync (somehow derived code base)          - ia32-libs <unfixable> (embed)
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
378    
379  libgadu/ekg:  liba52
380  centericq          - a52dec <unfixed> (embed)
381  gaim          - xine-lib <unfixed> (embed)
382  kopete (ships the code, but links dynamically in the Debian package)  
383  kadu (not packaged in Debian)  mpeg2dec (libmpeg2)
384  GNU gadu (not yet packaged in Debian)          - xine-lib <unfixed> (embed)
385    
386    libmpeg3
387            - squeak-vm <unfixed> (embed)
388    
389    libntlm
390            - wget <unfixed> (fork; bug #550436)
391            - curl <unfixed> (fork; bug #550437)
392            - cntlm <unfixed> (fork; bug #550438)
393    
394    uw-imap
395            - pine <unfixed> (embed)
396            - alpine <unfixed> (embed)
397    
398    imagemagick
399            - graphicsmagick <unfixed> (fork)
400    
401    python-urlgrabber
402            - mercurial <unfixed> (embed; bug #531062)
403            - w3af <unfixed> (embed; bug #555372)
404            [experimental] - harvestman <unfixed> (embed; bug #555373)
405    
406    beautifulsoup
407            - python-mechanize <unfixed> (embed; bug #555349)
408            - zope2.11 <removed> (embed; bug #555350)
409            - twill <unknown> (embed)
410    
411    halibut
412            - nsis <unfixed> (fork)
413    
414    libghttp
415            - hotway <unfixed> (embed)
416    
417    libsndfile
418            - ardour 1:2.7.1-1 (embed)
419            - ia32-libs <unfixable> (embed)
420    
421    glibmm2.4
422            - ardour 1:2.7.1-1 (embed)
423    
424    libgnomecanvasmm2.6
425            - ardour 1:2.7.1-1 (embed)
426    
427    libsigc++-2.0
428            - ardour 1:2.7.1-1 (embed)
429            - ia32-libs <unfixable> (embed)
430    
431    soundtouch
432            - ardour 1:2.7.1-1 (embed)
433    
434    libmms
435            - xine-lib <unfixed> (embed)
436            - mimms <unfixed> (embed)
437    
438    fckeditor
439            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
440            - moin 1.8.2-2 (embed; bug #452599)
441            - karrigell <removed> (embed; bug #452598)
442            - gforge 4.6.99+svn6225-1 (embed)
443            - request-tracker3.8 <unfixed> (embed)
444            - otrs2 <unfixed> (embed)
445    
446    ipatlas (not packaged in Debian)
447            - moodle <unfixed> (embed; bug #507185)
448    
449    libphp-phpmailer
450            - moodle <unfixed> (embed; bug #507185)
451            - mahara <unfixed> (embed)
452            - symfony <unfixed> (embed; bug #566778)
453            [etch] - phpgroupware <unfixed> (embed)
454            NOTE: phpgroupware-felamimail is only in etch
455            - egroupware <unfixed> (embed; bug #504283)
456            - glpi <unfixed>
457    
458    htmlArea (not packaged in Debian)
459            - moodle <unfixed> (embed)
460    
461    giflib
462            - wine <unfixed> (embed; bug #466181)
463    
464    bennu (not packaged in Debian, http://bennu.sourceforge.net)
465            - moodle <unfixed> (embed)
466    
467    smarty
468            - moodle 1.8.2-2 (embed; bug #471158)
469            - gallery2 2.2.5-2 (embed; bug #471160)
470            - mahara 0.9.2-2 (embed; bug #471201)
471            - gosa 2.4beta1-1 (embed; bug #471200)
472    
473    TinyMCE
474            - wordpress 2.5.1-3 (embed; bug #478257)
475            - moodle <unfixed> (embed; bug #507185)
476            - knowledgeroot <unfixed> (embed)
477            - joomla <itp> (bug #326398)
478            - mahara 1.2.6-1 (embed; #597752)
479    
480    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
481            - scite <unfixed> (embed)
482            - qscintilla <unfixed> (embed)
483            - qscintilla2 <unfixed> (embed)
484            - geany <unfixed> (fork)
485            - anjuta <unfixed> (embed)
486    
487    libphp-adodb
488            - moodle <unfixed> (embed; bug #507185)
489            NOTE: also AdoDB-XML Schema
490            - gallery2 <unfixed> (embed)
491            - phppgadmin <unfixed> (embed)
492            - egroupware <unfixed> (embed)
493            - phpwiki <unfixed> (embed)
494            - torrentflux 2.0beta1-2 (embed)
495            - ipplan <unfixed> (embed)
496            - typo3-src <unfixed> (embed)
497            - cacti <unknown> (embed)
498            [sarge] - cacti <unfixed> (embed)
499            NOTE: dependency exists, but internal version is used
500            - gforge 4.7~rc2-6 (embed)
501            - mahara <unfixed> (embed)
502    
503    gzip
504            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
505            - klibc <unfixed> (embed)
506            NOTE: based on linux-kernel gzip code
507            - busybox <unfixed> (embed)
508            - pristine-tar <unfixed> (modified-embed)
509            NOTE: compression code only, not uncompression
510            - ncompress <unfixed> (old-version)
511    
512    neon
513            - cadaver 0.22.3+debian-1 (embed; bug #188381)
514            - gnome-vfs2 <unfixed> (embed; bug #395874)
515            [etch] - litmus <unfixed> (embed; #395875)
516            - litmus <removed> (embed; #395875)
517            [sarge] - screem <unfixed> (embed)
518            - sitecopy 1:0.16.0-1 (embed; bug #395876)
519            [etch] - tla <unfixed> (embed; bug #395877)
520            [sarge] - tla <unfixed> (embed; bug #395877)
521    
522    libmodplug
523            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
524    
525    libvncserver
526            - vino <unfixed> (embed)
527    
528    putty
529            - filezilla <unfixed> (embed)
530    
531    tinyxml
532            - filezilla <unfixed>
533            - crystalspace <unfixed> (embed)
534            - libwfut <unfixed> (embed)
535            - rarian <unfixed> (embed)
536            - bulletml <unfixed> (embed)
537            - pokerth <unfixed> (embed)
538            - qutecom <unfixed> (embed)
539            - sofa-framework <unfixed> (embed)
540            - yate <unfixed> (embed)
541            - antigrav <unfixed> (embed)
542            - balder2d <unfixed> (embed)
543            - cal3d <unfixed> (embed)
544            - criticalmass <unfixed> (embed)
545            - ember <unfixed> (embed)
546            - epiphany <unfixed> (embed)
547            - gambit <unfixed> (embed)
548            - noiz2sa <unfixed> (embed)
549            - ogre <unfixed> (embed)
550            - opencity <unfixed> (embed)
551            - openmovieeditor <unfixed> (embed)
552            - pouetchess <unfixed> (embed)
553            - tecnoballz <unfixed> (embed)
554            - trigger-rally <unfixed> (embed)
555            - xmoto <unfixed> (embed)
556            - mapnik <unknown> (embed)
557            NOTE: uses a different XML parser by default
558            - rrootage 0.23a-6 <embed>
559            NOTE: links to libbulltetml
560            - boson <unknown> (embed)
561            NOTE: the embedded code is unused
562            - cppcheck <unfixed> (embed)
563            NOTE: introduced in 1.47, will use system's version in 1.48
564            [squeeze] - cppcheck <not-affected>
565    
566    gv
567            - evince <unfixed> (embed)
568            NOTE: ps/ tree from gv 3.5.8
569            NOTE: evince-gtk is affected (a component of evince source package)
570    
571    libXbae
572            - paw <unfixed> (embed)
573    
574    libgtkhtml
575            - claws-mail-extra-plugins <unfixed> (fork)
576    
577    libXaw
578            - paw <unfixed> (embed)
579            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
580            - ia32-libs <unfixable> (embed)
581    
582    libgd2
583            - graphviz 2.16-1 (embed)
584            NOTE: lib/gd seems to be 2.0.33
585            - wml 2.0.11ds2-1 (embed)
586            - libwmf <unfixed> (embed)
587            NOTE: derived from gd 1.6.3, but only used to write images
588            - plt-scheme <unfixed> (embed; bug #601525)
589            - texlive-bin 2009-1 (embed)
590    
591    rar
592            - unrar-nonfree <unfixed> (embed)
593    
594    unrar-free (maybe this code is derived from the original rar, too?)
595            - clamav <unfixed> (embed)
596            NOTE: seems to be disabled in default config
597    
598    mplayer (DirectMedia Object loader)
599            - xine-lib <unfixed> (embed)
600            NOTE: src/libw32dll/
601            - vlc <unfixed> (embed)
602            NOTE: modules/codec/dmo/
603            - mplayer 1.0~rc2-20 (embed)
604    
605    libwpd (WordPerfect converter)
606            - openoffice.org <unfixed> (embed)
607    
608    fsplib (http://sourceforge.net/projects/fsp/)
609            - gftp <unfixed> (embed)
610            NOTE: lib/fsplib version 0.3
611    
612    sprng
613            - tree-puzzle <unfixed> (embed)
614    
615    librpcsecgss
616            - krb5 <unfixed> (embed)
617    
618    jasper
619            - ghostscript 8.64~dfsg-2 (embed)
620    
621    libiris
622            - psi <unfixed> (embed)
623            - kdenetwork <unfixed> (embed)
624            NOTE: kopete embeds libiris but links dynamically to libidn
625            - kdegames <unfixed> (embed)
626            NOTE: ksirk/kde4
627    
628    libidn
629            - monotone 0.43-1 (embed)
630            - psi <unfixed> (embed)
631            NOTE: psi embeds libiris which embeds libidn
632            - kdegames <unfixed> (embed)
633            NOTE: kdegames/kde4 embeds libiris which embeds libidn
634            - ia32-libs <unfixable> (embed)
635    
636    lua5.1
637            - monotone 0.43-1 (embed)
638            - nmap 5.00-1 (embed; bug #527997)
639            [lenny] - nmap <unfixed> (embed; bug #527997)
640            - ocropus <unfixed> (embed)
641            - enigma <unfixed> (embed)
642            NOTE: requires lua built with C++
643            - freeciv <unfixed> (embed)
644            - spring <unfixed> (embed)
645    
646    libbotan
647            - monotone 0.43-1 (embed)
648    
649    NetXX
650            - monotone 0.43-1 (embed)
651    
652    libgc
653            - mono <unfixed> (embed)
654    
655    lzma
656            - p7zip <unfixed> (embed)
657            - xz-utils <unfixed> (fork)
658            - r-base <unfixed> (embed)
659            NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
660    
661    lzo
662            - grub2 <unfixed> (embed)
663    
664    yassl
665            - mysql-dfsg-5.0 <unfixed> (embed)
666            - mysql-5.1 <unfixed> (embed)
667    
668    pax code
669            - tar <unfixed> (embed)
670            - cpio <unfixed> (embed)
671    
672    t1lib
673            - tetex-bin 2.0.2-1 (embed)
674            - texlive-bin <unknown> (embed)
675            - grace 5.1.14-2 (embed)
676            NOTE: Might be fixed even earlier
677    
678    guichan
679            - boswars <unfixed> (embed)
680            NOTE: maintainer notified us, working on it
681    
682    tolua
683            - boswars <unfixed> (embed)
684            NOTE: maintainer notified us, working on it
685            NOTE: actually tolua++
686            - ocropus <unfixed> (embed)
687            NOTE: actually tolua++
688            - freeciv <unfixed> (embed)
689            NOTE: actually tolua++
690            - enigma <unfixed> (embed)
691    
692  xmlrpc: (which package is the "origin" of this code?)  asio-dev
693  drupal          - luxrender <removed> (embed)
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
694    
695    xine-lib
696            - vlc <unfixed> (embed)
697            NOTE: only parts included in modules/access/rtsp
698    
699  shtool: (affects build-time only)  netpbm
700  mysql-ocaml          - tcl8.3 <unfixed> (embed)
701  php4          - tcl8.4 <unfixed> (embed)
702            - tcl8.5 <unfixed> (embed)
703            NOTE: generic/tkImgGIF.c
704    
705    tk8.5
706            - tk8.0 <removed> (old-version)
707            - tk8.3 <unfixed> (old-version)
708            - tk8.4 <unfixed> (old-version)
709            - perl-tk <unfixable> (fork)
710    
711    samba
712            - mc 2:4.6.2~git20080311-1 (embed)
713            NOTE: maintainer is aware of this, currently searching a solution
714    
715    plib1.8.4c2
716            - boson <unfixed> (fork)
717            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
718    
719    fribidi
720            - quesoglc 0.7.2-2 (embed)
721    
722    glew
723            - quesoglc <unfixed> (embed; bug #489341)
724            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
725            - trigger 0.5.2.1-2 (embed)
726            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
727            - trigger-rally 0.5.2.1-2 (embed)
728            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
729            - chromium-browser 5.0.375.70~r48679-2
730    
731    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
732            - transcend <unfixed> (embed)
733            - cultivation <unfixed> (embed)
734            - passage <unfixed> (embed)
735            - gravitation <unfixed> (embed)
736    
737    tar
738            - libarchive <unfixed> (embed)
739            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
740    
741    cpio
742            - libarchive <unfixed> (embed)
743            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
744    
745    kde4libs
746            - kdelibs <unfixable> (old-version)
747    
748    webkit
749            - qt4-x11 <unfixed> (embed; bug #479851)
750            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
751            - kde4libs <unfixable> (fork)
752            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
753            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
754            - chromium-browser <unfixed> (fork)
755    
756    ftgl
757            - blender 2.46+dfsg-1 (embed)
758            - vtk <unfixed> (embed)
759            - paraview <unfixed> (embed)
760            NOTE: as part of its copy of vtk
761            - tulip <unfixed> (embed)
762            NOTE: depends on -dev but string found on binary
763            - root-system <unknown> (embed)
764            NOTE: depends on -dev package; not confirmed at source
765            - rgl <unknown> (embed)
766            NOTE: not sure if it is built
767            - mysql-gui-tools <unknown> (embed)
768            NOTE: not sure if it is built
769            - k3d <unfixed> (embed)
770            - extremetuxracer <unknown> (embed)
771            NOTE: not sure if it is built
772            - critterding <unknown> (embed)
773            - lightspeed <unfixed>
774            NOTE: depends on -dev but string found on binary
775    
776    wv
777            - abiword <unfixed>
778    
779    qemu
780            - kvm <removed> (embed; bug #543159)
781            - qemu-kvm <unfixed> (embed; bug #560853)
782            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
783            - xen-3 3.4.2-2 (embed; bug #560856)
784            - xen-unstable <unfixed> (embed; bug #560856)
785    
786    vgabios
787            - kvm <removed> (embed; bug #489442)
788            - qemu-kvm <unfixed> (embed)
789    
790    bochs
791            - kvm <removed> (embed; bug #489442)
792            - qemu-kvm <unfixed> (embed)
793    
794    speex
795            - vorbis-tools <unfixed> (embed)
796            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
797            - gst-plugins-good0.10 <unfixed> (embed)
798            - xine-lib <unfixed> (embed)
799            - libfishsound <unfixed> (embed)
800            - libannodex <removed> (embed)
801            - opal 3.4.2~dfsg-2 (embed)
802            - mumble 1.2.0~beta1-1 (embed)
803            - vlc <unfixed> (embed)
804            - xmms-speex <unfixed> (embed)
805            - libsdl-sound1.2 <unfixed> (embed)
806            - sweep <unfixed> (embed)
807    
808    libreadline
809            - magic <itp> (old-version)
810    
811    opcode
812            - ode <unfixed> (embed)
813            NOTE: opcode is not a package in debian, it is just embedded
814            NOTE: http://www.codercorner.com/Opcode.htm
815    
816    gimpact
817            - ode <unfixed> (embed)
818            NOTE: gimpact is not a package in debian, it is just embedded
819            NOTE: http://gimpact.sf.net
820    
821    mochikit
822            - mahara <unfixed> (embed)
823            NOTE: they require extra patches, still unmerged upstream
824            - ntop <unfixed> (embed)
825            - coherence 0.6.2-1 (embed)
826            - paste <unfixed> (embed)
827            - turbogears <unfixed> (embed)
828            - plone3 <removed> (embed)
829            - xulrunner <unfixed> (embed)
830            - libjifty-plugin-chart-perl <unfixed> (embed)
831            - sabnzbdplus <unfixed> (embed)
832            - tgmochikit <unfixed> (embed)
833    
834    prototypejs
835            - netbeans-ide 6.0.1+dfsg-2 (embed)
836            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
837            - webcit <unfixed> (embed; bug #555219)
838            - asterisk 1:1.6.2.0~rc3-1 (embed)
839            - libjson-ruby 1.1.4-1 (embed; bug #555224)
840            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
841            - horde3 <unfixed> (embed)
842            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
843            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
844            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
845            - ebug-http <unfixed> (embed; bug #555236)
846            - libaws 2.7-1 (embed; bug #555222)
847            - phpgedview <removed> (embed)
848            - poker-network 1.7.6-1 (embed; bug #555238)
849            - rails 2.1.0-6 (embed)
850            - wordpress 2.5.0-2 (embed; bug #555243)
851            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
852            TODO: search through all of the other zope packages
853            - ampache 3.4.1-2 (embed)
854            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
855            - hobix 0.5~svn20070319-4 (embed; bug #555247)
856            - zabbix 1.6.6-4 (embed; bug #555250)
857            - chora2 2.1.1+debian0-1 (embed; bug #555253)
858            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
859            - jscropperui 1.2.1-1 (embed; bug #555257)
860            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
861            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
862            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
863            - activeldap 1.2.1-1 (embed)
864            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
865            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
866            - otrs2 2.3.4-6 (embed; bug #555267)
867            - webcalendar 1.2~b1-2 (embed; bug #555269)
868            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
869            - jifty 0.90519-1 (embed; bug #555271)
870            - jquery 1.4-1 (embed; bug #555272)
871            - passenger 2.2.5debian1-1 (embed; bug #555273)
872            - plone3 <removed> (embed; bug #555275)
873            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
874            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
875            - xulrunner <unfixed> (embed)
876            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
877            - jclicmoodle <unfixed> (embed)
878            - git-cola <unfixed> (embed)
879    
880    gdb
881            - insight <unfixed> (embed)
882    
883    e2fsprogs
884            - ldiskfsprogs <unfixable> (fork)
885            - ia32-libs <unfixable> (embed)
886    
887    quazip (not packaged in Debian)
888            - qcake <unfixed> (embed)
889            NOTE: starting with upstream version 0.6.4
890    
891    exo
892            - pcmanfm <unfixed> (embed; bug #499677)
893            NOTE: slightly modified source code
894    
895    xfce4-taskmanager
896            - lxtask <unfixed> (embed)
897            NOTE: old fork, maybe outdated
898    
899    isync
900            - postler <unfixed> (embed; bug #628798)
901    
902    java
903            - openjdk-6 <unfixed>
904            - sun-java5 <unfixed>
905            - sun-java6 <unfixed>
906    
907    libphp-snoopy
908            - ampache 3.4.1-2 (embed; bug #504169)
909            - gforge 4.6.99+svn6094-2 (embed)
910            - mahara 1.0.5-2 (embed; bug #504170)
911            - pixelpost 1.7.1-5 (embed; bug #504171)
912            - mediamate 0.9.3.6-5 (embed; bug #504172)
913            - opendb <removed> (embed; bug #504173)
914            [etch] - opendb <unfixed> (embed; bug #504173)
915            - wordpress 2.5.1-9 (embed; bug #443948)
916            - moodle <unfixed> (embed; bug #507185)
917            [etch] - phpgroupware <unfixed> (embed)
918            NOTE: phpgroupware-felamimail
919            - magpierss 0.72-3 (embed; bug #431089)
920    
921    jquery
922            - jsonbot <unfixed> (embed; bug #625524)
923            - zekr <unfixed> (embed)
924            - wordpress <unknown> (embed)
925            - yocto-reader <unfixed> (embed)
926            - textpattern <unfixed> (embed)
927            - genshi 0.5.1-1 (embed)
928            NOTE: compressed file under examples/ dir
929            - prewikka <unfixed> (embed)
930            - libramaze-ruby <unfixed> (embed)
931            - drupal6 <unfixed> (embed)
932            - b2evolution <unfixed> (embed)
933            - wesnoth <unfixed> (embed)
934            - gammu 1.28.95-1 (embed)
935    
936    tablesorter (jquery plugin, not packaged yet)
937            - wesnoth <unfixed> (embed)
938    
939    kses
940            - wordpress <unfixed> (embed; bug #504242)
941            NOTE: their copy has all methods renamed to wp_<foo>
942            NOTE: kses isn't in Debian, RFP: #504240
943            - moodle <unfixed> (embed; bug #507185)
944            - egroupware <unfixed> (embed)
945    
946    magpierss
947            - wordpress <unfixed> (embed; bug #504242)
948            - moodle <unfixed>
949    
950    php-gettext
951            - wordpress 2.8.4-1 (embed; bug #504242)
952            - docbookwiki <unfixed> (embed)
953            - knowledgeroot 0.9.9.5-1
954            NOTE: non-free
955    
956    libphp-ixr (name may change, it is the Incutio XML-RPC)
957            - wordpress <unfixed> (embed; bug #504242)
958            NOTE: libphp-ixr isn't in Debian, RFP: #504236
959            - dokuwiki <unfixed> (embed)
960            - textpattern <unfixed> (embed)
961    
962    libphp-cas
963            - glpi <unfixed> (embed)
964            - moodle <unfixed> (embed; bug #505984)
965    
966    scriptaculous (prototype.js is among the embeds in the following)
967            - glpi <unfixed> (embed)
968            - libaws <unfixed> (embed; bug #555222)
969            - op-panel <unfixed> (embed)
970            - symfony <unfixed> (embed)
971            NOTE: maintainer says there are extra incompatible changes required
972            - pixelpost 1.7.1-6 (embed)
973            - webhelpers <unfixed> (embed)
974            - qwik <removed> (embed; bug #555241)
975            - smokeping <unfixed> (embed)
976            - turba2 <unfixed> (embed)
977            - typo3-src 4.2.3-1 (embed)
978            - request-tracker3.6 <unfixed> (embed)
979            - request-tracker3.8 <unfixed> (embed)
980            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
981            - wordpress 2.5.0-2 (embed)
982            - libhtml-prototype-perl 1.48-3 (embed)
983    
984    libmarkdown-php
985            - moodle <unfixed> (embed; bug #507185)
986            - pixelpost 1.7.1-6 (embed)
987    
988    php-openid
989            - wordpress-openid 3.3.2-1 (embed)
990    
991    geshi
992            - dokuwiki 0.0.20080505-3.1 (embed)
993            - pgfouine 1.0-1.1 (embed)
994            - websvn 2.1.0-1 (embed)
995    
996    webcalendar
997            - gforge 4.7~rc2-6 (embed; bug #504758)
998    
999    libical
1000            - kdepim <unknown> (fork)
1001            NOTE: fixed at some point during 4.0
1002            - kdepimlibs 4.2.0-1 (fork)
1003            - claws-mail-extra-plugins <unfixed> (fork)
1004    
1005    harfbuzz
1006            - qt4-x11 <unfixed> (embed)
1007            - pango1.0 <unfixed> (embed)
1008            - fontmatrix <unfixed> (embed)
1009    
1010    libzip
1011            - php5 <unfixable> (modified-embed)
1012            - odt2txt <unfixed> (embed; bug #523808)
1013    
1014    json.php (not packaged; should be replaced with php's built-in functions)
1015            - moodle <unfixed>
1016            - yui <unfixed>
1017            - gallery2 <unfixed>
1018            - dokuwiki <unfixed>
1019            - typo3-src <unfixed>
1020    
1021    php-fpdf
1022            - tcpdf <itp> (fork)
1023            - moodle <unfixed>
1024            - phpwiki <unfixed>
1025            - egroupware <unfixed>
1026            - ldap-account-manager <unfixed> (fork)
1027    
1028    tcpdf (itp: #495985)
1029            - moodle <unfixed>
1030            - phpmyadmin <unfixed>
1031    
1032    typo3
1033            - moodle <unfixed>
1034    
1035    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1036            - moodle <unfixed>
1037            - gosa <unfixed>
1038    
1039    php-ole (itp: #487558)
1040            - moodle <unfixed>
1041    
1042    pieforms (http://www.catalyst.net.nz)
1043            - mahara <unfixed>
1044    
1045    savant2 (http://phpsavant.com)
1046            - egroupware <unfixed>
1047    
1048    rssparser (http://nwow.org)
1049            - egroupware <unfixed>
1050            - phpgroupware <unfixed>
1051    
1052    lcms
1053            - openjdk-6 <unfixed> (fork)
1054            - gimp 2.4.0~rc2-2
1055            - ia32-libs <unfixable> (embed)
1056    
1057    libphp-phplayersmenu
1058            - diogenes <unfixed>
1059            - phpldapadmin <unfixed>
1060    
1061    libphp-pclzip
1062            - docvert <unfixed>
1063            - moodle <unfixed>
1064            - egroupware <unfixed>
1065    
1066    libphp-simplepie
1067            - dokuwiki <unfixed>
1068            - wordpress <unfixed>
1069    
1070    libphp-jpgraph
1071            - egroupware <unfixed>
1072    
1073    php-simpletest
1074            - moodle <unfixed>
1075    
1076    libpng
1077            - doxygen 1.5.6-2 (embed)
1078            NOTE: Might be fixed earlier. Lenny version recorded.
1079            - gdal 1.5.2-3 (embed)
1080            NOTE: Might be fixed earlier. Lenny version recorded.
1081            - iceweasel <not-affected> (uses xulrunner)
1082            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1083            - iceape 1.0.13~pre080614i-0etch1 (embed)
1084            - libfltk1.1 1.1.9-6 (embed)
1085            NOTE: Might be fixed earlier. Lenny version recorded.
1086            - libtk-img <unfixed> (embed)
1087            - htmldoc 1.8.27-3 (embed)
1088            NOTE: Might be fixed earlier. Lenny version recorded.
1089            - xulrunner 1.9.0.13-1 (embed)
1090            [lenny] - xulrunner 1.9.0.11-0lenny1
1091            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1092            - gamera 3.2.3-1 (embed)
1093            - freeimage <unfixed> (embed)
1094            - syslinux-common <unfixable> (embed)
1095            - tuxonice-userui <unfixed> (static)
1096            - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1097            NOTE: Might be fixed earlier. Lenny version recorded.
1098            - vice 1.22.dfsg1-0.1 (embed)
1099            NOTE: Might be fixed earlier. Lenny version recorded.
1100            - visualboyadvance 1.8.0-4 (embed)
1101            NOTE: Might be fixed earlier. Lenny version recorded.
1102            - ia32-libs <unfixable> (embed)
1103    
1104    irssi
1105            - silc-client <unfixed> (embed)
1106            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1107    
1108    extc
1109            - mtasc <unfixed> (embed)
1110            - haxe <unfixed> (embed)
1111    
1112    swflib
1113            - mtasc <unfixed> (embed)
1114            - haxe <unfixed> (embed)
1115    
1116    libitext-java
1117            - bouncycastle 2.1.4-1 (embed)
1118    
1119    python-ply
1120            - pyke <unfixed> (embed; bug #555363)
1121            - pywbem 0.7.0-4 (embed; bug #555364)
1122            - sepolgen <unfixed> (embed; bug #555365)
1123            - zope-textindexng3 <unknown> (embed)
1124            - iceweasel <not-affected> (uses xulrunner)
1125            - xulrunner <unknown> (embed)
1126            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1127    
1128    libdumbnet (libdnet upstream)
1129            - nmap <unfixed> (fork)
1130    
1131    gcc-4.4
1132            - gcc-mingw32 <unfixed> (embed)
1133    
1134    camlimages
1135            - advi <unfixed> (static; bug #550441)
1136    
1137    memcached
1138            - memcachedb <unfixed> (embed)
1139    
1140    yajl
1141            - argyll <unfixed> (embed; bug #544223)
1142            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1143    
1144    nusoap
1145            - gforge 4.8.2-1 (embed)
1146            - ampache <unfixed> (embed)
1147            - poker-network <unfixed> (embed)
1148            - moodle <unfixed> (embed)
1149            NOTE: code is not used when running under php5 and soap is enabled
1150            - phpwiki <unfixed> (embed)
1151            - gallery2 <unfixed> (embed)
1152            - typo3-src <unfixed> (embed)
1153            - phpgacl 3.3.7-7 (embed)
1154            - mantis 1.1.8+dfsg-1 (embed)
1155    
1156    libept
1157            - adept <unfixed> (embed; bug #540649)
1158    
1159    libvorbis
1160            - iceweasel <not-affected> (uses xulrunner)
1161            - xulrunner <unfixed> (embed; bug #540959)
1162            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1163            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1164            - iceape <unfixed> (embed)
1165            [etch] - iceape <not-affected> (introduced in 2.0)
1166            [lenny] - iceape <not-affected> (introduced in 2.0)
1167            - ia32-libs <unfixable> (embed)
1168    
1169    cairo
1170            - iceweasel <not-affected> (uses xulrunner)
1171            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1172    
1173    liboggz
1174            - iceweasel <not-affected> (uses xulrunner)
1175            - xulrunner <unfixed> (embed; bug #540959)
1176            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1177            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1178            - iceape <unfixed> (embed)
1179            [etch] - iceape <not-affected> (introduced in 2.0)
1180            [lenny] - iceape <not-affected> (introduced in 2.0)
1181    
1182    liboggplay
1183            - iceweasel <not-affected> (uses xulrunner)
1184            - xulrunner <unfixed> (embed; bug #540959)
1185            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1186            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1187            - iceape <unfixed> (embed)
1188            [etch] - iceape <not-affected> (introduced in 2.0)
1189            [lenny] - iceape <not-affected> (introduced in 2.0)
1190    
1191    php-net-dnsbl
1192            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1193    
1194    php-onyx-rss
1195            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1196    
1197    php-text-wiki
1198            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1199    
1200    php-xml-rpc
1201            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1202    
1203    polarssl (does not have a shared library)
1204            - pdkim <itp> (embed; bug #543150)
1205            - xyssl <unfixed> (old-version)
1206    
1207    pidgin (libpurple)
1208            - gaim <removed> (old-version)
1209            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1210            - wengophone <unfixed> (embed; bug #601425)
1211    
1212    icu
1213            - webkit 1.0.1-1 (embed; bug #547214)
1214            - texlive-bin <unfixed> (fork)
1215            NOTE: texlive upstream working with icu upstream to merge their changes
1216            - chromium-browser 5.0.375.29~r46008-3
1217    
1218    cyrus-imapd-2.2
1219            - kolab-cyrus-imapd <unfixed> (fork)
1220            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1221    
1222    python-cxx-dev
1223            - freecad 0.9.2646.3-1 (embed; bug #547936)
1224    
1225    zipios++
1226            - freecad 0.9.2646.3-1 (embed; bug #547941)
1227            - enigma 0.92.3-3 (embed)
1228            NOTE: likely fixed earlier, marking etch's version as fixed
1229    
1230    linux-2.6
1231            - kvm <removed> (embed; bug #549973) [./kernel/*]
1232            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1233            - kernel-source-2.6.8 <removed> (old-version)
1234            - kernel-source-2.4.27 <removed> (old-version)
1235            - kernel-source-2.4.24 <removed> (old-version)
1236            - kernel-source-2.2.25 <removed> (old-version)
1237            - kernel-source-2.2.20 <removed> (old-version)
1238    
1239    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1240            - kvm <removed> (embed) [./libfdt/*]
1241            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1242    
1243    qweb (not packaged)
1244            - ajaxterm <unfixed>
1245    
1246    opensaml2
1247            - opensaml <removed> (old-version)
1248    
1249    shibboleth-sp2
1250            - shibboleth-sp <removed> (old-version)
1251    
1252    tuxonice-userui
1253            - suspend2-userui <removed> (old-version)
1254    
1255    expat
1256            - w3c-libwww <removed> (embed; bug #551941)
1257            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1258            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1259            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1260            - python2.4 <unfixable> (embed; bug #553403)
1261            - python2.7 2.7-6 (embed)
1262            - mcabber 0.10.0-1 (low; bug #601053)
1263            - python-4suite <unfixed> (embed; bug #516935)
1264            - wxwindows2.4 <removed> (embed)
1265            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1266            - wxwidgets2.8 2.8.10.1-2 (embed)
1267            - albert <unfixed> (embed; bug #600974)
1268            - celementtree 1.0.5-8 (embed)
1269            NOTE: Maybe that was fixed even earlier
1270            - centerim <unfixed> (embed; bug #559783)
1271            - audacity 1.3.2-1 (embed)
1272            - matanza <unfixed> (embed)
1273            - tdom 0.8.3~20080525-1 (embed)
1274            - udunits 2.1.8-4 (embed)
1275            - apr-util 1.2 (embed)
1276            - ayttm <unfxed> (embed; bug #561006)
1277            - cableswig <unfixed> (embed)
1278            - cadaver <unfixed> (embed)
1279            - cmake 2.6.0-6 (embed)
1280            - coin3 <unfixed> (embed)
1281            - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1282            NOTE: Might be fixed earlier. Lenny version recorded.
1283            - dasher 4.7.3-1 (embed)
1284            NOTE: Might be fixed earlier. Lenny version recorded.
1285            - emboss 6.3.1-1 (embed)
1286            - gdcm 2.0.14-2 (embed)
1287            - ghostscript 8.71~dfsg-2 (embed)
1288            - grmonitor <removed> (embed)
1289            - iceape <unfixed> (embed)
1290            - insighttoolkit 3.16.0-1 (embed)
1291            NOTE: insighttoolkit might've been fixed earlier
1292            - jabber 1.4.3-3.4 (embed)
1293            NOTE: Might be fixed earlier. Lenny version recorded.
1294            - libparagui1.1 1.0.2-1 (embed)
1295            - libspiff1 0.8.3-1 (embed)
1296            NOTE: Might be fixed earlier. Lenny version recorded.
1297            - paraview 3.6.2-1 (embed)
1298            - poco 1.3.6p1-1 (embed)
1299            - scorched3d 41.3dfsg-1+b1 (embed)
1300            NOTE: Might be fixed earlier. Lenny version recorded.
1301            - simgear <unfixed> (embed)
1302            - sitecopy 1:0.16.0-1
1303            - smart <unfixed> (embed)
1304            NOTE: smart embeds celementree, and it includes expat
1305            - swish-e <not-affected> (Linked against libxml, which is used instead)
1306            - tla 1.3.5+dfsg-15 (embed)
1307            - vtk 4.1.20030227-1 (embed)
1308            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1309            - xmlrpc-c <unfixed> (embed)
1310            - iceweasel <unfixed> (embed)
1311            - kompozer <unfixed> (embed)
1312            - vxl 1.13.0-2 (embed)
1313            - xulrunner <unfixed> (embed)
1314            - xmame 0.106-2.1 (embed)
1315            NOTE: Might be fixed earlier. Lenny version recorded.
1316            - apache2 2.2 (embed)
1317            - texlive-bin <not-affected> (Embedded code not compiled in)
1318            - vnc4 <unfixed> (embed)
1319            - xotcl 1.6.6-1 (embed)
1320            - chromium-browser 5.0.375.29~r46008-3
1321            - ia32-libs <unfixable> (embed)
1322    
1323    xerces-c
1324            - xerces-c2 <unfixed> (old-version)
1325            - xerces27 <removed> (old-version)
1326    
1327    md5 (RSA's version; not the gnu version provided by coreutils)
1328            - w3c-libwww <removed> (embed; bug #551942)
1329            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1330    
1331    libparagui1.1
1332            - asc <unfixable> (fork)
1333    
1334    enet
1335            - sauerbraten <unfixed> (embed; #497194)
1336    
1337    eglibc
1338            - glibc <removed> (old-version)
1339            - mksh <unfixable> (static)
1340              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1341    
1342    galib
1343            - gamera 3.2.3-1 (embed)
1344    
1345    configobj
1346            - bzr <unfixed> (embed; bug #555336)
1347            - elisa <unfixed> (embed; bug #555337)
1348            - gaupol <unfixed> (embed; bug #555338)
1349            - ipython <unfixed> (embed; bug #555339)
1350            - pida <unfixed> (embed; bug #555340)
1351            - psychopy <unfixed> (embed; bug #555341)
1352            - rest2web <unfixed> (embed; bug #555342)
1353            - auth2db <unknown> (embed)
1354            - dynagen <unknown> (embed)
1355            - iceweasel <unknown> (embed)
1356            - sabnzbdplus <unknown> (embed)
1357            - xulrunner <unknown> (embed)
1358            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1359    
1360    python-clientform
1361            - bibus <unfixed> (embed; bug #555332)
1362            - zope2.10 <unfixed> (embed; bug #555333)
1363            - zope2.11 <removed> (embed; bug #555334)
1364            - python-mechanize <unknown> (embed)
1365            - twill <unknown> (embed)
1366    
1367    python-mechanize
1368            - zope2.10 <unfixed> (embed; bug #555337)
1369            - zope2.11 <removed> (embed; bug #555338)
1370            - twill <unknown> (embed; bug #555339)
1371    
1372    pexpect
1373            - duplicity 0.6.06-1 (embed; bug #555361)
1374            - hplip <unfixed> (embed; bug #555362)
1375            - smart <unfixed> (embed; bug #555363)
1376    
1377    pyparsing
1378            - bauble <unfixed> (embed; bug #555366)
1379            - boa-constructor 0.6.1-8 (embed; bug #555367)
1380            - calibre <unfixed> (embed; bug #555368)
1381            - matplotlib <unfixed> (embed; bug #531024)
1382            - zhpy 1.7.3.1-1 (embed; bug #555370)
1383            - polybori <unknown> (embed)
1384            - python-whoosh <unknown> (embed)
1385            - twill <unknown> (embed)
1386            - zope-textindexng3 <unknown> (embed)
1387    
1388    python-pysqlite2
1389            - python2.4 <unfixed> (embed; bug #553403)
1390            - python2.5 <unfixed> (embed; bug #553403)
1391    
1392    celementtree
1393            - python2.5 <unfixed> (embed)
1394            - smart <unfixed> (embed)
1395    
1396    elementtree
1397            - python2.5 <unfixed> (embed)
1398            - python2.6 <unfixed> (embed)
1399            - bzr <unfixed> (embed; bug #555343)
1400            - gedit 2.28.2-1 (embed; bug #555344)
1401            - smart <unfixed> (embed)
1402            - solfege <unfixed> (embed; bug #555345)
1403            - w3af <unfixed> (embed; bug #555346)
1404            - python-qt4 <unknown> (embed)
1405            - sphinx <unknown> (embed)
1406            - python-nltk <itp> (embed)
1407    
1408    python2.5
1409            - python2.4 <unfixed> (old-version)
1410            - jython <unfixed> (embed)
1411            NOTE: embeds many stdlib modules
1412            - python-django <unfixed> (embed; bug #555419)
1413            NOTE: embeds stdlib modules: doctest, decimal
1414            - gamera 3.2.3-1 (embed)
1415            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1416            - boa-constructor <unfixed> (embed; bug #555426)
1417            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1418            - nicotine <unfixed> (embed; bug #555427)
1419            NOTE: embeds stdlib modules: ConfigParser
1420            - museek+ <unfixed> (embed; bug #555428)
1421            NOTE: embeds stdlib modules: ConfigParser
1422            - vegastrike-data <removed> (embed)
1423            NOTE: embeds many stdlib modules
1424            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1425            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1426            - config-manager <unfixed> (embed; bug #555423)
1427            NOTE: embeds stdlib modules: optparse
1428            - jhbuild 2.28.0-1 (embed; bug #555421)
1429            NOTE: embeds stdlib modules: optparse, subprocess
1430            - smart <unfixed> (embed; bug #555432)
1431            NOTE: embeds stdlib modules: optparse
1432            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1433            NOTE: embeds stdlib modules: doctest
1434            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1435            NOTE: embeds stdlib modules: doctest
1436            - distribute <unfixed> (embed)
1437            NOTE: embeds stdlib modules: doctest
1438            - python-setuptools <unfixed> (embed; bug #555435)
1439            NOTE: embeds stdlib modules: doctest
1440            - zope.testing <unfixed> (embed; bug #555436)
1441            NOTE: embeds stdlib modules: doctest
1442            - translate-toolkit <unfixed> (embed; bug #555422)
1443            NOTE: embeds stdlib modules: textwrap, contextlib
1444            - libtpclient-py <unfixed> (embed; bug #555424)
1445            NOTE: embeds stdlib modules: subprocess
1446            - grass <unfixed> (embed; bug #555425)
1447            NOTE: embeds stdlib modules: subprocess
1448            - coherence <unfixed> (embed; bug #555429)
1449            NOTE: embeds stdlib modules: uuid
1450            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1451            NOTE: embeds stdlib modules: uuid
1452            - setroubleshoot <removed> (embed; bug #555431)
1453            NOTE: embeds stdlib modules: uuid
1454            - linkchecker <unfixed> (embed; bug #555414)
1455            NOTE: embeds msgfmt.py script
1456            - imdbpy <unfixed> (embed)
1457            NOTE: embeds msgfmt.py script
1458            - kiwi <unfixed> (embed)
1459            NOTE: embeds msgfmt.py script
1460            - moin <unfixed> (embed)
1461            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1462            - plone3 <removed> (embed)
1463            NOTE: embeds msgfmt.py script
1464            - roundup <unfixed> (embed)
1465            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1466            - rednotebook <unfixed> (embed; bug #555415)
1467            NOTE: embeds msgfmt.py script
1468            - turbogears <unfixed> (embed)
1469            NOTE: embeds msgfmt.py script
1470            - elisa <unfixed> (embed)
1471            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1472            - calibre <unfixed> (embed)
1473            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1474            - mailman 1:2.1.13-1 (embed; #555416)
1475            NOTE: embeds msgfmt.py script
1476            - python-docutils <unknown> (embed)
1477            NOTE: embeds stdlib modules: optparse, textwrap
1478            - python-imaging <unknown> (embed)
1479            NOTE: embeds stdlib modules: doctest
1480            - python-mechanize <unknown> (embed)
1481            NOTE: embeds stdlib modules: doctest
1482            - twill <unknown> (embed)
1483            NOTE: embeds stdlib modules: subprocess
1484            - zeroc-ice <unknown> (embed)
1485            NOTE: embeds stdlib modules: subprocess
1486            - wxwidgets2.8 <unknown> (embed)
1487            NOTE: embeds stdlib modules: subprocess
1488            - cycle <unknown> (embed)
1489            NOTE: embeds msgfmt.py script
1490            - deluge <unknown> (embed)
1491            NOTE: embeds msgfmt.py script
1492            - opendict <unknown> (embed)
1493            NOTE: embeds msgfmt.py script
1494            - openerp-client <unknown> (embed)
1495            NOTE: embeds msgfmt.py script
1496            - rapidsvn <unknown> (embed)
1497            NOTE: embeds msgfmt.py script
1498            - wammu <unknown> (embed)
1499            NOTE: embeds msgfmt.py script
1500            - gaphor <unknown> (embed)
1501            NOTE: embeds msgfmt.py script
1502            - pida <unknown> (embed)
1503            NOTE: embeds msgfmt.py script
1504            - python-formencode <unknown> (embed)
1505            NOTE: embeds msgfmt.py script
1506            - duplicity <unfixed> (embed)
1507            NOTE: embeds stdlib module: urlparse, tarfile
1508            - pygopherd <unfixed> (embed)
1509            NOTE: embeds stdlib module: zipfile
1510    
1511    argparse
1512            - twill <unfixed> (embed; bug #555347)
1513            - ipython <unfixed> (embed; bug #555348)
1514    
1515    coherence
1516            - elisa <unfixed> (embed; bug #555335)
1517    
1518    simpletal
1519            - plastex <unfixed> (embed; bug #555371)
1520    
1521    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1522            - postr <unfixed> (embed)
1523            - elisa <unfixed> (embed)
1524    
1525    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1526            - apertium-tolk <unfixed> (embed)
1527            - ipython <unfixed> (embed)
1528            - virtaal <unfixed> (embed)
1529    
1530    distribute
1531            - setuptools <removed> (old-version)
1532    
1533    rails
1534            - jruby1.2 <removed> (embed) [./bench/rails/*]
1535            NOTE: jruby is in non-free, it probably includes rails too
1536            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1537            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1538            - thin <unfixed> (embed) [./spec/rails_app/*]
1539            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1540            NOTE: be dangerous if developers are naively basing their code off of the examples
1541            NOTE: prototype.js is among the example files
1542    
1543    lucene2 (prototype.js is among the embeds in the following)
1544            - lucene <unfixed> (old-version)
1545            - pylucene <unfixed> (embed)
1546            - libpdfbox-java <unfixed> (embed)
1547            - libfontbox-java <unfixed> (embed)
1548            - libjempbox-java <unfixed> (embed)
1549            - solr <unfixed> (embed)
1550    
1551    unicode-data
1552            - syslinux <unfixed> (embed)
1553            - camomile <unfixed> (embed)
1554            - fribidi <unfixed> (embed)
1555            - m17n-db <unfixed> (embed)
1556            - sbcl <unfixed> (embed)
1557            - heimdal <unfixed> (embed)
1558            - icu <unfixed> (embed)
1559            - icu4j <unfixed> (embed)
1560            - krb5 <unfixed> (embed)
1561            - moodle <unfixed> (embed)
1562            - openldap <unfixed> (embed)
1563            - pike7.6 <unfixed> (embed)
1564            - samba <unfixed> (embed)
1565            - samba4 <unfixed> (embed)
1566            - cmucl <unfixed> (embed)
1567            - typo3-src <unfixed> (embed)
1568            - mauve <unfixed> (embed)
1569            - texlive-bin <unfixed> (embed)
1570            - ypsilon <unfixed> (embed)
1571            - jeuclid <unfixed> (embed)
1572            - charmap.app <unfixed> (embed)
1573            - clisp <unfixed> (embed)
1574            - gnulib <unfixed> (embed)
1575            - opensrs-client <unfixed> (embed)
1576            - saxonb <unfixed> (embed)
1577            - rails <unfixed> (embed)
1578    
1579    feedparser
1580            - rawdog <unfixed> (embed; bug #383422)
1581            - miro <unfixed> (embed; bug #555351)
1582            - calibre <unfixed> (embed; bug #555352)
1583            - freevo <unfixed> (embed; bug #555353)
1584            - pida <unfixed> (embed; bug #555354)
1585            - planet-venus <unfixed> (embed; bug #555355)
1586            - plone3 <removed> (embed; bug #555356)
1587            - exaile 0.2.14+debian-1 (embed)
1588            - screenlets 0.1.2-3 (embed)
1589            NOTE: included twice
1590    
1591    agg:
1592            - matplotlib <unfixed> (embed: bug #377271)
1593            - contextfree <unfixed> (embed)
1594            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1595            - exactimage <unfixed> (embed)
1596            - python-enable <unfixed> (embed)
1597            - mapnik 0.5.1-3 (embed)
1598            NOTE: links statically to agg, but shared library is not available (bug #377271)
1599    
1600    vtk
1601            - paraview <unfixable> (embed; bug #495426)
1602            - libmesh <unfixed>
1603            NOTE: embeds exodus; not sure if there's a version external to vtk
1604    
1605    txt2tags
1606            - rednotebook <unfixed> (embed)
1607    
1608    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1609            - gajim <unfixed> (embed)
1610            - emesene <unfixed> (embed)
1611            - convirt <unfixed> (embed)
1612            - pida <unfixed> (embed)
1613            - rednotebook <unfixed> (embed)
1614    
1615    horde3 (prototype.js is among the embeds in the following)
1616            - mnemo2 <unfixed> (embed)
1617            - nag2 <unfixed> (embed)
1618            - wordpress <unfixed> (embed)
1619            NOTE: Text_Diff (wp-includes/Text/Diff*)
1620    
1621    cimg
1622            - gmic <unfixed> (embed)
1623    
1624    mootools
1625            - kdenetwork <unfixed> (embed)
1626            - gallery <unfixed> (embed)
1627            - jspwiki <unfixed> (embed)
1628            - vdr-plugin-live <unfixed> (embed)
1629            - perl-doc-html <unfixed> (embed)
1630    
1631    openldap
1632            - openldap2.3 <removed> (old-version)
1633            - ia32-libs <unfixable> (embed)
1634    
1635    grub2
1636            - grub <unfixed> (old-version)
1637    
1638    gnupginterface
1639            - duplicity <unfixed> (embed)
1640    
1641    python-dateutil
1642            - awn-extras-applets <unfixed> (embed)
1643            - matplotlib <unknown> (embed)
1644    
1645    cups
1646            - cupsys <removed> (old-version)
1647            - ia32-libs <unfixable> (embed)
1648    
1649    yui
1650            - bcfg2 <not-affected> (present in source but not included in any binary files)
1651            - serendipity 1.5.3-1 (embed; bug #557746)
1652            - moodle 1.8.2.dfsg-5 (embed)
1653            - jifty 0.91117-1 (embed; bug #557748)
1654            - webgui 7.7.26-1 (embed)
1655            - loggerhead 1.17-1 (embed)
1656            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1657    
1658    quake3 (vanilla source not packaged in debian)
1659            - openarena <unfixable> (fork)
1660    
1661    quake2 (vanilla source not packaged in debian)
1662            - alien-arena <unfixable> (fork)
1663            - warsow <unfixable> (fork)
1664    
1665    libtheora
1666            - iceweasel <not-affected> (uses xulrunner)
1667            - xulrunner <unfixed> (embed; bug #540959)
1668            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1669            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1670            - iceape <unfixed> (embed; bug #559276)
1671            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1672            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1673    
1674    dtoa
1675            - bfilter <unfixed> (embed)
1676            - cacao <removed> (embed)
1677            - cdrdao <unfixed> (embed)
1678            - classpath <unfixed> (embed)
1679            - freej <unfixed> (embed)
1680            - iceape <unfixed> (embed)
1681            - iceweasel <unfixed> (embed)
1682            - jscoverage <unfixed> (embed)
1683            - kde4libs <unfixed> (embed)
1684            - kdelibs <unfixed> (embed)
1685            - kompozer <unfixed> (embed)
1686            - libv8 <unfixed> (embed)
1687            - mono <unfixed> (embed)
1688            - newlib <unfixed> (embed)
1689            - nspr <unfixed> (embed)
1690            - php5 <unfixed> (embed)
1691            - polyml <unfixed> (embed)
1692            - qt4-x11 <unfixed> (embed)
1693            - rhino <unfixed> (embed)
1694            NOTE: code translated to Java
1695            - ruby1.8 <unfixed> (embed)
1696            - ruby1.9 <unfixed> (embed)
1697            - ruby1.9.1 <unfixed> (embed)
1698            - sdd <unfixed> (embed)
1699            - sfind <unfixed> (embed)
1700            - star <unfixed> (embed)
1701            - tinymux <unfixed> (embed)
1702            - virtualbox-ose <unfixed> (embed)
1703            - webkit <unfixed> (embed)
1704            - xulrunner <unfixed> (embed)
1705    
1706    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1707            - firegpg <unfixed> (embed)
1708            - enigmail <unfixed> (embed)
1709    
1710    ptmalloc (not packaged in Debian)
1711            - crystalspace <unfixed> (embed)
1712            - qt4-x11 <unfixed> (embed)
1713    
1714    svgalib
1715            - usplash <unfixed> (embed)
1716            - ia32-libs <unfixable> (embed)
1717    
1718    bogl
1719            - usplash <unfixed> (embed)
1720    
1721    taglist
1722            - usplash <unfixed> (embed)
1723    
1724    portaudio
1725            - audacity <unfixed> (embed; bug #323711)
1726    
1727    nyquist
1728            - audacity <unfixed> (embed)
1729            NOTE: embeds a forked nyquist with support for a shared library
1730    
1731    vamp-plugin-sdk
1732            - audacity <unfixed> (embed)
1733    
1734  mozilla:  wordpress
1735  mozilla-firefox          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1736  mozilla-thunderbird          - wordpress-mu <removed> (fork)
 nvu  
1737    
1738    php5
1739            - php4 <removed> (old-version)
1740    
1741  xli:  classpath
1742  xloadimage          - libgnucrypto-java <removed> (embed; bug #559788)
1743    
1744    libtool
1745            - apr <unfixed> (static; bug #489625)
1746            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1747            - arts <unfixed> (embed)
1748            - bochs 2.4.2-1 (embed; bug #560884)
1749            - camserv <unfixed> (embed)
1750            - collectd 4.8.2-1 (embed)
1751            - courier-authlib 0.58-4 (embed)
1752            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1753            - cvsnt 2.5.04.3236-1.2 (embed)
1754            - dico <not-affected> (Uses the system copy of ltdl)
1755            - freeradius 0.1+20010527-1 (embed)
1756            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1757            - ggobi 2.1.9~20091212-1 (embed)
1758            - glame 2.0.1-4 (embed)
1759            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1760            - gnash 0.8.7-2 (embed)
1761            - gnu-smalltalk <unfixed> (embed; bug #566777)
1762            - google-gadgets 0.10.5-0.3 (embed)
1763            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1764            - graphicsmagick 1.3.5-6 (embed)
1765            - graphviz 2.8-3 (embed)
1766            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1767            - guile-1.6 1.6.8-7 (embed)
1768            - hamlib 1.2.11-1 (embed)
1769            - hercules 3.06-1.2 (embed)
1770            - jags 1.0.4-3 (embed; bug #560864)
1771            - kdelibs <unfixed> (embed)
1772            - libannodex <removed> (embed)
1773            - libextractor 0.5.23+dfsg-4 (embed)
1774            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1775            - libtunepimp 0.5.3-7.3 (embed)
1776            - mp4h 1.3.1-4.1 (embed)
1777            - naim <removed> (embed)
1778            - parser-mysql <unfixed> (embed)
1779            - pinball 0.3.1-11 (embed)
1780            - redland <unfixed> (embed)
1781            - siproxd <unfixed> (embed)
1782            - ski <unfixed> (embed)
1783            - synfig 0.62.00-1 (embed)
1784            - unixodbc 2.2.4-5 (embed)
1785            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1786            - clamav 0.95+dfsg-1 (embed)
1787            - imagemagick 6:6.2.3.1-1 (embed)
1788            - hypre 2.4.0b-5 (embed)
1789            - lam <unfixed> (embed)
1790            - openmpi <unfixable> (embed; bug #559386)
1791            - parser <unfixed> (embed)
1792            - pdsh 2.18-5 (embed; bug #560892)
1793            - sbnc 1.2-8 (embed)
1794            - sdcc <unfixed> (embed)
1795            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1796            - proftpd-dfsg <unfixed> (embed; bug #561748)
1797            - babel 1.4.0.dfsg-5 (embed)
1798            - libprelude 0.9.14-2 (embed)
1799            - heartbeat 2.1.4-7 (embed)
1800            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1801            NOTE: might've been fixed earlier
1802            - gcc-* <unknown> (embed)
1803            - ia32-libs <unfixable> (embed)
1804    
1805    ocamlgsl
1806            - orpie 1.5.1-7.1 (embed; bug #550058)
1807    
1808    xdotool
1809            - keynav <unfixed> (embed; bug #560103)
1810    
1811    bulletphysics (not packaged; http://www.bulletphysics.org/)
1812            - supertuxkart <unfixed> (embed)
1813            - blender <unfixed> (embed)
1814    
1815    ghostscript
1816            - gs-gpl <removed> (old-version)
1817    
1818    icedove
1819            - thunderbird <removed> (old-version)
1820    
1821    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1822            - jquery <unfixed> (embed)
1823    
1824    sed
1825            - ssed <unfixed> (fork)
1826    
1827    phpatomlib (http://code.google.com/p/phpatomlib)
1828            - wordpress <unfixed> (embed)
1829    
1830    Services_JSON (http://pear.php.net/package/Services_JSON)
1831            - wordpress <unfixed> (embed)
1832    
1833    phpass (http://www.openwall.com/phpass/)
1834            - gallery2 <unfixed> (embed)
1835            - wordpress <unfixed> (embed)
1836            - typo3-src <unfixed> (modified-embed)
1837            NOTE: file refers to drupal, maybe there's a copy somewhere there
1838            NOTE: a copyright owner search didn't match anything
1839            - libauthen-passphrase-perl <unfixable> (fork)
1840            NOTE: perl implementation of phpass
1841            - phpbb3 <unfixed>
1842            NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1843    
1844    squirrelmail
1845            - wordpress <unfixed> (embed)
1846            NOTE: class-pop3.php
1847    
1848    ezSQL (http://www.woyano.com/jv/ezsql)
1849            - wordpress <unfixable> (fork)
1850            NOTE: wp-db.php
1851    
1852    Diff.php (Clay Loveless' version/killersoft.com)
1853            - php-versioncontrol-svn <unfixed>
1854    
1855    libm (provided by libc)
1856            - spring <unfixed> (embed)
1857            NOTE: embedded by embedded copy of streflop
1858            - aide <unfixed> (static)
1859            - busybox <unfixed> (static)
1860            - mindi-busybox <unfixed> (static)
1861            - qemu <unfixed> (static)
1862            NOTE: qemu-user-static
1863            - tuxonice-userui <unfixed> (static)
1864            - zsh <unfixed> (static)
1865            NOTE: zsh-static
1866            - tripwire <unfixed>
1867    
1868    streflop
1869            - spring <unfixed> (embed)
1870    
1871    minizip
1872            - spring <unfixed> (embed)
1873    
1874    oscpack
1875            - spring <unfixed> (embed)
1876    
1877    hpiutil2
1878            - spring <unfixed> (embed)
1879    
1880    p7zip
1881            - spring <unfixed> (embed)
1882    
1883    pythonqt (doesn't seem to be python-qtN, unknown source)
1884            - fontmatrix <unfixed> (embed)
1885            - elmerfem <unfixed> (embed)
1886    
1887    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1888            - docvert <unfixed> (embed)
1889            - jifty <unfixed> (embed)
1890            - kdenetwork <unfixed> (embed)
1891            - mediatomb <unfixed> (embed)
1892            - plastex <unfixed> (embed)
1893            - plone3 <removed> (embed)
1894            - python-chaco <unfixed> (embed)
1895            - python-docutils <unfixed> (embed)
1896            - s5 <unfixed> (embed)
1897            - zope2.10 <unfixed> (embed)
1898            - zope2.11 <removed> (embed)
1899            - cython <not-affcted> (embed)
1900            NOTE: part of documentation, which is not installed into the binary package
1901    
1902    python-docutils
1903            - zope2.10 <unfixed> (embed)
1904            - zope2.11 <removed> (embed)
1905    
1906    tesseract
1907            - ocropus <unfixed> (static)
1908    
1909    antlr
1910            - kdevelop <unfixed> (embed)
1911    
1912    libxerces2
1913            - openjdk-6 <unfixed> (embed)
1914    
1915    kfreebsd-8
1916            - kfreebsd-7 <unfixed> (old-version)
1917            - kfreebsd-6 <removed> (old-version)
1918    
1919    ruby1.9.1
1920            - ruby1.9 <unfixed> (old-version)
1921            - ruby1.8 <unfixed> (old-version)
1922    
1923    maildrop
1924            - courier <unfixed> (embed) [./maildrop]
1925    
1926    glee
1927            - warzone2100 <not-affected> (embed)
1928    
1929    phing
1930            - symfony <unfixed> (embed)
1931    
1932    pake
1933            - symfony <unfixed> (embed)
1934    
1935    propel
1936            - symfony <unfixed> (embed)
1937    
1938    creole
1939            - symfony <unfixed> (embed)
1940    
1941    hfsutils
1942            - cdrkit <unfixed> (embed; bug #570187)
1943            NOTE: embeds hfsutils code in genisoimage
1944    
1945    cdrkit
1946            - grub2 <unfixed> (embed; bug #570156)
1947            NOTE: genisoimage imported into grub-mkisofs
1948    
1949    kdebase-workspace
1950            - kdebase <unfixed> (old-version)
1951    
1952    file
1953            - php5 <unfixable> (modified-embed)
1954            [lenny] - php5 <not-affected>
1955    
1956    cdb
1957            - php5 <unfixed> (embed)
1958    
1959    libmbfl (itp: #570708)
1960            - php5 <unfixed> (embed)
1961            NOTE: PHP is actually the current upstream, ITP is of that code
1962    
1963    libonig
1964            - php5 5.3.2-1 (embed)
1965    
1966    xmlrpc-epi
1967            - php5 <unfixed> (embed)
1968    
1969    swt-gtk
1970            - eclipse <unfixed> (embed; bug #538808)
1971    
1972    txt2html
1973            - wml 2.0.11ds2-1 (embed)
1974    
1975    ca-certificates
1976            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1977    
1978    openexr
1979            - freeimage <unfixed> (embed)
1980    
1981    libmng
1982            - freeimage <unfixed> (embed)
1983    
1984    openjpeg
1985            - freeimage <unfixed> (embed)
1986    
1987    libjpeg6b
1988            - freeimage <unfixed> (embed)
1989            - ia32-libs <unfixable> (embed)
1990    
1991    libjpeg (don't know what exact version)
1992            - dcmtk <unfixed>
1993            - gdcm <unfixed>
1994            - insighttoolkit <unfixed>
1995            - openarena 0.8.5-5+exp1 (bug #495966)
1996            - outguess <unfixed>
1997            - squeak-vm <unfixed> (embed)
1998            - tremulous <unfixed>
1999            - tuxonice-userui <unfixed> (static)
2000            - fpc <unfixed> (static)
2001            - lazarus <unfixed> (static)
2002            NOTE: inherited from fpc, see #472304
2003            - mseide-msegui <unfixed> (static)
2004            NOTE: inherited from fpc, see #472304
2005            - easymp3gain <unfixed> (static)
2006            NOTE: inherited from fpc, see #472304
2007            - winff <unfixed> (static)
2008            NOTE: inherited from fpc, see #472304
2009            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2010    
2011    
2012    lxr
2013            - lxr-cvs <unfixed> (embed)
2014    
2015    libfile-copy-recursive-perl
2016            - r-base <unfixed> (embed; bug #577427)
2017            - r-base-core-ra <unfixed> (embed; bug #577429)
2018    
2019    delimmatch
2020            - r-base <unfixed> (embed; bug #577433)
2021            - r-base-core-ra <unfixed> (embed; bug #577434)
2022    
2023    libsmf (ITP: #572558)
2024            - denemo <unfixed> (embed)
2025            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2026    
2027    libselinux
2028            - dpkg 1.15.6 (static)
2029            - ia32-libs <unfixable> (embed)
2030    
2031    xinha (ITP: #479708)
2032            - horde3 <unfixed>
2033            - serendipity <unfixed>
2034            - openacs <unfixed>
2035            - dotlrn <unfixed>
2036    
2037    dvipng
2038            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2039    
2040    dvipdfmx
2041            - texlive-bin <unfixed> (embed)
2042            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2043    
2044    lcdf-typetools
2045            - texlive-bin 2009-1 (embed)
2046    
2047    tex4ht
2048            - texlive-bin 2009-1 (embed)
2049    
2050    freetype
2051            - texlive-bin 2009-1 (embed)
2052            - ia32-libs <unfixable> (embed)
2053    
2054    freetype2
2055            - texlive-bin 2009-1 (embed)
2056            - tuxonice-userui <unfixed> (static)
2057            - instantbird <unfixed>
2058            - qt4-x11 <unknown> (embed)
2059            - vtk <unknown> (embed)
2060            - paraview <unknown> (embed)
2061            NOTE: from embedded copy of vtk
2062    
2063    silgraphite
2064            - texlive-bin <unfixed> (embed)
2065    
2066    unzip
2067            - texlive-bin 2009-1 (embed)
2068    
2069    jbig2dec
2070            - ghostscript 8.71~dfsg2-1 (embed)
2071    
2072    libxml2
2073            - chromium-browser 5.0.375.29~r46008-1
2074            - ia32-libs <unfixable> (embed)
2075    
2076    protobuf
2077            - chromium-browser 5.0.375.70~r48679-2
2078    
2079    libv8
2080            - chromium-browser 5.0.375.38~r46659-1
2081    
2082    nspr
2083            - chromium-browser 5.0.375.29~r46008-3
2084            - ia32-libs <unfixable> (embed)
2085    
2086    yasm
2087            - chromium-browser 5.0.375.29~r46008-2
2088    
2089    libxslt
2090            - chromium-browser 5.0.375.29~r46008-1
2091            - ia32-libs <unfixable> (embed)
2092    
2093    miniupnpc
2094            - warzone2100 2.3.7-2
2095            NOTE: code still present in tarball but removed during build and unused
2096    
2097    iniparser (not packaged in Debian; RFP bug #582657)
2098            - warzone2100 <unfixed> (modified-embed)
2099    
2100    pyglet
2101            - sympy <unfixed> (embed; bug #459716)
2102    
2103    mpmath
2104            - sympy <unfixed> (embed; bug #541746)
2105    
2106    openssh
2107            - libpam-ssh <unfixed> (embed; bug #598522)
2108    
2109    curl
2110            - cmake 2.6.0-6 (embed)
2111            NOTE: Might be fixed earlier. Lenny version recorded.
2112            - criticalmass <unfixed> (static; bug #599061)
2113            - wengophone 2.1.0~beta1-svn9983-1 (embed)
2114            - ia32-libs <unfixable> (embed)
2115    
2116    lib3ds
2117            - boson <unfixed> (embed; bug #600900)
2118            - openscenegraph <unfixed> (embed; bug #601181)
2119    
2120    xcftools
2121            - gnome-xcf-thumbnailer <unfixed> (embed)
2122    
2123    simplejson
2124            - exaile <unfixed> (embed; bug #604547)
2125    
2126    libasycns
2127            - loudmouth <unfixed> (embed; bug #566143)
2128    
2129    plplot
2130            - emboss <unfixed> (fork)
2131    
2132    acl
2133            - ia32-libs <unfixable> (embed)
2134    
2135    arts
2136            - ia32-libs <unfixable> (embed)
2137    
2138    attr
2139            - ia32-libs <unfixable> (embed)
2140    
2141    audiofile
2142            - ia32-libs <unfixable> (embed)
2143    
2144    avahi
2145            - ia32-libs <unfixable> (embed)
2146    
2147    celt
2148            - ia32-libs <unfixable> (embed)
2149    
2150    coreutils
2151            - ia32-libs <unfixable> (embed)
2152    
2153    cyrus-sasl2
2154            - ia32-libs <unfixable> (embed)
2155    
2156    db4.8
2157            - ia32-libs <unfixable> (embed)
2158    
2159    dbus
2160            - ia32-libs <unfixable> (embed)
2161    
2162    directfb
2163            - ia32-libs <unfixable> (embed)
2164    
2165    esound
2166            - ia32-libs <unfixable> (embed)
2167    
2168    fltk1.1
2169            - ia32-libs <unfixable> (embed)
2170    
2171    fontconfig
2172            - ia32-libs <unfixable> (embed)
2173    
2174    freeglut
2175            - ia32-libs <unfixable> (embed)
2176    
2177    gcc-3.3
2178            - ia32-libs <unfixable> (embed)
2179    
2180    gdbm
2181            - ia32-libs <unfixable> (embed)
2182    
2183    gnutls26
2184            - ia32-libs <unfixable> (embed)
2185    
2186    hal
2187            - ia32-libs <unfixable> (embed)
2188    
2189  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  isdnutils
2190  openmotif          - ia32-libs <unfixable> (embed)
 xfree86/xorg (in libxpm)  
2191    
2192    jack-audio-connection-kit
2193            - ia32-libs <unfixable> (embed)
2194    
2195    keyutils
2196            - ia32-libs <unfixable> (embed)
2197    
 kerberized apps with BSD origin:  
 krb4  
2198  krb5  krb5
2199  heimdal          - ia32-libs <unfixable> (embed)
2200    
2201    lesstif2
2202            - ia32-libs <unfixable> (embed)
2203    
2204  grip: (which pkg is the origin?)  libaio
2205  libcdaudio          - ia32-libs <unfixable> (embed)
 grip  
 gnome-vfs (vfs2 as well?)  
2206    
2207    libasyncns
2208            - ia32-libs <unfixable> (embed)
2209    
2210  fudforum:  libcap2
2211  phpgroupware-fudforum          - ia32-libs <unfixable> (embed)
 egroupware-fudforum  
2212    
2213  cvs:  libdrm
2214  gcvs (at least an additional script is included, check if there's more)          - ia32-libs <unfixable> (embed)
2215    
2216  pcre:  libedit
2217  all pythons          - ia32-libs <unfixable> (embed)
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
2218    
2219  tiff:  libexif
2220  wxpythongtk (check, which debian pkg this is in)          - ia32-libs <unfixable> (embed)
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
2221    
2222    libgcrypt11
2223            - ia32-libs <unfixable> (embed)
2224    
2225  uudeview:  libgpg-error
2226  libconvert-uulib-perl          - ia32-libs <unfixable> (embed)
2227    
2228  sqlite: (not affected by security vulnerabilities so far)  libgphoto2
2229  amarok          - ia32-libs <unfixable> (embed)
2230    
2231  util-linux/mount:  libice
2232  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - ia32-libs <unfixable> (embed)
2233    
2234  webmin:  libieee1284
2235  usermin          - ia32-libs <unfixable> (embed)
2236    
2237  sylpheed:  libjpeg8
2238  sylpheed-claws          - ia32-libs <unfixable> (embed)
2239    
2240  phpsysinfo:  libnss-ldap
2241  egroupware          - ia32-libs <unfixable> (embed)
 phpgroupware  
2242    
2243  phpldapadmin:  libogg
2244  egroupware          - ia32-libs <unfixable> (embed)
2245    
2246  chmlib:  libpam-ldap
2247  kchmviewer (not packaged in Debian)          - ia32-libs <unfixable> (embed)
2248    
2249  libavcodec/libavformat:  libsamplerate
2250  ffmpeg          - ia32-libs <unfixable> (embed)
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
2251    
2252  mad MPEG decoding lib:  libsdl1.2
2253  mad          - ia32-libs <unfixable> (embed)
 xine-lib  
2254    
2255  libdts:  libsm
2256  libdts          - ia32-libs <unfixable> (embed)
 xine-lib  
2257    
2258  flac:  libssh2
2259  flac          - ia32-libs <unfixable> (embed)
 xine-lib  
2260    
2261  liba52:  libtasn1-3
2262  a52dec          - ia32-libs <unfixable> (embed)
 xine-lib  
2263    
2264  libmpeg2:  libx11
2265  mpeg2dec          - ia32-libs <unfixable> (embed)
 xine-lib  
2266    
2267  curl:  libx86
2268  wget (code for NTLM authentication)          - ia32-libs <unfixable> (embed)
2269    
2270  TODO evaluate:  libxau
2271  gimp-gap (potentially using ffmpeg code as well)          - ia32-libs <unfixable> (embed)
2272    
2273  uw-imap:  libxcb
2274  pine          - ia32-libs <unfixable> (embed)
2275    
2276  imagemagick:  libxcomposite
2277  graphicsmagick          - ia32-libs <unfixable> (embed)
2278    
2279  halibut:  libxcursor
2280  nsis          - ia32-libs <unfixable> (embed)
2281    
2282  libghttp:  libxdamage
2283  hotway          - ia32-libs <unfixable> (embed)
2284    
2285  etl-dev (will be renamed to libetl-dev soon):  libxdmcp
2286  synfig          - ia32-libs <unfixable> (embed)
2287    
2288  libmms:  libxext
2289  xine-lib          - ia32-libs <unfixable> (embed)
 mimms  
2290    
2291  FCKeditor:  libxfixes
2292  knowledgeroot          - ia32-libs <unfixable> (embed)
2293    
2294  Moodle contains lots of things:  libxi
2295  AdoDB          - ia32-libs <unfixable> (embed)
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
2296    
2297    libxinerama
2298            - ia32-libs <unfixable> (embed)
2299    
2300  TinyMCE:  libxmu
2301  wordpress          - ia32-libs <unfixable> (embed)
2302  moodle  
2303  knowledgeroot  libxp
2304  joomla (ITP)          - ia32-libs <unfixable> (embed)
2305    
2306  scintilla:  libxrandr
2307  scite          - ia32-libs <unfixable> (embed)
2308  qscintilla  
2309  geany  libxrender
2310            - ia32-libs <unfixable> (embed)
2311  libphp-adodb:  
2312  gallery2  libxss
2313  phppgadmin          - ia32-libs <unfixable> (embed)
2314  egroupware  
2315  phpwiki  libxt
2316  moodle          - ia32-libs <unfixable> (embed)
2317  cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
2318    libxtst
2319  gzip:          - ia32-libs <unfixable> (embed)
2320  linux-kernel (lib/inflate.c)  
2321  klibc (based on linux-kernel gzip code)  libxv
2322  busybox          - ia32-libs <unfixable> (embed)
2323    
2324  ffmpeg:  libxxf86vm
2325  mplayer (#395252)          - ia32-libs <unfixable> (embed)
2326    
2327  neon:  lzo2
2328  cadaver (all, but being worked on: #188381)          - ia32-libs <unfixable> (embed)
2329  gnome-vfs2 (#395874)  
2330  litmus (#395875)  mesa
2331  screem (sarge only)          - ia32-libs <unfixable> (embed)
2332  sitecopy (#395876)  
2333  tla (etch/sid only: #395877)  mpg123
2334            - ia32-libs <unfixable> (embed)
2335    
2336    nas
2337            - ia32-libs <unfixable> (embed)
2338    
2339    nss
2340            - ia32-libs <unfixable> (embed)
2341    
2342    openal-soft
2343            - ia32-libs <unfixable> (embed)
2344    
2345    openssl
2346            - ia32-libs <unfixable> (embed)
2347    
2348    pam
2349            - ia32-libs <unfixable> (embed)
2350    
2351    popt
2352            - ia32-libs <unfixable> (embed)
2353    
2354    pulseaudio
2355            - ia32-libs <unfixable> (embed)
2356    
2357    sane-backends
2358            - ia32-libs <unfixable> (embed)
2359    
2360    sqlite3
2361            - ia32-libs <unfixable> (embed)
2362            - chromium-browser <unfixed> (embed)
2363    
2364    sysfsutils
2365            - ia32-libs <unfixable> (embed)
2366    
2367    tcp-wrappers
2368            - ia32-libs <unfixable> (embed)
2369    
2370    tdb
2371                  - thunar 1.2.1-3 (old-version)
2372            - ia32-libs <unfixable> (embed)
2373    
2374    tslib
2375            - ia32-libs <unfixable> (embed)
2376    
2377    unixodbc
2378            - ia32-libs <unfixable> (embed)
2379    
2380    xaw3d
2381            - ia32-libs <unfixable> (embed)
2382    
2383    xbitmaps
2384            - ia32-libs <unfixable> (embed)
2385    
2386    xcb-util
2387            - ia32-libs <unfixable> (embed)
2388    
2389    xcursor-themes
2390            - ia32-libs <unfixable> (embed)
2391    
2392    xft
2393            - ia32-libs <unfixable> (embed)
2394    
2395    dicomparser
2396            - vtk <unfixed>
2397            - paraview <unfixed>
2398            NOTE: as part of its copy of vtk
2399            - insighttoolkit <unfixed>
2400    
2401    proj
2402            - vtk <unfixed>
2403            - paraview <unfixed>
2404            NOTE: as part of its copy of vtk
2405            - therion <unfixed>
2406            - python-pyproj 1.8.6-1
2407    
2408    netcdf
2409            - vtk <unfixed>
2410            - paraview <unfixed>
2411            NOTE: as part of its copy of vtk
2412    
2413    insighttoolkit
2414            - vtk <unfixed> (embed)
2415            NOTE: embeds at least MetaIO
2416            - paraview <unfixed> (embed)
2417            NOTE: embeds at least MetaIO
2418    
2419    gl2ps
2420            - vtk <unfixed>
2421            - paraview <unfixed>
2422            NOTE: as part of its copy of vtk
2423            - avogadro <unfixed>
2424            - gabedit <unknown> (embed)
2425            NOTE: not sure if it is built
2426            - drawxtl <unfixed> (embed)
2427            - rgl <unfixed> (embed)
2428            - gmsh <unfixed>
2429            - mcrl2 <unfixed> (embed)
2430            - mysql-gui-tools <unknown> (embed)
2431            NOTE: not sure if it is built
2432            - opencascade <unfixed> (embed)
2433            - orsa <unfixed> (embed)
2434            - qtiplot <unfixed> (embed)
2435            - qwtplot3d <unfixed> (embed)
2436            - root-system <unknown> (embed)
2437            NOTE: not sure if it is built
2438            - scilab <unfixed> (embed)
2439            - snd <unknown> (embed)
2440            NOTE: not sure if it is built
2441            - xmakemol <unfixed> (embed)
2442    
2443    qwtplot3d
2444            - qtiplot <unfixed>
2445    
2446    parseafm (from Adobe)
2447            - vftool <unfixed>
2448            - gnustep-back <unknown>
2449            NOTE: looks like it isn't built
2450            - evince <unfixed>
2451    
2452    bugzilla
2453            - perl <unknown>
2454            - libcgi-pm-perl <unknown>
2455    
2456    isc-dhcp
2457            - dhcp3 <unfixable> (old-version)
2458            - dhcp <unfixable> (old-version)
2459    
2460    chipmunk (ITP: #623274)
2461            - xmoto <unfixed> (embed; bug #623299)
2462            - libtuxcap <unfixed> (embed; bug #623300)

Legend:
Removed from v.4891  
changed lines
  Added in v.16761

  ViewVC Help
Powered by ViewVC 1.1.5