/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7923 by stef-guest, Mon Jan 14 21:43:39 2008 UTC revision 15380 by geissert, Mon Sep 27 21:55:26 2010 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>, <itp> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy
14            <unfixed> if the issue is not yet fixed
15            <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
21        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
22        fork (the package is not just embedding code but it is a fork and thus might share parts of the source code)        modified-embed (embeds a code copy that differs from upstream code)
23          fork (a full-blown fork of another source package)
24          old-version (an older version of essentially the same code)
25    
26  The srcpkg might be some string to identify the code if there is no specific source package.  The srcpkg might be some string to identify the code if there is no
27    specific source package.
28    
29  Everything up to the next line is ignored  Everything up to the next line is ignored.
30  ---BEGIN  ---BEGIN
31  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  poppler
         NOTE: Fixed packages link to poppler library unless otherwise noted  
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
32          - pdftohtml <unknown>          - pdftohtml <unknown>
33          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
34          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
35          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
36          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
38          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
39          NOTE: links to poppler          - koffice 1:2.0.0-1 (embed; bug #436163)
         - koffice <unfixed> (embed; bug #436163)  
40          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
41          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
42          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
43          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
45          NOTE: copy only present in source but links to poppler          - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53  ppmd  ppmd
54          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60    
61    lrmi
62            - read-edid 2.0.0-1 (embed; bug #495131)
63            - s3switch <unfixed> (embed)
64            - xresprobe <unfixed> (embed)
65            - zhcon <unfixed> (embed)
66    
67    php-htmlpurifier
68            - mahara 1.2.5-1 (embed)
69            - knowledgeroot 0.9.9.5-5 (embed)
70            - moodle <unfixed> (embed)
71    
72    peercast
73            - gnome-peercast <removed> (embed)
74            [etch] - gnome-peercast <unfixed> (embed)
75    
76  silc-toolkit  silc-toolkit
77          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
78    
79    icclib
80            - ghostscript <unfixed> (embed)
81            - argyll <unfixed> (embed)
82    
83    libusb
84            - argyll <unfixed> (embed)
85    
86  dietlibc  dietlibc
87          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
88            - mksh <unfixable> (static)
89            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
90    
91    libmikmod
92            - sdl-mixer1.2 <unfixed> (embed)
93            TODO: report bug
94    
95  libiax  libiax
96          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
97    
98    spandsp
99            - iaxmodem <unfixable> (embed; bug #548885)
100    
101    python-paramiko
102            - fabric 0.9.0-2 (embed; bug #561398)
103    
104  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
105          - dpkg <unfixed> (embed)          - dpkg 1.15.6 (static)
106          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
107          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
108            - cherokee <unfixed> (embed)
109          NOTE: somehow derived code base          NOTE: somehow derived code base
110          - mono <unfixed> (embed)          - mono <unfixed> (embed)
111          TODO: check mozilla          TODO: check mozilla
# Line 67  zlib (lots of apps embed a copy, but lin Line 114  zlib (lots of apps embed a copy, but lin
114          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
115          - rpm <unknown> (embed)          - rpm <unknown> (embed)
116          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
117            - tuxcmd-modules <unfixed> (embed)
118            - zsync <unfixed>
119            - tra <unfixed>
120            - sash <unfixed>
121            - nsis <unfixed>
122            - pyfits 1:2.3.1-1
123            - mseide-msegui <unfixed>
124            NOTE: mseide
125            - mirrordir <unfixed>
126            - poco <unfixed>
127            - klibc <unfixed>
128            - emboss <unfixed>
129            - ghostscript <unfixed>
130            - freeimage <unfixed>
131            - clamav <unfixed> (fork)
132            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
133            - tuxonice-userui <unfixed> (static)
134            - plt-scheme <unfixed>
135            - perl <unfixed>
136            - paraview <unfixed>
137            - velvet 0.7.56~nozlibcopy-1
138            - gcvs <unfixed>
139            - dump <unfixed>
140            - aide <unfixed> (static)
141            - dar <unfixed> (static)
142            - avfs <unfixed>
143            - fpc <unfixed>
144            - winff <unfixed>
145            NOTE: inherited from fpc, see #472304
146            - lazarus <unfixed>
147            NOTE: inherited from fpc, see #472304
148            - erlang <unfixed> (embed)
149            - gamera 3.2.3-1 (embed)
150            - python2.4 <unfixed> (embed; bug #553403)
151            - python2.5 <unfixed> (embed; bug #553403)
152            - texlive-bin <unknown> (embed)
153    
154    dulwich
155            - hg-git 0.1.0-1 (embed; bug #541996)
156    
157    libvigraimpex
158            - hugin <unfixed> (embed; bug #542259)
159            - enblend-enfuse <unfixed> (embed; bug #542258)
160            - gamera 3.2.3-1 (embed)
161    
162  libbz2  libbz2
163          - dpkg <unfixed> (static)          - dpkg 1.15.6 (static)
164            - amd64-libs <unfixed> (static)
165  ekg          NOTE: let's call it "static"
166          - centericq <unfixed> (embed)          - dar <unfixed> (static)
167          - gaim <unfixed> (embed)          - dump <unfixed> (static)
168          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - unalz 0.64-1 (embed)
169          - kopete 4:3.3.2-5 (embed)          NOTE: has code, by the maint, to use the system version but links against the internal copy
170          - kadu <unfixed> (embed)          - clamav <unfixed> (embed)
171          - gadu <unfixed> (embed)          NOTE: libclamav/nsis/bzlib*
172          NOTE: g/kadu not packaged in Debian yet          - pristine-tar <unfixable> (modified-embed)
173            NOTE: compression code only, not uncompression
174    
175    libyahoo2
176            - centerim <unfixed> (embed; bug #559783)
177    
178    libmsn
179            - centerim <unfixed> (embed; bug #559783)
180    
181    libgadu
182            - centerim <unfixed> (embed; bug #559783)
183            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
184            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
185            - kdenetwork 4:3.3.2-5 (embed)
186            NOTE: from kdenetwork: kopete
187            - ekg 1:1.8~rc0-1 (embed)
188            - kadu 0.6.0.2-3 (embed; bug #504430)
189            - gadu <itp> (embed)
190    
191  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
192          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
193          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
194          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
195          - phpwiki (embed)          - phpwiki <unfixed> (embed)
196          - php4 <unfixed> (embed)          - php4 <removed> (embed)
197          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
198    
199  shtool (affects build-time only)  shtool (affects build-time only)
200          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
201          - php4 <unfixed> (embed)          - php4 <removed> (embed)
202            - php5 <unfixed> (embed)
203    
204  mozilla source code  xulrunner
205          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
206          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
207          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
208          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
209          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
210          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
211          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
212          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
213    
214  xli  xli
215          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
216    
217  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
218          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
219          - xfree86/xorg <unfixed> (embed)  
220          NOTE: in libxpm  libxpm
221            - lesstif2 <unfixed> (embed; bug #575750)
222    
223  kerberized apps with BSD origin  kerberized apps with BSD origin
224          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
225          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
226          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
227    
228  grip (which pkg is the origin?)  grip (which pkg is the origin?)
229          - libcdaudio          - libcdaudio <unfixed>
230          - grip          - grip <unfixed>
231          - gnome-vfs          - gnome-vfs <unfixed>
232          TODO: check vfs2 as well          TODO: check vfs2 as well
233    
234  fudforum  fudforum
235          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
236          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
237          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
238    
239    libbsd
240            - rdate 1:1.2-3 (embed)
241            - atheme-services <unfixed>
242            - libbsd-arc4random-perl <not-affected> (modified-embed)
243            NOTE: code not used, it links dynamically against libbsd instead
244            - isakmpd <unfixed>
245            - bsdgames <unfixed> (embed)
246            - bsd-mailx <unfixed> (embed)
247            - netcat-openbsd <unfixed> (embed; bug #550611)
248            - openssh <unfixed> (embed)
249            - unworkable <unfixed> (embed)
250            - mksh <unfixed> (modified-embed)
251            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
252            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
253            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
254    
255  cvs  cvs
256          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
257          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
258    
259  pcre  pcre3
260          - python* <unfixed> (embed)          - php4 <removed> (embed)
         - php4 <unknown> (embed)  
261          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
262          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
263            NOTE: libgoffice-*
264          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
265          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
266          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
267          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
268          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
269          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
270          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
271          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
272          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
273          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
274            - tin 980117-1 (embed)
275            - kazehakase 0.5.2-1
276            - webkit 1.0.1-1 (embed)
277            - qt4-x11 <unfixed> (embed)
278            NOTE: embedded via webkit copy
279            - erlang <unfixed> (embed)
280            - ssed <unfixed> (embed)
281            - ircd-hybrid <unfixed> (static)
282            - emboss <unfixd>
283            - cherokee <unfixed> (embed)
284            - oftc-hybrid 1.6.9.dfsg-1 (embed)
285            - ratbox-services <unfixed> (embed)
286            - squeak-vm <unfixed> (embed)
287            - tinymux <unfixed> (embed)
288    
289  tiff  tiff
290          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
291          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
292            - freeimage <unfixed> (embed)
293            - libtk-img <unfixed> (embed)
294            NOTE: there are two copies, one under tiff/ other under libtiff/
295            - gdal <unfixed>
296    
297  uudeview  uudeview
298          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
299            - pan <unfixed> (embed)
300    
301  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
302          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
303          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
304          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
305            - heimdal <unfixed> (embed; bug #559616)
306    
307  util-linux/mount  util-linux/mount
308          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
309          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
310    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
311  sylpheed  sylpheed
312          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
313    
# Line 184  phpldapadmin Line 322  phpldapadmin
322  chmlib  chmlib
323          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
324    
325  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
326          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
327          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
328          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
329          - vlc <unfixed> (static)          - smilutils 0.3.0-10
330          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
331          - motion <unfixed> (static)          - motion 3.1.19-1
332          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
333          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed> (static)
         - xmovie <unfixed>  
334          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
335            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
336            - audacity 1.3.7-2 (embed; bug #512278)
337            - chromium-browser <unfixed> (fork)
338    
339    faad2
340            - mplayer 1.0~rc2-20 (embed)
341            - avifile <unfixed> (embed; bug #538750)
342            - ffmpeg-debian <removed> (embed)
343    
344  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
345          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
346            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
347            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
348    
349  libdts  libdts
350          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 210  liba52 Line 356  liba52
356          - a52dec <unfixed> (embed)          - a52dec <unfixed> (embed)
357          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
358    
359  libmpeg2  mpeg2dec (libmpeg2)
         - mpeg2dec <unfixed> (embed)  
360          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
361    
362  curl  libmpeg3
363          - wget <unfixed> (embed)          - squeak-vm <unfixed> (embed)
364          NOTE: code for NTLM authentication  
365    libntlm
366            - wget <unfixed> (fork; bug #550436)
367            - curl <unfixed> (fork; bug #550437)
368            - cntlm <unfixed> (fork; bug #550438)
369    
370  uw-imap  uw-imap
371          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 225  uw-imap Line 374  uw-imap
374  imagemagick  imagemagick
375          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
376    
377    python-urlgrabber
378            - mercurial <unfixed> (embed; bug #531062)
379            - w3af <unfixed> (embed; bug #555372)
380            [experimental] - harvestman <unfixed> (embed; bug #555373)
381    
382    beautifulsoup
383            - python-mechanize <unfixed> (embed; bug #555349)
384            - zope2.11 <removed> (embed; bug #555350)
385            - twill <unknown> (embed)
386    
387  halibut  halibut
388          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
389    
390  libghttp  libghttp
391          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
392    
393  libsndfile  libsndfile
394          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
395    
396  glibmm2.4  glibmm2.4
397          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
398    
399  libgnomecanvasmm2.6  libgnomecanvasmm2.6
400          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
401    
402  libsigc++-2.0  libsigc++-2.0
403          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
404    
405  soundtouch  soundtouch
406          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
407    
408  libmms  libmms
409          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
410          - mimms <unfixed> (embed)          - mimms <unfixed> (embed)
411    
412  fckeditor  fckeditor
413          - knowledgeroot <unfixed> (embed)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
414          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
415          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
416          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
417            - request-tracker3.8 <unfixed> (embed)
418            - otrs2 <unfixed> (embed)
419    
420  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
421          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
422    
423  libphp-phpmailer  libphp-phpmailer
424          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
425            - mahara <unfixed> (embed)
426            - symfony <unfixed> (embed; bug #566778)
427            [etch] - phpgroupware <unfixed> (embed)
428            NOTE: phpgroupware-felamimail is only in etch
429            - egroupware <unfixed> (embed; bug #504283)
430            - glpi <unfixed>
431    
432  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
433          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
434    
435  bennu (not packaged in Debian)  giflib
436          - moodle <unfixed> (embed)          - wine <unfixed> (embed; bug #466181)
437    
438  smarty:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
439          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
440    
441    smarty
442            - moodle 1.8.2-2 (embed; bug #471158)
443            - gallery2 2.2.5-2 (embed; bug #471160)
444            - mahara 0.9.2-2 (embed; bug #471201)
445            - gosa 2.4beta1-1 (embed; bug #471200)
446    
447  TinyMCE  TinyMCE
448          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
449          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
450          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
451          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
452    
453  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
454          - scite <unfixed> (embed)          - scite <unfixed> (embed)
455          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
456          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
457          - geany <unfixed> (embed)          - geany <unfixed> (fork)
458            - anjuta <unfixed> (embed)
459    
460  libphp-adodb  libphp-adodb
461          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
462          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
463          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
464          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
465          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
466          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
467            - torrentflux 2.0beta1-2 (embed)
468          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
469          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
470          - cacti <unknown> (embed)          - cacti <unknown> (embed)
471          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
472          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
473            - gforge 4.7~rc2-6 (embed)
474            - mahara <unfixed> (embed)
475    
476  gzip  gzip
477          - linux-kernel <unfixed> (embed)          - linux-2.6 <unfixed> (embed) [lib/inflate.c]
         NOTE: lib/inflate.c  
478          - klibc <unfixed> (embed)          - klibc <unfixed> (embed)
479          NOTE: based on linux-kernel gzip code          NOTE: based on linux-kernel gzip code
480          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
481            - pristine-tar <unfixed> (modified-embed)
482            NOTE: compression code only, not uncompression
483            - ncompress <unfixed> (old-version)
484    
485  neon  neon
486          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
487          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
488          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
489            - litmus <removed> (embed; #395875)
490          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
491          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
492          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
493          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
494    
495  libmodplug  libmodplug
496          - gst-plugins-bad0.10 <unfixed> (embed)          - gst-plugins-bad0.10 0.10.10.2-1 (embed)
497    
498  libvncserver  libvncserver
499          - vino <unfixed> (embed)          - vino <unfixed> (embed)
# Line 322  libvncserver Line 501  libvncserver
501  putty  putty
502          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
503    
504  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
505          - filezilla <unfixed>          - filezilla <unfixed>
506            - crystalspace <unfixed> (embed)
507            - libwfut <unfixed> (embed)
508            - rarian <unfixed> (embed)
509            - bulletml <unfixed> (embed)
510            - pokerth <unfixed> (embed)
511            - qutecom <unfixed> (embed)
512            - sofa-framework <unfixed> (embed)
513            - yate <unfixed> (embed)
514            - antigrav <unfixed> (embed)
515            - balder2d <unfixed> (embed)
516            - cal3d <unfixed> (embed)
517            - criticalmass <unfixed> (embed)
518            - ember <unfixed> (embed)
519            - epiphany <unfixed> (embed)
520            - gambit <unfixed> (embed)
521            - noiz2sa <unfixed> (embed)
522            - ogre <unfixed> (embed)
523            - opencity <unfixed> (embed)
524            - openmovieeditor <unfixed> (embed)
525            - pouetchess <unfixed> (embed)
526            - tecnoballz <unfixed> (embed)
527            - trigger-rally <unfixed> (embed)
528            - xmoto <unfixed> (embed)
529            - mapnik <unknown> (embed)
530            NOTE: uses a different XML parser by default
531            - rrootage 0.23a-6 <embed>
532            NOTE: links to libbulltetml
533            - boson <unknown> (embed)
534            NOTE: the embedded code is unused
535    
536  gv  gv
537          - evince <unfixed> (embed)          - evince <unfixed> (embed)
538          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
539          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
540    
541  libXbae  libXbae
542          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <unfixed> (embed)
543          NOTE: from Cernlib  
544    libgtkhtml
545            - claws-mail-extra-plugins <unfixed> (fork)
546    
547  libXaw  libXaw
548          [etc] - libpawlib2-lesstif          - paw <unfixed> (embed)
         NOTE: from Cernlib  
549          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
550    
551  libgd2  libgd2
552          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
553          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
554            - wml 2.0.11ds2-1 (embed)
555            - libwmf <unfixed> (embed)
556            NOTE: derived from gd 1.6.3
557            - texlive-bin 2009-1 (embed)
558    
559  rar  rar
560          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 356  mplayer (DirectMedia Object loader) Line 568  mplayer (DirectMedia Object loader)
568          NOTE: src/libw32dll/          NOTE: src/libw32dll/
569          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
570          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
571            - mplayer 1.0~rc2-20 (embed)
572    
573  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
574          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 364  fsplib (http://sourceforge.net/projects/ Line 577  fsplib (http://sourceforge.net/projects/
577          - gftp <unfixed> (embed)          - gftp <unfixed> (embed)
578          NOTE: lib/fsplib version 0.3          NOTE: lib/fsplib version 0.3
579    
580    sprng
581            - tree-puzzle <unfixed> (embed)
582    
583  librpcsecgss  librpcsecgss
584          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
585    
586  jasper  jasper
587          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
588    
589    libiris
590            - psi <unfixed> (embed)
591            - kdenetwork <unfixed> (embed)
592            NOTE: kopete embeds libiris but links dynamically to libidn
593            - kdegames <unfixed> (embed)
594            NOTE: ksirk/kde4
595    
596  libidn  libidn
597          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
598            - psi <unfixed> (embed)
599  liblua          NOTE: psi embeds libiris which embeds libidn
600          - monotone <unfixed> (embed)          - kdegames <unfixed> (embed)
601            NOTE: kdegames/kde4 embeds libiris which embeds libidn
602    
603    lua5.1
604            - monotone 0.43-1 (embed)
605            - nmap 5.00-1 (embed; bug #527997)
606            [lenny] - nmap <unfixed> (embed; bug #527997)
607            - ocropus <unfixed> (embed)
608            - enigma <unfixed> (embed)
609            NOTE: requires lua built with C++
610            - freeciv <unfixed> (embed)
611            - spring <unfixed> (embed)
612    
613  libbotan  libbotan
614          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
615    
616  NetXX  NetXX
617          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
618    
619  libgc  libgc
620          - mono <unfixed> (embed)          - mono <unfixed> (embed)
621    
622  lzma  lzma
623          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
624            - xz-utils <unfixed> (fork)
625    
626  lzo  lzo
627          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
628    
629    yassl
630            - mysql-dfsg-5.0 <unfixed> (embed)
631            - mysql-5.1 <unfixed> (embed)
632    
633  pax code  pax code
634          - tar <unfixed> (embed)          - tar <unfixed> (embed)
635          - cpio <unfixed> (embed)          - cpio <unfixed> (embed)
# Line 399  pax code Line 637  pax code
637  t1lib  t1lib
638          - tetex-bin 2.0.2-1 (embed)          - tetex-bin 2.0.2-1 (embed)
639          - texlive-bin <unknown> (embed)          - texlive-bin <unknown> (embed)
640    
641    guichan
642            - boswars <unfixed> (embed)
643            NOTE: maintainer notified us, working on it
644    
645    tolua
646            - boswars <unfixed> (embed)
647            NOTE: maintainer notified us, working on it
648            NOTE: actually tolua++
649            - ocropus <unfixed> (embed)
650            NOTE: actually tolua++
651            - freeciv <unfixed> (embed)
652            NOTE: actually tolua++
653            - enigma <unfixed> (embed)
654    
655    asio-dev
656            - luxrender <removed> (embed)
657    
658    xine-lib
659            - vlc <unfixed> (embed)
660            NOTE: only parts included in modules/access/rtsp
661    
662    netpbm
663            - tcl8.3 <unfixed> (embed)
664            - tcl8.4 <unfixed> (embed)
665            - tcl8.5 <unfixed> (embed)
666            NOTE: generic/tkImgGIF.c
667    
668    tk8.5
669            - tk8.0 <removed> (old-version)
670            - tk8.3 <unfixed> (old-version)
671            - tk8.4 <unfixed> (old-version)
672            - perl-tk <unfixable> (fork)
673    
674    samba
675            - mc 2:4.6.2~git20080311-1 (embed)
676            NOTE: maintainer is aware of this, currently searching a solution
677    
678    plib1.8.4c2
679            - boson <unfixed> (fork)
680            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
681    
682    fribidi
683            - quesoglc 0.7.2-2 (embed)
684    
685    glew
686            - quesoglc <unfixed> (embed; bug #489341)
687            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
688            - trigger 0.5.2.1-2 (embed)
689            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
690            - trigger-rally 0.5.2.1-2 (embed)
691            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
692            - chromium-browser 5.0.375.70~r48679-2
693    
694    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
695            - transcend <unfixed> (embed)
696            - cultivation <unfixed> (embed)
697            - passage <unfixed> (embed)
698            - gravitation <unfixed> (embed)
699    
700    tar
701            - libarchive <unfixed> (embed)
702            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
703    
704    cpio
705            - libarchive <unfixed> (embed)
706            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
707    
708    kde4libs
709            - kdelibs <unfixable> (old-version)
710    
711    webkit
712            - qt4-x11 <unfixed> (embed; bug #479851)
713            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
714            - kde4libs <unfixable> (fork)
715            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
716            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
717            - chromium-browser <unfixed> (fork)
718    
719    ftgl
720            - blender 2.46+dfsg-1 (embed)
721    
722    wv
723            - abiword <unfixed>
724    
725    qemu
726            - kvm <removed> (embed; bug #543159)
727            - qemu-kvm <unfixed> (embed; bug #560853)
728            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
729            - xen-3 3.4.2-2 (embed; bug #560856)
730            - xen-unstable <unfixed> (embed; bug #560856)
731    
732    vgabios
733            - kvm <removed> (embed; bug #489442)
734            - qemu-kvm <unfixed> (embed)
735    
736    bochs
737            - kvm <removed> (embed; bug #489442)
738            - qemu-kvm <unfixed> (embed)
739    
740    speex
741            - vorbis-tools <unfixed> (embed)
742            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
743            - gst-plugins-good0.10 <unfixed> (embed)
744            - xine-lib <unfixed> (embed)
745            - libfishsound <unfixed> (embed)
746            - libannodex <removed> (embed)
747            - vlc <unfixed> (embed)
748            - xmms-speex <unfixed> (embed)
749            - libsdl-sound1.2 <unfixed> (embed)
750            - sweep <unfixed> (embed)
751    
752    libreadline
753            - magic <itp> (old-version)
754    
755    opcode
756            - ode <unfixed> (embed)
757            NOTE: opcode is not a package in debian, it is just embedded
758            NOTE: http://www.codercorner.com/Opcode.htm
759    
760    gimpact
761            - ode <unfixed> (embed)
762            NOTE: gimpact is not a package in debian, it is just embedded
763            NOTE: http://gimpact.sf.net
764    
765    mochikit
766            - mahara <unfixed> (embed)
767            NOTE: they require extra patches, still unmerged upstream
768            - ntop <unfixed> (embed)
769            - coherence 0.6.2-1 (embed)
770            - paste <unfixed> (embed)
771            - turbogears <unfixed> (embed)
772            - plone3 <removed> (embed)
773            - xulrunner <unfixed> (embed)
774            - libjifty-plugin-chart-perl <unfixed> (embed)
775            - sabnzbdplus <unfixed> (embed)
776            - tgmochikit <unfixed> (embed)
777    
778    prototypejs
779            - netbeans-ide 6.0.1+dfsg-2 (embed)
780            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
781            - webcit <unfixed> (embed; bug #555219)
782            - asterisk 1:1.6.2.0~rc3-1 (embed)
783            - libjson-ruby 1.1.4-1 (embed; bug #555224)
784            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
785            - horde3 <unfixed> (embed)
786            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
787            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
788            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
789            - ebug-http <unfixed> (embed; bug #555236)
790            - libaws 2.7-1 (embed; bug #555222)
791            - phpgedview <removed> (embed)
792            - poker-network 1.7.6-1 (embed; bug #555238)
793            - rails 2.1.0-6 (embed)
794            - wordpress 2.5.0-2 (embed; bug #555243)
795            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
796            TODO: search through all of the other zope packages
797            - ampache 3.4.1-2 (embed)
798            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
799            - hobix 0.5~svn20070319-4 (embed; bug #555247)
800            - zabbix 1.6.6-4 (embed; bug #555250)
801            - chora2 2.1.1+debian0-1 (embed; bug #555253)
802            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
803            - jscropperui 1.2.1-1 (embed; bug #555257)
804            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
805            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
806            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
807            - activeldap 1.2.1-1 (embed)
808            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
809            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
810            - otrs2 2.3.4-6 (embed; bug #555267)
811            - webcalendar 1.2~b1-2 (embed; bug #555269)
812            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
813            - jifty 0.90519-1 (embed; bug #555271)
814            - jquery 1.4-1 (embed; bug #555272)
815            - passenger 2.2.5debian1-1 (embed; bug #555273)
816            - plone3 <removed> (embed; bug #555275)
817            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
818            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
819            - xulrunner <unfixed> (embed)
820            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
821            - jclicmoodle <unfixed> (embed)
822            - git-cola <unfixed> (embed)
823    
824    gdb
825            - insight <unfixed> (embed)
826    
827    e2fsprogs
828            - ldiskfsprogs <unfixable> (fork)
829    
830    quazip (not packaged in Debian)
831            - qcake <unfixed> (embed)
832            NOTE: starting with upstream version 0.6.4
833    
834    exo
835            - pcmanfm <unfixed> (embed; bug #499677)
836            NOTE: slightly modified source code
837    
838    java
839            - openjdk-6 <unfixed>
840            - sun-java5 <unfixed>
841            - sun-java6 <unfixed>
842    
843    libphp-snoopy
844            - ampache 3.4.1-2 (embed; bug #504169)
845            - gforge 4.6.99+svn6094-2 (embed)
846            - mahara 1.0.5-2 (embed; bug #504170)
847            - pixelpost 1.7.1-5 (embed; bug #504171)
848            - mediamate 0.9.3.6-5 (embed; bug #504172)
849            - opendb <removed> (embed; bug #504173)
850            [etch] - opendb <unfixed> (embed; bug #504173)
851            - wordpress 2.5.1-9 (embed; bug #443948)
852            - moodle <unfixed> (embed; bug #507185)
853            [etch] - phpgroupware <unfixed> (embed)
854            NOTE: phpgroupware-felamimail
855            - magpierss 0.72-3 (embed; bug #431089)
856    
857    jquery
858            - zekr <unfixed> (embed)
859            - wordpress <unknown> (embed)
860            - yocto-reader <unfixed> (embed)
861            - textpattern <unfixed> (embed)
862            - genshi 0.5.1-1 (embed)
863            NOTE: compressed file under examples/ dir
864            - prewikka <unfixed> (embed)
865            - libramaze-ruby <unfixed> (embed)
866            - drupal6 <unfixed> (embed)
867            - b2evolution <unfixed> (embed)
868            - wesnoth <unfixed> (embed)
869    
870    tablesorter (jquery plugin, not packaged yet)
871            - wesnoth <unfixed> (embed)
872    
873    kses
874            - wordpress <unfixed> (embed; bug #504242)
875            NOTE: their copy has all methods renamed to wp_<foo>
876            NOTE: kses isn't in Debian, RFP: #504240
877            - moodle <unfixed> (embed; bug #507185)
878            - egroupware <unfixed> (embed)
879    
880    magpierss
881            - wordpress <unfixed> (embed; bug #504242)
882            - moodle <unfixed>
883    
884    php-gettext
885            - wordpress 2.8.4-1 (embed; bug #504242)
886            - docbookwiki <unfixed> (embed)
887            - knowledgeroot 0.9.9.5-1
888            NOTE: non-free
889    
890    libphp-ixr (name may change, it is the Incutio XML-RPC)
891            - wordpress <unfixed> (embed; bug #504242)
892            NOTE: libphp-ixr isn't in Debian, RFP: #504236
893            - dokuwiki <unfixed> (embed)
894            - textpattern <unfixed> (embed)
895    
896    libphp-cas
897            - glpi <unfixed> (embed)
898            - moodle <unfixed> (embed; bug #505984)
899    
900    scriptaculous (prototype.js is among the embeds in the following)
901            - glpi <unfixed> (embed)
902            - libaws <unfixed> (embed; bug #555222)
903            - op-panel <unfixed> (embed)
904            - symfony <unfixed> (embed)
905            NOTE: maintainer says there are extra incompatible changes required
906            - pixelpost 1.7.1-6 (embed)
907            - webhelpers <unfixed> (embed)
908            - qwik <removed> (embed; bug #555241)
909            - smokeping <unfixed> (embed)
910            - turba2 <unfixed> (embed)
911            - typo3-src 4.2.3-1 (embed)
912            - request-tracker3.6 <unfixed> (embed)
913            - request-tracker3.8 <unfixed> (embed)
914            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
915            - wordpress 2.5.0-2 (embed)
916            - libhtml-prototype-perl 1.48-3 (embed)
917    
918    libmarkdown-php
919            - moodle <unfixed> (embed; bug #507185)
920            - pixelpost 1.7.1-6 (embed)
921    
922    php-openid
923            - wordpress-openid 3.3.2-1 (embed)
924    
925    geshi
926            - dokuwiki 0.0.20080505-3.1 (embed)
927            - pgfouine 1.0-1.1 (embed)
928            - websvn 2.1.0-1 (embed)
929    
930    webcalendar
931            - gforge 4.7~rc2-6 (embed; bug #504758)
932    
933    libical
934            - kdepim <unknown> (fork)
935            NOTE: fixed at some point during 4.0
936            - kdepimlibs 4.2.0-1 (fork)
937            - claws-mail-extra-plugins <unfixed> (fork)
938    
939    harfbuzz
940            - qt4-x11 <unfixed> (embed)
941            - pango1.0 <unfixed> (embed)
942            - fontmatrix <unfixed> (embed)
943    
944    libzip
945            - php5 <unfixable> (modified-embed)
946            - odt2txt <unfixed> (embed; bug #523808)
947    
948    json.php (not packaged; should be replaced with php's built-in functions)
949            - moodle <unfixed>
950            - yui <unfixed>
951            - gallery2 <unfixed>
952            - dokuwiki <unfixed>
953            - typo3-src <unfixed>
954    
955    php-fpdf
956            - tcpdf <itp> (fork)
957            - moodle <unfixed>
958            - phpwiki <unfixed>
959            - egroupware <unfixed>
960            - ldap-account-manager <unfixed> (fork)
961    
962    tcpdf (itp: #495985)
963            - moodle <unfixed>
964            - phpmyadmin <unfixed>
965    
966    typo3
967            - moodle <unfixed>
968    
969    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
970            - moodle <unfixed>
971            - gosa <unfixed>
972    
973    php-ole (itp: #487558)
974            - moodle <unfixed>
975    
976    pieforms (http://www.catalyst.net.nz)
977            - mahara <unfixed>
978    
979    savant2 (http://phpsavant.com)
980            - egroupware <unfixed>
981    
982    rssparser (http://nwow.org)
983            - egroupware <unfixed>
984            - phpgroupware <unfixed>
985    
986    lcms
987            - openjdk-6 <unfixed> (fork)
988            - gimp 2.4.0~rc2-2
989    
990    libphp-phplayersmenu
991            - diogenes <unfixed>
992            - phpldapadmin <unfixed>
993    
994    libphp-pclzip
995            - docvert <unfixed>
996            - moodle <unfixed>
997            - egroupware <unfixed>
998    
999    libphp-simplepie
1000            - dokuwiki <unfixed>
1001            - wordpress <unfixed>
1002    
1003    libphp-jpgraph
1004            - egroupware <unfixed>
1005    
1006    php-simpletest
1007            - moodle <unfixed>
1008    
1009    libpng
1010            - iceweasel <not-affected> (uses xulrunner)
1011            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1012            - iceape 1.0.13~pre080614i-0etch1 (embed)
1013            - xulrunner 1.9.0.13-1 (embed)
1014            [lenny] - xulrunner 1.9.0.11-0lenny1
1015            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1016            - gamera 3.2.3-1 (embed)
1017            - freeimage <unfixed> (embed)
1018            - tuxonice-userui <unfixed> (static)
1019    
1020    irssi
1021            - silc-client <unfixed> (embed)
1022            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1023    
1024    extc
1025            - mtasc <unfixed> (embed)
1026            - haxe <unfixed> (embed)
1027    
1028    swflib
1029            - mtasc <unfixed> (embed)
1030            - haxe <unfixed> (embed)
1031    
1032    libitext-java
1033            - bouncycastle 2.1.4-1 (embed)
1034    
1035    python-ply
1036            - pyke <unfixed> (embed; bug #555363)
1037            - pywbem 0.7.0-4 (embed; bug #555364)
1038            - sepolgen <unfixed> (embed; bug #555365)
1039            - zope-textindexng3 <unknown> (embed)
1040            - iceweasel <not-affected> (uses xulrunner)
1041            - xulrunner <unknown> (embed)
1042            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1043    
1044    libdumbnet (libdnet upstream)
1045            - nmap <unfixed> (fork)
1046    
1047    gcc-4.4
1048            - gcc-mingw32 <unfixed> (embed)
1049    
1050    camlimages
1051            - advi <unfixed> (static; bug #550441)
1052    
1053    memcached
1054            - memcachedb <unfixed> (embed)
1055    
1056    yajl
1057            - argyll <unfixed> (embed; bug #544223)
1058            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1059    
1060    nusoap
1061            - gforge 4.8.2-1 (embed)
1062            - ampache <unfixed> (embed)
1063            - poker-network <unfixed> (embed)
1064            - moodle <unfixed> (embed)
1065            NOTE: code is not used when running under php5 and soap is enabled
1066            - phpwiki <unfixed> (embed)
1067            - gallery2 <unfixed> (embed)
1068            - typo3-src <unfixed> (embed)
1069            - phpgacl 3.3.7-7 (embed)
1070            - mantis 1.1.8+dfsg-1 (embed)
1071    
1072    libept
1073            - adept <unfixed> (embed; bug #540649)
1074    
1075    libvorbis
1076            - iceweasel <not-affected> (uses xulrunner)
1077            - xulrunner <unfixed> (embed; bug #540959)
1078            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1079            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1080            - iceape <unfixed> (embed)
1081            [etch] - iceape <not-affected> (introduced in 2.0)
1082            [lenny] - iceape <not-affected> (introduced in 2.0)
1083    
1084    cairo
1085            - iceweasel <not-affected> (uses xulrunner)
1086            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1087    
1088    liboggz
1089            - iceweasel <not-affected> (uses xulrunner)
1090            - xulrunner <unfixed> (embed; bug #540959)
1091            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1092            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1093            - iceape <unfixed> (embed)
1094            [etch] - iceape <not-affected> (introduced in 2.0)
1095            [lenny] - iceape <not-affected> (introduced in 2.0)
1096    
1097    liboggplay
1098            - iceweasel <not-affected> (uses xulrunner)
1099            - xulrunner <unfixed> (embed; bug #540959)
1100            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1101            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1102            - iceape <unfixed> (embed)
1103            [etch] - iceape <not-affected> (introduced in 2.0)
1104            [lenny] - iceape <not-affected> (introduced in 2.0)
1105    
1106    php-net-dnsbl
1107            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1108    
1109    php-onyx-rss
1110            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1111    
1112    php-text-wiki
1113            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1114    
1115    php-xml-rpc
1116            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1117    
1118    polarssl (does not have a shared library)
1119            - pdkim <itp> (embed; bug #543150)
1120            - xyssl <unfixed> (old-version)
1121    
1122    pidgin (libpurple)
1123            - gaim <removed> (old-version)
1124            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1125    
1126    icu
1127            - webkit 1.0.1-1 (embed; bug #547214)
1128            - texlive-bin <unfixed> (fork)
1129            NOTE: texlive upstream working with icu upstream to merge their changes
1130            - chromium-browser 5.0.375.29~r46008-3
1131    
1132    cyrus-imapd-2.2
1133            - kolab-cyrus-imapd <unfixed> (fork)
1134            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1135    
1136    python-cxx-dev
1137            - freecad 0.9.2646.3-1 (embed; bug #547936)
1138    
1139    zipios++
1140            - freecad 0.9.2646.3-1 (embed; bug #547941)
1141            - enigma 0.92.3-3 (embed)
1142            NOTE: likely fixed earlier, marking etch's version as fixed
1143    
1144    linux-2.6
1145            - kvm <removed> (embed; bug #549973) [./kernel/*]
1146            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1147            - kernel-source-2.6.8 <removed> (old-version)
1148            - kernel-source-2.4.27 <removed> (old-version)
1149            - kernel-source-2.4.24 <removed> (old-version)
1150            - kernel-source-2.2.25 <removed> (old-version)
1151            - kernel-source-2.2.20 <removed> (old-version)
1152    
1153    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1154            - kvm <removed> (embed) [./libfdt/*]
1155            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1156    
1157    qweb (not packaged)
1158            - ajaxterm <unfixed>
1159    
1160    opensaml2
1161            - opensaml <removed> (old-version)
1162    
1163    shibboleth-sp2
1164            - shibboleth-sp <removed> (old-version)
1165    
1166    tuxonice-userui
1167            - suspend2-userui <removed> (old-version)
1168    
1169    expat
1170            - w3c-libwww <removed> (embed; bug #551941)
1171            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1172            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1173            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1174            - python2.4 <unfixable> (embed; bug #553403)
1175            - python2.7 2.7-6 (embed)
1176            - python-4suite <unfixed> (embed; bug #516935)
1177            - wxwindows2.4 <removed> (embed)
1178            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1179            - wxwidgets2.8 2.8.10.1-2 (embed)
1180            - celementtree 1.0.5-8 (embed)
1181            NOTE: Maybe that was fixed even earlier
1182            - audacity 1.3.2-1 (embed)
1183            - matanza <unfixed> (embed)
1184            - tdom 0.8.3~20080525-1 (embed)
1185            - udunits 2.1.8-4 (embed)
1186            - apr-util 1.2 (embed)
1187            - ayttm <unfxed> (embed; bug #561006)
1188            - cableswig <unfixed> (embed)
1189            - cadaver <unfixed> (embed)
1190            - cmake 2.6.0-6 (embed)
1191            - coin3 <unfixed> (embed)
1192            - gdcm 2.0.14-2 (embed)
1193            - ghostscript 8.71~dfsg-2 (embed)
1194            - grmonitor <removed> (embed)
1195            - iceape <unfixed> (embed)
1196            - insighttoolkit 3.16.0-1 (embed)
1197            NOTE: insighttoolkit might've been fixed earlier
1198            - libparagui1.1 1.0.2-1 (embed)
1199            - paraview 3.6.2-1 (embed)
1200            - poco 1.3.6p1-1 (embed)
1201            - simgear <unfixed> (embed)
1202            - sitecopy 1:0.16.0-1
1203            - smart <unfixed> (embed)
1204            NOTE: smart embeds celementree, and it includes expat
1205            - swish-e <not-affected> (Linked against libxml, which is used instead)
1206            - tla 1.3.5+dfsg-15 (embed)
1207            - vtk 4.1.20030227-1 (embed)
1208            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1209            - xmlrpc-c <unfixed> (embed)
1210            - iceweasel <unfixed> (embed)
1211            - kompozer <unfixed> (embed)
1212            - vxl 1.13.0-2 (embed)
1213            - xulrunner <unfixed> (embed)
1214            - apache2 2.2 (embed)
1215            - texlive-bin <not-affected> (Embedded code not compiled in)
1216            - vnc4 <unfixed> (embed)
1217            - xotcl 1.6.6-1 (embed)
1218            - chromium-browser 5.0.375.29~r46008-3
1219    
1220    xerces-c
1221            - xerces-c2 <unfixed> (old-version)
1222            - xerces27 <removed> (old-version)
1223    
1224    md5 (RSA's version; not the gnu version provided by coreutils)
1225            - w3c-libwww <removed> (embed; bug #551942)
1226            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1227    
1228    libparagui1.1
1229            - asc <unfixable> (fork)
1230    
1231    enet
1232            - sauerbraten <unfixed> (embed; #497194)
1233    
1234    eglibc
1235            - glibc <removed> (old-version)
1236            - mksh <unfixable> (static)
1237              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1238    
1239    galib
1240            - gamera 3.2.3-1 (embed)
1241    
1242    configobj
1243            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1244            - elisa <unfixed> (embed; bug #555337)
1245            - gaupol <unfixed> (embed; bug #555338)
1246            - ipython <unfixed> (embed; bug #555339)
1247            - pida <unfixed> (embed; bug #555340)
1248            - psychopy <unfixed> (embed; bug #555341)
1249            - rest2web <unfixed> (embed; bug #555342)
1250            - auth2db <unknown> (embed)
1251            - dynagen <unknown> (embed)
1252            - iceweasel <unknown> (embed)
1253            - sabnzbdplus <unknown> (embed)
1254            - xulrunner <unknown> (embed)
1255            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1256    
1257    python-clientform
1258            - bibus <unfixed> (embed; bug #555332)
1259            - zope2.10 <unfixed> (embed; bug #555333)
1260            - zope2.11 <removed> (embed; bug #555334)
1261            - python-mechanize <unknown> (embed)
1262            - twill <unknown> (embed)
1263    
1264    python-mechanize
1265            - zope2.10 <unfixed> (embed; bug #555337)
1266            - zope2.11 <removed> (embed; bug #555338)
1267            - twill <unknown> (embed; bug #555339)
1268    
1269    pexpect
1270            - duplicity 0.6.06-1 (embed; bug #555361)
1271            - hplip <unfixed> (embed; bug #555362)
1272            - smart <unfixed> (embed; bug #555363)
1273    
1274    pyparsing
1275            - bauble <unfixed> (embed; bug #555366)
1276            - boa-constructor 0.6.1-8 (embed; bug #555367)
1277            - calibre <unfixed> (embed; bug #555368)
1278            - matplotlib <unfixed> (embed; bug #531024)
1279            - zhpy 1.7.3.1-1 (embed; bug #555370)
1280            - polybori <unknown> (embed)
1281            - python-whoosh <unknown> (embed)
1282            - twill <unknown> (embed)
1283            - zope-textindexng3 <unknown> (embed)
1284    
1285    python-pysqlite2
1286            - python2.4 <unfixed> (embed; bug #553403)
1287            - python2.5 <unfixed> (embed; bug #553403)
1288    
1289    celementtree
1290            - python2.5 <unfixed> (embed)
1291            - smart <unfixed> (embed)
1292    
1293    elementtree
1294            - python2.5 <unfixed> (embed)
1295            - python2.6 <unfixed> (embed)
1296            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1297            - gedit 2.28.2-1 (embed; bug #555344)
1298            - smart <unfixed> (embed)
1299            - solfege <unfixed> (embed; bug #555345)
1300            - w3af <unfixed> (embed; bug #555346)
1301            - python-qt4 <unknown> (embed)
1302            - sphinx <unknown> (embed)
1303            - python-nltk <itp> (embed)
1304    
1305    python2.5
1306            - python2.4 <unfixed> (old-version)
1307            - jython <unfixed> (embed)
1308            NOTE: embeds many stdlib modules
1309            - python-django <unfixed> (embed; bug #555419)
1310            NOTE: embeds stdlib modules: doctest, decimal
1311            - gamera 3.2.3-1 (embed)
1312            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1313            - boa-constructor <unfixed> (embed; bug #555426)
1314            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1315            - nicotine <unfixed> (embed; bug #555427)
1316            NOTE: embeds stdlib modules: ConfigParser
1317            - museek+ <unfixed> (embed; bug #555428)
1318            NOTE: embeds stdlib modules: ConfigParser
1319            - vegastrike-data <removed> (embed)
1320            NOTE: embeds many stdlib modules
1321            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1322            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1323            - config-manager <unfixed> (embed; bug #555423)
1324            NOTE: embeds stdlib modules: optparse
1325            - jhbuild 2.28.0-1 (embed; bug #555421)
1326            NOTE: embeds stdlib modules: optparse, subprocess
1327            - smart <unfixed> (embed; bug #555432)
1328            NOTE: embeds stdlib modules: optparse
1329            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1330            NOTE: embeds stdlib modules: doctest
1331            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1332            NOTE: embeds stdlib modules: doctest
1333            - distribute <unfixed> (embed)
1334            NOTE: embeds stdlib modules: doctest
1335            - python-setuptools <unfixed> (embed; bug #555435)
1336            NOTE: embeds stdlib modules: doctest
1337            - zope.testing <unfixed> (embed; bug #555436)
1338            NOTE: embeds stdlib modules: doctest
1339            - translate-toolkit <unfixed> (embed; bug #555422)
1340            NOTE: embeds stdlib modules: textwrap, contextlib
1341            - libtpclient-py <unfixed> (embed; bug #555424)
1342            NOTE: embeds stdlib modules: subprocess
1343            - grass <unfixed> (embed; bug #555425)
1344            NOTE: embeds stdlib modules: subprocess
1345            - coherence <unfixed> (embed; bug #555429)
1346            NOTE: embeds stdlib modules: uuid
1347            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1348            NOTE: embeds stdlib modules: uuid
1349            - setroubleshoot <removed> (embed; bug #555431)
1350            NOTE: embeds stdlib modules: uuid
1351            - linkchecker <unfixed> (embed; bug #555414)
1352            NOTE: embeds msgfmt.py script
1353            - imdbpy <unfixed> (embed)
1354            NOTE: embeds msgfmt.py script
1355            - kiwi <unfixed> (embed)
1356            NOTE: embeds msgfmt.py script
1357            - moin <unfixed> (embed)
1358            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1359            - plone3 <removed> (embed)
1360            NOTE: embeds msgfmt.py script
1361            - roundup <unfixed> (embed)
1362            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1363            - rednotebook <unfixed> (embed; bug #555415)
1364            NOTE: embeds msgfmt.py script
1365            - turbogears <unfixed> (embed)
1366            NOTE: embeds msgfmt.py script
1367            - elisa <unfixed> (embed)
1368            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1369            - calibre <unfixed> (embed)
1370            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1371            - mailman 1:2.1.13-1 (embed; #555416)
1372            NOTE: embeds msgfmt.py script
1373            - python-docutils <unknown> (embed)
1374            NOTE: embeds stdlib modules: optparse, textwrap
1375            - python-imaging <unknown> (embed)
1376            NOTE: embeds stdlib modules: doctest
1377            - python-mechanize <unknown> (embed)
1378            NOTE: embeds stdlib modules: doctest
1379            - twill <unknown> (embed)
1380            NOTE: embeds stdlib modules: subprocess
1381            - zeroc-ice <unknown> (embed)
1382            NOTE: embeds stdlib modules: subprocess
1383            - wxwidgets2.8 <unknown> (embed)
1384            NOTE: embeds stdlib modules: subprocess
1385            - cycle <unknown> (embed)
1386            NOTE: embeds msgfmt.py script
1387            - deluge <unknown> (embed)
1388            NOTE: embeds msgfmt.py script
1389            - opendict <unknown> (embed)
1390            NOTE: embeds msgfmt.py script
1391            - openerp-client <unknown> (embed)
1392            NOTE: embeds msgfmt.py script
1393            - rapidsvn <unknown> (embed)
1394            NOTE: embeds msgfmt.py script
1395            - wammu <unknown> (embed)
1396            NOTE: embeds msgfmt.py script
1397            - gaphor <unknown> (embed)
1398            NOTE: embeds msgfmt.py script
1399            - pida <unknown> (embed)
1400            NOTE: embeds msgfmt.py script
1401            - python-formencode <unknown> (embed)
1402            NOTE: embeds msgfmt.py script
1403            - duplicity <unfixed> (embed)
1404            NOTE: embeds stdlib module: urlparse, tarfile
1405            - pygopherd <unfixed> (embed)
1406            NOTE: embeds stdlib module: zipfile
1407    
1408    argparse
1409            - twill <unfixed> (embed; bug #555347)
1410            - ipython <unfixed> (embed; bug #555348)
1411    
1412    coherence
1413            - elisa <unfixed> (embed; bug #555335)
1414    
1415    simpletal
1416            - plastex <unfixed> (embed; bug #555371)
1417    
1418    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1419            - postr <unfixed> (embed)
1420            - elisa <unfixed> (embed)
1421    
1422    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1423            - apertium-tolk <unfixed> (embed)
1424            - ipython <unfixed> (embed)
1425            - virtaal <unfixed> (embed)
1426    
1427    distribute
1428            - setuptools <removed> (old-version)
1429    
1430    rails
1431            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1432            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1433            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1434            - thin <unfixed> (embed) [./spec/rails_app/*]
1435            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1436            NOTE: be dangerous if developers are naively basing their code off of the examples
1437            NOTE: prototype.js is among the example files
1438    
1439    lucene2 (prototype.js is among the embeds in the following)
1440            - lucene <unfixed> (old-version)
1441            - pylucene <unfixed> (embed)
1442            - libpdfbox-java <unfixed> (embed)
1443            - libfontbox-java <unfixed> (embed)
1444            - libjempbox-java <unfixed> (embed)
1445            - solr <unfixed> (embed)
1446    
1447    unicode-data
1448            - syslinux <unfixed> (embed)
1449            - camomile <unfixed> (embed)
1450            - fribidi <unfixed> (embed)
1451            - m17n-db <unfixed> (embed)
1452            - sbcl <unfixed> (embed)
1453            - heimdal <unfixed> (embed)
1454            - icu <unfixed> (embed)
1455            - icu4j <unfixed> (embed)
1456            - krb5 <unfixed> (embed)
1457            - moodle <unfixed> (embed)
1458            - openldap <unfixed> (embed)
1459            - pike7.6 <unfixed> (embed)
1460            - samba <unfixed> (embed)
1461            - samba4 <unfixed> (embed)
1462            - cmucl <unfixed> (embed)
1463            - typo3-src <unfixed> (embed)
1464            - mauve <unfixed> (embed)
1465            - texlive-bin <unfixed> (embed)
1466            - ypsilon <unfixed> (embed)
1467            - jeuclid <unfixed> (embed)
1468            - charmap.app <unfixed> (embed)
1469            - clisp <unfixed> (embed)
1470            - gnulib <unfixed> (embed)
1471            - opensrs-client <unfixed> (embed)
1472            - saxonb <unfixed> (embed)
1473            - rails <unfixed> (embed)
1474    
1475    feedparser
1476            - rawdog <unfixed> (embed; bug #383422)
1477            - miro <unfixed> (embed; bug #555351)
1478            - calibre <unfixed> (embed; bug #555352)
1479            - freevo <unfixed> (embed; bug #555353)
1480            - pida <unfixed> (embed; bug #555354)
1481            - planet-venus <unfixed> (embed; bug #555355)
1482            - plone3 <removed> (embed; bug #555356)
1483            - exaile 0.2.14+debian-1 (embed)
1484            - screenlets 0.1.2-3 (embed)
1485            NOTE: included twice
1486    
1487    agg:
1488            - matplotlib <unfixed> (embed: bug #377271)
1489            - contextfree <unfixed> (embed)
1490            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1491            - exactimage <unfixed> (embed)
1492            - python-enable <unfixed> (embed)
1493            - mapnik 0.5.1-3 (embed)
1494            NOTE: links statically to agg, but shared library is not available (bug #377271)
1495    
1496    vtk
1497            - paraview <unfixable> (embed; bug #495426)
1498    
1499    txt2tags
1500            - rednotebook <unfixed> (embed)
1501    
1502    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1503            - gajim <unfixed> (embed)
1504            - emesene <unfixed> (embed)
1505            - convirt <unfixed> (embed)
1506            - pida <unfixed> (embed)
1507            - rednotebook <unfixed> (embed)
1508    
1509    horde3 (prototype.js is among the embeds in the following)
1510            - mnemo2 <unfixed> (embed)
1511            - nag2 <unfixed> (embed)
1512            - wordpress <unfixed> (embed)
1513            NOTE: Text_Diff (wp-includes/Text/Diff*)
1514    
1515    cimg
1516            - gmic <unfixed> (embed)
1517    
1518    mootools
1519            - kdenetwork <unfixed> (embed)
1520            - gallery <unfixed> (embed)
1521            - jspwiki <unfixed> (embed)
1522            - vdr-plugin-live <unfixed> (embed)
1523            - perl-doc-html <unfixed> (embed)
1524    
1525    openldap
1526            - openldap2.3 <removed> (old-version)
1527    
1528    grub2
1529            - grub <unfixed> (old-version)
1530    
1531    gnupginterface
1532            - duplicity <unfixed> (embed)
1533    
1534    python-dateutil
1535            - awn-extras-applets <unfixed> (embed)
1536            - matplotlib <unknown> (embed)
1537    
1538    cups
1539            - cupsys <removed> (old-version)
1540    
1541    yui
1542            - bcfg2 <not-affected> (present in source but not included in any binary files)
1543            - serendipity 1.5.3-1 (embed; bug #557746)
1544            - moodle 1.8.2.dfsg-5 (embed)
1545            - jifty 0.91117-1 (embed; bug #557748)
1546            - webgui 7.7.26-1 (embed)
1547            - loggerhead 1.17-1 (embed)
1548            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1549    
1550    quake3 (vanilla source not packaged in debian)
1551            - openarena <unfixable> (fork)
1552    
1553    quake2 (vanilla source not packaged in debian)
1554            - alien-arena <unfixable> (fork)
1555            - warsow <unfixable> (fork)
1556    
1557    libtheora
1558            - iceweasel <not-affected> (uses xulrunner)
1559            - xulrunner <unfixed> (embed; bug #540959)
1560            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1561            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1562            - iceape <unfixed> (embed; bug #559276)
1563            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1564            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1565    
1566    dtoa
1567            - bfilter <unfixed> (embed)
1568            - cacao <removed> (embed)
1569            - cdrdao <unfixed> (embed)
1570            - classpath <unfixed> (embed)
1571            - freej <unfixed> (embed)
1572            - iceape <unfixed> (embed)
1573            - iceweasel <unfixed> (embed)
1574            - jscoverage <unfixed> (embed)
1575            - kde4libs <unfixed> (embed)
1576            - kdelibs <unfixed> (embed)
1577            - kompozer <unfixed> (embed)
1578            - libv8 <unfixed> (embed)
1579            - mono <unfixed> (embed)
1580            - newlib <unfixed> (embed)
1581            - nspr <unfixed> (embed)
1582            - php5 <unfixed> (embed)
1583            - polyml <unfixed> (embed)
1584            - qt4-x11 <unfixed> (embed)
1585            - rhino <unfixed> (embed)
1586            NOTE: code translated to Java
1587            - ruby1.8 <unfixed> (embed)
1588            - ruby1.9 <unfixed> (embed)
1589            - ruby1.9.1 <unfixed> (embed)
1590            - sdd <unfixed> (embed)
1591            - sfind <unfixed> (embed)
1592            - star <unfixed> (embed)
1593            - tinymux <unfixed> (embed)
1594            - virtualbox-ose <unfixed> (embed)
1595            - webkit <unfixed> (embed)
1596            - xulrunner <unfixed> (embed)
1597    
1598    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1599            - firegpg <unfixed> (embed)
1600            - enigmail <unfixed> (embed)
1601    
1602    ptmalloc (not packaged in Debian)
1603            - crystalspace <unfixed> (embed)
1604            - qt4-x11 <unfixed> (embed)
1605    
1606    svgalib
1607            - usplash <unfixed> (embed)
1608    
1609    bogl
1610            - usplash <unfixed> (embed)
1611    
1612    taglist
1613            - usplash <unfixed> (embed)
1614    
1615    portaudio
1616            - audacity <unfixed> (embed; bug #323711)
1617    
1618    nyquist
1619            - audacity <unfixed> (embed)
1620            NOTE: embeds a forked nyquist with support for a shared library
1621    
1622    vamp-plugin-sdk
1623            - audacity <unfixed> (embed)
1624    
1625    wordpress
1626            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1627            - wordpress-mu <removed> (fork)
1628    
1629    php5
1630            - php4 <removed> (old-version)
1631    
1632    classpath
1633            - libgnucrypto-java <removed> (embed; bug #559788)
1634    
1635    libtool
1636            - apr <unfixed> (static; bug #489625)
1637            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1638            - arts <unfixed> (embed)
1639            - bochs 2.4.2-1 (embed; bug #560884)
1640            - camserv <unfixed> (embed)
1641            - collectd 4.8.2-1 (embed)
1642            - courier-authlib 0.58-4 (embed)
1643            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1644            - cvsnt 2.5.04.3236-1.2 (embed)
1645            - dico <not-affected> (Uses the system copy of ltdl)
1646            - freeradius 0.1+20010527-1 (embed)
1647            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1648            - ggobi 2.1.9~20091212-1 (embed)
1649            - glame 2.0.1-4 (embed)
1650            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1651            - gnash 0.8.7-2 (embed)
1652            - gnu-smalltalk <unfixed> (embed; bug #566777)
1653            - google-gadgets 0.10.5-0.3 (embed)
1654            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1655            - graphicsmagick 1.3.5-6 (embed)
1656            - graphviz 2.8-3 (embed)
1657            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1658            - guile-1.6 1.6.8-7 (embed)
1659            - hamlib 1.2.11-1 (embed)
1660            - hercules 3.06-1.2 (embed)
1661            - jags 1.0.4-3 (embed; bug #560864)
1662            - kdelibs <unfixed> (embed)
1663            - libannodex <removed> (embed)
1664            - libextractor 0.5.23+dfsg-4 (embed)
1665            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1666            - libtunepimp 0.5.3-7.3 (embed)
1667            - mp4h 1.3.1-4.1 (embed)
1668            - naim <removed> (embed)
1669            - parser-mysql <unfixed> (embed)
1670            - pinball 0.3.1-11 (embed)
1671            - redland <unfixed> (embed)
1672            - siproxd <unfixed> (embed)
1673            - ski <unfixed> (embed)
1674            - synfig 0.62.00-1 (embed)
1675            - unixodbc 2.2.4-5 (embed)
1676            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1677            - clamav 0.95+dfsg-1 (embed)
1678            - imagemagick 6:6.2.3.1-1 (embed)
1679            - hypre 2.4.0b-5 (embed)
1680            - lam <unfixed> (embed)
1681            - openmpi <unfixable> (embed; bug #559386)
1682            - parser <unfixed> (embed)
1683            - pdsh 2.18-5 (embed; bug #560892)
1684            - sbnc 1.2-8 (embed)
1685            - sdcc <unfixed> (embed)
1686            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1687            - proftpd-dfsg <unfixed> (embed; bug #561748)
1688            - babel 1.4.0.dfsg-5 (embed)
1689            - libprelude 0.9.14-2 (embed)
1690            - heartbeat 2.1.4-7 (embed)
1691            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1692            NOTE: might've been fixed earlier
1693            - gcc-* <unknown> (embed)
1694    
1695    ocamlgsl
1696            - orpie 1.5.1-7.1 (embed; bug #550058)
1697    
1698    xdotool
1699            - keynav <unfixed> (embed; bug #560103)
1700    
1701    bulletphysics (not packaged; http://www.bulletphysics.org/)
1702            - supertuxkart <unfixed> (embed)
1703            - blender <unfixed> (embed)
1704    
1705    ghostscript
1706            - gs-gpl <removed> (old-version)
1707    
1708    icedove
1709            - thunderbird <removed> (old-version)
1710    
1711    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1712            - jquery <unfixed> (embed)
1713    
1714    sed
1715            - ssed <unfixed> (fork)
1716    
1717    phpatomlib (http://code.google.com/p/phpatomlib)
1718            - wordpress <unfixed> (embed)
1719    
1720    Services_JSON (http://pear.php.net/package/Services_JSON)
1721            - wordpress <unfixed> (embed)
1722    
1723    phpass (http://www.openwall.com/phpass/)
1724            - gallery2 <unfixed> (embed)
1725            - wordpress <unfixed> (embed)
1726            - typo3-src <unfixed> (modified-embed)
1727            NOTE: file refers to drupal, maybe there's a copy somewhere there
1728            NOTE: a copyright owner search didn't match anything
1729            - libauthen-passphrase-perl <unfixable> (fork)
1730            NOTE: perl implementation of phpass
1731    
1732    squirrelmail
1733            - wordpress <unfixed> (embed)
1734            NOTE: class-pop3.php
1735    
1736    ezSQL (http://www.woyano.com/jv/ezsql)
1737            - wordpress <unfixable> (fork)
1738            NOTE: wp-db.php
1739    
1740    Diff.php (Clay Loveless' version/killersoft.com)
1741            - php-versioncontrol-svn <unfixed>
1742    
1743    libm (provided by libc)
1744            - spring <unfixed> (embed)
1745            NOTE: embedded by embedded copy of streflop
1746            - aide <unfixed> (static)
1747            - busybox <unfixed> (static)
1748            - mindi-busybox <unfixed> (static)
1749            - qemu <unfixed> (static)
1750            NOTE: qemu-user-static
1751            - tuxonice-userui <unfixed> (static)
1752            - zsh <unfixed> (static)
1753            NOTE: zsh-static
1754            - tripwire <unfixed>
1755    
1756    streflop
1757            - spring <unfixed> (embed)
1758    
1759    minizip
1760            - spring <unfixed> (embed)
1761    
1762    oscpack
1763            - spring <unfixed> (embed)
1764    
1765    hpiutil2
1766            - spring <unfixed> (embed)
1767    
1768    p7zip
1769            - spring <unfixed> (embed)
1770    
1771    pythonqt (doesn't seem to be python-qtN, unknown source)
1772            - fontmatrix <unfixed> (embed)
1773            - elmerfem <unfixed> (embed)
1774    
1775    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1776            - docvert <unfixed> (embed)
1777            - jifty <unfixed> (embed)
1778            - kdenetwork <unfixed> (embed)
1779            - mediatomb <unfixed> (embed)
1780            - plastex <unfixed> (embed)
1781            - plone3 <removed> (embed)
1782            - python-chaco <unfixed> (embed)
1783            - python-docutils <unfixed> (embed)
1784            - s5 <unfixed> (embed)
1785            - zope2.10 <unfixed> (embed)
1786            - zope2.11 <removed> (embed)
1787            - cython <not-affcted> (embed)
1788            NOTE: part of documentation, which is not installed into the binary package
1789    
1790    python-docutils
1791            - zope2.10 <unfixed> (embed)
1792            - zope2.11 <removed> (embed)
1793    
1794    tesseract
1795            - ocropus <unfixed> (static)
1796    
1797    antlr
1798            - kdevelop <unfixed> (embed)
1799    
1800    libxerces2
1801            - openjdk-6 <unfixed> (embed)
1802    
1803    kfreebsd-8
1804            - kfreebsd-7 <unfixed> (old-version)
1805            - kfreebsd-6 <removed> (old-version)
1806    
1807    ruby1.9.1
1808            - ruby1.9 <unfixed> (old-version)
1809            - ruby1.8 <unfixed> (old-version)
1810    
1811    maildrop
1812            - courier <unfixed> (embed) [./maildrop]
1813    
1814    glee
1815            - warzone2100 <not-affected> (embed)
1816    
1817    phing
1818            - symfony <unfixed> (embed)
1819    
1820    pake
1821            - symfony <unfixed> (embed)
1822    
1823    propel
1824            - symfony <unfixed> (embed)
1825    
1826    creole
1827            - symfony <unfixed> (embed)
1828    
1829    hfsutils
1830            - cdrkit <unfixed> (embed; bug #570187)
1831            NOTE: embeds hfsutils code in genisoimage
1832    
1833    cdrkit
1834            - grub2 <unfixed> (embed; bug #570156)
1835            NOTE: genisoimage imported into grub-mkisofs
1836    
1837    kdebase-workspace
1838            - kdebase <unfixed> (old-version)
1839    
1840    file
1841            - php5 <unfixable> (modified-embed)
1842            [lenny] - php5 <not-affected>
1843    
1844    cdb
1845            - php5 <unfixed> (embed)
1846    
1847    libmbfl (itp: #570708)
1848            - php5 <unfixed> (embed)
1849            NOTE: PHP is actually the current upstream, ITP is of that code
1850    
1851    libonig
1852            - php5 5.3.2-1 (embed)
1853    
1854    xmlrpc-epi
1855            - php5 <unfixed> (embed)
1856    
1857    swt-gtk
1858            - eclipse <unfixed> (embed; bug #538808)
1859    
1860    txt2html
1861            - wml 2.0.11ds2-1 (embed)
1862    
1863    ca-certificates
1864            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1865    
1866    openexr
1867            - freeimage <unfixed> (embed)
1868    
1869    libmng
1870            - freeimage <unfixed> (embed)
1871    
1872    openjpeg
1873            - freeimage <unfixed> (embed)
1874    
1875    libjpeg6b
1876            - freeimage <unfixed> (embed)
1877    
1878    libjpeg (don't know what exact version)
1879            - dcmtk <unfixed>
1880            - gdcm <unfixed>
1881            - insighttoolkit <unfixed>
1882            - openarena <unfixed> (bug #495966)
1883            - outguess <unfixed>
1884            - squeak-vm <unfixed> (embed)
1885            - tremulous <unfixed>
1886            - tuxonice-userui <unfixed> (static)
1887            - fpc <unfixed> (static)
1888            - lazarus <unfixed> (static)
1889            NOTE: inherited from fpc, see #472304
1890            - mseide-msegui <unfixed> (static)
1891            NOTE: inherited from fpc, see #472304
1892            - easymp3gain <unfixed> (static)
1893            NOTE: inherited from fpc, see #472304
1894            - winff <unfixed> (static)
1895            NOTE: inherited from fpc, see #472304
1896            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1897    
1898    
1899    lxr
1900            - lxr-cvs <unfixed> (embed)
1901    
1902    libfile-copy-recursive-perl
1903            - r-base <unfixed> (embed; bug #577427)
1904            - r-base-core-ra <unfixed> (embed; bug #577429)
1905    
1906    delimmatch
1907            - r-base <unfixed> (embed; bug #577433)
1908            - r-base-core-ra <unfixed> (embed; bug #577434)
1909    
1910    libsmf (ITP: #572558)
1911            - denemo <unfixed> (embed)
1912            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1913    
1914    libselinux
1915            - dpkg 1.15.6 (static)
1916    
1917    xinha (ITP: #479708)
1918            - horde3 <unfixed>
1919            - serendipity <unfixed>
1920            - openacs <unfixed>
1921            - dotlrn <unfixed>
1922    
1923    dvipng
1924            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1925    
1926    dvipdfmx
1927            - texlive-bin <unfixed> (embed)
1928            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1929    
1930    lcdf-typetools
1931            - texlive-bin 2009-1 (embed)
1932    
1933    tex4ht
1934            - texlive-bin 2009-1 (embed)
1935    
1936    freetype
1937            - texlive-bin 2009-1 (embed)
1938    
1939    freetype2
1940            - texlive-bin 2009-1 (embed)
1941    
1942    silgraphite
1943            - texlive-bin <unfixed> (embed)
1944    
1945    unzip
1946            - texlive-bin 2009-1 (embed)
1947    
1948    jbig2dec
1949            - ghostscript 8.71~dfsg2-1 (embed)
1950    
1951    libxml2
1952            - chromium-browser 5.0.375.29~r46008-1
1953    
1954    protobuf
1955            - chromium-browser 5.0.375.70~r48679-2
1956    
1957    libv8
1958            - chromium-browser 5.0.375.38~r46659-1
1959    
1960    nspr
1961            - chromium-browser 5.0.375.29~r46008-3
1962    
1963    yasm
1964            - chromium-browser 5.0.375.29~r46008-2
1965    
1966    libxslt
1967            - chromium-browser 5.0.375.29~r46008-1
1968    
1969    miniupnpc (not packaged in Debian; ITP bug #444392)
1970            - warzone2100 <unfixed> (embed)
1971    
1972    iniparser (not packaged in Debian; RFP bug #582657)
1973            - warzone2100 <unfixed> (modified-embed)
1974    
1975    pyglet
1976            - sympy <unfixed> (embed; bug #459716)
1977    
1978    mpmath
1979            - sympy <unfixed> (embed; bug #541746)
1980    
Legend:
Removed from v.7923  
changed lines
  Added in v.15380
  ViewVC Help
Powered by ViewVC 1.1.5