/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 8085 by nion, Tue Feb 5 21:40:32 2008 UTC revision 13711 by geissert, Mon Jan 4 21:37:21 2010 UTC
# Line 11  Format: Line 11  Format:
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>,  status: version number fixing the embedded copy, <unfixed>, <removed>,
14          <itp> or <unknown> if the version number can not be determined          <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and        modified-embed (embeds a code copy that differs from upstream code)
20              thus might share parts of the source code)        fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22    
23  The srcpkg might be some string to identify the code if there is no  The srcpkg might be some string to identify the code if there is no
24  specific source package.  specific source package.
# Line 24  Everything up to the next line is ignore Line 27  Everything up to the next line is ignore
27  ---BEGIN  ---BEGIN
28  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
30          - pdftohtml <unknown>          - pdftohtml <unknown>
31          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
32          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
33          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
34          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
36          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
37          NOTE: links to poppler          NOTE: links to poppler
38          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
39          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
40          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
41          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
42          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
44          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <unfixed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48    
49  ppmd  ppmd
50          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
51            NOTE: discussion in #458152
52    
53    libevent
54            - transmission 1.71-1 (embed; bug #529372)
55    
56    lrmi
57            - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59            - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61    
62    peercast
63            - gnome-peercast <removed> (embed)
64            [etch] - gnome-peercast <unfixed> (embed)
65    
66  silc-toolkit  silc-toolkit
67          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
68    
69    icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73  dietlibc  dietlibc
74          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
75    
76    libmikmod
77            - sdl-mixer1.2 <unfixed> (embed)
78            TODO: report bug
79    
80  libiax  libiax
81          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
82    
83    spandsp
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
87          - dpkg <unfixed> (embed)          - dpkg <unfixed> (static)
88          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
89          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
90          NOTE: somehow derived code base          NOTE: somehow derived code base
# Line 70  zlib (lots of apps embed a copy, but lin Line 95  zlib (lots of apps embed a copy, but lin
95          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
96          - rpm <unknown> (embed)          - rpm <unknown> (embed)
97          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
98            - tuxcmd-modules <unfixed> (embed)
99            - zsync <unfixed>
100            - tra <unfixed>
101            - sash <unfixed>
102            - nsis <unfixed>
103            - mseide-msegui <unfixed>
104            NOTE: mseide
105            - mirrordir <unfixed>
106            - poco <unfixed>
107            - klibc <unfixed>
108            - ghostscript <unfixed>
109            - freeimage <unfixed>
110            - clamav <unfixed> (fork)
111            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
112            - tuxonice-userui <unfixed>
113            - plt-scheme <unfixed>
114            - perl <unfixed>
115            - paraview <unfixed>
116            - gcvs <unfixed>
117            - dump <unfixed>
118            - aide <unfixed> (static)
119            - dar <unfixed> (static)
120            - avfs <unfixed>
121            - fpc <unfixed>
122            - winff <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - lazarus <unfixed>
125            NOTE: inherited from fpc, see #472304
126            - erlang <unfixed> (embed)
127            - gamera 3.2.3-1 (embed)
128            - python2.4 <unfixed> (embed; bug #553403)
129            - python2.5 <unfixed> (embed; bug #553403)
130    
131    dulwich
132            - hg-git 0.1.0-1 (embed; bug #541996)
133    
134    libvigraimpex
135            - hugin <unfixed> (embed; bug #542259)
136            - enblend-enfuse <unfixed> (embed; bug #542258)
137            - gamera 3.2.3-1 (embed)
138    
139  libbz2  libbz2
140          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
141    
142  ekg  libgadu
143          - centericq <unfixed> (embed)          - centerim <unfixed> (embed; bug #559783)
144          - gaim <unfixed> (embed)          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
145          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
146          - kopete 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
147          - kadu <unfixed> (embed)          NOTE: from kdenetwork: kopete
148          - gadu <unfixed> (embed)          - ekg 1:1.8~rc0-1 (embed)
149          NOTE: g/kadu not packaged in Debian yet          - kadu 0.6.0.2-3 (embed; bug #504430)
150            - gadu <itp> (embed)
151    
152  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
153          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
154          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
155          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
156          - phpwiki (embed)          - phpwiki <unfixed> (embed)
157          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
158          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
159    
# Line 95  shtool (affects build-time only) Line 161  shtool (affects build-time only)
161          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
162          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
163    
164  mozilla source code  xulrunner
165          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
166          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
167          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
168          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
169          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
170          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
171          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
172          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
173    
174  xli  xli
175          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
176    
177  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
178          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
179          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed)
         NOTE: in libxpm  
180    
181  kerberized apps with BSD origin  kerberized apps with BSD origin
182          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
183          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
184          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
185    
186  grip (which pkg is the origin?)  grip (which pkg is the origin?)
187          - libcdaudio          - libcdaudio <unfixed>
188          - grip          - grip <unfixed>
189          - gnome-vfs          - gnome-vfs <unfixed>
190          TODO: check vfs2 as well          TODO: check vfs2 as well
191    
192  fudforum  fudforum
193          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
194          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
195          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
196    
197    libbsd
198            - rdate 1:1.2-3 (embed)
199            - atheme-services <unfixed>
200            - libbsd-arc4random-perl <unfixed>
201            - isakmpd <unfixed>
202            - bsdgames <unfixed> (embed)
203            - bsd-mailx <unfixed> (embed)
204            - netcat-openbsd <unfixed> (embed; bug #550611)
205            - openssh <unfixed> (embed)
206            - unworkable <unfixed> (embed)
207    
208  cvs  cvs
209          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
210          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
211    
212  pcre  pcre3
         - python* <unfixed> (embed)  
213          - php4 <unknown> (embed)          - php4 <unknown> (embed)
214          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
215          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
216            NOTE: libgoffice-*
217          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
218          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
219          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
220          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
221          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
222          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
223          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
224          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
225          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
226          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
227            - tin 980117-1 (embed)
228            - kazehakase 0.5.2-1
229            - webkit 1.0.1-1 (embed)
230            - qt4-x11 <unfixed> (embed)
231            NOTE: embedded via webkit copy
232            - erlang <unfixed> (embed)
233            - ssed <unfixed> (embed)
234    
235  tiff  tiff
236          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
237          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
238    
239  uudeview  uudeview
240          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
241            - pan <unfixed> (embed)
242    
243  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
244          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
245          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
246          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
247            - heimdal <unfixed> (embed; bug #559616)
248    
249  util-linux/mount  util-linux/mount
250          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
251          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
252    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
253  sylpheed  sylpheed
254          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
255    
# Line 187  phpldapadmin Line 264  phpldapadmin
264  chmlib  chmlib
265          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
266    
267  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
268          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
269          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
270          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
271          - vlc <unfixed> (static)          - smilutils 0.3.0-10
272          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
273          - motion <unfixed> (static)          - motion 3.1.19-1
274          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
275          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed> (static)
         - xmovie <unfixed>  
276          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
277            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
278            - audacity 1.3.7-2 (embed; bug #512278)
279    
280  mad MPEG decoding lib  faad2
281          - mad <unfixed> (embed)          - mplayer 1.0~rc2-20 (embed)
282            - avifile <unfixed> (embed; bug #538750)
283            - ffmpeg-debian <removed> (old-version)
284    
285    libmad (MPEG decoding lib)
286          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
287            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
288            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
289    
290  libdts  libdts
291          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 217  libmpeg2 Line 301  libmpeg2
301          - mpeg2dec <unfixed> (embed)          - mpeg2dec <unfixed> (embed)
302          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
303    
304  curl  libntlm
305          - wget <unfixed> (embed)          - wget <unfixed> (fork; bug #550436)
306          NOTE: code for NTLM authentication          - curl <unfixed> (fork; bug #550437)
307            - cntlm <unfixed> (fork; bug #550438)
308    
309  uw-imap  uw-imap
310          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 228  uw-imap Line 313  uw-imap
313  imagemagick  imagemagick
314          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
315    
316    python-urlgrabber
317            - mercurial <unfixed> (embed; bug #531062)
318            - w3af <unfixed> (embed; bug #555372)
319            [experimental] - harvestman <unfixed> (embed; bug #555373)
320    
321    beautifulsoup
322            - python-mechanize <unfixed> (embed; bug #555349)
323            - zope2.11 <unfixed> (embed; bug #555350)
324            - twill <unknown> (embed)
325    
326  halibut  halibut
327          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
328    
329  libghttp  libghttp
330          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
331    
332  libsndfile  libsndfile
333          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
334    
335  glibmm2.4  glibmm2.4
336          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
337    
338  libgnomecanvasmm2.6  libgnomecanvasmm2.6
339          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
340    
341  libsigc++-2.0  libsigc++-2.0
342          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
343    
344  soundtouch  soundtouch
345          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
346    
347  libmms  libmms
348          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 255  libmms Line 350  libmms
350    
351  fckeditor  fckeditor
352          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
353          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
354          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
355          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
356            - request-tracker3.8 <unfixed> (embed)
357            - otrs2 <unfixed> (embed)
358    
359  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
360          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
361    
362  libphp-phpmailer  libphp-phpmailer
363          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
364            - mahara <unfixed> (embed)
365            - symfony <unfixed> (embed)
366            [etch] - phpgroupware <unfixed> (embed)
367            NOTE: phpgroupware-felamimail is only in etch
368            - egroupware <unfixed> (embed; bug #504283)
369            - glpi <unfixed>
370    
371  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
372          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
373    
374  bennu (not packaged in Debian)  giflib
375          - moodle <unfixed> (embed)          - wine <unfixed> (embed; bug #466181)
376    
377  smarty:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
378          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
379    
380    smarty
381            - moodle 1.8.2-2 (embed; bug #471158)
382            - gallery2 2.2.5-2 (embed; bug #471160)
383            - mahara 0.9.2-2 (embed; bug #471201)
384            - gosa 2.4beta1-1 (embed; bug #471200)
385    
386  TinyMCE  TinyMCE
387          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
388          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
389          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
390          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
391    
392  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
393          - scite <unfixed> (embed)          - scite <unfixed> (embed)
394          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
395          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
396          - geany <unfixed> (embed)          - geany <unfixed> (fork)
397            - anjuta <unfixed> (embed)
398    
399  libphp-adodb  libphp-adodb
400          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
401          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
402          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
403          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
404          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
405          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
406            - torrentflux 2.0beta1-2 (embed)
407          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
408          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
409          - cacti <unknown> (embed)          - cacti <unknown> (embed)
410          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
411          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
412            - gforge 4.7~rc2-6 (embed)
413            - mahara <unfixed> (embed)
414    
415  gzip  gzip
416          - linux-kernel <unfixed> (embed)          - linux-kernel <unfixed> (embed)
# Line 308  gzip Line 420  gzip
420          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
421    
422  neon  neon
423          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
424          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
425          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
426            - litmus <removed> (embed; #395875)
427          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
428          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
429          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
430          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
431    
# Line 325  libvncserver Line 438  libvncserver
438  putty  putty
439          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
440    
441  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
442          - filezilla <unfixed>          - filezilla <unfixed>
443            - crystalspace <unfixed> (embed)
444            - libwfut <unfixed> (embed)
445            - rarian <unfixed> (embed)
446            - bulletml <unfixed> (embed)
447            - pokerth <unfixed> (embed)
448            - qutecom <unfixed> (embed)
449            - sofa-framework <unfixed> (embed)
450            - yate <unfixed> (embed)
451            - antigrav <unfixed> (embed)
452            - balder2d <unfixed> (embed)
453            - cal3d <unfixed> (embed)
454            - criticalmass <unfixed> (embed)
455            - ember <unfixed> (embed)
456            - epiphany <unfixed> (embed)
457            - gambit <unfixed> (embed)
458            - noiz2sa <unfixed> (embed)
459            - ogre <unfixed> (embed)
460            - opencity <unfixed> (embed)
461            - openmovieeditor <unfixed> (embed)
462            - pouetchess <unfixed> (embed)
463            - tecnoballz <unfixed> (embed)
464            - trigger-rally <unfixed> (embed)
465            - xmoto <unfixed> (embed)
466            - mapnik <unknown> (embed)
467            NOTE: uses a different XML parser by default
468            - rrootage 0.23a-6 <embed>
469            NOTE: links to libbulltetml
470            - boson <unknown> (embed)
471            NOTE: the embedded code is unused
472    
473  gv  gv
474          - evince <unfixed> (embed)          - evince <unfixed> (embed)
475          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
476          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
477    
478  libXbae  libXbae
479          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
480          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
481    
482    libgtkhtml
483            - claws-mail-extra-plugins <unfixed> (fork)
484    
485  libXaw  libXaw
486          [etch] - libpawlib2-lesstif          - paw <removed> (embed)
487          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
488          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
489    
490  libgd2  libgd2
491          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
492          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
493            - wml <unfixed> (embed)
494            - libwmf <unfixed> (embed)
495            NOTE: derived from gd 1.6.3
496    
497  rar  rar
498          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 359  mplayer (DirectMedia Object loader) Line 506  mplayer (DirectMedia Object loader)
506          NOTE: src/libw32dll/          NOTE: src/libw32dll/
507          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
508          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
509            - mplayer 1.0~rc2-20 (embed)
510    
511  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
512          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 367  fsplib (http://sourceforge.net/projects/ Line 515  fsplib (http://sourceforge.net/projects/
515          - gftp <unfixed> (embed)          - gftp <unfixed> (embed)
516          NOTE: lib/fsplib version 0.3          NOTE: lib/fsplib version 0.3
517    
518    sprng
519            - tree-puzzle <unfixed> (embed)
520    
521  librpcsecgss  librpcsecgss
522          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
523    
524  jasper  jasper
525          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
526    
527    libiris
528            - psi <unfixed> (embed)
529            - kdenetwork <unfixed> (embed)
530            NOTE: kopete embeds libiris but links dynamically to libidn
531            - kdegames <unfixed> (embed)
532            NOTE: ksirk/kde4
533    
534  libidn  libidn
535          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
536            - psi <unfixed> (embed)
537            NOTE: psi embeds libiris which embeds libidn
538            - kdegames <unfixed> (embed)
539            NOTE: kdegames/kde4 embeds libiris which embeds libidn
540    
541  liblua  liblua
542          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
543            - nmap 5.00-1 (embed; bug #527997)
544            [lenny] - nmap <unfixed> (embed; bug #527997)
545            - ocropus <unfixed> (embed)
546            - enigma <unfixed> (embed)
547            NOTE: requires lua built with C++
548            - freeciv <unfixed> (embed)
549    
550  libbotan  libbotan
551          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
552    
553  NetXX  NetXX
554          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
555    
556  libgc  libgc
557          - mono <unfixed> (embed)          - mono <unfixed> (embed)
558    
559  lzma  lzma
560          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
561            - xz-utils <unfixed> (fork)
562    
563  lzo  lzo
564          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
# Line 413  guichan Line 581  guichan
581  tolua  tolua
582          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
583          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
584            NOTE: actually tolua++
585            - ocropus <unfixed> (embed)
586            NOTE: actually tolua++
587            - freeciv <unfixed> (embed)
588            NOTE: actually tolua++
589            - enigma <unfixed> (embed)
590    
591  asio-dev  asio-dev
592          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
593    
594  xine-lib  xine-lib
595          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 428  netpbm Line 600  netpbm
600          - tcl8.4 <unfixed> (embed)          - tcl8.4 <unfixed> (embed)
601          - tcl8.5 <unfixed> (embed)          - tcl8.5 <unfixed> (embed)
602          NOTE: generic/tkImgGIF.c          NOTE: generic/tkImgGIF.c
603    
604    tk8.5
605            - tk8.0 <removed> (old-version)
606            - tk8.3 <unfixed> (old-version)
607            - tk8.4 <unfixed> (old-version)
608            - perl-tk <unfixable> (fork)
609    
610    samba
611            - mc 2:4.6.2~git20080311-1 (embed)
612            NOTE: maintainer is aware of this, currently searching a solution
613    
614    plib1.8.4c2
615            - boson <unfixed> (fork)
616            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
617    
618    fribidi
619            - quesoglc <unfixed> (embed)
620            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
621    
622    glew
623            - quesoglc <unfixed> (embed; bug #489341)
624            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
625            - trigger <unfixed> (embed)
626            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
627            - trigger-rally <unfixed> (embed)
628            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
629    
630    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
631            - transcend <unfixed> (embed)
632            - cultivation <unfixed> (embed)
633            - passage <unfixed> (embed)
634            - gravitation <unfixed> (embed)
635    
636    tar
637            - libarchive <unfixed> (embed)
638            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
639    
640    cpio
641            - libarchive <unfixed> (embed)
642            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
643    
644    webkit
645            - qt4-x11 <unfixed> (embed; bug #479851)
646            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
647            [lenny] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
648            - kdelibs <unfixed> (old-version)
649            - kde4libs <unfixed> (fork)
650    
651    ftgl
652            - blender 2.46+dfsg-1 (embed)
653    
654    wv
655            - abiword <unfixed>
656    
657    qemu
658            - kvm <unfixed> (embed; bug #543159)
659            NOTE: the kvm package will be removed from sid and squeeze soon (after
660            NOTE: which it will only be in experimental). superceded by qemu-kvm.
661            - qemu-kvm <unfixed> (embed; bug #560853)
662            - xen-3 3.4.2-2 (embed; bug #560856)
663            - xen-unstable <unfixed> (embed; bug #560856)
664    
665    vgabios
666            - kvm <unfixed> (embed; bug #489442)
667    
668    bochs
669            - kvm <unfixed> (embed; bug #489442)
670    
671    speex
672            - vorbis-tools <unfixed> (embed)
673            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
674            - gst-plugins-good0.10 <unfixed> (embed)
675            - xine-lib <unfixed> (embed)
676            - libfishsound <unfixed> (embed)
677            - libannodex <removed> (embed)
678            - vlc <unfixed> (embed)
679            - xmms-speex <unfixed> (embed)
680            - libsdl-sound1.2 <unfixed> (embed)
681            - sweep <unfixed> (embed)
682    
683    libreadline
684            - magic <itp> (old-version)
685    
686    opcode
687            - ode <unfixed> (embed)
688            NOTE: opcode is not a package in debian, it is just embedded
689            NOTE: http://www.codercorner.com/Opcode.htm
690    
691    gimpact
692            - ode <unfixed> (embed)
693            NOTE: gimpact is not a package in debian, it is just embedded
694            NOTE: http://gimpact.sf.net
695    
696    mochikit
697            - mahara <unfixed> (embed)
698            NOTE: they require extra patches, still unmerged upstream
699            - ntop <unfixed> (embed)
700            - coherence 0.6.2-1 (embed)
701            - paste <unfixed> (embed)
702            - turbogears <unfixed> (embed)
703            - plone3 <unfixed> (embed)
704            - xulrunner <unfixed> (embed)
705            - libjifty-plugin-chart-perl <unfixed> (embed)
706            - sabnzbdplus <unfixed> (embed)
707            - tgmochikit <unfixed> (embed)
708    
709    prototypejs
710            - netbeans-ide 6.0.1+dfsg-2 (embed)
711            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
712            - webcit <unfixed> (embed; bug #555219)
713            - asterisk 1:1.6.2.0~rc3-1 (embed)
714            - libjson-ruby 1.1.4-1 (embed; bug #555224)
715            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
716            - horde3 <unfixed> (embed)
717            - knowledgeroot <unfixed> (embed; bug #555230)
718            - mediatomb <unfixed> (embed; bug #555233)
719            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
720            - ebug-http <removed> (embed; bug #555236)
721            - libaws 2.7-1 (embed; bug #555222)
722            - phpgedview <removed> (embed)
723            - poker-network <removed> (embed; bug #555238)
724            - rails 2.1.0-6 (embed)
725            - wordpress 2.5.0-2 (embed; bug #555243)
726            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
727            TODO: search through all of the other zope packages
728            - ampache 3.4.1-2 (embed)
729            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
730            - hobix 0.5~svn20070319-4 (embed; bug #555247)
731            - zabbix 1.6.6-4 (embed; bug #555250)
732            - chora2 <unfixed> (embed; bug #555253)
733            - gollem <unfixed> (embed; bug # 555254)
734            - jscropperui 1.2.1-1 (embed; bug #555257)
735            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
736            - ingo1 <unfixed> (embed; bug #555261)
737            - kronolith2 <unfixed> (embed; bug #555262)
738            - activeldap <unfixed> (embed)
739            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
740            - mantis <unfixed> (embed; bug #555265)
741            - otrs2 2.3.4-6 (embed; bug #555267)
742            - webcalendar <unfixed> (embed; bug #555269)
743            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
744            - jifty 0.90519-1 (embed; bug #555271)
745            - jquery <unfixed> (embed; bug #555272)
746            - passenger 2.2.5debian1-1 (embed; bug #555273)
747            - plone3 <unfixed> (embed; bug #555275)
748            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
749            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
750            - xulrunner <unfixed> (embed)
751            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
752    
753    gdb
754            - insight <unfixed> (embed)
755    
756    e2fsprogs
757            - ldiskfsprogs <unfixable> (fork)
758    
759    quazip (not packaged in Debian)
760            - qcake <unfixed> (embed)
761            NOTE: starting with upstream version 0.6.4
762    
763    exo
764            - pcmanfm <unfixed> (embed; bug #499677)
765            NOTE: slightly modified source code
766    
767    java
768            - openjdk-6 <unfixed>
769            - sun-java5 <unfixed>
770            - sun-java6 <unfixed>
771    
772    libphp-snoopy
773            - ampache 3.4.1-2 (embed; bug #504169)
774            - gforge 4.6.99+svn6094-2 (embed)
775            - mahara 1.0.5-2 (embed; bug #504170)
776            - pixelpost 1.7.1-5 (embed; bug #504171)
777            - mediamate 0.9.3.6-5 (embed; bug #504172)
778            - opendb <removed> (embed; bug #504173)
779            [etch] - opendb <unfixed> (embed; bug #504173)
780            - wordpress 2.5.1-9 (embed; bug #443948)
781            - moodle <unfixed> (embed; bug #507185)
782            [etch] - phpgroupware <unfixed> (embed)
783            NOTE: phpgroupware-felamimail
784            - magpierss 0.72-3 (embed; bug #431089)
785    
786    jquery
787            - zekr <unfixed> (embed)
788            - wordpress <unknown> (embed)
789            - yocto-reader <unfixed> (embed)
790            - textpattern <unfixed> (embed)
791            - genshi 0.5.1-1 (embed)
792            NOTE: compressed file under examples/ dir
793            - prewikka <unfixed> (embed)
794            - libramaze-ruby <unfixed> (embed)
795            - drupal5 <unfixed> (embed)
796            - b2evolution <unfixed> (embed)
797            - wesnoth <unfixed> (embed)
798    
799    tablesorter (jquery plugin, not packaged yet)
800            - wesnoth <unfixed> (embed)
801    
802    kses
803            - wordpress <unfixed> (embed; bug #504242)
804            NOTE: their copy has all methods renamed to wp_<foo>
805            NOTE: kses isn't in Debian, RFP: #504240
806            - moodle <unfixed> (embed; bug #507185)
807            - egroupware <unfixed> (embed)
808    
809    magpierss
810            - wordpress <unfixed> (embed; bug #504242)
811            - moodle <unfixed>
812    
813    php-gettext
814            - wordpress 2.8.4-1 (embed; bug #504242)
815            - docbookwiki <unfixed> (embed)
816            NOTE: non-free
817    
818    libphp-ixr (name may change, it is the Incutio XML-RPC)
819            - wordpress <unfixed> (embed; bug #504242)
820            NOTE: libphp-ixr isn't in Debian, RFP: #504236
821            - dokuwiki <unfixed> (embed)
822            - textpattern <unfixed> (embed)
823    
824    libphp-cas
825            - glpi <unfixed> (embed)
826            - moodle <unfixed> (embed; bug #505984)
827    
828    scriptaculous (prototype.js is among the embeds in the following)
829            - glpi <unfixed> (embed)
830            - libaws <unfixed> (embed; bug #555222)
831            - op-panel <unfixed> (embed)
832            - symfony <unfixed> (embed)
833            NOTE: maintainer says there are extra incompatible changes required
834            - pixelpost 1.7.1-6 (embed)
835            - webhelpers <unfixed> (embed)
836            - qwik <removed> (embed; bug #555241)
837            - smokeping <unfixed> (embed)
838            - turba2 <unfixed> (embed)
839            - typo3-src 4.2.3-1 (embed)
840            - request-tracker3.6 <unfixed> (embed)
841            - request-tracker3.8 <unfixed> (embed)
842            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
843            - wordpress 2.5.0-2 (embed)
844            - libhtml-prototype-perl 1.48-3 (embed)
845    
846    libmarkdown-php
847            - moodle <unfixed> (embed; bug #507185)
848            - pixelpost 1.7.1-6 (embed)
849    
850    php-openid
851            - wordpress-openid <itp> (embed)
852    
853    geshi
854            - dokuwiki 0.0.20080505-3.1 (embed)
855            - pgfouine 1.0-1.1 (embed)
856            - websvn 2.1.0-1 (embed)
857    
858    webcalendar
859            - gforge 4.7~rc2-6 (embed; bug #504758)
860    
861    libical
862            - kdepim <unfixed> (fork)
863            - kdepimlibs <unfixed> (fork)
864            NOTE: fixed in KDE4 post 4.1.x series
865            - claws-mail-extra-plugins <unfixed> (fork)
866    
867    libltdl3
868            - kdelibs <unfixed> (embed)
869            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
870            - synfig <unfixed> (embed)
871    
872    harfbuzz
873            - qt4-x11 <unfixed> (embed)
874    
875    libzip
876            - php5 <unfixable> (modified-embed)
877            - odt2txt <unfixed> (embed; bug #523808)
878    
879    json.php (not packaged; should be replaced with php's built-in functions)
880            - moodle <unfixed>
881            - yui <unfixed>
882            - gallery2 <unfixed>
883            - dokuwiki <unfixed>
884            - typo3-src <unfixed>
885    
886    php-fpdf
887            - tcpdf <itp> (fork)
888            - moodle <unfixed>
889            - phpwiki <unfixed>
890            - egroupware <unfixed>
891            - ldap-account-manager <unfixed> (fork)
892    
893    tcpdf (itp: #495985)
894            - moodle <unfixed>
895            - phpmyadmin <unfixed>
896    
897    typo3
898            - moodle <unfixed>
899    
900    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
901            - moodle <unfixed>
902            - gosa <unfixed>
903    
904    php-ole (itp: #487558)
905            - moodle <unfixed>
906    
907    pieforms (http://www.catalyst.net.nz)
908            - mahara <unfixed>
909    
910    savant2 (http://phpsavant.com)
911            - egroupware <unfixed>
912    
913    rssparser (http://nwow.org)
914            - egroupware <unfixed>
915            - phpgroupware <unfixed>
916    
917    lcms
918            - openjdk-6 <unfixed> (fork)
919    
920    libphp-phplayersmenu
921            - diogenes <unfixed>
922            - phpldapadmin <unfixed>
923    
924    libphp-pclzip
925            - docvert <unfixed>
926            - moodle <unfixed>
927            - egroupware <unfixed>
928    
929    libphp-simplepie
930            - dokuwiki <unfixed>
931            - wordpress <unfixed>
932    
933    libphp-jpgraph
934            - egroupware <unfixed>
935    
936    php-simpletest
937            - moodle <unfixed>
938    
939    libpng
940            - iceweasel <not-affected> (uses xulrunner)
941            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
942            - iceape 1.0.13~pre080614i-0etch1 (embed)
943            - xulrunner 1.9.0.13-1 (embed)
944            [lenny] - xulrunner 1.9.0.11-0lenny1
945            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
946            - gamera 3.2.3-1 (embed)
947    
948    irssi
949            - silc-client <unfixed> (embed)
950            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
951    
952    extc
953            - mtasc <unfixed> (embed)
954            - haxe <unfixed> (embed)
955    
956    swflib
957            - mtasc <unfixed> (embed)
958            - haxe <unfixed> (embed)
959    
960    libitext-java
961            - bouncycastle 2.1.4-1 (embed)
962    
963    python-ply
964            - pyke <unfixed> (embed; bug #555363)
965            - pywbem 0.7.0-4 (embed; bug #555364)
966            - sepolgen <unfixed> (embed; bug #555365)
967            - zope-textindexng3 <unknown> (embed)
968            - iceweasel <not-affected> (uses xulrunner)
969            - xulrunner <unknown> (embed)
970            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
971    
972    libdumbnet (libdnet upstream)
973            - nmap <unfixed> (fork)
974    
975    gcc-4.4
976            - gcc-mingw32 <unfixed> (embed)
977    
978    camlimages
979            - advi <unfixed> (static; bug #550441)
980    
981    memcached
982            - memcachedb <unfixed> (embed)
983    
984    yajl
985            - argyll <unfixed> (embed; bug #544223)
986            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
987    
988    nusoap
989            - gforge 4.8.2-1 (embed)
990            - ampache <unfixed> (embed)
991            - poker-web <unfixed> (old-version)
992            - moodle <unfixed> (old-version)
993            NOTE: code is not used when running under php5 and soap is enabled
994            - phpwiki <unfixed> (old-version)
995            - gallery2 <unfixed> (old-version)
996            - typo3-src <unfixed> (old-version)
997    
998    libept
999            - adept <unfixed> (embed; bug #540649)
1000    
1001    libvorbis
1002            - iceweasel <not-affected> (uses xulrunner)
1003            - xulrunner <unfixed> (embed; bug #540959)
1004            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1005            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1006            - iceape <unfixed> (embed)
1007            [etch] - iceape <not-affected> (introduced in 2.0)
1008            [lenny] - iceape <not-affected> (introduced in 2.0)
1009    
1010    cairo
1011            - iceweasel <not-affected> (uses xulrunner)
1012            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1013    
1014    liboggz
1015            - iceweasel <not-affected> (uses xulrunner)
1016            - xulrunner <unfixed> (embed; bug #540959)
1017            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1018            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1019            - iceape <unfixed> (embed)
1020            [etch] - iceape <not-affected> (introduced in 2.0)
1021            [lenny] - iceape <not-affected> (introduced in 2.0)
1022    
1023    liboggplay
1024            - iceweasel <not-affected> (uses xulrunner)
1025            - xulrunner <unfixed> (embed; bug #540959)
1026            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1027            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1028            - iceape <unfixed> (embed)
1029            [etch] - iceape <not-affected> (introduced in 2.0)
1030            [lenny] - iceape <not-affected> (introduced in 2.0)
1031    
1032    php-net-dnsbl
1033            - serendipity <unfixed> (embed)
1034    
1035    php-onyx-rss
1036            - serendipity <unfixed> (embed)
1037    
1038    php-text-wiki
1039            - serendipity <unfixed> (embed)
1040    
1041    php-xml-rpc
1042            - serendipity <unfixed> (embed)
1043    
1044    polarssl (does not have a shared library)
1045            - pdkim <itp> (embed; bug #543150)
1046            - xyssl <unfixed> (old-version)
1047    
1048    pidgin
1049            - gaim <removed> (old-version)
1050            - qutecom <unfixed> (embed; bug #559785)
1051    
1052    icu
1053            - webkit 1.0.1-1 (embed; bug #547214)
1054            - texlive-bin <unfixed> (fork)
1055            NOTE: texlive upstream working with icu upstream to merge their changes
1056    
1057    cyrus-imapd-2.2
1058            - kolab-cyrus-imapd <unfixed> (fork)
1059            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1060    
1061    python-cxx-dev
1062            - freecad 0.9.2646.3-1 (embed; bug #547936)
1063    
1064    zipios++
1065            - freecad 0.9.2646.3-1 (embed; bug #547941)
1066            - enigma 0.92.3-3 (embed)
1067            NOTE: likely fixed earlier, marking etch's version as fixed
1068    
1069    linux-2.6
1070            - kvm <removed> (embed; bug #549973) [./kernel/*]
1071            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1072            - kernel-source-2.6.8 <removed> (old-version)
1073            - kernel-source-2.4.27 <removed> (old-version)
1074            - kernel-source-2.4.24 <removed> (old-version)
1075            - kernel-source-2.2.25 <removed> (old-version)
1076            - kernel-source-2.2.20 <removed> (old-version)
1077    
1078    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1079            - kvm <removed> (embed) [./libfdt/*]
1080            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1081    
1082    qweb (not packaged)
1083            - ajaxterm <unfixed>
1084    
1085    opensaml2
1086            - opensaml <removed> (old-version)
1087    
1088    shibboleth-sp2
1089            - shibboleth-sp <removed> (old-version)
1090    
1091    tuxonice-userui
1092            - suspend2-userui <removed> (old-version)
1093    
1094    expat
1095            - w3c-libwww <removed> (embed; bug #551941)
1096            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1097            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1098            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1099            - python2.4 <unfixable> (embed; bug #553403)
1100            - python-4suite <unfixed> (embed; bug #516935)
1101            - wxwindows2.4 <removed> (embed)
1102            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1103            - wxwidgets2.8 2.8.10.1-2 (embed)
1104            - celementtree 1.0.5-8 (embed)
1105            NOTE: Maybe that was fixed even earlier
1106            - audacity 1.3.2-1 (embed)
1107            - matanza <unfixed> (embed)
1108            - tdom 0.8.3~20080525-1 (embed)
1109            - udunits 2.1.8-4 (embed)
1110            - apr-util 1.2 (embed)
1111            - ayttm <unfxed> (embed; bug #561006)
1112            - cableswig <unfixed> (embed)
1113            - cadaver <unfixed> (embed)
1114            - cmake 2.6.0-6 (embed)
1115            - coin3 <unfixed> (embed)
1116            - gdcm 2.0.14-2 (embed)
1117            - ghostscript <unfixed> (embed)
1118            - grmonitor <removed> (embed)
1119            - iceape <unfixed> (embed)
1120            - insighttoolkit 3.16.0-1 (embed)
1121            NOTE: insighttoolkit might've been fixed earlier
1122            - libparagui1.1 1.0.2-1 (embed)
1123            - paraview <unfixed> (embed)
1124            - poco <unfixed> (embed)
1125            - simgear <unfixed> (embed)
1126            - sitecopy 1:0.16.0-1
1127            - smart 1.0-1 (embed)
1128            - swish-e <unfixed> (embed)
1129            - tla <unfixed> (embed)
1130            - vtk 4.1.20030227-1 (embed)
1131            - wbxml2 <unfixed> (embed)
1132            - xmlrpc-c <unfixed> (embed)
1133            - iceweasel <unfixed> (embed)
1134            - kompozer <unfixed> (embed)
1135            - vxl 1.13.0-2 (embed)
1136            - xulrunner <unfixed> (embed)
1137            - apache2 2.2 (embed)
1138            - texlive-bin <not-affected> (Embedded code not compiled in)
1139            - vnc4 <unfixed> (embed)
1140            - xotcl <unfixed> (embed)
1141    
1142    xerces-c
1143            - xerces-c2 <unfixed> (old-version)
1144            - xerces27 <removed> (old-version)
1145    
1146    md5 (RSA's version; not the gnu version provided by coreutils)
1147            - w3c-libwww <removed> (embed; bug #551942)
1148            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1149    
1150    enet
1151            - sauerbraten <unfixed> (embed; #497194)
1152    
1153    eglibc
1154            - glibc <removed> (old-version)
1155    
1156    galib
1157            - gamera 3.2.3-1 (embed)
1158    
1159    configobj
1160            - bzr <unfixed> (embed; bug #555336)
1161            - elisa <unfixed> (embed; bug #555337)
1162            - gaupol <unfixed> (embed; bug #555338)
1163            - ipython <unfixed> (embed; bug #555339)
1164            - pida <unfixed> (embed; bug #555340)
1165            - psychopy <unfixed> (embed; bug #555341)
1166            - rest2web <unfixed> (embed; bug #555342)
1167            - auth2db <unknown> (embed)
1168            - dynagen <unknown> (embed)
1169            - iceweasel <unknown> (embed)
1170            - sabnzbdplus <unknown> (embed)
1171            - xulrunner <unknown> (embed)
1172            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1173    
1174    python-clientform
1175            - bibus <unfixed> (embed; bug #555332)
1176            - zope2.10 <unfixed> (embed; bug #555333)
1177            - zope2.11 <unfixed> (embed; bug #555334)
1178            - python-mechanize <unknown> (embed)
1179            - twill <unknown> (embed)
1180    
1181    python-mechanize
1182            - zope2.10 <unfixed> (embed; bug #555337)
1183            - zope2.11 <unfixed> (embed; bug #555338)
1184            - twill <unknown> (embed; bug #555339)
1185    
1186    pexpect
1187            - duplicity 0.6.06-1 (embed; bug #555361)
1188            - hplip <unfixed> (embed; bug #555362)
1189            - smart <unfixed> (embed; bug #555363)
1190    
1191    pyparsing
1192            - bauble <unfixed> (embed; bug #555366)
1193            - boa-constructor 0.6.1-8 (embed; bug #555367)
1194            - calibre <unfixed> (embed; bug #555368)
1195            - matplotlib <unfixed> (embed; bug #531024)
1196            - zhpy <unfixed> (embed; bug #555370)
1197            - polybori <unknown> (embed)
1198            - python-whoosh <unknown> (embed)
1199            - twill <unknown> (embed)
1200            - zope-textindexng3 <unknown> (embed)
1201    
1202    python-pysqlite2
1203            - python2.4 <unfixed> (embed; bug #553403)
1204            - python2.5 <unfixed> (embed; bug #553403)
1205    
1206    celementtree
1207            - python2.5 <unfixed> (embed)
1208            - smart 1.0-1 (embed)
1209            [etch] - smart <unfixed> (embed)
1210    
1211    elementtree
1212            - python2.5 <unfixed> (embed)
1213            - bzr <unfixed> (embed; bug #555343)
1214            - gedit 2.28.2-1 (embed; bug #555344)
1215            - smart 1.0-1 (embed)
1216            [etch] - smart <unfixed> (embed)
1217            - solfege <unfixed> (embed; bug #555345)
1218            - w3af <unfixed> (embed; bug #555346)
1219            - python-qt4 <unknown> (embed)
1220            - sphinx <unknown> (embed)
1221            - python-nltk <itp> (embed)
1222    
1223    python2.5
1224            - python2.4 <unfixed> (old-version)
1225            - jython <unfixed> (embed)
1226            NOTE: embeds many stdlib modules
1227            - python-django <unfixed> (embed; bug #555419)
1228            NOTE: embeds stdlib modules: doctest, decimal
1229            - gamera 3.2.3-1 (embed)
1230            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1231            - boa-constructor <unfixed> (embed; bug #555426)
1232            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1233            - nicotine <unfixed> (embed; bug #555427)
1234            NOTE: embeds stdlib modules: ConfigParser
1235            - museek+ <unfixed> (embed; bug #555428)
1236            NOTE: embeds stdlib modules: ConfigParser
1237            - vegastrike-data <unfixed> (embed)
1238            NOTE: embeds many stdlib modules
1239            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1240            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1241            - config-manager <unfixed> (embed; bug #555423)
1242            NOTE: embeds stdlib modules: optparse
1243            - jhbuild 2.28.0-1 (embed; bug #555421)
1244            NOTE: embeds stdlib modules: optparse, subprocess
1245            - smart <unfixed> (embed; bug #555432)
1246            NOTE: embeds stdlib modules: optparse
1247            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1248            NOTE: embeds stdlib modules: doctest
1249            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1250            NOTE: embeds stdlib modules: doctest
1251            - distribute <unfixed> (embed)
1252            NOTE: embeds stdlib modules: doctest
1253            - python-setuptools <unfixed> (embed; bug #555435)
1254            NOTE: embeds stdlib modules: doctest
1255            - zope.testing <unfixed> (embed; bug #555436)
1256            NOTE: embeds stdlib modules: doctest
1257            - translate-toolkit <unfixed> (embed; bug #555422)
1258            NOTE: embeds stdlib modules: textwrap, contextlib
1259            - libtpclient-py <unfixed> (embed; bug #555424)
1260            NOTE: embeds stdlib modules: subprocess
1261            - grass <unfixed> (embed; bug #555425)
1262            NOTE: embeds stdlib modules: subprocess
1263            - coherence <unfixed> (embed; bug #555429)
1264            NOTE: embeds stdlib modules: uuid
1265            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1266            NOTE: embeds stdlib modules: uuid
1267            - setroubleshoot <unfixed> (embed; bug #555431)
1268            NOTE: embeds stdlib modules: uuid
1269            - linkchecker <unfixed> (embed; bug #555414)
1270            NOTE: embeds msgfmt.py script
1271            - imdbpy <unfixed> (embed)
1272            NOTE: embeds msgfmt.py script
1273            - kiwi <unfixed> (embed)
1274            NOTE: embeds msgfmt.py script
1275            - moin <unfixed> (embed)
1276            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1277            - plone3 <unfixed> (embed)
1278            NOTE: embeds msgfmt.py script
1279            - roundup <unfixed> (embed)
1280            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1281            - rednotebook <unfixed> (embed; bug #555415)
1282            NOTE: embeds msgfmt.py script
1283            - turbogears <unfixed> (embed)
1284            NOTE: embeds msgfmt.py script
1285            - elisa <unfixed> (embed)
1286            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1287            - calibre <unfixed> (embed)
1288            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1289            - mailman <unfixed> (embed; #555416)
1290            NOTE: embeds msgfmt.py script
1291            - python-docutils <unknown> (embed)
1292            NOTE: embeds stdlib modules: optparse, textwrap
1293            - python-imaging <unknown> (embed)
1294            NOTE: embeds stdlib modules: doctest
1295            - python-mechanize <unknown> (embed)
1296            NOTE: embeds stdlib modules: doctest
1297            - twill <unknown> (embed)
1298            NOTE: embeds stdlib modules: subprocess
1299            - zeroc-ice <unknown> (embed)
1300            NOTE: embeds stdlib modules: subprocess
1301            - wxwidgets2.8 <unknown> (embed)
1302            NOTE: embeds stdlib modules: subprocess
1303            - cycle <unknown> (embed)
1304            NOTE: embeds msgfmt.py script
1305            - deluge <unknown> (embed)
1306            NOTE: embeds msgfmt.py script
1307            - opendict <unknown> (embed)
1308            NOTE: embeds msgfmt.py script
1309            - openerp-client <unknown> (embed)
1310            NOTE: embeds msgfmt.py script
1311            - rapidsvn <unknown> (embed)
1312            NOTE: embeds msgfmt.py script
1313            - wammu <unknown> (embed)
1314            NOTE: embeds msgfmt.py script
1315            - gaphor <unknown> (embed)
1316            NOTE: embeds msgfmt.py script
1317            - pida <unknown> (embed)
1318            NOTE: embeds msgfmt.py script
1319            - python-formencode <unknown> (embed)
1320            NOTE: embeds msgfmt.py script
1321            - duplicity <unfixed> (embed)
1322            NOTE: embeds stdlib module: urlparse, tarfile
1323            - pygopherd <unfixed> (embed)
1324            NOTE: embeds stdlib module: zipfile
1325    
1326    argparse
1327            - twill <unfixed> (embed; bug #555347)
1328            - ipython <unfixed> (embed; bug #555348)
1329    
1330    coherence
1331            - elisa <unfixed> (embed; bug #555335)
1332    
1333    simpletal
1334            - plastex <unfixed> (embed; bug #555371)
1335    
1336    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1337            - postr <unfixed> (embed)
1338            - elisa <unfixed> (embed)
1339    
1340    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1341            - apertium-tolk <unfixed> (embed)
1342            - ipython <unfixed> (embed)
1343            - virtaal <unfixed> (embed)
1344    
1345    distribute
1346            - setuptools <removed> (old-version)
1347    
1348    rails
1349            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1350            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1351            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1352            - thin <unfixed> (embed) [./spec/rails_app/*]
1353            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1354            NOTE: be dangerous if developers are naively basing their code off of the examples
1355            NOTE: prototype.js is among the example files
1356    
1357    lucene2 (prototype.js is among the embeds in the following)
1358            - lucene <unfixed> (old-version)
1359            - pylucene <unfixed> (embed)
1360            - libpdfbox-java <unfixed> (embed)
1361            - libfontbox-java <unfixed> (embed)
1362            - libjempbox-java <unfixed> (embed)
1363            - solr <unfixed> (embed)
1364    
1365    unicode-data
1366            - syslinux <unfixed> (embed)
1367            - camomile <unfixed> (embed)
1368            - fribidi <unfixed> (embed)
1369            - m17n-db <unfixed> (embed)
1370            - sbcl <unfixed> (embed)
1371            - heimdal <unfixed> (embed)
1372            - icu <unfixed> (embed)
1373            - icu4j <unfixed> (embed)
1374            - krb5 <unfixed> (embed)
1375            - moodle <unfixed> (embed)
1376            - openldap <unfixed> (embed)
1377            - pike7.6 <unfixed> (embed)
1378            - samba <unfixed> (embed)
1379            - samba4 <unfixed> (embed)
1380            - cmucl <unfixed> (embed)
1381            - typo3-src <unfixed> (embed)
1382            - mauve <unfixed> (embed)
1383            - texlive-bin <unfixed> (embed)
1384            - ypsilon <unfixed> (embed)
1385            - jeuclid <unfixed> (embed)
1386            - charmap.app <unfixed> (embed)
1387            - clisp <unfixed> (embed)
1388            - gnulib <unfixed> (embed)
1389            - opensrs-client <unfixed> (embed)
1390            - saxonb <unfixed> (embed)
1391            - rails <unfixed> (embed)
1392    
1393    feedparser
1394            - rawdog <unfixed> (embed; bug #383422)
1395            - miro <unfixed> (embed; bug #555351)
1396            - calibre <unfixed> (embed; bug #555352)
1397            - freevo <unfixed> (embed; bug #555353)
1398            - pida <unfixed> (embed; bug #555354)
1399            - planet-venus <unfixed> (embed; bug #555355)
1400            - plone3 <unfixed> (embed; bug #555356)
1401            - exaile 0.2.14+debian-1 (embed)
1402            - screenlets 0.1.2-3 (embed)
1403            NOTE: included twice
1404    
1405    agg:
1406            - matplotlib <unfixed> (embed: bug #377271)
1407            - contextfree <unfixed> (embed)
1408            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1409            - exactimage <unfixed> (embed)
1410            - python-enable <unfixed> (embed)
1411            - mapnik 0.5.1-3 (embed)
1412            NOTE: links statically to agg, but shared library is not available (bug #377271)
1413    
1414    vtk
1415            - paraview <unfixable> (embed; bug #495426)
1416    
1417    txt2tags
1418            - rednotebook <unfixed> (embed)
1419    
1420    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1421            - gajim <unfixed> (embed)
1422            - emesene <unfixed> (embed)
1423            - convirt <unfixed> (embed)
1424            - pida <unfixed> (embed)
1425            - rednotebook <unfixed> (embed)
1426    
1427    horde3 (prototype.js is among the embeds in the following)
1428            - mnemo2 <unfixed> (embed)
1429            - nag2 <unfixed> (embed)
1430            - wordpress <unfixed> (embed)
1431            NOTE: Text_Diff (wp-includes/Text/Diff*)
1432    
1433    cimg
1434            - gmic <itp> (embed)
1435    
1436    mootools
1437            - gmic <itp> (embed)
1438    
1439    openldap
1440            - openldap2.3 <removed> (old-version)
1441    
1442    grub2
1443            - grub <unfixed> (old-version)
1444    
1445    gnupginterface
1446            - duplicity <unfixed> (embed)
1447    
1448    python-dateutil
1449            - awn-extras-applets <unfixed> (embed)
1450            - matplotlib <unknown> (embed)
1451    
1452    cups
1453            - cupsys <removed> (old-version)
1454    
1455    yui
1456            - bcfg2 <not-affected> (present in source but not included in any binary files)
1457            - serendipity <unfixed> (embed; bug #557746)
1458            - moodle 1.8.2.dfsg-5 (embed)
1459            - jifty 0.91117-1 (embed; bug #557748)
1460            - webgui 7.7.26-1 (embed)
1461            - loggerhead 1.17-1 (embed)
1462    
1463    quake3 (vanilla source not packaged in debian)
1464            - openarena <unfixable> (fork)
1465    
1466    quake2 (vanilla source not packaged in debian)
1467            - alien-arena <unfixable> (fork)
1468            - warsow <unfixable> (fork)
1469    
1470    libtheora
1471            - iceweasel <not-affected> (uses xulrunner)
1472            - xulrunner <unfixed> (embed; bug #540959)
1473            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1474            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1475            - iceape <unfixed> (embed; bug #559276)
1476            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1477            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1478    
1479    dtoa
1480            - bfilter <unfixed> (embed)
1481            - cacao <unfixed> (embed)
1482            - cdrdao <unfixed> (embed)
1483            - classpath <unfixed> (embed)
1484            - freej <unfixed> (embed)
1485            - iceape <unfixed> (embed)
1486            - iceweasel <unfixed> (embed)
1487            - jscoverage <unfixed> (embed)
1488            - kde4libs <unfixed> (embed)
1489            - kdelibs <unfixed> (embed)
1490            - kompozer <unfixed> (embed)
1491            - libv8 <unfixed> (embed)
1492            - mono <unfixed> (embed)
1493            - newlib <unfixed> (embed)
1494            - nspr <unfixed> (embed)
1495            - php5 <unfixed> (embed)
1496            - polyml <unfixed> (embed)
1497            - qt4-x11 <unfixed> (embed)
1498            - rhino <unfixed> (embed)
1499            NOTE: code translated to Java
1500            - ruby1.8 <unfixed> (embed)
1501            - ruby1.9 <unfixed> (embed)
1502            - ruby1.9.1 <unfixed> (embed)
1503            - sdd <unfixed> (embed)
1504            - sfind <unfixed> (embed)
1505            - star <unfixed> (embed)
1506            - tinymux <unfixed> (embed)
1507            - virtualbox-ose <unfixed> (embed)
1508            - webkit <unfixed> (embed)
1509            - xulrunner <unfixed> (embed)
1510    
1511    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1512            - firegpg <unfixed> (embed)
1513            - enigmail <unfixed> (embed)
1514    
1515    ptmalloc (not packaged in Debian)
1516            - crystalspace <unfixed> (embed)
1517            - qt4-x11 <unfixed> (embed)
1518    
1519    svgalib
1520            - usplash <unfixed> (embed)
1521    
1522    bogl
1523            - usplash <unfixed> (embed)
1524    
1525    taglist
1526            - usplash <unfixed> (embed)
1527    
1528    portaudio
1529            - audacity <unfixed> (embed; bug #323711)
1530    
1531    nyquist
1532            - audacity <unfixed> (embed)
1533            NOTE: embeds a forked nyquist with support for a shared library
1534    
1535    vamp-plugin-sdk
1536            - audacity <unfixed> (embed)
1537    
1538    wordpress
1539            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1540    
1541    php5
1542            - php4 <removed> (old-version)
1543    
1544    classpath
1545            - libgnucrypto-java <unfixed> (embed; bug #559788)
1546    
1547    libtool
1548            - apr <unfixed> (static; bug #489625)
1549            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1550            - arts <unfixed> (embed)
1551            - bochs 2.4.2-1 (embed; bug #560884)
1552            - camserv <unfixed> (embed)
1553            - collectd <unfixed> (embed)
1554            - courier-authlib 0.58-4 (embed)
1555            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1556            - cvsnt <unfixed> (embed)
1557            - dico <not-affected> (Uses the system copy of ltdl)
1558            - freeradius 0.1+20010527-1 (embed)
1559            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1560            - ggobi 2.1.9~20091212-1 (embed)
1561            - glame 2.0.1-4 (embed)
1562            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1563            - gnash <unfixed> (embed)
1564            - gnu-smalltalk <unfixed> (embed)
1565            - google-gadgets 0.10.5-0.3 (embed)
1566            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1567            - graphicsmagick 1.3.5-6 (embed)
1568            - graphviz 2.8-3 (embed)
1569            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1570            - guile-1.6 1.6.8-7 (embed)
1571            - hamlib <unfixed> (embed)
1572            - hercules <unfixed> (embed)
1573            - jags 1.0.4-3 (embed; bug #560864)
1574            - kdelibs <unfixed> (embed)
1575            - libannodex <removed> (embed)
1576            - libextractor <unfixed> (embed)
1577            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1578            - libtunepimp <unfixed> (embed)
1579            - mp4h <unfixed> (embed)
1580            - naim <unfixed> (embed)
1581            - parser-mysql <unfixed> (embed)
1582            - pinball <unfixed> (embed)
1583            - redland <unfixed> (embed)
1584            - siproxd <unfixed> (embed)
1585            - ski <unfixed> (embed)
1586            - synfig <unfixed> (embed)
1587            - unixodbc 2.2.4-5 (embed)
1588            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1589            - clamav 0.95+dfsg-1 (embed)
1590            - imagemagick 6:6.2.3.1-1 (embed)
1591            - hypre 2.4.0b-5 (embed)
1592            - lam <unfixed> (embed)
1593            - openmpi <unfixable> (embed; bug #559386)
1594            - parser <unfixed> (embed)
1595            - pdsh 2.18-5 (embed; bug #560892)
1596            - sbnc 1.2-8 (embed)
1597            - sdcc <unfixed> (embed)
1598            - wml <unfixed> (embed)
1599            - proftpd-dfsg <unfixed> (embed; bug #561748)
1600            - babel 1.4.0.dfsg-5 (embed)
1601            - libprelude 0.9.14-2 (embed)
1602            - heartbeat 2.1.4-7 (embed)
1603            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1604            NOTE: might've been fixed earlier
1605            - gcc-* <unknown> (embed)
1606    
1607    ocamlgsl
1608            - orpie 1.5.1-7.1 (embed; bug #550058)
1609    
1610    xdotool
1611            - keynav <unfixed> (embed; bug #560103)
1612    
1613    bulletphysics (not packaged; http://www.bulletphysics.org/)
1614            - supertuxkart <unfixed> (embed)
1615            - blender <unfixed> (embed)
1616    
1617    ghostscript
1618            - gs-gpl <removed> (old-version)
1619    
1620    icedove
1621            - thunderbird <removed> (old-version)
1622    
1623    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1624            - libjs-jquery <unfixed> (embed)
1625    
1626    sed
1627            - ssed <unfixed> (fork)
1628    
1629    phpatomlib (http://code.google.com/p/phpatomlib)
1630            - wordpress <unfixed> (embed)
1631    
1632    Services_JSON (http://pear.php.net/package/Services_JSON)
1633            - wordpress <unfixed> (embed)
1634    
1635    phpass (http://www.openwall.com/phpass/)
1636            - gallery2 <unfixed> (embed)
1637            - wordpress <unfixed> (embed)
1638            - typo3-src <unfixed> (fork)
1639            NOTE: file refers to drupal, maybe there's a copy somewhere there
1640            NOTE: a copyright owner search didn't match anything
1641            - libauthen-passphrase-perl <unfixable> (fork)
1642            NOTE: perl implementation of phpass
1643    
1644    squirrelmail
1645            - wordpress <unfixed> (embed)
1646            NOTE: class-pop3.php
1647    
1648    ezSQL (http://www.woyano.com/jv/ezsql)
1649            - wordpress <unfixable> (fork)
1650            NOTE: wp-db.php
1651    
1652    Diff.php (Clay Loveless' version/killersoft.com)
1653            - php-versioncontrol-svn <unfixed>

Legend:
Removed from v.8085  
changed lines
  Added in v.13711

  ViewVC Help
Powered by ViewVC 1.1.5