/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 8142 by fw, Tue Feb 12 20:19:50 2008 UTC revision 15272 by geissert, Sun Sep 5 23:36:41 2010 UTC
# Line 10  Format: Line 10  Format:
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>,  status: version number fixing the embedded copy
14          <itp> or <unknown> if the version number can not be determined          <unfixed> if the issue is not yet fixed
15          <unfixable> for unavoidable cases (e.g., forks that add real value)          <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
21        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
22        fork (the package is not just embedding code but it is a fork and        modified-embed (embeds a code copy that differs from upstream code)
23              thus might share parts of the source code)        fork (a full-blown fork of another source package)
24        old-version (the package is an older version of essentially        old-version (an older version of essentially the same code)
                    the same code)  
25    
26  The srcpkg might be some string to identify the code if there is no  The srcpkg might be some string to identify the code if there is no
27  specific source package.  specific source package.
28    
29  Everything up to the next line is ignored.  Everything up to the next line is ignored.
30  ---BEGIN  ---BEGIN
31  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  poppler
         NOTE: Fixed packages link to poppler library unless otherwise noted  
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
32          - pdftohtml <unknown>          - pdftohtml <unknown>
33          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
34          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
35          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
36          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
38          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
39          NOTE: links to poppler          - koffice 1:2.0.0-1 (embed; bug #436163)
         - koffice <unfixed> (embed; bug #436163)  
40          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
41          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
42          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
43          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
45          NOTE: copy only present in source but links to poppler          - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53  ppmd  ppmd
54          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60    
61    lrmi
62            - read-edid 2.0.0-1 (embed; bug #495131)
63            - s3switch <unfixed> (embed)
64            - xresprobe <unfixed> (embed)
65            - zhcon <unfixed> (embed)
66    
67    php-htmlpurifier
68            - mahara 1.2.5-1 (embed)
69            - knowledgeroot 0.9.9.5-5 (embed)
70            - moodle <unfixed> (embed)
71    
72    peercast
73            - gnome-peercast <removed> (embed)
74            [etch] - gnome-peercast <unfixed> (embed)
75    
76  silc-toolkit  silc-toolkit
77          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
78    
79    icclib
80            - ghostscript <unfixed> (embed)
81            - argyll <unfixed> (embed)
82    
83    libusb
84            - argyll <unfixed> (embed)
85    
86  dietlibc  dietlibc
87          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
88            - mksh <unfixable> (static)
89            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
90    
91    libmikmod
92            - sdl-mixer1.2 <unfixed> (embed)
93            TODO: report bug
94    
95  libiax  libiax
96          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
97    
98    spandsp
99            - iaxmodem <unfixable> (embed; bug #548885)
100    
101    python-paramiko
102            - fabric 0.9.0-2 (embed; bug #561398)
103    
104  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
105          - dpkg <unfixed> (embed)          - dpkg 1.15.6 (static)
106          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
107          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
108            - cherokee <unfixed> (embed)
109          NOTE: somehow derived code base          NOTE: somehow derived code base
110          - mono <unfixed> (embed)          - mono <unfixed> (embed)
111          TODO: check mozilla          TODO: check mozilla
# Line 73  zlib (lots of apps embed a copy, but lin Line 114  zlib (lots of apps embed a copy, but lin
114          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
115          - rpm <unknown> (embed)          - rpm <unknown> (embed)
116          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
117            - tuxcmd-modules <unfixed> (embed)
118            - zsync <unfixed>
119            - tra <unfixed>
120            - sash <unfixed>
121            - nsis <unfixed>
122            - pyfits 1:2.3.1-1
123            - mseide-msegui <unfixed>
124            NOTE: mseide
125            - mirrordir <unfixed>
126            - poco <unfixed>
127            - klibc <unfixed>
128            - emboss <unfixed>
129            - ghostscript <unfixed>
130            - freeimage <unfixed>
131            - clamav <unfixed> (fork)
132            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
133            - tuxonice-userui <unfixed> (static)
134            - plt-scheme <unfixed>
135            - perl <unfixed>
136            - paraview <unfixed>
137            - velvet 0.7.56~nozlibcopy-1
138            - gcvs <unfixed>
139            - dump <unfixed>
140            - aide <unfixed> (static)
141            - dar <unfixed> (static)
142            - avfs <unfixed>
143            - fpc <unfixed>
144            - winff <unfixed>
145            NOTE: inherited from fpc, see #472304
146            - lazarus <unfixed>
147            NOTE: inherited from fpc, see #472304
148            - erlang <unfixed> (embed)
149            - gamera 3.2.3-1 (embed)
150            - python2.4 <unfixed> (embed; bug #553403)
151            - python2.5 <unfixed> (embed; bug #553403)
152            - texlive-bin <unknown> (embed)
153    
154    dulwich
155            - hg-git 0.1.0-1 (embed; bug #541996)
156    
157    libvigraimpex
158            - hugin <unfixed> (embed; bug #542259)
159            - enblend-enfuse <unfixed> (embed; bug #542258)
160            - gamera 3.2.3-1 (embed)
161    
162  libbz2  libbz2
163          - dpkg <unfixed> (static)          - dpkg 1.15.6 (static)
164            - amd64-libs <unfixed> (static)
165  ekg          NOTE: let's call it "static"
166          - centericq <unfixed> (embed)          - dar <unfixed> (static)
167          - gaim <unfixed> (embed)          - dump <unfixed> (static)
168          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - unalz 0.64-1 (embed)
169          - kopete 4:3.3.2-5 (embed)          NOTE: has code, by the maint, to use the system version but links against the internal copy
170          - kadu <unfixed> (embed)  
171          - gadu <unfixed> (embed)  libyahoo2
172          NOTE: g/kadu not packaged in Debian yet          - centerim <unfixed> (embed; bug #559783)
173    
174    libmsn
175            - centerim <unfixed> (embed; bug #559783)
176    
177    libgadu
178            - centerim <unfixed> (embed; bug #559783)
179            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
180            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
181            - kdenetwork 4:3.3.2-5 (embed)
182            NOTE: from kdenetwork: kopete
183            - ekg 1:1.8~rc0-1 (embed)
184            - kadu 0.6.0.2-3 (embed; bug #504430)
185            - gadu <itp> (embed)
186    
187  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
188          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
189          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
190          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
191          - phpwiki (embed)          - phpwiki <unfixed> (embed)
192          - php4 <unfixed> (embed)          - php4 <removed> (embed)
193          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
194    
195  shtool (affects build-time only)  shtool (affects build-time only)
196          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
197          - php4 <unfixed> (embed)          - php4 <removed> (embed)
198            - php5 <unfixed> (embed)
199    
200  mozilla source code  xulrunner
201          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
202          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
203          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
204          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
205          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
206          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
207          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
208          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
209    
210  xli  xli
211          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
212    
213  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
214          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
215          - xfree86/xorg <unfixed> (embed)  
216          NOTE: in libxpm  libxpm
217            - lesstif2 <unfixed> (embed; bug #575750)
218    
219  kerberized apps with BSD origin  kerberized apps with BSD origin
220          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
221          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
222          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
223    
224  grip (which pkg is the origin?)  grip (which pkg is the origin?)
225          - libcdaudio          - libcdaudio <unfixed>
226          - grip          - grip <unfixed>
227          - gnome-vfs          - gnome-vfs <unfixed>
228          TODO: check vfs2 as well          TODO: check vfs2 as well
229    
230  fudforum  fudforum
231          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
232          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
233          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
234    
235    libbsd
236            - rdate 1:1.2-3 (embed)
237            - atheme-services <unfixed>
238            - libbsd-arc4random-perl <not-affected> (modified-embed)
239            NOTE: code not used, it links dynamically against libbsd instead
240            - isakmpd <unfixed>
241            - bsdgames <unfixed> (embed)
242            - bsd-mailx <unfixed> (embed)
243            - netcat-openbsd <unfixed> (embed; bug #550611)
244            - openssh <unfixed> (embed)
245            - unworkable <unfixed> (embed)
246            - mksh <unfixed> (modified-embed)
247            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
248            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
249            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
250    
251  cvs  cvs
252          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
253          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
254    
255  pcre  pcre3
256          - python* <unfixed> (embed)          - php4 <removed> (embed)
         - php4 <unknown> (embed)  
257          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
258          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
259            NOTE: libgoffice-*
260          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
261          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
262          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
263          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
264          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
265          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
266          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
267          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
268          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
269          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
270            - tin 980117-1 (embed)
271            - kazehakase 0.5.2-1
272            - webkit 1.0.1-1 (embed)
273            - qt4-x11 <unfixed> (embed)
274            NOTE: embedded via webkit copy
275            - erlang <unfixed> (embed)
276            - ssed <unfixed> (embed)
277            - ircd-hybrid <unfixed> (static)
278            - emboss <unfixd>
279            - cherokee <unfixed> (embed)
280            - oftc-hybrid <unfixed> (embed)
281            - ratbox-services <unfixed> (embed)
282            - squeak-vm <unfixed> (embed)
283            - tinymux <unfixed> (embed)
284    
285  tiff  tiff
286          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
287          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
288            - freeimage <unfixed> (embed)
289            - libtk-img <unfixed> (embed)
290            NOTE: there are two copies, one under tiff/ other under libtiff/
291            - gdal <unfixed>
292    
293  uudeview  uudeview
294          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
295            - pan <unfixed> (embed)
296    
297  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
298          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
299          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
300          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
301            - heimdal <unfixed> (embed; bug #559616)
302    
303  util-linux/mount  util-linux/mount
304          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
305          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
306    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
307  sylpheed  sylpheed
308          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
309    
# Line 190  phpldapadmin Line 318  phpldapadmin
318  chmlib  chmlib
319          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
320    
321  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
322          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
323          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
324          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
325          - vlc <unfixed> (static)          - smilutils 0.3.0-10
326          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
327          - motion <unfixed> (static)          - motion 3.1.19-1
328          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
329          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed> (static)
         - xmovie <unfixed>  
330          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
331            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
332            - audacity 1.3.7-2 (embed; bug #512278)
333            - chromium-browser <unfixed> (fork)
334    
335    faad2
336            - mplayer 1.0~rc2-20 (embed)
337            - avifile <unfixed> (embed; bug #538750)
338            - ffmpeg-debian <removed> (embed)
339    
340  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
341          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
342            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
343            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
344    
345  libdts  libdts
346          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 216  liba52 Line 352  liba52
352          - a52dec <unfixed> (embed)          - a52dec <unfixed> (embed)
353          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
354    
355  libmpeg2  mpeg2dec (libmpeg2)
         - mpeg2dec <unfixed> (embed)  
356          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
357    
358  curl  libmpeg3
359          - wget <unfixed> (embed)          - squeak-vm <unfixed> (embed)
360          NOTE: code for NTLM authentication  
361    libntlm
362            - wget <unfixed> (fork; bug #550436)
363            - curl <unfixed> (fork; bug #550437)
364            - cntlm <unfixed> (fork; bug #550438)
365    
366  uw-imap  uw-imap
367          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 231  uw-imap Line 370  uw-imap
370  imagemagick  imagemagick
371          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
372    
373    python-urlgrabber
374            - mercurial <unfixed> (embed; bug #531062)
375            - w3af <unfixed> (embed; bug #555372)
376            [experimental] - harvestman <unfixed> (embed; bug #555373)
377    
378    beautifulsoup
379            - python-mechanize <unfixed> (embed; bug #555349)
380            - zope2.11 <removed> (embed; bug #555350)
381            - twill <unknown> (embed)
382    
383  halibut  halibut
384          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
385    
386  libghttp  libghttp
387          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
388    
389  libsndfile  libsndfile
390          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
391    
392  glibmm2.4  glibmm2.4
393          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
394    
395  libgnomecanvasmm2.6  libgnomecanvasmm2.6
396          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
397    
398  libsigc++-2.0  libsigc++-2.0
399          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
400    
401  soundtouch  soundtouch
402          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
403    
404  libmms  libmms
405          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 258  libmms Line 407  libmms
407    
408  fckeditor  fckeditor
409          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
410          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
411          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
412          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
413            - request-tracker3.8 <unfixed> (embed)
414            - otrs2 <unfixed> (embed)
415    
416  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
417          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
418    
419  libphp-phpmailer  libphp-phpmailer
420          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
421            - mahara <unfixed> (embed)
422            - symfony <unfixed> (embed; bug #566778)
423            [etch] - phpgroupware <unfixed> (embed)
424            NOTE: phpgroupware-felamimail is only in etch
425            - egroupware <unfixed> (embed; bug #504283)
426            - glpi <unfixed>
427    
428  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
429          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
430    
431  bennu (not packaged in Debian)  giflib
432          - moodle <unfixed> (embed)          - wine <unfixed> (embed; bug #466181)
433    
434  smarty:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
435          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
436    
437    smarty
438            - moodle 1.8.2-2 (embed; bug #471158)
439            - gallery2 2.2.5-2 (embed; bug #471160)
440            - mahara 0.9.2-2 (embed; bug #471201)
441            - gosa 2.4beta1-1 (embed; bug #471200)
442    
443  TinyMCE  TinyMCE
444          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
445          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
446          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
447          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
448    
449  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
450          - scite <unfixed> (embed)          - scite <unfixed> (embed)
451          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
452          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
453          - geany <unfixed> (embed)          - geany <unfixed> (fork)
454            - anjuta <unfixed> (embed)
455    
456  libphp-adodb  libphp-adodb
457          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
458          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
459          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
460          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
461          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
462          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
463            - torrentflux 2.0beta1-2 (embed)
464          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
465          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
466          - cacti <unknown> (embed)          - cacti <unknown> (embed)
467          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
468          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
469            - gforge 4.7~rc2-6 (embed)
470            - mahara <unfixed> (embed)
471    
472  gzip  gzip
473          - linux-kernel <unfixed> (embed)          - linux-2.6 <unfixed> (embed) [lib/inflate.c]
         NOTE: lib/inflate.c  
474          - klibc <unfixed> (embed)          - klibc <unfixed> (embed)
475          NOTE: based on linux-kernel gzip code          NOTE: based on linux-kernel gzip code
476          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
477            - pristine-tar <unfixed> (modified-embed)
478            NOTE: compression code only, not uncompression
479            - ncompress <unfixed> (old-version)
480    
481  neon  neon
482          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
483          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
484          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
485            - litmus <removed> (embed; #395875)
486          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
487          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
488          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
489          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
490    
491  libmodplug  libmodplug
492          - gst-plugins-bad0.10 <unfixed> (embed)          - gst-plugins-bad0.10 0.10.10.2-1 (embed)
493    
494  libvncserver  libvncserver
495          - vino <unfixed> (embed)          - vino <unfixed> (embed)
# Line 328  libvncserver Line 497  libvncserver
497  putty  putty
498          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
499    
500  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
501          - filezilla <unfixed>          - filezilla <unfixed>
502            - crystalspace <unfixed> (embed)
503            - libwfut <unfixed> (embed)
504            - rarian <unfixed> (embed)
505            - bulletml <unfixed> (embed)
506            - pokerth <unfixed> (embed)
507            - qutecom <unfixed> (embed)
508            - sofa-framework <unfixed> (embed)
509            - yate <unfixed> (embed)
510            - antigrav <unfixed> (embed)
511            - balder2d <unfixed> (embed)
512            - cal3d <unfixed> (embed)
513            - criticalmass <unfixed> (embed)
514            - ember <unfixed> (embed)
515            - epiphany <unfixed> (embed)
516            - gambit <unfixed> (embed)
517            - noiz2sa <unfixed> (embed)
518            - ogre <unfixed> (embed)
519            - opencity <unfixed> (embed)
520            - openmovieeditor <unfixed> (embed)
521            - pouetchess <unfixed> (embed)
522            - tecnoballz <unfixed> (embed)
523            - trigger-rally <unfixed> (embed)
524            - xmoto <unfixed> (embed)
525            - mapnik <unknown> (embed)
526            NOTE: uses a different XML parser by default
527            - rrootage 0.23a-6 <embed>
528            NOTE: links to libbulltetml
529            - boson <unknown> (embed)
530            NOTE: the embedded code is unused
531    
532  gv  gv
533          - evince <unfixed> (embed)          - evince <unfixed> (embed)
534          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
535          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
536    
537  libXbae  libXbae
538          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <unfixed> (embed)
539          NOTE: from Cernlib  
540    libgtkhtml
541            - claws-mail-extra-plugins <unfixed> (fork)
542    
543  libXaw  libXaw
544          [etch] - libpawlib2-lesstif          - paw <unfixed> (embed)
         NOTE: from Cernlib  
545          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
546    
547  libgd2  libgd2
548          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
549          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
550          - wml <unfixed> (embed)          - wml 2.0.11ds2-1 (embed)
551            - libwmf <unfixed> (embed)
552          NOTE: derived from gd 1.6.3          NOTE: derived from gd 1.6.3
553            - texlive-bin 2009-1 (embed)
554    
555  rar  rar
556          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 364  mplayer (DirectMedia Object loader) Line 564  mplayer (DirectMedia Object loader)
564          NOTE: src/libw32dll/          NOTE: src/libw32dll/
565          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
566          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
567            - mplayer 1.0~rc2-20 (embed)
568    
569  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
570          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 372  fsplib (http://sourceforge.net/projects/ Line 573  fsplib (http://sourceforge.net/projects/
573          - gftp <unfixed> (embed)          - gftp <unfixed> (embed)
574          NOTE: lib/fsplib version 0.3          NOTE: lib/fsplib version 0.3
575    
576    sprng
577            - tree-puzzle <unfixed> (embed)
578    
579  librpcsecgss  librpcsecgss
580          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
581    
582  jasper  jasper
583          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
584    
585    libiris
586            - psi <unfixed> (embed)
587            - kdenetwork <unfixed> (embed)
588            NOTE: kopete embeds libiris but links dynamically to libidn
589            - kdegames <unfixed> (embed)
590            NOTE: ksirk/kde4
591    
592  libidn  libidn
593          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
594            - psi <unfixed> (embed)
595  liblua          NOTE: psi embeds libiris which embeds libidn
596          - monotone <unfixed> (embed)          - kdegames <unfixed> (embed)
597            NOTE: kdegames/kde4 embeds libiris which embeds libidn
598    
599    lua5.1
600            - monotone 0.43-1 (embed)
601            - nmap 5.00-1 (embed; bug #527997)
602            [lenny] - nmap <unfixed> (embed; bug #527997)
603            - ocropus <unfixed> (embed)
604            - enigma <unfixed> (embed)
605            NOTE: requires lua built with C++
606            - freeciv <unfixed> (embed)
607            - spring <unfixed> (embed)
608    
609  libbotan  libbotan
610          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
611    
612  NetXX  NetXX
613          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
614    
615  libgc  libgc
616          - mono <unfixed> (embed)          - mono <unfixed> (embed)
617    
618  lzma  lzma
619          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
620            - xz-utils <unfixed> (fork)
621    
622  lzo  lzo
623          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
624    
625  yassl  yassl
626          - mysql-dfsg-5.0 <unfixed> (embed)          - mysql-dfsg-5.0 <unfixed> (embed)
627            - mysql-5.1 <unfixed> (embed)
628    
629  pax code  pax code
630          - tar <unfixed> (embed)          - tar <unfixed> (embed)
# Line 418  guichan Line 641  guichan
641  tolua  tolua
642          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
643          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
644            NOTE: actually tolua++
645            - ocropus <unfixed> (embed)
646            NOTE: actually tolua++
647            - freeciv <unfixed> (embed)
648            NOTE: actually tolua++
649            - enigma <unfixed> (embed)
650    
651  asio-dev  asio-dev
652          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
653    
654  xine-lib  xine-lib
655          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 433  netpbm Line 660  netpbm
660          - tcl8.4 <unfixed> (embed)          - tcl8.4 <unfixed> (embed)
661          - tcl8.5 <unfixed> (embed)          - tcl8.5 <unfixed> (embed)
662          NOTE: generic/tkImgGIF.c          NOTE: generic/tkImgGIF.c
663    
664    tk8.5
665            - tk8.0 <removed> (old-version)
666            - tk8.3 <unfixed> (old-version)
667            - tk8.4 <unfixed> (old-version)
668            - perl-tk <unfixable> (fork)
669    
670    samba
671            - mc 2:4.6.2~git20080311-1 (embed)
672            NOTE: maintainer is aware of this, currently searching a solution
673    
674    plib1.8.4c2
675            - boson <unfixed> (fork)
676            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
677    
678    fribidi
679            - quesoglc 0.7.2-2 (embed)
680    
681    glew
682            - quesoglc <unfixed> (embed; bug #489341)
683            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
684            - trigger 0.5.2.1-2 (embed)
685            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
686            - trigger-rally 0.5.2.1-2 (embed)
687            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
688            - chromium-browser 5.0.375.70~r48679-2
689    
690    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
691            - transcend <unfixed> (embed)
692            - cultivation <unfixed> (embed)
693            - passage <unfixed> (embed)
694            - gravitation <unfixed> (embed)
695    
696    tar
697            - libarchive <unfixed> (embed)
698            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
699    
700    cpio
701            - libarchive <unfixed> (embed)
702            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
703    
704    kde4libs
705            - kdelibs <unfixable> (old-version)
706    
707    webkit
708            - qt4-x11 <unfixed> (embed; bug #479851)
709            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
710            - kde4libs <unfixable> (fork)
711            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
712            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
713            - chromium-browser <unfixed> (fork)
714    
715    ftgl
716            - blender 2.46+dfsg-1 (embed)
717    
718    wv
719            - abiword <unfixed>
720    
721    qemu
722            - kvm <removed> (embed; bug #543159)
723            - qemu-kvm <unfixed> (embed; bug #560853)
724            NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
725            - xen-3 3.4.2-2 (embed; bug #560856)
726            - xen-unstable <unfixed> (embed; bug #560856)
727    
728    vgabios
729            - kvm <removed> (embed; bug #489442)
730            - qemu-kvm <unfixed> (embed)
731    
732    bochs
733            - kvm <removed> (embed; bug #489442)
734            - qemu-kvm <unfixed> (embed)
735    
736    speex
737            - vorbis-tools <unfixed> (embed)
738            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
739            - gst-plugins-good0.10 <unfixed> (embed)
740            - xine-lib <unfixed> (embed)
741            - libfishsound <unfixed> (embed)
742            - libannodex <removed> (embed)
743            - vlc <unfixed> (embed)
744            - xmms-speex <unfixed> (embed)
745            - libsdl-sound1.2 <unfixed> (embed)
746            - sweep <unfixed> (embed)
747    
748    libreadline
749            - magic <itp> (old-version)
750    
751    opcode
752            - ode <unfixed> (embed)
753            NOTE: opcode is not a package in debian, it is just embedded
754            NOTE: http://www.codercorner.com/Opcode.htm
755    
756    gimpact
757            - ode <unfixed> (embed)
758            NOTE: gimpact is not a package in debian, it is just embedded
759            NOTE: http://gimpact.sf.net
760    
761    mochikit
762            - mahara <unfixed> (embed)
763            NOTE: they require extra patches, still unmerged upstream
764            - ntop <unfixed> (embed)
765            - coherence 0.6.2-1 (embed)
766            - paste <unfixed> (embed)
767            - turbogears <unfixed> (embed)
768            - plone3 <removed> (embed)
769            - xulrunner <unfixed> (embed)
770            - libjifty-plugin-chart-perl <unfixed> (embed)
771            - sabnzbdplus <unfixed> (embed)
772            - tgmochikit <unfixed> (embed)
773    
774    prototypejs
775            - netbeans-ide 6.0.1+dfsg-2 (embed)
776            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
777            - webcit <unfixed> (embed; bug #555219)
778            - asterisk 1:1.6.2.0~rc3-1 (embed)
779            - libjson-ruby 1.1.4-1 (embed; bug #555224)
780            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
781            - horde3 <unfixed> (embed)
782            - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
783            - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
784            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
785            - ebug-http <unfixed> (embed; bug #555236)
786            - libaws 2.7-1 (embed; bug #555222)
787            - phpgedview <removed> (embed)
788            - poker-network 1.7.6-1 (embed; bug #555238)
789            - rails 2.1.0-6 (embed)
790            - wordpress 2.5.0-2 (embed; bug #555243)
791            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
792            TODO: search through all of the other zope packages
793            - ampache 3.4.1-2 (embed)
794            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
795            - hobix 0.5~svn20070319-4 (embed; bug #555247)
796            - zabbix 1.6.6-4 (embed; bug #555250)
797            - chora2 2.1.1+debian0-1 (embed; bug #555253)
798            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
799            - jscropperui 1.2.1-1 (embed; bug #555257)
800            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
801            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
802            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
803            - activeldap 1.2.1-1 (embed)
804            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
805            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
806            - otrs2 2.3.4-6 (embed; bug #555267)
807            - webcalendar 1.2~b1-2 (embed; bug #555269)
808            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
809            - jifty 0.90519-1 (embed; bug #555271)
810            - jquery 1.4-1 (embed; bug #555272)
811            - passenger 2.2.5debian1-1 (embed; bug #555273)
812            - plone3 <removed> (embed; bug #555275)
813            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
814            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
815            - xulrunner <unfixed> (embed)
816            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
817            - jclicmoodle <unfixed> (embed)
818            - git-cola <unfixed> (embed)
819    
820    gdb
821            - insight <unfixed> (embed)
822    
823    e2fsprogs
824            - ldiskfsprogs <unfixable> (fork)
825    
826    quazip (not packaged in Debian)
827            - qcake <unfixed> (embed)
828            NOTE: starting with upstream version 0.6.4
829    
830    exo
831            - pcmanfm <unfixed> (embed; bug #499677)
832            NOTE: slightly modified source code
833    
834    java
835            - openjdk-6 <unfixed>
836            - sun-java5 <unfixed>
837            - sun-java6 <unfixed>
838    
839    libphp-snoopy
840            - ampache 3.4.1-2 (embed; bug #504169)
841            - gforge 4.6.99+svn6094-2 (embed)
842            - mahara 1.0.5-2 (embed; bug #504170)
843            - pixelpost 1.7.1-5 (embed; bug #504171)
844            - mediamate 0.9.3.6-5 (embed; bug #504172)
845            - opendb <removed> (embed; bug #504173)
846            [etch] - opendb <unfixed> (embed; bug #504173)
847            - wordpress 2.5.1-9 (embed; bug #443948)
848            - moodle <unfixed> (embed; bug #507185)
849            [etch] - phpgroupware <unfixed> (embed)
850            NOTE: phpgroupware-felamimail
851            - magpierss 0.72-3 (embed; bug #431089)
852    
853    jquery
854            - zekr <unfixed> (embed)
855            - wordpress <unknown> (embed)
856            - yocto-reader <unfixed> (embed)
857            - textpattern <unfixed> (embed)
858            - genshi 0.5.1-1 (embed)
859            NOTE: compressed file under examples/ dir
860            - prewikka <unfixed> (embed)
861            - libramaze-ruby <unfixed> (embed)
862            - drupal6 <unfixed> (embed)
863            - b2evolution <unfixed> (embed)
864            - wesnoth <unfixed> (embed)
865    
866    tablesorter (jquery plugin, not packaged yet)
867            - wesnoth <unfixed> (embed)
868    
869    kses
870            - wordpress <unfixed> (embed; bug #504242)
871            NOTE: their copy has all methods renamed to wp_<foo>
872            NOTE: kses isn't in Debian, RFP: #504240
873            - moodle <unfixed> (embed; bug #507185)
874            - egroupware <unfixed> (embed)
875    
876    magpierss
877            - wordpress <unfixed> (embed; bug #504242)
878            - moodle <unfixed>
879    
880    php-gettext
881            - wordpress 2.8.4-1 (embed; bug #504242)
882            - docbookwiki <unfixed> (embed)
883            - knowledgeroot 0.9.9.5-1
884            NOTE: non-free
885    
886    libphp-ixr (name may change, it is the Incutio XML-RPC)
887            - wordpress <unfixed> (embed; bug #504242)
888            NOTE: libphp-ixr isn't in Debian, RFP: #504236
889            - dokuwiki <unfixed> (embed)
890            - textpattern <unfixed> (embed)
891    
892    libphp-cas
893            - glpi <unfixed> (embed)
894            - moodle <unfixed> (embed; bug #505984)
895    
896    scriptaculous (prototype.js is among the embeds in the following)
897            - glpi <unfixed> (embed)
898            - libaws <unfixed> (embed; bug #555222)
899            - op-panel <unfixed> (embed)
900            - symfony <unfixed> (embed)
901            NOTE: maintainer says there are extra incompatible changes required
902            - pixelpost 1.7.1-6 (embed)
903            - webhelpers <unfixed> (embed)
904            - qwik <removed> (embed; bug #555241)
905            - smokeping <unfixed> (embed)
906            - turba2 <unfixed> (embed)
907            - typo3-src 4.2.3-1 (embed)
908            - request-tracker3.6 <unfixed> (embed)
909            - request-tracker3.8 <unfixed> (embed)
910            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
911            - wordpress 2.5.0-2 (embed)
912            - libhtml-prototype-perl 1.48-3 (embed)
913    
914    libmarkdown-php
915            - moodle <unfixed> (embed; bug #507185)
916            - pixelpost 1.7.1-6 (embed)
917    
918    php-openid
919            - wordpress-openid 3.3.2-1 (embed)
920    
921    geshi
922            - dokuwiki 0.0.20080505-3.1 (embed)
923            - pgfouine 1.0-1.1 (embed)
924            - websvn 2.1.0-1 (embed)
925    
926    webcalendar
927            - gforge 4.7~rc2-6 (embed; bug #504758)
928    
929    libical
930            - kdepim <unknown> (fork)
931            NOTE: fixed at some point during 4.0
932            - kdepimlibs 4.2.0-1 (fork)
933            - claws-mail-extra-plugins <unfixed> (fork)
934    
935    harfbuzz
936            - qt4-x11 <unfixed> (embed)
937            - pango1.0 <unfixed> (embed)
938            - fontmatrix <unfixed> (embed)
939    
940    libzip
941            - php5 <unfixable> (modified-embed)
942            - odt2txt <unfixed> (embed; bug #523808)
943    
944    json.php (not packaged; should be replaced with php's built-in functions)
945            - moodle <unfixed>
946            - yui <unfixed>
947            - gallery2 <unfixed>
948            - dokuwiki <unfixed>
949            - typo3-src <unfixed>
950    
951    php-fpdf
952            - tcpdf <itp> (fork)
953            - moodle <unfixed>
954            - phpwiki <unfixed>
955            - egroupware <unfixed>
956            - ldap-account-manager <unfixed> (fork)
957    
958    tcpdf (itp: #495985)
959            - moodle <unfixed>
960            - phpmyadmin <unfixed>
961    
962    typo3
963            - moodle <unfixed>
964    
965    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
966            - moodle <unfixed>
967            - gosa <unfixed>
968    
969    php-ole (itp: #487558)
970            - moodle <unfixed>
971    
972    pieforms (http://www.catalyst.net.nz)
973            - mahara <unfixed>
974    
975    savant2 (http://phpsavant.com)
976            - egroupware <unfixed>
977    
978    rssparser (http://nwow.org)
979            - egroupware <unfixed>
980            - phpgroupware <unfixed>
981    
982    lcms
983            - openjdk-6 <unfixed> (fork)
984            - gimp 2.4.0~rc2-2
985    
986    libphp-phplayersmenu
987            - diogenes <unfixed>
988            - phpldapadmin <unfixed>
989    
990    libphp-pclzip
991            - docvert <unfixed>
992            - moodle <unfixed>
993            - egroupware <unfixed>
994    
995    libphp-simplepie
996            - dokuwiki <unfixed>
997            - wordpress <unfixed>
998    
999    libphp-jpgraph
1000            - egroupware <unfixed>
1001    
1002    php-simpletest
1003            - moodle <unfixed>
1004    
1005    libpng
1006            - iceweasel <not-affected> (uses xulrunner)
1007            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1008            - iceape 1.0.13~pre080614i-0etch1 (embed)
1009            - xulrunner 1.9.0.13-1 (embed)
1010            [lenny] - xulrunner 1.9.0.11-0lenny1
1011            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1012            - gamera 3.2.3-1 (embed)
1013            - freeimage <unfixed> (embed)
1014            - tuxonice-userui <unfixed> (static)
1015    
1016    irssi
1017            - silc-client <unfixed> (embed)
1018            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1019    
1020    extc
1021            - mtasc <unfixed> (embed)
1022            - haxe <unfixed> (embed)
1023    
1024    swflib
1025            - mtasc <unfixed> (embed)
1026            - haxe <unfixed> (embed)
1027    
1028    libitext-java
1029            - bouncycastle 2.1.4-1 (embed)
1030    
1031    python-ply
1032            - pyke <unfixed> (embed; bug #555363)
1033            - pywbem 0.7.0-4 (embed; bug #555364)
1034            - sepolgen <unfixed> (embed; bug #555365)
1035            - zope-textindexng3 <unknown> (embed)
1036            - iceweasel <not-affected> (uses xulrunner)
1037            - xulrunner <unknown> (embed)
1038            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1039    
1040    libdumbnet (libdnet upstream)
1041            - nmap <unfixed> (fork)
1042    
1043    gcc-4.4
1044            - gcc-mingw32 <unfixed> (embed)
1045    
1046    camlimages
1047            - advi <unfixed> (static; bug #550441)
1048    
1049    memcached
1050            - memcachedb <unfixed> (embed)
1051    
1052    yajl
1053            - argyll <unfixed> (embed; bug #544223)
1054            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1055    
1056    nusoap
1057            - gforge 4.8.2-1 (embed)
1058            - ampache <unfixed> (embed)
1059            - poker-network <unfixed> (embed)
1060            - moodle <unfixed> (embed)
1061            NOTE: code is not used when running under php5 and soap is enabled
1062            - phpwiki <unfixed> (embed)
1063            - gallery2 <unfixed> (embed)
1064            - typo3-src <unfixed> (embed)
1065            - phpgacl 3.3.7-7 (embed)
1066            - mantis 1.1.8+dfsg-1 (embed)
1067    
1068    libept
1069            - adept <unfixed> (embed; bug #540649)
1070    
1071    libvorbis
1072            - iceweasel <not-affected> (uses xulrunner)
1073            - xulrunner <unfixed> (embed; bug #540959)
1074            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1075            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1076            - iceape <unfixed> (embed)
1077            [etch] - iceape <not-affected> (introduced in 2.0)
1078            [lenny] - iceape <not-affected> (introduced in 2.0)
1079    
1080    cairo
1081            - iceweasel <not-affected> (uses xulrunner)
1082            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1083    
1084    liboggz
1085            - iceweasel <not-affected> (uses xulrunner)
1086            - xulrunner <unfixed> (embed; bug #540959)
1087            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1088            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1089            - iceape <unfixed> (embed)
1090            [etch] - iceape <not-affected> (introduced in 2.0)
1091            [lenny] - iceape <not-affected> (introduced in 2.0)
1092    
1093    liboggplay
1094            - iceweasel <not-affected> (uses xulrunner)
1095            - xulrunner <unfixed> (embed; bug #540959)
1096            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1097            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1098            - iceape <unfixed> (embed)
1099            [etch] - iceape <not-affected> (introduced in 2.0)
1100            [lenny] - iceape <not-affected> (introduced in 2.0)
1101    
1102    php-net-dnsbl
1103            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1104    
1105    php-onyx-rss
1106            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1107    
1108    php-text-wiki
1109            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1110    
1111    php-xml-rpc
1112            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1113    
1114    polarssl (does not have a shared library)
1115            - pdkim <itp> (embed; bug #543150)
1116            - xyssl <unfixed> (old-version)
1117    
1118    pidgin (libpurple)
1119            - gaim <removed> (old-version)
1120            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1121    
1122    icu
1123            - webkit 1.0.1-1 (embed; bug #547214)
1124            - texlive-bin <unfixed> (fork)
1125            NOTE: texlive upstream working with icu upstream to merge their changes
1126            - chromium-browser 5.0.375.29~r46008-3
1127    
1128    cyrus-imapd-2.2
1129            - kolab-cyrus-imapd <unfixed> (fork)
1130            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1131    
1132    python-cxx-dev
1133            - freecad 0.9.2646.3-1 (embed; bug #547936)
1134    
1135    zipios++
1136            - freecad 0.9.2646.3-1 (embed; bug #547941)
1137            - enigma 0.92.3-3 (embed)
1138            NOTE: likely fixed earlier, marking etch's version as fixed
1139    
1140    linux-2.6
1141            - kvm <removed> (embed; bug #549973) [./kernel/*]
1142            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1143            - kernel-source-2.6.8 <removed> (old-version)
1144            - kernel-source-2.4.27 <removed> (old-version)
1145            - kernel-source-2.4.24 <removed> (old-version)
1146            - kernel-source-2.2.25 <removed> (old-version)
1147            - kernel-source-2.2.20 <removed> (old-version)
1148    
1149    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1150            - kvm <removed> (embed) [./libfdt/*]
1151            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1152    
1153    qweb (not packaged)
1154            - ajaxterm <unfixed>
1155    
1156    opensaml2
1157            - opensaml <removed> (old-version)
1158    
1159    shibboleth-sp2
1160            - shibboleth-sp <removed> (old-version)
1161    
1162    tuxonice-userui
1163            - suspend2-userui <removed> (old-version)
1164    
1165    expat
1166            - w3c-libwww <removed> (embed; bug #551941)
1167            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1168            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1169            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1170            - python2.4 <unfixable> (embed; bug #553403)
1171            - python-4suite <unfixed> (embed; bug #516935)
1172            - wxwindows2.4 <removed> (embed)
1173            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1174            - wxwidgets2.8 2.8.10.1-2 (embed)
1175            - celementtree 1.0.5-8 (embed)
1176            NOTE: Maybe that was fixed even earlier
1177            - audacity 1.3.2-1 (embed)
1178            - matanza <unfixed> (embed)
1179            - tdom 0.8.3~20080525-1 (embed)
1180            - udunits 2.1.8-4 (embed)
1181            - apr-util 1.2 (embed)
1182            - ayttm <unfxed> (embed; bug #561006)
1183            - cableswig <unfixed> (embed)
1184            - cadaver <unfixed> (embed)
1185            - cmake 2.6.0-6 (embed)
1186            - coin3 <unfixed> (embed)
1187            - gdcm 2.0.14-2 (embed)
1188            - ghostscript 8.71~dfsg-2 (embed)
1189            - grmonitor <removed> (embed)
1190            - iceape <unfixed> (embed)
1191            - insighttoolkit 3.16.0-1 (embed)
1192            NOTE: insighttoolkit might've been fixed earlier
1193            - libparagui1.1 1.0.2-1 (embed)
1194            - paraview 3.6.2-1 (embed)
1195            - poco 1.3.6p1-1 (embed)
1196            - simgear <unfixed> (embed)
1197            - sitecopy 1:0.16.0-1
1198            - smart <unfixed> (embed)
1199            NOTE: smart embeds celementree, and it includes expat
1200            - swish-e <not-affected> (Linked against libxml, which is used instead)
1201            - tla 1.3.5+dfsg-15 (embed)
1202            - vtk 4.1.20030227-1 (embed)
1203            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1204            - xmlrpc-c <unfixed> (embed)
1205            - iceweasel <unfixed> (embed)
1206            - kompozer <unfixed> (embed)
1207            - vxl 1.13.0-2 (embed)
1208            - xulrunner <unfixed> (embed)
1209            - apache2 2.2 (embed)
1210            - texlive-bin <not-affected> (Embedded code not compiled in)
1211            - vnc4 <unfixed> (embed)
1212            - xotcl 1.6.6-1 (embed)
1213            - chromium-browser 5.0.375.29~r46008-3
1214    
1215    xerces-c
1216            - xerces-c2 <unfixed> (old-version)
1217            - xerces27 <removed> (old-version)
1218    
1219    md5 (RSA's version; not the gnu version provided by coreutils)
1220            - w3c-libwww <removed> (embed; bug #551942)
1221            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1222    
1223    libparagui1.1
1224            - asc <unfixable> (fork)
1225    
1226    enet
1227            - sauerbraten <unfixed> (embed; #497194)
1228    
1229    eglibc
1230            - glibc <removed> (old-version)
1231            - mksh <unfixable> (static)
1232              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1233    
1234    galib
1235            - gamera 3.2.3-1 (embed)
1236    
1237    configobj
1238            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1239            - elisa <unfixed> (embed; bug #555337)
1240            - gaupol <unfixed> (embed; bug #555338)
1241            - ipython <unfixed> (embed; bug #555339)
1242            - pida <unfixed> (embed; bug #555340)
1243            - psychopy <unfixed> (embed; bug #555341)
1244            - rest2web <unfixed> (embed; bug #555342)
1245            - auth2db <unknown> (embed)
1246            - dynagen <unknown> (embed)
1247            - iceweasel <unknown> (embed)
1248            - sabnzbdplus <unknown> (embed)
1249            - xulrunner <unknown> (embed)
1250            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1251    
1252    python-clientform
1253            - bibus <unfixed> (embed; bug #555332)
1254            - zope2.10 <unfixed> (embed; bug #555333)
1255            - zope2.11 <removed> (embed; bug #555334)
1256            - python-mechanize <unknown> (embed)
1257            - twill <unknown> (embed)
1258    
1259    python-mechanize
1260            - zope2.10 <unfixed> (embed; bug #555337)
1261            - zope2.11 <removed> (embed; bug #555338)
1262            - twill <unknown> (embed; bug #555339)
1263    
1264    pexpect
1265            - duplicity 0.6.06-1 (embed; bug #555361)
1266            - hplip <unfixed> (embed; bug #555362)
1267            - smart <unfixed> (embed; bug #555363)
1268    
1269    pyparsing
1270            - bauble <unfixed> (embed; bug #555366)
1271            - boa-constructor 0.6.1-8 (embed; bug #555367)
1272            - calibre <unfixed> (embed; bug #555368)
1273            - matplotlib <unfixed> (embed; bug #531024)
1274            - zhpy 1.7.3.1-1 (embed; bug #555370)
1275            - polybori <unknown> (embed)
1276            - python-whoosh <unknown> (embed)
1277            - twill <unknown> (embed)
1278            - zope-textindexng3 <unknown> (embed)
1279    
1280    python-pysqlite2
1281            - python2.4 <unfixed> (embed; bug #553403)
1282            - python2.5 <unfixed> (embed; bug #553403)
1283    
1284    celementtree
1285            - python2.5 <unfixed> (embed)
1286            - smart <unfixed> (embed)
1287    
1288    elementtree
1289            - python2.5 <unfixed> (embed)
1290            - python2.6 <unfixed> (embed)
1291            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1292            - gedit 2.28.2-1 (embed; bug #555344)
1293            - smart <unfixed> (embed)
1294            - solfege <unfixed> (embed; bug #555345)
1295            - w3af <unfixed> (embed; bug #555346)
1296            - python-qt4 <unknown> (embed)
1297            - sphinx <unknown> (embed)
1298            - python-nltk <itp> (embed)
1299    
1300    python2.5
1301            - python2.4 <unfixed> (old-version)
1302            - jython <unfixed> (embed)
1303            NOTE: embeds many stdlib modules
1304            - python-django <unfixed> (embed; bug #555419)
1305            NOTE: embeds stdlib modules: doctest, decimal
1306            - gamera 3.2.3-1 (embed)
1307            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1308            - boa-constructor <unfixed> (embed; bug #555426)
1309            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1310            - nicotine <unfixed> (embed; bug #555427)
1311            NOTE: embeds stdlib modules: ConfigParser
1312            - museek+ <unfixed> (embed; bug #555428)
1313            NOTE: embeds stdlib modules: ConfigParser
1314            - vegastrike-data <removed> (embed)
1315            NOTE: embeds many stdlib modules
1316            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1317            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1318            - config-manager <unfixed> (embed; bug #555423)
1319            NOTE: embeds stdlib modules: optparse
1320            - jhbuild 2.28.0-1 (embed; bug #555421)
1321            NOTE: embeds stdlib modules: optparse, subprocess
1322            - smart <unfixed> (embed; bug #555432)
1323            NOTE: embeds stdlib modules: optparse
1324            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1325            NOTE: embeds stdlib modules: doctest
1326            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1327            NOTE: embeds stdlib modules: doctest
1328            - distribute <unfixed> (embed)
1329            NOTE: embeds stdlib modules: doctest
1330            - python-setuptools <unfixed> (embed; bug #555435)
1331            NOTE: embeds stdlib modules: doctest
1332            - zope.testing <unfixed> (embed; bug #555436)
1333            NOTE: embeds stdlib modules: doctest
1334            - translate-toolkit <unfixed> (embed; bug #555422)
1335            NOTE: embeds stdlib modules: textwrap, contextlib
1336            - libtpclient-py <unfixed> (embed; bug #555424)
1337            NOTE: embeds stdlib modules: subprocess
1338            - grass <unfixed> (embed; bug #555425)
1339            NOTE: embeds stdlib modules: subprocess
1340            - coherence <unfixed> (embed; bug #555429)
1341            NOTE: embeds stdlib modules: uuid
1342            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1343            NOTE: embeds stdlib modules: uuid
1344            - setroubleshoot <removed> (embed; bug #555431)
1345            NOTE: embeds stdlib modules: uuid
1346            - linkchecker <unfixed> (embed; bug #555414)
1347            NOTE: embeds msgfmt.py script
1348            - imdbpy <unfixed> (embed)
1349            NOTE: embeds msgfmt.py script
1350            - kiwi <unfixed> (embed)
1351            NOTE: embeds msgfmt.py script
1352            - moin <unfixed> (embed)
1353            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1354            - plone3 <removed> (embed)
1355            NOTE: embeds msgfmt.py script
1356            - roundup <unfixed> (embed)
1357            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1358            - rednotebook <unfixed> (embed; bug #555415)
1359            NOTE: embeds msgfmt.py script
1360            - turbogears <unfixed> (embed)
1361            NOTE: embeds msgfmt.py script
1362            - elisa <unfixed> (embed)
1363            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1364            - calibre <unfixed> (embed)
1365            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1366            - mailman 1:2.1.13-1 (embed; #555416)
1367            NOTE: embeds msgfmt.py script
1368            - python-docutils <unknown> (embed)
1369            NOTE: embeds stdlib modules: optparse, textwrap
1370            - python-imaging <unknown> (embed)
1371            NOTE: embeds stdlib modules: doctest
1372            - python-mechanize <unknown> (embed)
1373            NOTE: embeds stdlib modules: doctest
1374            - twill <unknown> (embed)
1375            NOTE: embeds stdlib modules: subprocess
1376            - zeroc-ice <unknown> (embed)
1377            NOTE: embeds stdlib modules: subprocess
1378            - wxwidgets2.8 <unknown> (embed)
1379            NOTE: embeds stdlib modules: subprocess
1380            - cycle <unknown> (embed)
1381            NOTE: embeds msgfmt.py script
1382            - deluge <unknown> (embed)
1383            NOTE: embeds msgfmt.py script
1384            - opendict <unknown> (embed)
1385            NOTE: embeds msgfmt.py script
1386            - openerp-client <unknown> (embed)
1387            NOTE: embeds msgfmt.py script
1388            - rapidsvn <unknown> (embed)
1389            NOTE: embeds msgfmt.py script
1390            - wammu <unknown> (embed)
1391            NOTE: embeds msgfmt.py script
1392            - gaphor <unknown> (embed)
1393            NOTE: embeds msgfmt.py script
1394            - pida <unknown> (embed)
1395            NOTE: embeds msgfmt.py script
1396            - python-formencode <unknown> (embed)
1397            NOTE: embeds msgfmt.py script
1398            - duplicity <unfixed> (embed)
1399            NOTE: embeds stdlib module: urlparse, tarfile
1400            - pygopherd <unfixed> (embed)
1401            NOTE: embeds stdlib module: zipfile
1402    
1403    argparse
1404            - twill <unfixed> (embed; bug #555347)
1405            - ipython <unfixed> (embed; bug #555348)
1406    
1407    coherence
1408            - elisa <unfixed> (embed; bug #555335)
1409    
1410    simpletal
1411            - plastex <unfixed> (embed; bug #555371)
1412    
1413    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1414            - postr <unfixed> (embed)
1415            - elisa <unfixed> (embed)
1416    
1417    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1418            - apertium-tolk <unfixed> (embed)
1419            - ipython <unfixed> (embed)
1420            - virtaal <unfixed> (embed)
1421    
1422    distribute
1423            - setuptools <removed> (old-version)
1424    
1425    rails
1426            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1427            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1428            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1429            - thin <unfixed> (embed) [./spec/rails_app/*]
1430            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1431            NOTE: be dangerous if developers are naively basing their code off of the examples
1432            NOTE: prototype.js is among the example files
1433    
1434    lucene2 (prototype.js is among the embeds in the following)
1435            - lucene <unfixed> (old-version)
1436            - pylucene <unfixed> (embed)
1437            - libpdfbox-java <unfixed> (embed)
1438            - libfontbox-java <unfixed> (embed)
1439            - libjempbox-java <unfixed> (embed)
1440            - solr <unfixed> (embed)
1441    
1442    unicode-data
1443            - syslinux <unfixed> (embed)
1444            - camomile <unfixed> (embed)
1445            - fribidi <unfixed> (embed)
1446            - m17n-db <unfixed> (embed)
1447            - sbcl <unfixed> (embed)
1448            - heimdal <unfixed> (embed)
1449            - icu <unfixed> (embed)
1450            - icu4j <unfixed> (embed)
1451            - krb5 <unfixed> (embed)
1452            - moodle <unfixed> (embed)
1453            - openldap <unfixed> (embed)
1454            - pike7.6 <unfixed> (embed)
1455            - samba <unfixed> (embed)
1456            - samba4 <unfixed> (embed)
1457            - cmucl <unfixed> (embed)
1458            - typo3-src <unfixed> (embed)
1459            - mauve <unfixed> (embed)
1460            - texlive-bin <unfixed> (embed)
1461            - ypsilon <unfixed> (embed)
1462            - jeuclid <unfixed> (embed)
1463            - charmap.app <unfixed> (embed)
1464            - clisp <unfixed> (embed)
1465            - gnulib <unfixed> (embed)
1466            - opensrs-client <unfixed> (embed)
1467            - saxonb <unfixed> (embed)
1468            - rails <unfixed> (embed)
1469    
1470    feedparser
1471            - rawdog <unfixed> (embed; bug #383422)
1472            - miro <unfixed> (embed; bug #555351)
1473            - calibre <unfixed> (embed; bug #555352)
1474            - freevo <unfixed> (embed; bug #555353)
1475            - pida <unfixed> (embed; bug #555354)
1476            - planet-venus <unfixed> (embed; bug #555355)
1477            - plone3 <removed> (embed; bug #555356)
1478            - exaile 0.2.14+debian-1 (embed)
1479            - screenlets 0.1.2-3 (embed)
1480            NOTE: included twice
1481    
1482    agg:
1483            - matplotlib <unfixed> (embed: bug #377271)
1484            - contextfree <unfixed> (embed)
1485            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1486            - exactimage <unfixed> (embed)
1487            - python-enable <unfixed> (embed)
1488            - mapnik 0.5.1-3 (embed)
1489            NOTE: links statically to agg, but shared library is not available (bug #377271)
1490    
1491    vtk
1492            - paraview <unfixable> (embed; bug #495426)
1493    
1494    txt2tags
1495            - rednotebook <unfixed> (embed)
1496    
1497    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1498            - gajim <unfixed> (embed)
1499            - emesene <unfixed> (embed)
1500            - convirt <unfixed> (embed)
1501            - pida <unfixed> (embed)
1502            - rednotebook <unfixed> (embed)
1503    
1504    horde3 (prototype.js is among the embeds in the following)
1505            - mnemo2 <unfixed> (embed)
1506            - nag2 <unfixed> (embed)
1507            - wordpress <unfixed> (embed)
1508            NOTE: Text_Diff (wp-includes/Text/Diff*)
1509    
1510    cimg
1511            - gmic <unfixed> (embed)
1512    
1513    mootools
1514            - kdenetwork <unfixed> (embed)
1515            - gallery <unfixed> (embed)
1516            - jspwiki <unfixed> (embed)
1517            - vdr-plugin-live <unfixed> (embed)
1518            - perl-doc-html <unfixed> (embed)
1519    
1520    openldap
1521            - openldap2.3 <removed> (old-version)
1522    
1523    grub2
1524            - grub <unfixed> (old-version)
1525    
1526    gnupginterface
1527            - duplicity <unfixed> (embed)
1528    
1529    python-dateutil
1530            - awn-extras-applets <unfixed> (embed)
1531            - matplotlib <unknown> (embed)
1532    
1533    cups
1534            - cupsys <removed> (old-version)
1535    
1536    yui
1537            - bcfg2 <not-affected> (present in source but not included in any binary files)
1538            - serendipity 1.5.3-1 (embed; bug #557746)
1539            - moodle 1.8.2.dfsg-5 (embed)
1540            - jifty 0.91117-1 (embed; bug #557748)
1541            - webgui 7.7.26-1 (embed)
1542            - loggerhead 1.17-1 (embed)
1543            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1544    
1545    quake3 (vanilla source not packaged in debian)
1546            - openarena <unfixable> (fork)
1547    
1548    quake2 (vanilla source not packaged in debian)
1549            - alien-arena <unfixable> (fork)
1550            - warsow <unfixable> (fork)
1551    
1552    libtheora
1553            - iceweasel <not-affected> (uses xulrunner)
1554            - xulrunner <unfixed> (embed; bug #540959)
1555            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1556            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1557            - iceape <unfixed> (embed; bug #559276)
1558            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1559            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1560    
1561    dtoa
1562            - bfilter <unfixed> (embed)
1563            - cacao <removed> (embed)
1564            - cdrdao <unfixed> (embed)
1565            - classpath <unfixed> (embed)
1566            - freej <unfixed> (embed)
1567            - iceape <unfixed> (embed)
1568            - iceweasel <unfixed> (embed)
1569            - jscoverage <unfixed> (embed)
1570            - kde4libs <unfixed> (embed)
1571            - kdelibs <unfixed> (embed)
1572            - kompozer <unfixed> (embed)
1573            - libv8 <unfixed> (embed)
1574            - mono <unfixed> (embed)
1575            - newlib <unfixed> (embed)
1576            - nspr <unfixed> (embed)
1577            - php5 <unfixed> (embed)
1578            - polyml <unfixed> (embed)
1579            - qt4-x11 <unfixed> (embed)
1580            - rhino <unfixed> (embed)
1581            NOTE: code translated to Java
1582            - ruby1.8 <unfixed> (embed)
1583            - ruby1.9 <unfixed> (embed)
1584            - ruby1.9.1 <unfixed> (embed)
1585            - sdd <unfixed> (embed)
1586            - sfind <unfixed> (embed)
1587            - star <unfixed> (embed)
1588            - tinymux <unfixed> (embed)
1589            - virtualbox-ose <unfixed> (embed)
1590            - webkit <unfixed> (embed)
1591            - xulrunner <unfixed> (embed)
1592    
1593    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1594            - firegpg <unfixed> (embed)
1595            - enigmail <unfixed> (embed)
1596    
1597    ptmalloc (not packaged in Debian)
1598            - crystalspace <unfixed> (embed)
1599            - qt4-x11 <unfixed> (embed)
1600    
1601    svgalib
1602            - usplash <unfixed> (embed)
1603    
1604    bogl
1605            - usplash <unfixed> (embed)
1606    
1607    taglist
1608            - usplash <unfixed> (embed)
1609    
1610    portaudio
1611            - audacity <unfixed> (embed; bug #323711)
1612    
1613    nyquist
1614            - audacity <unfixed> (embed)
1615            NOTE: embeds a forked nyquist with support for a shared library
1616    
1617    vamp-plugin-sdk
1618            - audacity <unfixed> (embed)
1619    
1620    wordpress
1621            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1622            - wordpress-mu <removed> (fork)
1623    
1624    php5
1625            - php4 <removed> (old-version)
1626    
1627    classpath
1628            - libgnucrypto-java <removed> (embed; bug #559788)
1629    
1630    libtool
1631            - apr <unfixed> (static; bug #489625)
1632            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1633            - arts <unfixed> (embed)
1634            - bochs 2.4.2-1 (embed; bug #560884)
1635            - camserv <unfixed> (embed)
1636            - collectd 4.8.2-1 (embed)
1637            - courier-authlib 0.58-4 (embed)
1638            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1639            - cvsnt 2.5.04.3236-1.2 (embed)
1640            - dico <not-affected> (Uses the system copy of ltdl)
1641            - freeradius 0.1+20010527-1 (embed)
1642            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1643            - ggobi 2.1.9~20091212-1 (embed)
1644            - glame 2.0.1-4 (embed)
1645            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1646            - gnash 0.8.7-2 (embed)
1647            - gnu-smalltalk <unfixed> (embed; bug #566777)
1648            - google-gadgets 0.10.5-0.3 (embed)
1649            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1650            - graphicsmagick 1.3.5-6 (embed)
1651            - graphviz 2.8-3 (embed)
1652            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1653            - guile-1.6 1.6.8-7 (embed)
1654            - hamlib 1.2.11-1 (embed)
1655            - hercules 3.06-1.2 (embed)
1656            - jags 1.0.4-3 (embed; bug #560864)
1657            - kdelibs <unfixed> (embed)
1658            - libannodex <removed> (embed)
1659            - libextractor 0.5.23+dfsg-4 (embed)
1660            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1661            - libtunepimp 0.5.3-7.3 (embed)
1662            - mp4h 1.3.1-4.1 (embed)
1663            - naim <removed> (embed)
1664            - parser-mysql <unfixed> (embed)
1665            - pinball 0.3.1-11 (embed)
1666            - redland <unfixed> (embed)
1667            - siproxd <unfixed> (embed)
1668            - ski <unfixed> (embed)
1669            - synfig 0.62.00-1 (embed)
1670            - unixodbc 2.2.4-5 (embed)
1671            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1672            - clamav 0.95+dfsg-1 (embed)
1673            - imagemagick 6:6.2.3.1-1 (embed)
1674            - hypre 2.4.0b-5 (embed)
1675            - lam <unfixed> (embed)
1676            - openmpi <unfixable> (embed; bug #559386)
1677            - parser <unfixed> (embed)
1678            - pdsh 2.18-5 (embed; bug #560892)
1679            - sbnc 1.2-8 (embed)
1680            - sdcc <unfixed> (embed)
1681            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1682            - proftpd-dfsg <unfixed> (embed; bug #561748)
1683            - babel 1.4.0.dfsg-5 (embed)
1684            - libprelude 0.9.14-2 (embed)
1685            - heartbeat 2.1.4-7 (embed)
1686            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1687            NOTE: might've been fixed earlier
1688            - gcc-* <unknown> (embed)
1689    
1690    ocamlgsl
1691            - orpie 1.5.1-7.1 (embed; bug #550058)
1692    
1693    xdotool
1694            - keynav <unfixed> (embed; bug #560103)
1695    
1696    bulletphysics (not packaged; http://www.bulletphysics.org/)
1697            - supertuxkart <unfixed> (embed)
1698            - blender <unfixed> (embed)
1699    
1700    ghostscript
1701            - gs-gpl <removed> (old-version)
1702    
1703    icedove
1704            - thunderbird <removed> (old-version)
1705    
1706    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1707            - jquery <unfixed> (embed)
1708    
1709    sed
1710            - ssed <unfixed> (fork)
1711    
1712    phpatomlib (http://code.google.com/p/phpatomlib)
1713            - wordpress <unfixed> (embed)
1714    
1715    Services_JSON (http://pear.php.net/package/Services_JSON)
1716            - wordpress <unfixed> (embed)
1717    
1718    phpass (http://www.openwall.com/phpass/)
1719            - gallery2 <unfixed> (embed)
1720            - wordpress <unfixed> (embed)
1721            - typo3-src <unfixed> (modified-embed)
1722            NOTE: file refers to drupal, maybe there's a copy somewhere there
1723            NOTE: a copyright owner search didn't match anything
1724            - libauthen-passphrase-perl <unfixable> (fork)
1725            NOTE: perl implementation of phpass
1726    
1727    squirrelmail
1728            - wordpress <unfixed> (embed)
1729            NOTE: class-pop3.php
1730    
1731    ezSQL (http://www.woyano.com/jv/ezsql)
1732            - wordpress <unfixable> (fork)
1733            NOTE: wp-db.php
1734    
1735    Diff.php (Clay Loveless' version/killersoft.com)
1736            - php-versioncontrol-svn <unfixed>
1737    
1738    libm (provided by libc)
1739            - spring <unfixed> (embed)
1740            NOTE: embedded by embedded copy of streflop
1741            - aide <unfixed> (static)
1742            - busybox <unfixed> (static)
1743            - mindi-busybox <unfixed> (static)
1744            - qemu <unfixed> (static)
1745            NOTE: qemu-user-static
1746            - tuxonice-userui <unfixed> (static)
1747            - zsh <unfixed> (static)
1748            NOTE: zsh-static
1749            - tripwire <unfixed>
1750    
1751    streflop
1752            - spring <unfixed> (embed)
1753    
1754    minizip
1755            - spring <unfixed> (embed)
1756    
1757    oscpack
1758            - spring <unfixed> (embed)
1759    
1760    hpiutil2
1761            - spring <unfixed> (embed)
1762    
1763    p7zip
1764            - spring <unfixed> (embed)
1765    
1766    pythonqt (doesn't seem to be python-qtN, unknown source)
1767            - fontmatrix <unfixed> (embed)
1768            - elmerfem <unfixed> (embed)
1769    
1770    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1771            - docvert <unfixed> (embed)
1772            - jifty <unfixed> (embed)
1773            - kdenetwork <unfixed> (embed)
1774            - mediatomb <unfixed> (embed)
1775            - plastex <unfixed> (embed)
1776            - plone3 <removed> (embed)
1777            - python-chaco <unfixed> (embed)
1778            - python-docutils <unfixed> (embed)
1779            - s5 <unfixed> (embed)
1780            - zope2.10 <unfixed> (embed)
1781            - zope2.11 <removed> (embed)
1782            - cython <not-affcted> (embed)
1783            NOTE: part of documentation, which is not installed into the binary package
1784    
1785    python-docutils
1786            - zope2.10 <unfixed> (embed)
1787            - zope2.11 <removed> (embed)
1788    
1789    tesseract
1790            - ocropus <unfixed> (static)
1791    
1792    antlr
1793            - kdevelop <unfixed> (embed)
1794    
1795    libxerces2
1796            - openjdk-6 <unfixed> (embed)
1797    
1798    kfreebsd-8
1799            - kfreebsd-7 <unfixed> (old-version)
1800            - kfreebsd-6 <removed> (old-version)
1801    
1802    ruby1.9.1
1803            - ruby1.9 <unfixed> (old-version)
1804            - ruby1.8 <unfixed> (old-version)
1805    
1806    maildrop
1807            - courier <unfixed> (embed) [./maildrop]
1808    
1809    glee
1810            - warzone2100 <not-affected> (embed)
1811    
1812    phing
1813            - symfony <unfixed> (embed)
1814    
1815    pake
1816            - symfony <unfixed> (embed)
1817    
1818    propel
1819            - symfony <unfixed> (embed)
1820    
1821    creole
1822            - symfony <unfixed> (embed)
1823    
1824    hfsutils
1825            - cdrkit <unfixed> (embed; bug #570187)
1826            NOTE: embeds hfsutils code in genisoimage
1827    
1828    cdrkit
1829            - grub2 <unfixed> (embed; bug #570156)
1830            NOTE: genisoimage imported into grub-mkisofs
1831    
1832    kdebase-workspace
1833            - kdebase <unfixed> (old-version)
1834    
1835    file
1836            - php5 <unfixable> (modified-embed)
1837            [lenny] - php5 <not-affected>
1838    
1839    cdb
1840            - php5 <unfixed> (embed)
1841    
1842    libmbfl (itp: #570708)
1843            - php5 <unfixed> (embed)
1844            NOTE: PHP is actually the current upstream, ITP is of that code
1845    
1846    libonig
1847            - php5 5.3.2-1 (embed)
1848    
1849    xmlrpc-epi
1850            - php5 <unfixed> (embed)
1851    
1852    swt-gtk
1853            - eclipse <unfixed> (embed; bug #538808)
1854    
1855    txt2html
1856            - wml 2.0.11ds2-1 (embed)
1857    
1858    ca-certificates
1859            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1860    
1861    openexr
1862            - freeimage <unfixed> (embed)
1863    
1864    libmng
1865            - freeimage <unfixed> (embed)
1866    
1867    openjpeg
1868            - freeimage <unfixed> (embed)
1869    
1870    libjpeg6b
1871            - freeimage <unfixed> (embed)
1872    
1873    libjpeg (don't know what exact version)
1874            - dcmtk <unfixed>
1875            - gdcm <unfixed>
1876            - insighttoolkit <unfixed>
1877            - openarena <unfixed> (bug #495966)
1878            - outguess <unfixed>
1879            - squeak-vm <unfixed> (embed)
1880            - tremulous <unfixed>
1881            - tuxonice-userui <unfixed> (static)
1882            - fpc <unfixed> (static)
1883            - lazarus <unfixed> (static)
1884            NOTE: inherited from fpc, see #472304
1885            - mseide-msegui <unfixed> (static)
1886            NOTE: inherited from fpc, see #472304
1887            - easymp3gain <unfixed> (static)
1888            NOTE: inherited from fpc, see #472304
1889            - winff <unfixed> (static)
1890            NOTE: inherited from fpc, see #472304
1891            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1892    
1893    
1894    lxr
1895            - lxr-cvs <unfixed> (embed)
1896    
1897    libfile-copy-recursive-perl
1898            - r-base <unfixed> (embed; bug #577427)
1899            - r-base-core-ra <unfixed> (embed; bug #577429)
1900    
1901    delimmatch
1902            - r-base <unfixed> (embed; bug #577433)
1903            - r-base-core-ra <unfixed> (embed; bug #577434)
1904    
1905    libsmf (ITP: #572558)
1906            - denemo <unfixed> (embed)
1907            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1908    
1909    libselinux
1910            - dpkg 1.15.6 (static)
1911    
1912    xinha (ITP: #479708)
1913            - horde3 <unfixed>
1914            - serendipity <unfixed>
1915            - openacs <unfixed>
1916            - dotlrn <unfixed>
1917    
1918    dvipng
1919            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1920    
1921    dvipdfmx
1922            - texlive-bin <unfixed> (embed)
1923            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1924    
1925    lcdf-typetools
1926            - texlive-bin 2009-1 (embed)
1927    
1928    tex4ht
1929            - texlive-bin 2009-1 (embed)
1930    
1931    freetype
1932            - texlive-bin 2009-1 (embed)
1933    
1934    freetype2
1935            - texlive-bin 2009-1 (embed)
1936    
1937    silgraphite
1938            - texlive-bin <unfixed> (embed)
1939    
1940    unzip
1941            - texlive-bin 2009-1 (embed)
1942    
1943    jbig2dec
1944            - ghostscript 8.71~dfsg2-1 (embed)
1945    
1946    libxml2
1947            - chromium-browser 5.0.375.29~r46008-1
1948    
1949    protobuf
1950            - chromium-browser 5.0.375.70~r48679-2
1951    
1952    libv8
1953            - chromium-browser 5.0.375.38~r46659-1
1954    
1955    nspr
1956            - chromium-browser 5.0.375.29~r46008-3
1957    
1958    yasm
1959            - chromium-browser 5.0.375.29~r46008-2
1960    
1961    libxslt
1962            - chromium-browser 5.0.375.29~r46008-1
1963    
1964    miniupnpc (not packaged in Debian; ITP bug #444392)
1965            - warzone2100 <unfixed> (embed)
1966    
1967    iniparser (not packaged in Debian; RFP bug #582657)
1968            - warzone2100 <unfixed> (modified-embed)
1969    
1970    pyglet
1971            - sympy <unfixed> (embed; bug #459716)
1972    
1973    mpmath
1974            - sympy <unfixed> (embed; bug #541746)
1975    
Legend:
Removed from v.8142  
changed lines
  Added in v.15272
  ViewVC Help
Powered by ViewVC 1.1.5