/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7214 by jmm-guest, Sun Nov 4 17:36:22 2007 UTC revision 13801 by jmm-guest, Wed Jan 13 18:48:55 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16  silc-toolkit:          that add real value)
17  silc-client (uses libsilc and libsilcclient)  sort: static (linking statically against a lib)
18          embed (embeds a copy of the library into another source package)
19  dietlibc:        modified-embed (embeds a code copy that differs from upstream code)
20  ccontrol (links statically)        fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22  libiax:  
23  iaxmodem  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
26  dpkg  Everything up to the next line is ignored.
27  rsync (somehow derived code base)  ---BEGIN
28  mono  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  mozilla(?)          NOTE: Fixed packages link to poppler library unless otherwise noted
30  Linux kernels          - pdftohtml <unknown>
31  pvpgn (links dynamically since 1.7.8-2)          [sarge] - pdftohtml <unfixed>
32  mrtg (links dynamically since 2.12.2-1)          [etch] - pdftohtml <unfixed>
33  rpm          NOTE: has been replaced by poppler-utils
34            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35  libbz2:          - texlive-base 3.0-12 (embed)
36  dpkg (statically linked)          - texlive-bin 2007-1 (embed)
37            NOTE: links to poppler
38  libgadu/ekg:          - koffice <unfixed> (embed; bug #436163)
39  centericq          - libextractor 0.5.12-1 (embed)
40  gaim          NOTE: libextractor is using its own pdf decoder now
41  kopete (ships the code, but links dynamically in the Debian package)          - ipe <unfixed> (embed)
42  kadu (not packaged in Debian)          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43  GNU gadu (not yet packaged in Debian)          - ruby-gnome2 <unknown> (embed)
44            NOTE: copy only present in source but links to poppler
45  xmlrpc: (which package is the "origin" of this code?)          - pdfedit <unfixed> (embed; bug #510794)
46  drupal          - swftools <unfixed> (embed; bug #551293)
47  phpgroupware          - poppler <unfixable> (fork)
48  egroupware  
49  phpwiki  ppmd
50  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - libcomplearn-mod-ppmd <unfixed> (fork)
51  tikiwiki          NOTE: discussion in #458152
52    
53  shtool: (affects build-time only)  libevent
54  mysql-ocaml          - transmission 1.71-1 (embed; bug #529372)
55  php4  
56    lrmi
57  mozilla:          - read-edid 2.0.0-1 (embed; bug #495131)
58  mozilla-firefox          - s3switch <unfixed> (embed)
59  mozilla-thunderbird          - xresprobe <unfixed> (embed)
60  firefox (to be removed)          - zhcon <unfixed> (embed)
61  thunderbird (to be removed)  
62  iceweasel  peercast
63  iceape          - gnome-peercast <removed> (embed)
64  icedove          [etch] - gnome-peercast <unfixed> (embed)
65  xulrunner  
66  nvu (no longer in Debian)  silc-toolkit
67            - silc-client 1.1~beta6-1 (embed)
68  xli:  
69  xloadimage  icclib
70            - ghostscript <unfixed> (embed)
71  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          - argyll <unfixed> (embed)
72  openmotif  
73  xfree86/xorg (in libxpm)  dietlibc
74            - ccontrol 0.9.1+20071204-1 (static)
75  kerberized apps with BSD origin:  
76  krb4  libmikmod
77  krb5          - sdl-mixer1.2 <unfixed> (embed)
78  heimdal          TODO: report bug
79    
80  grip: (which pkg is the origin?)  libiax
81  libcdaudio          - iaxmodem <unfixable> (embed; bug #548885)
82  grip  
83  gnome-vfs (vfs2 as well?)  spandsp
84            - iaxmodem <unfixable> (embed; bug #548885)
85  fudforum:  
86  phpgroupware-fudforum  python-paramiko
87  egroupware-fudforum (removed from egroupware after sarge)          - fabric 0.9.0-2 (embed; bug #561398)
88    
89  cvs:  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
90  gcvs (at least an additional script is included, check if there's more)          - dpkg <unfixed> (static)
91            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
92  pcre:          - rsync <unfixed> (embed)
93  all pythons          NOTE: somehow derived code base
94  php4 (src included, but Debian package links dynamically)          - mono <unfixed> (embed)
95  analog (src included, but Debian package links dynamically)          TODO: check mozilla
96  libgoffice-1          - Linux kernels <unfixed> (embed)
97  vfu          - pvpgn 1.7.8-2 (embed)
98  tf5 (since 5.0beta7 the Debian package links dynamically)          - mrtg 2.12.2-1 (embed)
99  monotone (including this starting from 0.37)          - rpm <unknown> (embed)
100            NOTE: pinged anibal since when rpm was fixed
101  tiff:          - tuxcmd-modules <unfixed> (embed)
102  wxpythongtk (check, which debian pkg this is in)          - zsync <unfixed>
103  older kdegraphics/kpdf releases < 3.3 embedded a copy          - tra <unfixed>
104            - sash <unfixed>
105  uudeview:          - nsis <unfixed>
106  libconvert-uulib-perl          - mseide-msegui <unfixed>
107            NOTE: mseide
108  sqlite: (not affected by security vulnerabilities so far)          - mirrordir <unfixed>
109  amarok          - poco <unfixed>
110  monotone          - klibc <unfixed>
111  iceweasel          - ghostscript <unfixed>
112            - freeimage <unfixed>
113  util-linux/mount:          - clamav <unfixed> (fork)
114  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
115            - tuxonice-userui <unfixed>
116  webmin:          - plt-scheme <unfixed>
117  usermin (only in sarge)          - perl <unfixed>
118            - paraview <unfixed>
119  sylpheed:          - gcvs <unfixed>
120  sylpheed-claws          - dump <unfixed>
121            - aide <unfixed> (static)
122  phpsysinfo:          - dar <unfixed> (static)
123  egroupware          - avfs <unfixed>
124  phpgroupware          - fpc <unfixed>
125            - winff <unfixed>
126  phpldapadmin:          NOTE: inherited from fpc, see #472304
127  egroupware (removed from egroupware after sarge)          - lazarus <unfixed>
128            NOTE: inherited from fpc, see #472304
129  chmlib:          - erlang <unfixed> (embed)
130  kchmviewer (not packaged in Debian)          - gamera 3.2.3-1 (embed)
131            - python2.4 <unfixed> (embed; bug #553403)
132  libavcodec/libavformat (source: ffmpeg):          - python2.5 <unfixed> (embed; bug #553403)
133  mplayer (#395252)  
134  xvidcap  dulwich
135  kino (links statically, does not include code)          - hg-git 0.1.0-1 (embed; bug #541996)
136  vlc (links statically, does not include code)  
137  smilutils (links statically, does not include code)  libvigraimpex
138  motion (links statically, does not include code)          - hugin <unfixed> (embed; bug #542259)
139  gst-ffmpeg          - enblend-enfuse <unfixed> (embed; bug #542258)
140  gstreamer0.10-ffmpeg          - gamera 3.2.3-1 (embed)
141  xmovie  
142    libbz2
143            - dpkg <unfixed> (static)
144    
145    libyahoo2
146            - centerim <unfixed> (embed; bug #559783)
147    
148    libmsn
149            - centerim <unfixed> (embed; bug #559783)
150    
151    libgadu
152            - centerim <unfixed> (embed; bug #559783)
153            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
154            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
155            - kdenetwork 4:3.3.2-5 (embed)
156            NOTE: from kdenetwork: kopete
157            - ekg 1:1.8~rc0-1 (embed)
158            - kadu 0.6.0.2-3 (embed; bug #504430)
159            - gadu <itp> (embed)
160    
161    xmlrpc (which package is the "origin" of this code?)
162            - drupal <unfixed> (embed)
163            - phpgroupware <unfixed> (embed)
164            - egroupware <unfixed> (embed)
165            - phpwiki <unfixed> (embed)
166            - php4 <unfixed> (embed)
167            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
168    
169    shtool (affects build-time only)
170            - mysql-ocaml <unfixed> (embed)
171            - php4 <unfixed> (embed)
172    
173  mad MPEG decoding lib:  xulrunner
174  mad          - iceape <unfixed> (embed; bug #561749)
175  xine-lib          - iceweasel 2.0.0.19 (embed)
176            - icedove <unfixed> (embed; bug #561750)
177            - kompozer <unfixed> (embed; bug #532168)
178            - galeon 2.0.2-4 (embed)
179            - epiphany-browser 2.14.3-8 (embed)
180            - conkeror 0.9~git080629-2 (embed)
181            - kazehakase 0.4.2-1 (embed)
182    
183    xli
184            - xloadimage <unfixed> (embed)
185    
186    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
187            - openmotif <unfixed> (embed)
188            - libxpm <unfixed> (embed)
189    
190    kerberized apps with BSD origin
191            - krb4 <removed> (embed)
192            - krb5 <unfixed> (embed)
193            - heimdal <unfixed> (embed)
194    
195    grip (which pkg is the origin?)
196            - libcdaudio <unfixed>
197            - grip <unfixed>
198            - gnome-vfs <unfixed>
199            TODO: check vfs2 as well
200    
201    fudforum
202            [etch] - phpgroupware <unfixed> (embed)
203            NOTE: phpgroupware-fudforum
204            [sarge] - egroupware-fudforum <removed> (embed)
205    
206    libbsd
207            - rdate 1:1.2-3 (embed)
208            - atheme-services <unfixed>
209            - libbsd-arc4random-perl <unfixed>
210            - isakmpd <unfixed>
211            - bsdgames <unfixed> (embed)
212            - bsd-mailx <unfixed> (embed)
213            - netcat-openbsd <unfixed> (embed; bug #550611)
214            - openssh <unfixed> (embed)
215            - unworkable <unfixed> (embed)
216    
217    cvs
218            - gcvs <unfixed> (embed)
219            NOTE: see cvsunix/src in tarball
220    
221    pcre3
222            - php4 <unknown> (embed)
223            - analog 2:5.23-0woody1 (embed)
224            - goffice <unfixed> (embed)
225            NOTE: libgoffice-*
226            - vfu 4.06-4.1 (embed; bug #450754)
227            - tf5 5.0beta7-1 (embed)
228            - monotone 0.43-1 (embed)
229            NOTE: this only affects versions >= 0.37
230            - glib2.0 2.15.2-1 (embed)
231            - apache2 2.0.53-4 (embed)
232            - exim4 4.10-0.srh20.12 (embed)
233            - yacas <unfixed> (embed)
234            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
235            - gtamsanalyzer.app 0.42-5 (embed)
236            - tin 980117-1 (embed)
237            - kazehakase 0.5.2-1
238            - webkit 1.0.1-1 (embed)
239            - qt4-x11 <unfixed> (embed)
240            NOTE: embedded via webkit copy
241            - erlang <unfixed> (embed)
242            - ssed <unfixed> (embed)
243    
244    tiff
245            - wxwindows2.4 2.2.1 (embed)
246            - gamera 3.2.3-1 (embed)
247    
248    uudeview
249            - libconvert-uulib-perl <unfixed> (embed)
250            - pan <unfixed> (embed)
251    
252    sqlite (not affected by security vulnerabilities so far)
253            - amarok <unfixed> (embed)
254            - monotone 0.43-1 (embed)
255            - iceweasel <unfixed> (embed)
256            - heimdal <unfixed> (embed; bug #559616)
257    
258    util-linux/mount
259            - loop-aes-utils <unfixed> (embed)
260            NOTE: contains code from util-linux' mount in the mount-aes-udeb
261    
262    sylpheed
263            - sylpheed-claws <unfixed> (fork)
264    
265    phpsysinfo
266            - egroupware <unfixed> (embed)
267            - phpgroupware <unfixed> (embed)
268    
269    phpldapadmin
270            [sarge] - egroupware <unfixed> (embed)
271            NOTE: removed from egroupware after sarge
272    
273    chmlib
274            - kchmviewer <unknown> (embed)
275    
276    ffmpeg (libavcodec/libavformat)
277            - mplayer 1.0~rc2-14 (embed; bug #395252)
278            - kino 1.0.0-1
279            - vlc <not-affected> (Links dynamically since initial release)
280            - smilutils 0.3.0-10
281            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
282            - motion 3.1.19-1
283            - gstreamer0.10-ffmpeg 0.10.3-2
284            - xmovie <removed> (static)
285            TODO: gimp-gap (potentially using ffmpeg code as well)
286            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
287            - audacity 1.3.7-2 (embed; bug #512278)
288    
289    faad2
290            - mplayer 1.0~rc2-20 (embed)
291            - avifile <unfixed> (embed; bug #538750)
292            - ffmpeg-debian <removed> (old-version)
293    
294    libmad (MPEG decoding lib)
295            - xine-lib <unfixed> (embed)
296            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
297            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
298    
 libdts:  
299  libdts  libdts
300  xine-lib          - xine-lib <unfixed> (embed)
301    
 flac:  
302  flac  flac
303  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
   
 imagemagick:  
 graphicsmagick  
304    
305  halibut:  liba52
306  nsis          - a52dec <unfixed> (embed)
307            - xine-lib <unfixed> (embed)
308    
309    libmpeg2
310            - mpeg2dec <unfixed> (embed)
311            - xine-lib <unfixed> (embed)
312    
313    libntlm
314            - wget <unfixed> (fork; bug #550436)
315            - curl <unfixed> (fork; bug #550437)
316            - cntlm <unfixed> (fork; bug #550438)
317    
318    uw-imap
319            - pine <unfixed> (embed)
320            - alpine <unfixed> (embed)
321    
322    imagemagick
323            - graphicsmagick <unfixed> (fork)
324    
325    python-urlgrabber
326            - mercurial <unfixed> (embed; bug #531062)
327            - w3af <unfixed> (embed; bug #555372)
328            [experimental] - harvestman <unfixed> (embed; bug #555373)
329    
330    beautifulsoup
331            - python-mechanize <unfixed> (embed; bug #555349)
332            - zope2.11 <unfixed> (embed; bug #555350)
333            - twill <unknown> (embed)
334    
335    halibut
336            - nsis <unfixed> (fork)
337    
338    libghttp
339            - hotway <unfixed> (embed)
340    
341    libsndfile
342            - ardour 1:2.7.1-1 (embed)
343    
344    glibmm2.4
345            - ardour 1:2.7.1-1 (embed)
346    
347    libgnomecanvasmm2.6
348            - ardour 1:2.7.1-1 (embed)
349    
350    libsigc++-2.0
351            - ardour 1:2.7.1-1 (embed)
352    
353    soundtouch
354            - ardour 1:2.7.1-1 (embed)
355    
356    libmms
357            - xine-lib <unfixed> (embed)
358            - mimms <unfixed> (embed)
359    
360    fckeditor
361            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
362            - moin 1.8.2-2 (embed; bug #452599)
363            - karrigell <removed> (embed; bug #452598)
364            - gforge 4.6.99+svn6225-1 (embed)
365            - request-tracker3.8 <unfixed> (embed)
366            - otrs2 <unfixed> (embed)
367    
368    ipatlas (not packaged in Debian)
369            - moodle <unfixed> (embed; bug #507185)
370    
371    libphp-phpmailer
372            - moodle <unfixed> (embed; bug #507185)
373            - mahara <unfixed> (embed)
374            - symfony <unfixed> (embed)
375            [etch] - phpgroupware <unfixed> (embed)
376            NOTE: phpgroupware-felamimail is only in etch
377            - egroupware <unfixed> (embed; bug #504283)
378            - glpi <unfixed>
379    
380    htmlArea (not packaged in Debian)
381            - moodle <unfixed> (embed)
382    
383    giflib
384            - wine <unfixed> (embed; bug #466181)
385    
386    bennu (not packaged in Debian, http://bennu.sourceforge.net)
387            - moodle <unfixed> (embed)
388    
389    smarty
390            - moodle 1.8.2-2 (embed; bug #471158)
391            - gallery2 2.2.5-2 (embed; bug #471160)
392            - mahara 0.9.2-2 (embed; bug #471201)
393            - gosa 2.4beta1-1 (embed; bug #471200)
394    
395  libghttp:  TinyMCE
396  hotway          - wordpress 2.5.1-3 (embed; bug #478257)
397            - moodle <unfixed> (embed; bug #507185)
398            - knowledgeroot <unfixed> (embed)
399            - joomla <itp> (bug #326398)
400    
401    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
402            - scite <unfixed> (embed)
403            - qscintilla <unfixed> (embed)
404            - qscintilla2 <unfixed> (embed)
405            - geany <unfixed> (fork)
406            - anjuta <unfixed> (embed)
407    
408    libphp-adodb
409            - moodle <unfixed> (embed; bug #507185)
410            NOTE: also AdoDB-XML Schema
411            - gallery2 <unfixed> (embed)
412            - phppgadmin <unfixed> (embed)
413            - egroupware <unfixed> (embed)
414            - phpwiki <unfixed> (embed)
415            - torrentflux 2.0beta1-2 (embed)
416            - ipplan <unfixed> (embed)
417            - typo3-src <unfixed> (embed)
418            - cacti <unknown> (embed)
419            [sarge] - cacti <unfixed> (embed)
420            NOTE: dependency exists, but internal version is used
421            - gforge 4.7~rc2-6 (embed)
422            - mahara <unfixed> (embed)
423    
424    gzip
425            - linux-kernel <unfixed> (embed)
426            NOTE: lib/inflate.c
427            - klibc <unfixed> (embed)
428            NOTE: based on linux-kernel gzip code
429            - busybox <unfixed> (embed)
430    
431    neon
432            - cadaver 0.22.3+debian-1 (embed; bug #188381)
433            - gnome-vfs2 <unfixed> (embed; bug #395874)
434            [etch] - litmus <unfixed> (embed; #395875)
435            - litmus <removed> (embed; #395875)
436            [sarge] - screem <unfixed> (embed)
437            - sitecopy 1:0.16.0-1 (embed; bug #395876)
438            [etch] - tla <unfixed> (embed; bug #395877)
439            [sarge] - tla <unfixed> (embed; bug #395877)
440    
441    libmodplug
442            - gst-plugins-bad0.10 <unfixed> (embed)
443    
444    libvncserver
445            - vino <unfixed> (embed)
446    
447    putty
448            - filezilla <unfixed> (embed)
449    
450    tinyxml (not packaged in Debian; itp bug #531968)
451            - filezilla <unfixed>
452            - crystalspace <unfixed> (embed)
453            - libwfut <unfixed> (embed)
454            - rarian <unfixed> (embed)
455            - bulletml <unfixed> (embed)
456            - pokerth <unfixed> (embed)
457            - qutecom <unfixed> (embed)
458            - sofa-framework <unfixed> (embed)
459            - yate <unfixed> (embed)
460            - antigrav <unfixed> (embed)
461            - balder2d <unfixed> (embed)
462            - cal3d <unfixed> (embed)
463            - criticalmass <unfixed> (embed)
464            - ember <unfixed> (embed)
465            - epiphany <unfixed> (embed)
466            - gambit <unfixed> (embed)
467            - noiz2sa <unfixed> (embed)
468            - ogre <unfixed> (embed)
469            - opencity <unfixed> (embed)
470            - openmovieeditor <unfixed> (embed)
471            - pouetchess <unfixed> (embed)
472            - tecnoballz <unfixed> (embed)
473            - trigger-rally <unfixed> (embed)
474            - xmoto <unfixed> (embed)
475            - mapnik <unknown> (embed)
476            NOTE: uses a different XML parser by default
477            - rrootage 0.23a-6 <embed>
478            NOTE: links to libbulltetml
479            - boson <unknown> (embed)
480            NOTE: the embedded code is unused
481    
482    gv
483            - evince <unfixed> (embed)
484            NOTE: ps/ tree from gv 3.5.8
485            NOTE: evince-gtk is affected (a component of evince source package)
486    
487    libXbae
488            - paw <removed> (embed)
489            [etch] - paw <unfixed> (embed)
490    
491    libgtkhtml
492            - claws-mail-extra-plugins <unfixed> (fork)
493    
494    libXaw
495            - paw <removed> (embed)
496            [etch] - paw <unfixed> (embed)
497            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
498    
499    libgd2
500            - graphviz <unfixed> (embed)
501            NOTE: lib/gd seems to be 2.0.33
502            - wml <unfixed> (embed)
503            - libwmf <unfixed> (embed)
504            NOTE: derived from gd 1.6.3
505    
506    rar
507            - unrar-nonfree <unfixed> (embed)
508    
509    unrar-free (maybe this code is derived from the original rar, too?)
510            - clamav <unfixed> (embed)
511            NOTE: seems to be disabled in default config
512    
513    mplayer (DirectMedia Object loader)
514            - xine-lib <unfixed> (embed)
515            NOTE: src/libw32dll/
516            - vlc <unfixed> (embed)
517            NOTE: modules/codec/dmo/
518            - mplayer 1.0~rc2-20 (embed)
519    
520    libwpd (WordPerfect converter)
521            - openoffice.org <unfixed> (embed)
522    
523    fsplib (http://sourceforge.net/projects/fsp/)
524            - gftp <unfixed> (embed)
525            NOTE: lib/fsplib version 0.3
526    
527    sprng
528            - tree-puzzle <unfixed> (embed)
529    
530    librpcsecgss
531            - krb5 <unfixed> (embed)
532    
533    jasper
534            - ghostscript 8.64~dfsg-2 (embed)
535    
536    libiris
537            - psi <unfixed> (embed)
538            - kdenetwork <unfixed> (embed)
539            NOTE: kopete embeds libiris but links dynamically to libidn
540            - kdegames <unfixed> (embed)
541            NOTE: ksirk/kde4
542    
543    libidn
544            - monotone 0.43-1 (embed)
545            - psi <unfixed> (embed)
546            NOTE: psi embeds libiris which embeds libidn
547            - kdegames <unfixed> (embed)
548            NOTE: kdegames/kde4 embeds libiris which embeds libidn
549    
550    lua5.1
551            - monotone 0.43-1 (embed)
552            - nmap 5.00-1 (embed; bug #527997)
553            [lenny] - nmap <unfixed> (embed; bug #527997)
554            - ocropus <unfixed> (embed)
555            - enigma <unfixed> (embed)
556            NOTE: requires lua built with C++
557            - freeciv <unfixed> (embed)
558            - spring <unfixed> (embed)
559    
560    libbotan
561            - monotone 0.43-1 (embed)
562    
563    NetXX
564            - monotone 0.43-1 (embed)
565    
566    libgc
567            - mono <unfixed> (embed)
568    
569    lzma
570            - p7zip <unfixed> (embed)
571            - xz-utils <unfixed> (fork)
572    
573    lzo
574            - grub2 <unfixed> (embed)
575    
576    yassl
577            - mysql-dfsg-5.0 <unfixed> (embed)
578    
579    pax code
580            - tar <unfixed> (embed)
581            - cpio <unfixed> (embed)
582    
583    t1lib
584            - tetex-bin 2.0.2-1 (embed)
585            - texlive-bin <unknown> (embed)
586    
587    guichan
588            - boswars <unfixed> (embed)
589            NOTE: maintainer notified us, working on it
590    
591    tolua
592            - boswars <unfixed> (embed)
593            NOTE: maintainer notified us, working on it
594            NOTE: actually tolua++
595            - ocropus <unfixed> (embed)
596            NOTE: actually tolua++
597            - freeciv <unfixed> (embed)
598            NOTE: actually tolua++
599            - enigma <unfixed> (embed)
600    
601  libsndfile:  asio-dev
602  ardour          - luxrender <removed> (embed)
603    
604  glibmm2.4:  xine-lib
605  ardour          - vlc <unfixed> (embed)
606            NOTE: only parts included in modules/access/rtsp
607    
608  libgnomecanvasmm2.6:  netpbm
609  ardour          - tcl8.3 <unfixed> (embed)
610            - tcl8.4 <unfixed> (embed)
611            - tcl8.5 <unfixed> (embed)
612            NOTE: generic/tkImgGIF.c
613    
614    tk8.5
615            - tk8.0 <removed> (old-version)
616            - tk8.3 <unfixed> (old-version)
617            - tk8.4 <unfixed> (old-version)
618            - perl-tk <unfixable> (fork)
619    
620    samba
621            - mc 2:4.6.2~git20080311-1 (embed)
622            NOTE: maintainer is aware of this, currently searching a solution
623    
624    plib1.8.4c2
625            - boson <unfixed> (fork)
626            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
627    
628    fribidi
629            - quesoglc <unfixed> (embed)
630            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
631    
632    glew
633            - quesoglc <unfixed> (embed; bug #489341)
634            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
635            - trigger <unfixed> (embed)
636            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
637            - trigger-rally <unfixed> (embed)
638            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
639    
640    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
641            - transcend <unfixed> (embed)
642            - cultivation <unfixed> (embed)
643            - passage <unfixed> (embed)
644            - gravitation <unfixed> (embed)
645    
646  libsigc++-2.0:  tar
647  ardour          - libarchive <unfixed> (embed)
648            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
649    
650  soundtouch:  cpio
651  ardour          - libarchive <unfixed> (embed)
652            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
653    
654  libmms:  kde4libs
655  xine-lib          - kdelibs <unfixable> (old-version)
 mimms  
656    
657  FCKeditor:  webkit
658  knowledgeroot          - qt4-x11 <unfixed> (embed; bug #479851)
659  moin          [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
660  karrigell          [lenny] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
661  gforge-plugins-extra          - kde4libs <unfixable> (fork)
662            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
663  Moodle contains lots of things:          NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
664  AdoDB  
665  AdoDB-XML Schema  ftgl
666  ipatlas          - blender 2.46+dfsg-1 (embed)
667  PHPMailer  
668  Smarty  wv
669  htmlArea          - abiword <unfixed>
670  TinyMCE  
671  bennu  qemu
672            - kvm <unfixed> (embed; bug #543159)
673            NOTE: the kvm package will be removed from sid and squeeze soon (after
674            NOTE: which it will only be in experimental). superceded by qemu-kvm.
675            - qemu-kvm <unfixed> (embed; bug #560853)
676            - xen-3 3.4.2-2 (embed; bug #560856)
677            - xen-unstable <unfixed> (embed; bug #560856)
678    
679    vgabios
680            - kvm <unfixed> (embed; bug #489442)
681    
682    bochs
683            - kvm <unfixed> (embed; bug #489442)
684    
685    speex
686            - vorbis-tools <unfixed> (embed)
687            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
688            - gst-plugins-good0.10 <unfixed> (embed)
689            - xine-lib <unfixed> (embed)
690            - libfishsound <unfixed> (embed)
691            - libannodex <removed> (embed)
692            - vlc <unfixed> (embed)
693            - xmms-speex <unfixed> (embed)
694            - libsdl-sound1.2 <unfixed> (embed)
695            - sweep <unfixed> (embed)
696    
697    libreadline
698            - magic <itp> (old-version)
699    
700    opcode
701            - ode <unfixed> (embed)
702            NOTE: opcode is not a package in debian, it is just embedded
703            NOTE: http://www.codercorner.com/Opcode.htm
704    
705    gimpact
706            - ode <unfixed> (embed)
707            NOTE: gimpact is not a package in debian, it is just embedded
708            NOTE: http://gimpact.sf.net
709    
710    mochikit
711            - mahara <unfixed> (embed)
712            NOTE: they require extra patches, still unmerged upstream
713            - ntop <unfixed> (embed)
714            - coherence 0.6.2-1 (embed)
715            - paste <unfixed> (embed)
716            - turbogears <unfixed> (embed)
717            - plone3 <unfixed> (embed)
718            - xulrunner <unfixed> (embed)
719            - libjifty-plugin-chart-perl <unfixed> (embed)
720            - sabnzbdplus <unfixed> (embed)
721            - tgmochikit <unfixed> (embed)
722    
723    prototypejs
724            - netbeans-ide 6.0.1+dfsg-2 (embed)
725            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
726            - webcit <unfixed> (embed; bug #555219)
727            - asterisk 1:1.6.2.0~rc3-1 (embed)
728            - libjson-ruby 1.1.4-1 (embed; bug #555224)
729            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
730            - horde3 <unfixed> (embed)
731            - knowledgeroot <unfixed> (embed; bug #555230)
732            - mediatomb <unfixed> (embed; bug #555233)
733            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
734            - ebug-http <removed> (embed; bug #555236)
735            - libaws 2.7-1 (embed; bug #555222)
736            - phpgedview <removed> (embed)
737            - poker-network <removed> (embed; bug #555238)
738            - rails 2.1.0-6 (embed)
739            - wordpress 2.5.0-2 (embed; bug #555243)
740            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
741            TODO: search through all of the other zope packages
742            - ampache 3.4.1-2 (embed)
743            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
744            - hobix 0.5~svn20070319-4 (embed; bug #555247)
745            - zabbix 1.6.6-4 (embed; bug #555250)
746            - chora2 <unfixed> (embed; bug #555253)
747            - gollem <unfixed> (embed; bug # 555254)
748            - jscropperui 1.2.1-1 (embed; bug #555257)
749            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
750            - ingo1 <unfixed> (embed; bug #555261)
751            - kronolith2 <unfixed> (embed; bug #555262)
752            - activeldap <unfixed> (embed)
753            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
754            - mantis <unfixed> (embed; bug #555265)
755            - otrs2 2.3.4-6 (embed; bug #555267)
756            - webcalendar <unfixed> (embed; bug #555269)
757            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
758            - jifty 0.90519-1 (embed; bug #555271)
759            - jquery <unfixed> (embed; bug #555272)
760            - passenger 2.2.5debian1-1 (embed; bug #555273)
761            - plone3 <unfixed> (embed; bug #555275)
762            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
763            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
764            - xulrunner <unfixed> (embed)
765            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
766    
767    gdb
768            - insight <unfixed> (embed)
769    
770    e2fsprogs
771            - ldiskfsprogs <unfixable> (fork)
772    
773    quazip (not packaged in Debian)
774            - qcake <unfixed> (embed)
775            NOTE: starting with upstream version 0.6.4
776    
777    exo
778            - pcmanfm <unfixed> (embed; bug #499677)
779            NOTE: slightly modified source code
780    
781    java
782            - openjdk-6 <unfixed>
783            - sun-java5 <unfixed>
784            - sun-java6 <unfixed>
785    
786    libphp-snoopy
787            - ampache 3.4.1-2 (embed; bug #504169)
788            - gforge 4.6.99+svn6094-2 (embed)
789            - mahara 1.0.5-2 (embed; bug #504170)
790            - pixelpost 1.7.1-5 (embed; bug #504171)
791            - mediamate 0.9.3.6-5 (embed; bug #504172)
792            - opendb <removed> (embed; bug #504173)
793            [etch] - opendb <unfixed> (embed; bug #504173)
794            - wordpress 2.5.1-9 (embed; bug #443948)
795            - moodle <unfixed> (embed; bug #507185)
796            [etch] - phpgroupware <unfixed> (embed)
797            NOTE: phpgroupware-felamimail
798            - magpierss 0.72-3 (embed; bug #431089)
799    
800    jquery
801            - zekr <unfixed> (embed)
802            - wordpress <unknown> (embed)
803            - yocto-reader <unfixed> (embed)
804            - textpattern <unfixed> (embed)
805            - genshi 0.5.1-1 (embed)
806            NOTE: compressed file under examples/ dir
807            - prewikka <unfixed> (embed)
808            - libramaze-ruby <unfixed> (embed)
809            - drupal5 <unfixed> (embed)
810            - b2evolution <unfixed> (embed)
811            - wesnoth <unfixed> (embed)
812    
813    tablesorter (jquery plugin, not packaged yet)
814            - wesnoth <unfixed> (embed)
815    
816    kses
817            - wordpress <unfixed> (embed; bug #504242)
818            NOTE: their copy has all methods renamed to wp_<foo>
819            NOTE: kses isn't in Debian, RFP: #504240
820            - moodle <unfixed> (embed; bug #507185)
821            - egroupware <unfixed> (embed)
822    
823    magpierss
824            - wordpress <unfixed> (embed; bug #504242)
825            - moodle <unfixed>
826    
827    php-gettext
828            - wordpress 2.8.4-1 (embed; bug #504242)
829            - docbookwiki <unfixed> (embed)
830            NOTE: non-free
831    
832    libphp-ixr (name may change, it is the Incutio XML-RPC)
833            - wordpress <unfixed> (embed; bug #504242)
834            NOTE: libphp-ixr isn't in Debian, RFP: #504236
835            - dokuwiki <unfixed> (embed)
836            - textpattern <unfixed> (embed)
837    
838    libphp-cas
839            - glpi <unfixed> (embed)
840            - moodle <unfixed> (embed; bug #505984)
841    
842    scriptaculous (prototype.js is among the embeds in the following)
843            - glpi <unfixed> (embed)
844            - libaws <unfixed> (embed; bug #555222)
845            - op-panel <unfixed> (embed)
846            - symfony <unfixed> (embed)
847            NOTE: maintainer says there are extra incompatible changes required
848            - pixelpost 1.7.1-6 (embed)
849            - webhelpers <unfixed> (embed)
850            - qwik <removed> (embed; bug #555241)
851            - smokeping <unfixed> (embed)
852            - turba2 <unfixed> (embed)
853            - typo3-src 4.2.3-1 (embed)
854            - request-tracker3.6 <unfixed> (embed)
855            - request-tracker3.8 <unfixed> (embed)
856            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
857            - wordpress 2.5.0-2 (embed)
858            - libhtml-prototype-perl 1.48-3 (embed)
859    
860    libmarkdown-php
861            - moodle <unfixed> (embed; bug #507185)
862            - pixelpost 1.7.1-6 (embed)
863    
864    php-openid
865            - wordpress-openid <itp> (embed)
866    
867    geshi
868            - dokuwiki 0.0.20080505-3.1 (embed)
869            - pgfouine 1.0-1.1 (embed)
870            - websvn 2.1.0-1 (embed)
871    
872    webcalendar
873            - gforge 4.7~rc2-6 (embed; bug #504758)
874    
875    libical
876            - kdepim <unknown> (fork)
877            NOTE: fixed at some point during 4.0
878            - kdepimlibs 4.2.0-1 (fork)
879            - claws-mail-extra-plugins <unfixed> (fork)
880    
881    libltdl3
882            - kdelibs <unfixed> (embed)
883            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
884            - synfig <unfixed> (embed)
885    
886    harfbuzz
887            - qt4-x11 <unfixed> (embed)
888            - pango1.0 <unfixed> (embed)
889            - fontmatrix <unfixed> (embed)
890    
891    libzip
892            - php5 <unfixable> (modified-embed)
893            - odt2txt <unfixed> (embed; bug #523808)
894    
895    json.php (not packaged; should be replaced with php's built-in functions)
896            - moodle <unfixed>
897            - yui <unfixed>
898            - gallery2 <unfixed>
899            - dokuwiki <unfixed>
900            - typo3-src <unfixed>
901    
902    php-fpdf
903            - tcpdf <itp> (fork)
904            - moodle <unfixed>
905            - phpwiki <unfixed>
906            - egroupware <unfixed>
907            - ldap-account-manager <unfixed> (fork)
908    
909    tcpdf (itp: #495985)
910            - moodle <unfixed>
911            - phpmyadmin <unfixed>
912    
913    typo3
914            - moodle <unfixed>
915    
916    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
917            - moodle <unfixed>
918            - gosa <unfixed>
919    
920    php-ole (itp: #487558)
921            - moodle <unfixed>
922    
923    pieforms (http://www.catalyst.net.nz)
924            - mahara <unfixed>
925    
926    savant2 (http://phpsavant.com)
927            - egroupware <unfixed>
928    
929    rssparser (http://nwow.org)
930            - egroupware <unfixed>
931            - phpgroupware <unfixed>
932    
933    lcms
934            - openjdk-6 <unfixed> (fork)
935    
936    libphp-phplayersmenu
937            - diogenes <unfixed>
938            - phpldapadmin <unfixed>
939    
940    libphp-pclzip
941            - docvert <unfixed>
942            - moodle <unfixed>
943            - egroupware <unfixed>
944    
945    libphp-simplepie
946            - dokuwiki <unfixed>
947            - wordpress <unfixed>
948    
949    libphp-jpgraph
950            - egroupware <unfixed>
951    
952    php-simpletest
953            - moodle <unfixed>
954    
955    libpng
956            - iceweasel <not-affected> (uses xulrunner)
957            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
958            - iceape 1.0.13~pre080614i-0etch1 (embed)
959            - xulrunner 1.9.0.13-1 (embed)
960            [lenny] - xulrunner 1.9.0.11-0lenny1
961            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
962            - gamera 3.2.3-1 (embed)
963    
964    irssi
965            - silc-client <unfixed> (embed)
966            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
967    
968    extc
969            - mtasc <unfixed> (embed)
970            - haxe <unfixed> (embed)
971    
972    swflib
973            - mtasc <unfixed> (embed)
974            - haxe <unfixed> (embed)
975    
976    libitext-java
977            - bouncycastle 2.1.4-1 (embed)
978    
979    python-ply
980            - pyke <unfixed> (embed; bug #555363)
981            - pywbem 0.7.0-4 (embed; bug #555364)
982            - sepolgen <unfixed> (embed; bug #555365)
983            - zope-textindexng3 <unknown> (embed)
984            - iceweasel <not-affected> (uses xulrunner)
985            - xulrunner <unknown> (embed)
986            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
987    
988    libdumbnet (libdnet upstream)
989            - nmap <unfixed> (fork)
990    
991    gcc-4.4
992            - gcc-mingw32 <unfixed> (embed)
993    
994    camlimages
995            - advi <unfixed> (static; bug #550441)
996    
997    memcached
998            - memcachedb <unfixed> (embed)
999    
1000    yajl
1001            - argyll <unfixed> (embed; bug #544223)
1002            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1003    
1004    nusoap
1005            - gforge 4.8.2-1 (embed)
1006            - ampache <unfixed> (embed)
1007            - poker-network <unfixed> (old-version)
1008            - moodle <unfixed> (old-version)
1009            NOTE: code is not used when running under php5 and soap is enabled
1010            - phpwiki <unfixed> (old-version)
1011            - gallery2 <unfixed> (old-version)
1012            - typo3-src <unfixed> (old-version)
1013    
1014    libept
1015            - adept <unfixed> (embed; bug #540649)
1016    
1017    libvorbis
1018            - iceweasel <not-affected> (uses xulrunner)
1019            - xulrunner <unfixed> (embed; bug #540959)
1020            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1021            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1022            - iceape <unfixed> (embed)
1023            [etch] - iceape <not-affected> (introduced in 2.0)
1024            [lenny] - iceape <not-affected> (introduced in 2.0)
1025    
1026    cairo
1027            - iceweasel <not-affected> (uses xulrunner)
1028            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1029    
1030    liboggz
1031            - iceweasel <not-affected> (uses xulrunner)
1032            - xulrunner <unfixed> (embed; bug #540959)
1033            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1034            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1035            - iceape <unfixed> (embed)
1036            [etch] - iceape <not-affected> (introduced in 2.0)
1037            [lenny] - iceape <not-affected> (introduced in 2.0)
1038    
1039    liboggplay
1040            - iceweasel <not-affected> (uses xulrunner)
1041            - xulrunner <unfixed> (embed; bug #540959)
1042            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1043            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1044            - iceape <unfixed> (embed)
1045            [etch] - iceape <not-affected> (introduced in 2.0)
1046            [lenny] - iceape <not-affected> (introduced in 2.0)
1047    
1048    php-net-dnsbl
1049            - serendipity <unfixed> (embed; bug #541740)
1050    
1051    php-onyx-rss
1052            - serendipity <unfixed> (embed; bug #541740)
1053    
1054    php-text-wiki
1055            - serendipity <unfixed> (embed; bug #541740)
1056    
1057    php-xml-rpc
1058            - serendipity <unfixed> (embed; bug #541740)
1059    
1060    polarssl (does not have a shared library)
1061            - pdkim <itp> (embed; bug #543150)
1062            - xyssl <unfixed> (old-version)
1063    
1064    pidgin
1065            - gaim <removed> (old-version)
1066            - qutecom <unfixed> (embed; bug #559785)
1067    
1068    icu
1069            - webkit 1.0.1-1 (embed; bug #547214)
1070            - texlive-bin <unfixed> (fork)
1071            NOTE: texlive upstream working with icu upstream to merge their changes
1072    
1073    cyrus-imapd-2.2
1074            - kolab-cyrus-imapd <unfixed> (fork)
1075            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1076    
1077    python-cxx-dev
1078            - freecad 0.9.2646.3-1 (embed; bug #547936)
1079    
1080    zipios++
1081            - freecad 0.9.2646.3-1 (embed; bug #547941)
1082            - enigma 0.92.3-3 (embed)
1083            NOTE: likely fixed earlier, marking etch's version as fixed
1084    
1085    linux-2.6
1086            - kvm <removed> (embed; bug #549973) [./kernel/*]
1087            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1088            - kernel-source-2.6.8 <removed> (old-version)
1089            - kernel-source-2.4.27 <removed> (old-version)
1090            - kernel-source-2.4.24 <removed> (old-version)
1091            - kernel-source-2.2.25 <removed> (old-version)
1092            - kernel-source-2.2.20 <removed> (old-version)
1093    
1094    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1095            - kvm <removed> (embed) [./libfdt/*]
1096            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1097    
1098    qweb (not packaged)
1099            - ajaxterm <unfixed>
1100    
1101    opensaml2
1102            - opensaml <removed> (old-version)
1103    
1104    shibboleth-sp2
1105            - shibboleth-sp <removed> (old-version)
1106    
1107    tuxonice-userui
1108            - suspend2-userui <removed> (old-version)
1109    
1110    expat
1111            - w3c-libwww <removed> (embed; bug #551941)
1112            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1113            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1114            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1115            - python2.4 <unfixable> (embed; bug #553403)
1116            - python-4suite <unfixed> (embed; bug #516935)
1117            - wxwindows2.4 <removed> (embed)
1118            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1119            - wxwidgets2.8 2.8.10.1-2 (embed)
1120            - celementtree 1.0.5-8 (embed)
1121            NOTE: Maybe that was fixed even earlier
1122            - audacity 1.3.2-1 (embed)
1123            - matanza <unfixed> (embed)
1124            - tdom 0.8.3~20080525-1 (embed)
1125            - udunits 2.1.8-4 (embed)
1126            - apr-util 1.2 (embed)
1127            - ayttm <unfxed> (embed; bug #561006)
1128            - cableswig <unfixed> (embed)
1129            - cadaver <unfixed> (embed)
1130            - cmake 2.6.0-6 (embed)
1131            - coin3 <unfixed> (embed)
1132            - gdcm 2.0.14-2 (embed)
1133            - ghostscript <unfixed> (embed)
1134            - grmonitor <removed> (embed)
1135            - iceape <unfixed> (embed)
1136            - insighttoolkit 3.16.0-1 (embed)
1137            NOTE: insighttoolkit might've been fixed earlier
1138            - libparagui1.1 1.0.2-1 (embed)
1139            - paraview <unfixed> (embed)
1140            - poco <unfixed> (embed)
1141            - simgear <unfixed> (embed)
1142            - sitecopy 1:0.16.0-1
1143            - smart 1.0-1 (embed)
1144            - swish-e <not-affected> (Linked against libxml, which is used instead)
1145            - tla 1.3.5+dfsg-15 (embed)
1146            - vtk 4.1.20030227-1 (embed)
1147            - wbxml2 <unfixed> (embed)
1148            - xmlrpc-c <unfixed> (embed)
1149            - iceweasel <unfixed> (embed)
1150            - kompozer <unfixed> (embed)
1151            - vxl 1.13.0-2 (embed)
1152            - xulrunner <unfixed> (embed)
1153            - apache2 2.2 (embed)
1154            - texlive-bin <not-affected> (Embedded code not compiled in)
1155            - vnc4 <unfixed> (embed)
1156            - xotcl <unfixed> (embed)
1157    
1158    xerces-c
1159            - xerces-c2 <unfixed> (old-version)
1160            - xerces27 <removed> (old-version)
1161    
1162    md5 (RSA's version; not the gnu version provided by coreutils)
1163            - w3c-libwww <removed> (embed; bug #551942)
1164            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1165    
1166    enet
1167            - sauerbraten <unfixed> (embed; #497194)
1168    
1169    eglibc
1170            - glibc <removed> (old-version)
1171    
1172    galib
1173            - gamera 3.2.3-1 (embed)
1174    
1175    configobj
1176            - bzr <unfixed> (embed; bug #555336)
1177            - elisa <unfixed> (embed; bug #555337)
1178            - gaupol <unfixed> (embed; bug #555338)
1179            - ipython <unfixed> (embed; bug #555339)
1180            - pida <unfixed> (embed; bug #555340)
1181            - psychopy <unfixed> (embed; bug #555341)
1182            - rest2web <unfixed> (embed; bug #555342)
1183            - auth2db <unknown> (embed)
1184            - dynagen <unknown> (embed)
1185            - iceweasel <unknown> (embed)
1186            - sabnzbdplus <unknown> (embed)
1187            - xulrunner <unknown> (embed)
1188            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1189    
1190    python-clientform
1191            - bibus <unfixed> (embed; bug #555332)
1192            - zope2.10 <unfixed> (embed; bug #555333)
1193            - zope2.11 <unfixed> (embed; bug #555334)
1194            - python-mechanize <unknown> (embed)
1195            - twill <unknown> (embed)
1196    
1197    python-mechanize
1198            - zope2.10 <unfixed> (embed; bug #555337)
1199            - zope2.11 <unfixed> (embed; bug #555338)
1200            - twill <unknown> (embed; bug #555339)
1201    
1202    pexpect
1203            - duplicity 0.6.06-1 (embed; bug #555361)
1204            - hplip <unfixed> (embed; bug #555362)
1205            - smart <unfixed> (embed; bug #555363)
1206    
1207    pyparsing
1208            - bauble <unfixed> (embed; bug #555366)
1209            - boa-constructor 0.6.1-8 (embed; bug #555367)
1210            - calibre <unfixed> (embed; bug #555368)
1211            - matplotlib <unfixed> (embed; bug #531024)
1212            - zhpy <unfixed> (embed; bug #555370)
1213            - polybori <unknown> (embed)
1214            - python-whoosh <unknown> (embed)
1215            - twill <unknown> (embed)
1216            - zope-textindexng3 <unknown> (embed)
1217    
1218    python-pysqlite2
1219            - python2.4 <unfixed> (embed; bug #553403)
1220            - python2.5 <unfixed> (embed; bug #553403)
1221    
1222    celementtree
1223            - python2.5 <unfixed> (embed)
1224            - smart 1.0-1 (embed)
1225            [etch] - smart <unfixed> (embed)
1226    
1227    elementtree
1228            - python2.5 <unfixed> (embed)
1229            - bzr <unfixed> (embed; bug #555343)
1230            - gedit 2.28.2-1 (embed; bug #555344)
1231            - smart 1.0-1 (embed)
1232            [etch] - smart <unfixed> (embed)
1233            - solfege <unfixed> (embed; bug #555345)
1234            - w3af <unfixed> (embed; bug #555346)
1235            - python-qt4 <unknown> (embed)
1236            - sphinx <unknown> (embed)
1237            - python-nltk <itp> (embed)
1238    
1239    python2.5
1240            - python2.4 <unfixed> (old-version)
1241            - jython <unfixed> (embed)
1242            NOTE: embeds many stdlib modules
1243            - python-django <unfixed> (embed; bug #555419)
1244            NOTE: embeds stdlib modules: doctest, decimal
1245            - gamera 3.2.3-1 (embed)
1246            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1247            - boa-constructor <unfixed> (embed; bug #555426)
1248            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1249            - nicotine <unfixed> (embed; bug #555427)
1250            NOTE: embeds stdlib modules: ConfigParser
1251            - museek+ <unfixed> (embed; bug #555428)
1252            NOTE: embeds stdlib modules: ConfigParser
1253            - vegastrike-data <unfixed> (embed)
1254            NOTE: embeds many stdlib modules
1255            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1256            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1257            - config-manager <unfixed> (embed; bug #555423)
1258            NOTE: embeds stdlib modules: optparse
1259            - jhbuild 2.28.0-1 (embed; bug #555421)
1260            NOTE: embeds stdlib modules: optparse, subprocess
1261            - smart <unfixed> (embed; bug #555432)
1262            NOTE: embeds stdlib modules: optparse
1263            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1264            NOTE: embeds stdlib modules: doctest
1265            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1266            NOTE: embeds stdlib modules: doctest
1267            - distribute <unfixed> (embed)
1268            NOTE: embeds stdlib modules: doctest
1269            - python-setuptools <unfixed> (embed; bug #555435)
1270            NOTE: embeds stdlib modules: doctest
1271            - zope.testing <unfixed> (embed; bug #555436)
1272            NOTE: embeds stdlib modules: doctest
1273            - translate-toolkit <unfixed> (embed; bug #555422)
1274            NOTE: embeds stdlib modules: textwrap, contextlib
1275            - libtpclient-py <unfixed> (embed; bug #555424)
1276            NOTE: embeds stdlib modules: subprocess
1277            - grass <unfixed> (embed; bug #555425)
1278            NOTE: embeds stdlib modules: subprocess
1279            - coherence <unfixed> (embed; bug #555429)
1280            NOTE: embeds stdlib modules: uuid
1281            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1282            NOTE: embeds stdlib modules: uuid
1283            - setroubleshoot <unfixed> (embed; bug #555431)
1284            NOTE: embeds stdlib modules: uuid
1285            - linkchecker <unfixed> (embed; bug #555414)
1286            NOTE: embeds msgfmt.py script
1287            - imdbpy <unfixed> (embed)
1288            NOTE: embeds msgfmt.py script
1289            - kiwi <unfixed> (embed)
1290            NOTE: embeds msgfmt.py script
1291            - moin <unfixed> (embed)
1292            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1293            - plone3 <unfixed> (embed)
1294            NOTE: embeds msgfmt.py script
1295            - roundup <unfixed> (embed)
1296            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1297            - rednotebook <unfixed> (embed; bug #555415)
1298            NOTE: embeds msgfmt.py script
1299            - turbogears <unfixed> (embed)
1300            NOTE: embeds msgfmt.py script
1301            - elisa <unfixed> (embed)
1302            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1303            - calibre <unfixed> (embed)
1304            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1305            - mailman 1:2.1.13-1 (embed; #555416)
1306            NOTE: embeds msgfmt.py script
1307            - python-docutils <unknown> (embed)
1308            NOTE: embeds stdlib modules: optparse, textwrap
1309            - python-imaging <unknown> (embed)
1310            NOTE: embeds stdlib modules: doctest
1311            - python-mechanize <unknown> (embed)
1312            NOTE: embeds stdlib modules: doctest
1313            - twill <unknown> (embed)
1314            NOTE: embeds stdlib modules: subprocess
1315            - zeroc-ice <unknown> (embed)
1316            NOTE: embeds stdlib modules: subprocess
1317            - wxwidgets2.8 <unknown> (embed)
1318            NOTE: embeds stdlib modules: subprocess
1319            - cycle <unknown> (embed)
1320            NOTE: embeds msgfmt.py script
1321            - deluge <unknown> (embed)
1322            NOTE: embeds msgfmt.py script
1323            - opendict <unknown> (embed)
1324            NOTE: embeds msgfmt.py script
1325            - openerp-client <unknown> (embed)
1326            NOTE: embeds msgfmt.py script
1327            - rapidsvn <unknown> (embed)
1328            NOTE: embeds msgfmt.py script
1329            - wammu <unknown> (embed)
1330            NOTE: embeds msgfmt.py script
1331            - gaphor <unknown> (embed)
1332            NOTE: embeds msgfmt.py script
1333            - pida <unknown> (embed)
1334            NOTE: embeds msgfmt.py script
1335            - python-formencode <unknown> (embed)
1336            NOTE: embeds msgfmt.py script
1337            - duplicity <unfixed> (embed)
1338            NOTE: embeds stdlib module: urlparse, tarfile
1339            - pygopherd <unfixed> (embed)
1340            NOTE: embeds stdlib module: zipfile
1341    
1342    argparse
1343            - twill <unfixed> (embed; bug #555347)
1344            - ipython <unfixed> (embed; bug #555348)
1345    
1346    coherence
1347            - elisa <unfixed> (embed; bug #555335)
1348    
1349    simpletal
1350            - plastex <unfixed> (embed; bug #555371)
1351    
1352    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1353            - postr <unfixed> (embed)
1354            - elisa <unfixed> (embed)
1355    
1356    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1357            - apertium-tolk <unfixed> (embed)
1358            - ipython <unfixed> (embed)
1359            - virtaal <unfixed> (embed)
1360    
1361    distribute
1362            - setuptools <removed> (old-version)
1363    
1364    rails
1365            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1366            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1367            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1368            - thin <unfixed> (embed) [./spec/rails_app/*]
1369            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1370            NOTE: be dangerous if developers are naively basing their code off of the examples
1371            NOTE: prototype.js is among the example files
1372    
1373    lucene2 (prototype.js is among the embeds in the following)
1374            - lucene <unfixed> (old-version)
1375            - pylucene <unfixed> (embed)
1376            - libpdfbox-java <unfixed> (embed)
1377            - libfontbox-java <unfixed> (embed)
1378            - libjempbox-java <unfixed> (embed)
1379            - solr <unfixed> (embed)
1380    
1381    unicode-data
1382            - syslinux <unfixed> (embed)
1383            - camomile <unfixed> (embed)
1384            - fribidi <unfixed> (embed)
1385            - m17n-db <unfixed> (embed)
1386            - sbcl <unfixed> (embed)
1387            - heimdal <unfixed> (embed)
1388            - icu <unfixed> (embed)
1389            - icu4j <unfixed> (embed)
1390            - krb5 <unfixed> (embed)
1391            - moodle <unfixed> (embed)
1392            - openldap <unfixed> (embed)
1393            - pike7.6 <unfixed> (embed)
1394            - samba <unfixed> (embed)
1395            - samba4 <unfixed> (embed)
1396            - cmucl <unfixed> (embed)
1397            - typo3-src <unfixed> (embed)
1398            - mauve <unfixed> (embed)
1399            - texlive-bin <unfixed> (embed)
1400            - ypsilon <unfixed> (embed)
1401            - jeuclid <unfixed> (embed)
1402            - charmap.app <unfixed> (embed)
1403            - clisp <unfixed> (embed)
1404            - gnulib <unfixed> (embed)
1405            - opensrs-client <unfixed> (embed)
1406            - saxonb <unfixed> (embed)
1407            - rails <unfixed> (embed)
1408    
1409    feedparser
1410            - rawdog <unfixed> (embed; bug #383422)
1411            - miro <unfixed> (embed; bug #555351)
1412            - calibre <unfixed> (embed; bug #555352)
1413            - freevo <unfixed> (embed; bug #555353)
1414            - pida <unfixed> (embed; bug #555354)
1415            - planet-venus <unfixed> (embed; bug #555355)
1416            - plone3 <unfixed> (embed; bug #555356)
1417            - exaile 0.2.14+debian-1 (embed)
1418            - screenlets 0.1.2-3 (embed)
1419            NOTE: included twice
1420    
1421    agg:
1422            - matplotlib <unfixed> (embed: bug #377271)
1423            - contextfree <unfixed> (embed)
1424            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1425            - exactimage <unfixed> (embed)
1426            - python-enable <unfixed> (embed)
1427            - mapnik 0.5.1-3 (embed)
1428            NOTE: links statically to agg, but shared library is not available (bug #377271)
1429    
1430    vtk
1431            - paraview <unfixable> (embed; bug #495426)
1432    
1433    txt2tags
1434            - rednotebook <unfixed> (embed)
1435    
1436    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1437            - gajim <unfixed> (embed)
1438            - emesene <unfixed> (embed)
1439            - convirt <unfixed> (embed)
1440            - pida <unfixed> (embed)
1441            - rednotebook <unfixed> (embed)
1442    
1443    horde3 (prototype.js is among the embeds in the following)
1444            - mnemo2 <unfixed> (embed)
1445            - nag2 <unfixed> (embed)
1446            - wordpress <unfixed> (embed)
1447            NOTE: Text_Diff (wp-includes/Text/Diff*)
1448    
1449  TinyMCE:  cimg
1450  wordpress          - gmic <itp> (embed)
 moodle  
 knowledgeroot  
 joomla (ITP)  
1451    
1452  scintilla:  mootools
1453  scite          - gmic <itp> (embed)
 qscintilla  
 qscintilla2  
 geany  
1454    
1455  libphp-adodb:  openldap
1456  gallery2          - openldap2.3 <removed> (old-version)
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
1457    
1458  gzip:  grub2
1459  linux-kernel (lib/inflate.c)          - grub <unfixed> (old-version)
 klibc (based on linux-kernel gzip code)  
 busybox  
1460    
1461  neon:  gnupginterface
1462  cadaver (all, but being worked on: #188381)          - duplicity <unfixed> (embed)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
1463    
1464  libmodplug:  python-dateutil
1465  gst-plugins-bad0.10          - awn-extras-applets <unfixed> (embed)
1466            - matplotlib <unknown> (embed)
1467    
1468    cups
1469            - cupsys <removed> (old-version)
1470    
1471    yui
1472            - bcfg2 <not-affected> (present in source but not included in any binary files)
1473            - serendipity <unfixed> (embed; bug #557746)
1474            - moodle 1.8.2.dfsg-5 (embed)
1475            - jifty 0.91117-1 (embed; bug #557748)
1476            - webgui 7.7.26-1 (embed)
1477            - loggerhead 1.17-1 (embed)
1478    
1479    quake3 (vanilla source not packaged in debian)
1480            - openarena <unfixable> (fork)
1481    
1482    quake2 (vanilla source not packaged in debian)
1483            - alien-arena <unfixable> (fork)
1484            - warsow <unfixable> (fork)
1485    
1486    libtheora
1487            - iceweasel <not-affected> (uses xulrunner)
1488            - xulrunner <unfixed> (embed; bug #540959)
1489            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1490            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1491            - iceape <unfixed> (embed; bug #559276)
1492            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1493            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1494    
1495    dtoa
1496            - bfilter <unfixed> (embed)
1497            - cacao <unfixed> (embed)
1498            - cdrdao <unfixed> (embed)
1499            - classpath <unfixed> (embed)
1500            - freej <unfixed> (embed)
1501            - iceape <unfixed> (embed)
1502            - iceweasel <unfixed> (embed)
1503            - jscoverage <unfixed> (embed)
1504            - kde4libs <unfixed> (embed)
1505            - kdelibs <unfixed> (embed)
1506            - kompozer <unfixed> (embed)
1507            - libv8 <unfixed> (embed)
1508            - mono <unfixed> (embed)
1509            - newlib <unfixed> (embed)
1510            - nspr <unfixed> (embed)
1511            - php5 <unfixed> (embed)
1512            - polyml <unfixed> (embed)
1513            - qt4-x11 <unfixed> (embed)
1514            - rhino <unfixed> (embed)
1515            NOTE: code translated to Java
1516            - ruby1.8 <unfixed> (embed)
1517            - ruby1.9 <unfixed> (embed)
1518            - ruby1.9.1 <unfixed> (embed)
1519            - sdd <unfixed> (embed)
1520            - sfind <unfixed> (embed)
1521            - star <unfixed> (embed)
1522            - tinymux <unfixed> (embed)
1523            - virtualbox-ose <unfixed> (embed)
1524            - webkit <unfixed> (embed)
1525            - xulrunner <unfixed> (embed)
1526    
1527    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1528            - firegpg <unfixed> (embed)
1529            - enigmail <unfixed> (embed)
1530    
1531    ptmalloc (not packaged in Debian)
1532            - crystalspace <unfixed> (embed)
1533            - qt4-x11 <unfixed> (embed)
1534    
1535    svgalib
1536            - usplash <unfixed> (embed)
1537    
1538    bogl
1539            - usplash <unfixed> (embed)
1540    
1541    taglist
1542            - usplash <unfixed> (embed)
1543    
1544    portaudio
1545            - audacity <unfixed> (embed; bug #323711)
1546    
1547    nyquist
1548            - audacity <unfixed> (embed)
1549            NOTE: embeds a forked nyquist with support for a shared library
1550    
1551  libvncserver:  vamp-plugin-sdk
1552  vino          - audacity <unfixed> (embed)
1553    
1554  putty:  wordpress
1555  filezilla          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1556    
1557  tinyxml (not packaged in Debian):  php5
1558  filezilla          - php4 <removed> (old-version)
1559    
1560  gv:  classpath
1561  evince (ps/ tree from gv 3.5.8)          - libgnucrypto-java <unfixed> (embed; bug #559788)
 evince-gtk (not packaged in Debian)  
1562    
1563  libXbae:  libtool
1564  libpawlib2-lesstif package (from Cernlib)          - apr <unfixed> (static; bug #489625)
1565            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1566            - arts <unfixed> (embed)
1567            - bochs 2.4.2-1 (embed; bug #560884)
1568            - camserv <unfixed> (embed)
1569            - collectd <unfixed> (embed)
1570            - courier-authlib 0.58-4 (embed)
1571            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1572            - cvsnt <unfixed> (embed)
1573            - dico <not-affected> (Uses the system copy of ltdl)
1574            - freeradius 0.1+20010527-1 (embed)
1575            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1576            - ggobi 2.1.9~20091212-1 (embed)
1577            - glame 2.0.1-4 (embed)
1578            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1579            - gnash <unfixed> (embed)
1580            - gnu-smalltalk <unfixed> (embed)
1581            - google-gadgets 0.10.5-0.3 (embed)
1582            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1583            - graphicsmagick 1.3.5-6 (embed)
1584            - graphviz 2.8-3 (embed)
1585            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1586            - guile-1.6 1.6.8-7 (embed)
1587            - hamlib <unfixed> (embed)
1588            - hercules <unfixed> (embed)
1589            - jags 1.0.4-3 (embed; bug #560864)
1590            - kdelibs <unfixed> (embed)
1591            - libannodex <removed> (embed)
1592            - libextractor <unfixed> (embed)
1593            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1594            - libtunepimp <unfixed> (embed)
1595            - mp4h <unfixed> (embed)
1596            - naim <unfixed> (embed)
1597            - parser-mysql <unfixed> (embed)
1598            - pinball 0.3.1-11 (embed)
1599            - redland <unfixed> (embed)
1600            - siproxd <unfixed> (embed)
1601            - ski <unfixed> (embed)
1602            - synfig <unfixed> (embed)
1603            - unixodbc 2.2.4-5 (embed)
1604            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1605            - clamav 0.95+dfsg-1 (embed)
1606            - imagemagick 6:6.2.3.1-1 (embed)
1607            - hypre 2.4.0b-5 (embed)
1608            - lam <unfixed> (embed)
1609            - openmpi <unfixable> (embed; bug #559386)
1610            - parser <unfixed> (embed)
1611            - pdsh 2.18-5 (embed; bug #560892)
1612            - sbnc 1.2-8 (embed)
1613            - sdcc <unfixed> (embed)
1614            - wml <unfixed> (embed)
1615            - proftpd-dfsg <unfixed> (embed; bug #561748)
1616            - babel 1.4.0.dfsg-5 (embed)
1617            - libprelude 0.9.14-2 (embed)
1618            - heartbeat 2.1.4-7 (embed)
1619            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1620            NOTE: might've been fixed earlier
1621            - gcc-* <unknown> (embed)
1622    
1623    ocamlgsl
1624            - orpie 1.5.1-7.1 (embed; bug #550058)
1625    
1626    xdotool
1627            - keynav <unfixed> (embed; bug #560103)
1628    
1629    bulletphysics (not packaged; http://www.bulletphysics.org/)
1630            - supertuxkart <unfixed> (embed)
1631            - blender <unfixed> (embed)
1632    
1633  libXaw:  ghostscript
1634  libpawlib2-lesstif package (from Cernlib)          - gs-gpl <removed> (old-version)
1635    
1636  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  icedove
1637            - thunderbird <removed> (old-version)
1638    
1639  libgd2:  sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1640  graphviz (lib/gd seems to be 2.0.33)          - jquery <unfixed> (embed)
1641    
1642  rar:  sed
1643  unrar-nonfree          - ssed <unfixed> (fork)
1644    
1645  unrar-free: (maybe this code is derived from the original rar, too?)  phpatomlib (http://code.google.com/p/phpatomlib)
1646  clamav (seems to be disabled in default config)          - wordpress <unfixed> (embed)
1647    
1648  mplayer (DirectMedia Object loader):  Services_JSON (http://pear.php.net/package/Services_JSON)
1649  xine-lib (src/libw32dll/)          - wordpress <unfixed> (embed)
 vlc (modules/codec/dmo/)  
1650    
1651  libwpd (WordPerfect converter):  phpass (http://www.openwall.com/phpass/)
1652  openoffice.org          - gallery2 <unfixed> (embed)
1653            - wordpress <unfixed> (embed)
1654            - typo3-src <unfixed> (fork)
1655            NOTE: file refers to drupal, maybe there's a copy somewhere there
1656            NOTE: a copyright owner search didn't match anything
1657            - libauthen-passphrase-perl <unfixable> (fork)
1658            NOTE: perl implementation of phpass
1659    
1660  fsplib (http://sourceforge.net/projects/fsp/):  squirrelmail
1661  gftp (lib/fsplib version 0.3)          - wordpress <unfixed> (embed)
1662            NOTE: class-pop3.php
1663    
1664  librpcsecgss:  ezSQL (http://www.woyano.com/jv/ezsql)
1665  krb5          - wordpress <unfixable> (fork)
1666            NOTE: wp-db.php
1667    
1668  jasper:  Diff.php (Clay Loveless' version/killersoft.com)
1669  ghostscript          - php-versioncontrol-svn <unfixed>
 gs-gpl  
1670    
1671  libidn:  libm
1672  monotone          - spring <unfixed> (embed)
1673            NOTE: embedded by embedded copy of streflop
1674    
1675  liblua:  streflop
1676  monotone          - spring <unfixed> (embed)
1677    
1678  libbotan:  minizip
1679  montone          - spring <unfixed> (embed)
1680    
1681  NetXX:  oscpack
1682  monotone          - spring <unfixed> (embed)
1683    
1684  libgc:  hpiutil2
1685  mono          - spring <unfixed> (embed)
1686    
 lzma:  
1687  p7zip  p7zip
1688            - spring <unfixed> (embed)
1689    
1690  lzo:  pythonqt (doesn't seem to be python-qtN, unknown source)
1691  grub2          - fontmatrix <unfixed> (embed)
1692            - elmerfem <unfixed> (embed)
1693    
1694    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1695            - docvert <unfixed> (embed)
1696            - jifty <unfixed> (embed)
1697            - kdenetwork <unfixed> (embed)
1698            - mediatomb <unfixed> (embed)
1699            - plastex <unfixed> (embed)
1700            - plone3 <unfixed> (embed)
1701            - python-chaco <unfixed> (embed)
1702            - python-docutils <unfixed> (embed)
1703            - s5 <unfixed> (embed)
1704            - zope2.10 <unfixed> (embed)
1705            - zope2.11 <unfixed> (embed)
1706            - cython <not-affcted> (embed)
1707            NOTE: part of documentation, which is not installed into the binary package
1708    
1709    python-docutils
1710            - zope2.10 <unfixed> (embed)
1711            - zope2.11 <unfixed> (embed)
1712    
1713  pax code:  tesseract
1714  tar          - ocropus <unfixed> (static)
1715  cpio  
1716    antlr
1717            - kdevelop <unfixed> (embed)

Legend:
Removed from v.7214  
changed lines
  Added in v.13801

  ViewVC Help
Powered by ViewVC 1.1.5