/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1757 by jmm-guest, Thu Sep 1 13:25:58 2005 UTC revision 19026 by mgilbert, Fri Apr 20 21:40:00 2012 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
7  kdegraphics/kpdf  
8  tetex-bin  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26    The srcpkg might be some string to identify the code if there is no
27    specific source package.
28    
29    Everything up to the next line is ignored.
30    ---BEGIN
31  poppler  poppler
32            - pdftohtml <unknown>
33            [sarge] - pdftohtml <unfixed>
34            [etch] - pdftohtml <unfixed>
35            NOTE: has been replaced by poppler-utils
36            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37            - texlive-base 3.0-12 (embed)
38            - texlive-bin 2007-1 (embed)
39            - koffice 1:2.0.0-1 (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53    ppmd
54            - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60            - dnsproxy <unknown> (embed)
61    
62    lrmi
63            - read-edid 2.0.0-1 (embed; bug #495131)
64            - s3switch <unfixed> (embed)
65            - xresprobe <unfixed> (embed)
66            - zhcon <unfixed> (embed)
67    
68    php-htmlpurifier
69            - mahara 1.2.5-1 (embed)
70            - knowledgeroot 0.9.9.5-5 (embed)
71            - moodle <unfixed> (embed)
72    
73    peercast
74            - gnome-peercast <removed> (embed)
75            [etch] - gnome-peercast <unfixed> (embed)
76    
77    silc-toolkit
78            - silc-client 1.1~beta6-1 (embed)
79    
80    icclib
81            - ghostscript <unfixed> (embed)
82            - argyll <unfixed> (embed)
83    
84    libusb
85            - argyll <unfixed> (embed)
86            - ia32-libs <unfixable> (embed)
87    
88    dietlibc
89            - ccontrol 0.9.1+20071204-1 (static)
90            - mksh <unfixable> (static)
91            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
92    
93    libmikmod
94            - pysol-sound-server <unfixed> (modified-embed)
95            - sdl-mixer1.2 <unfixed> (embed)
96            TODO: report bug
97            - uqm 0.6.2.dfsg-8 (embed)
98            NOTE: Might be fixed earlier. Lenny version recorded.
99            - black-box 1.4.6-2.2 (embed)
100            NOTE: Might be fixed earlier. Lenny version recorded.
101    
102    libiax
103            - iaxmodem <unfixable> (embed; bug #548885)
104    
105    spandsp
106            - iaxmodem <unfixable> (embed; bug #548885)
107    
108    python-paramiko
109            - fabric 0.9.0-2 (embed; bug #561398)
110    
111    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
112            - dpkg 1.15.6 (static)
113            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
114            - rsync <unfixed> (embed)
115            - cherokee <unfixed> (embed)
116            NOTE: somehow derived code base
117            - mono <unfixed> (embed)
118            TODO: check mozilla
119            - linux-2.6 <unfixed> (embed)
120            - pvpgn 1.7.8-2 (embed)
121            - mrtg 2.12.2-1 (embed)
122            - rpm <unknown> (embed)
123            NOTE: pinged anibal since when rpm was fixed
124            - tuxcmd-modules <unfixed> (embed)
125            - zsync <unfixed>
126            - tra <unfixed>
127            - sash <unfixed>
128            - nsis <unfixed>
129            - pyfits 1:2.3.1-1
130            - mseide-msegui <unfixed>
131            NOTE: mseide
132            - mirrordir <unfixed>
133            - poco <unfixed>
134            - klibc <unfixed>
135            - emboss 6.3.1-1 (embed)
136            - ghostscript 8.71~dfsg2-6 (embed)
137            NOTE: ghostscript fixed sometime before this, but this is the version i checked
138            - freeimage <unfixed>
139            - clamav <unfixed> (fork)
140            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
141            - tuxonice-userui <unfixed> (static)
142            - plt-scheme <unfixed>
143            - perl <unfixed>
144            - paraview <unfixed>
145            - velvet 0.7.56~nozlibcopy-1
146            - gcvs <unfixed>
147            - dump <unfixed>
148            - aide <unfixed> (static)
149            - dar <unfixed> (static)
150            - avfs <unfixed>
151            - fpc <unfixed>
152            - winff <unfixed>
153            NOTE: inherited from fpc, see #472304
154            - lazarus <unfixed>
155            NOTE: inherited from fpc, see #472304
156            - erlang <unfixed> (embed)
157            - gamera 3.2.3-1 (embed)
158            - python2.4 <unfixed> (embed; bug #553403)
159            - python2.5 <unfixed> (embed; bug #553403)
160            - texlive-bin <unknown> (embed)
161            - sudo <unknown> (embed)
162            NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
163    
164    dulwich
165            - hg-git 0.1.0-1 (embed; bug #541996)
166    
167    libvigraimpex
168            - hugin <unfixed> (embed; bug #542259)
169            - enblend-enfuse <unfixed> (embed; bug #542258)
170            - gamera 3.2.3-1 (embed)
171    
172    libbz2
173            - dpkg 1.15.6 (static)
174            - amd64-libs <unfixed> (static)
175            NOTE: let's call it "static"
176            - dar <unfixed> (static)
177            - dump <unfixed> (static)
178            - unalz 0.64-1 (embed)
179            NOTE: has code, by the maint, to use the system version but links against the internal copy
180            - clamav <unfixed> (embed)
181            NOTE: libclamav/nsis/bzlib*
182            - pristine-tar <unfixable> (modified-embed)
183            NOTE: compression code only, not uncompression
184            - r-base-core-ra 1.2.8 (static)
185            - r-base-core 2.11.1 (static)
186            NOTE: links dynamically in squeeze, statically in lenny
187            - rpm <unfixed> (static)
188            NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
189    
190    libyahoo2
191            - centerim <unfixed> (embed; bug #559783)
192    
193    libmsn
194            - centerim <unfixed> (embed; bug #559783)
195    
196    libgadu
197            - centerim <unfixed> (embed; bug #559783)
198            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
199            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
200            - kdenetwork 4:3.3.2-5 (embed)
201            NOTE: from kdenetwork: kopete
202            - ekg 1:1.8~rc0-1 (embed)
203            - kadu 0.6.0.2-3 (embed; bug #504430)
204            - gadu <itp> (embed)
205    
206    xmlrpc (which package is the "origin" of this code?)
207            - drupal <unfixed> (embed)
208            - phpgroupware <unfixed> (embed)
209            - egroupware <unfixed> (embed)
210            - phpwiki <unfixed> (embed)
211            - php4 <removed> (embed)
212            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
213    
214    shtool (affects build-time only)
215            - mysql-ocaml <unfixed> (embed)
216            - php4 <removed> (embed)
217            - php5 <unfixed> (embed)
218    
219    xulrunner
220            - iceape <unfixed> (embed; bug #561749)
221            - iceweasel 2.0.0.19 (embed)
222            - icedove <unfixed> (embed; bug #561750)
223            - kompozer <unfixed> (embed; bug #532168)
224            - galeon 2.0.2-4 (embed)
225            - epiphany-browser 2.14.3-8 (embed)
226            - conkeror 0.9~git080629-2 (embed)
227            - kazehakase 0.4.2-1 (embed)
228            - wine-gecko-unstable <unfixed> (embed)
229    
230    xli
231            - xloadimage <unfixed> (embed)
232    
233    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
234            - openmotif <unfixed> (embed)
235    
236    libxpm
237            - lesstif2 <unfixed> (embed; bug #575750)
238            - ia32-libs <unfixable> (embed)
239    
240    kerberized apps with BSD origin
241            - krb4 <removed> (embed)
242            - krb5 <unfixed> (embed)
243            - heimdal <unfixed> (embed)
244    
245    grip (which pkg is the origin?)
246            - libcdaudio <unfixed>
247            - grip <unfixed>
248            - gnome-vfs <unfixed>
249            TODO: check vfs2 as well
250    
251    fudforum
252            [etch] - phpgroupware <unfixed> (embed)
253            NOTE: phpgroupware-fudforum
254            [sarge] - egroupware-fudforum <removed> (embed)
255    
256    libbsd
257            - rdate 1:1.2-3 (embed)
258            - atheme-services <unfixed>
259            - libbsd-arc4random-perl <not-affected> (modified-embed)
260            NOTE: code not used, it links dynamically against libbsd instead
261            - isakmpd <unfixed>
262            - bsdgames <unfixed> (embed)
263            - bsd-mailx <unfixed> (embed)
264            - netcat-openbsd <unfixed> (embed; bug #550611)
265            - openssh <unfixed> (embed)
266            - unworkable <unfixed> (embed)
267            - mksh <unfixed> (modified-embed)
268            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
269            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
270            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
271            - ia32-libs <unfixable> (embed)
272    
273    cvs
274            - gcvs <unfixed> (embed)
275            NOTE: see cvsunix/src in tarball
276    
277    pcre3
278            - php4 <removed> (embed)
279            - analog 2:5.23-0woody1 (embed)
280            - chicken 3.2.7-2 (embed)
281            NOTE: Might be fixed earlier. Lenny version recorded.
282            - goffice <unfixed> (embed)
283            NOTE: libgoffice-*
284            - hypermail 2.2.0.dfsg-2 (embed)
285            NOTE: Might be fixed earlier. Lenny version recorded.
286            - privoxy 3.0.9-1 (embed)
287            NOTE: Might be fixed earlier. Lenny version recorded.
288            - vfu 4.06-4.1 (embed; bug #450754)
289            - tf5 5.0beta7-1 (embed)
290            - monotone 0.43-1 (embed)
291            NOTE: this only affects versions >= 0.37
292            - glib2.0 2.15.2-1 (embed)
293            - apache2 2.0.53-4 (embed)
294            - exim4 4.10-0.srh20.12 (embed)
295            - yacas <unfixed> (embed)
296            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
297            - gtamsanalyzer.app 0.42-5 (embed)
298            - tin 980117-1 (embed)
299            - kazehakase 0.5.2-1
300            - webkit 1.0.1-1 (embed)
301            - qt4-x11 <unfixed> (embed)
302            NOTE: embedded via webkit copy
303            - erlang <unfixed> (embed)
304            - ssed <unfixed> (embed)
305            - ircd-hybrid <unfixed> (static)
306            - emboss <unfixed> (fork)
307            - cherokee <unfixed> (embed)
308            - oftc-hybrid 1.6.9.dfsg-1 (embed)
309            - ratbox-services <unfixed> (embed)
310            - squeak-vm <unfixed> (embed)
311            - tinymux <unfixed> (embed)
312    
313    tiff
314            - wxwindows2.4 2.2.1 (embed)
315            - gamera 3.2.3-1 (embed)
316            - freeimage <unfixed> (embed)
317            - libtk-img <unfixed> (embed)
318            NOTE: there are two copies, one under tiff/ other under libtiff/
319            - gdal <unfixed>
320            - ia32-libs <unfixable> (embed)
321    
322    uudeview
323            - libconvert-uulib-perl <unfixed> (embed)
324            - pan <unfixed> (embed)
325    
326    sqlite
327            - amarok <unfixed> (embed)
328            - monotone 0.43-1 (embed)
329            - iceweasel <unfixed> (embed)
330            - heimdal <unfixed> (embed; bug #559616)
331    
332    util-linux
333            - loop-aes-utils <unfixed> (embed)
334            NOTE: contains code from util-linux' mount in the mount-aes-udeb
335            - ia32-libs <unfixable> (embed)
336    
337    sylpheed
338            - sylpheed-claws <unfixed> (fork)
339    
340    phpsysinfo
341            - egroupware <unfixed> (embed)
342            - phpgroupware <unfixed> (embed)
343    
344    phpldapadmin
345            [sarge] - egroupware <unfixed> (embed)
346            NOTE: removed from egroupware after sarge
347    
348    chmlib
349            - kchmviewer <unknown> (embed)
350    
351    ffmpeg (libavcodec/libavformat)
352            - mplayer 1.0~rc2-14 (embed; bug #395252)
353            - kino 1.0.0-1
354            - vlc <not-affected> (Links dynamically since initial release)
355            - smilutils 0.3.0-10
356            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
357            - motion 3.1.19-1
358            - gstreamer0.10-ffmpeg 0.10.3-2
359            - xmovie <removed> (static)
360            TODO: gimp-gap (potentially using ffmpeg code as well)
361            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
362            - audacity 1.3.7-2 (embed; bug #512278)
363            - chromium-browser <unfixed> (fork)
364            - libav <unfixed>
365    
366    faad2
367            - mplayer 1.0~rc2-20 (embed)
368            - avifile <unfixed> (embed; bug #538750)
369            - ffmpeg-debian <removed> (embed)
370    
371    libmad (MPEG decoding lib)
372            - xine-lib <unfixed> (embed)
373            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
374            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
375    
376    libdts
377            - xine-lib <unfixed> (embed)
378    
379    flac
380            - xine-lib <unfixed> (embed)
381            - ia32-libs <unfixable> (embed)
382    
383    liba52
384            - a52dec <unfixed> (embed)
385            - xine-lib <unfixed> (embed)
386    
387    mpeg2dec (libmpeg2)
388            - xine-lib <unfixed> (embed)
389    
390    libmpeg3
391            - squeak-vm <unfixed> (embed)
392    
393    libntlm
394            - wget <unfixed> (fork; bug #550436)
395            - curl <unfixed> (fork; bug #550437)
396            - cntlm <unfixed> (fork; bug #550438)
397    
398    uw-imap
399            - pine <unfixed> (embed)
400            - alpine <unfixed> (embed)
401    
402    imagemagick
403            - graphicsmagick <unfixed> (fork)
404    
405    python-urlgrabber
406            - mercurial <unfixed> (embed; bug #531062)
407            - w3af <unfixed> (embed; bug #555372)
408            [experimental] - harvestman <unfixed> (embed; bug #555373)
409    
410    beautifulsoup
411            - python-mechanize <unfixed> (embed; bug #555349)
412            - zope2.11 <removed> (embed; bug #555350)
413            - twill <unknown> (embed)
414    
415    halibut
416            - nsis <unfixed> (fork)
417    
418    libghttp
419            - hotway <unfixed> (embed)
420    
421    libsndfile
422            - ardour 1:2.7.1-1 (embed)
423            - ia32-libs <unfixable> (embed)
424    
425    glibmm2.4
426            - ardour 1:2.7.1-1 (embed)
427    
428    libgnomecanvasmm2.6
429            - ardour 1:2.7.1-1 (embed)
430    
431    libsigc++-2.0
432            - ardour 1:2.7.1-1 (embed)
433            - ia32-libs <unfixable> (embed)
434    
435    soundtouch
436            - ardour 1:2.7.1-1 (embed)
437    
438    libmms
439            - xine-lib <unfixed> (embed)
440            - mimms <unfixed> (embed)
441    
442    fckeditor
443            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
444            - moin 1.8.2-2 (embed; bug #452599)
445            - karrigell <removed> (embed; bug #452598)
446            - gforge 4.6.99+svn6225-1 (embed)
447            - request-tracker3.8 <unfixed> (embed)
448            - otrs2 <unfixed> (embed)
449    
450    ipatlas (not packaged in Debian)
451            - moodle <unfixed> (embed; bug #507185)
452    
453    libphp-phpmailer
454            - moodle <unfixed> (embed; bug #507185)
455            - mahara <unfixed> (embed)
456            - symfony <unfixed> (embed; bug #566778)
457            [etch] - phpgroupware <unfixed> (embed)
458            NOTE: phpgroupware-felamimail is only in etch
459            - egroupware <unfixed> (embed; bug #504283)
460            - glpi 0.80.7-2
461    
462    htmlArea (not packaged in Debian)
463            - moodle <unfixed> (embed)
464    
465    giflib
466            - wine <unfixed> (embed; bug #466181)
467    
468    bennu (not packaged in Debian, http://bennu.sourceforge.net)
469            - moodle <unfixed> (embed)
470    
471    smarty
472            - moodle 1.8.2-2 (embed; bug #471158)
473            - gallery2 2.2.5-2 (embed; bug #471160)
474            - mahara 0.9.2-2 (embed; bug #471201)
475            - gosa 2.4beta1-1 (embed; bug #471200)
476    
477    TinyMCE
478            - wordpress 2.5.1-3 (embed; bug #478257)
479            - moodle <unfixed> (embed; bug #507185)
480            - knowledgeroot <unfixed> (embed)
481            - joomla <itp> (bug #326398)
482            - mahara 1.2.6-1 (embed; #597752)
483            - glpi 0.80.7-2
484    
485    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
486            - scite <unfixed> (embed)
487            - qscintilla <unfixed> (embed)
488            - qscintilla2 <unfixed> (embed)
489            - geany <unfixed> (fork)
490            - anjuta <unfixed> (embed)
491            - sdlbasic <unfixed> (embed)
492    
493    libphp-adodb
494            - moodle <unfixed> (embed; bug #507185)
495            NOTE: also AdoDB-XML Schema
496            - gallery2 <unfixed> (embed)
497            - phppgadmin <unfixed> (embed)
498            - egroupware <unfixed> (embed)
499            - phpwiki <unfixed> (embed)
500            - torrentflux 2.0beta1-2 (embed)
501            - ipplan <unfixed> (embed)
502            - typo3-src <unfixed> (embed)
503            - cacti <unknown> (embed)
504            [sarge] - cacti <unfixed> (embed)
505            NOTE: dependency exists, but internal version is used
506            - gforge 4.7~rc2-6 (embed)
507            - mahara <unfixed> (embed)
508    
509    gzip
510            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
511            - klibc <unfixed> (embed)
512            NOTE: based on linux-kernel gzip code
513            - busybox <unfixed> (embed)
514            - pristine-tar <unfixed> (modified-embed)
515            NOTE: compression code only, not uncompression
516            - ncompress <unfixed> (old-version)
517    
518    neon
519            - cadaver 0.22.3+debian-1 (embed; bug #188381)
520            - gnome-vfs2 <unfixed> (embed; bug #395874)
521            [etch] - litmus <unfixed> (embed; #395875)
522            - litmus <removed> (embed; #395875)
523            [sarge] - screem <unfixed> (embed)
524            - sitecopy 1:0.16.0-1 (embed; bug #395876)
525            [etch] - tla <unfixed> (embed; bug #395877)
526            [sarge] - tla <unfixed> (embed; bug #395877)
527    
528    libmodplug
529            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
530    
531    libvncserver
532            - vino <unfixed> (embed)
533    
534    putty
535            - filezilla <unfixed> (embed)
536    
537    tinyxml
538            - filezilla <unfixed>
539            - crystalspace <unfixed> (embed)
540            - libwfut <unfixed> (embed)
541            - rarian <unfixed> (embed)
542            - bulletml <unfixed> (embed)
543            - pokerth <unfixed> (embed)
544            - qutecom <unfixed> (embed)
545            - sofa-framework <unfixed> (embed)
546            - yate <unfixed> (embed)
547            - antigrav <unfixed> (embed)
548            - balder2d <unfixed> (embed)
549            - cal3d <unfixed> (embed)
550            - criticalmass <unfixed> (embed)
551            - ember <unfixed> (embed)
552            - epiphany <unfixed> (embed)
553            - gambit <unfixed> (embed)
554            - noiz2sa <unfixed> (embed)
555            - ogre <unfixed> (embed)
556            - opencity <unfixed> (embed)
557            - openmovieeditor <unfixed> (embed)
558            - pouetchess <unfixed> (embed)
559            - tecnoballz <unfixed> (embed)
560            - trigger-rally <unfixed> (embed)
561            - xmoto <unfixed> (embed)
562            - mapnik <unknown> (embed)
563            NOTE: uses a different XML parser by default
564            - rrootage 0.23a-6 <embed>
565            NOTE: links to libbulltetml
566            - boson <unknown> (embed)
567            NOTE: the embedded code is unused
568            - cppcheck <unfixed> (embed)
569            NOTE: introduced in 1.47, will use system's version in 1.48
570            [squeeze] - cppcheck <not-affected>
571    
572    gv
573            - evince <unfixed> (embed)
574            NOTE: ps/ tree from gv 3.5.8
575            NOTE: evince-gtk is affected (a component of evince source package)
576    
577    libXbae
578            - paw <unfixed> (embed)
579    
580    libgtkhtml
581            - claws-mail-extra-plugins <unfixed> (fork)
582    
583    libXaw
584            - paw <unfixed> (embed)
585            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
586            - ia32-libs <unfixable> (embed)
587    
588    libgd2
589            - graphviz 2.16-1 (embed)
590            NOTE: lib/gd seems to be 2.0.33
591            - wml 2.0.11ds2-1 (embed)
592            - libwmf <unfixed> (embed)
593            NOTE: derived from gd 1.6.3, but only used to write images
594            - plt-scheme <unfixed> (embed; bug #601525)
595            - texlive-bin 2009-1 (embed)
596    
597    rar
598            - unrar-nonfree <unfixed> (embed)
599    
600    unrar-free (maybe this code is derived from the original rar, too?)
601            - clamav <unfixed> (embed)
602            NOTE: seems to be disabled in default config
603    
604    mplayer (DirectMedia Object loader)
605            - xine-lib <unfixed> (embed)
606            NOTE: src/libw32dll/
607            - vlc <unfixed> (embed)
608            NOTE: modules/codec/dmo/
609            - mplayer 1.0~rc2-20 (embed)
610    
611    libwpd (WordPerfect converter)
612            - openoffice.org <unfixed> (embed)
613    
614    fsplib (http://sourceforge.net/projects/fsp/)
615            - gftp <unfixed> (embed)
616            NOTE: lib/fsplib version 0.3
617    
618    sprng
619            - tree-puzzle <unfixed> (embed)
620    
621    librpcsecgss
622            - krb5 <unfixed> (embed)
623    
624    jasper
625            - ghostscript 8.64~dfsg-2 (embed)
626    
627    libiris
628            - psi <unfixed> (embed)
629            - kdenetwork <unfixed> (embed)
630            NOTE: kopete embeds libiris but links dynamically to libidn
631            - kdegames <unfixed> (embed)
632            NOTE: ksirk/kde4
633    
634    libidn
635            - monotone 0.43-1 (embed)
636            - psi <unfixed> (embed)
637            NOTE: psi embeds libiris which embeds libidn
638            - kdegames <unfixed> (embed)
639            NOTE: kdegames/kde4 embeds libiris which embeds libidn
640            - ia32-libs <unfixable> (embed)
641    
642    lua5.1
643            - monotone 0.43-1 (embed)
644            - nmap 5.00-1 (embed; bug #527997)
645            [lenny] - nmap <unfixed> (embed; bug #527997)
646            - ocropus <unfixed> (embed)
647            - enigma <unfixed> (embed)
648            NOTE: requires lua built with C++
649            - freeciv <unfixed> (embed)
650            - spring <unfixed> (embed)
651    
652    libbotan
653            - monotone 0.43-1 (embed)
654    
655    NetXX
656            - monotone 0.43-1 (embed)
657    
658    libgc
659            - mono <unfixed> (embed)
660    
661    lzma
662            - p7zip <unfixed> (embed)
663            - xz-utils <unfixed> (fork)
664            - r-base <unfixed> (embed)
665            NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
666    
667    lzo
668            - grub2 <unfixed> (embed)
669    
670    yassl
671            - mysql-dfsg-5.0 <unfixed> (embed)
672            - mysql-5.1 <unfixed> (embed)
673    
674    pax code
675            - tar <unfixed> (embed)
676            - cpio <unfixed> (embed)
677    
678    t1lib
679            - tetex-bin 2.0.2-1 (embed)
680            - texlive-bin <unfixed> (embed; bug #667912)
681            NOTE: used only in xdivk (a dvi file viewer that the maintainer refuses to drop)
682            - grace 5.1.14-2 (embed)
683            - evince <unfixed> (embed)
684            NOTE: at least parseafm code, maybe more?
685            - vftool <unfixed> (embed)
686            NOTE: just parseafm code it seems
687    
688    guichan
689            - boswars <unfixed> (embed)
690            NOTE: maintainer notified us, working on it
691    
692    tolua
693            - boswars <unfixed> (embed)
694            NOTE: maintainer notified us, working on it
695            NOTE: actually tolua++
696            - ocropus <unfixed> (embed)
697            NOTE: actually tolua++
698            - freeciv <unfixed> (embed)
699            NOTE: actually tolua++
700            - enigma <unfixed> (embed)
701    
702    asio-dev
703            - luxrender <removed> (embed)
704    
705    xine-lib
706            - vlc <unfixed> (embed)
707            NOTE: only parts included in modules/access/rtsp
708    
709    netpbm
710            - tcl8.3 <unfixed> (embed)
711            - tcl8.4 <unfixed> (embed)
712            - tcl8.5 <unfixed> (embed)
713            NOTE: generic/tkImgGIF.c
714    
715    tk8.5
716            - tk8.0 <removed> (old-version)
717            - tk8.3 <unfixed> (old-version)
718            - tk8.4 <unfixed> (old-version)
719            - perl-tk <unfixable> (fork)
720    
721    samba
722            - mc 2:4.6.2~git20080311-1 (embed)
723            NOTE: maintainer is aware of this, currently searching a solution
724    
725    plib1.8.4c2
726            - boson <unfixed> (fork)
727            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
728    
729    fribidi
730            - quesoglc 0.7.2-2 (embed)
731    
732    glew
733            - quesoglc <unfixed> (embed; bug #489341)
734            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
735            - trigger 0.5.2.1-2 (embed)
736            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
737            - trigger-rally 0.5.2.1-2 (embed)
738            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
739            - chromium-browser 5.0.375.70~r48679-2
740    
741    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
742            - transcend <unfixed> (embed)
743            - cultivation <unfixed> (embed)
744            - passage <unfixed> (embed)
745            - gravitation <unfixed> (embed)
746    
747    tar
748            - libarchive <unfixed> (embed)
749            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
750    
751    cpio
752            - libarchive <unfixed> (embed)
753            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
754    
755    kde4libs
756            - kdelibs <unfixable> (old-version)
757    
758    webkit
759            - qt4-x11 <unfixed> (embed; bug #479851)
760            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
761            - kde4libs <unfixable> (fork)
762            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
763            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
764            - chromium-browser <unfixed> (fork)
765    
766    ftgl
767            - blender 2.46+dfsg-1 (embed)
768            - vtk <unfixed> (embed)
769            - paraview <unfixed> (embed)
770            NOTE: as part of its copy of vtk
771            - tulip <unfixed> (embed)
772            NOTE: depends on -dev but string found on binary
773            - root-system <unknown> (embed)
774            NOTE: depends on -dev package; not confirmed at source
775            - rgl <unknown> (embed)
776            NOTE: not sure if it is built
777            - mysql-gui-tools <unknown> (embed)
778            NOTE: not sure if it is built
779            - k3d <unfixed> (embed)
780            - extremetuxracer <unknown> (embed)
781            NOTE: not sure if it is built
782            - critterding <unknown> (embed)
783            - lightspeed <unfixed>
784            NOTE: depends on -dev but string found on binary
785    
786    wv
787            - abiword <unfixed>
788    
789    qemu
790            - kvm <removed> (embed; bug #543159)
791            - qemu-kvm <unfixed> (embed; bug #560853)
792            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
793            - xen-3 3.4.2-2 (embed; bug #560856)
794            - xen-unstable <unfixed> (embed; bug #560856)
795    
796    vgabios
797            - kvm <removed> (embed; bug #489442)
798            - qemu-kvm <unfixed> (embed)
799    
800    bochs
801            - kvm <removed> (embed; bug #489442)
802            - qemu-kvm <unfixed> (embed)
803    
804    speex
805            - vorbis-tools <unfixed> (embed)
806            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
807            - gst-plugins-good0.10 <unfixed> (embed)
808            - xine-lib <unfixed> (embed)
809            - libfishsound <unfixed> (embed)
810            - libannodex <removed> (embed)
811            - opal 3.4.2~dfsg-2 (embed)
812            - mumble 1.2.0~beta1-1 (embed)
813            - vlc <unfixed> (embed)
814            - xmms-speex <unfixed> (embed)
815            - libsdl-sound1.2 <unfixed> (embed)
816            - sweep <unfixed> (embed)
817    
818    libreadline
819            - magic <itp> (old-version)
820    
821    opcode
822            - ode <unfixed> (embed)
823            NOTE: opcode is not a package in debian, it is just embedded
824            NOTE: http://www.codercorner.com/Opcode.htm
825    
826    gimpact
827            - ode <unfixed> (embed)
828            NOTE: gimpact is not a package in debian, it is just embedded
829            NOTE: http://gimpact.sf.net
830    
831    mochikit
832            - mahara <unfixed> (embed)
833            NOTE: they require extra patches, still unmerged upstream
834            - ntop <unfixed> (embed)
835            - coherence 0.6.2-1 (embed)
836            - paste <unfixed> (embed)
837            - turbogears <unfixed> (embed)
838            - plone3 <removed> (embed)
839            - xulrunner <unfixed> (embed)
840            - libjifty-plugin-chart-perl <unfixed> (embed)
841            - sabnzbdplus <unfixed> (embed)
842            - tgmochikit <unfixed> (embed)
843    
844    prototypejs
845            - netbeans-ide 6.0.1+dfsg-2 (embed)
846            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
847            - webcit <unfixed> (embed; bug #555219)
848            - asterisk 1:1.6.2.0~rc3-1 (embed)
849            - libjson-ruby 1.1.4-1 (embed; bug #555224)
850            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
851            - horde3 <unfixed> (embed)
852            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
853            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
854            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
855            - ebug-http <unfixed> (embed; bug #555236)
856            - libaws 2.7-1 (embed; bug #555222)
857            - phpgedview <removed> (embed)
858            - poker-network 1.7.6-1 (embed; bug #555238)
859            - rails 2.1.0-6 (embed)
860            - wordpress 2.5.0-2 (embed; bug #555243)
861            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
862            TODO: search through all of the other zope packages
863            - ampache 3.4.1-2 (embed)
864            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
865            - hobix 0.5~svn20070319-4 (embed; bug #555247)
866            - zabbix 1.6.6-4 (embed; bug #555250)
867            - chora2 2.1.1+debian0-1 (embed; bug #555253)
868            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
869            - jscropperui 1.2.1-1 (embed; bug #555257)
870            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
871            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
872            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
873            - activeldap 1.2.1-1 (embed)
874            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
875            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
876            - otrs2 2.3.4-6 (embed; bug #555267)
877            - webcalendar 1.2~b1-2 (embed; bug #555269)
878            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
879            - jifty 0.90519-1 (embed; bug #555271)
880            - jquery 1.4-1 (embed; bug #555272)
881            - passenger 2.2.5debian1-1 (embed; bug #555273)
882            - plone3 <removed> (embed; bug #555275)
883            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
884            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
885            - xulrunner <unfixed> (embed)
886            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
887            - jclicmoodle <unfixed> (embed)
888            - git-cola <unfixed> (embed)
889    
890    gdb
891            - insight <unfixed> (embed)
892    
893    e2fsprogs
894            - ldiskfsprogs <unfixable> (fork)
895            - ia32-libs <unfixable> (embed)
896    
897    quazip (not packaged in Debian)
898            - qcake <unfixed> (embed)
899            NOTE: starting with upstream version 0.6.4
900    
901    exo
902            - pcmanfm <unfixed> (embed; bug #499677)
903            NOTE: slightly modified source code
904    
905    xfce4-taskmanager
906            - lxtask <unfixed> (embed)
907            NOTE: old fork, maybe outdated
908    
909    isync
910            - postler <unfixed> (embed; bug #628798)
911    
912    java
913            - openjdk-6 <unfixed>
914            - sun-java5 <unfixed>
915            - sun-java6 <unfixed>
916    
917    libphp-snoopy
918            - ampache 3.4.1-2 (embed; bug #504169)
919            - gforge 4.6.99+svn6094-2 (embed)
920            - mahara 1.0.5-2 (embed; bug #504170)
921            - pixelpost 1.7.1-5 (embed; bug #504171)
922            - mediamate 0.9.3.6-5 (embed; bug #504172)
923            - opendb <removed> (embed; bug #504173)
924            [etch] - opendb <unfixed> (embed; bug #504173)
925            - wordpress 2.5.1-9 (embed; bug #443948)
926            - moodle <unfixed> (embed; bug #507185)
927            [etch] - phpgroupware <unfixed> (embed)
928            NOTE: phpgroupware-felamimail
929            - magpierss 0.72-3 (embed; bug #431089)
930    
931    jquery
932            - jsonbot <unfixed> (embed; bug #625524)
933            - zekr <unfixed> (embed)
934            - wordpress <unknown> (embed)
935            - yocto-reader <unfixed> (embed)
936            - textpattern <unfixed> (embed)
937            - genshi 0.5.1-1 (embed)
938            NOTE: compressed file under examples/ dir
939            - prewikka <unfixed> (embed)
940            - libramaze-ruby <unfixed> (embed)
941            - drupal6 <unfixed> (embed)
942            - b2evolution <unfixed> (embed)
943            - wesnoth <unfixed> (embed)
944            - gammu 1.28.95-1 (embed)
945            - trac <unfixed> (embed; bug #645339)
946    
947    jquery-goodies
948            - horizon <unfixed> (embed)
949            NOTE: jquery.cookie.js, jquery.table-sorter.js, jquery-ui.min.js
950    
951    tablesorter (jquery plugin, not packaged yet)
952            - wesnoth <unfixed> (embed)
953    
954    kses
955            - wordpress <unfixed> (embed; bug #504242)
956            NOTE: their copy has all methods renamed to wp_<foo>
957            NOTE: kses isn't in Debian, RFP: #504240
958            - moodle <unfixed> (embed; bug #507185)
959            - egroupware <unfixed> (embed)
960    
961    magpierss
962            - wordpress <unfixed> (embed; bug #504242)
963            - moodle <unfixed>
964    
965    php-gettext
966            - wordpress 2.8.4-1 (embed; bug #504242)
967            - docbookwiki <unfixed> (embed)
968            - knowledgeroot 0.9.9.5-1
969            NOTE: non-free
970    
971    libphp-ixr (name may change, it is the Incutio XML-RPC)
972            - wordpress <unfixed> (embed; bug #504242)
973            NOTE: libphp-ixr isn't in Debian, RFP: #504236
974            - dokuwiki <unfixed> (embed)
975            - textpattern <unfixed> (embed)
976    
977    libphp-cas
978            - glpi 0.80.7-2 (embed)
979            - moodle <unfixed> (embed; bug #505984)
980    
981    scriptaculous (prototype.js is among the embeds in the following)
982            - glpi <unfixed> (embed)
983            - libaws <unfixed> (embed; bug #555222)
984            - op-panel <unfixed> (embed)
985            - symfony <unfixed> (embed)
986            NOTE: maintainer says there are extra incompatible changes required
987            - pixelpost 1.7.1-6 (embed)
988            - webhelpers <unfixed> (embed)
989            - qwik <removed> (embed; bug #555241)
990            - smokeping <unfixed> (embed)
991            - turba2 <unfixed> (embed)
992            - typo3-src 4.2.3-1 (embed)
993            - request-tracker3.6 <unfixed> (embed)
994            - request-tracker3.8 <unfixed> (embed)
995            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
996            - wordpress 2.5.0-2 (embed)
997            - libhtml-prototype-perl 1.48-3 (embed)
998    
999    libmarkdown-php
1000            - moodle <unfixed> (embed; bug #507185)
1001            - pixelpost 1.7.1-6 (embed)
1002    
1003    php-openid
1004            - wordpress-openid 3.3.2-1 (embed)
1005    
1006    geshi
1007            - dokuwiki 0.0.20080505-3.1 (embed)
1008            - pgfouine 1.0-1.1 (embed)
1009            - websvn 2.1.0-1 (embed)
1010    
1011    webcalendar
1012            - gforge 4.7~rc2-6 (embed; bug #504758)
1013    
1014    libical
1015            - kdepim <unknown> (fork)
1016            NOTE: fixed at some point during 4.0
1017            - kdepimlibs 4.2.0-1 (fork)
1018            - claws-mail-extra-plugins <unfixed> (fork)
1019    
1020    harfbuzz
1021            - qt4-x11 <unfixed> (embed)
1022            - pango1.0 <unfixed> (embed)
1023            - fontmatrix <unfixed> (embed)
1024    
1025    libzip
1026            - php5 <unfixable> (modified-embed)
1027            - odt2txt <unfixed> (embed; bug #523808)
1028    
1029    json.php (not packaged; should be replaced with php's built-in functions)
1030            - moodle <unfixed>
1031            - yui <unfixed>
1032            - gallery2 <unfixed>
1033            - dokuwiki <unfixed>
1034            - typo3-src <unfixed>
1035    
1036    php-fpdf
1037            - tcpdf <itp> (fork)
1038            - moodle <unfixed>
1039            - phpwiki <unfixed>
1040            - egroupware <unfixed>
1041            - ldap-account-manager <unfixed> (fork)
1042    
1043    tcpdf (itp: #495985)
1044            - moodle <unfixed>
1045            - phpmyadmin <unfixed>
1046    
1047    typo3
1048            - moodle <unfixed>
1049    
1050    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1051            - moodle <unfixed>
1052            - gosa <unfixed>
1053    
1054    php-ole (itp: #487558)
1055            - moodle <unfixed>
1056    
1057    pieforms (http://www.catalyst.net.nz)
1058            - mahara <unfixed>
1059    
1060    savant2 (http://phpsavant.com)
1061            - egroupware <unfixed>
1062    
1063    rssparser (http://nwow.org)
1064            - egroupware <unfixed>
1065            - phpgroupware <unfixed>
1066    
1067    lcms
1068            - openjdk-6 <unfixed> (fork)
1069            - gimp 2.4.0~rc2-2
1070            - ia32-libs <unfixable> (embed)
1071    
1072    libphp-phplayersmenu
1073            - diogenes <unfixed>
1074            - phpldapadmin <unfixed>
1075    
1076    libphp-pclzip
1077            - docvert <unfixed>
1078            - moodle <unfixed>
1079            - egroupware <unfixed>
1080    
1081    libphp-simplepie
1082            - dokuwiki <unfixed>
1083            - wordpress <unfixed>
1084    
1085    libphp-jpgraph
1086            - egroupware <unfixed>
1087    
1088    php-simpletest
1089            - moodle <unfixed>
1090    
1091    libpng
1092            - doxygen 1.5.6-2 (embed)
1093            NOTE: Might be fixed earlier. Lenny version recorded.
1094            - gdal 1.5.2-3 (embed)
1095            NOTE: Might be fixed earlier. Lenny version recorded.
1096            - iceweasel <not-affected> (uses xulrunner)
1097            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1098            - iceape 1.0.13~pre080614i-0etch1 (embed)
1099            - libfltk1.1 1.1.9-6 (embed)
1100            NOTE: Might be fixed earlier. Lenny version recorded.
1101            - libtk-img <unfixed> (embed)
1102            - htmldoc 1.8.27-3 (embed)
1103            NOTE: Might be fixed earlier. Lenny version recorded.
1104            - xulrunner 1.9.0.13-1 (embed)
1105            [lenny] - xulrunner 1.9.0.11-0lenny1
1106            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1107            - gamera 3.2.3-1 (embed)
1108            - freeimage <unfixed> (embed)
1109            - syslinux-common <unfixable> (embed)
1110            - tuxonice-userui <unfixed> (static)
1111            - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1112            NOTE: Might be fixed earlier. Lenny version recorded.
1113            - vice 1.22.dfsg1-0.1 (embed)
1114            NOTE: Might be fixed earlier. Lenny version recorded.
1115            - visualboyadvance 1.8.0-4 (embed)
1116            NOTE: Might be fixed earlier. Lenny version recorded.
1117            - ia32-libs <unfixable> (embed)
1118    
1119    irssi
1120            - silc-client <unfixed> (embed)
1121            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1122    
1123    extc
1124            - mtasc <unfixed> (embed)
1125            - haxe <unfixed> (embed)
1126    
1127    swflib
1128            - mtasc <unfixed> (embed)
1129            - haxe <unfixed> (embed)
1130    
1131    libitext-java
1132            - bouncycastle 2.1.4-1 (embed)
1133    
1134    python-ply
1135            - pyke <unfixed> (embed; bug #555363)
1136            - pywbem 0.7.0-4 (embed; bug #555364)
1137            - sepolgen <unfixed> (embed; bug #555365)
1138            - zope-textindexng3 <unknown> (embed)
1139            - iceweasel <not-affected> (uses xulrunner)
1140            - xulrunner <unknown> (embed)
1141            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1142    
1143    libdumbnet (libdnet upstream)
1144            - nmap <unfixed> (fork)
1145    
1146    gcc-4.4
1147            - gcc-mingw32 <unfixed> (embed)
1148    
1149    camlimages
1150            - advi <unfixed> (static; bug #550441)
1151    
1152    memcached
1153            - memcachedb <unfixed> (embed)
1154    
1155    yajl
1156            - argyll <unfixed> (embed; bug #544223)
1157            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1158    
1159    nusoap
1160            - gforge 4.8.2-1 (embed)
1161            - ampache <unfixed> (embed)
1162            - poker-network <unfixed> (embed)
1163            - moodle <unfixed> (embed)
1164            NOTE: code is not used when running under php5 and soap is enabled
1165            - phpwiki <unfixed> (embed)
1166            - gallery2 <unfixed> (embed)
1167            - typo3-src <unfixed> (embed)
1168            - phpgacl 3.3.7-7 (embed)
1169            - mantis 1.1.8+dfsg-1 (embed)
1170    
1171    libept
1172            - adept <unfixed> (embed; bug #540649)
1173    
1174    libvorbis
1175            - iceweasel <not-affected> (uses xulrunner)
1176            - xulrunner <unfixed> (embed; bug #540959)
1177            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1178            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1179            - iceape <unfixed> (embed)
1180            [etch] - iceape <not-affected> (introduced in 2.0)
1181            [lenny] - iceape <not-affected> (introduced in 2.0)
1182            - ia32-libs <unfixable> (embed)
1183            - libvorbisidec <unfixed> (modified-embed)
1184    
1185    cairo
1186            - iceweasel <not-affected> (uses xulrunner)
1187            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1188    
1189    liboggz
1190            - iceweasel <not-affected> (uses xulrunner)
1191            - xulrunner <unfixed> (embed; bug #540959)
1192            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1193            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1194            - iceape <unfixed> (embed)
1195            [etch] - iceape <not-affected> (introduced in 2.0)
1196            [lenny] - iceape <not-affected> (introduced in 2.0)
1197    
1198    liboggplay
1199            - iceweasel <not-affected> (uses xulrunner)
1200            - xulrunner <unfixed> (embed; bug #540959)
1201            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1202            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1203            - iceape <unfixed> (embed)
1204            [etch] - iceape <not-affected> (introduced in 2.0)
1205            [lenny] - iceape <not-affected> (introduced in 2.0)
1206    
1207    php-net-dnsbl
1208            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1209    
1210    php-onyx-rss
1211            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1212    
1213    php-text-wiki
1214            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1215    
1216    php-xml-rpc
1217            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1218    
1219    polarssl (does not have a shared library)
1220            - pdkim <itp> (embed; bug #543150)
1221            - xyssl <unfixed> (old-version)
1222    
1223    pidgin (libpurple)
1224            - gaim <removed> (old-version)
1225            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1226            - wengophone <unfixed> (embed; bug #601425)
1227    
1228    icu
1229            - webkit 1.0.1-1 (embed; bug #547214)
1230            - texlive-bin <unfixed> (fork)
1231            NOTE: texlive upstream working with icu upstream to merge their changes
1232            - chromium-browser 5.0.375.29~r46008-3
1233    
1234    cyrus-imapd-2.2
1235            - kolab-cyrus-imapd <unfixed> (fork)
1236            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1237    
1238    python-cxx-dev
1239            - freecad 0.9.2646.3-1 (embed; bug #547936)
1240    
1241    zipios++
1242            - freecad 0.9.2646.3-1 (embed; bug #547941)
1243            - enigma 0.92.3-3 (embed)
1244            NOTE: likely fixed earlier, marking etch's version as fixed
1245    
1246    linux-2.6
1247            - kvm <removed> (embed; bug #549973) [./kernel/*]
1248            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1249            - kernel-source-2.6.8 <removed> (old-version)
1250            - kernel-source-2.4.27 <removed> (old-version)
1251            - kernel-source-2.4.24 <removed> (old-version)
1252            - kernel-source-2.2.25 <removed> (old-version)
1253            - kernel-source-2.2.20 <removed> (old-version)
1254    
1255    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1256            - kvm <removed> (embed) [./libfdt/*]
1257            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1258    
1259    qweb (not packaged)
1260            - ajaxterm <unfixed>
1261    
1262    opensaml2
1263            - opensaml <removed> (old-version)
1264    
1265    shibboleth-sp2
1266            - shibboleth-sp <removed> (old-version)
1267    
1268    tuxonice-userui
1269            - suspend2-userui <removed> (old-version)
1270    
1271    expat
1272            - w3c-libwww <removed> (embed; bug #551941)
1273            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1274            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1275            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1276            - python2.4 <unfixable> (embed; bug #553403)
1277            - python2.7 2.7-6 (embed)
1278            - mcabber 0.10.0-1 (low; bug #601053)
1279            - python-4suite <unfixed> (embed; bug #516935)
1280            - wxwindows2.4 <removed> (embed)
1281            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1282            - wxwidgets2.8 2.8.10.1-2 (embed)
1283            - albert <unfixed> (embed; bug #600974)
1284            - celementtree 1.0.5-8 (embed)
1285            NOTE: Maybe that was fixed even earlier
1286            - centerim <unfixed> (embed; bug #559783)
1287            - audacity 1.3.2-1 (embed)
1288            - matanza <unfixed> (embed)
1289            - tdom 0.8.3~20080525-1 (embed)
1290            - udunits 2.1.8-4 (embed)
1291            - apr-util 1.2 (embed)
1292            - ayttm <unfxed> (embed; bug #561006)
1293            - cableswig <unfixed> (embed)
1294            - cadaver <unfixed> (embed)
1295            - cmake 2.6.0-6 (embed)
1296            - coin3 <unfixed> (embed)
1297            - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1298            NOTE: Might be fixed earlier. Lenny version recorded.
1299            - dasher 4.7.3-1 (embed)
1300            NOTE: Might be fixed earlier. Lenny version recorded.
1301            - emboss 6.3.1-1 (embed)
1302            - gdcm 2.0.14-2 (embed)
1303            - ghostscript 8.71~dfsg-2 (embed)
1304            - grmonitor <removed> (embed)
1305            - iceape <unfixed> (embed)
1306            - insighttoolkit 3.16.0-1 (embed)
1307            NOTE: insighttoolkit might've been fixed earlier
1308            - jabber 1.4.3-3.4 (embed)
1309            NOTE: Might be fixed earlier. Lenny version recorded.
1310            - libparagui1.1 1.0.2-1 (embed)
1311            - libspiff1 0.8.3-1 (embed)
1312            NOTE: Might be fixed earlier. Lenny version recorded.
1313            - paraview 3.6.2-1 (embed)
1314            - poco 1.3.6p1-1 (embed)
1315            - scorched3d 41.3dfsg-1+b1 (embed)
1316            NOTE: Might be fixed earlier. Lenny version recorded.
1317            - simgear <unfixed> (embed)
1318            - sitecopy 1:0.16.0-1
1319            - smart <unfixed> (embed)
1320            NOTE: smart embeds celementree, and it includes expat
1321            - swish-e <not-affected> (Linked against libxml, which is used instead)
1322            - tla 1.3.5+dfsg-15 (embed)
1323            - vtk 4.1.20030227-1 (embed)
1324            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1325            - xmlrpc-c <unfixed> (embed)
1326            - iceweasel <unfixed> (embed)
1327            - kompozer <unfixed> (embed)
1328            - vxl 1.13.0-2 (embed)
1329            - xulrunner <unfixed> (embed)
1330            - xmame 0.106-2.1 (embed)
1331            NOTE: Might be fixed earlier. Lenny version recorded.
1332            - apache2 2.2 (embed)
1333            - texlive-bin <not-affected> (Embedded code not compiled in)
1334            - vnc4 <unfixed> (embed)
1335            - xotcl 1.6.6-1 (embed)
1336            - chromium-browser 5.0.375.29~r46008-3
1337            - ia32-libs <unfixable> (embed)
1338    
1339    xerces-c
1340            - xerces-c2 <unfixed> (old-version)
1341            - xerces27 <removed> (old-version)
1342    
1343    md5 (RSA's version; not the gnu version provided by coreutils)
1344            - w3c-libwww <removed> (embed; bug #551942)
1345            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1346    
1347    libparagui1.1
1348            - asc <unfixable> (fork)
1349    
1350    enet
1351            - sauerbraten <unfixed> (embed; #497194)
1352    
1353    eglibc
1354            - glibc <removed> (old-version)
1355            - mksh <unfixable> (static)
1356              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1357    
1358    galib
1359            - gamera 3.2.3-1 (embed)
1360    
1361    configobj
1362            - bzr <unfixed> (embed; bug #555336)
1363            - elisa <unfixed> (embed; bug #555337)
1364            - gaupol <unfixed> (embed; bug #555338)
1365            - ipython <unfixed> (embed; bug #555339)
1366            - pida <unfixed> (embed; bug #555340)
1367            - psychopy <unfixed> (embed; bug #555341)
1368            - rest2web <unfixed> (embed; bug #555342)
1369            - auth2db <unknown> (embed)
1370            - dynagen <unknown> (embed)
1371            - iceweasel <unknown> (embed)
1372            - sabnzbdplus <unknown> (embed)
1373            - xulrunner <unknown> (embed)
1374            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1375    
1376    python-clientform
1377            - bibus <unfixed> (embed; bug #555332)
1378            - zope2.10 <unfixed> (embed; bug #555333)
1379            - zope2.11 <removed> (embed; bug #555334)
1380            - python-mechanize <unknown> (embed)
1381            - twill <unknown> (embed)
1382    
1383    python-mechanize
1384            - zope2.10 <unfixed> (embed; bug #555337)
1385            - zope2.11 <removed> (embed; bug #555338)
1386            - twill <unknown> (embed; bug #555339)
1387    
1388    pexpect
1389            - duplicity 0.6.06-1 (embed; bug #555361)
1390            - hplip <unfixed> (embed; bug #555362)
1391            - smart <unfixed> (embed; bug #555363)
1392    
1393    pyparsing
1394            - bauble <unfixed> (embed; bug #555366)
1395            - boa-constructor 0.6.1-8 (embed; bug #555367)
1396            - calibre <unfixed> (embed; bug #555368)
1397            - matplotlib <unfixed> (embed; bug #531024)
1398            - zhpy 1.7.3.1-1 (embed; bug #555370)
1399            - polybori <unknown> (embed)
1400            - python-whoosh <unknown> (embed)
1401            - twill <unknown> (embed)
1402            - zope-textindexng3 <unknown> (embed)
1403    
1404    python-pysqlite2
1405            - python2.4 <unfixed> (embed; bug #553403)
1406            - python2.5 <unfixed> (embed; bug #553403)
1407    
1408    celementtree
1409            - python2.5 <unfixed> (embed)
1410            - smart <unfixed> (embed)
1411    
1412    elementtree
1413            - python2.5 <unfixed> (embed)
1414            - python2.6 <unfixed> (embed)
1415            - bzr <unfixed> (embed; bug #555343)
1416            - gedit 2.28.2-1 (embed; bug #555344)
1417            - smart <unfixed> (embed)
1418            - solfege <unfixed> (embed; bug #555345)
1419            - w3af <unfixed> (embed; bug #555346)
1420            - python-qt4 <unknown> (embed)
1421            - sphinx <unknown> (embed)
1422            - python-nltk <itp> (embed)
1423    
1424    python2.5
1425            - python2.4 <unfixed> (old-version)
1426            - jython <unfixed> (embed)
1427            NOTE: embeds many stdlib modules
1428            - python-django <unfixed> (embed; bug #555419)
1429            NOTE: embeds stdlib modules: doctest, decimal
1430            - gamera 3.2.3-1 (embed)
1431            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1432            - boa-constructor <unfixed> (embed; bug #555426)
1433            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1434            - nicotine <unfixed> (embed; bug #555427)
1435            NOTE: embeds stdlib modules: ConfigParser
1436            - museek+ <unfixed> (embed; bug #555428)
1437            NOTE: embeds stdlib modules: ConfigParser
1438            - vegastrike-data <removed> (embed)
1439            NOTE: embeds many stdlib modules
1440            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1441            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1442            - config-manager <unfixed> (embed; bug #555423)
1443            NOTE: embeds stdlib modules: optparse
1444            - jhbuild 2.28.0-1 (embed; bug #555421)
1445            NOTE: embeds stdlib modules: optparse, subprocess
1446            - smart <unfixed> (embed; bug #555432)
1447            NOTE: embeds stdlib modules: optparse
1448            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1449            NOTE: embeds stdlib modules: doctest
1450            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1451            NOTE: embeds stdlib modules: doctest
1452            - distribute <unfixed> (embed)
1453            NOTE: embeds stdlib modules: doctest
1454            - python-setuptools <unfixed> (embed; bug #555435)
1455            NOTE: embeds stdlib modules: doctest
1456            - zope.testing <unfixed> (embed; bug #555436)
1457            NOTE: embeds stdlib modules: doctest
1458            - translate-toolkit <unfixed> (embed; bug #555422)
1459            NOTE: embeds stdlib modules: textwrap, contextlib
1460            - libtpclient-py <unfixed> (embed; bug #555424)
1461            NOTE: embeds stdlib modules: subprocess
1462            - grass <unfixed> (embed; bug #555425)
1463            NOTE: embeds stdlib modules: subprocess
1464            - coherence <unfixed> (embed; bug #555429)
1465            NOTE: embeds stdlib modules: uuid
1466            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1467            NOTE: embeds stdlib modules: uuid
1468            - setroubleshoot <removed> (embed; bug #555431)
1469            NOTE: embeds stdlib modules: uuid
1470            - linkchecker <unfixed> (embed; bug #555414)
1471            NOTE: embeds msgfmt.py script
1472            - imdbpy <unfixed> (embed)
1473            NOTE: embeds msgfmt.py script
1474            - kiwi <unfixed> (embed)
1475            NOTE: embeds msgfmt.py script
1476            - moin <unfixed> (embed)
1477            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1478            - plone3 <removed> (embed)
1479            NOTE: embeds msgfmt.py script
1480            - roundup <unfixed> (embed)
1481            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1482            - rednotebook <unfixed> (embed; bug #555415)
1483            NOTE: embeds msgfmt.py script
1484            - turbogears <unfixed> (embed)
1485            NOTE: embeds msgfmt.py script
1486            - elisa <unfixed> (embed)
1487            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1488            - calibre <unfixed> (embed)
1489            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1490            - mailman 1:2.1.13-1 (embed; #555416)
1491            NOTE: embeds msgfmt.py script
1492            - python-docutils <unknown> (embed)
1493            NOTE: embeds stdlib modules: optparse, textwrap
1494            - python-imaging <unknown> (embed)
1495            NOTE: embeds stdlib modules: doctest
1496            - python-mechanize <unknown> (embed)
1497            NOTE: embeds stdlib modules: doctest
1498            - twill <unknown> (embed)
1499            NOTE: embeds stdlib modules: subprocess
1500            - zeroc-ice <unknown> (embed)
1501            NOTE: embeds stdlib modules: subprocess
1502            - wxwidgets2.8 <unknown> (embed)
1503            NOTE: embeds stdlib modules: subprocess
1504            - cycle <unknown> (embed)
1505            NOTE: embeds msgfmt.py script
1506            - deluge <unknown> (embed)
1507            NOTE: embeds msgfmt.py script
1508            - opendict <unknown> (embed)
1509            NOTE: embeds msgfmt.py script
1510            - openerp-client <unknown> (embed)
1511            NOTE: embeds msgfmt.py script
1512            - rapidsvn <unknown> (embed)
1513            NOTE: embeds msgfmt.py script
1514            - wammu <unknown> (embed)
1515            NOTE: embeds msgfmt.py script
1516            - gaphor <unknown> (embed)
1517            NOTE: embeds msgfmt.py script
1518            - pida <unknown> (embed)
1519            NOTE: embeds msgfmt.py script
1520            - python-formencode <unknown> (embed)
1521            NOTE: embeds msgfmt.py script
1522            - duplicity <unfixed> (embed)
1523            NOTE: embeds stdlib module: urlparse, tarfile
1524            - pygopherd <unfixed> (embed)
1525            NOTE: embeds stdlib module: zipfile
1526    
1527    argparse
1528            - twill <unfixed> (embed; bug #555347)
1529            - ipython <unfixed> (embed; bug #555348)
1530    
1531    coherence
1532            - elisa <unfixed> (embed; bug #555335)
1533    
1534    simpletal
1535            - plastex <unfixed> (embed; bug #555371)
1536    
1537    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1538            - postr <unfixed> (embed)
1539            - elisa <unfixed> (embed)
1540    
1541    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1542            - apertium-tolk <unfixed> (embed)
1543            - ipython <unfixed> (embed)
1544            - virtaal <unfixed> (embed)
1545    
1546    distribute
1547            - setuptools <removed> (old-version)
1548    
1549    rails
1550            - jruby1.2 <removed> (embed) [./bench/rails/*]
1551            NOTE: jruby is in non-free, it probably includes rails too
1552            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1553            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1554            - thin <unfixed> (embed) [./spec/rails_app/*]
1555            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1556            NOTE: be dangerous if developers are naively basing their code off of the examples
1557            NOTE: prototype.js is among the example files
1558    
1559    lucene2 (prototype.js is among the embeds in the following)
1560            - lucene <unfixed> (old-version)
1561            - pylucene <unfixed> (embed)
1562            - libpdfbox-java <unfixed> (embed)
1563            - libfontbox-java <unfixed> (embed)
1564            - libjempbox-java <unfixed> (embed)
1565            - solr <unfixed> (embed)
1566    
1567    unicode-data
1568            - syslinux <unfixed> (embed)
1569            - camomile <unfixed> (embed)
1570            - fribidi <unfixed> (embed)
1571            - m17n-db <unfixed> (embed)
1572            - sbcl <unfixed> (embed)
1573            - heimdal <unfixed> (embed)
1574            - icu <unfixed> (embed)
1575            - icu4j <unfixed> (embed)
1576            - krb5 <unfixed> (embed)
1577            - moodle <unfixed> (embed)
1578            - openldap <unfixed> (embed)
1579            - pike7.6 <unfixed> (embed)
1580            - samba <unfixed> (embed)
1581            - samba4 <unfixed> (embed)
1582            - cmucl <unfixed> (embed)
1583            - typo3-src <unfixed> (embed)
1584            - mauve <unfixed> (embed)
1585            - texlive-bin <unfixed> (embed)
1586            - ypsilon <unfixed> (embed)
1587            - jeuclid <unfixed> (embed)
1588            - charmap.app <unfixed> (embed)
1589            - clisp <unfixed> (embed)
1590            - gnulib <unfixed> (embed)
1591            - opensrs-client <unfixed> (embed)
1592            - saxonb <unfixed> (embed)
1593            - rails <unfixed> (embed)
1594    
1595    feedparser
1596            - rawdog <unfixed> (embed; bug #383422)
1597            - miro <unfixed> (embed; bug #555351)
1598            - calibre <unfixed> (embed; bug #555352)
1599            - freevo <unfixed> (embed; bug #555353)
1600            - pida <unfixed> (embed; bug #555354)
1601            - planet-venus <unfixed> (embed; bug #555355)
1602            - plone3 <removed> (embed; bug #555356)
1603            - exaile 0.2.14+debian-1 (embed)
1604            - screenlets 0.1.2-3 (embed)
1605            NOTE: included twice
1606    
1607    agg:
1608            - matplotlib <unfixed> (embed: bug #377271)
1609            - contextfree <unfixed> (embed)
1610            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1611            - exactimage <unfixed> (embed)
1612            - python-enable <unfixed> (embed)
1613            - mapnik 0.5.1-3 (embed)
1614            NOTE: links statically to agg, but shared library is not available (bug #377271)
1615    
1616    vtk
1617            - paraview <unfixable> (embed; bug #495426)
1618            - libmesh <unfixed>
1619            NOTE: embeds exodus; not sure if there's a version external to vtk
1620    
1621    txt2tags
1622            - rednotebook <unfixed> (embed)
1623    
1624    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1625            - gajim <unfixed> (embed)
1626            - emesene <unfixed> (embed)
1627            - convirt <unfixed> (embed)
1628            - pida <unfixed> (embed)
1629            - rednotebook <unfixed> (embed)
1630    
1631    horde3 (prototype.js is among the embeds in the following)
1632            - mnemo2 <unfixed> (embed)
1633            - nag2 <unfixed> (embed)
1634            - wordpress <unfixed> (embed)
1635            NOTE: Text_Diff (wp-includes/Text/Diff*)
1636    
1637    cimg
1638            - gmic <unfixed> (embed)
1639    
1640    mootools
1641            - kdenetwork <unfixed> (embed)
1642            - gallery <unfixed> (embed)
1643            - jspwiki <unfixed> (embed)
1644            - vdr-plugin-live <unfixed> (embed)
1645            - perl-doc-html <unfixed> (embed)
1646    
1647    openldap
1648            - openldap2.3 <removed> (old-version)
1649            - ia32-libs <unfixable> (embed)
1650    
1651    grub2
1652            - grub <unfixed> (old-version)
1653    
1654    gnupginterface
1655            - duplicity <unfixed> (embed)
1656    
1657    python-dateutil
1658            - awn-extras-applets <unfixed> (embed)
1659            - matplotlib <unknown> (embed)
1660    
1661    cups
1662            - cupsys <removed> (old-version)
1663            - ia32-libs <unfixable> (embed)
1664    
1665    yui
1666            - bcfg2 <not-affected> (present in source but not included in any binary files)
1667            - serendipity 1.5.3-1 (embed; bug #557746)
1668            - moodle 1.8.2.dfsg-5 (embed)
1669            - jifty 0.91117-1 (embed; bug #557748)
1670            - webgui 7.7.26-1 (embed)
1671            - loggerhead 1.17-1 (embed)
1672            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1673    
1674    quake3 (vanilla source not packaged in debian)
1675            - openarena <unfixable> (fork)
1676    
1677    quake2 (vanilla source not packaged in debian)
1678            - alien-arena <unfixable> (fork)
1679            - warsow <unfixable> (fork)
1680    
1681    quake (vanilla source not packaged in debian)
1682            - darkplaces <unfixable> (fork)
1683            - quakespasm <unfixable> (fork)
1684            - nexuiz 2.5.2+dp-1 (old-version)
1685            NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1686    
1687    libtheora
1688            - iceweasel <not-affected> (uses xulrunner)
1689            - xulrunner <unfixed> (embed; bug #540959)
1690            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1691            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1692            - iceape <unfixed> (embed; bug #559276)
1693            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1694            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1695    
1696    dtoa
1697            - bfilter <unfixed> (embed)
1698            - cacao <removed> (embed)
1699            - cdrdao <unfixed> (embed)
1700            - classpath <unfixed> (embed)
1701            - freej <unfixed> (embed)
1702            - iceape <unfixed> (embed)
1703            - iceweasel <unfixed> (embed)
1704            - jscoverage <unfixed> (embed)
1705            - kde4libs <unfixed> (embed)
1706            - kdelibs <unfixed> (embed)
1707            - kompozer <unfixed> (embed)
1708            - libv8 <unfixed> (embed)
1709            - mono <unfixed> (embed)
1710            - newlib <unfixed> (embed)
1711            - nspr <unfixed> (embed)
1712            - php5 <unfixed> (embed)
1713            - polyml <unfixed> (embed)
1714            - qt4-x11 <unfixed> (embed)
1715            - rhino <unfixed> (embed)
1716            NOTE: code translated to Java
1717            - ruby1.8 <unfixed> (embed)
1718            - ruby1.9 <unfixed> (embed)
1719            - ruby1.9.1 <unfixed> (embed)
1720            - sdd <unfixed> (embed)
1721            - sfind <unfixed> (embed)
1722            - star <unfixed> (embed)
1723            - tinymux <unfixed> (embed)
1724            - virtualbox-ose <unfixed> (embed)
1725            - webkit <unfixed> (embed)
1726            - xulrunner <unfixed> (embed)
1727    
1728    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1729            - firegpg <unfixed> (embed)
1730            - enigmail <unfixed> (embed)
1731    
1732    ptmalloc (not packaged in Debian)
1733            - crystalspace <unfixed> (embed)
1734            - qt4-x11 <unfixed> (embed)
1735    
1736    svgalib
1737            - usplash <unfixed> (embed)
1738            - ia32-libs <unfixable> (embed)
1739    
1740    bogl
1741            - usplash <unfixed> (embed)
1742    
1743    taglist
1744            - usplash <unfixed> (embed)
1745    
1746    portaudio
1747            - audacity <unfixed> (embed; bug #323711)
1748    
1749    nyquist
1750            - audacity <unfixed> (embed)
1751            NOTE: embeds a forked nyquist with support for a shared library
1752    
1753    vamp-plugin-sdk
1754            - audacity <unfixed> (embed)
1755    
1756    wordpress
1757            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1758            - wordpress-mu <removed> (fork)
1759    
1760    php5
1761            - php4 <removed> (old-version)
1762    
1763    classpath
1764            - libgnucrypto-java <removed> (embed; bug #559788)
1765    
1766    libtool
1767            - apr <unfixed> (static; bug #489625)
1768            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1769            - arts <unfixed> (embed)
1770            - bochs 2.4.2-1 (embed; bug #560884)
1771            - camserv <unfixed> (embed)
1772            - collectd 4.8.2-1 (embed)
1773            - courier-authlib 0.58-4 (embed)
1774            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1775            - cvsnt 2.5.04.3236-1.2 (embed)
1776            - dico <not-affected> (Uses the system copy of ltdl)
1777            - freeradius 0.1+20010527-1 (embed)
1778            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1779            - ggobi 2.1.9~20091212-1 (embed)
1780            - glame 2.0.1-4 (embed)
1781            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1782            - gnash 0.8.7-2 (embed)
1783            - gnu-smalltalk <unfixed> (embed; bug #566777)
1784            - google-gadgets 0.10.5-0.3 (embed)
1785            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1786            - graphicsmagick 1.3.5-6 (embed)
1787            - graphviz 2.8-3 (embed)
1788            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1789            - guile-1.6 1.6.8-7 (embed)
1790            - hamlib 1.2.11-1 (embed)
1791            - hercules 3.06-1.2 (embed)
1792            - jags 1.0.4-3 (embed; bug #560864)
1793            - kdelibs <unfixed> (embed)
1794            - libannodex <removed> (embed)
1795            - libextractor 0.5.23+dfsg-4 (embed)
1796            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1797            - libtunepimp 0.5.3-7.3 (embed)
1798            - mp4h 1.3.1-4.1 (embed)
1799            - naim <removed> (embed)
1800            - parser-mysql <unfixed> (embed)
1801            - pinball 0.3.1-11 (embed)
1802            - redland <unfixed> (embed)
1803            - siproxd 1:0.8.1-2 (embed; bug #657070)
1804            - ski <unfixed> (embed)
1805            - synfig 0.62.00-1 (embed)
1806            - unixodbc 2.2.4-5 (embed)
1807            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1808            - clamav 0.95+dfsg-1 (embed)
1809            - imagemagick 6:6.2.3.1-1 (embed)
1810            - hypre 2.4.0b-5 (embed)
1811            - lam <unfixed> (embed)
1812            - openmpi <unfixable> (embed; bug #559386)
1813            - parser <unfixed> (embed)
1814            - pdsh 2.18-5 (embed; bug #560892)
1815            - sbnc 1.2-8 (embed)
1816            - sdcc <unfixed> (embed)
1817            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1818            - proftpd-dfsg <unfixed> (embed; bug #561748)
1819            - babel 1.4.0.dfsg-5 (embed)
1820            - libprelude 0.9.14-2 (embed)
1821            - heartbeat 2.1.4-7 (embed)
1822            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1823            NOTE: might've been fixed earlier
1824            - gcc-* <unknown> (embed)
1825            - ia32-libs <unfixable> (embed)
1826    
1827    ocamlgsl
1828            - orpie 1.5.1-7.1 (embed; bug #550058)
1829    
1830    xdotool
1831            - keynav <unfixed> (embed; bug #560103)
1832    
1833    bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1834            - supertuxkart <unfixed> (embed)
1835            - blender <unfixed> (embed)
1836            - critterding <unfixed> (embed)
1837            NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1838    
1839    ghostscript
1840            - gs-gpl <removed> (old-version)
1841    
1842    icedove
1843            - thunderbird <removed> (old-version)
1844    
1845    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1846            - jquery <unfixed> (embed)
1847    
1848    sed
1849            - ssed <unfixed> (fork)
1850    
1851    phpatomlib (http://code.google.com/p/phpatomlib)
1852            - wordpress <unfixed> (embed)
1853    
1854    Services_JSON (http://pear.php.net/package/Services_JSON)
1855            - wordpress <unfixed> (embed)
1856    
1857    phpass (http://www.openwall.com/phpass/)
1858            - gallery2 <unfixed> (embed)
1859            - wordpress <unfixed> (embed)
1860            - typo3-src <unfixed> (modified-embed)
1861            NOTE: file refers to drupal, maybe there's a copy somewhere there
1862            NOTE: a copyright owner search didn't match anything
1863            - libauthen-passphrase-perl <unfixable> (fork)
1864            NOTE: perl implementation of phpass
1865            - phpbb3 <unfixed>
1866            NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1867    
1868    squirrelmail
1869            - wordpress <unfixed> (embed)
1870            NOTE: class-pop3.php
1871    
1872    ezSQL (http://www.woyano.com/jv/ezsql)
1873            - wordpress <unfixable> (fork)
1874            NOTE: wp-db.php
1875    
1876    Diff.php (Clay Loveless' version/killersoft.com)
1877            - php-versioncontrol-svn <unfixed>
1878    
1879    libm (provided by libc)
1880            - spring <unfixed> (embed)
1881            NOTE: embedded by embedded copy of streflop
1882            - megaglest <unfixed> (embed)
1883            NOTE: embedded by embedded copy of streflop
1884            - aide <unfixed> (static)
1885            - busybox <unfixed> (static)
1886            - mindi-busybox <unfixed> (static)
1887            - qemu <unfixed> (static)
1888            NOTE: qemu-user-static
1889            - tuxonice-userui <unfixed> (static)
1890            - zsh <unfixed> (static)
1891            NOTE: zsh-static
1892            - tripwire <unfixed>
1893    
1894    streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1895            - spring <unfixed> (modified-embed)
1896            NOTE: old, modified version of streflop
1897            - megaglest <unfixed> (modified-embed)
1898            NOTE: megaglest uses the same streflop code as spring
1899    
1900    minizip
1901            - spring <unfixed> (embed)
1902    
1903    oscpack
1904            - spring <unfixed> (embed)
1905    
1906    hpiutil2
1907            - spring <unfixed> (embed)
1908    
1909    p7zip
1910            - spring <unfixed> (embed)
1911    
1912    pythonqt (doesn't seem to be python-qtN, unknown source)
1913            - fontmatrix <unfixed> (embed)
1914            - elmerfem <unfixed> (embed)
1915    
1916    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1917            - docvert <unfixed> (embed)
1918            - jifty <unfixed> (embed)
1919            - kdenetwork <unfixed> (embed)
1920            - mediatomb <unfixed> (embed)
1921            - plastex <unfixed> (embed)
1922            - plone3 <removed> (embed)
1923            - python-chaco <unfixed> (embed)
1924            - python-docutils <unfixed> (embed)
1925            - s5 <unfixed> (embed)
1926            - zope2.10 <unfixed> (embed)
1927            - zope2.11 <removed> (embed)
1928            - cython <not-affcted> (embed)
1929            NOTE: part of documentation, which is not installed into the binary package
1930    
1931    python-docutils
1932            - zope2.10 <unfixed> (embed)
1933            - zope2.11 <removed> (embed)
1934    
1935    tesseract
1936            - ocropus <unfixed> (static)
1937    
1938    antlr
1939            - kdevelop <unfixed> (embed)
1940    
1941    libxerces2
1942            - openjdk-6 <unfixed> (embed)
1943    
1944    kfreebsd-8
1945            - kfreebsd-7 <unfixed> (old-version)
1946            - kfreebsd-6 <removed> (old-version)
1947    
1948    ruby1.9.1
1949            - ruby1.9 <unfixed> (old-version)
1950            - ruby1.8 <unfixed> (old-version)
1951    
1952    maildrop
1953            - courier <unfixed> (embed) [./maildrop]
1954    
1955    glee
1956            - warzone2100 <not-affected> (embed)
1957    
1958    phing
1959            - symfony <unfixed> (embed)
1960    
1961    pake
1962            - symfony <unfixed> (embed)
1963    
1964    propel
1965            - symfony <unfixed> (embed)
1966    
1967    creole
1968            - symfony <unfixed> (embed)
1969    
1970    hfsutils
1971            - cdrkit <unfixed> (embed; bug #570187)
1972            NOTE: embeds hfsutils code in genisoimage
1973    
1974    cdrkit
1975            - grub2 <unfixed> (embed; bug #570156)
1976            NOTE: genisoimage imported into grub-mkisofs
1977    
1978    kdebase-workspace
1979            - kdebase <unfixed> (old-version)
1980    
1981    file
1982            - php5 <unfixable> (modified-embed)
1983            [lenny] - php5 <not-affected>
1984    
1985    cdb
1986            - php5 <unfixed> (embed)
1987    
1988    libmbfl (itp: #570708)
1989            - php5 <unfixed> (embed)
1990            NOTE: PHP is actually the current upstream, ITP is of that code
1991    
1992    libonig
1993            - php5 5.3.2-1 (embed)
1994    
1995    xmlrpc-epi
1996            - php5 <unfixed> (embed)
1997    
1998    swt-gtk
1999            - eclipse <unfixed> (embed; bug #538808)
2000    
2001    txt2html
2002            - wml 2.0.11ds2-1 (embed)
2003    
2004    ca-certificates
2005            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
2006    
2007    openexr
2008            - freeimage <unfixed> (embed)
2009    
2010    libmng
2011            - freeimage <unfixed> (embed)
2012    
2013    openjpeg
2014            - freeimage <unfixed> (embed)
2015    
2016    libjpeg6b
2017            - freeimage <unfixed> (embed)
2018            - ia32-libs <unfixable> (embed)
2019    
2020    libjpeg (don't know what exact version)
2021            - dcmtk <unfixed>
2022            - gdcm <unfixed>
2023            - insighttoolkit <unfixed>
2024            - openarena 0.8.5-5+exp1 (bug #495966)
2025            - outguess <unfixed>
2026            - squeak-vm <unfixed> (embed)
2027            - tremulous <unfixed>
2028            - tuxonice-userui <unfixed> (static)
2029            - fpc <unfixed> (static)
2030            - lazarus <unfixed> (static)
2031            NOTE: inherited from fpc, see #472304
2032            - mseide-msegui <unfixed> (static)
2033            NOTE: inherited from fpc, see #472304
2034            - easymp3gain <unfixed> (static)
2035            NOTE: inherited from fpc, see #472304
2036            - winff <unfixed> (static)
2037            NOTE: inherited from fpc, see #472304
2038            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2039    
2040    
2041    lxr
2042            - lxr-cvs <unfixed> (embed)
2043    
2044    libfile-copy-recursive-perl
2045            - r-base <unfixed> (embed; bug #577427)
2046            - r-base-core-ra <unfixed> (embed; bug #577429)
2047    
2048    delimmatch
2049            - r-base <unfixed> (embed; bug #577433)
2050            - r-base-core-ra <unfixed> (embed; bug #577434)
2051    
2052    libsmf (ITP: #572558)
2053            - denemo <unfixed> (embed)
2054            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2055    
2056    libselinux
2057            - dpkg 1.15.6 (static)
2058            - ia32-libs <unfixable> (embed)
2059    
2060    xinha (ITP: #479708)
2061            - horde3 <unfixed>
2062            - serendipity <unfixed>
2063            - openacs <unfixed>
2064            - dotlrn <unfixed>
2065    
2066    dvipng
2067            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2068    
2069    dvipdfmx
2070            - texlive-bin <unfixed> (embed)
2071            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2072    
2073    lcdf-typetools
2074            - texlive-bin 2009-1 (embed)
2075    
2076    tex4ht
2077            - texlive-bin 2009-1 (embed)
2078    
2079    freetype
2080            - texlive-bin 2009-1 (embed)
2081            - ia32-libs <unfixable> (embed)
2082    
2083    freetype2
2084            - texlive-bin 2009-1 (embed)
2085            - tuxonice-userui <unfixed> (static)
2086            - instantbird <unfixed>
2087            - qt4-x11 <unknown> (embed)
2088            - vtk <unknown> (embed)
2089            - paraview <unknown> (embed)
2090            NOTE: from embedded copy of vtk
2091    
2092    silgraphite
2093            - texlive-bin <unfixed> (embed)
2094    
2095    unzip
2096            - texlive-bin 2009-1 (embed)
2097    
2098    jbig2dec
2099            - ghostscript 8.71~dfsg2-1 (embed)
2100    
2101    libxml2
2102            - chromium-browser 5.0.375.29~r46008-1
2103            - ia32-libs <unfixable> (embed)
2104    
2105    protobuf
2106            - chromium-browser 5.0.375.70~r48679-2
2107    
2108    libv8
2109            - chromium-browser 5.0.375.38~r46659-1
2110    
2111    nspr
2112            - chromium-browser 5.0.375.29~r46008-3
2113            - ia32-libs <unfixable> (embed)
2114    
2115    yasm
2116            - chromium-browser 5.0.375.29~r46008-2
2117    
2118    libxslt
2119            - chromium-browser 5.0.375.29~r46008-1
2120            - ia32-libs <unfixable> (embed)
2121    
2122    miniupnpc
2123            - warzone2100 2.3.7-2
2124            NOTE: code still present in tarball but removed during build and unused
2125            - vino 3.2.2-1
2126            NOTE: code still present in tarball but removed during build and unused
2127    
2128    iniparser (not packaged in Debian; RFP bug #582657)
2129            - warzone2100 <unfixed> (modified-embed)
2130    
2131    pyglet
2132            - sympy <unfixed> (embed; bug #459716)
2133    
2134    mpmath
2135            - sympy <unfixed> (embed; bug #541746)
2136    
2137    openssh
2138            - libpam-ssh <unfixed> (embed; bug #598522)
2139    
2140    curl
2141            - cmake 2.6.0-6 (embed)
2142            NOTE: Might be fixed earlier. Lenny version recorded.
2143            - criticalmass <unfixed> (static; bug #599061)
2144            - wengophone 2.1.0~beta1-svn9983-1 (embed)
2145            - ia32-libs <unfixable> (embed)
2146    
2147    lib3ds
2148            - boson <unfixed> (embed; bug #600900)
2149            - openscenegraph <unfixed> (embed; bug #601181)
2150    
2151    xcftools
2152            - gnome-xcf-thumbnailer <unfixed> (embed)
2153    
2154    simplejson
2155            - exaile <unfixed> (embed; bug #604547)
2156    
2157    libasycns
2158            - loudmouth <unfixed> (embed; bug #566143)
2159    
2160    plplot
2161            - emboss <unfixed> (fork)
2162    
2163    acl
2164            - ia32-libs <unfixable> (embed)
2165    
2166    arts
2167            - ia32-libs <unfixable> (embed)
2168    
2169    attr
2170            - ia32-libs <unfixable> (embed)
2171    
2172    audiofile
2173            - ia32-libs <unfixable> (embed)
2174    
2175    avahi
2176            - ia32-libs <unfixable> (embed)
2177    
2178    celt
2179            - ia32-libs <unfixable> (embed)
2180    
2181    coreutils
2182            - ia32-libs <unfixable> (embed)
2183    
2184    cyrus-sasl2
2185            - ia32-libs <unfixable> (embed)
2186    
2187    db4.8
2188            - ia32-libs <unfixable> (embed)
2189    
2190    dbus
2191            - ia32-libs <unfixable> (embed)
2192    
2193    directfb
2194            - ia32-libs <unfixable> (embed)
2195    
2196    esound
2197            - ia32-libs <unfixable> (embed)
2198    
2199    fltk1.1
2200            - ia32-libs <unfixable> (embed)
2201    
2202    fontconfig
2203            - ia32-libs <unfixable> (embed)
2204    
2205    freeglut
2206            - ia32-libs <unfixable> (embed)
2207    
2208    gcc-3.3
2209            - ia32-libs <unfixable> (embed)
2210    
2211    gdbm
2212            - ia32-libs <unfixable> (embed)
2213    
2214    gnutls26
2215            - ia32-libs <unfixable> (embed)
2216    
2217    hal
2218            - ia32-libs <unfixable> (embed)
2219    
2220  zlib code: (separate between 1.2 and 1.1)  isdnutils
2221  dpkg          - ia32-libs <unfixable> (embed)
 rsync  
 mozilla-firefox  
 mozilla(?)  
 Linux kernels  
2222    
2223    jack-audio-connection-kit
2224            - ia32-libs <unfixable> (embed)
2225    
2226  libgadu/ekg:  keyutils
2227  centericq          - ia32-libs <unfixable> (embed)
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not packaged in Debian)  
2228    
2229    krb5
2230            - ia32-libs <unfixable> (embed)
2231    
2232  xmlrpc: (which package is the "origin" of this code?)  lesstif2
2233  drupal          - ia32-libs <unfixable> (embed)
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
2234    
2235    libaio
2236            - ia32-libs <unfixable> (embed)
2237    
2238  shtool: (affects build-time only)  libasyncns
2239  mysql-ocaml          - ia32-libs <unfixable> (embed)
 php4  
2240    
2241    libcap2
2242            - ia32-libs <unfixable> (embed)
2243    
2244  mozilla:  libdrm
2245  mozilla-firefox          - ia32-libs <unfixable> (embed)
 mozilla-thunderbird  
 nvu  
2246    
2247    libedit
2248            - ia32-libs <unfixable> (embed)
2249    
2250  xli:  libexif
2251  xloadimage          - ia32-libs <unfixable> (embed)
2252    
2253    libgcrypt11
2254            - ia32-libs <unfixable> (embed)
2255    
2256  lesstif: (beware: two different lesstif APIs supported in one package, 1.2 discarded upstream)  libgpg-error
2257  openmotif          - ia32-libs <unfixable> (embed)
 xfree86/xorg (in libxpm, still the case with x.org?  
2258    
2259    libgphoto2
2260            - ia32-libs <unfixable> (embed)
2261    
2262  kerberized apps with BSD origin:  libice
2263  krb4          - ia32-libs <unfixable> (embed)
2264  krb5  
2265  heimdal  libieee1284
2266            - ia32-libs <unfixable> (embed)
2267    
2268    libjpeg8
2269            - ia32-libs <unfixable> (embed)
2270    
2271    libnss-ldap
2272            - ia32-libs <unfixable> (embed)
2273    
2274    libogg
2275            - ia32-libs <unfixable> (embed)
2276    
2277    libpam-ldap
2278            - ia32-libs <unfixable> (embed)
2279    
2280    libsamplerate
2281            - ia32-libs <unfixable> (embed)
2282    
2283    libsdl1.2
2284            - ia32-libs <unfixable> (embed)
2285    
2286    libsm
2287            - ia32-libs <unfixable> (embed)
2288    
2289    libssh2
2290            - ia32-libs <unfixable> (embed)
2291    
2292    libtasn1-3
2293            - ia32-libs <unfixable> (embed)
2294    
2295    libx11
2296            - ia32-libs <unfixable> (embed)
2297    
2298    libx86
2299            - ia32-libs <unfixable> (embed)
2300    
2301    libxau
2302            - ia32-libs <unfixable> (embed)
2303    
2304    libxcb
2305            - ia32-libs <unfixable> (embed)
2306    
2307    libxcomposite
2308            - ia32-libs <unfixable> (embed)
2309    
2310    libxcursor
2311            - ia32-libs <unfixable> (embed)
2312    
2313    libxdamage
2314            - ia32-libs <unfixable> (embed)
2315    
2316    libxdmcp
2317            - ia32-libs <unfixable> (embed)
2318    
2319    libxext
2320            - ia32-libs <unfixable> (embed)
2321    
2322    libxfixes
2323            - ia32-libs <unfixable> (embed)
2324    
2325    libxi
2326            - ia32-libs <unfixable> (embed)
2327    
2328    libxinerama
2329            - ia32-libs <unfixable> (embed)
2330    
2331    libxmu
2332            - ia32-libs <unfixable> (embed)
2333    
2334    libxp
2335            - ia32-libs <unfixable> (embed)
2336    
2337    libxrandr
2338            - ia32-libs <unfixable> (embed)
2339    
2340    libxrender
2341            - ia32-libs <unfixable> (embed)
2342    
2343    libxss
2344            - ia32-libs <unfixable> (embed)
2345    
2346    libxt
2347            - ia32-libs <unfixable> (embed)
2348    
2349    libxtst
2350            - ia32-libs <unfixable> (embed)
2351    
2352    libxv
2353            - ia32-libs <unfixable> (embed)
2354    
2355    libxxf86vm
2356            - ia32-libs <unfixable> (embed)
2357    
2358    lzo2
2359            - ia32-libs <unfixable> (embed)
2360    
2361    mesa
2362            - ia32-libs <unfixable> (embed)
2363    
2364    mpg123
2365            - ia32-libs <unfixable> (embed)
2366    
2367    nas
2368            - ia32-libs <unfixable> (embed)
2369    
2370    nss
2371            - ia32-libs <unfixable> (embed)
2372    
2373    openal-soft
2374            - ia32-libs <unfixable> (embed)
2375    
2376    openssl
2377            - ia32-libs <unfixable> (embed)
2378    
2379    pam
2380            - ia32-libs <unfixable> (embed)
2381    
2382    popt
2383            - ia32-libs <unfixable> (embed)
2384    
2385    pulseaudio
2386            - ia32-libs <unfixable> (embed)
2387    
2388    sane-backends
2389            - ia32-libs <unfixable> (embed)
2390    
2391    sqlite3
2392            - ia32-libs <unfixable> (embed)
2393            - chromium-browser <unfixed> (embed)
2394    
2395    sysfsutils
2396            - ia32-libs <unfixable> (embed)
2397    
2398    tcp-wrappers
2399            - ia32-libs <unfixable> (embed)
2400    
2401    tdb
2402                  - thunar 1.2.1-3 (old-version)
2403            - ia32-libs <unfixable> (embed)
2404    
2405    tslib
2406            - ia32-libs <unfixable> (embed)
2407    
2408    unixodbc
2409            - ia32-libs <unfixable> (embed)
2410    
2411    xaw3d
2412            - ia32-libs <unfixable> (embed)
2413    
2414    xbitmaps
2415            - ia32-libs <unfixable> (embed)
2416    
2417    xcb-util
2418            - ia32-libs <unfixable> (embed)
2419    
2420    xcursor-themes
2421            - ia32-libs <unfixable> (embed)
2422    
2423    xft
2424            - ia32-libs <unfixable> (embed)
2425    
2426    dicomparser
2427            - vtk <unfixed>
2428            - paraview <unfixed>
2429            NOTE: as part of its copy of vtk
2430            - insighttoolkit <unfixed>
2431    
2432    proj
2433            - vtk <unfixed>
2434            - paraview <unfixed>
2435            NOTE: as part of its copy of vtk
2436            - therion <unfixed>
2437            - python-pyproj 1.8.6-1
2438    
2439    netcdf
2440            - vtk <unfixed>
2441            - paraview <unfixed>
2442            NOTE: as part of its copy of vtk
2443    
2444    insighttoolkit
2445            - vtk <unfixed> (embed)
2446            NOTE: embeds at least MetaIO
2447            - paraview <unfixed> (embed)
2448            NOTE: embeds at least MetaIO
2449    
2450    gl2ps
2451            - vtk <unfixed>
2452            - paraview <unfixed>
2453            NOTE: as part of its copy of vtk
2454            - avogadro <unfixed>
2455            - gabedit <unknown> (embed)
2456            NOTE: not sure if it is built
2457            - drawxtl <unfixed> (embed)
2458            - rgl <unfixed> (embed)
2459            - gmsh <unfixed>
2460            - mcrl2 <unfixed> (embed)
2461            - mysql-gui-tools <unknown> (embed)
2462            NOTE: not sure if it is built
2463            - opencascade <unfixed> (embed)
2464            - orsa <unfixed> (embed)
2465            - qtiplot <unfixed> (embed)
2466            - qwtplot3d <unfixed> (embed)
2467            - root-system <unknown> (embed)
2468            NOTE: not sure if it is built
2469            - scilab <unfixed> (embed)
2470            - snd <unknown> (embed)
2471            NOTE: not sure if it is built
2472            - xmakemol <unfixed> (embed)
2473    
2474    qwtplot3d
2475            - qtiplot <unfixed>
2476    
2477    parseafm (from Adobe)
2478            - vftool <unfixed>
2479            - gnustep-back <unknown>
2480            NOTE: looks like it isn't built
2481            - evince <unfixed>
2482    
2483    bugzilla
2484            - perl <unknown>
2485            - libcgi-pm-perl <unknown>
2486    
2487    isc-dhcp
2488            - dhcp3 <unfixable> (old-version)
2489            - dhcp <unfixable> (old-version)
2490    
2491    chipmunk (ITP: #623274)
2492            - xmoto <unfixed> (embed; bug #623299)
2493            - libtuxcap <unfixed> (embed; bug #623300)
2494    
2495    libsigsegv
2496            - gawk 3.1.8+dfsg-0.1
2497    
2498    pdfrw
2499            - rst2pdf <unfixed> (embed; bug #638607)
2500    
2501  grip: (which pkg is the origin?)  bind9
2502  libcdaudio          - isc-dhcp <unfixed> (embed; bug #643569)
2503  grip          NOTE: introduced in upstream 4.2 series
 gnome-vfs (vfs2 as well?)  
2504    
2505    qof
2506            - gnucash <unfixed> (embed; bug #556245)
2507    
2508  fudforum:  feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2509  phpgroupware-fudforum          - megaglest <unfixed> (modified-embed)
 egroupware-fudforum  
2510    
2511    acsccid
2512            - ccid 1.3.11 <unfixed> (fork)
2513            - openct <unfixed> (modified-embed)
2514            - towitoko <unfixed> (modified-embed)
2515    
2516  cvs:  ccid
2517  gcvs (at least an additional script is included, check if there's more)          - openct <unfixed> (modified-embed)
2518            - towitoko <unfixed> (modified-embed)
2519    
2520  pcre:  msmtp
2521  gnumeric(?)          - mpop <unfixed> (embed)
 python  
 php4 (src included, but Debian package links dynamically)  

Legend:
Removed from v.1757  
changed lines
  Added in v.19026

  ViewVC Help
Powered by ViewVC 1.1.5