/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7923 by stef-guest, Mon Jan 14 21:43:39 2008 UTC revision 14834 by jmm-guest, Wed Jun 9 16:50:43 2010 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>, <itp> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
21        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
22        fork (the package is not just embedding code but it is a fork and thus might share parts of the source code)        modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26  The srcpkg might be some string to identify the code if there is no specific source package.  The srcpkg might be some string to identify the code if there is no
27    specific source package.
28    
29  Everything up to the next line is ignored  Everything up to the next line is ignored.
30  ---BEGIN  ---BEGIN
31  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
32          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
33          - pdftohtml <unknown>          - pdftohtml <unknown>
34          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
35          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
36          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
37          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
39          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
40          NOTE: links to poppler          - koffice 1:2.0.0-1 (embed; bug #436163)
         - koffice <unfixed> (embed; bug #436163)  
41          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
42          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
43          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
44          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
46          NOTE: copy only present in source but links to poppler          - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <removed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50  ppmd  ppmd
51          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59            - s3switch <unfixed> (embed)
60            - xresprobe <unfixed> (embed)
61            - zhcon <unfixed> (embed)
62    
63    peercast
64            - gnome-peercast <removed> (embed)
65            [etch] - gnome-peercast <unfixed> (embed)
66    
67  silc-toolkit  silc-toolkit
68          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
69    
70    icclib
71            - ghostscript <unfixed> (embed)
72            - argyll <unfixed> (embed)
73    
74    libusb
75            - argyll <unfixed> (embed)
76    
77  dietlibc  dietlibc
78          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
79    
80    libmikmod
81            - sdl-mixer1.2 <unfixed> (embed)
82            TODO: report bug
83    
84  libiax  libiax
85          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
86    
87    spandsp
88            - iaxmodem <unfixable> (embed; bug #548885)
89    
90    python-paramiko
91            - fabric 0.9.0-2 (embed; bug #561398)
92    
93  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
94          - dpkg <unfixed> (embed)          - dpkg 1.15.6 (static)
95          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
96          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
97            - cherokee <unfixed> (embed)
98          NOTE: somehow derived code base          NOTE: somehow derived code base
99          - mono <unfixed> (embed)          - mono <unfixed> (embed)
100          TODO: check mozilla          TODO: check mozilla
# Line 67  zlib (lots of apps embed a copy, but lin Line 103  zlib (lots of apps embed a copy, but lin
103          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
104          - rpm <unknown> (embed)          - rpm <unknown> (embed)
105          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
106            - tuxcmd-modules <unfixed> (embed)
107            - zsync <unfixed>
108            - tra <unfixed>
109            - sash <unfixed>
110            - nsis <unfixed>
111            - pyfits 1:2.3.1-1
112            - mseide-msegui <unfixed>
113            NOTE: mseide
114            - mirrordir <unfixed>
115            - poco <unfixed>
116            - klibc <unfixed>
117            - emboss <unfixed>
118            - ghostscript <unfixed>
119            - freeimage <unfixed>
120            - clamav <unfixed> (fork)
121            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
122            - tuxonice-userui <unfixed> (static)
123            - plt-scheme <unfixed>
124            - perl <unfixed>
125            - paraview <unfixed>
126            - velvet 0.7.56~nozlibcopy-1
127            - gcvs <unfixed>
128            - dump <unfixed>
129            - aide <unfixed> (static)
130            - dar <unfixed> (static)
131            - avfs <unfixed>
132            - fpc <unfixed>
133            - winff <unfixed>
134            NOTE: inherited from fpc, see #472304
135            - lazarus <unfixed>
136            NOTE: inherited from fpc, see #472304
137            - erlang <unfixed> (embed)
138            - gamera 3.2.3-1 (embed)
139            - python2.4 <unfixed> (embed; bug #553403)
140            - python2.5 <unfixed> (embed; bug #553403)
141            - texlive-bin <unknown> (embed)
142    
143    dulwich
144            - hg-git 0.1.0-1 (embed; bug #541996)
145    
146    libvigraimpex
147            - hugin <unfixed> (embed; bug #542259)
148            - enblend-enfuse <unfixed> (embed; bug #542258)
149            - gamera 3.2.3-1 (embed)
150    
151  libbz2  libbz2
152          - dpkg <unfixed> (static)          - dpkg 1.15.6 (static)
153            - amd64-libs <unfixed> (static)
154  ekg          NOTE: let's call it "static"
155          - centericq <unfixed> (embed)          - dar <unfixed> (static)
156          - gaim <unfixed> (embed)          - dump <unfixed> (static)
157          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - unalz <unfixed> (embed)
158          - kopete 4:3.3.2-5 (embed)          NOTE: has code, by the maint, to use the system version but links against the internal copy
159          - kadu <unfixed> (embed)  
160          - gadu <unfixed> (embed)  libyahoo2
161          NOTE: g/kadu not packaged in Debian yet          - centerim <unfixed> (embed; bug #559783)
162    
163    libmsn
164            - centerim <unfixed> (embed; bug #559783)
165    
166    libgadu
167            - centerim <unfixed> (embed; bug #559783)
168            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
169            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
170            - kdenetwork 4:3.3.2-5 (embed)
171            NOTE: from kdenetwork: kopete
172            - ekg 1:1.8~rc0-1 (embed)
173            - kadu 0.6.0.2-3 (embed; bug #504430)
174            - gadu <itp> (embed)
175    
176  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
177          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
178          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
179          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
180          - phpwiki (embed)          - phpwiki <unfixed> (embed)
181          - php4 <unfixed> (embed)          - php4 <removed> (embed)
182          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
183    
184  shtool (affects build-time only)  shtool (affects build-time only)
185          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
186          - php4 <unfixed> (embed)          - php4 <removed> (embed)
187            - php5 <unfixed> (embed)
188    
189  mozilla source code  xulrunner
190          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
191          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
192          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
193          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
194          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
195          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
196          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
197          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
198    
199  xli  xli
200          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
201    
202  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
203          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
204          - xfree86/xorg <unfixed> (embed)  
205          NOTE: in libxpm  libxpm
206            - lesstif <unfixed> (embed; bug #575750)
207    
208  kerberized apps with BSD origin  kerberized apps with BSD origin
209          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
210          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
211          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
212    
213  grip (which pkg is the origin?)  grip (which pkg is the origin?)
214          - libcdaudio          - libcdaudio <unfixed>
215          - grip          - grip <unfixed>
216          - gnome-vfs          - gnome-vfs <unfixed>
217          TODO: check vfs2 as well          TODO: check vfs2 as well
218    
219  fudforum  fudforum
220          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
221          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
222          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
223    
224    libbsd
225            - rdate 1:1.2-3 (embed)
226            - atheme-services <unfixed>
227            - libbsd-arc4random-perl <unfixed>
228            - isakmpd <unfixed>
229            - bsdgames <unfixed> (embed)
230            - bsd-mailx <unfixed> (embed)
231            - netcat-openbsd <unfixed> (embed; bug #550611)
232            - openssh <unfixed> (embed)
233            - unworkable <unfixed> (embed)
234    
235  cvs  cvs
236          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
237          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
238    
239  pcre  pcre3
240          - python* <unfixed> (embed)          - php4 <removed> (embed)
         - php4 <unknown> (embed)  
241          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
242          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
243            NOTE: libgoffice-*
244          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
245          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
246          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
247          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
248          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
249          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
250          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
251          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
252          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
253          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
254            - tin 980117-1 (embed)
255            - kazehakase 0.5.2-1
256            - webkit 1.0.1-1 (embed)
257            - qt4-x11 <unfixed> (embed)
258            NOTE: embedded via webkit copy
259            - erlang <unfixed> (embed)
260            - ssed <unfixed> (embed)
261            - ircd-hybrid <unfixed> (static)
262            - emboss <unfixd>
263            - cherokee <unfixed> (embed)
264            - oftc-hybrid <unfixed> (embed)
265            - ratbox-services <unfixed> (embed)
266            - squeak-vm <unfixed> (embed)
267            - tinymux <unfixed> (embed)
268    
269  tiff  tiff
270          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
271          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
272            - freeimage <unfixed> (embed)
273            - libtk-img <unfixed> (embed)
274            NOTE: there are two copies, one under tiff/ other under libtiff/
275            - gdal <unfixed>
276    
277  uudeview  uudeview
278          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
279            - pan <unfixed> (embed)
280    
281  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
282          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
283          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
284          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
285            - heimdal <unfixed> (embed; bug #559616)
286    
287  util-linux/mount  util-linux/mount
288          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
289          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
290    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
291  sylpheed  sylpheed
292          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
293    
# Line 184  phpldapadmin Line 302  phpldapadmin
302  chmlib  chmlib
303          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
304    
305  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
306          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
307          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
308          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
309          - vlc <unfixed> (static)          - smilutils 0.3.0-10
310          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
311          - motion <unfixed> (static)          - motion 3.1.19-1
312          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
313          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed> (static)
         - xmovie <unfixed>  
314          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
315            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
316            - audacity 1.3.7-2 (embed; bug #512278)
317    
318    faad2
319            - mplayer 1.0~rc2-20 (embed)
320            - avifile <unfixed> (embed; bug #538750)
321            - ffmpeg-debian <removed> (embed)
322    
323  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
324          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
325            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
326            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
327    
328  libdts  libdts
329          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 210  liba52 Line 335  liba52
335          - a52dec <unfixed> (embed)          - a52dec <unfixed> (embed)
336          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
337    
338  libmpeg2  mpeg2dec (libmpeg2)
         - mpeg2dec <unfixed> (embed)  
339          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
340    
341  curl  libmpeg3
342          - wget <unfixed> (embed)          - squeak-vm <unfixed> (embed)
343          NOTE: code for NTLM authentication  
344    libntlm
345            - wget <unfixed> (fork; bug #550436)
346            - curl <unfixed> (fork; bug #550437)
347            - cntlm <unfixed> (fork; bug #550438)
348    
349  uw-imap  uw-imap
350          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 225  uw-imap Line 353  uw-imap
353  imagemagick  imagemagick
354          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
355    
356    python-urlgrabber
357            - mercurial <unfixed> (embed; bug #531062)
358            - w3af <unfixed> (embed; bug #555372)
359            [experimental] - harvestman <unfixed> (embed; bug #555373)
360    
361    beautifulsoup
362            - python-mechanize <unfixed> (embed; bug #555349)
363            - zope2.11 <removed> (embed; bug #555350)
364            - twill <unknown> (embed)
365    
366  halibut  halibut
367          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
368    
369  libghttp  libghttp
370          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
371    
372  libsndfile  libsndfile
373          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
374    
375  glibmm2.4  glibmm2.4
376          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
377    
378  libgnomecanvasmm2.6  libgnomecanvasmm2.6
379          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
380    
381  libsigc++-2.0  libsigc++-2.0
382          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
383    
384  soundtouch  soundtouch
385          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
386    
387  libmms  libmms
388          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
389          - mimms <unfixed> (embed)          - mimms <unfixed> (embed)
390    
391  fckeditor  fckeditor
392          - knowledgeroot <unfixed> (embed)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
393          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
394          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
395          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
396            - request-tracker3.8 <unfixed> (embed)
397            - otrs2 <unfixed> (embed)
398    
399  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
400          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
401    
402  libphp-phpmailer  libphp-phpmailer
403          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
404            - mahara <unfixed> (embed)
405            - symfony <unfixed> (embed; bug #566778)
406            [etch] - phpgroupware <unfixed> (embed)
407            NOTE: phpgroupware-felamimail is only in etch
408            - egroupware <unfixed> (embed; bug #504283)
409            - glpi <unfixed>
410    
411  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
412          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
413    
414  bennu (not packaged in Debian)  giflib
415          - moodle <unfixed> (embed)          - wine <unfixed> (embed; bug #466181)
416    
417  smarty:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
418          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
419    
420    smarty
421            - moodle 1.8.2-2 (embed; bug #471158)
422            - gallery2 2.2.5-2 (embed; bug #471160)
423            - mahara 0.9.2-2 (embed; bug #471201)
424            - gosa 2.4beta1-1 (embed; bug #471200)
425    
426  TinyMCE  TinyMCE
427          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
428          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
429          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
430          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
431    
432  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
433          - scite <unfixed> (embed)          - scite <unfixed> (embed)
434          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
435          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
436          - geany <unfixed> (embed)          - geany <unfixed> (fork)
437            - anjuta <unfixed> (embed)
438    
439  libphp-adodb  libphp-adodb
440          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
441          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
442          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
443          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
444          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
445          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
446            - torrentflux 2.0beta1-2 (embed)
447          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
448          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
449          - cacti <unknown> (embed)          - cacti <unknown> (embed)
450          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
451          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
452            - gforge 4.7~rc2-6 (embed)
453            - mahara <unfixed> (embed)
454    
455  gzip  gzip
456          - linux-kernel <unfixed> (embed)          - linux-2.6 <unfixed> (embed) [lib/inflate.c]
         NOTE: lib/inflate.c  
457          - klibc <unfixed> (embed)          - klibc <unfixed> (embed)
458          NOTE: based on linux-kernel gzip code          NOTE: based on linux-kernel gzip code
459          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
460            - pristine-tar <unfixed> (modified-embed)
461            NOTE: compression code only, not uncompression
462    
463  neon  neon
464          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
465          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
466          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
467            - litmus <removed> (embed; #395875)
468          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
469          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
470          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
471          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
472    
473  libmodplug  libmodplug
474          - gst-plugins-bad0.10 <unfixed> (embed)          - gst-plugins-bad0.10 0.10.10.2-1 (embed)
475    
476  libvncserver  libvncserver
477          - vino <unfixed> (embed)          - vino <unfixed> (embed)
# Line 322  libvncserver Line 479  libvncserver
479  putty  putty
480          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
481    
482  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
483          - filezilla <unfixed>          - filezilla <unfixed>
484            - crystalspace <unfixed> (embed)
485            - libwfut <unfixed> (embed)
486            - rarian <unfixed> (embed)
487            - bulletml <unfixed> (embed)
488            - pokerth <unfixed> (embed)
489            - qutecom <unfixed> (embed)
490            - sofa-framework <unfixed> (embed)
491            - yate <unfixed> (embed)
492            - antigrav <unfixed> (embed)
493            - balder2d <unfixed> (embed)
494            - cal3d <unfixed> (embed)
495            - criticalmass <unfixed> (embed)
496            - ember <unfixed> (embed)
497            - epiphany <unfixed> (embed)
498            - gambit <unfixed> (embed)
499            - noiz2sa <unfixed> (embed)
500            - ogre <unfixed> (embed)
501            - opencity <unfixed> (embed)
502            - openmovieeditor <unfixed> (embed)
503            - pouetchess <unfixed> (embed)
504            - tecnoballz <unfixed> (embed)
505            - trigger-rally <unfixed> (embed)
506            - xmoto <unfixed> (embed)
507            - mapnik <unknown> (embed)
508            NOTE: uses a different XML parser by default
509            - rrootage 0.23a-6 <embed>
510            NOTE: links to libbulltetml
511            - boson <unknown> (embed)
512            NOTE: the embedded code is unused
513    
514  gv  gv
515          - evince <unfixed> (embed)          - evince <unfixed> (embed)
516          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
517          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
518    
519  libXbae  libXbae
520          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
521          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
522    
523    libgtkhtml
524            - claws-mail-extra-plugins <unfixed> (fork)
525    
526  libXaw  libXaw
527          [etc] - libpawlib2-lesstif          - paw <removed> (embed)
528          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
529          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
530    
531  libgd2  libgd2
532          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
533          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
534            - wml 2.0.11ds2-1 (embed)
535            - libwmf <unfixed> (embed)
536            NOTE: derived from gd 1.6.3
537            - texlive-bin 2009-1 (embed)
538    
539  rar  rar
540          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 356  mplayer (DirectMedia Object loader) Line 548  mplayer (DirectMedia Object loader)
548          NOTE: src/libw32dll/          NOTE: src/libw32dll/
549          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
550          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
551            - mplayer 1.0~rc2-20 (embed)
552    
553  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
554          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 364  fsplib (http://sourceforge.net/projects/ Line 557  fsplib (http://sourceforge.net/projects/
557          - gftp <unfixed> (embed)          - gftp <unfixed> (embed)
558          NOTE: lib/fsplib version 0.3          NOTE: lib/fsplib version 0.3
559    
560    sprng
561            - tree-puzzle <unfixed> (embed)
562    
563  librpcsecgss  librpcsecgss
564          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
565    
566  jasper  jasper
567          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
568    
569    libiris
570            - psi <unfixed> (embed)
571            - kdenetwork <unfixed> (embed)
572            NOTE: kopete embeds libiris but links dynamically to libidn
573            - kdegames <unfixed> (embed)
574            NOTE: ksirk/kde4
575    
576  libidn  libidn
577          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
578            - psi <unfixed> (embed)
579  liblua          NOTE: psi embeds libiris which embeds libidn
580          - monotone <unfixed> (embed)          - kdegames <unfixed> (embed)
581            NOTE: kdegames/kde4 embeds libiris which embeds libidn
582    
583    lua5.1
584            - monotone 0.43-1 (embed)
585            - nmap 5.00-1 (embed; bug #527997)
586            [lenny] - nmap <unfixed> (embed; bug #527997)
587            - ocropus <unfixed> (embed)
588            - enigma <unfixed> (embed)
589            NOTE: requires lua built with C++
590            - freeciv <unfixed> (embed)
591            - spring <unfixed> (embed)
592    
593  libbotan  libbotan
594          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
595    
596  NetXX  NetXX
597          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
598    
599  libgc  libgc
600          - mono <unfixed> (embed)          - mono <unfixed> (embed)
601    
602  lzma  lzma
603          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
604            - xz-utils <unfixed> (fork)
605    
606  lzo  lzo
607          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
608    
609    yassl
610            - mysql-dfsg-5.0 <unfixed> (embed)
611            - mysql-dfsg-5.1 <unfixed> (embed)
612    
613  pax code  pax code
614          - tar <unfixed> (embed)          - tar <unfixed> (embed)
615          - cpio <unfixed> (embed)          - cpio <unfixed> (embed)
# Line 399  pax code Line 617  pax code
617  t1lib  t1lib
618          - tetex-bin 2.0.2-1 (embed)          - tetex-bin 2.0.2-1 (embed)
619          - texlive-bin <unknown> (embed)          - texlive-bin <unknown> (embed)
620    
621    guichan
622            - boswars <unfixed> (embed)
623            NOTE: maintainer notified us, working on it
624    
625    tolua
626            - boswars <unfixed> (embed)
627            NOTE: maintainer notified us, working on it
628            NOTE: actually tolua++
629            - ocropus <unfixed> (embed)
630            NOTE: actually tolua++
631            - freeciv <unfixed> (embed)
632            NOTE: actually tolua++
633            - enigma <unfixed> (embed)
634    
635    asio-dev
636            - luxrender <removed> (embed)
637    
638    xine-lib
639            - vlc <unfixed> (embed)
640            NOTE: only parts included in modules/access/rtsp
641    
642    netpbm
643            - tcl8.3 <unfixed> (embed)
644            - tcl8.4 <unfixed> (embed)
645            - tcl8.5 <unfixed> (embed)
646            NOTE: generic/tkImgGIF.c
647    
648    tk8.5
649            - tk8.0 <removed> (old-version)
650            - tk8.3 <unfixed> (old-version)
651            - tk8.4 <unfixed> (old-version)
652            - perl-tk <unfixable> (fork)
653    
654    samba
655            - mc 2:4.6.2~git20080311-1 (embed)
656            NOTE: maintainer is aware of this, currently searching a solution
657    
658    plib1.8.4c2
659            - boson <unfixed> (fork)
660            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
661    
662    fribidi
663            - quesoglc 0.7.2-2 (embed)
664    
665    glew
666            - quesoglc <unfixed> (embed; bug #489341)
667            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
668            - trigger 0.5.2.1-2 (embed)
669            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
670            - trigger-rally 0.5.2.1-2 (embed)
671            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
672    
673    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
674            - transcend <unfixed> (embed)
675            - cultivation <unfixed> (embed)
676            - passage <unfixed> (embed)
677            - gravitation <unfixed> (embed)
678    
679    tar
680            - libarchive <unfixed> (embed)
681            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
682    
683    cpio
684            - libarchive <unfixed> (embed)
685            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
686    
687    kde4libs
688            - kdelibs <unfixable> (old-version)
689    
690    webkit
691            - qt4-x11 <unfixed> (embed; bug #479851)
692            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
693            - kde4libs <unfixable> (fork)
694            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
695            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
696    
697    ftgl
698            - blender 2.46+dfsg-1 (embed)
699    
700    wv
701            - abiword <unfixed>
702    
703    qemu
704            - kvm <removed> (embed; bug #543159)
705            - qemu-kvm <unfixed> (embed; bug #560853)
706            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
707            - xen-3 3.4.2-2 (embed; bug #560856)
708            - xen-unstable <unfixed> (embed; bug #560856)
709    
710    vgabios
711            - kvm <removed> (embed; bug #489442)
712            - qemu-kvm <unfixed> (embed)
713    
714    bochs
715            - kvm <removed> (embed; bug #489442)
716            - qemu-kvm <unfixed> (embed)
717    
718    speex
719            - vorbis-tools <unfixed> (embed)
720            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
721            - gst-plugins-good0.10 <unfixed> (embed)
722            - xine-lib <unfixed> (embed)
723            - libfishsound <unfixed> (embed)
724            - libannodex <removed> (embed)
725            - vlc <unfixed> (embed)
726            - xmms-speex <unfixed> (embed)
727            - libsdl-sound1.2 <unfixed> (embed)
728            - sweep <unfixed> (embed)
729    
730    libreadline
731            - magic <itp> (old-version)
732    
733    opcode
734            - ode <unfixed> (embed)
735            NOTE: opcode is not a package in debian, it is just embedded
736            NOTE: http://www.codercorner.com/Opcode.htm
737    
738    gimpact
739            - ode <unfixed> (embed)
740            NOTE: gimpact is not a package in debian, it is just embedded
741            NOTE: http://gimpact.sf.net
742    
743    mochikit
744            - mahara <unfixed> (embed)
745            NOTE: they require extra patches, still unmerged upstream
746            - ntop <unfixed> (embed)
747            - coherence 0.6.2-1 (embed)
748            - paste <unfixed> (embed)
749            - turbogears <unfixed> (embed)
750            - plone3 <removed> (embed)
751            - xulrunner <unfixed> (embed)
752            - libjifty-plugin-chart-perl <unfixed> (embed)
753            - sabnzbdplus <unfixed> (embed)
754            - tgmochikit <unfixed> (embed)
755    
756    prototypejs
757            - netbeans-ide 6.0.1+dfsg-2 (embed)
758            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
759            - webcit <unfixed> (embed; bug #555219)
760            - asterisk 1:1.6.2.0~rc3-1 (embed)
761            - libjson-ruby 1.1.4-1 (embed; bug #555224)
762            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
763            - horde3 <unfixed> (embed)
764            - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
765            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
766            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
767            - ebug-http <removed> (embed; bug #555236)
768            - libaws 2.7-1 (embed; bug #555222)
769            - phpgedview <removed> (embed)
770            - poker-network 1.7.6-1 (embed; bug #555238)
771            - rails 2.1.0-6 (embed)
772            - wordpress 2.5.0-2 (embed; bug #555243)
773            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
774            TODO: search through all of the other zope packages
775            - ampache 3.4.1-2 (embed)
776            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
777            - hobix 0.5~svn20070319-4 (embed; bug #555247)
778            - zabbix 1.6.6-4 (embed; bug #555250)
779            - chora2 <unfixed> (embed; bug #555253)
780            - gollem <unfixed> (embed; bug # 555254)
781            - jscropperui 1.2.1-1 (embed; bug #555257)
782            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
783            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
784            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
785            - activeldap <unfixed> (embed)
786            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
787            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
788            - otrs2 2.3.4-6 (embed; bug #555267)
789            - webcalendar 1.2~b1-2 (embed; bug #555269)
790            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
791            - jifty 0.90519-1 (embed; bug #555271)
792            - jquery 1.4-1 (embed; bug #555272)
793            - passenger 2.2.5debian1-1 (embed; bug #555273)
794            - plone3 <removed> (embed; bug #555275)
795            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
796            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
797            - xulrunner <unfixed> (embed)
798            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
799    
800    gdb
801            - insight <unfixed> (embed)
802    
803    e2fsprogs
804            - ldiskfsprogs <unfixable> (fork)
805    
806    quazip (not packaged in Debian)
807            - qcake <unfixed> (embed)
808            NOTE: starting with upstream version 0.6.4
809    
810    exo
811            - pcmanfm <unfixed> (embed; bug #499677)
812            NOTE: slightly modified source code
813    
814    java
815            - openjdk-6 <unfixed>
816            - sun-java5 <unfixed>
817            - sun-java6 <unfixed>
818    
819    libphp-snoopy
820            - ampache 3.4.1-2 (embed; bug #504169)
821            - gforge 4.6.99+svn6094-2 (embed)
822            - mahara 1.0.5-2 (embed; bug #504170)
823            - pixelpost 1.7.1-5 (embed; bug #504171)
824            - mediamate 0.9.3.6-5 (embed; bug #504172)
825            - opendb <removed> (embed; bug #504173)
826            [etch] - opendb <unfixed> (embed; bug #504173)
827            - wordpress 2.5.1-9 (embed; bug #443948)
828            - moodle <unfixed> (embed; bug #507185)
829            [etch] - phpgroupware <unfixed> (embed)
830            NOTE: phpgroupware-felamimail
831            - magpierss 0.72-3 (embed; bug #431089)
832    
833    jquery
834            - zekr <unfixed> (embed)
835            - wordpress <unknown> (embed)
836            - yocto-reader <unfixed> (embed)
837            - textpattern <unfixed> (embed)
838            - genshi 0.5.1-1 (embed)
839            NOTE: compressed file under examples/ dir
840            - prewikka <unfixed> (embed)
841            - libramaze-ruby <unfixed> (embed)
842            - drupal5 <unfixed> (embed)
843            - b2evolution <unfixed> (embed)
844            - wesnoth <unfixed> (embed)
845    
846    tablesorter (jquery plugin, not packaged yet)
847            - wesnoth <unfixed> (embed)
848    
849    kses
850            - wordpress <unfixed> (embed; bug #504242)
851            NOTE: their copy has all methods renamed to wp_<foo>
852            NOTE: kses isn't in Debian, RFP: #504240
853            - moodle <unfixed> (embed; bug #507185)
854            - egroupware <unfixed> (embed)
855    
856    magpierss
857            - wordpress <unfixed> (embed; bug #504242)
858            - moodle <unfixed>
859    
860    php-gettext
861            - wordpress 2.8.4-1 (embed; bug #504242)
862            - docbookwiki <unfixed> (embed)
863            - knowledgeroot 0.9.9.5-1
864            NOTE: non-free
865    
866    libphp-ixr (name may change, it is the Incutio XML-RPC)
867            - wordpress <unfixed> (embed; bug #504242)
868            NOTE: libphp-ixr isn't in Debian, RFP: #504236
869            - dokuwiki <unfixed> (embed)
870            - textpattern <unfixed> (embed)
871    
872    libphp-cas
873            - glpi <unfixed> (embed)
874            - moodle <unfixed> (embed; bug #505984)
875    
876    scriptaculous (prototype.js is among the embeds in the following)
877            - glpi <unfixed> (embed)
878            - libaws <unfixed> (embed; bug #555222)
879            - op-panel <unfixed> (embed)
880            - symfony <unfixed> (embed)
881            NOTE: maintainer says there are extra incompatible changes required
882            - pixelpost 1.7.1-6 (embed)
883            - webhelpers <unfixed> (embed)
884            - qwik <removed> (embed; bug #555241)
885            - smokeping <unfixed> (embed)
886            - turba2 <unfixed> (embed)
887            - typo3-src 4.2.3-1 (embed)
888            - request-tracker3.6 <unfixed> (embed)
889            - request-tracker3.8 <unfixed> (embed)
890            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
891            - wordpress 2.5.0-2 (embed)
892            - libhtml-prototype-perl 1.48-3 (embed)
893    
894    libmarkdown-php
895            - moodle <unfixed> (embed; bug #507185)
896            - pixelpost 1.7.1-6 (embed)
897    
898    php-openid
899            - wordpress-openid <itp> (embed)
900    
901    geshi
902            - dokuwiki 0.0.20080505-3.1 (embed)
903            - pgfouine 1.0-1.1 (embed)
904            - websvn 2.1.0-1 (embed)
905    
906    webcalendar
907            - gforge 4.7~rc2-6 (embed; bug #504758)
908    
909    libical
910            - kdepim <unknown> (fork)
911            NOTE: fixed at some point during 4.0
912            - kdepimlibs 4.2.0-1 (fork)
913            - claws-mail-extra-plugins <unfixed> (fork)
914    
915    harfbuzz
916            - qt4-x11 <unfixed> (embed)
917            - pango1.0 <unfixed> (embed)
918            - fontmatrix <unfixed> (embed)
919    
920    libzip
921            - php5 <unfixable> (modified-embed)
922            - odt2txt <unfixed> (embed; bug #523808)
923    
924    json.php (not packaged; should be replaced with php's built-in functions)
925            - moodle <unfixed>
926            - yui <unfixed>
927            - gallery2 <unfixed>
928            - dokuwiki <unfixed>
929            - typo3-src <unfixed>
930    
931    php-fpdf
932            - tcpdf <itp> (fork)
933            - moodle <unfixed>
934            - phpwiki <unfixed>
935            - egroupware <unfixed>
936            - ldap-account-manager <unfixed> (fork)
937    
938    tcpdf (itp: #495985)
939            - moodle <unfixed>
940            - phpmyadmin <unfixed>
941    
942    typo3
943            - moodle <unfixed>
944    
945    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
946            - moodle <unfixed>
947            - gosa <unfixed>
948    
949    php-ole (itp: #487558)
950            - moodle <unfixed>
951    
952    pieforms (http://www.catalyst.net.nz)
953            - mahara <unfixed>
954    
955    savant2 (http://phpsavant.com)
956            - egroupware <unfixed>
957    
958    rssparser (http://nwow.org)
959            - egroupware <unfixed>
960            - phpgroupware <unfixed>
961    
962    lcms
963            - openjdk-6 <unfixed> (fork)
964            - gimp 2.4.0~rc2-2
965    
966    libphp-phplayersmenu
967            - diogenes <unfixed>
968            - phpldapadmin <unfixed>
969    
970    libphp-pclzip
971            - docvert <unfixed>
972            - moodle <unfixed>
973            - egroupware <unfixed>
974    
975    libphp-simplepie
976            - dokuwiki <unfixed>
977            - wordpress <unfixed>
978    
979    libphp-jpgraph
980            - egroupware <unfixed>
981    
982    php-simpletest
983            - moodle <unfixed>
984    
985    libpng
986            - iceweasel <not-affected> (uses xulrunner)
987            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
988            - iceape 1.0.13~pre080614i-0etch1 (embed)
989            - xulrunner 1.9.0.13-1 (embed)
990            [lenny] - xulrunner 1.9.0.11-0lenny1
991            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
992            - gamera 3.2.3-1 (embed)
993            - freeimage <unfixed> (embed)
994            - tuxonice-userui (static)
995    
996    irssi
997            - silc-client <unfixed> (embed)
998            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
999    
1000    extc
1001            - mtasc <unfixed> (embed)
1002            - haxe <unfixed> (embed)
1003    
1004    swflib
1005            - mtasc <unfixed> (embed)
1006            - haxe <unfixed> (embed)
1007    
1008    libitext-java
1009            - bouncycastle 2.1.4-1 (embed)
1010    
1011    python-ply
1012            - pyke <unfixed> (embed; bug #555363)
1013            - pywbem 0.7.0-4 (embed; bug #555364)
1014            - sepolgen <unfixed> (embed; bug #555365)
1015            - zope-textindexng3 <unknown> (embed)
1016            - iceweasel <not-affected> (uses xulrunner)
1017            - xulrunner <unknown> (embed)
1018            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1019    
1020    libdumbnet (libdnet upstream)
1021            - nmap <unfixed> (fork)
1022    
1023    gcc-4.4
1024            - gcc-mingw32 <unfixed> (embed)
1025    
1026    camlimages
1027            - advi <unfixed> (static; bug #550441)
1028    
1029    memcached
1030            - memcachedb <unfixed> (embed)
1031    
1032    yajl
1033            - argyll <unfixed> (embed; bug #544223)
1034            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1035    
1036    nusoap
1037            - gforge 4.8.2-1 (embed)
1038            - ampache <unfixed> (embed)
1039            - poker-network <unfixed> (embed)
1040            - moodle <unfixed> (embed)
1041            NOTE: code is not used when running under php5 and soap is enabled
1042            - phpwiki <unfixed> (embed)
1043            - gallery2 <unfixed> (embed)
1044            - typo3-src <unfixed> (embed)
1045    
1046    libept
1047            - adept <unfixed> (embed; bug #540649)
1048    
1049    libvorbis
1050            - iceweasel <not-affected> (uses xulrunner)
1051            - xulrunner <unfixed> (embed; bug #540959)
1052            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1053            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1054            - iceape <unfixed> (embed)
1055            [etch] - iceape <not-affected> (introduced in 2.0)
1056            [lenny] - iceape <not-affected> (introduced in 2.0)
1057    
1058    cairo
1059            - iceweasel <not-affected> (uses xulrunner)
1060            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1061    
1062    liboggz
1063            - iceweasel <not-affected> (uses xulrunner)
1064            - xulrunner <unfixed> (embed; bug #540959)
1065            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1066            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1067            - iceape <unfixed> (embed)
1068            [etch] - iceape <not-affected> (introduced in 2.0)
1069            [lenny] - iceape <not-affected> (introduced in 2.0)
1070    
1071    liboggplay
1072            - iceweasel <not-affected> (uses xulrunner)
1073            - xulrunner <unfixed> (embed; bug #540959)
1074            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1075            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1076            - iceape <unfixed> (embed)
1077            [etch] - iceape <not-affected> (introduced in 2.0)
1078            [lenny] - iceape <not-affected> (introduced in 2.0)
1079    
1080    php-net-dnsbl
1081            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1082    
1083    php-onyx-rss
1084            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1085    
1086    php-text-wiki
1087            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1088    
1089    php-xml-rpc
1090            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1091    
1092    polarssl (does not have a shared library)
1093            - pdkim <itp> (embed; bug #543150)
1094            - xyssl <unfixed> (old-version)
1095    
1096    pidgin (libpurple)
1097            - gaim <removed> (old-version)
1098            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1099    
1100    icu
1101            - webkit 1.0.1-1 (embed; bug #547214)
1102            - texlive-bin <unfixed> (fork)
1103            NOTE: texlive upstream working with icu upstream to merge their changes
1104    
1105    cyrus-imapd-2.2
1106            - kolab-cyrus-imapd <unfixed> (fork)
1107            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1108    
1109    python-cxx-dev
1110            - freecad 0.9.2646.3-1 (embed; bug #547936)
1111    
1112    zipios++
1113            - freecad 0.9.2646.3-1 (embed; bug #547941)
1114            - enigma 0.92.3-3 (embed)
1115            NOTE: likely fixed earlier, marking etch's version as fixed
1116    
1117    linux-2.6
1118            - kvm <removed> (embed; bug #549973) [./kernel/*]
1119            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1120            - kernel-source-2.6.8 <removed> (old-version)
1121            - kernel-source-2.4.27 <removed> (old-version)
1122            - kernel-source-2.4.24 <removed> (old-version)
1123            - kernel-source-2.2.25 <removed> (old-version)
1124            - kernel-source-2.2.20 <removed> (old-version)
1125    
1126    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1127            - kvm <removed> (embed) [./libfdt/*]
1128            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1129    
1130    qweb (not packaged)
1131            - ajaxterm <unfixed>
1132    
1133    opensaml2
1134            - opensaml <removed> (old-version)
1135    
1136    shibboleth-sp2
1137            - shibboleth-sp <removed> (old-version)
1138    
1139    tuxonice-userui
1140            - suspend2-userui <removed> (old-version)
1141    
1142    expat
1143            - w3c-libwww <removed> (embed; bug #551941)
1144            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1145            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1146            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1147            - python2.4 <unfixable> (embed; bug #553403)
1148            - python-4suite <unfixed> (embed; bug #516935)
1149            - wxwindows2.4 <removed> (embed)
1150            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1151            - wxwidgets2.8 2.8.10.1-2 (embed)
1152            - celementtree 1.0.5-8 (embed)
1153            NOTE: Maybe that was fixed even earlier
1154            - audacity 1.3.2-1 (embed)
1155            - matanza <unfixed> (embed)
1156            - tdom 0.8.3~20080525-1 (embed)
1157            - udunits 2.1.8-4 (embed)
1158            - apr-util 1.2 (embed)
1159            - ayttm <unfxed> (embed; bug #561006)
1160            - cableswig <unfixed> (embed)
1161            - cadaver <unfixed> (embed)
1162            - cmake 2.6.0-6 (embed)
1163            - coin3 <unfixed> (embed)
1164            - gdcm 2.0.14-2 (embed)
1165            - ghostscript 8.71~dfsg-2 (embed)
1166            - grmonitor <removed> (embed)
1167            - iceape <unfixed> (embed)
1168            - insighttoolkit 3.16.0-1 (embed)
1169            NOTE: insighttoolkit might've been fixed earlier
1170            - libparagui1.1 1.0.2-1 (embed)
1171            - paraview 3.6.2-1 (embed)
1172            - poco 1.3.6p1-1 (embed)
1173            - simgear <unfixed> (embed)
1174            - sitecopy 1:0.16.0-1
1175            - smart <unfixed> (embed)
1176            NOTE: smart embeds celementree, and it includes expat
1177            - swish-e <not-affected> (Linked against libxml, which is used instead)
1178            - tla 1.3.5+dfsg-15 (embed)
1179            - vtk 4.1.20030227-1 (embed)
1180            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1181            - xmlrpc-c <unfixed> (embed)
1182            - iceweasel <unfixed> (embed)
1183            - kompozer <unfixed> (embed)
1184            - vxl 1.13.0-2 (embed)
1185            - xulrunner <unfixed> (embed)
1186            - apache2 2.2 (embed)
1187            - texlive-bin <not-affected> (Embedded code not compiled in)
1188            - vnc4 <unfixed> (embed)
1189            - xotcl 1.6.6-1 (embed)
1190    
1191    xerces-c
1192            - xerces-c2 <unfixed> (old-version)
1193            - xerces27 <removed> (old-version)
1194    
1195    md5 (RSA's version; not the gnu version provided by coreutils)
1196            - w3c-libwww <removed> (embed; bug #551942)
1197            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1198    
1199    libparagui1.1
1200            - asc <unfixable> (fork)
1201    
1202    enet
1203            - sauerbraten <unfixed> (embed; #497194)
1204    
1205    eglibc
1206            - glibc <removed> (old-version)
1207    
1208    galib
1209            - gamera 3.2.3-1 (embed)
1210    
1211    configobj
1212            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1213            - elisa <unfixed> (embed; bug #555337)
1214            - gaupol <unfixed> (embed; bug #555338)
1215            - ipython <unfixed> (embed; bug #555339)
1216            - pida <unfixed> (embed; bug #555340)
1217            - psychopy <unfixed> (embed; bug #555341)
1218            - rest2web <unfixed> (embed; bug #555342)
1219            - auth2db <unknown> (embed)
1220            - dynagen <unknown> (embed)
1221            - iceweasel <unknown> (embed)
1222            - sabnzbdplus <unknown> (embed)
1223            - xulrunner <unknown> (embed)
1224            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1225    
1226    python-clientform
1227            - bibus <unfixed> (embed; bug #555332)
1228            - zope2.10 <unfixed> (embed; bug #555333)
1229            - zope2.11 <removed> (embed; bug #555334)
1230            - python-mechanize <unknown> (embed)
1231            - twill <unknown> (embed)
1232    
1233    python-mechanize
1234            - zope2.10 <unfixed> (embed; bug #555337)
1235            - zope2.11 <removed> (embed; bug #555338)
1236            - twill <unknown> (embed; bug #555339)
1237    
1238    pexpect
1239            - duplicity 0.6.06-1 (embed; bug #555361)
1240            - hplip <unfixed> (embed; bug #555362)
1241            - smart <unfixed> (embed; bug #555363)
1242    
1243    pyparsing
1244            - bauble <unfixed> (embed; bug #555366)
1245            - boa-constructor 0.6.1-8 (embed; bug #555367)
1246            - calibre <unfixed> (embed; bug #555368)
1247            - matplotlib <unfixed> (embed; bug #531024)
1248            - zhpy 1.7.3.1-1 (embed; bug #555370)
1249            - polybori <unknown> (embed)
1250            - python-whoosh <unknown> (embed)
1251            - twill <unknown> (embed)
1252            - zope-textindexng3 <unknown> (embed)
1253    
1254    python-pysqlite2
1255            - python2.4 <unfixed> (embed; bug #553403)
1256            - python2.5 <unfixed> (embed; bug #553403)
1257    
1258    celementtree
1259            - python2.5 <unfixed> (embed)
1260            - smart <unfixed> (embed)
1261    
1262    elementtree
1263            - python2.5 <unfixed> (embed)
1264            - python2.6 <unfixed> (embed)
1265            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1266            - gedit 2.28.2-1 (embed; bug #555344)
1267            - smart <unfixed> (embed)
1268            - solfege <unfixed> (embed; bug #555345)
1269            - w3af <unfixed> (embed; bug #555346)
1270            - python-qt4 <unknown> (embed)
1271            - sphinx <unknown> (embed)
1272            - python-nltk <itp> (embed)
1273    
1274    python2.5
1275            - python2.4 <unfixed> (old-version)
1276            - jython <unfixed> (embed)
1277            NOTE: embeds many stdlib modules
1278            - python-django <unfixed> (embed; bug #555419)
1279            NOTE: embeds stdlib modules: doctest, decimal
1280            - gamera 3.2.3-1 (embed)
1281            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1282            - boa-constructor <unfixed> (embed; bug #555426)
1283            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1284            - nicotine <unfixed> (embed; bug #555427)
1285            NOTE: embeds stdlib modules: ConfigParser
1286            - museek+ <unfixed> (embed; bug #555428)
1287            NOTE: embeds stdlib modules: ConfigParser
1288            - vegastrike-data <unfixed> (embed)
1289            NOTE: embeds many stdlib modules
1290            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1291            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1292            - config-manager <unfixed> (embed; bug #555423)
1293            NOTE: embeds stdlib modules: optparse
1294            - jhbuild 2.28.0-1 (embed; bug #555421)
1295            NOTE: embeds stdlib modules: optparse, subprocess
1296            - smart <unfixed> (embed; bug #555432)
1297            NOTE: embeds stdlib modules: optparse
1298            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1299            NOTE: embeds stdlib modules: doctest
1300            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1301            NOTE: embeds stdlib modules: doctest
1302            - distribute <unfixed> (embed)
1303            NOTE: embeds stdlib modules: doctest
1304            - python-setuptools <unfixed> (embed; bug #555435)
1305            NOTE: embeds stdlib modules: doctest
1306            - zope.testing <unfixed> (embed; bug #555436)
1307            NOTE: embeds stdlib modules: doctest
1308            - translate-toolkit <unfixed> (embed; bug #555422)
1309            NOTE: embeds stdlib modules: textwrap, contextlib
1310            - libtpclient-py <unfixed> (embed; bug #555424)
1311            NOTE: embeds stdlib modules: subprocess
1312            - grass <unfixed> (embed; bug #555425)
1313            NOTE: embeds stdlib modules: subprocess
1314            - coherence <unfixed> (embed; bug #555429)
1315            NOTE: embeds stdlib modules: uuid
1316            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1317            NOTE: embeds stdlib modules: uuid
1318            - setroubleshoot <unfixed> (embed; bug #555431)
1319            NOTE: embeds stdlib modules: uuid
1320            - linkchecker <unfixed> (embed; bug #555414)
1321            NOTE: embeds msgfmt.py script
1322            - imdbpy <unfixed> (embed)
1323            NOTE: embeds msgfmt.py script
1324            - kiwi <unfixed> (embed)
1325            NOTE: embeds msgfmt.py script
1326            - moin <unfixed> (embed)
1327            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1328            - plone3 <removed> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - roundup <unfixed> (embed)
1331            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1332            - rednotebook <unfixed> (embed; bug #555415)
1333            NOTE: embeds msgfmt.py script
1334            - turbogears <unfixed> (embed)
1335            NOTE: embeds msgfmt.py script
1336            - elisa <unfixed> (embed)
1337            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1338            - calibre <unfixed> (embed)
1339            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1340            - mailman 1:2.1.13-1 (embed; #555416)
1341            NOTE: embeds msgfmt.py script
1342            - python-docutils <unknown> (embed)
1343            NOTE: embeds stdlib modules: optparse, textwrap
1344            - python-imaging <unknown> (embed)
1345            NOTE: embeds stdlib modules: doctest
1346            - python-mechanize <unknown> (embed)
1347            NOTE: embeds stdlib modules: doctest
1348            - twill <unknown> (embed)
1349            NOTE: embeds stdlib modules: subprocess
1350            - zeroc-ice <unknown> (embed)
1351            NOTE: embeds stdlib modules: subprocess
1352            - wxwidgets2.8 <unknown> (embed)
1353            NOTE: embeds stdlib modules: subprocess
1354            - cycle <unknown> (embed)
1355            NOTE: embeds msgfmt.py script
1356            - deluge <unknown> (embed)
1357            NOTE: embeds msgfmt.py script
1358            - opendict <unknown> (embed)
1359            NOTE: embeds msgfmt.py script
1360            - openerp-client <unknown> (embed)
1361            NOTE: embeds msgfmt.py script
1362            - rapidsvn <unknown> (embed)
1363            NOTE: embeds msgfmt.py script
1364            - wammu <unknown> (embed)
1365            NOTE: embeds msgfmt.py script
1366            - gaphor <unknown> (embed)
1367            NOTE: embeds msgfmt.py script
1368            - pida <unknown> (embed)
1369            NOTE: embeds msgfmt.py script
1370            - python-formencode <unknown> (embed)
1371            NOTE: embeds msgfmt.py script
1372            - duplicity <unfixed> (embed)
1373            NOTE: embeds stdlib module: urlparse, tarfile
1374            - pygopherd <unfixed> (embed)
1375            NOTE: embeds stdlib module: zipfile
1376    
1377    argparse
1378            - twill <unfixed> (embed; bug #555347)
1379            - ipython <unfixed> (embed; bug #555348)
1380    
1381    coherence
1382            - elisa <unfixed> (embed; bug #555335)
1383    
1384    simpletal
1385            - plastex <unfixed> (embed; bug #555371)
1386    
1387    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1388            - postr <unfixed> (embed)
1389            - elisa <unfixed> (embed)
1390    
1391    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1392            - apertium-tolk <unfixed> (embed)
1393            - ipython <unfixed> (embed)
1394            - virtaal <unfixed> (embed)
1395    
1396    distribute
1397            - setuptools <removed> (old-version)
1398    
1399    rails
1400            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1401            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1402            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1403            - thin <unfixed> (embed) [./spec/rails_app/*]
1404            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1405            NOTE: be dangerous if developers are naively basing their code off of the examples
1406            NOTE: prototype.js is among the example files
1407    
1408    lucene2 (prototype.js is among the embeds in the following)
1409            - lucene <unfixed> (old-version)
1410            - pylucene <unfixed> (embed)
1411            - libpdfbox-java <unfixed> (embed)
1412            - libfontbox-java <unfixed> (embed)
1413            - libjempbox-java <unfixed> (embed)
1414            - solr <unfixed> (embed)
1415    
1416    unicode-data
1417            - syslinux <unfixed> (embed)
1418            - camomile <unfixed> (embed)
1419            - fribidi <unfixed> (embed)
1420            - m17n-db <unfixed> (embed)
1421            - sbcl <unfixed> (embed)
1422            - heimdal <unfixed> (embed)
1423            - icu <unfixed> (embed)
1424            - icu4j <unfixed> (embed)
1425            - krb5 <unfixed> (embed)
1426            - moodle <unfixed> (embed)
1427            - openldap <unfixed> (embed)
1428            - pike7.6 <unfixed> (embed)
1429            - samba <unfixed> (embed)
1430            - samba4 <unfixed> (embed)
1431            - cmucl <unfixed> (embed)
1432            - typo3-src <unfixed> (embed)
1433            - mauve <unfixed> (embed)
1434            - texlive-bin <unfixed> (embed)
1435            - ypsilon <unfixed> (embed)
1436            - jeuclid <unfixed> (embed)
1437            - charmap.app <unfixed> (embed)
1438            - clisp <unfixed> (embed)
1439            - gnulib <unfixed> (embed)
1440            - opensrs-client <unfixed> (embed)
1441            - saxonb <unfixed> (embed)
1442            - rails <unfixed> (embed)
1443    
1444    feedparser
1445            - rawdog <unfixed> (embed; bug #383422)
1446            - miro <unfixed> (embed; bug #555351)
1447            - calibre <unfixed> (embed; bug #555352)
1448            - freevo <unfixed> (embed; bug #555353)
1449            - pida <unfixed> (embed; bug #555354)
1450            - planet-venus <unfixed> (embed; bug #555355)
1451            - plone3 <removed> (embed; bug #555356)
1452            - exaile 0.2.14+debian-1 (embed)
1453            - screenlets 0.1.2-3 (embed)
1454            NOTE: included twice
1455    
1456    agg:
1457            - matplotlib <unfixed> (embed: bug #377271)
1458            - contextfree <unfixed> (embed)
1459            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1460            - exactimage <unfixed> (embed)
1461            - python-enable <unfixed> (embed)
1462            - mapnik 0.5.1-3 (embed)
1463            NOTE: links statically to agg, but shared library is not available (bug #377271)
1464    
1465    vtk
1466            - paraview <unfixable> (embed; bug #495426)
1467    
1468    txt2tags
1469            - rednotebook <unfixed> (embed)
1470    
1471    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1472            - gajim <unfixed> (embed)
1473            - emesene <unfixed> (embed)
1474            - convirt <unfixed> (embed)
1475            - pida <unfixed> (embed)
1476            - rednotebook <unfixed> (embed)
1477    
1478    horde3 (prototype.js is among the embeds in the following)
1479            - mnemo2 <unfixed> (embed)
1480            - nag2 <unfixed> (embed)
1481            - wordpress <unfixed> (embed)
1482            NOTE: Text_Diff (wp-includes/Text/Diff*)
1483    
1484    cimg
1485            - gmic <itp> (embed)
1486    
1487    mootools
1488            - gmic <itp> (embed)
1489    
1490    openldap
1491            - openldap2.3 <removed> (old-version)
1492    
1493    grub2
1494            - grub <unfixed> (old-version)
1495    
1496    gnupginterface
1497            - duplicity <unfixed> (embed)
1498    
1499    python-dateutil
1500            - awn-extras-applets <unfixed> (embed)
1501            - matplotlib <unknown> (embed)
1502    
1503    cups
1504            - cupsys <removed> (old-version)
1505    
1506    yui
1507            - bcfg2 <not-affected> (present in source but not included in any binary files)
1508            - serendipity 1.5.3-1 (embed; bug #557746)
1509            - moodle 1.8.2.dfsg-5 (embed)
1510            - jifty 0.91117-1 (embed; bug #557748)
1511            - webgui 7.7.26-1 (embed)
1512            - loggerhead 1.17-1 (embed)
1513    
1514    quake3 (vanilla source not packaged in debian)
1515            - openarena <unfixable> (fork)
1516    
1517    quake2 (vanilla source not packaged in debian)
1518            - alien-arena <unfixable> (fork)
1519            - warsow <unfixable> (fork)
1520    
1521    libtheora
1522            - iceweasel <not-affected> (uses xulrunner)
1523            - xulrunner <unfixed> (embed; bug #540959)
1524            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1525            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1526            - iceape <unfixed> (embed; bug #559276)
1527            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1528            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1529    
1530    dtoa
1531            - bfilter <unfixed> (embed)
1532            - cacao <unfixed> (embed)
1533            - cdrdao <unfixed> (embed)
1534            - classpath <unfixed> (embed)
1535            - freej <unfixed> (embed)
1536            - iceape <unfixed> (embed)
1537            - iceweasel <unfixed> (embed)
1538            - jscoverage <unfixed> (embed)
1539            - kde4libs <unfixed> (embed)
1540            - kdelibs <unfixed> (embed)
1541            - kompozer <unfixed> (embed)
1542            - libv8 <unfixed> (embed)
1543            - mono <unfixed> (embed)
1544            - newlib <unfixed> (embed)
1545            - nspr <unfixed> (embed)
1546            - php5 <unfixed> (embed)
1547            - polyml <unfixed> (embed)
1548            - qt4-x11 <unfixed> (embed)
1549            - rhino <unfixed> (embed)
1550            NOTE: code translated to Java
1551            - ruby1.8 <unfixed> (embed)
1552            - ruby1.9 <unfixed> (embed)
1553            - ruby1.9.1 <unfixed> (embed)
1554            - sdd <unfixed> (embed)
1555            - sfind <unfixed> (embed)
1556            - star <unfixed> (embed)
1557            - tinymux <unfixed> (embed)
1558            - virtualbox-ose <unfixed> (embed)
1559            - webkit <unfixed> (embed)
1560            - xulrunner <unfixed> (embed)
1561    
1562    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1563            - firegpg <unfixed> (embed)
1564            - enigmail <unfixed> (embed)
1565    
1566    ptmalloc (not packaged in Debian)
1567            - crystalspace <unfixed> (embed)
1568            - qt4-x11 <unfixed> (embed)
1569    
1570    svgalib
1571            - usplash <unfixed> (embed)
1572    
1573    bogl
1574            - usplash <unfixed> (embed)
1575    
1576    taglist
1577            - usplash <unfixed> (embed)
1578    
1579    portaudio
1580            - audacity <unfixed> (embed; bug #323711)
1581    
1582    nyquist
1583            - audacity <unfixed> (embed)
1584            NOTE: embeds a forked nyquist with support for a shared library
1585    
1586    vamp-plugin-sdk
1587            - audacity <unfixed> (embed)
1588    
1589    wordpress
1590            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1591            - wordpress-mu <removed> (fork)
1592    
1593    php5
1594            - php4 <removed> (old-version)
1595    
1596    classpath
1597            - libgnucrypto-java <removed> (embed; bug #559788)
1598    
1599    libtool
1600            - apr <unfixed> (static; bug #489625)
1601            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1602            - arts <unfixed> (embed)
1603            - bochs 2.4.2-1 (embed; bug #560884)
1604            - camserv <unfixed> (embed)
1605            - collectd 4.8.2-1 (embed)
1606            - courier-authlib 0.58-4 (embed)
1607            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1608            - cvsnt 2.5.04.3236-1.2 (embed)
1609            - dico <not-affected> (Uses the system copy of ltdl)
1610            - freeradius 0.1+20010527-1 (embed)
1611            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1612            - ggobi 2.1.9~20091212-1 (embed)
1613            - glame 2.0.1-4 (embed)
1614            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1615            - gnash 0.8.7-2 (embed)
1616            - gnu-smalltalk <unfixed> (embed; bug #566777)
1617            - google-gadgets 0.10.5-0.3 (embed)
1618            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1619            - graphicsmagick 1.3.5-6 (embed)
1620            - graphviz 2.8-3 (embed)
1621            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1622            - guile-1.6 1.6.8-7 (embed)
1623            - hamlib <unfixed> (embed)
1624            - hercules 3.06-1.2 (embed)
1625            - jags 1.0.4-3 (embed; bug #560864)
1626            - kdelibs <unfixed> (embed)
1627            - libannodex <removed> (embed)
1628            - libextractor 0.5.23+dfsg-4 (embed)
1629            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1630            - libtunepimp 0.5.3-7.3 (embed)
1631            - mp4h 1.3.1-4.1 (embed)
1632            - naim <removed> (embed)
1633            - parser-mysql <unfixed> (embed)
1634            - pinball 0.3.1-11 (embed)
1635            - redland <unfixed> (embed)
1636            - siproxd <unfixed> (embed)
1637            - ski <unfixed> (embed)
1638            - synfig 0.62.00-1 (embed)
1639            - unixodbc 2.2.4-5 (embed)
1640            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1641            - clamav 0.95+dfsg-1 (embed)
1642            - imagemagick 6:6.2.3.1-1 (embed)
1643            - hypre 2.4.0b-5 (embed)
1644            - lam <unfixed> (embed)
1645            - openmpi <unfixable> (embed; bug #559386)
1646            - parser <unfixed> (embed)
1647            - pdsh 2.18-5 (embed; bug #560892)
1648            - sbnc 1.2-8 (embed)
1649            - sdcc <unfixed> (embed)
1650            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1651            - proftpd-dfsg <unfixed> (embed; bug #561748)
1652            - babel 1.4.0.dfsg-5 (embed)
1653            - libprelude 0.9.14-2 (embed)
1654            - heartbeat 2.1.4-7 (embed)
1655            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1656            NOTE: might've been fixed earlier
1657            - gcc-* <unknown> (embed)
1658    
1659    ocamlgsl
1660            - orpie 1.5.1-7.1 (embed; bug #550058)
1661    
1662    xdotool
1663            - keynav <unfixed> (embed; bug #560103)
1664    
1665    bulletphysics (not packaged; http://www.bulletphysics.org/)
1666            - supertuxkart <unfixed> (embed)
1667            - blender <unfixed> (embed)
1668    
1669    ghostscript
1670            - gs-gpl <removed> (old-version)
1671    
1672    icedove
1673            - thunderbird <removed> (old-version)
1674    
1675    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1676            - jquery <unfixed> (embed)
1677    
1678    sed
1679            - ssed <unfixed> (fork)
1680    
1681    phpatomlib (http://code.google.com/p/phpatomlib)
1682            - wordpress <unfixed> (embed)
1683    
1684    Services_JSON (http://pear.php.net/package/Services_JSON)
1685            - wordpress <unfixed> (embed)
1686    
1687    phpass (http://www.openwall.com/phpass/)
1688            - gallery2 <unfixed> (embed)
1689            - wordpress <unfixed> (embed)
1690            - typo3-src <unfixed> (modified-embed)
1691            NOTE: file refers to drupal, maybe there's a copy somewhere there
1692            NOTE: a copyright owner search didn't match anything
1693            - libauthen-passphrase-perl <unfixable> (fork)
1694            NOTE: perl implementation of phpass
1695    
1696    squirrelmail
1697            - wordpress <unfixed> (embed)
1698            NOTE: class-pop3.php
1699    
1700    ezSQL (http://www.woyano.com/jv/ezsql)
1701            - wordpress <unfixable> (fork)
1702            NOTE: wp-db.php
1703    
1704    Diff.php (Clay Loveless' version/killersoft.com)
1705            - php-versioncontrol-svn <unfixed>
1706    
1707    libm (provided by libc)
1708            - spring <unfixed> (embed)
1709            NOTE: embedded by embedded copy of streflop
1710            - aide <unfixed> (static)
1711            - busybox <unfixed> (static)
1712            - mindi-busybox <unfixed> (static)
1713            - qemu <unfixed> (static)
1714            NOTE: qemu-user-static
1715            - tuxonice-userui <unfixed> (static)
1716            - zsh <unfixed> (static)
1717            NOTE: zsh-static
1718    
1719    streflop
1720            - spring <unfixed> (embed)
1721    
1722    minizip
1723            - spring <unfixed> (embed)
1724    
1725    oscpack
1726            - spring <unfixed> (embed)
1727    
1728    hpiutil2
1729            - spring <unfixed> (embed)
1730    
1731    p7zip
1732            - spring <unfixed> (embed)
1733    
1734    pythonqt (doesn't seem to be python-qtN, unknown source)
1735            - fontmatrix <unfixed> (embed)
1736            - elmerfem <unfixed> (embed)
1737    
1738    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1739            - docvert <unfixed> (embed)
1740            - jifty <unfixed> (embed)
1741            - kdenetwork <unfixed> (embed)
1742            - mediatomb <unfixed> (embed)
1743            - plastex <unfixed> (embed)
1744            - plone3 <removed> (embed)
1745            - python-chaco <unfixed> (embed)
1746            - python-docutils <unfixed> (embed)
1747            - s5 <unfixed> (embed)
1748            - zope2.10 <unfixed> (embed)
1749            - zope2.11 <removed> (embed)
1750            - cython <not-affcted> (embed)
1751            NOTE: part of documentation, which is not installed into the binary package
1752    
1753    python-docutils
1754            - zope2.10 <unfixed> (embed)
1755            - zope2.11 <removed> (embed)
1756    
1757    tesseract
1758            - ocropus <unfixed> (static)
1759    
1760    antlr
1761            - kdevelop <unfixed> (embed)
1762    
1763    libxerces2
1764            - openjdk-6 <unfixed> (embed)
1765    
1766    kfreebsd-8
1767            - kfreebsd-7 <unfixed> (old-version)
1768            - kfreebsd-6 <removed> (old-version)
1769    
1770    ruby1.9.1
1771            - ruby1.9 <unfixed> (old-version)
1772            - ruby1.8 <unfixed> (old-version)
1773    
1774    maildrop
1775            - courier <unfixed> (embed) [./maildrop]
1776    
1777    glee
1778            - warzone2100 <unfixed> (embed)
1779    
1780    phing
1781            - symfony <unfixed> (embed)
1782    
1783    pake
1784            - symfony <unfixed> (embed)
1785    
1786    propel
1787            - symfony <unfixed> (embed)
1788    
1789    creole
1790            - symfony <unfixed> (embed)
1791    
1792    hfsutils
1793            - cdrkit <unfixed> (embed; bug #570187)
1794            NOTE: embeds hfsutils code in genisoimage
1795    
1796    cdrkit
1797            - grub2 <unfixed> (embed; bug #570156)
1798            NOTE: genisoimage imported into grub-mkisofs
1799    
1800    kdebase-workspace
1801            - kdebase <unfixed> (old-version)
1802    
1803    file
1804            - php5 <unfixable> (modified-embed)
1805            [lenny] - php5 <not-affected>
1806    
1807    cdb
1808            - php5 <unfixed> (embed)
1809    
1810    libmbfl (itp: #570708)
1811            - php5 <unfixed> (embed)
1812            NOTE: PHP is actually the current upstream, ITP is of that code
1813    
1814    libonig
1815            - php5 5.3.2-1 (embed)
1816    
1817    xmlrpc-epi
1818            - php5 <unfixed> (embed)
1819    
1820    swt-gtk
1821            - eclipse <unfixed> (embed; bug #538808)
1822    
1823    txt2html
1824            - wml 2.0.11ds2-1 (embed)
1825    
1826    ca-certificates
1827            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1828    
1829    openexr
1830            - freeimage <unfixed> (embed)
1831    
1832    libmng
1833            - freeimage <unfixed> (embed)
1834    
1835    openjpeg
1836            - freeimage <unfixed> (embed)
1837    
1838    libjpeg6b
1839            - freeimage <unfixed> (embed)
1840    
1841    libjpeg (don't know what exact version)
1842            - dcmtk <unfixed>
1843            - gdcm <unfixed>
1844            - insighttoolkit <unfixed>
1845            - openarena <unfixed>
1846            - outguess <unfixed>
1847            - squeak-vm <unfixed> (embed)
1848            - tremulous <unfixed>
1849            - tuxonice-userui <unfixed> (static)
1850            - fpc <unfixed> (static)
1851            - lazarus <unfixed> (static)
1852            NOTE: inherited from fpc, see #472304
1853            - mseide-msegui <unfixed> (static)
1854            NOTE: inherited from fpc, see #472304
1855            - easymp3gain <unfixed> (static)
1856            NOTE: inherited from fpc, see #472304
1857            - winff <unfixed> (static)
1858            NOTE: inherited from fpc, see #472304
1859            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1860    
1861    libfile-copy-recursive-perl
1862            - r-base <unfixed> (embed; bug #577427)
1863            - r-base-core-ra <unfixed> (embed; bug #577429)
1864    
1865    delimmatch
1866            - r-base <unfixed> (embed; bug #577433)
1867            - r-base-core-ra <unfixed> (embed; bug #577434)
1868    
1869    libsmf (ITP: #572558)
1870            - denemo <unfixed> (embed)
1871            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1872    
1873    libselinux
1874            - dpkg 1.15.6 (static)
1875    
1876    xinha (ITP: #479708)
1877            - horde3 <unfixed>
1878            - serendipity <unfixed>
1879            - openacs <unfixed>
1880            - dotlrn <unfixed>
1881    
1882    dvipng
1883            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1884    
1885    dvipdfmx
1886            - texlive-bin <unfixed> (embed)
1887            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1888    
1889    lcdf-typetools
1890            - texlive-bin 2009-1 (embed)
1891    
1892    tex4ht
1893            - texlive-bin 2009-1 (embed)
1894    
1895    freetype
1896            - texlive-bin 2009-1 (embed)
1897    
1898    freetype2
1899            - texlive-bin 2009-1 (embed)
1900    
1901    silgraphite
1902            - texlive-bin <unfixed> (embed)
1903    
1904    unzip
1905            - texlive-bin 2009-1 (embed)
1906    
1907    jbig2dec
1908            - ghostscript 8.71~dfsg2-1 (embed)
Legend:
Removed from v.7923  
changed lines
  Added in v.14834
  ViewVC Help
Powered by ViewVC 1.1.5