/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3537 by micah, Sat Feb 25 04:13:03 2006 UTC revision 18325 by luciano, Sat Jan 28 10:17:34 2012 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20    sort: static (linking statically against a lib)
21          embed (embeds a copy of the library into another source package)
22          modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26  xpdf code: (some use xpdf 2, some xpdf 3)  The srcpkg might be some string to identify the code if there is no
27  gpdf (will be replaced by evince in Gnome 2.12)  specific source package.
28  pdftohtml (current poppler source package has a ported version, pinged maintainer)  
29  kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  Everything up to the next line is ignored.
30  tetex-bin (links to poppler since 3.0-12)  ---BEGIN
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
31  poppler  poppler
32  koffice (upstream is working on using poppler, probably not in time for Etch)          - pdftohtml <unknown>
33  libextractor          [sarge] - pdftohtml <unfixed>
34  pdfkit.framework (links to poppler since 0.8-4)          [etch] - pdftohtml <unfixed>
35            NOTE: has been replaced by poppler-utils
36            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37            - texlive-base 3.0-12 (embed)
38            - texlive-bin 2007-1 (embed)
39            - koffice 1:2.0.0-1 (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53    ppmd
54            - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60            - dnsproxy <unknown> (embed)
61    
62    lrmi
63            - read-edid 2.0.0-1 (embed; bug #495131)
64            - s3switch <unfixed> (embed)
65            - xresprobe <unfixed> (embed)
66            - zhcon <unfixed> (embed)
67    
68    php-htmlpurifier
69            - mahara 1.2.5-1 (embed)
70            - knowledgeroot 0.9.9.5-5 (embed)
71            - moodle <unfixed> (embed)
72    
73    peercast
74            - gnome-peercast <removed> (embed)
75            [etch] - gnome-peercast <unfixed> (embed)
76    
77    silc-toolkit
78            - silc-client 1.1~beta6-1 (embed)
79    
80    icclib
81            - ghostscript <unfixed> (embed)
82            - argyll <unfixed> (embed)
83    
84    libusb
85            - argyll <unfixed> (embed)
86            - ia32-libs <unfixable> (embed)
87    
88    dietlibc
89            - ccontrol 0.9.1+20071204-1 (static)
90            - mksh <unfixable> (static)
91            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
92    
93    libmikmod
94            - pysol-sound-server <unfixed> (modified-embed)
95            - sdl-mixer1.2 <unfixed> (embed)
96            TODO: report bug
97            - uqm 0.6.2.dfsg-8 (embed)
98            NOTE: Might be fixed earlier. Lenny version recorded.
99            - black-box 1.4.6-2.2 (embed)
100            NOTE: Might be fixed earlier. Lenny version recorded.
101    
102    libiax
103            - iaxmodem <unfixable> (embed; bug #548885)
104    
105    spandsp
106            - iaxmodem <unfixable> (embed; bug #548885)
107    
108    python-paramiko
109            - fabric 0.9.0-2 (embed; bug #561398)
110    
111    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
112            - dpkg 1.15.6 (static)
113            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
114            - rsync <unfixed> (embed)
115            - cherokee <unfixed> (embed)
116            NOTE: somehow derived code base
117            - mono <unfixed> (embed)
118            TODO: check mozilla
119            - linux-2.6 <unfixed> (embed)
120            - pvpgn 1.7.8-2 (embed)
121            - mrtg 2.12.2-1 (embed)
122            - rpm <unknown> (embed)
123            NOTE: pinged anibal since when rpm was fixed
124            - tuxcmd-modules <unfixed> (embed)
125            - zsync <unfixed>
126            - tra <unfixed>
127            - sash <unfixed>
128            - nsis <unfixed>
129            - pyfits 1:2.3.1-1
130            - mseide-msegui <unfixed>
131            NOTE: mseide
132            - mirrordir <unfixed>
133            - poco <unfixed>
134            - klibc <unfixed>
135            - emboss 6.3.1-1 (embed)
136            - ghostscript 8.71~dfsg2-6 (embed)
137            NOTE: ghostscript fixed sometime before this, but this is the version i checked
138            - freeimage <unfixed>
139            - clamav <unfixed> (fork)
140            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
141            - tuxonice-userui <unfixed> (static)
142            - plt-scheme <unfixed>
143            - perl <unfixed>
144            - paraview <unfixed>
145            - velvet 0.7.56~nozlibcopy-1
146            - gcvs <unfixed>
147            - dump <unfixed>
148            - aide <unfixed> (static)
149            - dar <unfixed> (static)
150            - avfs <unfixed>
151            - fpc <unfixed>
152            - winff <unfixed>
153            NOTE: inherited from fpc, see #472304
154            - lazarus <unfixed>
155            NOTE: inherited from fpc, see #472304
156            - erlang <unfixed> (embed)
157            - gamera 3.2.3-1 (embed)
158            - python2.4 <unfixed> (embed; bug #553403)
159            - python2.5 <unfixed> (embed; bug #553403)
160            - texlive-bin <unknown> (embed)
161            - sudo <unknown> (embed)
162            NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
163    
164    dulwich
165            - hg-git 0.1.0-1 (embed; bug #541996)
166    
167    libvigraimpex
168            - hugin <unfixed> (embed; bug #542259)
169            - enblend-enfuse <unfixed> (embed; bug #542258)
170            - gamera 3.2.3-1 (embed)
171    
172    libbz2
173            - dpkg 1.15.6 (static)
174            - amd64-libs <unfixed> (static)
175            NOTE: let's call it "static"
176            - dar <unfixed> (static)
177            - dump <unfixed> (static)
178            - unalz 0.64-1 (embed)
179            NOTE: has code, by the maint, to use the system version but links against the internal copy
180            - clamav <unfixed> (embed)
181            NOTE: libclamav/nsis/bzlib*
182            - pristine-tar <unfixable> (modified-embed)
183            NOTE: compression code only, not uncompression
184            - r-base-core-ra 1.2.8 (static)
185            - r-base-core 2.11.1 (static)
186            NOTE: links dynamically in squeeze, statically in lenny
187            - rpm <unfixed> (static)
188            NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
189    
190    libyahoo2
191            - centerim <unfixed> (embed; bug #559783)
192    
193    libmsn
194            - centerim <unfixed> (embed; bug #559783)
195    
196    libgadu
197            - centerim <unfixed> (embed; bug #559783)
198            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
199            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
200            - kdenetwork 4:3.3.2-5 (embed)
201            NOTE: from kdenetwork: kopete
202            - ekg 1:1.8~rc0-1 (embed)
203            - kadu 0.6.0.2-3 (embed; bug #504430)
204            - gadu <itp> (embed)
205    
206    xmlrpc (which package is the "origin" of this code?)
207            - drupal <unfixed> (embed)
208            - phpgroupware <unfixed> (embed)
209            - egroupware <unfixed> (embed)
210            - phpwiki <unfixed> (embed)
211            - php4 <removed> (embed)
212            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
213    
214    shtool (affects build-time only)
215            - mysql-ocaml <unfixed> (embed)
216            - php4 <removed> (embed)
217            - php5 <unfixed> (embed)
218    
219    xulrunner
220            - iceape <unfixed> (embed; bug #561749)
221            - iceweasel 2.0.0.19 (embed)
222            - icedove <unfixed> (embed; bug #561750)
223            - kompozer <unfixed> (embed; bug #532168)
224            - galeon 2.0.2-4 (embed)
225            - epiphany-browser 2.14.3-8 (embed)
226            - conkeror 0.9~git080629-2 (embed)
227            - kazehakase 0.4.2-1 (embed)
228    
229    xli
230            - xloadimage <unfixed> (embed)
231    
232    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
233            - openmotif <unfixed> (embed)
234    
235    libxpm
236            - lesstif2 <unfixed> (embed; bug #575750)
237            - ia32-libs <unfixable> (embed)
238    
239    kerberized apps with BSD origin
240            - krb4 <removed> (embed)
241            - krb5 <unfixed> (embed)
242            - heimdal <unfixed> (embed)
243    
244    grip (which pkg is the origin?)
245            - libcdaudio <unfixed>
246            - grip <unfixed>
247            - gnome-vfs <unfixed>
248            TODO: check vfs2 as well
249    
250    fudforum
251            [etch] - phpgroupware <unfixed> (embed)
252            NOTE: phpgroupware-fudforum
253            [sarge] - egroupware-fudforum <removed> (embed)
254    
255    libbsd
256            - rdate 1:1.2-3 (embed)
257            - atheme-services <unfixed>
258            - libbsd-arc4random-perl <not-affected> (modified-embed)
259            NOTE: code not used, it links dynamically against libbsd instead
260            - isakmpd <unfixed>
261            - bsdgames <unfixed> (embed)
262            - bsd-mailx <unfixed> (embed)
263            - netcat-openbsd <unfixed> (embed; bug #550611)
264            - openssh <unfixed> (embed)
265            - unworkable <unfixed> (embed)
266            - mksh <unfixed> (modified-embed)
267            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
268            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
269            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
270            - ia32-libs <unfixable> (embed)
271    
272    cvs
273            - gcvs <unfixed> (embed)
274            NOTE: see cvsunix/src in tarball
275    
276    pcre3
277            - php4 <removed> (embed)
278            - analog 2:5.23-0woody1 (embed)
279            - chicken 3.2.7-2 (embed)
280            NOTE: Might be fixed earlier. Lenny version recorded.
281            - goffice <unfixed> (embed)
282            NOTE: libgoffice-*
283            - hypermail 2.2.0.dfsg-2 (embed)
284            NOTE: Might be fixed earlier. Lenny version recorded.
285            - privoxy 3.0.9-1 (embed)
286            NOTE: Might be fixed earlier. Lenny version recorded.
287            - vfu 4.06-4.1 (embed; bug #450754)
288            - tf5 5.0beta7-1 (embed)
289            - monotone 0.43-1 (embed)
290            NOTE: this only affects versions >= 0.37
291            - glib2.0 2.15.2-1 (embed)
292            - apache2 2.0.53-4 (embed)
293            - exim4 4.10-0.srh20.12 (embed)
294            - yacas <unfixed> (embed)
295            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
296            - gtamsanalyzer.app 0.42-5 (embed)
297            - tin 980117-1 (embed)
298            - kazehakase 0.5.2-1
299            - webkit 1.0.1-1 (embed)
300            - qt4-x11 <unfixed> (embed)
301            NOTE: embedded via webkit copy
302            - erlang <unfixed> (embed)
303            - ssed <unfixed> (embed)
304            - ircd-hybrid <unfixed> (static)
305            - emboss <unfixed> (fork)
306            - cherokee <unfixed> (embed)
307            - oftc-hybrid 1.6.9.dfsg-1 (embed)
308            - ratbox-services <unfixed> (embed)
309            - squeak-vm <unfixed> (embed)
310            - tinymux <unfixed> (embed)
311    
312    tiff
313            - wxwindows2.4 2.2.1 (embed)
314            - gamera 3.2.3-1 (embed)
315            - freeimage <unfixed> (embed)
316            - libtk-img <unfixed> (embed)
317            NOTE: there are two copies, one under tiff/ other under libtiff/
318            - gdal <unfixed>
319            - ia32-libs <unfixable> (embed)
320    
321    uudeview
322            - libconvert-uulib-perl <unfixed> (embed)
323            - pan <unfixed> (embed)
324    
325    sqlite
326            - amarok <unfixed> (embed)
327            - monotone 0.43-1 (embed)
328            - iceweasel <unfixed> (embed)
329            - heimdal <unfixed> (embed; bug #559616)
330    
331    util-linux
332            - loop-aes-utils <unfixed> (embed)
333            NOTE: contains code from util-linux' mount in the mount-aes-udeb
334            - ia32-libs <unfixable> (embed)
335    
336    sylpheed
337            - sylpheed-claws <unfixed> (fork)
338    
339    phpsysinfo
340            - egroupware <unfixed> (embed)
341            - phpgroupware <unfixed> (embed)
342    
343    phpldapadmin
344            [sarge] - egroupware <unfixed> (embed)
345            NOTE: removed from egroupware after sarge
346    
347    chmlib
348            - kchmviewer <unknown> (embed)
349    
350    ffmpeg (libavcodec/libavformat)
351            - mplayer 1.0~rc2-14 (embed; bug #395252)
352            - kino 1.0.0-1
353            - vlc <not-affected> (Links dynamically since initial release)
354            - smilutils 0.3.0-10
355            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
356            - motion 3.1.19-1
357            - gstreamer0.10-ffmpeg 0.10.3-2
358            - xmovie <removed> (static)
359            TODO: gimp-gap (potentially using ffmpeg code as well)
360            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
361            - audacity 1.3.7-2 (embed; bug #512278)
362            - chromium-browser <unfixed> (fork)
363            - libav <unfixed>
364    
365    faad2
366            - mplayer 1.0~rc2-20 (embed)
367            - avifile <unfixed> (embed; bug #538750)
368            - ffmpeg-debian <removed> (embed)
369    
370    libmad (MPEG decoding lib)
371            - xine-lib <unfixed> (embed)
372            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
373            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
374    
375  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  libdts
376  dpkg          - xine-lib <unfixed> (embed)
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
377    
378  libgadu/ekg:  flac
379  centericq          - xine-lib <unfixed> (embed)
380  gaim          - ia32-libs <unfixable> (embed)
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
381    
382    liba52
383            - a52dec <unfixed> (embed)
384            - xine-lib <unfixed> (embed)
385    
386    mpeg2dec (libmpeg2)
387            - xine-lib <unfixed> (embed)
388    
389    libmpeg3
390            - squeak-vm <unfixed> (embed)
391    
392    libntlm
393            - wget <unfixed> (fork; bug #550436)
394            - curl <unfixed> (fork; bug #550437)
395            - cntlm <unfixed> (fork; bug #550438)
396    
397    uw-imap
398            - pine <unfixed> (embed)
399            - alpine <unfixed> (embed)
400    
401    imagemagick
402            - graphicsmagick <unfixed> (fork)
403    
404    python-urlgrabber
405            - mercurial <unfixed> (embed; bug #531062)
406            - w3af <unfixed> (embed; bug #555372)
407            [experimental] - harvestman <unfixed> (embed; bug #555373)
408    
409    beautifulsoup
410            - python-mechanize <unfixed> (embed; bug #555349)
411            - zope2.11 <removed> (embed; bug #555350)
412            - twill <unknown> (embed)
413    
414    halibut
415            - nsis <unfixed> (fork)
416    
417    libghttp
418            - hotway <unfixed> (embed)
419    
420    libsndfile
421            - ardour 1:2.7.1-1 (embed)
422            - ia32-libs <unfixable> (embed)
423    
424    glibmm2.4
425            - ardour 1:2.7.1-1 (embed)
426    
427    libgnomecanvasmm2.6
428            - ardour 1:2.7.1-1 (embed)
429    
430    libsigc++-2.0
431            - ardour 1:2.7.1-1 (embed)
432            - ia32-libs <unfixable> (embed)
433    
434    soundtouch
435            - ardour 1:2.7.1-1 (embed)
436    
437    libmms
438            - xine-lib <unfixed> (embed)
439            - mimms <unfixed> (embed)
440    
441    fckeditor
442            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
443            - moin 1.8.2-2 (embed; bug #452599)
444            - karrigell <removed> (embed; bug #452598)
445            - gforge 4.6.99+svn6225-1 (embed)
446            - request-tracker3.8 <unfixed> (embed)
447            - otrs2 <unfixed> (embed)
448    
449    ipatlas (not packaged in Debian)
450            - moodle <unfixed> (embed; bug #507185)
451    
452    libphp-phpmailer
453            - moodle <unfixed> (embed; bug #507185)
454            - mahara <unfixed> (embed)
455            - symfony <unfixed> (embed; bug #566778)
456            [etch] - phpgroupware <unfixed> (embed)
457            NOTE: phpgroupware-felamimail is only in etch
458            - egroupware <unfixed> (embed; bug #504283)
459            - glpi <unfixed>
460    
461    htmlArea (not packaged in Debian)
462            - moodle <unfixed> (embed)
463    
464    giflib
465            - wine <unfixed> (embed; bug #466181)
466    
467    bennu (not packaged in Debian, http://bennu.sourceforge.net)
468            - moodle <unfixed> (embed)
469    
470    smarty
471            - moodle 1.8.2-2 (embed; bug #471158)
472            - gallery2 2.2.5-2 (embed; bug #471160)
473            - mahara 0.9.2-2 (embed; bug #471201)
474            - gosa 2.4beta1-1 (embed; bug #471200)
475    
476    TinyMCE
477            - wordpress 2.5.1-3 (embed; bug #478257)
478            - moodle <unfixed> (embed; bug #507185)
479            - knowledgeroot <unfixed> (embed)
480            - joomla <itp> (bug #326398)
481            - mahara 1.2.6-1 (embed; #597752)
482    
483    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
484            - scite <unfixed> (embed)
485            - qscintilla <unfixed> (embed)
486            - qscintilla2 <unfixed> (embed)
487            - geany <unfixed> (fork)
488            - anjuta <unfixed> (embed)
489    
490    libphp-adodb
491            - moodle <unfixed> (embed; bug #507185)
492            NOTE: also AdoDB-XML Schema
493            - gallery2 <unfixed> (embed)
494            - phppgadmin <unfixed> (embed)
495            - egroupware <unfixed> (embed)
496            - phpwiki <unfixed> (embed)
497            - torrentflux 2.0beta1-2 (embed)
498            - ipplan <unfixed> (embed)
499            - typo3-src <unfixed> (embed)
500            - cacti <unknown> (embed)
501            [sarge] - cacti <unfixed> (embed)
502            NOTE: dependency exists, but internal version is used
503            - gforge 4.7~rc2-6 (embed)
504            - mahara <unfixed> (embed)
505    
506    gzip
507            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
508            - klibc <unfixed> (embed)
509            NOTE: based on linux-kernel gzip code
510            - busybox <unfixed> (embed)
511            - pristine-tar <unfixed> (modified-embed)
512            NOTE: compression code only, not uncompression
513            - ncompress <unfixed> (old-version)
514    
515    neon
516            - cadaver 0.22.3+debian-1 (embed; bug #188381)
517            - gnome-vfs2 <unfixed> (embed; bug #395874)
518            [etch] - litmus <unfixed> (embed; #395875)
519            - litmus <removed> (embed; #395875)
520            [sarge] - screem <unfixed> (embed)
521            - sitecopy 1:0.16.0-1 (embed; bug #395876)
522            [etch] - tla <unfixed> (embed; bug #395877)
523            [sarge] - tla <unfixed> (embed; bug #395877)
524    
525    libmodplug
526            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
527    
528    libvncserver
529            - vino <unfixed> (embed)
530    
531    putty
532            - filezilla <unfixed> (embed)
533    
534    tinyxml
535            - filezilla <unfixed>
536            - crystalspace <unfixed> (embed)
537            - libwfut <unfixed> (embed)
538            - rarian <unfixed> (embed)
539            - bulletml <unfixed> (embed)
540            - pokerth <unfixed> (embed)
541            - qutecom <unfixed> (embed)
542            - sofa-framework <unfixed> (embed)
543            - yate <unfixed> (embed)
544            - antigrav <unfixed> (embed)
545            - balder2d <unfixed> (embed)
546            - cal3d <unfixed> (embed)
547            - criticalmass <unfixed> (embed)
548            - ember <unfixed> (embed)
549            - epiphany <unfixed> (embed)
550            - gambit <unfixed> (embed)
551            - noiz2sa <unfixed> (embed)
552            - ogre <unfixed> (embed)
553            - opencity <unfixed> (embed)
554            - openmovieeditor <unfixed> (embed)
555            - pouetchess <unfixed> (embed)
556            - tecnoballz <unfixed> (embed)
557            - trigger-rally <unfixed> (embed)
558            - xmoto <unfixed> (embed)
559            - mapnik <unknown> (embed)
560            NOTE: uses a different XML parser by default
561            - rrootage 0.23a-6 <embed>
562            NOTE: links to libbulltetml
563            - boson <unknown> (embed)
564            NOTE: the embedded code is unused
565            - cppcheck <unfixed> (embed)
566            NOTE: introduced in 1.47, will use system's version in 1.48
567            [squeeze] - cppcheck <not-affected>
568    
569    gv
570            - evince <unfixed> (embed)
571            NOTE: ps/ tree from gv 3.5.8
572            NOTE: evince-gtk is affected (a component of evince source package)
573    
574    libXbae
575            - paw <unfixed> (embed)
576    
577    libgtkhtml
578            - claws-mail-extra-plugins <unfixed> (fork)
579    
580    libXaw
581            - paw <unfixed> (embed)
582            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
583            - ia32-libs <unfixable> (embed)
584    
585    libgd2
586            - graphviz 2.16-1 (embed)
587            NOTE: lib/gd seems to be 2.0.33
588            - wml 2.0.11ds2-1 (embed)
589            - libwmf <unfixed> (embed)
590            NOTE: derived from gd 1.6.3, but only used to write images
591            - plt-scheme <unfixed> (embed; bug #601525)
592            - texlive-bin 2009-1 (embed)
593    
594    rar
595            - unrar-nonfree <unfixed> (embed)
596    
597    unrar-free (maybe this code is derived from the original rar, too?)
598            - clamav <unfixed> (embed)
599            NOTE: seems to be disabled in default config
600    
601    mplayer (DirectMedia Object loader)
602            - xine-lib <unfixed> (embed)
603            NOTE: src/libw32dll/
604            - vlc <unfixed> (embed)
605            NOTE: modules/codec/dmo/
606            - mplayer 1.0~rc2-20 (embed)
607    
608    libwpd (WordPerfect converter)
609            - openoffice.org <unfixed> (embed)
610    
611    fsplib (http://sourceforge.net/projects/fsp/)
612            - gftp <unfixed> (embed)
613            NOTE: lib/fsplib version 0.3
614    
615    sprng
616            - tree-puzzle <unfixed> (embed)
617    
618    librpcsecgss
619            - krb5 <unfixed> (embed)
620    
621    jasper
622            - ghostscript 8.64~dfsg-2 (embed)
623    
624    libiris
625            - psi <unfixed> (embed)
626            - kdenetwork <unfixed> (embed)
627            NOTE: kopete embeds libiris but links dynamically to libidn
628            - kdegames <unfixed> (embed)
629            NOTE: ksirk/kde4
630    
631    libidn
632            - monotone 0.43-1 (embed)
633            - psi <unfixed> (embed)
634            NOTE: psi embeds libiris which embeds libidn
635            - kdegames <unfixed> (embed)
636            NOTE: kdegames/kde4 embeds libiris which embeds libidn
637            - ia32-libs <unfixable> (embed)
638    
639    lua5.1
640            - monotone 0.43-1 (embed)
641            - nmap 5.00-1 (embed; bug #527997)
642            [lenny] - nmap <unfixed> (embed; bug #527997)
643            - ocropus <unfixed> (embed)
644            - enigma <unfixed> (embed)
645            NOTE: requires lua built with C++
646            - freeciv <unfixed> (embed)
647            - spring <unfixed> (embed)
648    
649    libbotan
650            - monotone 0.43-1 (embed)
651    
652    NetXX
653            - monotone 0.43-1 (embed)
654    
655    libgc
656            - mono <unfixed> (embed)
657    
658    lzma
659            - p7zip <unfixed> (embed)
660            - xz-utils <unfixed> (fork)
661            - r-base <unfixed> (embed)
662            NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
663    
664    lzo
665            - grub2 <unfixed> (embed)
666    
667    yassl
668            - mysql-dfsg-5.0 <unfixed> (embed)
669            - mysql-5.1 <unfixed> (embed)
670    
671    pax code
672            - tar <unfixed> (embed)
673            - cpio <unfixed> (embed)
674    
675    t1lib
676            - tetex-bin 2.0.2-1 (embed)
677            - texlive-bin <unknown> (embed)
678            - grace 5.1.14-2 (embed)
679            - evince <unfixed> (embed)
680            NOTE: at least parseafm code, maybe more?
681            - vftool <unfixed> (embed)
682            NOTE: just parseafm code it seems
683    
684    guichan
685            - boswars <unfixed> (embed)
686            NOTE: maintainer notified us, working on it
687    
688    tolua
689            - boswars <unfixed> (embed)
690            NOTE: maintainer notified us, working on it
691            NOTE: actually tolua++
692            - ocropus <unfixed> (embed)
693            NOTE: actually tolua++
694            - freeciv <unfixed> (embed)
695            NOTE: actually tolua++
696            - enigma <unfixed> (embed)
697    
698  xmlrpc: (which package is the "origin" of this code?)  asio-dev
699  drupal          - luxrender <removed> (embed)
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
700    
701    xine-lib
702            - vlc <unfixed> (embed)
703            NOTE: only parts included in modules/access/rtsp
704    
705  shtool: (affects build-time only)  netpbm
706  mysql-ocaml          - tcl8.3 <unfixed> (embed)
707  php4          - tcl8.4 <unfixed> (embed)
708            - tcl8.5 <unfixed> (embed)
709            NOTE: generic/tkImgGIF.c
710    
711    tk8.5
712            - tk8.0 <removed> (old-version)
713            - tk8.3 <unfixed> (old-version)
714            - tk8.4 <unfixed> (old-version)
715            - perl-tk <unfixable> (fork)
716    
717    samba
718            - mc 2:4.6.2~git20080311-1 (embed)
719            NOTE: maintainer is aware of this, currently searching a solution
720    
721    plib1.8.4c2
722            - boson <unfixed> (fork)
723            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
724    
725    fribidi
726            - quesoglc 0.7.2-2 (embed)
727    
728    glew
729            - quesoglc <unfixed> (embed; bug #489341)
730            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
731            - trigger 0.5.2.1-2 (embed)
732            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
733            - trigger-rally 0.5.2.1-2 (embed)
734            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
735            - chromium-browser 5.0.375.70~r48679-2
736    
737    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
738            - transcend <unfixed> (embed)
739            - cultivation <unfixed> (embed)
740            - passage <unfixed> (embed)
741            - gravitation <unfixed> (embed)
742    
743    tar
744            - libarchive <unfixed> (embed)
745            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
746    
747    cpio
748            - libarchive <unfixed> (embed)
749            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
750    
751    kde4libs
752            - kdelibs <unfixable> (old-version)
753    
754    webkit
755            - qt4-x11 <unfixed> (embed; bug #479851)
756            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
757            - kde4libs <unfixable> (fork)
758            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
759            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
760            - chromium-browser <unfixed> (fork)
761    
762    ftgl
763            - blender 2.46+dfsg-1 (embed)
764            - vtk <unfixed> (embed)
765            - paraview <unfixed> (embed)
766            NOTE: as part of its copy of vtk
767            - tulip <unfixed> (embed)
768            NOTE: depends on -dev but string found on binary
769            - root-system <unknown> (embed)
770            NOTE: depends on -dev package; not confirmed at source
771            - rgl <unknown> (embed)
772            NOTE: not sure if it is built
773            - mysql-gui-tools <unknown> (embed)
774            NOTE: not sure if it is built
775            - k3d <unfixed> (embed)
776            - extremetuxracer <unknown> (embed)
777            NOTE: not sure if it is built
778            - critterding <unknown> (embed)
779            - lightspeed <unfixed>
780            NOTE: depends on -dev but string found on binary
781    
782    wv
783            - abiword <unfixed>
784    
785    qemu
786            - kvm <removed> (embed; bug #543159)
787            - qemu-kvm <unfixed> (embed; bug #560853)
788            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
789            - xen-3 3.4.2-2 (embed; bug #560856)
790            - xen-unstable <unfixed> (embed; bug #560856)
791    
792    vgabios
793            - kvm <removed> (embed; bug #489442)
794            - qemu-kvm <unfixed> (embed)
795    
796    bochs
797            - kvm <removed> (embed; bug #489442)
798            - qemu-kvm <unfixed> (embed)
799    
800    speex
801            - vorbis-tools <unfixed> (embed)
802            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
803            - gst-plugins-good0.10 <unfixed> (embed)
804            - xine-lib <unfixed> (embed)
805            - libfishsound <unfixed> (embed)
806            - libannodex <removed> (embed)
807            - opal 3.4.2~dfsg-2 (embed)
808            - mumble 1.2.0~beta1-1 (embed)
809            - vlc <unfixed> (embed)
810            - xmms-speex <unfixed> (embed)
811            - libsdl-sound1.2 <unfixed> (embed)
812            - sweep <unfixed> (embed)
813    
814    libreadline
815            - magic <itp> (old-version)
816    
817    opcode
818            - ode <unfixed> (embed)
819            NOTE: opcode is not a package in debian, it is just embedded
820            NOTE: http://www.codercorner.com/Opcode.htm
821    
822    gimpact
823            - ode <unfixed> (embed)
824            NOTE: gimpact is not a package in debian, it is just embedded
825            NOTE: http://gimpact.sf.net
826    
827    mochikit
828            - mahara <unfixed> (embed)
829            NOTE: they require extra patches, still unmerged upstream
830            - ntop <unfixed> (embed)
831            - coherence 0.6.2-1 (embed)
832            - paste <unfixed> (embed)
833            - turbogears <unfixed> (embed)
834            - plone3 <removed> (embed)
835            - xulrunner <unfixed> (embed)
836            - libjifty-plugin-chart-perl <unfixed> (embed)
837            - sabnzbdplus <unfixed> (embed)
838            - tgmochikit <unfixed> (embed)
839    
840    prototypejs
841            - netbeans-ide 6.0.1+dfsg-2 (embed)
842            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
843            - webcit <unfixed> (embed; bug #555219)
844            - asterisk 1:1.6.2.0~rc3-1 (embed)
845            - libjson-ruby 1.1.4-1 (embed; bug #555224)
846            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
847            - horde3 <unfixed> (embed)
848            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
849            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
850            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
851            - ebug-http <unfixed> (embed; bug #555236)
852            - libaws 2.7-1 (embed; bug #555222)
853            - phpgedview <removed> (embed)
854            - poker-network 1.7.6-1 (embed; bug #555238)
855            - rails 2.1.0-6 (embed)
856            - wordpress 2.5.0-2 (embed; bug #555243)
857            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
858            TODO: search through all of the other zope packages
859            - ampache 3.4.1-2 (embed)
860            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
861            - hobix 0.5~svn20070319-4 (embed; bug #555247)
862            - zabbix 1.6.6-4 (embed; bug #555250)
863            - chora2 2.1.1+debian0-1 (embed; bug #555253)
864            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
865            - jscropperui 1.2.1-1 (embed; bug #555257)
866            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
867            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
868            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
869            - activeldap 1.2.1-1 (embed)
870            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
871            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
872            - otrs2 2.3.4-6 (embed; bug #555267)
873            - webcalendar 1.2~b1-2 (embed; bug #555269)
874            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
875            - jifty 0.90519-1 (embed; bug #555271)
876            - jquery 1.4-1 (embed; bug #555272)
877            - passenger 2.2.5debian1-1 (embed; bug #555273)
878            - plone3 <removed> (embed; bug #555275)
879            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
880            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
881            - xulrunner <unfixed> (embed)
882            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
883            - jclicmoodle <unfixed> (embed)
884            - git-cola <unfixed> (embed)
885    
886    gdb
887            - insight <unfixed> (embed)
888    
889    e2fsprogs
890            - ldiskfsprogs <unfixable> (fork)
891            - ia32-libs <unfixable> (embed)
892    
893    quazip (not packaged in Debian)
894            - qcake <unfixed> (embed)
895            NOTE: starting with upstream version 0.6.4
896    
897    exo
898            - pcmanfm <unfixed> (embed; bug #499677)
899            NOTE: slightly modified source code
900    
901    xfce4-taskmanager
902            - lxtask <unfixed> (embed)
903            NOTE: old fork, maybe outdated
904    
905    isync
906            - postler <unfixed> (embed; bug #628798)
907    
908    java
909            - openjdk-6 <unfixed>
910            - sun-java5 <unfixed>
911            - sun-java6 <unfixed>
912    
913    libphp-snoopy
914            - ampache 3.4.1-2 (embed; bug #504169)
915            - gforge 4.6.99+svn6094-2 (embed)
916            - mahara 1.0.5-2 (embed; bug #504170)
917            - pixelpost 1.7.1-5 (embed; bug #504171)
918            - mediamate 0.9.3.6-5 (embed; bug #504172)
919            - opendb <removed> (embed; bug #504173)
920            [etch] - opendb <unfixed> (embed; bug #504173)
921            - wordpress 2.5.1-9 (embed; bug #443948)
922            - moodle <unfixed> (embed; bug #507185)
923            [etch] - phpgroupware <unfixed> (embed)
924            NOTE: phpgroupware-felamimail
925            - magpierss 0.72-3 (embed; bug #431089)
926    
927    jquery
928            - jsonbot <unfixed> (embed; bug #625524)
929            - zekr <unfixed> (embed)
930            - wordpress <unknown> (embed)
931            - yocto-reader <unfixed> (embed)
932            - textpattern <unfixed> (embed)
933            - genshi 0.5.1-1 (embed)
934            NOTE: compressed file under examples/ dir
935            - prewikka <unfixed> (embed)
936            - libramaze-ruby <unfixed> (embed)
937            - drupal6 <unfixed> (embed)
938            - b2evolution <unfixed> (embed)
939            - wesnoth <unfixed> (embed)
940            - gammu 1.28.95-1 (embed)
941            - trac <unfixed> (embed; bug #645339)
942    
943    tablesorter (jquery plugin, not packaged yet)
944            - wesnoth <unfixed> (embed)
945    
946    kses
947            - wordpress <unfixed> (embed; bug #504242)
948            NOTE: their copy has all methods renamed to wp_<foo>
949            NOTE: kses isn't in Debian, RFP: #504240
950            - moodle <unfixed> (embed; bug #507185)
951            - egroupware <unfixed> (embed)
952    
953    magpierss
954            - wordpress <unfixed> (embed; bug #504242)
955            - moodle <unfixed>
956    
957    php-gettext
958            - wordpress 2.8.4-1 (embed; bug #504242)
959            - docbookwiki <unfixed> (embed)
960            - knowledgeroot 0.9.9.5-1
961            NOTE: non-free
962    
963    libphp-ixr (name may change, it is the Incutio XML-RPC)
964            - wordpress <unfixed> (embed; bug #504242)
965            NOTE: libphp-ixr isn't in Debian, RFP: #504236
966            - dokuwiki <unfixed> (embed)
967            - textpattern <unfixed> (embed)
968    
969    libphp-cas
970            - glpi <unfixed> (embed)
971            - moodle <unfixed> (embed; bug #505984)
972    
973    scriptaculous (prototype.js is among the embeds in the following)
974            - glpi <unfixed> (embed)
975            - libaws <unfixed> (embed; bug #555222)
976            - op-panel <unfixed> (embed)
977            - symfony <unfixed> (embed)
978            NOTE: maintainer says there are extra incompatible changes required
979            - pixelpost 1.7.1-6 (embed)
980            - webhelpers <unfixed> (embed)
981            - qwik <removed> (embed; bug #555241)
982            - smokeping <unfixed> (embed)
983            - turba2 <unfixed> (embed)
984            - typo3-src 4.2.3-1 (embed)
985            - request-tracker3.6 <unfixed> (embed)
986            - request-tracker3.8 <unfixed> (embed)
987            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
988            - wordpress 2.5.0-2 (embed)
989            - libhtml-prototype-perl 1.48-3 (embed)
990    
991    libmarkdown-php
992            - moodle <unfixed> (embed; bug #507185)
993            - pixelpost 1.7.1-6 (embed)
994    
995    php-openid
996            - wordpress-openid 3.3.2-1 (embed)
997    
998    geshi
999            - dokuwiki 0.0.20080505-3.1 (embed)
1000            - pgfouine 1.0-1.1 (embed)
1001            - websvn 2.1.0-1 (embed)
1002    
1003    webcalendar
1004            - gforge 4.7~rc2-6 (embed; bug #504758)
1005    
1006    libical
1007            - kdepim <unknown> (fork)
1008            NOTE: fixed at some point during 4.0
1009            - kdepimlibs 4.2.0-1 (fork)
1010            - claws-mail-extra-plugins <unfixed> (fork)
1011    
1012    harfbuzz
1013            - qt4-x11 <unfixed> (embed)
1014            - pango1.0 <unfixed> (embed)
1015            - fontmatrix <unfixed> (embed)
1016    
1017    libzip
1018            - php5 <unfixable> (modified-embed)
1019            - odt2txt <unfixed> (embed; bug #523808)
1020    
1021    json.php (not packaged; should be replaced with php's built-in functions)
1022            - moodle <unfixed>
1023            - yui <unfixed>
1024            - gallery2 <unfixed>
1025            - dokuwiki <unfixed>
1026            - typo3-src <unfixed>
1027    
1028    php-fpdf
1029            - tcpdf <itp> (fork)
1030            - moodle <unfixed>
1031            - phpwiki <unfixed>
1032            - egroupware <unfixed>
1033            - ldap-account-manager <unfixed> (fork)
1034    
1035    tcpdf (itp: #495985)
1036            - moodle <unfixed>
1037            - phpmyadmin <unfixed>
1038    
1039    typo3
1040            - moodle <unfixed>
1041    
1042    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1043            - moodle <unfixed>
1044            - gosa <unfixed>
1045    
1046    php-ole (itp: #487558)
1047            - moodle <unfixed>
1048    
1049    pieforms (http://www.catalyst.net.nz)
1050            - mahara <unfixed>
1051    
1052    savant2 (http://phpsavant.com)
1053            - egroupware <unfixed>
1054    
1055    rssparser (http://nwow.org)
1056            - egroupware <unfixed>
1057            - phpgroupware <unfixed>
1058    
1059    lcms
1060            - openjdk-6 <unfixed> (fork)
1061            - gimp 2.4.0~rc2-2
1062            - ia32-libs <unfixable> (embed)
1063    
1064    libphp-phplayersmenu
1065            - diogenes <unfixed>
1066            - phpldapadmin <unfixed>
1067    
1068    libphp-pclzip
1069            - docvert <unfixed>
1070            - moodle <unfixed>
1071            - egroupware <unfixed>
1072    
1073    libphp-simplepie
1074            - dokuwiki <unfixed>
1075            - wordpress <unfixed>
1076    
1077    libphp-jpgraph
1078            - egroupware <unfixed>
1079    
1080    php-simpletest
1081            - moodle <unfixed>
1082    
1083    libpng
1084            - doxygen 1.5.6-2 (embed)
1085            NOTE: Might be fixed earlier. Lenny version recorded.
1086            - gdal 1.5.2-3 (embed)
1087            NOTE: Might be fixed earlier. Lenny version recorded.
1088            - iceweasel <not-affected> (uses xulrunner)
1089            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1090            - iceape 1.0.13~pre080614i-0etch1 (embed)
1091            - libfltk1.1 1.1.9-6 (embed)
1092            NOTE: Might be fixed earlier. Lenny version recorded.
1093            - libtk-img <unfixed> (embed)
1094            - htmldoc 1.8.27-3 (embed)
1095            NOTE: Might be fixed earlier. Lenny version recorded.
1096            - xulrunner 1.9.0.13-1 (embed)
1097            [lenny] - xulrunner 1.9.0.11-0lenny1
1098            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1099            - gamera 3.2.3-1 (embed)
1100            - freeimage <unfixed> (embed)
1101            - syslinux-common <unfixable> (embed)
1102            - tuxonice-userui <unfixed> (static)
1103            - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1104            NOTE: Might be fixed earlier. Lenny version recorded.
1105            - vice 1.22.dfsg1-0.1 (embed)
1106            NOTE: Might be fixed earlier. Lenny version recorded.
1107            - visualboyadvance 1.8.0-4 (embed)
1108            NOTE: Might be fixed earlier. Lenny version recorded.
1109            - ia32-libs <unfixable> (embed)
1110    
1111    irssi
1112            - silc-client <unfixed> (embed)
1113            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1114    
1115    extc
1116            - mtasc <unfixed> (embed)
1117            - haxe <unfixed> (embed)
1118    
1119    swflib
1120            - mtasc <unfixed> (embed)
1121            - haxe <unfixed> (embed)
1122    
1123    libitext-java
1124            - bouncycastle 2.1.4-1 (embed)
1125    
1126    python-ply
1127            - pyke <unfixed> (embed; bug #555363)
1128            - pywbem 0.7.0-4 (embed; bug #555364)
1129            - sepolgen <unfixed> (embed; bug #555365)
1130            - zope-textindexng3 <unknown> (embed)
1131            - iceweasel <not-affected> (uses xulrunner)
1132            - xulrunner <unknown> (embed)
1133            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1134    
1135    libdumbnet (libdnet upstream)
1136            - nmap <unfixed> (fork)
1137    
1138    gcc-4.4
1139            - gcc-mingw32 <unfixed> (embed)
1140    
1141    camlimages
1142            - advi <unfixed> (static; bug #550441)
1143    
1144    memcached
1145            - memcachedb <unfixed> (embed)
1146    
1147    yajl
1148            - argyll <unfixed> (embed; bug #544223)
1149            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1150    
1151    nusoap
1152            - gforge 4.8.2-1 (embed)
1153            - ampache <unfixed> (embed)
1154            - poker-network <unfixed> (embed)
1155            - moodle <unfixed> (embed)
1156            NOTE: code is not used when running under php5 and soap is enabled
1157            - phpwiki <unfixed> (embed)
1158            - gallery2 <unfixed> (embed)
1159            - typo3-src <unfixed> (embed)
1160            - phpgacl 3.3.7-7 (embed)
1161            - mantis 1.1.8+dfsg-1 (embed)
1162    
1163    libept
1164            - adept <unfixed> (embed; bug #540649)
1165    
1166    libvorbis
1167            - iceweasel <not-affected> (uses xulrunner)
1168            - xulrunner <unfixed> (embed; bug #540959)
1169            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1170            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1171            - iceape <unfixed> (embed)
1172            [etch] - iceape <not-affected> (introduced in 2.0)
1173            [lenny] - iceape <not-affected> (introduced in 2.0)
1174            - ia32-libs <unfixable> (embed)
1175    
1176    cairo
1177            - iceweasel <not-affected> (uses xulrunner)
1178            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1179    
1180    liboggz
1181            - iceweasel <not-affected> (uses xulrunner)
1182            - xulrunner <unfixed> (embed; bug #540959)
1183            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1184            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1185            - iceape <unfixed> (embed)
1186            [etch] - iceape <not-affected> (introduced in 2.0)
1187            [lenny] - iceape <not-affected> (introduced in 2.0)
1188    
1189    liboggplay
1190            - iceweasel <not-affected> (uses xulrunner)
1191            - xulrunner <unfixed> (embed; bug #540959)
1192            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1193            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1194            - iceape <unfixed> (embed)
1195            [etch] - iceape <not-affected> (introduced in 2.0)
1196            [lenny] - iceape <not-affected> (introduced in 2.0)
1197    
1198    php-net-dnsbl
1199            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1200    
1201    php-onyx-rss
1202            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1203    
1204    php-text-wiki
1205            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1206    
1207    php-xml-rpc
1208            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1209    
1210    polarssl (does not have a shared library)
1211            - pdkim <itp> (embed; bug #543150)
1212            - xyssl <unfixed> (old-version)
1213    
1214    pidgin (libpurple)
1215            - gaim <removed> (old-version)
1216            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1217            - wengophone <unfixed> (embed; bug #601425)
1218    
1219    icu
1220            - webkit 1.0.1-1 (embed; bug #547214)
1221            - texlive-bin <unfixed> (fork)
1222            NOTE: texlive upstream working with icu upstream to merge their changes
1223            - chromium-browser 5.0.375.29~r46008-3
1224    
1225    cyrus-imapd-2.2
1226            - kolab-cyrus-imapd <unfixed> (fork)
1227            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1228    
1229    python-cxx-dev
1230            - freecad 0.9.2646.3-1 (embed; bug #547936)
1231    
1232    zipios++
1233            - freecad 0.9.2646.3-1 (embed; bug #547941)
1234            - enigma 0.92.3-3 (embed)
1235            NOTE: likely fixed earlier, marking etch's version as fixed
1236    
1237    linux-2.6
1238            - kvm <removed> (embed; bug #549973) [./kernel/*]
1239            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1240            - kernel-source-2.6.8 <removed> (old-version)
1241            - kernel-source-2.4.27 <removed> (old-version)
1242            - kernel-source-2.4.24 <removed> (old-version)
1243            - kernel-source-2.2.25 <removed> (old-version)
1244            - kernel-source-2.2.20 <removed> (old-version)
1245    
1246    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1247            - kvm <removed> (embed) [./libfdt/*]
1248            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1249    
1250    qweb (not packaged)
1251            - ajaxterm <unfixed>
1252    
1253    opensaml2
1254            - opensaml <removed> (old-version)
1255    
1256    shibboleth-sp2
1257            - shibboleth-sp <removed> (old-version)
1258    
1259    tuxonice-userui
1260            - suspend2-userui <removed> (old-version)
1261    
1262    expat
1263            - w3c-libwww <removed> (embed; bug #551941)
1264            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1265            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1266            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1267            - python2.4 <unfixable> (embed; bug #553403)
1268            - python2.7 2.7-6 (embed)
1269            - mcabber 0.10.0-1 (low; bug #601053)
1270            - python-4suite <unfixed> (embed; bug #516935)
1271            - wxwindows2.4 <removed> (embed)
1272            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1273            - wxwidgets2.8 2.8.10.1-2 (embed)
1274            - albert <unfixed> (embed; bug #600974)
1275            - celementtree 1.0.5-8 (embed)
1276            NOTE: Maybe that was fixed even earlier
1277            - centerim <unfixed> (embed; bug #559783)
1278            - audacity 1.3.2-1 (embed)
1279            - matanza <unfixed> (embed)
1280            - tdom 0.8.3~20080525-1 (embed)
1281            - udunits 2.1.8-4 (embed)
1282            - apr-util 1.2 (embed)
1283            - ayttm <unfxed> (embed; bug #561006)
1284            - cableswig <unfixed> (embed)
1285            - cadaver <unfixed> (embed)
1286            - cmake 2.6.0-6 (embed)
1287            - coin3 <unfixed> (embed)
1288            - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1289            NOTE: Might be fixed earlier. Lenny version recorded.
1290            - dasher 4.7.3-1 (embed)
1291            NOTE: Might be fixed earlier. Lenny version recorded.
1292            - emboss 6.3.1-1 (embed)
1293            - gdcm 2.0.14-2 (embed)
1294            - ghostscript 8.71~dfsg-2 (embed)
1295            - grmonitor <removed> (embed)
1296            - iceape <unfixed> (embed)
1297            - insighttoolkit 3.16.0-1 (embed)
1298            NOTE: insighttoolkit might've been fixed earlier
1299            - jabber 1.4.3-3.4 (embed)
1300            NOTE: Might be fixed earlier. Lenny version recorded.
1301            - libparagui1.1 1.0.2-1 (embed)
1302            - libspiff1 0.8.3-1 (embed)
1303            NOTE: Might be fixed earlier. Lenny version recorded.
1304            - paraview 3.6.2-1 (embed)
1305            - poco 1.3.6p1-1 (embed)
1306            - scorched3d 41.3dfsg-1+b1 (embed)
1307            NOTE: Might be fixed earlier. Lenny version recorded.
1308            - simgear <unfixed> (embed)
1309            - sitecopy 1:0.16.0-1
1310            - smart <unfixed> (embed)
1311            NOTE: smart embeds celementree, and it includes expat
1312            - swish-e <not-affected> (Linked against libxml, which is used instead)
1313            - tla 1.3.5+dfsg-15 (embed)
1314            - vtk 4.1.20030227-1 (embed)
1315            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1316            - xmlrpc-c <unfixed> (embed)
1317            - iceweasel <unfixed> (embed)
1318            - kompozer <unfixed> (embed)
1319            - vxl 1.13.0-2 (embed)
1320            - xulrunner <unfixed> (embed)
1321            - xmame 0.106-2.1 (embed)
1322            NOTE: Might be fixed earlier. Lenny version recorded.
1323            - apache2 2.2 (embed)
1324            - texlive-bin <not-affected> (Embedded code not compiled in)
1325            - vnc4 <unfixed> (embed)
1326            - xotcl 1.6.6-1 (embed)
1327            - chromium-browser 5.0.375.29~r46008-3
1328            - ia32-libs <unfixable> (embed)
1329    
1330    xerces-c
1331            - xerces-c2 <unfixed> (old-version)
1332            - xerces27 <removed> (old-version)
1333    
1334    md5 (RSA's version; not the gnu version provided by coreutils)
1335            - w3c-libwww <removed> (embed; bug #551942)
1336            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1337    
1338    libparagui1.1
1339            - asc <unfixable> (fork)
1340    
1341    enet
1342            - sauerbraten <unfixed> (embed; #497194)
1343    
1344    eglibc
1345            - glibc <removed> (old-version)
1346            - mksh <unfixable> (static)
1347              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1348    
1349    galib
1350            - gamera 3.2.3-1 (embed)
1351    
1352    configobj
1353            - bzr <unfixed> (embed; bug #555336)
1354            - elisa <unfixed> (embed; bug #555337)
1355            - gaupol <unfixed> (embed; bug #555338)
1356            - ipython <unfixed> (embed; bug #555339)
1357            - pida <unfixed> (embed; bug #555340)
1358            - psychopy <unfixed> (embed; bug #555341)
1359            - rest2web <unfixed> (embed; bug #555342)
1360            - auth2db <unknown> (embed)
1361            - dynagen <unknown> (embed)
1362            - iceweasel <unknown> (embed)
1363            - sabnzbdplus <unknown> (embed)
1364            - xulrunner <unknown> (embed)
1365            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1366    
1367    python-clientform
1368            - bibus <unfixed> (embed; bug #555332)
1369            - zope2.10 <unfixed> (embed; bug #555333)
1370            - zope2.11 <removed> (embed; bug #555334)
1371            - python-mechanize <unknown> (embed)
1372            - twill <unknown> (embed)
1373    
1374    python-mechanize
1375            - zope2.10 <unfixed> (embed; bug #555337)
1376            - zope2.11 <removed> (embed; bug #555338)
1377            - twill <unknown> (embed; bug #555339)
1378    
1379    pexpect
1380            - duplicity 0.6.06-1 (embed; bug #555361)
1381            - hplip <unfixed> (embed; bug #555362)
1382            - smart <unfixed> (embed; bug #555363)
1383    
1384    pyparsing
1385            - bauble <unfixed> (embed; bug #555366)
1386            - boa-constructor 0.6.1-8 (embed; bug #555367)
1387            - calibre <unfixed> (embed; bug #555368)
1388            - matplotlib <unfixed> (embed; bug #531024)
1389            - zhpy 1.7.3.1-1 (embed; bug #555370)
1390            - polybori <unknown> (embed)
1391            - python-whoosh <unknown> (embed)
1392            - twill <unknown> (embed)
1393            - zope-textindexng3 <unknown> (embed)
1394    
1395    python-pysqlite2
1396            - python2.4 <unfixed> (embed; bug #553403)
1397            - python2.5 <unfixed> (embed; bug #553403)
1398    
1399    celementtree
1400            - python2.5 <unfixed> (embed)
1401            - smart <unfixed> (embed)
1402    
1403    elementtree
1404            - python2.5 <unfixed> (embed)
1405            - python2.6 <unfixed> (embed)
1406            - bzr <unfixed> (embed; bug #555343)
1407            - gedit 2.28.2-1 (embed; bug #555344)
1408            - smart <unfixed> (embed)
1409            - solfege <unfixed> (embed; bug #555345)
1410            - w3af <unfixed> (embed; bug #555346)
1411            - python-qt4 <unknown> (embed)
1412            - sphinx <unknown> (embed)
1413            - python-nltk <itp> (embed)
1414    
1415    python2.5
1416            - python2.4 <unfixed> (old-version)
1417            - jython <unfixed> (embed)
1418            NOTE: embeds many stdlib modules
1419            - python-django <unfixed> (embed; bug #555419)
1420            NOTE: embeds stdlib modules: doctest, decimal
1421            - gamera 3.2.3-1 (embed)
1422            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1423            - boa-constructor <unfixed> (embed; bug #555426)
1424            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1425            - nicotine <unfixed> (embed; bug #555427)
1426            NOTE: embeds stdlib modules: ConfigParser
1427            - museek+ <unfixed> (embed; bug #555428)
1428            NOTE: embeds stdlib modules: ConfigParser
1429            - vegastrike-data <removed> (embed)
1430            NOTE: embeds many stdlib modules
1431            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1432            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1433            - config-manager <unfixed> (embed; bug #555423)
1434            NOTE: embeds stdlib modules: optparse
1435            - jhbuild 2.28.0-1 (embed; bug #555421)
1436            NOTE: embeds stdlib modules: optparse, subprocess
1437            - smart <unfixed> (embed; bug #555432)
1438            NOTE: embeds stdlib modules: optparse
1439            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1440            NOTE: embeds stdlib modules: doctest
1441            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1442            NOTE: embeds stdlib modules: doctest
1443            - distribute <unfixed> (embed)
1444            NOTE: embeds stdlib modules: doctest
1445            - python-setuptools <unfixed> (embed; bug #555435)
1446            NOTE: embeds stdlib modules: doctest
1447            - zope.testing <unfixed> (embed; bug #555436)
1448            NOTE: embeds stdlib modules: doctest
1449            - translate-toolkit <unfixed> (embed; bug #555422)
1450            NOTE: embeds stdlib modules: textwrap, contextlib
1451            - libtpclient-py <unfixed> (embed; bug #555424)
1452            NOTE: embeds stdlib modules: subprocess
1453            - grass <unfixed> (embed; bug #555425)
1454            NOTE: embeds stdlib modules: subprocess
1455            - coherence <unfixed> (embed; bug #555429)
1456            NOTE: embeds stdlib modules: uuid
1457            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1458            NOTE: embeds stdlib modules: uuid
1459            - setroubleshoot <removed> (embed; bug #555431)
1460            NOTE: embeds stdlib modules: uuid
1461            - linkchecker <unfixed> (embed; bug #555414)
1462            NOTE: embeds msgfmt.py script
1463            - imdbpy <unfixed> (embed)
1464            NOTE: embeds msgfmt.py script
1465            - kiwi <unfixed> (embed)
1466            NOTE: embeds msgfmt.py script
1467            - moin <unfixed> (embed)
1468            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1469            - plone3 <removed> (embed)
1470            NOTE: embeds msgfmt.py script
1471            - roundup <unfixed> (embed)
1472            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1473            - rednotebook <unfixed> (embed; bug #555415)
1474            NOTE: embeds msgfmt.py script
1475            - turbogears <unfixed> (embed)
1476            NOTE: embeds msgfmt.py script
1477            - elisa <unfixed> (embed)
1478            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1479            - calibre <unfixed> (embed)
1480            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1481            - mailman 1:2.1.13-1 (embed; #555416)
1482            NOTE: embeds msgfmt.py script
1483            - python-docutils <unknown> (embed)
1484            NOTE: embeds stdlib modules: optparse, textwrap
1485            - python-imaging <unknown> (embed)
1486            NOTE: embeds stdlib modules: doctest
1487            - python-mechanize <unknown> (embed)
1488            NOTE: embeds stdlib modules: doctest
1489            - twill <unknown> (embed)
1490            NOTE: embeds stdlib modules: subprocess
1491            - zeroc-ice <unknown> (embed)
1492            NOTE: embeds stdlib modules: subprocess
1493            - wxwidgets2.8 <unknown> (embed)
1494            NOTE: embeds stdlib modules: subprocess
1495            - cycle <unknown> (embed)
1496            NOTE: embeds msgfmt.py script
1497            - deluge <unknown> (embed)
1498            NOTE: embeds msgfmt.py script
1499            - opendict <unknown> (embed)
1500            NOTE: embeds msgfmt.py script
1501            - openerp-client <unknown> (embed)
1502            NOTE: embeds msgfmt.py script
1503            - rapidsvn <unknown> (embed)
1504            NOTE: embeds msgfmt.py script
1505            - wammu <unknown> (embed)
1506            NOTE: embeds msgfmt.py script
1507            - gaphor <unknown> (embed)
1508            NOTE: embeds msgfmt.py script
1509            - pida <unknown> (embed)
1510            NOTE: embeds msgfmt.py script
1511            - python-formencode <unknown> (embed)
1512            NOTE: embeds msgfmt.py script
1513            - duplicity <unfixed> (embed)
1514            NOTE: embeds stdlib module: urlparse, tarfile
1515            - pygopherd <unfixed> (embed)
1516            NOTE: embeds stdlib module: zipfile
1517    
1518    argparse
1519            - twill <unfixed> (embed; bug #555347)
1520            - ipython <unfixed> (embed; bug #555348)
1521    
1522    coherence
1523            - elisa <unfixed> (embed; bug #555335)
1524    
1525    simpletal
1526            - plastex <unfixed> (embed; bug #555371)
1527    
1528    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1529            - postr <unfixed> (embed)
1530            - elisa <unfixed> (embed)
1531    
1532    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1533            - apertium-tolk <unfixed> (embed)
1534            - ipython <unfixed> (embed)
1535            - virtaal <unfixed> (embed)
1536    
1537    distribute
1538            - setuptools <removed> (old-version)
1539    
1540    rails
1541            - jruby1.2 <removed> (embed) [./bench/rails/*]
1542            NOTE: jruby is in non-free, it probably includes rails too
1543            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1544            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1545            - thin <unfixed> (embed) [./spec/rails_app/*]
1546            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1547            NOTE: be dangerous if developers are naively basing their code off of the examples
1548            NOTE: prototype.js is among the example files
1549    
1550    lucene2 (prototype.js is among the embeds in the following)
1551            - lucene <unfixed> (old-version)
1552            - pylucene <unfixed> (embed)
1553            - libpdfbox-java <unfixed> (embed)
1554            - libfontbox-java <unfixed> (embed)
1555            - libjempbox-java <unfixed> (embed)
1556            - solr <unfixed> (embed)
1557    
1558    unicode-data
1559            - syslinux <unfixed> (embed)
1560            - camomile <unfixed> (embed)
1561            - fribidi <unfixed> (embed)
1562            - m17n-db <unfixed> (embed)
1563            - sbcl <unfixed> (embed)
1564            - heimdal <unfixed> (embed)
1565            - icu <unfixed> (embed)
1566            - icu4j <unfixed> (embed)
1567            - krb5 <unfixed> (embed)
1568            - moodle <unfixed> (embed)
1569            - openldap <unfixed> (embed)
1570            - pike7.6 <unfixed> (embed)
1571            - samba <unfixed> (embed)
1572            - samba4 <unfixed> (embed)
1573            - cmucl <unfixed> (embed)
1574            - typo3-src <unfixed> (embed)
1575            - mauve <unfixed> (embed)
1576            - texlive-bin <unfixed> (embed)
1577            - ypsilon <unfixed> (embed)
1578            - jeuclid <unfixed> (embed)
1579            - charmap.app <unfixed> (embed)
1580            - clisp <unfixed> (embed)
1581            - gnulib <unfixed> (embed)
1582            - opensrs-client <unfixed> (embed)
1583            - saxonb <unfixed> (embed)
1584            - rails <unfixed> (embed)
1585    
1586    feedparser
1587            - rawdog <unfixed> (embed; bug #383422)
1588            - miro <unfixed> (embed; bug #555351)
1589            - calibre <unfixed> (embed; bug #555352)
1590            - freevo <unfixed> (embed; bug #555353)
1591            - pida <unfixed> (embed; bug #555354)
1592            - planet-venus <unfixed> (embed; bug #555355)
1593            - plone3 <removed> (embed; bug #555356)
1594            - exaile 0.2.14+debian-1 (embed)
1595            - screenlets 0.1.2-3 (embed)
1596            NOTE: included twice
1597    
1598    agg:
1599            - matplotlib <unfixed> (embed: bug #377271)
1600            - contextfree <unfixed> (embed)
1601            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1602            - exactimage <unfixed> (embed)
1603            - python-enable <unfixed> (embed)
1604            - mapnik 0.5.1-3 (embed)
1605            NOTE: links statically to agg, but shared library is not available (bug #377271)
1606    
1607    vtk
1608            - paraview <unfixable> (embed; bug #495426)
1609            - libmesh <unfixed>
1610            NOTE: embeds exodus; not sure if there's a version external to vtk
1611    
1612    txt2tags
1613            - rednotebook <unfixed> (embed)
1614    
1615    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1616            - gajim <unfixed> (embed)
1617            - emesene <unfixed> (embed)
1618            - convirt <unfixed> (embed)
1619            - pida <unfixed> (embed)
1620            - rednotebook <unfixed> (embed)
1621    
1622    horde3 (prototype.js is among the embeds in the following)
1623            - mnemo2 <unfixed> (embed)
1624            - nag2 <unfixed> (embed)
1625            - wordpress <unfixed> (embed)
1626            NOTE: Text_Diff (wp-includes/Text/Diff*)
1627    
1628    cimg
1629            - gmic <unfixed> (embed)
1630    
1631    mootools
1632            - kdenetwork <unfixed> (embed)
1633            - gallery <unfixed> (embed)
1634            - jspwiki <unfixed> (embed)
1635            - vdr-plugin-live <unfixed> (embed)
1636            - perl-doc-html <unfixed> (embed)
1637    
1638    openldap
1639            - openldap2.3 <removed> (old-version)
1640            - ia32-libs <unfixable> (embed)
1641    
1642    grub2
1643            - grub <unfixed> (old-version)
1644    
1645    gnupginterface
1646            - duplicity <unfixed> (embed)
1647    
1648    python-dateutil
1649            - awn-extras-applets <unfixed> (embed)
1650            - matplotlib <unknown> (embed)
1651    
1652    cups
1653            - cupsys <removed> (old-version)
1654            - ia32-libs <unfixable> (embed)
1655    
1656    yui
1657            - bcfg2 <not-affected> (present in source but not included in any binary files)
1658            - serendipity 1.5.3-1 (embed; bug #557746)
1659            - moodle 1.8.2.dfsg-5 (embed)
1660            - jifty 0.91117-1 (embed; bug #557748)
1661            - webgui 7.7.26-1 (embed)
1662            - loggerhead 1.17-1 (embed)
1663            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1664    
1665    quake3 (vanilla source not packaged in debian)
1666            - openarena <unfixable> (fork)
1667    
1668    quake2 (vanilla source not packaged in debian)
1669            - alien-arena <unfixable> (fork)
1670            - warsow <unfixable> (fork)
1671    
1672    quake (vanilla source not packaged in debian)
1673            - darkplaces <unfixable> (fork)
1674            - quakespasm <unfixable> (fork)
1675            - nexuiz 2.5.2+dp-1 (old-version)
1676            NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1677    
1678    libtheora
1679            - iceweasel <not-affected> (uses xulrunner)
1680            - xulrunner <unfixed> (embed; bug #540959)
1681            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1682            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1683            - iceape <unfixed> (embed; bug #559276)
1684            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1685            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1686    
1687    dtoa
1688            - bfilter <unfixed> (embed)
1689            - cacao <removed> (embed)
1690            - cdrdao <unfixed> (embed)
1691            - classpath <unfixed> (embed)
1692            - freej <unfixed> (embed)
1693            - iceape <unfixed> (embed)
1694            - iceweasel <unfixed> (embed)
1695            - jscoverage <unfixed> (embed)
1696            - kde4libs <unfixed> (embed)
1697            - kdelibs <unfixed> (embed)
1698            - kompozer <unfixed> (embed)
1699            - libv8 <unfixed> (embed)
1700            - mono <unfixed> (embed)
1701            - newlib <unfixed> (embed)
1702            - nspr <unfixed> (embed)
1703            - php5 <unfixed> (embed)
1704            - polyml <unfixed> (embed)
1705            - qt4-x11 <unfixed> (embed)
1706            - rhino <unfixed> (embed)
1707            NOTE: code translated to Java
1708            - ruby1.8 <unfixed> (embed)
1709            - ruby1.9 <unfixed> (embed)
1710            - ruby1.9.1 <unfixed> (embed)
1711            - sdd <unfixed> (embed)
1712            - sfind <unfixed> (embed)
1713            - star <unfixed> (embed)
1714            - tinymux <unfixed> (embed)
1715            - virtualbox-ose <unfixed> (embed)
1716            - webkit <unfixed> (embed)
1717            - xulrunner <unfixed> (embed)
1718    
1719    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1720            - firegpg <unfixed> (embed)
1721            - enigmail <unfixed> (embed)
1722    
1723    ptmalloc (not packaged in Debian)
1724            - crystalspace <unfixed> (embed)
1725            - qt4-x11 <unfixed> (embed)
1726    
1727    svgalib
1728            - usplash <unfixed> (embed)
1729            - ia32-libs <unfixable> (embed)
1730    
1731    bogl
1732            - usplash <unfixed> (embed)
1733    
1734    taglist
1735            - usplash <unfixed> (embed)
1736    
1737    portaudio
1738            - audacity <unfixed> (embed; bug #323711)
1739    
1740    nyquist
1741            - audacity <unfixed> (embed)
1742            NOTE: embeds a forked nyquist with support for a shared library
1743    
1744    vamp-plugin-sdk
1745            - audacity <unfixed> (embed)
1746    
1747    wordpress
1748            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1749            - wordpress-mu <removed> (fork)
1750    
1751    php5
1752            - php4 <removed> (old-version)
1753    
1754    classpath
1755            - libgnucrypto-java <removed> (embed; bug #559788)
1756    
1757    libtool
1758            - apr <unfixed> (static; bug #489625)
1759            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1760            - arts <unfixed> (embed)
1761            - bochs 2.4.2-1 (embed; bug #560884)
1762            - camserv <unfixed> (embed)
1763            - collectd 4.8.2-1 (embed)
1764            - courier-authlib 0.58-4 (embed)
1765            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1766            - cvsnt 2.5.04.3236-1.2 (embed)
1767            - dico <not-affected> (Uses the system copy of ltdl)
1768            - freeradius 0.1+20010527-1 (embed)
1769            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1770            - ggobi 2.1.9~20091212-1 (embed)
1771            - glame 2.0.1-4 (embed)
1772            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1773            - gnash 0.8.7-2 (embed)
1774            - gnu-smalltalk <unfixed> (embed; bug #566777)
1775            - google-gadgets 0.10.5-0.3 (embed)
1776            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1777            - graphicsmagick 1.3.5-6 (embed)
1778            - graphviz 2.8-3 (embed)
1779            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1780            - guile-1.6 1.6.8-7 (embed)
1781            - hamlib 1.2.11-1 (embed)
1782            - hercules 3.06-1.2 (embed)
1783            - jags 1.0.4-3 (embed; bug #560864)
1784            - kdelibs <unfixed> (embed)
1785            - libannodex <removed> (embed)
1786            - libextractor 0.5.23+dfsg-4 (embed)
1787            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1788            - libtunepimp 0.5.3-7.3 (embed)
1789            - mp4h 1.3.1-4.1 (embed)
1790            - naim <removed> (embed)
1791            - parser-mysql <unfixed> (embed)
1792            - pinball 0.3.1-11 (embed)
1793            - redland <unfixed> (embed)
1794            - siproxd 1:0.8.1-2 (embed; bug #657070)
1795            - ski <unfixed> (embed)
1796            - synfig 0.62.00-1 (embed)
1797            - unixodbc 2.2.4-5 (embed)
1798            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1799            - clamav 0.95+dfsg-1 (embed)
1800            - imagemagick 6:6.2.3.1-1 (embed)
1801            - hypre 2.4.0b-5 (embed)
1802            - lam <unfixed> (embed)
1803            - openmpi <unfixable> (embed; bug #559386)
1804            - parser <unfixed> (embed)
1805            - pdsh 2.18-5 (embed; bug #560892)
1806            - sbnc 1.2-8 (embed)
1807            - sdcc <unfixed> (embed)
1808            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1809            - proftpd-dfsg <unfixed> (embed; bug #561748)
1810            - babel 1.4.0.dfsg-5 (embed)
1811            - libprelude 0.9.14-2 (embed)
1812            - heartbeat 2.1.4-7 (embed)
1813            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1814            NOTE: might've been fixed earlier
1815            - gcc-* <unknown> (embed)
1816            - ia32-libs <unfixable> (embed)
1817    
1818    ocamlgsl
1819            - orpie 1.5.1-7.1 (embed; bug #550058)
1820    
1821    xdotool
1822            - keynav <unfixed> (embed; bug #560103)
1823    
1824    bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1825            - supertuxkart <unfixed> (embed)
1826            - blender <unfixed> (embed)
1827            - critterding <unfixed> (embed)
1828            NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1829    
1830    ghostscript
1831            - gs-gpl <removed> (old-version)
1832    
1833    icedove
1834            - thunderbird <removed> (old-version)
1835    
1836    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1837            - jquery <unfixed> (embed)
1838    
1839    sed
1840            - ssed <unfixed> (fork)
1841    
1842    phpatomlib (http://code.google.com/p/phpatomlib)
1843            - wordpress <unfixed> (embed)
1844    
1845    Services_JSON (http://pear.php.net/package/Services_JSON)
1846            - wordpress <unfixed> (embed)
1847    
1848    phpass (http://www.openwall.com/phpass/)
1849            - gallery2 <unfixed> (embed)
1850            - wordpress <unfixed> (embed)
1851            - typo3-src <unfixed> (modified-embed)
1852            NOTE: file refers to drupal, maybe there's a copy somewhere there
1853            NOTE: a copyright owner search didn't match anything
1854            - libauthen-passphrase-perl <unfixable> (fork)
1855            NOTE: perl implementation of phpass
1856            - phpbb3 <unfixed>
1857            NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1858    
1859    squirrelmail
1860            - wordpress <unfixed> (embed)
1861            NOTE: class-pop3.php
1862    
1863    ezSQL (http://www.woyano.com/jv/ezsql)
1864            - wordpress <unfixable> (fork)
1865            NOTE: wp-db.php
1866    
1867    Diff.php (Clay Loveless' version/killersoft.com)
1868            - php-versioncontrol-svn <unfixed>
1869    
1870    libm (provided by libc)
1871            - spring <unfixed> (embed)
1872            NOTE: embedded by embedded copy of streflop
1873            - megaglest <unfixed> (embed)
1874            NOTE: embedded by embedded copy of streflop
1875            - aide <unfixed> (static)
1876            - busybox <unfixed> (static)
1877            - mindi-busybox <unfixed> (static)
1878            - qemu <unfixed> (static)
1879            NOTE: qemu-user-static
1880            - tuxonice-userui <unfixed> (static)
1881            - zsh <unfixed> (static)
1882            NOTE: zsh-static
1883            - tripwire <unfixed>
1884    
1885    streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1886            - spring <unfixed> (modified-embed)
1887            NOTE: old, modified version of streflop
1888            - megaglest <unfixed> (modified-embed)
1889            NOTE: megaglest uses the same streflop code as spring
1890    
1891    minizip
1892            - spring <unfixed> (embed)
1893    
1894    oscpack
1895            - spring <unfixed> (embed)
1896    
1897    hpiutil2
1898            - spring <unfixed> (embed)
1899    
1900    p7zip
1901            - spring <unfixed> (embed)
1902    
1903    pythonqt (doesn't seem to be python-qtN, unknown source)
1904            - fontmatrix <unfixed> (embed)
1905            - elmerfem <unfixed> (embed)
1906    
1907    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1908            - docvert <unfixed> (embed)
1909            - jifty <unfixed> (embed)
1910            - kdenetwork <unfixed> (embed)
1911            - mediatomb <unfixed> (embed)
1912            - plastex <unfixed> (embed)
1913            - plone3 <removed> (embed)
1914            - python-chaco <unfixed> (embed)
1915            - python-docutils <unfixed> (embed)
1916            - s5 <unfixed> (embed)
1917            - zope2.10 <unfixed> (embed)
1918            - zope2.11 <removed> (embed)
1919            - cython <not-affcted> (embed)
1920            NOTE: part of documentation, which is not installed into the binary package
1921    
1922    python-docutils
1923            - zope2.10 <unfixed> (embed)
1924            - zope2.11 <removed> (embed)
1925    
1926    tesseract
1927            - ocropus <unfixed> (static)
1928    
1929    antlr
1930            - kdevelop <unfixed> (embed)
1931    
1932    libxerces2
1933            - openjdk-6 <unfixed> (embed)
1934    
1935    kfreebsd-8
1936            - kfreebsd-7 <unfixed> (old-version)
1937            - kfreebsd-6 <removed> (old-version)
1938    
1939    ruby1.9.1
1940            - ruby1.9 <unfixed> (old-version)
1941            - ruby1.8 <unfixed> (old-version)
1942    
1943    maildrop
1944            - courier <unfixed> (embed) [./maildrop]
1945    
1946    glee
1947            - warzone2100 <not-affected> (embed)
1948    
1949    phing
1950            - symfony <unfixed> (embed)
1951    
1952    pake
1953            - symfony <unfixed> (embed)
1954    
1955    propel
1956            - symfony <unfixed> (embed)
1957    
1958    creole
1959            - symfony <unfixed> (embed)
1960    
1961    hfsutils
1962            - cdrkit <unfixed> (embed; bug #570187)
1963            NOTE: embeds hfsutils code in genisoimage
1964    
1965    cdrkit
1966            - grub2 <unfixed> (embed; bug #570156)
1967            NOTE: genisoimage imported into grub-mkisofs
1968    
1969    kdebase-workspace
1970            - kdebase <unfixed> (old-version)
1971    
1972    file
1973            - php5 <unfixable> (modified-embed)
1974            [lenny] - php5 <not-affected>
1975    
1976    cdb
1977            - php5 <unfixed> (embed)
1978    
1979    libmbfl (itp: #570708)
1980            - php5 <unfixed> (embed)
1981            NOTE: PHP is actually the current upstream, ITP is of that code
1982    
1983    libonig
1984            - php5 5.3.2-1 (embed)
1985    
1986    xmlrpc-epi
1987            - php5 <unfixed> (embed)
1988    
1989    swt-gtk
1990            - eclipse <unfixed> (embed; bug #538808)
1991    
1992    txt2html
1993            - wml 2.0.11ds2-1 (embed)
1994    
1995    ca-certificates
1996            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1997    
1998    openexr
1999            - freeimage <unfixed> (embed)
2000    
2001    libmng
2002            - freeimage <unfixed> (embed)
2003    
2004    openjpeg
2005            - freeimage <unfixed> (embed)
2006    
2007    libjpeg6b
2008            - freeimage <unfixed> (embed)
2009            - ia32-libs <unfixable> (embed)
2010    
2011    libjpeg (don't know what exact version)
2012            - dcmtk <unfixed>
2013            - gdcm <unfixed>
2014            - insighttoolkit <unfixed>
2015            - openarena 0.8.5-5+exp1 (bug #495966)
2016            - outguess <unfixed>
2017            - squeak-vm <unfixed> (embed)
2018            - tremulous <unfixed>
2019            - tuxonice-userui <unfixed> (static)
2020            - fpc <unfixed> (static)
2021            - lazarus <unfixed> (static)
2022            NOTE: inherited from fpc, see #472304
2023            - mseide-msegui <unfixed> (static)
2024            NOTE: inherited from fpc, see #472304
2025            - easymp3gain <unfixed> (static)
2026            NOTE: inherited from fpc, see #472304
2027            - winff <unfixed> (static)
2028            NOTE: inherited from fpc, see #472304
2029            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2030    
2031    
2032    lxr
2033            - lxr-cvs <unfixed> (embed)
2034    
2035    libfile-copy-recursive-perl
2036            - r-base <unfixed> (embed; bug #577427)
2037            - r-base-core-ra <unfixed> (embed; bug #577429)
2038    
2039    delimmatch
2040            - r-base <unfixed> (embed; bug #577433)
2041            - r-base-core-ra <unfixed> (embed; bug #577434)
2042    
2043    libsmf (ITP: #572558)
2044            - denemo <unfixed> (embed)
2045            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2046    
2047    libselinux
2048            - dpkg 1.15.6 (static)
2049            - ia32-libs <unfixable> (embed)
2050    
2051    xinha (ITP: #479708)
2052            - horde3 <unfixed>
2053            - serendipity <unfixed>
2054            - openacs <unfixed>
2055            - dotlrn <unfixed>
2056    
2057    dvipng
2058            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2059    
2060    dvipdfmx
2061            - texlive-bin <unfixed> (embed)
2062            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2063    
2064    lcdf-typetools
2065            - texlive-bin 2009-1 (embed)
2066    
2067    tex4ht
2068            - texlive-bin 2009-1 (embed)
2069    
2070    freetype
2071            - texlive-bin 2009-1 (embed)
2072            - ia32-libs <unfixable> (embed)
2073    
2074    freetype2
2075            - texlive-bin 2009-1 (embed)
2076            - tuxonice-userui <unfixed> (static)
2077            - instantbird <unfixed>
2078            - qt4-x11 <unknown> (embed)
2079            - vtk <unknown> (embed)
2080            - paraview <unknown> (embed)
2081            NOTE: from embedded copy of vtk
2082    
2083    silgraphite
2084            - texlive-bin <unfixed> (embed)
2085    
2086    unzip
2087            - texlive-bin 2009-1 (embed)
2088    
2089    jbig2dec
2090            - ghostscript 8.71~dfsg2-1 (embed)
2091    
2092    libxml2
2093            - chromium-browser 5.0.375.29~r46008-1
2094            - ia32-libs <unfixable> (embed)
2095    
2096    protobuf
2097            - chromium-browser 5.0.375.70~r48679-2
2098    
2099    libv8
2100            - chromium-browser 5.0.375.38~r46659-1
2101    
2102    nspr
2103            - chromium-browser 5.0.375.29~r46008-3
2104            - ia32-libs <unfixable> (embed)
2105    
2106    yasm
2107            - chromium-browser 5.0.375.29~r46008-2
2108    
2109    libxslt
2110            - chromium-browser 5.0.375.29~r46008-1
2111            - ia32-libs <unfixable> (embed)
2112    
2113    miniupnpc
2114            - warzone2100 2.3.7-2
2115            NOTE: code still present in tarball but removed during build and unused
2116            - vino 3.2.2-1
2117            NOTE: code still present in tarball but removed during build and unused
2118    
2119    iniparser (not packaged in Debian; RFP bug #582657)
2120            - warzone2100 <unfixed> (modified-embed)
2121    
2122    pyglet
2123            - sympy <unfixed> (embed; bug #459716)
2124    
2125    mpmath
2126            - sympy <unfixed> (embed; bug #541746)
2127    
2128    openssh
2129            - libpam-ssh <unfixed> (embed; bug #598522)
2130    
2131    curl
2132            - cmake 2.6.0-6 (embed)
2133            NOTE: Might be fixed earlier. Lenny version recorded.
2134            - criticalmass <unfixed> (static; bug #599061)
2135            - wengophone 2.1.0~beta1-svn9983-1 (embed)
2136            - ia32-libs <unfixable> (embed)
2137    
2138    lib3ds
2139            - boson <unfixed> (embed; bug #600900)
2140            - openscenegraph <unfixed> (embed; bug #601181)
2141    
2142    xcftools
2143            - gnome-xcf-thumbnailer <unfixed> (embed)
2144    
2145    simplejson
2146            - exaile <unfixed> (embed; bug #604547)
2147    
2148    libasycns
2149            - loudmouth <unfixed> (embed; bug #566143)
2150    
2151    plplot
2152            - emboss <unfixed> (fork)
2153    
2154    acl
2155            - ia32-libs <unfixable> (embed)
2156    
2157    arts
2158            - ia32-libs <unfixable> (embed)
2159    
2160    attr
2161            - ia32-libs <unfixable> (embed)
2162    
2163    audiofile
2164            - ia32-libs <unfixable> (embed)
2165    
2166    avahi
2167            - ia32-libs <unfixable> (embed)
2168    
2169    celt
2170            - ia32-libs <unfixable> (embed)
2171    
2172    coreutils
2173            - ia32-libs <unfixable> (embed)
2174    
2175    cyrus-sasl2
2176            - ia32-libs <unfixable> (embed)
2177    
2178    db4.8
2179            - ia32-libs <unfixable> (embed)
2180    
2181    dbus
2182            - ia32-libs <unfixable> (embed)
2183    
2184    directfb
2185            - ia32-libs <unfixable> (embed)
2186    
2187    esound
2188            - ia32-libs <unfixable> (embed)
2189    
2190    fltk1.1
2191            - ia32-libs <unfixable> (embed)
2192    
2193    fontconfig
2194            - ia32-libs <unfixable> (embed)
2195    
2196    freeglut
2197            - ia32-libs <unfixable> (embed)
2198    
2199    gcc-3.3
2200            - ia32-libs <unfixable> (embed)
2201    
2202    gdbm
2203            - ia32-libs <unfixable> (embed)
2204    
2205    gnutls26
2206            - ia32-libs <unfixable> (embed)
2207    
2208    hal
2209            - ia32-libs <unfixable> (embed)
2210    
2211    isdnutils
2212            - ia32-libs <unfixable> (embed)
2213    
2214  mozilla:  jack-audio-connection-kit
2215  mozilla-firefox          - ia32-libs <unfixable> (embed)
 mozilla-thunderbird  
 nvu  
2216    
2217    keyutils
2218            - ia32-libs <unfixable> (embed)
2219    
2220  xli:  krb5
2221  xloadimage          - ia32-libs <unfixable> (embed)
2222    
2223    lesstif2
2224            - ia32-libs <unfixable> (embed)
2225    
2226  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  libaio
2227  openmotif          - ia32-libs <unfixable> (embed)
 xfree86/xorg (in libxpm)  
2228    
2229    libasyncns
2230            - ia32-libs <unfixable> (embed)
2231    
2232  kerberized apps with BSD origin:  libcap2
2233  krb4          - ia32-libs <unfixable> (embed)
 krb5  
 heimdal  
2234    
2235    libdrm
2236            - ia32-libs <unfixable> (embed)
2237    
2238  grip: (which pkg is the origin?)  libedit
2239  libcdaudio          - ia32-libs <unfixable> (embed)
 grip  
 gnome-vfs (vfs2 as well?)  
2240    
2241    libexif
2242            - ia32-libs <unfixable> (embed)
2243    
2244  fudforum:  libgcrypt11
2245  phpgroupware-fudforum          - ia32-libs <unfixable> (embed)
 egroupware-fudforum  
2246    
2247  cvs:  libgpg-error
2248  gcvs (at least an additional script is included, check if there's more)          - ia32-libs <unfixable> (embed)
2249    
2250  pcre:  libgphoto2
2251  all pythons          - ia32-libs <unfixable> (embed)
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
2252    
2253  tiff:  libice
2254  wxpythongtk (check, which debian pkg this is in)          - ia32-libs <unfixable> (embed)
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
2255    
2256    libieee1284
2257            - ia32-libs <unfixable> (embed)
2258    
2259  uudeview:  libjpeg8
2260  libconvert-uulib-perl          - ia32-libs <unfixable> (embed)
2261    
2262  sqlite: (not affected by security vulnerabilities so far)  libnss-ldap
2263  amarok          - ia32-libs <unfixable> (embed)
2264    
2265  util-linux/mount:  libogg
2266  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - ia32-libs <unfixable> (embed)
2267    
2268  webmin:  libpam-ldap
2269  usermin          - ia32-libs <unfixable> (embed)
2270    
2271  sylpheed:  libsamplerate
2272  sylpheed-claws          - ia32-libs <unfixable> (embed)
2273    
2274  phpsysinfo:  libsdl1.2
2275  egroupware          - ia32-libs <unfixable> (embed)
 phpgroupware  
2276    
2277  phpldapadmin:  libsm
2278  egroupware          - ia32-libs <unfixable> (embed)
2279    
2280  chmlib:  libssh2
2281  kchmviewer (not packaged in Debian)          - ia32-libs <unfixable> (embed)
2282    
2283  libavcodec/libavformat:  libtasn1-3
2284  ffmpeg          - ia32-libs <unfixable> (embed)
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
2285    
2286  mad MPEG decoding lib:  libx11
2287  mad          - ia32-libs <unfixable> (embed)
 xine-lib  
2288    
2289  libdts:  libx86
2290  libdts          - ia32-libs <unfixable> (embed)
 xine-lib  
2291    
2292  flac:  libxau
2293  flac          - ia32-libs <unfixable> (embed)
 xine-lib  
2294    
2295  liba52:  libxcb
2296  a52dec          - ia32-libs <unfixable> (embed)
 xine-lib  
2297    
2298  libmpeg2:  libxcomposite
2299  mpeg2dec          - ia32-libs <unfixable> (embed)
2300  xine-lib  
2301    libxcursor
2302            - ia32-libs <unfixable> (embed)
2303    
2304    libxdamage
2305            - ia32-libs <unfixable> (embed)
2306    
2307    libxdmcp
2308            - ia32-libs <unfixable> (embed)
2309    
2310    libxext
2311            - ia32-libs <unfixable> (embed)
2312    
2313    libxfixes
2314            - ia32-libs <unfixable> (embed)
2315    
2316    libxi
2317            - ia32-libs <unfixable> (embed)
2318    
2319    libxinerama
2320            - ia32-libs <unfixable> (embed)
2321    
2322    libxmu
2323            - ia32-libs <unfixable> (embed)
2324    
2325    libxp
2326            - ia32-libs <unfixable> (embed)
2327    
2328    libxrandr
2329            - ia32-libs <unfixable> (embed)
2330    
2331    libxrender
2332            - ia32-libs <unfixable> (embed)
2333    
2334    libxss
2335            - ia32-libs <unfixable> (embed)
2336    
2337    libxt
2338            - ia32-libs <unfixable> (embed)
2339    
2340    libxtst
2341            - ia32-libs <unfixable> (embed)
2342    
2343    libxv
2344            - ia32-libs <unfixable> (embed)
2345    
2346    libxxf86vm
2347            - ia32-libs <unfixable> (embed)
2348    
2349    lzo2
2350            - ia32-libs <unfixable> (embed)
2351    
2352    mesa
2353            - ia32-libs <unfixable> (embed)
2354    
2355    mpg123
2356            - ia32-libs <unfixable> (embed)
2357    
2358    nas
2359            - ia32-libs <unfixable> (embed)
2360    
2361    nss
2362            - ia32-libs <unfixable> (embed)
2363    
2364    openal-soft
2365            - ia32-libs <unfixable> (embed)
2366    
2367    openssl
2368            - ia32-libs <unfixable> (embed)
2369    
2370    pam
2371            - ia32-libs <unfixable> (embed)
2372    
2373    popt
2374            - ia32-libs <unfixable> (embed)
2375    
2376    pulseaudio
2377            - ia32-libs <unfixable> (embed)
2378    
2379    sane-backends
2380            - ia32-libs <unfixable> (embed)
2381    
2382    sqlite3
2383            - ia32-libs <unfixable> (embed)
2384            - chromium-browser <unfixed> (embed)
2385    
2386    sysfsutils
2387            - ia32-libs <unfixable> (embed)
2388    
2389    tcp-wrappers
2390            - ia32-libs <unfixable> (embed)
2391    
2392    tdb
2393                  - thunar 1.2.1-3 (old-version)
2394            - ia32-libs <unfixable> (embed)
2395    
2396    tslib
2397            - ia32-libs <unfixable> (embed)
2398    
2399    unixodbc
2400            - ia32-libs <unfixable> (embed)
2401    
2402    xaw3d
2403            - ia32-libs <unfixable> (embed)
2404    
2405    xbitmaps
2406            - ia32-libs <unfixable> (embed)
2407    
2408    xcb-util
2409            - ia32-libs <unfixable> (embed)
2410    
2411    xcursor-themes
2412            - ia32-libs <unfixable> (embed)
2413    
2414    xft
2415            - ia32-libs <unfixable> (embed)
2416    
2417    dicomparser
2418            - vtk <unfixed>
2419            - paraview <unfixed>
2420            NOTE: as part of its copy of vtk
2421            - insighttoolkit <unfixed>
2422    
2423    proj
2424            - vtk <unfixed>
2425            - paraview <unfixed>
2426            NOTE: as part of its copy of vtk
2427            - therion <unfixed>
2428            - python-pyproj 1.8.6-1
2429    
2430    netcdf
2431            - vtk <unfixed>
2432            - paraview <unfixed>
2433            NOTE: as part of its copy of vtk
2434    
2435    insighttoolkit
2436            - vtk <unfixed> (embed)
2437            NOTE: embeds at least MetaIO
2438            - paraview <unfixed> (embed)
2439            NOTE: embeds at least MetaIO
2440    
2441    gl2ps
2442            - vtk <unfixed>
2443            - paraview <unfixed>
2444            NOTE: as part of its copy of vtk
2445            - avogadro <unfixed>
2446            - gabedit <unknown> (embed)
2447            NOTE: not sure if it is built
2448            - drawxtl <unfixed> (embed)
2449            - rgl <unfixed> (embed)
2450            - gmsh <unfixed>
2451            - mcrl2 <unfixed> (embed)
2452            - mysql-gui-tools <unknown> (embed)
2453            NOTE: not sure if it is built
2454            - opencascade <unfixed> (embed)
2455            - orsa <unfixed> (embed)
2456            - qtiplot <unfixed> (embed)
2457            - qwtplot3d <unfixed> (embed)
2458            - root-system <unknown> (embed)
2459            NOTE: not sure if it is built
2460            - scilab <unfixed> (embed)
2461            - snd <unknown> (embed)
2462            NOTE: not sure if it is built
2463            - xmakemol <unfixed> (embed)
2464    
2465    qwtplot3d
2466            - qtiplot <unfixed>
2467    
2468    parseafm (from Adobe)
2469            - vftool <unfixed>
2470            - gnustep-back <unknown>
2471            NOTE: looks like it isn't built
2472            - evince <unfixed>
2473    
2474    bugzilla
2475            - perl <unknown>
2476            - libcgi-pm-perl <unknown>
2477    
2478    isc-dhcp
2479            - dhcp3 <unfixable> (old-version)
2480            - dhcp <unfixable> (old-version)
2481    
2482    chipmunk (ITP: #623274)
2483            - xmoto <unfixed> (embed; bug #623299)
2484            - libtuxcap <unfixed> (embed; bug #623300)
2485    
2486  curl:  libsigsegv
2487  wget (code for NTLM authentication)          - gawk 3.1.8+dfsg-0.1
2488    
2489  TODO evaluate:  pdfrw
2490  gimp-gap (potentially using ffmpeg code as well)          - rst2pdf <unfixed> (embed; bug #638607)
2491    
2492  uw-imap:  bind9
2493  pine          - isc-dhcp <unfixed> (embed; bug #643569)
2494            NOTE: introduced in upstream 4.2 series
2495    
2496  imagemagick:  qof
2497  graphicsmagick          - gnucash <unfixed> (embed; bug #556245)
2498    
2499  halibut:  feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2500  nsis          - megaglest <unfixed> (modified-embed)
2501    
2502  libghttp:  acsccid
2503  hotway          - ccid 1.3.11 <unfixed> (fork)
2504            - openct <unfixed> (modified-embed)
2505            - towitoko <unfixed> (modified-embed)
2506    
2507  etl-dev (will be renamed to libetl-dev soon):  ccid
2508  synfig          - openct <unfixed> (modified-embed)
2509            - towitoko <unfixed> (modified-embed)

Legend:
Removed from v.3537  
changed lines
  Added in v.18325

  ViewVC Help
Powered by ViewVC 1.1.5