/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7214 by jmm-guest, Sun Nov 4 17:36:22 2007 UTC revision 14468 by gilbert-guest, Tue Apr 13 02:21:28 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16  silc-toolkit:          that add real value)
17  silc-client (uses libsilc and libsilcclient)  sort: static (linking statically against a lib)
18          embed (embeds a copy of the library into another source package)
19  dietlibc:        modified-embed (embeds a code copy that differs from upstream code)
20  ccontrol (links statically)        fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22  libiax:  
23  iaxmodem  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
26  dpkg  Everything up to the next line is ignored.
27  rsync (somehow derived code base)  ---BEGIN
28  mono  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  mozilla(?)          NOTE: Fixed packages link to poppler library unless otherwise noted
30  Linux kernels          - pdftohtml <unknown>
31  pvpgn (links dynamically since 1.7.8-2)          [sarge] - pdftohtml <unfixed>
32  mrtg (links dynamically since 2.12.2-1)          [etch] - pdftohtml <unfixed>
33  rpm          NOTE: has been replaced by poppler-utils
34            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35  libbz2:          - texlive-base 3.0-12 (embed)
36  dpkg (statically linked)          - texlive-bin 2007-1 (embed)
37            NOTE: links to poppler
38  libgadu/ekg:          - koffice <unfixed> (embed; bug #436163)
39  centericq          - libextractor 0.5.12-1 (embed)
40  gaim          NOTE: libextractor is using its own pdf decoder now
41  kopete (ships the code, but links dynamically in the Debian package)          - ipe <unfixed> (embed)
42  kadu (not packaged in Debian)          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43  GNU gadu (not yet packaged in Debian)          - ruby-gnome2 <unknown> (embed)
44            NOTE: copy only present in source but links to poppler
45  xmlrpc: (which package is the "origin" of this code?)          - pdfedit <unfixed> (embed; bug #510794)
46  drupal          - swftools <removed> (embed; bug #551293)
47  phpgroupware          - poppler <unfixable> (fork)
48  egroupware  
49  phpwiki  ppmd
50  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - libcomplearn-mod-ppmd <unfixed> (fork)
51  tikiwiki          NOTE: discussion in #458152
52    
53  shtool: (affects build-time only)  libevent
54  mysql-ocaml          - transmission 1.71-1 (embed; bug #529372)
55  php4  
56    lrmi
57  mozilla:          - read-edid 2.0.0-1 (embed; bug #495131)
58  mozilla-firefox          - s3switch <unfixed> (embed)
59  mozilla-thunderbird          - xresprobe <unfixed> (embed)
60  firefox (to be removed)          - zhcon <unfixed> (embed)
61  thunderbird (to be removed)  
62  iceweasel  peercast
63  iceape          - gnome-peercast <removed> (embed)
64  icedove          [etch] - gnome-peercast <unfixed> (embed)
65  xulrunner  
66  nvu (no longer in Debian)  silc-toolkit
67            - silc-client 1.1~beta6-1 (embed)
68  xli:  
69  xloadimage  icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    libusb
74            - argyll <unfixed> (embed)
75    
76    dietlibc
77            - ccontrol 0.9.1+20071204-1 (static)
78    
79    libmikmod
80            - sdl-mixer1.2 <unfixed> (embed)
81            TODO: report bug
82    
83    libiax
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86    spandsp
87            - iaxmodem <unfixable> (embed; bug #548885)
88    
89    python-paramiko
90            - fabric 0.9.0-2 (embed; bug #561398)
91    
92    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
93            - dpkg <unfixed> (static)
94            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
95            - rsync <unfixed> (embed)
96            - cherokee <unfixed> (embed)
97            NOTE: somehow derived code base
98            - mono <unfixed> (embed)
99            TODO: check mozilla
100            - Linux kernels <unfixed> (embed)
101            - pvpgn 1.7.8-2 (embed)
102            - mrtg 2.12.2-1 (embed)
103            - rpm <unknown> (embed)
104            NOTE: pinged anibal since when rpm was fixed
105            - tuxcmd-modules <unfixed> (embed)
106            - zsync <unfixed>
107            - tra <unfixed>
108            - sash <unfixed>
109            - nsis <unfixed>
110            - mseide-msegui <unfixed>
111            NOTE: mseide
112            - mirrordir <unfixed>
113            - poco <unfixed>
114            - klibc <unfixed>
115            - ghostscript <unfixed>
116            - freeimage <unfixed>
117            - clamav <unfixed> (fork)
118            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
119            - tuxonice-userui <unfixed> (static)
120            - plt-scheme <unfixed>
121            - perl <unfixed>
122            - paraview <unfixed>
123            - velvet 0.7.56~nozlibcopy-1
124            - gcvs <unfixed>
125            - dump <unfixed>
126            - aide <unfixed> (static)
127            - dar <unfixed> (static)
128            - avfs <unfixed>
129            - fpc <unfixed>
130            - winff <unfixed>
131            NOTE: inherited from fpc, see #472304
132            - lazarus <unfixed>
133            NOTE: inherited from fpc, see #472304
134            - erlang <unfixed> (embed)
135            - gamera 3.2.3-1 (embed)
136            - python2.4 <unfixed> (embed; bug #553403)
137            - python2.5 <unfixed> (embed; bug #553403)
138    
139    dulwich
140            - hg-git 0.1.0-1 (embed; bug #541996)
141    
142    libvigraimpex
143            - hugin <unfixed> (embed; bug #542259)
144            - enblend-enfuse <unfixed> (embed; bug #542258)
145            - gamera 3.2.3-1 (embed)
146    
147    libbz2
148            - dpkg <unfixed> (static)
149            - amd64-libs <unfixed> (static)
150            NOTE: let's call it "static"
151            - dar <unfixed> (static)
152            - dump <unfixed> (static)
153            - unalz <unfixed> (embed)
154            NOTE: has code, by the maint, to use the system version but links against the internal copy
155    
156    libyahoo2
157            - centerim <unfixed> (embed; bug #559783)
158    
159    libmsn
160            - centerim <unfixed> (embed; bug #559783)
161    
162    libgadu
163            - centerim <unfixed> (embed; bug #559783)
164            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
165            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
166            - kdenetwork 4:3.3.2-5 (embed)
167            NOTE: from kdenetwork: kopete
168            - ekg 1:1.8~rc0-1 (embed)
169            - kadu 0.6.0.2-3 (embed; bug #504430)
170            - gadu <itp> (embed)
171    
172    xmlrpc (which package is the "origin" of this code?)
173            - drupal <unfixed> (embed)
174            - phpgroupware <unfixed> (embed)
175            - egroupware <unfixed> (embed)
176            - phpwiki <unfixed> (embed)
177            - php4 <removed> (embed)
178            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
179    
180    shtool (affects build-time only)
181            - mysql-ocaml <unfixed> (embed)
182            - php4 <removed> (embed)
183            - php5 <unfixed> (embed)
184    
185  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  xulrunner
186  openmotif          - iceape <unfixed> (embed; bug #561749)
187  xfree86/xorg (in libxpm)          - iceweasel 2.0.0.19 (embed)
188            - icedove <unfixed> (embed; bug #561750)
189  kerberized apps with BSD origin:          - kompozer <unfixed> (embed; bug #532168)
190  krb4          - galeon 2.0.2-4 (embed)
191  krb5          - epiphany-browser 2.14.3-8 (embed)
192  heimdal          - conkeror 0.9~git080629-2 (embed)
193            - kazehakase 0.4.2-1 (embed)
194  grip: (which pkg is the origin?)  
195  libcdaudio  xli
196  grip          - xloadimage <unfixed> (embed)
197  gnome-vfs (vfs2 as well?)  
198    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
199  fudforum:          - openmotif <unfixed> (embed)
200  phpgroupware-fudforum          - libxpm <unfixed> (embed; bug #575750)
201  egroupware-fudforum (removed from egroupware after sarge)  
202    kerberized apps with BSD origin
203  cvs:          - krb4 <removed> (embed)
204  gcvs (at least an additional script is included, check if there's more)          - krb5 <unfixed> (embed)
205            - heimdal <unfixed> (embed)
206  pcre:  
207  all pythons  grip (which pkg is the origin?)
208  php4 (src included, but Debian package links dynamically)          - libcdaudio <unfixed>
209  analog (src included, but Debian package links dynamically)          - grip <unfixed>
210  libgoffice-1          - gnome-vfs <unfixed>
211  vfu          TODO: check vfs2 as well
212  tf5 (since 5.0beta7 the Debian package links dynamically)  
213  monotone (including this starting from 0.37)  fudforum
214            [etch] - phpgroupware <unfixed> (embed)
215  tiff:          NOTE: phpgroupware-fudforum
216  wxpythongtk (check, which debian pkg this is in)          [sarge] - egroupware-fudforum <removed> (embed)
217  older kdegraphics/kpdf releases < 3.3 embedded a copy  
218    libbsd
219  uudeview:          - rdate 1:1.2-3 (embed)
220  libconvert-uulib-perl          - atheme-services <unfixed>
221            - libbsd-arc4random-perl <unfixed>
222  sqlite: (not affected by security vulnerabilities so far)          - isakmpd <unfixed>
223  amarok          - bsdgames <unfixed> (embed)
224  monotone          - bsd-mailx <unfixed> (embed)
225  iceweasel          - netcat-openbsd <unfixed> (embed; bug #550611)
226            - openssh <unfixed> (embed)
227  util-linux/mount:          - unworkable <unfixed> (embed)
228  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
229    cvs
230  webmin:          - gcvs <unfixed> (embed)
231  usermin (only in sarge)          NOTE: see cvsunix/src in tarball
232    
233  sylpheed:  pcre3
234  sylpheed-claws          - php4 <removed> (embed)
235            - analog 2:5.23-0woody1 (embed)
236  phpsysinfo:          - goffice <unfixed> (embed)
237  egroupware          NOTE: libgoffice-*
238  phpgroupware          - vfu 4.06-4.1 (embed; bug #450754)
239            - tf5 5.0beta7-1 (embed)
240  phpldapadmin:          - monotone 0.43-1 (embed)
241  egroupware (removed from egroupware after sarge)          NOTE: this only affects versions >= 0.37
242            - glib2.0 2.15.2-1 (embed)
243  chmlib:          - apache2 2.0.53-4 (embed)
244  kchmviewer (not packaged in Debian)          - exim4 4.10-0.srh20.12 (embed)
245            - yacas <unfixed> (embed)
246  libavcodec/libavformat (source: ffmpeg):          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
247  mplayer (#395252)          - gtamsanalyzer.app 0.42-5 (embed)
248  xvidcap          - tin 980117-1 (embed)
249  kino (links statically, does not include code)          - kazehakase 0.5.2-1
250  vlc (links statically, does not include code)          - webkit 1.0.1-1 (embed)
251  smilutils (links statically, does not include code)          - qt4-x11 <unfixed> (embed)
252  motion (links statically, does not include code)          NOTE: embedded via webkit copy
253  gst-ffmpeg          - erlang <unfixed> (embed)
254  gstreamer0.10-ffmpeg          - ssed <unfixed> (embed)
255  xmovie          - ircd-hybrid <unfixed> (static)
256            - emboss <unfixd>
257  mad MPEG decoding lib:          - cherokee <unfixed> (embed)
258  mad          - oftc-hybrid <unfixed> (embed)
259  xine-lib          - ratbox-services <unfixed> (embed)
260            - squeak-vm <unfixed> (embed)
261            - tinymux <unfixed> (embed)
262    
263    tiff
264            - wxwindows2.4 2.2.1 (embed)
265            - gamera 3.2.3-1 (embed)
266            - freeimage <unfixed> (embed)
267            - libtk-img <unfixed> (embed)
268            NOTE: there are two copies, one under tiff/ other under libtiff/
269            - gdal <unfixed>
270    
271    uudeview
272            - libconvert-uulib-perl <unfixed> (embed)
273            - pan <unfixed> (embed)
274    
275    sqlite (not affected by security vulnerabilities so far)
276            - amarok <unfixed> (embed)
277            - monotone 0.43-1 (embed)
278            - iceweasel <unfixed> (embed)
279            - heimdal <unfixed> (embed; bug #559616)
280    
281    util-linux/mount
282            - loop-aes-utils <unfixed> (embed)
283            NOTE: contains code from util-linux' mount in the mount-aes-udeb
284    
285    sylpheed
286            - sylpheed-claws <unfixed> (fork)
287    
288    phpsysinfo
289            - egroupware <unfixed> (embed)
290            - phpgroupware <unfixed> (embed)
291    
292    phpldapadmin
293            [sarge] - egroupware <unfixed> (embed)
294            NOTE: removed from egroupware after sarge
295    
296    chmlib
297            - kchmviewer <unknown> (embed)
298    
299    ffmpeg (libavcodec/libavformat)
300            - mplayer 1.0~rc2-14 (embed; bug #395252)
301            - kino 1.0.0-1
302            - vlc <not-affected> (Links dynamically since initial release)
303            - smilutils 0.3.0-10
304            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
305            - motion 3.1.19-1
306            - gstreamer0.10-ffmpeg 0.10.3-2
307            - xmovie <removed> (static)
308            TODO: gimp-gap (potentially using ffmpeg code as well)
309            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
310            - audacity 1.3.7-2 (embed; bug #512278)
311    
312    faad2
313            - mplayer 1.0~rc2-20 (embed)
314            - avifile <unfixed> (embed; bug #538750)
315            - ffmpeg-debian <removed> (embed)
316    
317    libmad (MPEG decoding lib)
318            - xine-lib <unfixed> (embed)
319            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
320            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
321    
 libdts:  
322  libdts  libdts
323  xine-lib          - xine-lib <unfixed> (embed)
324    
 flac:  
325  flac  flac
326  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
   
 libsndfile:  
 ardour  
327    
328  glibmm2.4:  liba52
329  ardour          - a52dec <unfixed> (embed)
330            - xine-lib <unfixed> (embed)
331    
332    mpeg2dec (libmpeg2)
333            - xine-lib <unfixed> (embed)
334    
335    libmpeg3
336            - squeak-vm <unfixed> (embed)
337    
338    libntlm
339            - wget <unfixed> (fork; bug #550436)
340            - curl <unfixed> (fork; bug #550437)
341            - cntlm <unfixed> (fork; bug #550438)
342    
343    uw-imap
344            - pine <unfixed> (embed)
345            - alpine <unfixed> (embed)
346    
347    imagemagick
348            - graphicsmagick <unfixed> (fork)
349    
350    python-urlgrabber
351            - mercurial <unfixed> (embed; bug #531062)
352            - w3af <unfixed> (embed; bug #555372)
353            [experimental] - harvestman <unfixed> (embed; bug #555373)
354    
355    beautifulsoup
356            - python-mechanize <unfixed> (embed; bug #555349)
357            - zope2.11 <removed> (embed; bug #555350)
358            - twill <unknown> (embed)
359    
360    halibut
361            - nsis <unfixed> (fork)
362    
363    libghttp
364            - hotway <unfixed> (embed)
365    
366    libsndfile
367            - ardour 1:2.7.1-1 (embed)
368    
369    glibmm2.4
370            - ardour 1:2.7.1-1 (embed)
371    
372    libgnomecanvasmm2.6
373            - ardour 1:2.7.1-1 (embed)
374    
375    libsigc++-2.0
376            - ardour 1:2.7.1-1 (embed)
377    
378    soundtouch
379            - ardour 1:2.7.1-1 (embed)
380    
381    libmms
382            - xine-lib <unfixed> (embed)
383            - mimms <unfixed> (embed)
384    
385    fckeditor
386            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
387            - moin 1.8.2-2 (embed; bug #452599)
388            - karrigell <removed> (embed; bug #452598)
389            - gforge 4.6.99+svn6225-1 (embed)
390            - request-tracker3.8 <unfixed> (embed)
391            - otrs2 <unfixed> (embed)
392    
393    ipatlas (not packaged in Debian)
394            - moodle <unfixed> (embed; bug #507185)
395    
396    libphp-phpmailer
397            - moodle <unfixed> (embed; bug #507185)
398            - mahara <unfixed> (embed)
399            - symfony <unfixed> (embed; bug #566778)
400            [etch] - phpgroupware <unfixed> (embed)
401            NOTE: phpgroupware-felamimail is only in etch
402            - egroupware <unfixed> (embed; bug #504283)
403            - glpi <unfixed>
404    
405    htmlArea (not packaged in Debian)
406            - moodle <unfixed> (embed)
407    
408    giflib
409            - wine <unfixed> (embed; bug #466181)
410    
411    bennu (not packaged in Debian, http://bennu.sourceforge.net)
412            - moodle <unfixed> (embed)
413    
414    smarty
415            - moodle 1.8.2-2 (embed; bug #471158)
416            - gallery2 2.2.5-2 (embed; bug #471160)
417            - mahara 0.9.2-2 (embed; bug #471201)
418            - gosa 2.4beta1-1 (embed; bug #471200)
419    
 libgnomecanvasmm2.6:  
 ardour  
   
 libsigc++-2.0:  
 ardour  
   
 soundtouch:  
 ardour  
   
 libmms:  
 xine-lib  
 mimms  
   
 FCKeditor:  
 knowledgeroot  
 moin  
 karrigell  
 gforge-plugins-extra  
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
420  TinyMCE  TinyMCE
421  bennu          - wordpress 2.5.1-3 (embed; bug #478257)
422            - moodle <unfixed> (embed; bug #507185)
423            - knowledgeroot <unfixed> (embed)
424            - joomla <itp> (bug #326398)
425    
426    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
427            - scite <unfixed> (embed)
428            - qscintilla <unfixed> (embed)
429            - qscintilla2 <unfixed> (embed)
430            - geany <unfixed> (fork)
431            - anjuta <unfixed> (embed)
432    
433    libphp-adodb
434            - moodle <unfixed> (embed; bug #507185)
435            NOTE: also AdoDB-XML Schema
436            - gallery2 <unfixed> (embed)
437            - phppgadmin <unfixed> (embed)
438            - egroupware <unfixed> (embed)
439            - phpwiki <unfixed> (embed)
440            - torrentflux 2.0beta1-2 (embed)
441            - ipplan <unfixed> (embed)
442            - typo3-src <unfixed> (embed)
443            - cacti <unknown> (embed)
444            [sarge] - cacti <unfixed> (embed)
445            NOTE: dependency exists, but internal version is used
446            - gforge 4.7~rc2-6 (embed)
447            - mahara <unfixed> (embed)
448    
449    gzip
450            - linux-2.6 <unfixed> (embed) [lib/inflate.c]
451            - klibc <unfixed> (embed)
452            NOTE: based on linux-kernel gzip code
453            - busybox <unfixed> (embed)
454            - pristine-tar <unfixed> (modified-embed)
455            NOTE: compression code only, not uncompression
456    
457    neon
458            - cadaver 0.22.3+debian-1 (embed; bug #188381)
459            - gnome-vfs2 <unfixed> (embed; bug #395874)
460            [etch] - litmus <unfixed> (embed; #395875)
461            - litmus <removed> (embed; #395875)
462            [sarge] - screem <unfixed> (embed)
463            - sitecopy 1:0.16.0-1 (embed; bug #395876)
464            [etch] - tla <unfixed> (embed; bug #395877)
465            [sarge] - tla <unfixed> (embed; bug #395877)
466    
467    libmodplug
468            - gst-plugins-bad0.10 0.10.10.2-1 (embed)
469    
470    libvncserver
471            - vino <unfixed> (embed)
472    
473    putty
474            - filezilla <unfixed> (embed)
475    
476    tinyxml (not packaged in Debian; itp bug #531968)
477            - filezilla <unfixed>
478            - crystalspace <unfixed> (embed)
479            - libwfut <unfixed> (embed)
480            - rarian <unfixed> (embed)
481            - bulletml <unfixed> (embed)
482            - pokerth <unfixed> (embed)
483            - qutecom <unfixed> (embed)
484            - sofa-framework <unfixed> (embed)
485            - yate <unfixed> (embed)
486            - antigrav <unfixed> (embed)
487            - balder2d <unfixed> (embed)
488            - cal3d <unfixed> (embed)
489            - criticalmass <unfixed> (embed)
490            - ember <unfixed> (embed)
491            - epiphany <unfixed> (embed)
492            - gambit <unfixed> (embed)
493            - noiz2sa <unfixed> (embed)
494            - ogre <unfixed> (embed)
495            - opencity <unfixed> (embed)
496            - openmovieeditor <unfixed> (embed)
497            - pouetchess <unfixed> (embed)
498            - tecnoballz <unfixed> (embed)
499            - trigger-rally <unfixed> (embed)
500            - xmoto <unfixed> (embed)
501            - mapnik <unknown> (embed)
502            NOTE: uses a different XML parser by default
503            - rrootage 0.23a-6 <embed>
504            NOTE: links to libbulltetml
505            - boson <unknown> (embed)
506            NOTE: the embedded code is unused
507    
508    gv
509            - evince <unfixed> (embed)
510            NOTE: ps/ tree from gv 3.5.8
511            NOTE: evince-gtk is affected (a component of evince source package)
512    
513    libXbae
514            - paw <removed> (embed)
515            [etch] - paw <unfixed> (embed)
516    
517    libgtkhtml
518            - claws-mail-extra-plugins <unfixed> (fork)
519    
520    libXaw
521            - paw <removed> (embed)
522            [etch] - paw <unfixed> (embed)
523            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
524    
525    libgd2
526            - graphviz <unfixed> (embed)
527            NOTE: lib/gd seems to be 2.0.33
528            - wml 2.0.11ds2-1 (embed)
529            - libwmf <unfixed> (embed)
530            NOTE: derived from gd 1.6.3
531    
532    rar
533            - unrar-nonfree <unfixed> (embed)
534    
535    unrar-free (maybe this code is derived from the original rar, too?)
536            - clamav <unfixed> (embed)
537            NOTE: seems to be disabled in default config
538    
539    mplayer (DirectMedia Object loader)
540            - xine-lib <unfixed> (embed)
541            NOTE: src/libw32dll/
542            - vlc <unfixed> (embed)
543            NOTE: modules/codec/dmo/
544            - mplayer 1.0~rc2-20 (embed)
545    
546    libwpd (WordPerfect converter)
547            - openoffice.org <unfixed> (embed)
548    
549    fsplib (http://sourceforge.net/projects/fsp/)
550            - gftp <unfixed> (embed)
551            NOTE: lib/fsplib version 0.3
552    
553    sprng
554            - tree-puzzle <unfixed> (embed)
555    
556    librpcsecgss
557            - krb5 <unfixed> (embed)
558    
559    jasper
560            - ghostscript 8.64~dfsg-2 (embed)
561    
562    libiris
563            - psi <unfixed> (embed)
564            - kdenetwork <unfixed> (embed)
565            NOTE: kopete embeds libiris but links dynamically to libidn
566            - kdegames <unfixed> (embed)
567            NOTE: ksirk/kde4
568    
569    libidn
570            - monotone 0.43-1 (embed)
571            - psi <unfixed> (embed)
572            NOTE: psi embeds libiris which embeds libidn
573            - kdegames <unfixed> (embed)
574            NOTE: kdegames/kde4 embeds libiris which embeds libidn
575    
576    lua5.1
577            - monotone 0.43-1 (embed)
578            - nmap 5.00-1 (embed; bug #527997)
579            [lenny] - nmap <unfixed> (embed; bug #527997)
580            - ocropus <unfixed> (embed)
581            - enigma <unfixed> (embed)
582            NOTE: requires lua built with C++
583            - freeciv <unfixed> (embed)
584            - spring <unfixed> (embed)
585    
586    libbotan
587            - monotone 0.43-1 (embed)
588    
589    NetXX
590            - monotone 0.43-1 (embed)
591    
592    libgc
593            - mono <unfixed> (embed)
594    
595    lzma
596            - p7zip <unfixed> (embed)
597            - xz-utils <unfixed> (fork)
598    
599    lzo
600            - grub2 <unfixed> (embed)
601    
602    yassl
603            - mysql-dfsg-5.0 <unfixed> (embed)
604            - mysql-dfsg-5.1 <unfixed> (embed)
605    
606    pax code
607            - tar <unfixed> (embed)
608            - cpio <unfixed> (embed)
609    
610    t1lib
611            - tetex-bin 2.0.2-1 (embed)
612            - texlive-bin <unknown> (embed)
613    
614    guichan
615            - boswars <unfixed> (embed)
616            NOTE: maintainer notified us, working on it
617    
618    tolua
619            - boswars <unfixed> (embed)
620            NOTE: maintainer notified us, working on it
621            NOTE: actually tolua++
622            - ocropus <unfixed> (embed)
623            NOTE: actually tolua++
624            - freeciv <unfixed> (embed)
625            NOTE: actually tolua++
626            - enigma <unfixed> (embed)
627    
628  TinyMCE:  asio-dev
629  wordpress          - luxrender <removed> (embed)
 moodle  
 knowledgeroot  
 joomla (ITP)  
630    
631  scintilla:  xine-lib
632  scite          - vlc <unfixed> (embed)
633  qscintilla          NOTE: only parts included in modules/access/rtsp
 qscintilla2  
 geany  
634    
635  libphp-adodb:  netpbm
636  gallery2          - tcl8.3 <unfixed> (embed)
637  phppgadmin          - tcl8.4 <unfixed> (embed)
638  egroupware          - tcl8.5 <unfixed> (embed)
639  phpwiki          NOTE: generic/tkImgGIF.c
640  moodle  
641  cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  tk8.5
642            - tk8.0 <removed> (old-version)
643            - tk8.3 <unfixed> (old-version)
644            - tk8.4 <unfixed> (old-version)
645            - perl-tk <unfixable> (fork)
646    
647    samba
648            - mc 2:4.6.2~git20080311-1 (embed)
649            NOTE: maintainer is aware of this, currently searching a solution
650    
651    plib1.8.4c2
652            - boson <unfixed> (fork)
653            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
654    
655    fribidi
656            - quesoglc <unfixed> (embed)
657            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
658    
659    glew
660            - quesoglc <unfixed> (embed; bug #489341)
661            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
662            - trigger 0.5.2.1-2 (embed)
663            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
664            - trigger-rally 0.5.2.1-2 (embed)
665            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
666    
667    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
668            - transcend <unfixed> (embed)
669            - cultivation <unfixed> (embed)
670            - passage <unfixed> (embed)
671            - gravitation <unfixed> (embed)
672    
673  gzip:  tar
674  linux-kernel (lib/inflate.c)          - libarchive <unfixed> (embed)
675  klibc (based on linux-kernel gzip code)          NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
 busybox  
676    
677  neon:  cpio
678  cadaver (all, but being worked on: #188381)          - libarchive <unfixed> (embed)
679  gnome-vfs2 (#395874)          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
680    
681  libmodplug:  kde4libs
682  gst-plugins-bad0.10          - kdelibs <unfixable> (old-version)
683    
684  libvncserver:  webkit
685  vino          - qt4-x11 <unfixed> (embed; bug #479851)
686            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
687            - kde4libs <unfixable> (fork)
688            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
689            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
690    
691    ftgl
692            - blender 2.46+dfsg-1 (embed)
693    
694    wv
695            - abiword <unfixed>
696    
697    qemu
698            - kvm <removed> (embed; bug #543159)
699            - qemu-kvm <unfixed> (embed; bug #560853)
700            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
701            - xen-3 3.4.2-2 (embed; bug #560856)
702            - xen-unstable <unfixed> (embed; bug #560856)
703    
704    vgabios
705            - kvm <removed> (embed; bug #489442)
706            - qemu-kvm <unfixed> (embed)
707    
708    bochs
709            - kvm <removed> (embed; bug #489442)
710            - qemu-kvm <unfixed> (embed)
711    
712    speex
713            - vorbis-tools <unfixed> (embed)
714            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
715            - gst-plugins-good0.10 <unfixed> (embed)
716            - xine-lib <unfixed> (embed)
717            - libfishsound <unfixed> (embed)
718            - libannodex <removed> (embed)
719            - vlc <unfixed> (embed)
720            - xmms-speex <unfixed> (embed)
721            - libsdl-sound1.2 <unfixed> (embed)
722            - sweep <unfixed> (embed)
723    
724    libreadline
725            - magic <itp> (old-version)
726    
727    opcode
728            - ode <unfixed> (embed)
729            NOTE: opcode is not a package in debian, it is just embedded
730            NOTE: http://www.codercorner.com/Opcode.htm
731    
732    gimpact
733            - ode <unfixed> (embed)
734            NOTE: gimpact is not a package in debian, it is just embedded
735            NOTE: http://gimpact.sf.net
736    
737    mochikit
738            - mahara <unfixed> (embed)
739            NOTE: they require extra patches, still unmerged upstream
740            - ntop <unfixed> (embed)
741            - coherence 0.6.2-1 (embed)
742            - paste <unfixed> (embed)
743            - turbogears <unfixed> (embed)
744            - plone3 <removed> (embed)
745            - xulrunner <unfixed> (embed)
746            - libjifty-plugin-chart-perl <unfixed> (embed)
747            - sabnzbdplus <unfixed> (embed)
748            - tgmochikit <unfixed> (embed)
749    
750    prototypejs
751            - netbeans-ide 6.0.1+dfsg-2 (embed)
752            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
753            - webcit <unfixed> (embed; bug #555219)
754            - asterisk 1:1.6.2.0~rc3-1 (embed)
755            - libjson-ruby 1.1.4-1 (embed; bug #555224)
756            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
757            - horde3 <unfixed> (embed)
758            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
759            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
760            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
761            - ebug-http <removed> (embed; bug #555236)
762            - libaws 2.7-1 (embed; bug #555222)
763            - phpgedview <removed> (embed)
764            - poker-network 1.7.6-1 (embed; bug #555238)
765            - rails 2.1.0-6 (embed)
766            - wordpress 2.5.0-2 (embed; bug #555243)
767            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
768            TODO: search through all of the other zope packages
769            - ampache 3.4.1-2 (embed)
770            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
771            - hobix 0.5~svn20070319-4 (embed; bug #555247)
772            - zabbix 1.6.6-4 (embed; bug #555250)
773            - chora2 <unfixed> (embed; bug #555253)
774            - gollem <unfixed> (embed; bug # 555254)
775            - jscropperui 1.2.1-1 (embed; bug #555257)
776            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
777            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
778            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
779            - activeldap <unfixed> (embed)
780            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
781            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
782            - otrs2 2.3.4-6 (embed; bug #555267)
783            - webcalendar 1.2~b1-2 (embed; bug #555269)
784            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
785            - jifty 0.90519-1 (embed; bug #555271)
786            - jquery 1.4-1 (embed; bug #555272)
787            - passenger 2.2.5debian1-1 (embed; bug #555273)
788            - plone3 <removed> (embed; bug #555275)
789            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
790            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
791            - xulrunner <unfixed> (embed)
792            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
793    
794    gdb
795            - insight <unfixed> (embed)
796    
797    e2fsprogs
798            - ldiskfsprogs <unfixable> (fork)
799    
800    quazip (not packaged in Debian)
801            - qcake <unfixed> (embed)
802            NOTE: starting with upstream version 0.6.4
803    
804    exo
805            - pcmanfm <unfixed> (embed; bug #499677)
806            NOTE: slightly modified source code
807    
808    java
809            - openjdk-6 <unfixed>
810            - sun-java5 <unfixed>
811            - sun-java6 <unfixed>
812    
813    libphp-snoopy
814            - ampache 3.4.1-2 (embed; bug #504169)
815            - gforge 4.6.99+svn6094-2 (embed)
816            - mahara 1.0.5-2 (embed; bug #504170)
817            - pixelpost 1.7.1-5 (embed; bug #504171)
818            - mediamate 0.9.3.6-5 (embed; bug #504172)
819            - opendb <removed> (embed; bug #504173)
820            [etch] - opendb <unfixed> (embed; bug #504173)
821            - wordpress 2.5.1-9 (embed; bug #443948)
822            - moodle <unfixed> (embed; bug #507185)
823            [etch] - phpgroupware <unfixed> (embed)
824            NOTE: phpgroupware-felamimail
825            - magpierss 0.72-3 (embed; bug #431089)
826    
827    jquery
828            - zekr <unfixed> (embed)
829            - wordpress <unknown> (embed)
830            - yocto-reader <unfixed> (embed)
831            - textpattern <unfixed> (embed)
832            - genshi 0.5.1-1 (embed)
833            NOTE: compressed file under examples/ dir
834            - prewikka <unfixed> (embed)
835            - libramaze-ruby <unfixed> (embed)
836            - drupal5 <unfixed> (embed)
837            - b2evolution <unfixed> (embed)
838            - wesnoth <unfixed> (embed)
839    
840    tablesorter (jquery plugin, not packaged yet)
841            - wesnoth <unfixed> (embed)
842    
843    kses
844            - wordpress <unfixed> (embed; bug #504242)
845            NOTE: their copy has all methods renamed to wp_<foo>
846            NOTE: kses isn't in Debian, RFP: #504240
847            - moodle <unfixed> (embed; bug #507185)
848            - egroupware <unfixed> (embed)
849    
850    magpierss
851            - wordpress <unfixed> (embed; bug #504242)
852            - moodle <unfixed>
853    
854    php-gettext
855            - wordpress 2.8.4-1 (embed; bug #504242)
856            - docbookwiki <unfixed> (embed)
857            - knowledgeroot 0.9.9.5-1
858            NOTE: non-free
859    
860    libphp-ixr (name may change, it is the Incutio XML-RPC)
861            - wordpress <unfixed> (embed; bug #504242)
862            NOTE: libphp-ixr isn't in Debian, RFP: #504236
863            - dokuwiki <unfixed> (embed)
864            - textpattern <unfixed> (embed)
865    
866    libphp-cas
867            - glpi <unfixed> (embed)
868            - moodle <unfixed> (embed; bug #505984)
869    
870    scriptaculous (prototype.js is among the embeds in the following)
871            - glpi <unfixed> (embed)
872            - libaws <unfixed> (embed; bug #555222)
873            - op-panel <unfixed> (embed)
874            - symfony <unfixed> (embed)
875            NOTE: maintainer says there are extra incompatible changes required
876            - pixelpost 1.7.1-6 (embed)
877            - webhelpers <unfixed> (embed)
878            - qwik <removed> (embed; bug #555241)
879            - smokeping <unfixed> (embed)
880            - turba2 <unfixed> (embed)
881            - typo3-src 4.2.3-1 (embed)
882            - request-tracker3.6 <unfixed> (embed)
883            - request-tracker3.8 <unfixed> (embed)
884            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
885            - wordpress 2.5.0-2 (embed)
886            - libhtml-prototype-perl 1.48-3 (embed)
887    
888    libmarkdown-php
889            - moodle <unfixed> (embed; bug #507185)
890            - pixelpost 1.7.1-6 (embed)
891    
892    php-openid
893            - wordpress-openid <itp> (embed)
894    
895    geshi
896            - dokuwiki 0.0.20080505-3.1 (embed)
897            - pgfouine 1.0-1.1 (embed)
898            - websvn 2.1.0-1 (embed)
899    
900    webcalendar
901            - gforge 4.7~rc2-6 (embed; bug #504758)
902    
903    libical
904            - kdepim <unknown> (fork)
905            NOTE: fixed at some point during 4.0
906            - kdepimlibs 4.2.0-1 (fork)
907            - claws-mail-extra-plugins <unfixed> (fork)
908    
909    harfbuzz
910            - qt4-x11 <unfixed> (embed)
911            - pango1.0 <unfixed> (embed)
912            - fontmatrix <unfixed> (embed)
913    
914    libzip
915            - php5 <unfixable> (modified-embed)
916            - odt2txt <unfixed> (embed; bug #523808)
917    
918    json.php (not packaged; should be replaced with php's built-in functions)
919            - moodle <unfixed>
920            - yui <unfixed>
921            - gallery2 <unfixed>
922            - dokuwiki <unfixed>
923            - typo3-src <unfixed>
924    
925    php-fpdf
926            - tcpdf <itp> (fork)
927            - moodle <unfixed>
928            - phpwiki <unfixed>
929            - egroupware <unfixed>
930            - ldap-account-manager <unfixed> (fork)
931    
932    tcpdf (itp: #495985)
933            - moodle <unfixed>
934            - phpmyadmin <unfixed>
935    
936    typo3
937            - moodle <unfixed>
938    
939    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
940            - moodle <unfixed>
941            - gosa <unfixed>
942    
943    php-ole (itp: #487558)
944            - moodle <unfixed>
945    
946    pieforms (http://www.catalyst.net.nz)
947            - mahara <unfixed>
948    
949    savant2 (http://phpsavant.com)
950            - egroupware <unfixed>
951    
952    rssparser (http://nwow.org)
953            - egroupware <unfixed>
954            - phpgroupware <unfixed>
955    
956    lcms
957            - openjdk-6 <unfixed> (fork)
958            - gimp 2.4.0~rc2-2
959    
960    libphp-phplayersmenu
961            - diogenes <unfixed>
962            - phpldapadmin <unfixed>
963    
964    libphp-pclzip
965            - docvert <unfixed>
966            - moodle <unfixed>
967            - egroupware <unfixed>
968    
969    libphp-simplepie
970            - dokuwiki <unfixed>
971            - wordpress <unfixed>
972    
973    libphp-jpgraph
974            - egroupware <unfixed>
975    
976    php-simpletest
977            - moodle <unfixed>
978    
979    libpng
980            - iceweasel <not-affected> (uses xulrunner)
981            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
982            - iceape 1.0.13~pre080614i-0etch1 (embed)
983            - xulrunner 1.9.0.13-1 (embed)
984            [lenny] - xulrunner 1.9.0.11-0lenny1
985            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
986            - gamera 3.2.3-1 (embed)
987            - freeimage <unfixed> (embed)
988            - tuxonice-userui (static)
989    
990    irssi
991            - silc-client <unfixed> (embed)
992            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
993    
994    extc
995            - mtasc <unfixed> (embed)
996            - haxe <unfixed> (embed)
997    
998    swflib
999            - mtasc <unfixed> (embed)
1000            - haxe <unfixed> (embed)
1001    
1002    libitext-java
1003            - bouncycastle 2.1.4-1 (embed)
1004    
1005    python-ply
1006            - pyke <unfixed> (embed; bug #555363)
1007            - pywbem 0.7.0-4 (embed; bug #555364)
1008            - sepolgen <unfixed> (embed; bug #555365)
1009            - zope-textindexng3 <unknown> (embed)
1010            - iceweasel <not-affected> (uses xulrunner)
1011            - xulrunner <unknown> (embed)
1012            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1013    
1014    libdumbnet (libdnet upstream)
1015            - nmap <unfixed> (fork)
1016    
1017    gcc-4.4
1018            - gcc-mingw32 <unfixed> (embed)
1019    
1020    camlimages
1021            - advi <unfixed> (static; bug #550441)
1022    
1023    memcached
1024            - memcachedb <unfixed> (embed)
1025    
1026    yajl
1027            - argyll <unfixed> (embed; bug #544223)
1028            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1029    
1030    nusoap
1031            - gforge 4.8.2-1 (embed)
1032            - ampache <unfixed> (embed)
1033            - poker-network <unfixed> (embed)
1034            - moodle <unfixed> (embed)
1035            NOTE: code is not used when running under php5 and soap is enabled
1036            - phpwiki <unfixed> (embed)
1037            - gallery2 <unfixed> (embed)
1038            - typo3-src <unfixed> (embed)
1039    
1040    libept
1041            - adept <unfixed> (embed; bug #540649)
1042    
1043    libvorbis
1044            - iceweasel <not-affected> (uses xulrunner)
1045            - xulrunner <unfixed> (embed; bug #540959)
1046            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1047            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1048            - iceape <unfixed> (embed)
1049            [etch] - iceape <not-affected> (introduced in 2.0)
1050            [lenny] - iceape <not-affected> (introduced in 2.0)
1051    
1052    cairo
1053            - iceweasel <not-affected> (uses xulrunner)
1054            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1055    
1056    liboggz
1057            - iceweasel <not-affected> (uses xulrunner)
1058            - xulrunner <unfixed> (embed; bug #540959)
1059            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1060            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1061            - iceape <unfixed> (embed)
1062            [etch] - iceape <not-affected> (introduced in 2.0)
1063            [lenny] - iceape <not-affected> (introduced in 2.0)
1064    
1065    liboggplay
1066            - iceweasel <not-affected> (uses xulrunner)
1067            - xulrunner <unfixed> (embed; bug #540959)
1068            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1069            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1070            - iceape <unfixed> (embed)
1071            [etch] - iceape <not-affected> (introduced in 2.0)
1072            [lenny] - iceape <not-affected> (introduced in 2.0)
1073    
1074    php-net-dnsbl
1075            - serendipity <unfixed> (embed; bug #541740)
1076    
1077    php-onyx-rss
1078            - serendipity <unfixed> (embed; bug #541740)
1079    
1080    php-text-wiki
1081            - serendipity <unfixed> (embed; bug #541740)
1082    
1083    php-xml-rpc
1084            - serendipity <unfixed> (embed; bug #541740)
1085    
1086    polarssl (does not have a shared library)
1087            - pdkim <itp> (embed; bug #543150)
1088            - xyssl <unfixed> (old-version)
1089    
1090    pidgin (libpurple)
1091            - gaim <removed> (old-version)
1092            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1093    
1094    icu
1095            - webkit 1.0.1-1 (embed; bug #547214)
1096            - texlive-bin <unfixed> (fork)
1097            NOTE: texlive upstream working with icu upstream to merge their changes
1098    
1099    cyrus-imapd-2.2
1100            - kolab-cyrus-imapd <unfixed> (fork)
1101            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1102    
1103    python-cxx-dev
1104            - freecad 0.9.2646.3-1 (embed; bug #547936)
1105    
1106    zipios++
1107            - freecad 0.9.2646.3-1 (embed; bug #547941)
1108            - enigma 0.92.3-3 (embed)
1109            NOTE: likely fixed earlier, marking etch's version as fixed
1110    
1111    linux-2.6
1112            - kvm <removed> (embed; bug #549973) [./kernel/*]
1113            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1114            - kernel-source-2.6.8 <removed> (old-version)
1115            - kernel-source-2.4.27 <removed> (old-version)
1116            - kernel-source-2.4.24 <removed> (old-version)
1117            - kernel-source-2.2.25 <removed> (old-version)
1118            - kernel-source-2.2.20 <removed> (old-version)
1119    
1120    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1121            - kvm <removed> (embed) [./libfdt/*]
1122            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1123    
1124    qweb (not packaged)
1125            - ajaxterm <unfixed>
1126    
1127    opensaml2
1128            - opensaml <removed> (old-version)
1129    
1130    shibboleth-sp2
1131            - shibboleth-sp <removed> (old-version)
1132    
1133    tuxonice-userui
1134            - suspend2-userui <removed> (old-version)
1135    
1136    expat
1137            - w3c-libwww <removed> (embed; bug #551941)
1138            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1139            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1140            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1141            - python2.4 <unfixable> (embed; bug #553403)
1142            - python-4suite <unfixed> (embed; bug #516935)
1143            - wxwindows2.4 <removed> (embed)
1144            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1145            - wxwidgets2.8 2.8.10.1-2 (embed)
1146            - celementtree 1.0.5-8 (embed)
1147            NOTE: Maybe that was fixed even earlier
1148            - audacity 1.3.2-1 (embed)
1149            - matanza <unfixed> (embed)
1150            - tdom 0.8.3~20080525-1 (embed)
1151            - udunits 2.1.8-4 (embed)
1152            - apr-util 1.2 (embed)
1153            - ayttm <unfxed> (embed; bug #561006)
1154            - cableswig <unfixed> (embed)
1155            - cadaver <unfixed> (embed)
1156            - cmake 2.6.0-6 (embed)
1157            - coin3 <unfixed> (embed)
1158            - gdcm 2.0.14-2 (embed)
1159            - ghostscript 8.71~dfsg-2 (embed)
1160            - grmonitor <removed> (embed)
1161            - iceape <unfixed> (embed)
1162            - insighttoolkit 3.16.0-1 (embed)
1163            NOTE: insighttoolkit might've been fixed earlier
1164            - libparagui1.1 1.0.2-1 (embed)
1165            - paraview 3.6.2-1 (embed)
1166            - poco 1.3.6p1-1 (embed)
1167            - simgear <unfixed> (embed)
1168            - sitecopy 1:0.16.0-1
1169            - smart <unfixed> (embed)
1170            NOTE: smart embeds celementree, and it includes expat
1171            - swish-e <not-affected> (Linked against libxml, which is used instead)
1172            - tla 1.3.5+dfsg-15 (embed)
1173            - vtk 4.1.20030227-1 (embed)
1174            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1175            - xmlrpc-c <unfixed> (embed)
1176            - iceweasel <unfixed> (embed)
1177            - kompozer <unfixed> (embed)
1178            - vxl 1.13.0-2 (embed)
1179            - xulrunner <unfixed> (embed)
1180            - apache2 2.2 (embed)
1181            - texlive-bin <not-affected> (Embedded code not compiled in)
1182            - vnc4 <unfixed> (embed)
1183            - xotcl <unfixed> (embed)
1184    
1185    xerces-c
1186            - xerces-c2 <unfixed> (old-version)
1187            - xerces27 <removed> (old-version)
1188    
1189    md5 (RSA's version; not the gnu version provided by coreutils)
1190            - w3c-libwww <removed> (embed; bug #551942)
1191            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1192    
1193    libparagui1.1
1194            - asc <unfixable> (fork)
1195    
1196    enet
1197            - sauerbraten <unfixed> (embed; #497194)
1198    
1199    eglibc
1200            - glibc <removed> (old-version)
1201    
1202    galib
1203            - gamera 3.2.3-1 (embed)
1204    
1205    configobj
1206            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1207            - elisa <unfixed> (embed; bug #555337)
1208            - gaupol <unfixed> (embed; bug #555338)
1209            - ipython <unfixed> (embed; bug #555339)
1210            - pida <unfixed> (embed; bug #555340)
1211            - psychopy <unfixed> (embed; bug #555341)
1212            - rest2web <unfixed> (embed; bug #555342)
1213            - auth2db <unknown> (embed)
1214            - dynagen <unknown> (embed)
1215            - iceweasel <unknown> (embed)
1216            - sabnzbdplus <unknown> (embed)
1217            - xulrunner <unknown> (embed)
1218            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1219    
1220    python-clientform
1221            - bibus <unfixed> (embed; bug #555332)
1222            - zope2.10 <unfixed> (embed; bug #555333)
1223            - zope2.11 <removed> (embed; bug #555334)
1224            - python-mechanize <unknown> (embed)
1225            - twill <unknown> (embed)
1226    
1227    python-mechanize
1228            - zope2.10 <unfixed> (embed; bug #555337)
1229            - zope2.11 <removed> (embed; bug #555338)
1230            - twill <unknown> (embed; bug #555339)
1231    
1232    pexpect
1233            - duplicity 0.6.06-1 (embed; bug #555361)
1234            - hplip <unfixed> (embed; bug #555362)
1235            - smart <unfixed> (embed; bug #555363)
1236    
1237    pyparsing
1238            - bauble <unfixed> (embed; bug #555366)
1239            - boa-constructor 0.6.1-8 (embed; bug #555367)
1240            - calibre <unfixed> (embed; bug #555368)
1241            - matplotlib <unfixed> (embed; bug #531024)
1242            - zhpy 1.7.3.1-1 (embed; bug #555370)
1243            - polybori <unknown> (embed)
1244            - python-whoosh <unknown> (embed)
1245            - twill <unknown> (embed)
1246            - zope-textindexng3 <unknown> (embed)
1247    
1248    python-pysqlite2
1249            - python2.4 <unfixed> (embed; bug #553403)
1250            - python2.5 <unfixed> (embed; bug #553403)
1251    
1252    celementtree
1253            - python2.5 <unfixed> (embed)
1254            - smart <unfixed> (embed)
1255    
1256    elementtree
1257            - python2.5 <unfixed> (embed)
1258            - python2.6 <unfixed> (embed)
1259            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1260            - gedit 2.28.2-1 (embed; bug #555344)
1261            - smart <unfixed> (embed)
1262            - solfege <unfixed> (embed; bug #555345)
1263            - w3af <unfixed> (embed; bug #555346)
1264            - python-qt4 <unknown> (embed)
1265            - sphinx <unknown> (embed)
1266            - python-nltk <itp> (embed)
1267    
1268    python2.5
1269            - python2.4 <unfixed> (old-version)
1270            - jython <unfixed> (embed)
1271            NOTE: embeds many stdlib modules
1272            - python-django <unfixed> (embed; bug #555419)
1273            NOTE: embeds stdlib modules: doctest, decimal
1274            - gamera 3.2.3-1 (embed)
1275            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1276            - boa-constructor <unfixed> (embed; bug #555426)
1277            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1278            - nicotine <unfixed> (embed; bug #555427)
1279            NOTE: embeds stdlib modules: ConfigParser
1280            - museek+ <unfixed> (embed; bug #555428)
1281            NOTE: embeds stdlib modules: ConfigParser
1282            - vegastrike-data <unfixed> (embed)
1283            NOTE: embeds many stdlib modules
1284            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1285            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1286            - config-manager <unfixed> (embed; bug #555423)
1287            NOTE: embeds stdlib modules: optparse
1288            - jhbuild 2.28.0-1 (embed; bug #555421)
1289            NOTE: embeds stdlib modules: optparse, subprocess
1290            - smart <unfixed> (embed; bug #555432)
1291            NOTE: embeds stdlib modules: optparse
1292            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1293            NOTE: embeds stdlib modules: doctest
1294            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1295            NOTE: embeds stdlib modules: doctest
1296            - distribute <unfixed> (embed)
1297            NOTE: embeds stdlib modules: doctest
1298            - python-setuptools <unfixed> (embed; bug #555435)
1299            NOTE: embeds stdlib modules: doctest
1300            - zope.testing <unfixed> (embed; bug #555436)
1301            NOTE: embeds stdlib modules: doctest
1302            - translate-toolkit <unfixed> (embed; bug #555422)
1303            NOTE: embeds stdlib modules: textwrap, contextlib
1304            - libtpclient-py <unfixed> (embed; bug #555424)
1305            NOTE: embeds stdlib modules: subprocess
1306            - grass <unfixed> (embed; bug #555425)
1307            NOTE: embeds stdlib modules: subprocess
1308            - coherence <unfixed> (embed; bug #555429)
1309            NOTE: embeds stdlib modules: uuid
1310            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1311            NOTE: embeds stdlib modules: uuid
1312            - setroubleshoot <unfixed> (embed; bug #555431)
1313            NOTE: embeds stdlib modules: uuid
1314            - linkchecker <unfixed> (embed; bug #555414)
1315            NOTE: embeds msgfmt.py script
1316            - imdbpy <unfixed> (embed)
1317            NOTE: embeds msgfmt.py script
1318            - kiwi <unfixed> (embed)
1319            NOTE: embeds msgfmt.py script
1320            - moin <unfixed> (embed)
1321            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1322            - plone3 <removed> (embed)
1323            NOTE: embeds msgfmt.py script
1324            - roundup <unfixed> (embed)
1325            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1326            - rednotebook <unfixed> (embed; bug #555415)
1327            NOTE: embeds msgfmt.py script
1328            - turbogears <unfixed> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - elisa <unfixed> (embed)
1331            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1332            - calibre <unfixed> (embed)
1333            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1334            - mailman 1:2.1.13-1 (embed; #555416)
1335            NOTE: embeds msgfmt.py script
1336            - python-docutils <unknown> (embed)
1337            NOTE: embeds stdlib modules: optparse, textwrap
1338            - python-imaging <unknown> (embed)
1339            NOTE: embeds stdlib modules: doctest
1340            - python-mechanize <unknown> (embed)
1341            NOTE: embeds stdlib modules: doctest
1342            - twill <unknown> (embed)
1343            NOTE: embeds stdlib modules: subprocess
1344            - zeroc-ice <unknown> (embed)
1345            NOTE: embeds stdlib modules: subprocess
1346            - wxwidgets2.8 <unknown> (embed)
1347            NOTE: embeds stdlib modules: subprocess
1348            - cycle <unknown> (embed)
1349            NOTE: embeds msgfmt.py script
1350            - deluge <unknown> (embed)
1351            NOTE: embeds msgfmt.py script
1352            - opendict <unknown> (embed)
1353            NOTE: embeds msgfmt.py script
1354            - openerp-client <unknown> (embed)
1355            NOTE: embeds msgfmt.py script
1356            - rapidsvn <unknown> (embed)
1357            NOTE: embeds msgfmt.py script
1358            - wammu <unknown> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - gaphor <unknown> (embed)
1361            NOTE: embeds msgfmt.py script
1362            - pida <unknown> (embed)
1363            NOTE: embeds msgfmt.py script
1364            - python-formencode <unknown> (embed)
1365            NOTE: embeds msgfmt.py script
1366            - duplicity <unfixed> (embed)
1367            NOTE: embeds stdlib module: urlparse, tarfile
1368            - pygopherd <unfixed> (embed)
1369            NOTE: embeds stdlib module: zipfile
1370    
1371    argparse
1372            - twill <unfixed> (embed; bug #555347)
1373            - ipython <unfixed> (embed; bug #555348)
1374    
1375    coherence
1376            - elisa <unfixed> (embed; bug #555335)
1377    
1378    simpletal
1379            - plastex <unfixed> (embed; bug #555371)
1380    
1381    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1382            - postr <unfixed> (embed)
1383            - elisa <unfixed> (embed)
1384    
1385    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1386            - apertium-tolk <unfixed> (embed)
1387            - ipython <unfixed> (embed)
1388            - virtaal <unfixed> (embed)
1389    
1390    distribute
1391            - setuptools <removed> (old-version)
1392    
1393    rails
1394            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1395            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1396            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1397            - thin <unfixed> (embed) [./spec/rails_app/*]
1398            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1399            NOTE: be dangerous if developers are naively basing their code off of the examples
1400            NOTE: prototype.js is among the example files
1401    
1402    lucene2 (prototype.js is among the embeds in the following)
1403            - lucene <unfixed> (old-version)
1404            - pylucene <unfixed> (embed)
1405            - libpdfbox-java <unfixed> (embed)
1406            - libfontbox-java <unfixed> (embed)
1407            - libjempbox-java <unfixed> (embed)
1408            - solr <unfixed> (embed)
1409    
1410    unicode-data
1411            - syslinux <unfixed> (embed)
1412            - camomile <unfixed> (embed)
1413            - fribidi <unfixed> (embed)
1414            - m17n-db <unfixed> (embed)
1415            - sbcl <unfixed> (embed)
1416            - heimdal <unfixed> (embed)
1417            - icu <unfixed> (embed)
1418            - icu4j <unfixed> (embed)
1419            - krb5 <unfixed> (embed)
1420            - moodle <unfixed> (embed)
1421            - openldap <unfixed> (embed)
1422            - pike7.6 <unfixed> (embed)
1423            - samba <unfixed> (embed)
1424            - samba4 <unfixed> (embed)
1425            - cmucl <unfixed> (embed)
1426            - typo3-src <unfixed> (embed)
1427            - mauve <unfixed> (embed)
1428            - texlive-bin <unfixed> (embed)
1429            - ypsilon <unfixed> (embed)
1430            - jeuclid <unfixed> (embed)
1431            - charmap.app <unfixed> (embed)
1432            - clisp <unfixed> (embed)
1433            - gnulib <unfixed> (embed)
1434            - opensrs-client <unfixed> (embed)
1435            - saxonb <unfixed> (embed)
1436            - rails <unfixed> (embed)
1437    
1438    feedparser
1439            - rawdog <unfixed> (embed; bug #383422)
1440            - miro <unfixed> (embed; bug #555351)
1441            - calibre <unfixed> (embed; bug #555352)
1442            - freevo <unfixed> (embed; bug #555353)
1443            - pida <unfixed> (embed; bug #555354)
1444            - planet-venus <unfixed> (embed; bug #555355)
1445            - plone3 <removed> (embed; bug #555356)
1446            - exaile 0.2.14+debian-1 (embed)
1447            - screenlets 0.1.2-3 (embed)
1448            NOTE: included twice
1449    
1450    agg:
1451            - matplotlib <unfixed> (embed: bug #377271)
1452            - contextfree <unfixed> (embed)
1453            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1454            - exactimage <unfixed> (embed)
1455            - python-enable <unfixed> (embed)
1456            - mapnik 0.5.1-3 (embed)
1457            NOTE: links statically to agg, but shared library is not available (bug #377271)
1458    
1459    vtk
1460            - paraview <unfixable> (embed; bug #495426)
1461    
1462    txt2tags
1463            - rednotebook <unfixed> (embed)
1464    
1465    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1466            - gajim <unfixed> (embed)
1467            - emesene <unfixed> (embed)
1468            - convirt <unfixed> (embed)
1469            - pida <unfixed> (embed)
1470            - rednotebook <unfixed> (embed)
1471    
1472    horde3 (prototype.js is among the embeds in the following)
1473            - mnemo2 <unfixed> (embed)
1474            - nag2 <unfixed> (embed)
1475            - wordpress <unfixed> (embed)
1476            NOTE: Text_Diff (wp-includes/Text/Diff*)
1477    
1478  putty:  cimg
1479  filezilla          - gmic <itp> (embed)
1480    
1481  tinyxml (not packaged in Debian):  mootools
1482  filezilla          - gmic <itp> (embed)
1483    
1484  gv:  openldap
1485  evince (ps/ tree from gv 3.5.8)          - openldap2.3 <removed> (old-version)
 evince-gtk (not packaged in Debian)  
1486    
1487  libXbae:  grub2
1488  libpawlib2-lesstif package (from Cernlib)          - grub <unfixed> (old-version)
1489    
1490  libXaw:  gnupginterface
1491  libpawlib2-lesstif package (from Cernlib)          - duplicity <unfixed> (embed)
1492    
1493  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  python-dateutil
1494            - awn-extras-applets <unfixed> (embed)
1495            - matplotlib <unknown> (embed)
1496    
1497    cups
1498            - cupsys <removed> (old-version)
1499    
1500    yui
1501            - bcfg2 <not-affected> (present in source but not included in any binary files)
1502            - serendipity <unfixed> (embed; bug #557746)
1503            - moodle 1.8.2.dfsg-5 (embed)
1504            - jifty 0.91117-1 (embed; bug #557748)
1505            - webgui 7.7.26-1 (embed)
1506            - loggerhead 1.17-1 (embed)
1507    
1508    quake3 (vanilla source not packaged in debian)
1509            - openarena <unfixable> (fork)
1510    
1511    quake2 (vanilla source not packaged in debian)
1512            - alien-arena <unfixable> (fork)
1513            - warsow <unfixable> (fork)
1514    
1515    libtheora
1516            - iceweasel <not-affected> (uses xulrunner)
1517            - xulrunner <unfixed> (embed; bug #540959)
1518            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1519            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1520            - iceape <unfixed> (embed; bug #559276)
1521            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1522            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1523    
1524    dtoa
1525            - bfilter <unfixed> (embed)
1526            - cacao <unfixed> (embed)
1527            - cdrdao <unfixed> (embed)
1528            - classpath <unfixed> (embed)
1529            - freej <unfixed> (embed)
1530            - iceape <unfixed> (embed)
1531            - iceweasel <unfixed> (embed)
1532            - jscoverage <unfixed> (embed)
1533            - kde4libs <unfixed> (embed)
1534            - kdelibs <unfixed> (embed)
1535            - kompozer <unfixed> (embed)
1536            - libv8 <unfixed> (embed)
1537            - mono <unfixed> (embed)
1538            - newlib <unfixed> (embed)
1539            - nspr <unfixed> (embed)
1540            - php5 <unfixed> (embed)
1541            - polyml <unfixed> (embed)
1542            - qt4-x11 <unfixed> (embed)
1543            - rhino <unfixed> (embed)
1544            NOTE: code translated to Java
1545            - ruby1.8 <unfixed> (embed)
1546            - ruby1.9 <unfixed> (embed)
1547            - ruby1.9.1 <unfixed> (embed)
1548            - sdd <unfixed> (embed)
1549            - sfind <unfixed> (embed)
1550            - star <unfixed> (embed)
1551            - tinymux <unfixed> (embed)
1552            - virtualbox-ose <unfixed> (embed)
1553            - webkit <unfixed> (embed)
1554            - xulrunner <unfixed> (embed)
1555    
1556    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1557            - firegpg <unfixed> (embed)
1558            - enigmail <unfixed> (embed)
1559    
1560    ptmalloc (not packaged in Debian)
1561            - crystalspace <unfixed> (embed)
1562            - qt4-x11 <unfixed> (embed)
1563    
1564    svgalib
1565            - usplash <unfixed> (embed)
1566    
1567    bogl
1568            - usplash <unfixed> (embed)
1569    
1570    taglist
1571            - usplash <unfixed> (embed)
1572    
1573    portaudio
1574            - audacity <unfixed> (embed; bug #323711)
1575    
1576    nyquist
1577            - audacity <unfixed> (embed)
1578            NOTE: embeds a forked nyquist with support for a shared library
1579    
1580  libgd2:  vamp-plugin-sdk
1581  graphviz (lib/gd seems to be 2.0.33)          - audacity <unfixed> (embed)
1582    
1583  rar:  wordpress
1584  unrar-nonfree          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1585            - wordpress-mu <removed> (fork)
1586    
1587  unrar-free: (maybe this code is derived from the original rar, too?)  php5
1588  clamav (seems to be disabled in default config)          - php4 <removed> (old-version)
1589    
1590  mplayer (DirectMedia Object loader):  classpath
1591  xine-lib (src/libw32dll/)          - libgnucrypto-java <removed> (embed; bug #559788)
 vlc (modules/codec/dmo/)  
1592    
1593  libwpd (WordPerfect converter):  libtool
1594  openoffice.org          - apr <unfixed> (static; bug #489625)
1595            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1596            - arts <unfixed> (embed)
1597            - bochs 2.4.2-1 (embed; bug #560884)
1598            - camserv <unfixed> (embed)
1599            - collectd 4.8.2-1 (embed)
1600            - courier-authlib 0.58-4 (embed)
1601            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1602            - cvsnt 2.5.04.3236-1.2 (embed)
1603            - dico <not-affected> (Uses the system copy of ltdl)
1604            - freeradius 0.1+20010527-1 (embed)
1605            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1606            - ggobi 2.1.9~20091212-1 (embed)
1607            - glame 2.0.1-4 (embed)
1608            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1609            - gnash 0.8.7-2 (embed)
1610            - gnu-smalltalk <unfixed> (embed; bug #566777)
1611            - google-gadgets 0.10.5-0.3 (embed)
1612            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1613            - graphicsmagick 1.3.5-6 (embed)
1614            - graphviz 2.8-3 (embed)
1615            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1616            - guile-1.6 1.6.8-7 (embed)
1617            - hamlib <unfixed> (embed)
1618            - hercules 3.06-1.2 (embed)
1619            - jags 1.0.4-3 (embed; bug #560864)
1620            - kdelibs <unfixed> (embed)
1621            - libannodex <removed> (embed)
1622            - libextractor 0.5.23+dfsg-4 (embed)
1623            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1624            - libtunepimp 0.5.3-7.3 (embed)
1625            - mp4h 1.3.1-4.1 (embed)
1626            - naim <removed> (embed)
1627            - parser-mysql <unfixed> (embed)
1628            - pinball 0.3.1-11 (embed)
1629            - redland <unfixed> (embed)
1630            - siproxd <unfixed> (embed)
1631            - ski <unfixed> (embed)
1632            - synfig 0.62.00-1 (embed)
1633            - unixodbc 2.2.4-5 (embed)
1634            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1635            - clamav 0.95+dfsg-1 (embed)
1636            - imagemagick 6:6.2.3.1-1 (embed)
1637            - hypre 2.4.0b-5 (embed)
1638            - lam <unfixed> (embed)
1639            - openmpi <unfixable> (embed; bug #559386)
1640            - parser <unfixed> (embed)
1641            - pdsh 2.18-5 (embed; bug #560892)
1642            - sbnc 1.2-8 (embed)
1643            - sdcc <unfixed> (embed)
1644            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1645            - proftpd-dfsg <unfixed> (embed; bug #561748)
1646            - babel 1.4.0.dfsg-5 (embed)
1647            - libprelude 0.9.14-2 (embed)
1648            - heartbeat 2.1.4-7 (embed)
1649            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1650            NOTE: might've been fixed earlier
1651            - gcc-* <unknown> (embed)
1652    
1653    ocamlgsl
1654            - orpie 1.5.1-7.1 (embed; bug #550058)
1655    
1656    xdotool
1657            - keynav <unfixed> (embed; bug #560103)
1658    
1659    bulletphysics (not packaged; http://www.bulletphysics.org/)
1660            - supertuxkart <unfixed> (embed)
1661            - blender <unfixed> (embed)
1662    
1663  fsplib (http://sourceforge.net/projects/fsp/):  ghostscript
1664  gftp (lib/fsplib version 0.3)          - gs-gpl <removed> (old-version)
1665    
1666  librpcsecgss:  icedove
1667  krb5          - thunderbird <removed> (old-version)
1668    
1669  jasper:  sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1670  ghostscript          - jquery <unfixed> (embed)
 gs-gpl  
1671    
1672  libidn:  sed
1673  monotone          - ssed <unfixed> (fork)
1674    
1675  liblua:  phpatomlib (http://code.google.com/p/phpatomlib)
1676  monotone          - wordpress <unfixed> (embed)
1677    
1678    Services_JSON (http://pear.php.net/package/Services_JSON)
1679            - wordpress <unfixed> (embed)
1680    
1681    phpass (http://www.openwall.com/phpass/)
1682            - gallery2 <unfixed> (embed)
1683            - wordpress <unfixed> (embed)
1684            - typo3-src <unfixed> (modified-embed)
1685            NOTE: file refers to drupal, maybe there's a copy somewhere there
1686            NOTE: a copyright owner search didn't match anything
1687            - libauthen-passphrase-perl <unfixable> (fork)
1688            NOTE: perl implementation of phpass
1689    
1690    squirrelmail
1691            - wordpress <unfixed> (embed)
1692            NOTE: class-pop3.php
1693    
1694    ezSQL (http://www.woyano.com/jv/ezsql)
1695            - wordpress <unfixable> (fork)
1696            NOTE: wp-db.php
1697    
1698    Diff.php (Clay Loveless' version/killersoft.com)
1699            - php-versioncontrol-svn <unfixed>
1700    
1701    libm (provided by libc)
1702            - spring <unfixed> (embed)
1703            NOTE: embedded by embedded copy of streflop
1704            - aide <unfixed> (static)
1705            - busybox <unfixed> (static)
1706            - mindi-busybox <unfixed> (static)
1707            - qemu <unfixed> (static)
1708            NOTE: qemu-user-static
1709            - tuxonice-userui <unfixed> (static)
1710            - zsh <unfixed> (static)
1711            NOTE: zsh-static
1712    
1713    streflop
1714            - spring <unfixed> (embed)
1715    
1716  libbotan:  minizip
1717  montone          - spring <unfixed> (embed)
1718    
1719  NetXX:  oscpack
1720  monotone          - spring <unfixed> (embed)
1721    
1722  libgc:  hpiutil2
1723  mono          - spring <unfixed> (embed)
1724    
 lzma:  
1725  p7zip  p7zip
1726            - spring <unfixed> (embed)
1727    
1728  lzo:  pythonqt (doesn't seem to be python-qtN, unknown source)
1729  grub2          - fontmatrix <unfixed> (embed)
1730            - elmerfem <unfixed> (embed)
1731  pax code:  
1732  tar  iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1733  cpio          - docvert <unfixed> (embed)
1734            - jifty <unfixed> (embed)
1735            - kdenetwork <unfixed> (embed)
1736            - mediatomb <unfixed> (embed)
1737            - plastex <unfixed> (embed)
1738            - plone3 <removed> (embed)
1739            - python-chaco <unfixed> (embed)
1740            - python-docutils <unfixed> (embed)
1741            - s5 <unfixed> (embed)
1742            - zope2.10 <unfixed> (embed)
1743            - zope2.11 <removed> (embed)
1744            - cython <not-affcted> (embed)
1745            NOTE: part of documentation, which is not installed into the binary package
1746    
1747    python-docutils
1748            - zope2.10 <unfixed> (embed)
1749            - zope2.11 <removed> (embed)
1750    
1751    tesseract
1752            - ocropus <unfixed> (static)
1753    
1754    antlr
1755            - kdevelop <unfixed> (embed)
1756    
1757    libxerces2
1758            - openjdk-6 <unfixed> (embed)
1759    
1760    kfreebsd-8
1761            - kfreebsd-7 <unfixed> (old-version)
1762            - kfreebsd-6 <removed> (old-version)
1763    
1764    ruby1.9.1
1765            - ruby1.9 <unfixed> (old-version)
1766            - ruby1.8 <unfixed> (old-version)
1767    
1768    maildrop
1769            - courier <unfixed> (embed) [./maildrop]
1770    
1771    glee
1772            - warzone2100 <unfixed> (embed)
1773    
1774    phing
1775            - symfony <unfixed> (embed)
1776    
1777    pake
1778            - symfony <unfixed> (embed)
1779    
1780    propel
1781            - symfony <unfixed> (embed)
1782    
1783    creole
1784            - symfony <unfixed> (embed)
1785    
1786    hfsutils
1787            - cdrkit <unfixed> (embed; bug #570187)
1788            NOTE: embeds hfsutils code in genisoimage
1789    
1790    cdrkit
1791            - grub2 <unfixed> (embed; bug #570156)
1792            NOTE: genisoimage imported into grub-mkisofs
1793    
1794    kdebase-workspace
1795            - kdebase <unfixed> (old-version)
1796    
1797    file
1798            - php5 <unfixable> (modified-embed)
1799            [lenny] - php5 <not-affected>
1800    
1801    cdb
1802            - php5 <unfixed> (embed)
1803    
1804    libmbfl (itp: #570708)
1805            - php5 <unfixed> (embed)
1806            NOTE: PHP is actually the current upstream, ITP is of that code
1807    
1808    libonig
1809            - php5 5.3.2-1 (embed)
1810    
1811    xmlrpc-epi
1812            - php5 <unfixed> (embed)
1813    
1814    swt-gtk
1815            - eclipse <unfixed> (embed; bug #538808)
1816    
1817    txt2html
1818            - wml 2.0.11ds2-1 (embed)
1819    
1820    ca-certificates
1821            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1822    
1823    openexr
1824            - freeimage <unfixed> (embed)
1825    
1826    libmng
1827            - freeimage <unfixed> (embed)
1828    
1829    openjpeg
1830            - freeimage <unfixed> (embed)
1831    
1832    libjpeg6b
1833            - freeimage <unfixed> (embed)
1834    
1835    libjpeg (don't know what exact version)
1836            - dcmtk <unfixed>
1837            - gdcm <unfixed>
1838            - insighttoolkit <unfixed>
1839            - openarena <unfixed>
1840            - outguess <unfixed>
1841            - squeak-vm <unfixed> (embed)
1842            - tremulous <unfixed>
1843            - tuxonice-userui <unfixed> (static)
1844            - fpc <unfixed> (static)
1845            - lazarus <unfixed> (static)
1846            NOTE: inherited from fpc, see #472304
1847            - mseide-msegui <unfixed> (static)
1848            NOTE: inherited from fpc, see #472304
1849            - easymp3gain <unfixed> (static)
1850            NOTE: inherited from fpc, see #472304
1851            - winff <unfixed> (static)
1852            NOTE: inherited from fpc, see #472304
1853    
1854    libfile-copy-recursive-perl
1855            - r-base <unfixed> (embed; bug #577427)
1856            - r-base-core-ra <unfixed> (embed; bug #577429)
1857    
1858    delimmatch
1859            - r-base <unfixed> (embed; bug #577433)
1860            - r-base-core-ra <unfixed> (embed; bug #577434)

Legend:
Removed from v.7214  
changed lines
  Added in v.14468

  ViewVC Help
Powered by ViewVC 1.1.5