/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 5564 by alec-guest, Wed Mar 21 01:24:37 2007 UTC revision 18637 by pabs, Sun Mar 11 07:44:21 2012 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (will be replaced by evince in Gnome 2.12)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (current poppler source package has a ported version, pinged maintainer)  to be applied in multiple source packages.
7  kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26    The srcpkg might be some string to identify the code if there is no
27    specific source package.
28    
29    Everything up to the next line is ignored.
30    ---BEGIN
31  poppler  poppler
32  koffice/kword (upstream is working on using poppler, probably not in time for Etch)          - pdftohtml <unknown>
33  libextractor (uses internal pdf decoder since 0.5.12-1)          [sarge] - pdftohtml <unfixed>
34  pdfkit.framework (links to poppler since 0.8-4)          [etch] - pdftohtml <unfixed>
35            NOTE: has been replaced by poppler-utils
36  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37  dpkg          - texlive-base 3.0-12 (embed)
38  rsync (somehow derived code base)          - texlive-bin 2007-1 (embed)
39  mozilla(?)          - koffice 1:2.0.0-1 (embed; bug #436163)
40  Linux kernels          - libextractor 0.5.12-1 (embed)
41  pvpgn (links dynamically since 1.7.8-2)          NOTE: libextractor is using its own pdf decoder now
42  mrtg (links dynamically since 2.12.2-1)          - ipe <unfixed> (embed)
43  rpm          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45  libbz2:          - pdfedit <unfixed> (embed; bug #510794)
46  dpkg (statically linked)          - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48  libgadu/ekg:  
49  centericq  pdksh (no longer developed since 1999)
50  gaim          - mksh <unfixable> (fork)
51  kopete (ships the code, but links dynamically in the Debian package)          - posh <unfixable> (fork)
52  kadu (not packaged in Debian)  
53  GNU gadu (not yet packaged in Debian)  ppmd
54            - libcomplearn-mod-ppmd <unfixed> (fork)
55  xmlrpc: (which package is the "origin" of this code?)          NOTE: discussion in #458152
56  drupal  
57  phpgroupware  libevent
58  egroupware          - transmission 1.71-1 (embed; bug #529372)
59  phpwiki          - chromium-browser 5.0.375.29~r46008-1
60  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - dnsproxy <unknown> (embed)
61  tikiwiki  
62    lrmi
63  shtool: (affects build-time only)          - read-edid 2.0.0-1 (embed; bug #495131)
64  mysql-ocaml          - s3switch <unfixed> (embed)
65  php4          - xresprobe <unfixed> (embed)
66            - zhcon <unfixed> (embed)
67  mozilla:  
68  mozilla-firefox  php-htmlpurifier
69  mozilla-thunderbird          - mahara 1.2.5-1 (embed)
70  firefox (to be removed)          - knowledgeroot 0.9.9.5-5 (embed)
71  thunderbird (to be removed)          - moodle <unfixed> (embed)
72  iceweasel  
73  iceape  peercast
74  icedove          - gnome-peercast <removed> (embed)
75            [etch] - gnome-peercast <unfixed> (embed)
76    
77    silc-toolkit
78            - silc-client 1.1~beta6-1 (embed)
79    
80    icclib
81            - ghostscript <unfixed> (embed)
82            - argyll <unfixed> (embed)
83    
84    libusb
85            - argyll <unfixed> (embed)
86            - ia32-libs <unfixable> (embed)
87    
88    dietlibc
89            - ccontrol 0.9.1+20071204-1 (static)
90            - mksh <unfixable> (static)
91            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
92    
93    libmikmod
94            - pysol-sound-server <unfixed> (modified-embed)
95            - sdl-mixer1.2 <unfixed> (embed)
96            TODO: report bug
97            - uqm 0.6.2.dfsg-8 (embed)
98            NOTE: Might be fixed earlier. Lenny version recorded.
99            - black-box 1.4.6-2.2 (embed)
100            NOTE: Might be fixed earlier. Lenny version recorded.
101    
102    libiax
103            - iaxmodem <unfixable> (embed; bug #548885)
104    
105    spandsp
106            - iaxmodem <unfixable> (embed; bug #548885)
107    
108    python-paramiko
109            - fabric 0.9.0-2 (embed; bug #561398)
110    
111    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
112            - dpkg 1.15.6 (static)
113            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
114            - rsync <unfixed> (embed)
115            - cherokee <unfixed> (embed)
116            NOTE: somehow derived code base
117            - mono <unfixed> (embed)
118            TODO: check mozilla
119            - linux-2.6 <unfixed> (embed)
120            - pvpgn 1.7.8-2 (embed)
121            - mrtg 2.12.2-1 (embed)
122            - rpm <unknown> (embed)
123            NOTE: pinged anibal since when rpm was fixed
124            - tuxcmd-modules <unfixed> (embed)
125            - zsync <unfixed>
126            - tra <unfixed>
127            - sash <unfixed>
128            - nsis <unfixed>
129            - pyfits 1:2.3.1-1
130            - mseide-msegui <unfixed>
131            NOTE: mseide
132            - mirrordir <unfixed>
133            - poco <unfixed>
134            - klibc <unfixed>
135            - emboss 6.3.1-1 (embed)
136            - ghostscript 8.71~dfsg2-6 (embed)
137            NOTE: ghostscript fixed sometime before this, but this is the version i checked
138            - freeimage <unfixed>
139            - clamav <unfixed> (fork)
140            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
141            - tuxonice-userui <unfixed> (static)
142            - plt-scheme <unfixed>
143            - perl <unfixed>
144            - paraview <unfixed>
145            - velvet 0.7.56~nozlibcopy-1
146            - gcvs <unfixed>
147            - dump <unfixed>
148            - aide <unfixed> (static)
149            - dar <unfixed> (static)
150            - avfs <unfixed>
151            - fpc <unfixed>
152            - winff <unfixed>
153            NOTE: inherited from fpc, see #472304
154            - lazarus <unfixed>
155            NOTE: inherited from fpc, see #472304
156            - erlang <unfixed> (embed)
157            - gamera 3.2.3-1 (embed)
158            - python2.4 <unfixed> (embed; bug #553403)
159            - python2.5 <unfixed> (embed; bug #553403)
160            - texlive-bin <unknown> (embed)
161            - sudo <unknown> (embed)
162            NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
163    
164    dulwich
165            - hg-git 0.1.0-1 (embed; bug #541996)
166    
167    libvigraimpex
168            - hugin <unfixed> (embed; bug #542259)
169            - enblend-enfuse <unfixed> (embed; bug #542258)
170            - gamera 3.2.3-1 (embed)
171    
172    libbz2
173            - dpkg 1.15.6 (static)
174            - amd64-libs <unfixed> (static)
175            NOTE: let's call it "static"
176            - dar <unfixed> (static)
177            - dump <unfixed> (static)
178            - unalz 0.64-1 (embed)
179            NOTE: has code, by the maint, to use the system version but links against the internal copy
180            - clamav <unfixed> (embed)
181            NOTE: libclamav/nsis/bzlib*
182            - pristine-tar <unfixable> (modified-embed)
183            NOTE: compression code only, not uncompression
184            - r-base-core-ra 1.2.8 (static)
185            - r-base-core 2.11.1 (static)
186            NOTE: links dynamically in squeeze, statically in lenny
187            - rpm <unfixed> (static)
188            NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
189    
190    libyahoo2
191            - centerim <unfixed> (embed; bug #559783)
192    
193    libmsn
194            - centerim <unfixed> (embed; bug #559783)
195    
196    libgadu
197            - centerim <unfixed> (embed; bug #559783)
198            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
199            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
200            - kdenetwork 4:3.3.2-5 (embed)
201            NOTE: from kdenetwork: kopete
202            - ekg 1:1.8~rc0-1 (embed)
203            - kadu 0.6.0.2-3 (embed; bug #504430)
204            - gadu <itp> (embed)
205    
206    xmlrpc (which package is the "origin" of this code?)
207            - drupal <unfixed> (embed)
208            - phpgroupware <unfixed> (embed)
209            - egroupware <unfixed> (embed)
210            - phpwiki <unfixed> (embed)
211            - php4 <removed> (embed)
212            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
213    
214    shtool (affects build-time only)
215            - mysql-ocaml <unfixed> (embed)
216            - php4 <removed> (embed)
217            - php5 <unfixed> (embed)
218    
219  xulrunner  xulrunner
220  nvu (no longer in Debian)          - iceape <unfixed> (embed; bug #561749)
221            - iceweasel 2.0.0.19 (embed)
222            - icedove <unfixed> (embed; bug #561750)
223            - kompozer <unfixed> (embed; bug #532168)
224            - galeon 2.0.2-4 (embed)
225            - epiphany-browser 2.14.3-8 (embed)
226            - conkeror 0.9~git080629-2 (embed)
227            - kazehakase 0.4.2-1 (embed)
228    
229    xli
230            - xloadimage <unfixed> (embed)
231    
232    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
233            - openmotif <unfixed> (embed)
234    
235    libxpm
236            - lesstif2 <unfixed> (embed; bug #575750)
237            - ia32-libs <unfixable> (embed)
238    
239    kerberized apps with BSD origin
240            - krb4 <removed> (embed)
241            - krb5 <unfixed> (embed)
242            - heimdal <unfixed> (embed)
243    
244    grip (which pkg is the origin?)
245            - libcdaudio <unfixed>
246            - grip <unfixed>
247            - gnome-vfs <unfixed>
248            TODO: check vfs2 as well
249    
250    fudforum
251            [etch] - phpgroupware <unfixed> (embed)
252            NOTE: phpgroupware-fudforum
253            [sarge] - egroupware-fudforum <removed> (embed)
254    
255    libbsd
256            - rdate 1:1.2-3 (embed)
257            - atheme-services <unfixed>
258            - libbsd-arc4random-perl <not-affected> (modified-embed)
259            NOTE: code not used, it links dynamically against libbsd instead
260            - isakmpd <unfixed>
261            - bsdgames <unfixed> (embed)
262            - bsd-mailx <unfixed> (embed)
263            - netcat-openbsd <unfixed> (embed; bug #550611)
264            - openssh <unfixed> (embed)
265            - unworkable <unfixed> (embed)
266            - mksh <unfixed> (modified-embed)
267            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
268            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
269            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
270            - ia32-libs <unfixable> (embed)
271    
272    cvs
273            - gcvs <unfixed> (embed)
274            NOTE: see cvsunix/src in tarball
275    
276    pcre3
277            - php4 <removed> (embed)
278            - analog 2:5.23-0woody1 (embed)
279            - chicken 3.2.7-2 (embed)
280            NOTE: Might be fixed earlier. Lenny version recorded.
281            - goffice <unfixed> (embed)
282            NOTE: libgoffice-*
283            - hypermail 2.2.0.dfsg-2 (embed)
284            NOTE: Might be fixed earlier. Lenny version recorded.
285            - privoxy 3.0.9-1 (embed)
286            NOTE: Might be fixed earlier. Lenny version recorded.
287            - vfu 4.06-4.1 (embed; bug #450754)
288            - tf5 5.0beta7-1 (embed)
289            - monotone 0.43-1 (embed)
290            NOTE: this only affects versions >= 0.37
291            - glib2.0 2.15.2-1 (embed)
292            - apache2 2.0.53-4 (embed)
293            - exim4 4.10-0.srh20.12 (embed)
294            - yacas <unfixed> (embed)
295            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
296            - gtamsanalyzer.app 0.42-5 (embed)
297            - tin 980117-1 (embed)
298            - kazehakase 0.5.2-1
299            - webkit 1.0.1-1 (embed)
300            - qt4-x11 <unfixed> (embed)
301            NOTE: embedded via webkit copy
302            - erlang <unfixed> (embed)
303            - ssed <unfixed> (embed)
304            - ircd-hybrid <unfixed> (static)
305            - emboss <unfixed> (fork)
306            - cherokee <unfixed> (embed)
307            - oftc-hybrid 1.6.9.dfsg-1 (embed)
308            - ratbox-services <unfixed> (embed)
309            - squeak-vm <unfixed> (embed)
310            - tinymux <unfixed> (embed)
311    
312    tiff
313            - wxwindows2.4 2.2.1 (embed)
314            - gamera 3.2.3-1 (embed)
315            - freeimage <unfixed> (embed)
316            - libtk-img <unfixed> (embed)
317            NOTE: there are two copies, one under tiff/ other under libtiff/
318            - gdal <unfixed>
319            - ia32-libs <unfixable> (embed)
320    
321    uudeview
322            - libconvert-uulib-perl <unfixed> (embed)
323            - pan <unfixed> (embed)
324    
325    sqlite
326            - amarok <unfixed> (embed)
327            - monotone 0.43-1 (embed)
328            - iceweasel <unfixed> (embed)
329            - heimdal <unfixed> (embed; bug #559616)
330    
331    util-linux
332            - loop-aes-utils <unfixed> (embed)
333            NOTE: contains code from util-linux' mount in the mount-aes-udeb
334            - ia32-libs <unfixable> (embed)
335    
336    sylpheed
337            - sylpheed-claws <unfixed> (fork)
338    
339    phpsysinfo
340            - egroupware <unfixed> (embed)
341            - phpgroupware <unfixed> (embed)
342    
343    phpldapadmin
344            [sarge] - egroupware <unfixed> (embed)
345            NOTE: removed from egroupware after sarge
346    
347    chmlib
348            - kchmviewer <unknown> (embed)
349    
350    ffmpeg (libavcodec/libavformat)
351            - mplayer 1.0~rc2-14 (embed; bug #395252)
352            - kino 1.0.0-1
353            - vlc <not-affected> (Links dynamically since initial release)
354            - smilutils 0.3.0-10
355            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
356            - motion 3.1.19-1
357            - gstreamer0.10-ffmpeg 0.10.3-2
358            - xmovie <removed> (static)
359            TODO: gimp-gap (potentially using ffmpeg code as well)
360            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
361            - audacity 1.3.7-2 (embed; bug #512278)
362            - chromium-browser <unfixed> (fork)
363            - libav <unfixed>
364    
365    faad2
366            - mplayer 1.0~rc2-20 (embed)
367            - avifile <unfixed> (embed; bug #538750)
368            - ffmpeg-debian <removed> (embed)
369    
370    libmad (MPEG decoding lib)
371            - xine-lib <unfixed> (embed)
372            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
373            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
374    
375    libdts
376            - xine-lib <unfixed> (embed)
377    
378    flac
379            - xine-lib <unfixed> (embed)
380            - ia32-libs <unfixable> (embed)
381    
382    liba52
383            - a52dec <unfixed> (embed)
384            - xine-lib <unfixed> (embed)
385    
386    mpeg2dec (libmpeg2)
387            - xine-lib <unfixed> (embed)
388    
389    libmpeg3
390            - squeak-vm <unfixed> (embed)
391    
392    libntlm
393            - wget <unfixed> (fork; bug #550436)
394            - curl <unfixed> (fork; bug #550437)
395            - cntlm <unfixed> (fork; bug #550438)
396    
397    uw-imap
398            - pine <unfixed> (embed)
399            - alpine <unfixed> (embed)
400    
401    imagemagick
402            - graphicsmagick <unfixed> (fork)
403    
404    python-urlgrabber
405            - mercurial <unfixed> (embed; bug #531062)
406            - w3af <unfixed> (embed; bug #555372)
407            [experimental] - harvestman <unfixed> (embed; bug #555373)
408    
409    beautifulsoup
410            - python-mechanize <unfixed> (embed; bug #555349)
411            - zope2.11 <removed> (embed; bug #555350)
412            - twill <unknown> (embed)
413    
414    halibut
415            - nsis <unfixed> (fork)
416    
417    libghttp
418            - hotway <unfixed> (embed)
419    
420    libsndfile
421            - ardour 1:2.7.1-1 (embed)
422            - ia32-libs <unfixable> (embed)
423    
424    glibmm2.4
425            - ardour 1:2.7.1-1 (embed)
426    
427    libgnomecanvasmm2.6
428            - ardour 1:2.7.1-1 (embed)
429    
430    libsigc++-2.0
431            - ardour 1:2.7.1-1 (embed)
432            - ia32-libs <unfixable> (embed)
433    
434    soundtouch
435            - ardour 1:2.7.1-1 (embed)
436    
437    libmms
438            - xine-lib <unfixed> (embed)
439            - mimms <unfixed> (embed)
440    
441    fckeditor
442            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
443            - moin 1.8.2-2 (embed; bug #452599)
444            - karrigell <removed> (embed; bug #452598)
445            - gforge 4.6.99+svn6225-1 (embed)
446            - request-tracker3.8 <unfixed> (embed)
447            - otrs2 <unfixed> (embed)
448    
449    ipatlas (not packaged in Debian)
450            - moodle <unfixed> (embed; bug #507185)
451    
452    libphp-phpmailer
453            - moodle <unfixed> (embed; bug #507185)
454            - mahara <unfixed> (embed)
455            - symfony <unfixed> (embed; bug #566778)
456            [etch] - phpgroupware <unfixed> (embed)
457            NOTE: phpgroupware-felamimail is only in etch
458            - egroupware <unfixed> (embed; bug #504283)
459            - glpi <unfixed>
460    
461    htmlArea (not packaged in Debian)
462            - moodle <unfixed> (embed)
463    
464    giflib
465            - wine <unfixed> (embed; bug #466181)
466    
467    bennu (not packaged in Debian, http://bennu.sourceforge.net)
468            - moodle <unfixed> (embed)
469    
470    smarty
471            - moodle 1.8.2-2 (embed; bug #471158)
472            - gallery2 2.2.5-2 (embed; bug #471160)
473            - mahara 0.9.2-2 (embed; bug #471201)
474            - gosa 2.4beta1-1 (embed; bug #471200)
475    
476    TinyMCE
477            - wordpress 2.5.1-3 (embed; bug #478257)
478            - moodle <unfixed> (embed; bug #507185)
479            - knowledgeroot <unfixed> (embed)
480            - joomla <itp> (bug #326398)
481            - mahara 1.2.6-1 (embed; #597752)
482    
483    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
484            - scite <unfixed> (embed)
485            - qscintilla <unfixed> (embed)
486            - qscintilla2 <unfixed> (embed)
487            - geany <unfixed> (fork)
488            - anjuta <unfixed> (embed)
489            - sdlbasic <unfixed> (embed)
490    
491    libphp-adodb
492            - moodle <unfixed> (embed; bug #507185)
493            NOTE: also AdoDB-XML Schema
494            - gallery2 <unfixed> (embed)
495            - phppgadmin <unfixed> (embed)
496            - egroupware <unfixed> (embed)
497            - phpwiki <unfixed> (embed)
498            - torrentflux 2.0beta1-2 (embed)
499            - ipplan <unfixed> (embed)
500            - typo3-src <unfixed> (embed)
501            - cacti <unknown> (embed)
502            [sarge] - cacti <unfixed> (embed)
503            NOTE: dependency exists, but internal version is used
504            - gforge 4.7~rc2-6 (embed)
505            - mahara <unfixed> (embed)
506    
507    gzip
508            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
509            - klibc <unfixed> (embed)
510            NOTE: based on linux-kernel gzip code
511            - busybox <unfixed> (embed)
512            - pristine-tar <unfixed> (modified-embed)
513            NOTE: compression code only, not uncompression
514            - ncompress <unfixed> (old-version)
515    
516    neon
517            - cadaver 0.22.3+debian-1 (embed; bug #188381)
518            - gnome-vfs2 <unfixed> (embed; bug #395874)
519            [etch] - litmus <unfixed> (embed; #395875)
520            - litmus <removed> (embed; #395875)
521            [sarge] - screem <unfixed> (embed)
522            - sitecopy 1:0.16.0-1 (embed; bug #395876)
523            [etch] - tla <unfixed> (embed; bug #395877)
524            [sarge] - tla <unfixed> (embed; bug #395877)
525    
526    libmodplug
527            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
528    
529    libvncserver
530            - vino <unfixed> (embed)
531    
532    putty
533            - filezilla <unfixed> (embed)
534    
535    tinyxml
536            - filezilla <unfixed>
537            - crystalspace <unfixed> (embed)
538            - libwfut <unfixed> (embed)
539            - rarian <unfixed> (embed)
540            - bulletml <unfixed> (embed)
541            - pokerth <unfixed> (embed)
542            - qutecom <unfixed> (embed)
543            - sofa-framework <unfixed> (embed)
544            - yate <unfixed> (embed)
545            - antigrav <unfixed> (embed)
546            - balder2d <unfixed> (embed)
547            - cal3d <unfixed> (embed)
548            - criticalmass <unfixed> (embed)
549            - ember <unfixed> (embed)
550            - epiphany <unfixed> (embed)
551            - gambit <unfixed> (embed)
552            - noiz2sa <unfixed> (embed)
553            - ogre <unfixed> (embed)
554            - opencity <unfixed> (embed)
555            - openmovieeditor <unfixed> (embed)
556            - pouetchess <unfixed> (embed)
557            - tecnoballz <unfixed> (embed)
558            - trigger-rally <unfixed> (embed)
559            - xmoto <unfixed> (embed)
560            - mapnik <unknown> (embed)
561            NOTE: uses a different XML parser by default
562            - rrootage 0.23a-6 <embed>
563            NOTE: links to libbulltetml
564            - boson <unknown> (embed)
565            NOTE: the embedded code is unused
566            - cppcheck <unfixed> (embed)
567            NOTE: introduced in 1.47, will use system's version in 1.48
568            [squeeze] - cppcheck <not-affected>
569    
570    gv
571            - evince <unfixed> (embed)
572            NOTE: ps/ tree from gv 3.5.8
573            NOTE: evince-gtk is affected (a component of evince source package)
574    
575    libXbae
576            - paw <unfixed> (embed)
577    
578    libgtkhtml
579            - claws-mail-extra-plugins <unfixed> (fork)
580    
581    libXaw
582            - paw <unfixed> (embed)
583            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
584            - ia32-libs <unfixable> (embed)
585    
586    libgd2
587            - graphviz 2.16-1 (embed)
588            NOTE: lib/gd seems to be 2.0.33
589            - wml 2.0.11ds2-1 (embed)
590            - libwmf <unfixed> (embed)
591            NOTE: derived from gd 1.6.3, but only used to write images
592            - plt-scheme <unfixed> (embed; bug #601525)
593            - texlive-bin 2009-1 (embed)
594    
595    rar
596            - unrar-nonfree <unfixed> (embed)
597    
598    unrar-free (maybe this code is derived from the original rar, too?)
599            - clamav <unfixed> (embed)
600            NOTE: seems to be disabled in default config
601    
602    mplayer (DirectMedia Object loader)
603            - xine-lib <unfixed> (embed)
604            NOTE: src/libw32dll/
605            - vlc <unfixed> (embed)
606            NOTE: modules/codec/dmo/
607            - mplayer 1.0~rc2-20 (embed)
608    
609    libwpd (WordPerfect converter)
610            - openoffice.org <unfixed> (embed)
611    
612    fsplib (http://sourceforge.net/projects/fsp/)
613            - gftp <unfixed> (embed)
614            NOTE: lib/fsplib version 0.3
615    
616    sprng
617            - tree-puzzle <unfixed> (embed)
618    
619    librpcsecgss
620            - krb5 <unfixed> (embed)
621    
622    jasper
623            - ghostscript 8.64~dfsg-2 (embed)
624    
625    libiris
626            - psi <unfixed> (embed)
627            - kdenetwork <unfixed> (embed)
628            NOTE: kopete embeds libiris but links dynamically to libidn
629            - kdegames <unfixed> (embed)
630            NOTE: ksirk/kde4
631    
632    libidn
633            - monotone 0.43-1 (embed)
634            - psi <unfixed> (embed)
635            NOTE: psi embeds libiris which embeds libidn
636            - kdegames <unfixed> (embed)
637            NOTE: kdegames/kde4 embeds libiris which embeds libidn
638            - ia32-libs <unfixable> (embed)
639    
640    lua5.1
641            - monotone 0.43-1 (embed)
642            - nmap 5.00-1 (embed; bug #527997)
643            [lenny] - nmap <unfixed> (embed; bug #527997)
644            - ocropus <unfixed> (embed)
645            - enigma <unfixed> (embed)
646            NOTE: requires lua built with C++
647            - freeciv <unfixed> (embed)
648            - spring <unfixed> (embed)
649    
650    libbotan
651            - monotone 0.43-1 (embed)
652    
653    NetXX
654            - monotone 0.43-1 (embed)
655    
656    libgc
657            - mono <unfixed> (embed)
658    
659    lzma
660            - p7zip <unfixed> (embed)
661            - xz-utils <unfixed> (fork)
662            - r-base <unfixed> (embed)
663            NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
664    
665    lzo
666            - grub2 <unfixed> (embed)
667    
668    yassl
669            - mysql-dfsg-5.0 <unfixed> (embed)
670            - mysql-5.1 <unfixed> (embed)
671    
672    pax code
673            - tar <unfixed> (embed)
674            - cpio <unfixed> (embed)
675    
676    t1lib
677            - tetex-bin 2.0.2-1 (embed)
678            - texlive-bin <unknown> (embed)
679            - grace 5.1.14-2 (embed)
680            - evince <unfixed> (embed)
681            NOTE: at least parseafm code, maybe more?
682            - vftool <unfixed> (embed)
683            NOTE: just parseafm code it seems
684    
685    guichan
686            - boswars <unfixed> (embed)
687            NOTE: maintainer notified us, working on it
688    
689    tolua
690            - boswars <unfixed> (embed)
691            NOTE: maintainer notified us, working on it
692            NOTE: actually tolua++
693            - ocropus <unfixed> (embed)
694            NOTE: actually tolua++
695            - freeciv <unfixed> (embed)
696            NOTE: actually tolua++
697            - enigma <unfixed> (embed)
698    
699    asio-dev
700            - luxrender <removed> (embed)
701    
702    xine-lib
703            - vlc <unfixed> (embed)
704            NOTE: only parts included in modules/access/rtsp
705    
706    netpbm
707            - tcl8.3 <unfixed> (embed)
708            - tcl8.4 <unfixed> (embed)
709            - tcl8.5 <unfixed> (embed)
710            NOTE: generic/tkImgGIF.c
711    
712    tk8.5
713            - tk8.0 <removed> (old-version)
714            - tk8.3 <unfixed> (old-version)
715            - tk8.4 <unfixed> (old-version)
716            - perl-tk <unfixable> (fork)
717    
718    samba
719            - mc 2:4.6.2~git20080311-1 (embed)
720            NOTE: maintainer is aware of this, currently searching a solution
721    
722    plib1.8.4c2
723            - boson <unfixed> (fork)
724            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
725    
726    fribidi
727            - quesoglc 0.7.2-2 (embed)
728    
729    glew
730            - quesoglc <unfixed> (embed; bug #489341)
731            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
732            - trigger 0.5.2.1-2 (embed)
733            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
734            - trigger-rally 0.5.2.1-2 (embed)
735            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
736            - chromium-browser 5.0.375.70~r48679-2
737    
738    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
739            - transcend <unfixed> (embed)
740            - cultivation <unfixed> (embed)
741            - passage <unfixed> (embed)
742            - gravitation <unfixed> (embed)
743    
744    tar
745            - libarchive <unfixed> (embed)
746            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
747    
748    cpio
749            - libarchive <unfixed> (embed)
750            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
751    
752    kde4libs
753            - kdelibs <unfixable> (old-version)
754    
755    webkit
756            - qt4-x11 <unfixed> (embed; bug #479851)
757            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
758            - kde4libs <unfixable> (fork)
759            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
760            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
761            - chromium-browser <unfixed> (fork)
762    
763    ftgl
764            - blender 2.46+dfsg-1 (embed)
765            - vtk <unfixed> (embed)
766            - paraview <unfixed> (embed)
767            NOTE: as part of its copy of vtk
768            - tulip <unfixed> (embed)
769            NOTE: depends on -dev but string found on binary
770            - root-system <unknown> (embed)
771            NOTE: depends on -dev package; not confirmed at source
772            - rgl <unknown> (embed)
773            NOTE: not sure if it is built
774            - mysql-gui-tools <unknown> (embed)
775            NOTE: not sure if it is built
776            - k3d <unfixed> (embed)
777            - extremetuxracer <unknown> (embed)
778            NOTE: not sure if it is built
779            - critterding <unknown> (embed)
780            - lightspeed <unfixed>
781            NOTE: depends on -dev but string found on binary
782    
783    wv
784            - abiword <unfixed>
785    
786    qemu
787            - kvm <removed> (embed; bug #543159)
788            - qemu-kvm <unfixed> (embed; bug #560853)
789            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
790            - xen-3 3.4.2-2 (embed; bug #560856)
791            - xen-unstable <unfixed> (embed; bug #560856)
792    
793    vgabios
794            - kvm <removed> (embed; bug #489442)
795            - qemu-kvm <unfixed> (embed)
796    
797    bochs
798            - kvm <removed> (embed; bug #489442)
799            - qemu-kvm <unfixed> (embed)
800    
801    speex
802            - vorbis-tools <unfixed> (embed)
803            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
804            - gst-plugins-good0.10 <unfixed> (embed)
805            - xine-lib <unfixed> (embed)
806            - libfishsound <unfixed> (embed)
807            - libannodex <removed> (embed)
808            - opal 3.4.2~dfsg-2 (embed)
809            - mumble 1.2.0~beta1-1 (embed)
810            - vlc <unfixed> (embed)
811            - xmms-speex <unfixed> (embed)
812            - libsdl-sound1.2 <unfixed> (embed)
813            - sweep <unfixed> (embed)
814    
815    libreadline
816            - magic <itp> (old-version)
817    
818    opcode
819            - ode <unfixed> (embed)
820            NOTE: opcode is not a package in debian, it is just embedded
821            NOTE: http://www.codercorner.com/Opcode.htm
822    
823    gimpact
824            - ode <unfixed> (embed)
825            NOTE: gimpact is not a package in debian, it is just embedded
826            NOTE: http://gimpact.sf.net
827    
828    mochikit
829            - mahara <unfixed> (embed)
830            NOTE: they require extra patches, still unmerged upstream
831            - ntop <unfixed> (embed)
832            - coherence 0.6.2-1 (embed)
833            - paste <unfixed> (embed)
834            - turbogears <unfixed> (embed)
835            - plone3 <removed> (embed)
836            - xulrunner <unfixed> (embed)
837            - libjifty-plugin-chart-perl <unfixed> (embed)
838            - sabnzbdplus <unfixed> (embed)
839            - tgmochikit <unfixed> (embed)
840    
841    prototypejs
842            - netbeans-ide 6.0.1+dfsg-2 (embed)
843            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
844            - webcit <unfixed> (embed; bug #555219)
845            - asterisk 1:1.6.2.0~rc3-1 (embed)
846            - libjson-ruby 1.1.4-1 (embed; bug #555224)
847            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
848            - horde3 <unfixed> (embed)
849            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
850            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
851            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
852            - ebug-http <unfixed> (embed; bug #555236)
853            - libaws 2.7-1 (embed; bug #555222)
854            - phpgedview <removed> (embed)
855            - poker-network 1.7.6-1 (embed; bug #555238)
856            - rails 2.1.0-6 (embed)
857            - wordpress 2.5.0-2 (embed; bug #555243)
858            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
859            TODO: search through all of the other zope packages
860            - ampache 3.4.1-2 (embed)
861            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
862            - hobix 0.5~svn20070319-4 (embed; bug #555247)
863            - zabbix 1.6.6-4 (embed; bug #555250)
864            - chora2 2.1.1+debian0-1 (embed; bug #555253)
865            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
866            - jscropperui 1.2.1-1 (embed; bug #555257)
867            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
868            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
869            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
870            - activeldap 1.2.1-1 (embed)
871            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
872            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
873            - otrs2 2.3.4-6 (embed; bug #555267)
874            - webcalendar 1.2~b1-2 (embed; bug #555269)
875            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
876            - jifty 0.90519-1 (embed; bug #555271)
877            - jquery 1.4-1 (embed; bug #555272)
878            - passenger 2.2.5debian1-1 (embed; bug #555273)
879            - plone3 <removed> (embed; bug #555275)
880            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
881            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
882            - xulrunner <unfixed> (embed)
883            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
884            - jclicmoodle <unfixed> (embed)
885            - git-cola <unfixed> (embed)
886    
887    gdb
888            - insight <unfixed> (embed)
889    
890    e2fsprogs
891            - ldiskfsprogs <unfixable> (fork)
892            - ia32-libs <unfixable> (embed)
893    
894    quazip (not packaged in Debian)
895            - qcake <unfixed> (embed)
896            NOTE: starting with upstream version 0.6.4
897    
898    exo
899            - pcmanfm <unfixed> (embed; bug #499677)
900            NOTE: slightly modified source code
901    
902    xfce4-taskmanager
903            - lxtask <unfixed> (embed)
904            NOTE: old fork, maybe outdated
905    
906    isync
907            - postler <unfixed> (embed; bug #628798)
908    
909    java
910            - openjdk-6 <unfixed>
911            - sun-java5 <unfixed>
912            - sun-java6 <unfixed>
913    
914    libphp-snoopy
915            - ampache 3.4.1-2 (embed; bug #504169)
916            - gforge 4.6.99+svn6094-2 (embed)
917            - mahara 1.0.5-2 (embed; bug #504170)
918            - pixelpost 1.7.1-5 (embed; bug #504171)
919            - mediamate 0.9.3.6-5 (embed; bug #504172)
920            - opendb <removed> (embed; bug #504173)
921            [etch] - opendb <unfixed> (embed; bug #504173)
922            - wordpress 2.5.1-9 (embed; bug #443948)
923            - moodle <unfixed> (embed; bug #507185)
924            [etch] - phpgroupware <unfixed> (embed)
925            NOTE: phpgroupware-felamimail
926            - magpierss 0.72-3 (embed; bug #431089)
927    
928    jquery
929            - jsonbot <unfixed> (embed; bug #625524)
930            - zekr <unfixed> (embed)
931            - wordpress <unknown> (embed)
932            - yocto-reader <unfixed> (embed)
933            - textpattern <unfixed> (embed)
934            - genshi 0.5.1-1 (embed)
935            NOTE: compressed file under examples/ dir
936            - prewikka <unfixed> (embed)
937            - libramaze-ruby <unfixed> (embed)
938            - drupal6 <unfixed> (embed)
939            - b2evolution <unfixed> (embed)
940            - wesnoth <unfixed> (embed)
941            - gammu 1.28.95-1 (embed)
942            - trac <unfixed> (embed; bug #645339)
943    
944    tablesorter (jquery plugin, not packaged yet)
945            - wesnoth <unfixed> (embed)
946    
947    kses
948            - wordpress <unfixed> (embed; bug #504242)
949            NOTE: their copy has all methods renamed to wp_<foo>
950            NOTE: kses isn't in Debian, RFP: #504240
951            - moodle <unfixed> (embed; bug #507185)
952            - egroupware <unfixed> (embed)
953    
954    magpierss
955            - wordpress <unfixed> (embed; bug #504242)
956            - moodle <unfixed>
957    
958    php-gettext
959            - wordpress 2.8.4-1 (embed; bug #504242)
960            - docbookwiki <unfixed> (embed)
961            - knowledgeroot 0.9.9.5-1
962            NOTE: non-free
963    
964    libphp-ixr (name may change, it is the Incutio XML-RPC)
965            - wordpress <unfixed> (embed; bug #504242)
966            NOTE: libphp-ixr isn't in Debian, RFP: #504236
967            - dokuwiki <unfixed> (embed)
968            - textpattern <unfixed> (embed)
969    
970    libphp-cas
971            - glpi <unfixed> (embed)
972            - moodle <unfixed> (embed; bug #505984)
973    
974    scriptaculous (prototype.js is among the embeds in the following)
975            - glpi <unfixed> (embed)
976            - libaws <unfixed> (embed; bug #555222)
977            - op-panel <unfixed> (embed)
978            - symfony <unfixed> (embed)
979            NOTE: maintainer says there are extra incompatible changes required
980            - pixelpost 1.7.1-6 (embed)
981            - webhelpers <unfixed> (embed)
982            - qwik <removed> (embed; bug #555241)
983            - smokeping <unfixed> (embed)
984            - turba2 <unfixed> (embed)
985            - typo3-src 4.2.3-1 (embed)
986            - request-tracker3.6 <unfixed> (embed)
987            - request-tracker3.8 <unfixed> (embed)
988            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
989            - wordpress 2.5.0-2 (embed)
990            - libhtml-prototype-perl 1.48-3 (embed)
991    
992    libmarkdown-php
993            - moodle <unfixed> (embed; bug #507185)
994            - pixelpost 1.7.1-6 (embed)
995    
996    php-openid
997            - wordpress-openid 3.3.2-1 (embed)
998    
999    geshi
1000            - dokuwiki 0.0.20080505-3.1 (embed)
1001            - pgfouine 1.0-1.1 (embed)
1002            - websvn 2.1.0-1 (embed)
1003    
1004    webcalendar
1005            - gforge 4.7~rc2-6 (embed; bug #504758)
1006    
1007    libical
1008            - kdepim <unknown> (fork)
1009            NOTE: fixed at some point during 4.0
1010            - kdepimlibs 4.2.0-1 (fork)
1011            - claws-mail-extra-plugins <unfixed> (fork)
1012    
1013    harfbuzz
1014            - qt4-x11 <unfixed> (embed)
1015            - pango1.0 <unfixed> (embed)
1016            - fontmatrix <unfixed> (embed)
1017    
1018    libzip
1019            - php5 <unfixable> (modified-embed)
1020            - odt2txt <unfixed> (embed; bug #523808)
1021    
1022    json.php (not packaged; should be replaced with php's built-in functions)
1023            - moodle <unfixed>
1024            - yui <unfixed>
1025            - gallery2 <unfixed>
1026            - dokuwiki <unfixed>
1027            - typo3-src <unfixed>
1028    
1029    php-fpdf
1030            - tcpdf <itp> (fork)
1031            - moodle <unfixed>
1032            - phpwiki <unfixed>
1033            - egroupware <unfixed>
1034            - ldap-account-manager <unfixed> (fork)
1035    
1036    tcpdf (itp: #495985)
1037            - moodle <unfixed>
1038            - phpmyadmin <unfixed>
1039    
1040    typo3
1041            - moodle <unfixed>
1042    
1043    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1044            - moodle <unfixed>
1045            - gosa <unfixed>
1046    
1047    php-ole (itp: #487558)
1048            - moodle <unfixed>
1049    
1050    pieforms (http://www.catalyst.net.nz)
1051            - mahara <unfixed>
1052    
1053    savant2 (http://phpsavant.com)
1054            - egroupware <unfixed>
1055    
1056    rssparser (http://nwow.org)
1057            - egroupware <unfixed>
1058            - phpgroupware <unfixed>
1059    
1060    lcms
1061            - openjdk-6 <unfixed> (fork)
1062            - gimp 2.4.0~rc2-2
1063            - ia32-libs <unfixable> (embed)
1064    
1065    libphp-phplayersmenu
1066            - diogenes <unfixed>
1067            - phpldapadmin <unfixed>
1068    
1069    libphp-pclzip
1070            - docvert <unfixed>
1071            - moodle <unfixed>
1072            - egroupware <unfixed>
1073    
1074    libphp-simplepie
1075            - dokuwiki <unfixed>
1076            - wordpress <unfixed>
1077    
1078    libphp-jpgraph
1079            - egroupware <unfixed>
1080    
1081    php-simpletest
1082            - moodle <unfixed>
1083    
1084    libpng
1085            - doxygen 1.5.6-2 (embed)
1086            NOTE: Might be fixed earlier. Lenny version recorded.
1087            - gdal 1.5.2-3 (embed)
1088            NOTE: Might be fixed earlier. Lenny version recorded.
1089            - iceweasel <not-affected> (uses xulrunner)
1090            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1091            - iceape 1.0.13~pre080614i-0etch1 (embed)
1092            - libfltk1.1 1.1.9-6 (embed)
1093            NOTE: Might be fixed earlier. Lenny version recorded.
1094            - libtk-img <unfixed> (embed)
1095            - htmldoc 1.8.27-3 (embed)
1096            NOTE: Might be fixed earlier. Lenny version recorded.
1097            - xulrunner 1.9.0.13-1 (embed)
1098            [lenny] - xulrunner 1.9.0.11-0lenny1
1099            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1100            - gamera 3.2.3-1 (embed)
1101            - freeimage <unfixed> (embed)
1102            - syslinux-common <unfixable> (embed)
1103            - tuxonice-userui <unfixed> (static)
1104            - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1105            NOTE: Might be fixed earlier. Lenny version recorded.
1106            - vice 1.22.dfsg1-0.1 (embed)
1107            NOTE: Might be fixed earlier. Lenny version recorded.
1108            - visualboyadvance 1.8.0-4 (embed)
1109            NOTE: Might be fixed earlier. Lenny version recorded.
1110            - ia32-libs <unfixable> (embed)
1111    
1112    irssi
1113            - silc-client <unfixed> (embed)
1114            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1115    
1116    extc
1117            - mtasc <unfixed> (embed)
1118            - haxe <unfixed> (embed)
1119    
1120    swflib
1121            - mtasc <unfixed> (embed)
1122            - haxe <unfixed> (embed)
1123    
1124    libitext-java
1125            - bouncycastle 2.1.4-1 (embed)
1126    
1127    python-ply
1128            - pyke <unfixed> (embed; bug #555363)
1129            - pywbem 0.7.0-4 (embed; bug #555364)
1130            - sepolgen <unfixed> (embed; bug #555365)
1131            - zope-textindexng3 <unknown> (embed)
1132            - iceweasel <not-affected> (uses xulrunner)
1133            - xulrunner <unknown> (embed)
1134            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1135    
1136    libdumbnet (libdnet upstream)
1137            - nmap <unfixed> (fork)
1138    
1139    gcc-4.4
1140            - gcc-mingw32 <unfixed> (embed)
1141    
1142    camlimages
1143            - advi <unfixed> (static; bug #550441)
1144    
1145    memcached
1146            - memcachedb <unfixed> (embed)
1147    
1148    yajl
1149            - argyll <unfixed> (embed; bug #544223)
1150            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1151    
1152    nusoap
1153            - gforge 4.8.2-1 (embed)
1154            - ampache <unfixed> (embed)
1155            - poker-network <unfixed> (embed)
1156            - moodle <unfixed> (embed)
1157            NOTE: code is not used when running under php5 and soap is enabled
1158            - phpwiki <unfixed> (embed)
1159            - gallery2 <unfixed> (embed)
1160            - typo3-src <unfixed> (embed)
1161            - phpgacl 3.3.7-7 (embed)
1162            - mantis 1.1.8+dfsg-1 (embed)
1163    
1164    libept
1165            - adept <unfixed> (embed; bug #540649)
1166    
1167    libvorbis
1168            - iceweasel <not-affected> (uses xulrunner)
1169            - xulrunner <unfixed> (embed; bug #540959)
1170            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1171            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1172            - iceape <unfixed> (embed)
1173            [etch] - iceape <not-affected> (introduced in 2.0)
1174            [lenny] - iceape <not-affected> (introduced in 2.0)
1175            - ia32-libs <unfixable> (embed)
1176    
1177    cairo
1178            - iceweasel <not-affected> (uses xulrunner)
1179            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1180    
1181    liboggz
1182            - iceweasel <not-affected> (uses xulrunner)
1183            - xulrunner <unfixed> (embed; bug #540959)
1184            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1185            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1186            - iceape <unfixed> (embed)
1187            [etch] - iceape <not-affected> (introduced in 2.0)
1188            [lenny] - iceape <not-affected> (introduced in 2.0)
1189    
1190    liboggplay
1191            - iceweasel <not-affected> (uses xulrunner)
1192            - xulrunner <unfixed> (embed; bug #540959)
1193            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1194            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1195            - iceape <unfixed> (embed)
1196            [etch] - iceape <not-affected> (introduced in 2.0)
1197            [lenny] - iceape <not-affected> (introduced in 2.0)
1198    
1199    php-net-dnsbl
1200            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1201    
1202    php-onyx-rss
1203            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1204    
1205    php-text-wiki
1206            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1207    
1208    php-xml-rpc
1209            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1210    
1211    polarssl (does not have a shared library)
1212            - pdkim <itp> (embed; bug #543150)
1213            - xyssl <unfixed> (old-version)
1214    
1215    pidgin (libpurple)
1216            - gaim <removed> (old-version)
1217            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1218            - wengophone <unfixed> (embed; bug #601425)
1219    
1220    icu
1221            - webkit 1.0.1-1 (embed; bug #547214)
1222            - texlive-bin <unfixed> (fork)
1223            NOTE: texlive upstream working with icu upstream to merge their changes
1224            - chromium-browser 5.0.375.29~r46008-3
1225    
1226    cyrus-imapd-2.2
1227            - kolab-cyrus-imapd <unfixed> (fork)
1228            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1229    
1230    python-cxx-dev
1231            - freecad 0.9.2646.3-1 (embed; bug #547936)
1232    
1233    zipios++
1234            - freecad 0.9.2646.3-1 (embed; bug #547941)
1235            - enigma 0.92.3-3 (embed)
1236            NOTE: likely fixed earlier, marking etch's version as fixed
1237    
1238    linux-2.6
1239            - kvm <removed> (embed; bug #549973) [./kernel/*]
1240            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1241            - kernel-source-2.6.8 <removed> (old-version)
1242            - kernel-source-2.4.27 <removed> (old-version)
1243            - kernel-source-2.4.24 <removed> (old-version)
1244            - kernel-source-2.2.25 <removed> (old-version)
1245            - kernel-source-2.2.20 <removed> (old-version)
1246    
1247    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1248            - kvm <removed> (embed) [./libfdt/*]
1249            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1250    
1251    qweb (not packaged)
1252            - ajaxterm <unfixed>
1253    
1254    opensaml2
1255            - opensaml <removed> (old-version)
1256    
1257    shibboleth-sp2
1258            - shibboleth-sp <removed> (old-version)
1259    
1260    tuxonice-userui
1261            - suspend2-userui <removed> (old-version)
1262    
1263    expat
1264            - w3c-libwww <removed> (embed; bug #551941)
1265            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1266            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1267            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1268            - python2.4 <unfixable> (embed; bug #553403)
1269            - python2.7 2.7-6 (embed)
1270            - mcabber 0.10.0-1 (low; bug #601053)
1271            - python-4suite <unfixed> (embed; bug #516935)
1272            - wxwindows2.4 <removed> (embed)
1273            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1274            - wxwidgets2.8 2.8.10.1-2 (embed)
1275            - albert <unfixed> (embed; bug #600974)
1276            - celementtree 1.0.5-8 (embed)
1277            NOTE: Maybe that was fixed even earlier
1278            - centerim <unfixed> (embed; bug #559783)
1279            - audacity 1.3.2-1 (embed)
1280            - matanza <unfixed> (embed)
1281            - tdom 0.8.3~20080525-1 (embed)
1282            - udunits 2.1.8-4 (embed)
1283            - apr-util 1.2 (embed)
1284            - ayttm <unfxed> (embed; bug #561006)
1285            - cableswig <unfixed> (embed)
1286            - cadaver <unfixed> (embed)
1287            - cmake 2.6.0-6 (embed)
1288            - coin3 <unfixed> (embed)
1289            - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1290            NOTE: Might be fixed earlier. Lenny version recorded.
1291            - dasher 4.7.3-1 (embed)
1292            NOTE: Might be fixed earlier. Lenny version recorded.
1293            - emboss 6.3.1-1 (embed)
1294            - gdcm 2.0.14-2 (embed)
1295            - ghostscript 8.71~dfsg-2 (embed)
1296            - grmonitor <removed> (embed)
1297            - iceape <unfixed> (embed)
1298            - insighttoolkit 3.16.0-1 (embed)
1299            NOTE: insighttoolkit might've been fixed earlier
1300            - jabber 1.4.3-3.4 (embed)
1301            NOTE: Might be fixed earlier. Lenny version recorded.
1302            - libparagui1.1 1.0.2-1 (embed)
1303            - libspiff1 0.8.3-1 (embed)
1304            NOTE: Might be fixed earlier. Lenny version recorded.
1305            - paraview 3.6.2-1 (embed)
1306            - poco 1.3.6p1-1 (embed)
1307            - scorched3d 41.3dfsg-1+b1 (embed)
1308            NOTE: Might be fixed earlier. Lenny version recorded.
1309            - simgear <unfixed> (embed)
1310            - sitecopy 1:0.16.0-1
1311            - smart <unfixed> (embed)
1312            NOTE: smart embeds celementree, and it includes expat
1313            - swish-e <not-affected> (Linked against libxml, which is used instead)
1314            - tla 1.3.5+dfsg-15 (embed)
1315            - vtk 4.1.20030227-1 (embed)
1316            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1317            - xmlrpc-c <unfixed> (embed)
1318            - iceweasel <unfixed> (embed)
1319            - kompozer <unfixed> (embed)
1320            - vxl 1.13.0-2 (embed)
1321            - xulrunner <unfixed> (embed)
1322            - xmame 0.106-2.1 (embed)
1323            NOTE: Might be fixed earlier. Lenny version recorded.
1324            - apache2 2.2 (embed)
1325            - texlive-bin <not-affected> (Embedded code not compiled in)
1326            - vnc4 <unfixed> (embed)
1327            - xotcl 1.6.6-1 (embed)
1328            - chromium-browser 5.0.375.29~r46008-3
1329            - ia32-libs <unfixable> (embed)
1330    
1331    xerces-c
1332            - xerces-c2 <unfixed> (old-version)
1333            - xerces27 <removed> (old-version)
1334    
1335    md5 (RSA's version; not the gnu version provided by coreutils)
1336            - w3c-libwww <removed> (embed; bug #551942)
1337            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1338    
1339    libparagui1.1
1340            - asc <unfixable> (fork)
1341    
1342    enet
1343            - sauerbraten <unfixed> (embed; #497194)
1344    
1345    eglibc
1346            - glibc <removed> (old-version)
1347            - mksh <unfixable> (static)
1348              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1349    
1350    galib
1351            - gamera 3.2.3-1 (embed)
1352    
1353    configobj
1354            - bzr <unfixed> (embed; bug #555336)
1355            - elisa <unfixed> (embed; bug #555337)
1356            - gaupol <unfixed> (embed; bug #555338)
1357            - ipython <unfixed> (embed; bug #555339)
1358            - pida <unfixed> (embed; bug #555340)
1359            - psychopy <unfixed> (embed; bug #555341)
1360            - rest2web <unfixed> (embed; bug #555342)
1361            - auth2db <unknown> (embed)
1362            - dynagen <unknown> (embed)
1363            - iceweasel <unknown> (embed)
1364            - sabnzbdplus <unknown> (embed)
1365            - xulrunner <unknown> (embed)
1366            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1367    
1368    python-clientform
1369            - bibus <unfixed> (embed; bug #555332)
1370            - zope2.10 <unfixed> (embed; bug #555333)
1371            - zope2.11 <removed> (embed; bug #555334)
1372            - python-mechanize <unknown> (embed)
1373            - twill <unknown> (embed)
1374    
1375    python-mechanize
1376            - zope2.10 <unfixed> (embed; bug #555337)
1377            - zope2.11 <removed> (embed; bug #555338)
1378            - twill <unknown> (embed; bug #555339)
1379    
1380    pexpect
1381            - duplicity 0.6.06-1 (embed; bug #555361)
1382            - hplip <unfixed> (embed; bug #555362)
1383            - smart <unfixed> (embed; bug #555363)
1384    
1385    pyparsing
1386            - bauble <unfixed> (embed; bug #555366)
1387            - boa-constructor 0.6.1-8 (embed; bug #555367)
1388            - calibre <unfixed> (embed; bug #555368)
1389            - matplotlib <unfixed> (embed; bug #531024)
1390            - zhpy 1.7.3.1-1 (embed; bug #555370)
1391            - polybori <unknown> (embed)
1392            - python-whoosh <unknown> (embed)
1393            - twill <unknown> (embed)
1394            - zope-textindexng3 <unknown> (embed)
1395    
1396    python-pysqlite2
1397            - python2.4 <unfixed> (embed; bug #553403)
1398            - python2.5 <unfixed> (embed; bug #553403)
1399    
1400    celementtree
1401            - python2.5 <unfixed> (embed)
1402            - smart <unfixed> (embed)
1403    
1404    elementtree
1405            - python2.5 <unfixed> (embed)
1406            - python2.6 <unfixed> (embed)
1407            - bzr <unfixed> (embed; bug #555343)
1408            - gedit 2.28.2-1 (embed; bug #555344)
1409            - smart <unfixed> (embed)
1410            - solfege <unfixed> (embed; bug #555345)
1411            - w3af <unfixed> (embed; bug #555346)
1412            - python-qt4 <unknown> (embed)
1413            - sphinx <unknown> (embed)
1414            - python-nltk <itp> (embed)
1415    
1416    python2.5
1417            - python2.4 <unfixed> (old-version)
1418            - jython <unfixed> (embed)
1419            NOTE: embeds many stdlib modules
1420            - python-django <unfixed> (embed; bug #555419)
1421            NOTE: embeds stdlib modules: doctest, decimal
1422            - gamera 3.2.3-1 (embed)
1423            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1424            - boa-constructor <unfixed> (embed; bug #555426)
1425            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1426            - nicotine <unfixed> (embed; bug #555427)
1427            NOTE: embeds stdlib modules: ConfigParser
1428            - museek+ <unfixed> (embed; bug #555428)
1429            NOTE: embeds stdlib modules: ConfigParser
1430            - vegastrike-data <removed> (embed)
1431            NOTE: embeds many stdlib modules
1432            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1433            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1434            - config-manager <unfixed> (embed; bug #555423)
1435            NOTE: embeds stdlib modules: optparse
1436            - jhbuild 2.28.0-1 (embed; bug #555421)
1437            NOTE: embeds stdlib modules: optparse, subprocess
1438            - smart <unfixed> (embed; bug #555432)
1439            NOTE: embeds stdlib modules: optparse
1440            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1441            NOTE: embeds stdlib modules: doctest
1442            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1443            NOTE: embeds stdlib modules: doctest
1444            - distribute <unfixed> (embed)
1445            NOTE: embeds stdlib modules: doctest
1446            - python-setuptools <unfixed> (embed; bug #555435)
1447            NOTE: embeds stdlib modules: doctest
1448            - zope.testing <unfixed> (embed; bug #555436)
1449            NOTE: embeds stdlib modules: doctest
1450            - translate-toolkit <unfixed> (embed; bug #555422)
1451            NOTE: embeds stdlib modules: textwrap, contextlib
1452            - libtpclient-py <unfixed> (embed; bug #555424)
1453            NOTE: embeds stdlib modules: subprocess
1454            - grass <unfixed> (embed; bug #555425)
1455            NOTE: embeds stdlib modules: subprocess
1456            - coherence <unfixed> (embed; bug #555429)
1457            NOTE: embeds stdlib modules: uuid
1458            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1459            NOTE: embeds stdlib modules: uuid
1460            - setroubleshoot <removed> (embed; bug #555431)
1461            NOTE: embeds stdlib modules: uuid
1462            - linkchecker <unfixed> (embed; bug #555414)
1463            NOTE: embeds msgfmt.py script
1464            - imdbpy <unfixed> (embed)
1465            NOTE: embeds msgfmt.py script
1466            - kiwi <unfixed> (embed)
1467            NOTE: embeds msgfmt.py script
1468            - moin <unfixed> (embed)
1469            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1470            - plone3 <removed> (embed)
1471            NOTE: embeds msgfmt.py script
1472            - roundup <unfixed> (embed)
1473            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1474            - rednotebook <unfixed> (embed; bug #555415)
1475            NOTE: embeds msgfmt.py script
1476            - turbogears <unfixed> (embed)
1477            NOTE: embeds msgfmt.py script
1478            - elisa <unfixed> (embed)
1479            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1480            - calibre <unfixed> (embed)
1481            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1482            - mailman 1:2.1.13-1 (embed; #555416)
1483            NOTE: embeds msgfmt.py script
1484            - python-docutils <unknown> (embed)
1485            NOTE: embeds stdlib modules: optparse, textwrap
1486            - python-imaging <unknown> (embed)
1487            NOTE: embeds stdlib modules: doctest
1488            - python-mechanize <unknown> (embed)
1489            NOTE: embeds stdlib modules: doctest
1490            - twill <unknown> (embed)
1491            NOTE: embeds stdlib modules: subprocess
1492            - zeroc-ice <unknown> (embed)
1493            NOTE: embeds stdlib modules: subprocess
1494            - wxwidgets2.8 <unknown> (embed)
1495            NOTE: embeds stdlib modules: subprocess
1496            - cycle <unknown> (embed)
1497            NOTE: embeds msgfmt.py script
1498            - deluge <unknown> (embed)
1499            NOTE: embeds msgfmt.py script
1500            - opendict <unknown> (embed)
1501            NOTE: embeds msgfmt.py script
1502            - openerp-client <unknown> (embed)
1503            NOTE: embeds msgfmt.py script
1504            - rapidsvn <unknown> (embed)
1505            NOTE: embeds msgfmt.py script
1506            - wammu <unknown> (embed)
1507            NOTE: embeds msgfmt.py script
1508            - gaphor <unknown> (embed)
1509            NOTE: embeds msgfmt.py script
1510            - pida <unknown> (embed)
1511            NOTE: embeds msgfmt.py script
1512            - python-formencode <unknown> (embed)
1513            NOTE: embeds msgfmt.py script
1514            - duplicity <unfixed> (embed)
1515            NOTE: embeds stdlib module: urlparse, tarfile
1516            - pygopherd <unfixed> (embed)
1517            NOTE: embeds stdlib module: zipfile
1518    
1519    argparse
1520            - twill <unfixed> (embed; bug #555347)
1521            - ipython <unfixed> (embed; bug #555348)
1522    
1523    coherence
1524            - elisa <unfixed> (embed; bug #555335)
1525    
1526    simpletal
1527            - plastex <unfixed> (embed; bug #555371)
1528    
1529    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1530            - postr <unfixed> (embed)
1531            - elisa <unfixed> (embed)
1532    
1533    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1534            - apertium-tolk <unfixed> (embed)
1535            - ipython <unfixed> (embed)
1536            - virtaal <unfixed> (embed)
1537    
1538    distribute
1539            - setuptools <removed> (old-version)
1540    
1541    rails
1542            - jruby1.2 <removed> (embed) [./bench/rails/*]
1543            NOTE: jruby is in non-free, it probably includes rails too
1544            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1545            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1546            - thin <unfixed> (embed) [./spec/rails_app/*]
1547            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1548            NOTE: be dangerous if developers are naively basing their code off of the examples
1549            NOTE: prototype.js is among the example files
1550    
1551    lucene2 (prototype.js is among the embeds in the following)
1552            - lucene <unfixed> (old-version)
1553            - pylucene <unfixed> (embed)
1554            - libpdfbox-java <unfixed> (embed)
1555            - libfontbox-java <unfixed> (embed)
1556            - libjempbox-java <unfixed> (embed)
1557            - solr <unfixed> (embed)
1558    
1559    unicode-data
1560            - syslinux <unfixed> (embed)
1561            - camomile <unfixed> (embed)
1562            - fribidi <unfixed> (embed)
1563            - m17n-db <unfixed> (embed)
1564            - sbcl <unfixed> (embed)
1565            - heimdal <unfixed> (embed)
1566            - icu <unfixed> (embed)
1567            - icu4j <unfixed> (embed)
1568            - krb5 <unfixed> (embed)
1569            - moodle <unfixed> (embed)
1570            - openldap <unfixed> (embed)
1571            - pike7.6 <unfixed> (embed)
1572            - samba <unfixed> (embed)
1573            - samba4 <unfixed> (embed)
1574            - cmucl <unfixed> (embed)
1575            - typo3-src <unfixed> (embed)
1576            - mauve <unfixed> (embed)
1577            - texlive-bin <unfixed> (embed)
1578            - ypsilon <unfixed> (embed)
1579            - jeuclid <unfixed> (embed)
1580            - charmap.app <unfixed> (embed)
1581            - clisp <unfixed> (embed)
1582            - gnulib <unfixed> (embed)
1583            - opensrs-client <unfixed> (embed)
1584            - saxonb <unfixed> (embed)
1585            - rails <unfixed> (embed)
1586    
1587    feedparser
1588            - rawdog <unfixed> (embed; bug #383422)
1589            - miro <unfixed> (embed; bug #555351)
1590            - calibre <unfixed> (embed; bug #555352)
1591            - freevo <unfixed> (embed; bug #555353)
1592            - pida <unfixed> (embed; bug #555354)
1593            - planet-venus <unfixed> (embed; bug #555355)
1594            - plone3 <removed> (embed; bug #555356)
1595            - exaile 0.2.14+debian-1 (embed)
1596            - screenlets 0.1.2-3 (embed)
1597            NOTE: included twice
1598    
1599    agg:
1600            - matplotlib <unfixed> (embed: bug #377271)
1601            - contextfree <unfixed> (embed)
1602            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1603            - exactimage <unfixed> (embed)
1604            - python-enable <unfixed> (embed)
1605            - mapnik 0.5.1-3 (embed)
1606            NOTE: links statically to agg, but shared library is not available (bug #377271)
1607    
1608    vtk
1609            - paraview <unfixable> (embed; bug #495426)
1610            - libmesh <unfixed>
1611            NOTE: embeds exodus; not sure if there's a version external to vtk
1612    
1613    txt2tags
1614            - rednotebook <unfixed> (embed)
1615    
1616    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1617            - gajim <unfixed> (embed)
1618            - emesene <unfixed> (embed)
1619            - convirt <unfixed> (embed)
1620            - pida <unfixed> (embed)
1621            - rednotebook <unfixed> (embed)
1622    
1623    horde3 (prototype.js is among the embeds in the following)
1624            - mnemo2 <unfixed> (embed)
1625            - nag2 <unfixed> (embed)
1626            - wordpress <unfixed> (embed)
1627            NOTE: Text_Diff (wp-includes/Text/Diff*)
1628    
1629    cimg
1630            - gmic <unfixed> (embed)
1631    
1632    mootools
1633            - kdenetwork <unfixed> (embed)
1634            - gallery <unfixed> (embed)
1635            - jspwiki <unfixed> (embed)
1636            - vdr-plugin-live <unfixed> (embed)
1637            - perl-doc-html <unfixed> (embed)
1638    
1639    openldap
1640            - openldap2.3 <removed> (old-version)
1641            - ia32-libs <unfixable> (embed)
1642    
1643    grub2
1644            - grub <unfixed> (old-version)
1645    
1646    gnupginterface
1647            - duplicity <unfixed> (embed)
1648    
1649    python-dateutil
1650            - awn-extras-applets <unfixed> (embed)
1651            - matplotlib <unknown> (embed)
1652    
1653    cups
1654            - cupsys <removed> (old-version)
1655            - ia32-libs <unfixable> (embed)
1656    
1657    yui
1658            - bcfg2 <not-affected> (present in source but not included in any binary files)
1659            - serendipity 1.5.3-1 (embed; bug #557746)
1660            - moodle 1.8.2.dfsg-5 (embed)
1661            - jifty 0.91117-1 (embed; bug #557748)
1662            - webgui 7.7.26-1 (embed)
1663            - loggerhead 1.17-1 (embed)
1664            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1665    
1666    quake3 (vanilla source not packaged in debian)
1667            - openarena <unfixable> (fork)
1668    
1669    quake2 (vanilla source not packaged in debian)
1670            - alien-arena <unfixable> (fork)
1671            - warsow <unfixable> (fork)
1672    
1673    quake (vanilla source not packaged in debian)
1674            - darkplaces <unfixable> (fork)
1675            - quakespasm <unfixable> (fork)
1676            - nexuiz 2.5.2+dp-1 (old-version)
1677            NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1678    
1679    libtheora
1680            - iceweasel <not-affected> (uses xulrunner)
1681            - xulrunner <unfixed> (embed; bug #540959)
1682            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1683            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1684            - iceape <unfixed> (embed; bug #559276)
1685            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1686            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1687    
1688    dtoa
1689            - bfilter <unfixed> (embed)
1690            - cacao <removed> (embed)
1691            - cdrdao <unfixed> (embed)
1692            - classpath <unfixed> (embed)
1693            - freej <unfixed> (embed)
1694            - iceape <unfixed> (embed)
1695            - iceweasel <unfixed> (embed)
1696            - jscoverage <unfixed> (embed)
1697            - kde4libs <unfixed> (embed)
1698            - kdelibs <unfixed> (embed)
1699            - kompozer <unfixed> (embed)
1700            - libv8 <unfixed> (embed)
1701            - mono <unfixed> (embed)
1702            - newlib <unfixed> (embed)
1703            - nspr <unfixed> (embed)
1704            - php5 <unfixed> (embed)
1705            - polyml <unfixed> (embed)
1706            - qt4-x11 <unfixed> (embed)
1707            - rhino <unfixed> (embed)
1708            NOTE: code translated to Java
1709            - ruby1.8 <unfixed> (embed)
1710            - ruby1.9 <unfixed> (embed)
1711            - ruby1.9.1 <unfixed> (embed)
1712            - sdd <unfixed> (embed)
1713            - sfind <unfixed> (embed)
1714            - star <unfixed> (embed)
1715            - tinymux <unfixed> (embed)
1716            - virtualbox-ose <unfixed> (embed)
1717            - webkit <unfixed> (embed)
1718            - xulrunner <unfixed> (embed)
1719    
1720    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1721            - firegpg <unfixed> (embed)
1722            - enigmail <unfixed> (embed)
1723    
1724    ptmalloc (not packaged in Debian)
1725            - crystalspace <unfixed> (embed)
1726            - qt4-x11 <unfixed> (embed)
1727    
1728    svgalib
1729            - usplash <unfixed> (embed)
1730            - ia32-libs <unfixable> (embed)
1731    
1732    bogl
1733            - usplash <unfixed> (embed)
1734    
1735    taglist
1736            - usplash <unfixed> (embed)
1737    
1738    portaudio
1739            - audacity <unfixed> (embed; bug #323711)
1740    
1741    nyquist
1742            - audacity <unfixed> (embed)
1743            NOTE: embeds a forked nyquist with support for a shared library
1744    
1745    vamp-plugin-sdk
1746            - audacity <unfixed> (embed)
1747    
1748    wordpress
1749            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1750            - wordpress-mu <removed> (fork)
1751    
1752    php5
1753            - php4 <removed> (old-version)
1754    
1755    classpath
1756            - libgnucrypto-java <removed> (embed; bug #559788)
1757    
1758    libtool
1759            - apr <unfixed> (static; bug #489625)
1760            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1761            - arts <unfixed> (embed)
1762            - bochs 2.4.2-1 (embed; bug #560884)
1763            - camserv <unfixed> (embed)
1764            - collectd 4.8.2-1 (embed)
1765            - courier-authlib 0.58-4 (embed)
1766            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1767            - cvsnt 2.5.04.3236-1.2 (embed)
1768            - dico <not-affected> (Uses the system copy of ltdl)
1769            - freeradius 0.1+20010527-1 (embed)
1770            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1771            - ggobi 2.1.9~20091212-1 (embed)
1772            - glame 2.0.1-4 (embed)
1773            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1774            - gnash 0.8.7-2 (embed)
1775            - gnu-smalltalk <unfixed> (embed; bug #566777)
1776            - google-gadgets 0.10.5-0.3 (embed)
1777            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1778            - graphicsmagick 1.3.5-6 (embed)
1779            - graphviz 2.8-3 (embed)
1780            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1781            - guile-1.6 1.6.8-7 (embed)
1782            - hamlib 1.2.11-1 (embed)
1783            - hercules 3.06-1.2 (embed)
1784            - jags 1.0.4-3 (embed; bug #560864)
1785            - kdelibs <unfixed> (embed)
1786            - libannodex <removed> (embed)
1787            - libextractor 0.5.23+dfsg-4 (embed)
1788            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1789            - libtunepimp 0.5.3-7.3 (embed)
1790            - mp4h 1.3.1-4.1 (embed)
1791            - naim <removed> (embed)
1792            - parser-mysql <unfixed> (embed)
1793            - pinball 0.3.1-11 (embed)
1794            - redland <unfixed> (embed)
1795            - siproxd 1:0.8.1-2 (embed; bug #657070)
1796            - ski <unfixed> (embed)
1797            - synfig 0.62.00-1 (embed)
1798            - unixodbc 2.2.4-5 (embed)
1799            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1800            - clamav 0.95+dfsg-1 (embed)
1801            - imagemagick 6:6.2.3.1-1 (embed)
1802            - hypre 2.4.0b-5 (embed)
1803            - lam <unfixed> (embed)
1804            - openmpi <unfixable> (embed; bug #559386)
1805            - parser <unfixed> (embed)
1806            - pdsh 2.18-5 (embed; bug #560892)
1807            - sbnc 1.2-8 (embed)
1808            - sdcc <unfixed> (embed)
1809            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1810            - proftpd-dfsg <unfixed> (embed; bug #561748)
1811            - babel 1.4.0.dfsg-5 (embed)
1812            - libprelude 0.9.14-2 (embed)
1813            - heartbeat 2.1.4-7 (embed)
1814            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1815            NOTE: might've been fixed earlier
1816            - gcc-* <unknown> (embed)
1817            - ia32-libs <unfixable> (embed)
1818    
1819    ocamlgsl
1820            - orpie 1.5.1-7.1 (embed; bug #550058)
1821    
1822    xdotool
1823            - keynav <unfixed> (embed; bug #560103)
1824    
1825    bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1826            - supertuxkart <unfixed> (embed)
1827            - blender <unfixed> (embed)
1828            - critterding <unfixed> (embed)
1829            NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1830    
1831    ghostscript
1832            - gs-gpl <removed> (old-version)
1833    
1834    icedove
1835            - thunderbird <removed> (old-version)
1836    
1837    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1838            - jquery <unfixed> (embed)
1839    
1840    sed
1841            - ssed <unfixed> (fork)
1842    
1843    phpatomlib (http://code.google.com/p/phpatomlib)
1844            - wordpress <unfixed> (embed)
1845    
1846    Services_JSON (http://pear.php.net/package/Services_JSON)
1847            - wordpress <unfixed> (embed)
1848    
1849    phpass (http://www.openwall.com/phpass/)
1850            - gallery2 <unfixed> (embed)
1851            - wordpress <unfixed> (embed)
1852            - typo3-src <unfixed> (modified-embed)
1853            NOTE: file refers to drupal, maybe there's a copy somewhere there
1854            NOTE: a copyright owner search didn't match anything
1855            - libauthen-passphrase-perl <unfixable> (fork)
1856            NOTE: perl implementation of phpass
1857            - phpbb3 <unfixed>
1858            NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1859    
1860    squirrelmail
1861            - wordpress <unfixed> (embed)
1862            NOTE: class-pop3.php
1863    
1864    ezSQL (http://www.woyano.com/jv/ezsql)
1865            - wordpress <unfixable> (fork)
1866            NOTE: wp-db.php
1867    
1868    Diff.php (Clay Loveless' version/killersoft.com)
1869            - php-versioncontrol-svn <unfixed>
1870    
1871    libm (provided by libc)
1872            - spring <unfixed> (embed)
1873            NOTE: embedded by embedded copy of streflop
1874            - megaglest <unfixed> (embed)
1875            NOTE: embedded by embedded copy of streflop
1876            - aide <unfixed> (static)
1877            - busybox <unfixed> (static)
1878            - mindi-busybox <unfixed> (static)
1879            - qemu <unfixed> (static)
1880            NOTE: qemu-user-static
1881            - tuxonice-userui <unfixed> (static)
1882            - zsh <unfixed> (static)
1883            NOTE: zsh-static
1884            - tripwire <unfixed>
1885    
1886    streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1887            - spring <unfixed> (modified-embed)
1888            NOTE: old, modified version of streflop
1889            - megaglest <unfixed> (modified-embed)
1890            NOTE: megaglest uses the same streflop code as spring
1891    
1892    minizip
1893            - spring <unfixed> (embed)
1894    
1895    oscpack
1896            - spring <unfixed> (embed)
1897    
1898    hpiutil2
1899            - spring <unfixed> (embed)
1900    
1901    p7zip
1902            - spring <unfixed> (embed)
1903    
1904    pythonqt (doesn't seem to be python-qtN, unknown source)
1905            - fontmatrix <unfixed> (embed)
1906            - elmerfem <unfixed> (embed)
1907    
1908    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1909            - docvert <unfixed> (embed)
1910            - jifty <unfixed> (embed)
1911            - kdenetwork <unfixed> (embed)
1912            - mediatomb <unfixed> (embed)
1913            - plastex <unfixed> (embed)
1914            - plone3 <removed> (embed)
1915            - python-chaco <unfixed> (embed)
1916            - python-docutils <unfixed> (embed)
1917            - s5 <unfixed> (embed)
1918            - zope2.10 <unfixed> (embed)
1919            - zope2.11 <removed> (embed)
1920            - cython <not-affcted> (embed)
1921            NOTE: part of documentation, which is not installed into the binary package
1922    
1923    python-docutils
1924            - zope2.10 <unfixed> (embed)
1925            - zope2.11 <removed> (embed)
1926    
1927    tesseract
1928            - ocropus <unfixed> (static)
1929    
1930    antlr
1931            - kdevelop <unfixed> (embed)
1932    
1933    libxerces2
1934            - openjdk-6 <unfixed> (embed)
1935    
1936    kfreebsd-8
1937            - kfreebsd-7 <unfixed> (old-version)
1938            - kfreebsd-6 <removed> (old-version)
1939    
1940    ruby1.9.1
1941            - ruby1.9 <unfixed> (old-version)
1942            - ruby1.8 <unfixed> (old-version)
1943    
1944    maildrop
1945            - courier <unfixed> (embed) [./maildrop]
1946    
1947    glee
1948            - warzone2100 <not-affected> (embed)
1949    
1950    phing
1951            - symfony <unfixed> (embed)
1952    
1953    pake
1954            - symfony <unfixed> (embed)
1955    
1956    propel
1957            - symfony <unfixed> (embed)
1958    
1959    creole
1960            - symfony <unfixed> (embed)
1961    
1962    hfsutils
1963            - cdrkit <unfixed> (embed; bug #570187)
1964            NOTE: embeds hfsutils code in genisoimage
1965    
1966    cdrkit
1967            - grub2 <unfixed> (embed; bug #570156)
1968            NOTE: genisoimage imported into grub-mkisofs
1969    
1970    kdebase-workspace
1971            - kdebase <unfixed> (old-version)
1972    
1973    file
1974            - php5 <unfixable> (modified-embed)
1975            [lenny] - php5 <not-affected>
1976    
1977    cdb
1978            - php5 <unfixed> (embed)
1979    
1980    libmbfl (itp: #570708)
1981            - php5 <unfixed> (embed)
1982            NOTE: PHP is actually the current upstream, ITP is of that code
1983    
1984    libonig
1985            - php5 5.3.2-1 (embed)
1986    
1987    xmlrpc-epi
1988            - php5 <unfixed> (embed)
1989    
1990    swt-gtk
1991            - eclipse <unfixed> (embed; bug #538808)
1992    
1993    txt2html
1994            - wml 2.0.11ds2-1 (embed)
1995    
1996    ca-certificates
1997            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1998    
1999    openexr
2000            - freeimage <unfixed> (embed)
2001    
2002    libmng
2003            - freeimage <unfixed> (embed)
2004    
2005    openjpeg
2006            - freeimage <unfixed> (embed)
2007    
2008    libjpeg6b
2009            - freeimage <unfixed> (embed)
2010            - ia32-libs <unfixable> (embed)
2011    
2012    libjpeg (don't know what exact version)
2013            - dcmtk <unfixed>
2014            - gdcm <unfixed>
2015            - insighttoolkit <unfixed>
2016            - openarena 0.8.5-5+exp1 (bug #495966)
2017            - outguess <unfixed>
2018            - squeak-vm <unfixed> (embed)
2019            - tremulous <unfixed>
2020            - tuxonice-userui <unfixed> (static)
2021            - fpc <unfixed> (static)
2022            - lazarus <unfixed> (static)
2023            NOTE: inherited from fpc, see #472304
2024            - mseide-msegui <unfixed> (static)
2025            NOTE: inherited from fpc, see #472304
2026            - easymp3gain <unfixed> (static)
2027            NOTE: inherited from fpc, see #472304
2028            - winff <unfixed> (static)
2029            NOTE: inherited from fpc, see #472304
2030            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2031    
2032    
2033    lxr
2034            - lxr-cvs <unfixed> (embed)
2035    
2036    libfile-copy-recursive-perl
2037            - r-base <unfixed> (embed; bug #577427)
2038            - r-base-core-ra <unfixed> (embed; bug #577429)
2039    
2040    delimmatch
2041            - r-base <unfixed> (embed; bug #577433)
2042            - r-base-core-ra <unfixed> (embed; bug #577434)
2043    
2044    libsmf (ITP: #572558)
2045            - denemo <unfixed> (embed)
2046            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2047    
2048    libselinux
2049            - dpkg 1.15.6 (static)
2050            - ia32-libs <unfixable> (embed)
2051    
2052    xinha (ITP: #479708)
2053            - horde3 <unfixed>
2054            - serendipity <unfixed>
2055            - openacs <unfixed>
2056            - dotlrn <unfixed>
2057    
2058    dvipng
2059            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2060    
2061    dvipdfmx
2062            - texlive-bin <unfixed> (embed)
2063            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2064    
2065    lcdf-typetools
2066            - texlive-bin 2009-1 (embed)
2067    
2068    tex4ht
2069            - texlive-bin 2009-1 (embed)
2070    
2071    freetype
2072            - texlive-bin 2009-1 (embed)
2073            - ia32-libs <unfixable> (embed)
2074    
2075    freetype2
2076            - texlive-bin 2009-1 (embed)
2077            - tuxonice-userui <unfixed> (static)
2078            - instantbird <unfixed>
2079            - qt4-x11 <unknown> (embed)
2080            - vtk <unknown> (embed)
2081            - paraview <unknown> (embed)
2082            NOTE: from embedded copy of vtk
2083    
2084    silgraphite
2085            - texlive-bin <unfixed> (embed)
2086    
2087    unzip
2088            - texlive-bin 2009-1 (embed)
2089    
2090    jbig2dec
2091            - ghostscript 8.71~dfsg2-1 (embed)
2092    
2093    libxml2
2094            - chromium-browser 5.0.375.29~r46008-1
2095            - ia32-libs <unfixable> (embed)
2096    
2097    protobuf
2098            - chromium-browser 5.0.375.70~r48679-2
2099    
2100    libv8
2101            - chromium-browser 5.0.375.38~r46659-1
2102    
2103    nspr
2104            - chromium-browser 5.0.375.29~r46008-3
2105            - ia32-libs <unfixable> (embed)
2106    
2107    yasm
2108            - chromium-browser 5.0.375.29~r46008-2
2109    
2110    libxslt
2111            - chromium-browser 5.0.375.29~r46008-1
2112            - ia32-libs <unfixable> (embed)
2113    
2114    miniupnpc
2115            - warzone2100 2.3.7-2
2116            NOTE: code still present in tarball but removed during build and unused
2117            - vino 3.2.2-1
2118            NOTE: code still present in tarball but removed during build and unused
2119    
2120  xli:  iniparser (not packaged in Debian; RFP bug #582657)
2121  xloadimage          - warzone2100 <unfixed> (modified-embed)
2122    
2123  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  pyglet
2124  openmotif          - sympy <unfixed> (embed; bug #459716)
2125  xfree86/xorg (in libxpm)  
2126    mpmath
2127            - sympy <unfixed> (embed; bug #541746)
2128    
2129    openssh
2130            - libpam-ssh <unfixed> (embed; bug #598522)
2131    
2132    curl
2133            - cmake 2.6.0-6 (embed)
2134            NOTE: Might be fixed earlier. Lenny version recorded.
2135            - criticalmass <unfixed> (static; bug #599061)
2136            - wengophone 2.1.0~beta1-svn9983-1 (embed)
2137            - ia32-libs <unfixable> (embed)
2138    
2139    lib3ds
2140            - boson <unfixed> (embed; bug #600900)
2141            - openscenegraph <unfixed> (embed; bug #601181)
2142    
2143    xcftools
2144            - gnome-xcf-thumbnailer <unfixed> (embed)
2145    
2146    simplejson
2147            - exaile <unfixed> (embed; bug #604547)
2148    
2149    libasycns
2150            - loudmouth <unfixed> (embed; bug #566143)
2151    
2152    plplot
2153            - emboss <unfixed> (fork)
2154    
2155    acl
2156            - ia32-libs <unfixable> (embed)
2157    
2158    arts
2159            - ia32-libs <unfixable> (embed)
2160    
2161    attr
2162            - ia32-libs <unfixable> (embed)
2163    
2164    audiofile
2165            - ia32-libs <unfixable> (embed)
2166    
2167    avahi
2168            - ia32-libs <unfixable> (embed)
2169    
2170    celt
2171            - ia32-libs <unfixable> (embed)
2172    
2173    coreutils
2174            - ia32-libs <unfixable> (embed)
2175    
2176    cyrus-sasl2
2177            - ia32-libs <unfixable> (embed)
2178    
2179    db4.8
2180            - ia32-libs <unfixable> (embed)
2181    
2182    dbus
2183            - ia32-libs <unfixable> (embed)
2184    
2185    directfb
2186            - ia32-libs <unfixable> (embed)
2187    
2188    esound
2189            - ia32-libs <unfixable> (embed)
2190    
2191    fltk1.1
2192            - ia32-libs <unfixable> (embed)
2193    
2194    fontconfig
2195            - ia32-libs <unfixable> (embed)
2196    
2197    freeglut
2198            - ia32-libs <unfixable> (embed)
2199    
2200    gcc-3.3
2201            - ia32-libs <unfixable> (embed)
2202    
2203    gdbm
2204            - ia32-libs <unfixable> (embed)
2205    
2206    gnutls26
2207            - ia32-libs <unfixable> (embed)
2208    
2209    hal
2210            - ia32-libs <unfixable> (embed)
2211    
2212    isdnutils
2213            - ia32-libs <unfixable> (embed)
2214    
2215    jack-audio-connection-kit
2216            - ia32-libs <unfixable> (embed)
2217    
2218    keyutils
2219            - ia32-libs <unfixable> (embed)
2220    
 kerberized apps with BSD origin:  
 krb4  
2221  krb5  krb5
2222  heimdal          - ia32-libs <unfixable> (embed)
2223    
2224  grip: (which pkg is the origin?)  lesstif2
2225  libcdaudio          - ia32-libs <unfixable> (embed)
 grip  
 gnome-vfs (vfs2 as well?)  
2226    
2227  fudforum:  libaio
2228  phpgroupware-fudforum          - ia32-libs <unfixable> (embed)
 egroupware-fudforum (removed from egroupware after sarge)  
2229    
2230  cvs:  libasyncns
2231  gcvs (at least an additional script is included, check if there's more)          - ia32-libs <unfixable> (embed)
2232    
2233  pcre:  libcap2
2234  all pythons          - ia32-libs <unfixable> (embed)
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
2235    
2236  tiff:  libdrm
2237  wxpythongtk (check, which debian pkg this is in)          - ia32-libs <unfixable> (embed)
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
2238    
2239  uudeview:  libedit
2240  libconvert-uulib-perl          - ia32-libs <unfixable> (embed)
2241    
2242  sqlite: (not affected by security vulnerabilities so far)  libexif
2243  amarok          - ia32-libs <unfixable> (embed)
2244    
2245  util-linux/mount:  libgcrypt11
2246  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - ia32-libs <unfixable> (embed)
2247    
2248  webmin:  libgpg-error
2249  usermin (only in sarge)          - ia32-libs <unfixable> (embed)
2250    
2251  sylpheed:  libgphoto2
2252  sylpheed-claws          - ia32-libs <unfixable> (embed)
2253    
2254  phpsysinfo:  libice
2255  egroupware          - ia32-libs <unfixable> (embed)
 phpgroupware  
2256    
2257  phpldapadmin:  libieee1284
2258  egroupware (removed from egroupware after sarge)          - ia32-libs <unfixable> (embed)
2259    
2260  chmlib:  libjpeg8
2261  kchmviewer (not packaged in Debian)          - ia32-libs <unfixable> (embed)
2262    
2263  libavcodec/libavformat:  libnss-ldap
2264  ffmpeg          - ia32-libs <unfixable> (embed)
 xine-lib  
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
2265    
2266  mad MPEG decoding lib:  libogg
2267  mad          - ia32-libs <unfixable> (embed)
 xine-lib  
2268    
2269  libdts:  libpam-ldap
2270  libdts          - ia32-libs <unfixable> (embed)
 xine-lib  
2271    
2272  flac:  libsamplerate
2273  flac          - ia32-libs <unfixable> (embed)
 xine-lib  
2274    
2275  liba52:  libsdl1.2
2276  a52dec          - ia32-libs <unfixable> (embed)
 xine-lib  
2277    
2278  libmpeg2:  libsm
2279  mpeg2dec          - ia32-libs <unfixable> (embed)
 xine-lib  
2280    
2281  curl:  libssh2
2282  wget (code for NTLM authentication)          - ia32-libs <unfixable> (embed)
2283    
2284  TODO evaluate:  libtasn1-3
2285  gimp-gap (potentially using ffmpeg code as well)          - ia32-libs <unfixable> (embed)
2286    
2287  uw-imap:  libx11
2288  pine          - ia32-libs <unfixable> (embed)
2289    
2290  imagemagick:  libx86
2291  graphicsmagick          - ia32-libs <unfixable> (embed)
2292    
2293  halibut:  libxau
2294  nsis          - ia32-libs <unfixable> (embed)
2295    
2296  libghttp:  libxcb
2297  hotway          - ia32-libs <unfixable> (embed)
2298    
2299  etl-dev (will be renamed to libetl-dev soon):  libxcomposite
2300  synfig          - ia32-libs <unfixable> (embed)
2301    
2302  libmms:  libxcursor
2303  xine-lib          - ia32-libs <unfixable> (embed)
 mimms  
2304    
2305  FCKeditor:  libxdamage
2306  knowledgeroot          - ia32-libs <unfixable> (embed)
2307    
2308  Moodle contains lots of things:  libxdmcp
2309  AdoDB          - ia32-libs <unfixable> (embed)
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
2310    
2311  TinyMCE:  libxext
2312  wordpress          - ia32-libs <unfixable> (embed)
2313  moodle  
2314  knowledgeroot  libxfixes
2315  joomla (ITP)          - ia32-libs <unfixable> (embed)
2316    
2317  scintilla:  libxi
2318  scite          - ia32-libs <unfixable> (embed)
2319  qscintilla  
2320  geany  libxinerama
2321            - ia32-libs <unfixable> (embed)
2322  libphp-adodb:  
2323  gallery2  libxmu
2324  phppgadmin          - ia32-libs <unfixable> (embed)
2325  egroupware  
2326  phpwiki  libxp
2327  moodle          - ia32-libs <unfixable> (embed)
2328  cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
2329    libxrandr
2330  gzip:          - ia32-libs <unfixable> (embed)
2331  linux-kernel (lib/inflate.c)  
2332  klibc (based on linux-kernel gzip code)  libxrender
2333  busybox          - ia32-libs <unfixable> (embed)
2334    
2335  ffmpeg:  libxss
2336  mplayer (#395252)          - ia32-libs <unfixable> (embed)
2337    
2338  neon:  libxt
2339  cadaver (all, but being worked on: #188381)          - ia32-libs <unfixable> (embed)
2340  gnome-vfs2 (#395874)  
2341  litmus (#395875)  libxtst
2342  screem (sarge only)          - ia32-libs <unfixable> (embed)
2343  sitecopy (#395876)  
2344  tla (etch/sid only: #395877)  libxv
2345            - ia32-libs <unfixable> (embed)
2346  libmodplug:  
2347  gst-plugins-bad0.10  libxxf86vm
2348            - ia32-libs <unfixable> (embed)
2349  libvncserver:  
2350  vino  lzo2
2351            - ia32-libs <unfixable> (embed)
2352  putty:  
2353  filezilla  mesa
2354            - ia32-libs <unfixable> (embed)
2355  tinyxml (not packaged in Debian):  
2356  filezilla  mpg123
2357            - ia32-libs <unfixable> (embed)
2358  gv:  
2359  evince (ps/ tree from gv 3.5.8)  nas
2360  evince-gtk (not packaged in Debian)          - ia32-libs <unfixable> (embed)
2361    
2362  libXbae:  nss
2363  libpawlib2-lesstif package (from Cernlib)          - ia32-libs <unfixable> (embed)
2364    
2365  libXaw:  openal-soft
2366  libpawlib2-lesstif package (from Cernlib)          - ia32-libs <unfixable> (embed)
2367    
2368  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  openssl
2369            - ia32-libs <unfixable> (embed)
2370  libgd2:  
2371  graphviz (lib/gd seems to be 2.0.33)  pam
2372            - ia32-libs <unfixable> (embed)
2373  rar:  
2374  unrar-nonfree  popt
2375            - ia32-libs <unfixable> (embed)
2376  unrar-free: (maybe this code is derived from the original rar, too?)  
2377  clamav (seems to be disabled in default config)  pulseaudio
2378            - ia32-libs <unfixable> (embed)
2379  mplayer (DirectMedia Object loader):  
2380  xine-lib (src/libw32dll/)  sane-backends
2381  vlc (modules/codec/dmo/)          - ia32-libs <unfixable> (embed)
2382    
2383    sqlite3
2384            - ia32-libs <unfixable> (embed)
2385            - chromium-browser <unfixed> (embed)
2386    
2387    sysfsutils
2388            - ia32-libs <unfixable> (embed)
2389    
2390    tcp-wrappers
2391            - ia32-libs <unfixable> (embed)
2392    
2393    tdb
2394                  - thunar 1.2.1-3 (old-version)
2395            - ia32-libs <unfixable> (embed)
2396    
2397    tslib
2398            - ia32-libs <unfixable> (embed)
2399    
2400    unixodbc
2401            - ia32-libs <unfixable> (embed)
2402    
2403    xaw3d
2404            - ia32-libs <unfixable> (embed)
2405    
2406    xbitmaps
2407            - ia32-libs <unfixable> (embed)
2408    
2409    xcb-util
2410            - ia32-libs <unfixable> (embed)
2411    
2412    xcursor-themes
2413            - ia32-libs <unfixable> (embed)
2414    
2415    xft
2416            - ia32-libs <unfixable> (embed)
2417    
2418    dicomparser
2419            - vtk <unfixed>
2420            - paraview <unfixed>
2421            NOTE: as part of its copy of vtk
2422            - insighttoolkit <unfixed>
2423    
2424    proj
2425            - vtk <unfixed>
2426            - paraview <unfixed>
2427            NOTE: as part of its copy of vtk
2428            - therion <unfixed>
2429            - python-pyproj 1.8.6-1
2430    
2431    netcdf
2432            - vtk <unfixed>
2433            - paraview <unfixed>
2434            NOTE: as part of its copy of vtk
2435    
2436    insighttoolkit
2437            - vtk <unfixed> (embed)
2438            NOTE: embeds at least MetaIO
2439            - paraview <unfixed> (embed)
2440            NOTE: embeds at least MetaIO
2441    
2442    gl2ps
2443            - vtk <unfixed>
2444            - paraview <unfixed>
2445            NOTE: as part of its copy of vtk
2446            - avogadro <unfixed>
2447            - gabedit <unknown> (embed)
2448            NOTE: not sure if it is built
2449            - drawxtl <unfixed> (embed)
2450            - rgl <unfixed> (embed)
2451            - gmsh <unfixed>
2452            - mcrl2 <unfixed> (embed)
2453            - mysql-gui-tools <unknown> (embed)
2454            NOTE: not sure if it is built
2455            - opencascade <unfixed> (embed)
2456            - orsa <unfixed> (embed)
2457            - qtiplot <unfixed> (embed)
2458            - qwtplot3d <unfixed> (embed)
2459            - root-system <unknown> (embed)
2460            NOTE: not sure if it is built
2461            - scilab <unfixed> (embed)
2462            - snd <unknown> (embed)
2463            NOTE: not sure if it is built
2464            - xmakemol <unfixed> (embed)
2465    
2466    qwtplot3d
2467            - qtiplot <unfixed>
2468    
2469    parseafm (from Adobe)
2470            - vftool <unfixed>
2471            - gnustep-back <unknown>
2472            NOTE: looks like it isn't built
2473            - evince <unfixed>
2474    
2475    bugzilla
2476            - perl <unknown>
2477            - libcgi-pm-perl <unknown>
2478    
2479    isc-dhcp
2480            - dhcp3 <unfixable> (old-version)
2481            - dhcp <unfixable> (old-version)
2482    
2483    chipmunk (ITP: #623274)
2484            - xmoto <unfixed> (embed; bug #623299)
2485            - libtuxcap <unfixed> (embed; bug #623300)
2486    
2487    libsigsegv
2488            - gawk 3.1.8+dfsg-0.1
2489    
2490    pdfrw
2491            - rst2pdf <unfixed> (embed; bug #638607)
2492    
2493    bind9
2494            - isc-dhcp <unfixed> (embed; bug #643569)
2495            NOTE: introduced in upstream 4.2 series
2496    
2497    qof
2498            - gnucash <unfixed> (embed; bug #556245)
2499    
2500    feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2501            - megaglest <unfixed> (modified-embed)
2502    
2503    acsccid
2504            - ccid 1.3.11 <unfixed> (fork)
2505            - openct <unfixed> (modified-embed)
2506            - towitoko <unfixed> (modified-embed)
2507    
2508  libwpd (WordPerfect converter):  ccid
2509  openoffice.org          - openct <unfixed> (modified-embed)
2510            - towitoko <unfixed> (modified-embed)

Legend:
Removed from v.5564  
changed lines
  Added in v.18637

  ViewVC Help
Powered by ViewVC 1.1.5