/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 9887 by nion, Sat Sep 27 08:51:53 2008 UTC revision 15497 by silvio-guest, Fri Oct 22 00:21:59 2010 UTC
# Line 10  Format: Line 10  Format:
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>,  status: version number fixing the embedded copy
14          <itp> or <unknown> if the version number can not be determined          <unfixed> if the issue is not yet fixed
15          <unfixable> for unavoidable cases (e.g., forks that add real value)          <removed> if the package was removed from the archive
16            <itp> if the package is in the process of being packaged
17            <not-affected> if the package does not use the embedded copy
18            <unknown> if the version number can not be determined
19            <unfixable> for unavoidable cases (e.g., forks that add real value)
20  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
21        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
22        fork (the package is not just embedding code but it is a fork and        modified-embed (embeds a code copy that differs from upstream code)
23              thus might share parts of the source code)        fork (a full-blown fork of another source package)
24        old-version (the package is an older version of essentially        old-version (an older version of essentially the same code)
                    the same code)  
25    
26  The srcpkg might be some string to identify the code if there is no  The srcpkg might be some string to identify the code if there is no
27  specific source package.  specific source package.
28    
29  Everything up to the next line is ignored.  Everything up to the next line is ignored.
30  ---BEGIN  ---BEGIN
31  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  poppler
         NOTE: Fixed packages link to poppler library unless otherwise noted  
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
32          - pdftohtml <unknown>          - pdftohtml <unknown>
33          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
34          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
35          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
36          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
         NOTE: the kpdf replacement in KDE 4 is using poppler  
37          - texlive-base 3.0-12 (embed)          - texlive-base 3.0-12 (embed)
38          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
39          NOTE: links to poppler          - koffice 1:2.0.0-1 (embed; bug #436163)
         - koffice <unfixed> (embed; bug #436163)  
40          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
41          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
42          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
43          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
45          NOTE: copy only present in source but links to poppler          - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <removed> (embed; bug #551293)
47            - xpdf 3.02-9 (fork)
48    
49    pdksh (no longer developed since 1999)
50            - mksh <unfixable> (fork)
51            - posh <unfixable> (fork)
52    
53  ppmd  ppmd
54          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
55            NOTE: discussion in #458152
56    
57    libevent
58            - transmission 1.71-1 (embed; bug #529372)
59            - chromium-browser 5.0.375.29~r46008-1
60            - dnsproxy <unknown> (embed)
61    
62    lrmi
63            - read-edid 2.0.0-1 (embed; bug #495131)
64            - s3switch <unfixed> (embed)
65            - xresprobe <unfixed> (embed)
66            - zhcon <unfixed> (embed)
67    
68    php-htmlpurifier
69            - mahara 1.2.5-1 (embed)
70            - knowledgeroot 0.9.9.5-5 (embed)
71            - moodle <unfixed> (embed)
72    
73  peercast  peercast
74          - gnome-peercast <unfixed> (embed)          - gnome-peercast <removed> (embed)
75          NOTE: gnome-peercast may better be removed, see #466539          [etch] - gnome-peercast <unfixed> (embed)
76    
77  silc-toolkit  silc-toolkit
78          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
79    
80    icclib
81            - ghostscript <unfixed> (embed)
82            - argyll <unfixed> (embed)
83    
84    libusb
85            - argyll <unfixed> (embed)
86    
87  dietlibc  dietlibc
88          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
89            - mksh <unfixable> (static)
90            NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
91    
92    libmikmod
93            - sdl-mixer1.2 <unfixed> (embed)
94            TODO: report bug
95    
96  libiax  libiax
97          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
98    
99    spandsp
100            - iaxmodem <unfixable> (embed; bug #548885)
101    
102    python-paramiko
103            - fabric 0.9.0-2 (embed; bug #561398)
104    
105  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
106          - dpkg <unfixed> (embed)          - dpkg 1.15.6 (static)
107          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
108          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
109            - cherokee <unfixed> (embed)
110          NOTE: somehow derived code base          NOTE: somehow derived code base
111          - mono <unfixed> (embed)          - mono <unfixed> (embed)
112          TODO: check mozilla          TODO: check mozilla
# Line 77  zlib (lots of apps embed a copy, but lin Line 115  zlib (lots of apps embed a copy, but lin
115          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
116          - rpm <unknown> (embed)          - rpm <unknown> (embed)
117          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
118            - tuxcmd-modules <unfixed> (embed)
119            - zsync <unfixed>
120            - tra <unfixed>
121            - sash <unfixed>
122            - nsis <unfixed>
123            - pyfits 1:2.3.1-1
124            - mseide-msegui <unfixed>
125            NOTE: mseide
126            - mirrordir <unfixed>
127            - poco <unfixed>
128            - klibc <unfixed>
129            - emboss <unfixed>
130            - ghostscript <unfixed>
131            - freeimage <unfixed>
132            - clamav <unfixed> (fork)
133            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
134            - tuxonice-userui <unfixed> (static)
135            - plt-scheme <unfixed>
136            - perl <unfixed>
137            - paraview <unfixed>
138            - velvet 0.7.56~nozlibcopy-1
139            - gcvs <unfixed>
140            - dump <unfixed>
141            - aide <unfixed> (static)
142            - dar <unfixed> (static)
143            - avfs <unfixed>
144            - fpc <unfixed>
145            - winff <unfixed>
146            NOTE: inherited from fpc, see #472304
147            - lazarus <unfixed>
148            NOTE: inherited from fpc, see #472304
149            - erlang <unfixed> (embed)
150            - gamera 3.2.3-1 (embed)
151            - python2.4 <unfixed> (embed; bug #553403)
152            - python2.5 <unfixed> (embed; bug #553403)
153            - texlive-bin <unknown> (embed)
154    
155    dulwich
156            - hg-git 0.1.0-1 (embed; bug #541996)
157    
158    libvigraimpex
159            - hugin <unfixed> (embed; bug #542259)
160            - enblend-enfuse <unfixed> (embed; bug #542258)
161            - gamera 3.2.3-1 (embed)
162    
163  libbz2  libbz2
164          - dpkg <unfixed> (static)          - dpkg 1.15.6 (static)
165            - amd64-libs <unfixed> (static)
166  ekg          NOTE: let's call it "static"
167          - centericq <unfixed> (embed)          - dar <unfixed> (static)
168          - gaim <unfixed> (embed)          - dump <unfixed> (static)
169          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - unalz 0.64-1 (embed)
170          - kopete 4:3.3.2-5 (embed)          NOTE: has code, by the maint, to use the system version but links against the internal copy
171          - kadu <unfixed> (embed)          - clamav <unfixed> (embed)
172          - gadu <unfixed> (embed)          NOTE: libclamav/nsis/bzlib*
173          NOTE: g/kadu not packaged in Debian yet          - pristine-tar <unfixable> (modified-embed)
174            NOTE: compression code only, not uncompression
175            - r-base-core-ra 1.2.8 (static)
176            - r-base-core 2.11.1 (static)
177            NOTE: links dynamically in squeeze, statically in lenny
178            - rpm <unfixed> (static)
179            NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
180    
181    libyahoo2
182            - centerim <unfixed> (embed; bug #559783)
183    
184    libmsn
185            - centerim <unfixed> (embed; bug #559783)
186    
187    libgadu
188            - centerim <unfixed> (embed; bug #559783)
189            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
190            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
191            - kdenetwork 4:3.3.2-5 (embed)
192            NOTE: from kdenetwork: kopete
193            - ekg 1:1.8~rc0-1 (embed)
194            - kadu 0.6.0.2-3 (embed; bug #504430)
195            - gadu <itp> (embed)
196    
197  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
198          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
199          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
200          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
201          - phpwiki (embed)          - phpwiki <unfixed> (embed)
202          - php4 <unfixed> (embed)          - php4 <removed> (embed)
203          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
204    
205  shtool (affects build-time only)  shtool (affects build-time only)
206          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
207          - php4 <unfixed> (embed)          - php4 <removed> (embed)
208            - php5 <unfixed> (embed)
209    
210  mozilla source code  xulrunner
211          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
212          - mozilla-thunderbird          - iceweasel 2.0.0.19 (embed)
213          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
214          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
215          - thunderbird <removed>          - galeon 2.0.2-4 (embed)
216          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser 2.14.3-8 (embed)
217          - iceweasel <unfixed> (embed)          - conkeror 0.9~git080629-2 (embed)
218          - iceape <unfixed> (embed)          - kazehakase 0.4.2-1 (embed)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
219    
220  xli  xli
221          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
222    
223  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
224          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
225          - xfree86/xorg <unfixed> (embed)  
226          NOTE: in libxpm  libxpm
227            - lesstif2 <unfixed> (embed; bug #575750)
228    
229  kerberized apps with BSD origin  kerberized apps with BSD origin
230          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
231          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
232          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
233    
234  grip (which pkg is the origin?)  grip (which pkg is the origin?)
235          - libcdaudio          - libcdaudio <unfixed>
236          - grip          - grip <unfixed>
237          - gnome-vfs          - gnome-vfs <unfixed>
238          TODO: check vfs2 as well          TODO: check vfs2 as well
239    
240  fudforum  fudforum
241          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
242          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
243          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
244    
245    libbsd
246            - rdate 1:1.2-3 (embed)
247            - atheme-services <unfixed>
248            - libbsd-arc4random-perl <not-affected> (modified-embed)
249            NOTE: code not used, it links dynamically against libbsd instead
250            - isakmpd <unfixed>
251            - bsdgames <unfixed> (embed)
252            - bsd-mailx <unfixed> (embed)
253            - netcat-openbsd <unfixed> (embed; bug #550611)
254            - openssh <unfixed> (embed)
255            - unworkable <unfixed> (embed)
256            - mksh <unfixed> (modified-embed)
257            NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
258            NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
259            NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
260    
261  cvs  cvs
262          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
263          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
264    
265  pcre  pcre3
266          - python* <unfixed> (embed)          - php4 <removed> (embed)
         - php4 <unknown> (embed)  
267          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
268          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
269            NOTE: libgoffice-*
270          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
271          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
272          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
273          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
274          - glib2.0 2.15.2-1 (embed)          - glib2.0 2.15.2-1 (embed)
275          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
# Line 158  pcre Line 277  pcre
277          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
278          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
279          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
280          - tin <unknown> (embed)          - tin 980117-1 (embed)
281          - kazehakase 0.5.2-1          - kazehakase 0.5.2-1
282          - webkit <unfixed> (embed)          - webkit 1.0.1-1 (embed)
283          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
284          NOTE: embedded via webkit copy          NOTE: embedded via webkit copy
285            - erlang <unfixed> (embed)
286            - ssed <unfixed> (embed)
287            - ircd-hybrid <unfixed> (static)
288            - emboss <unfixd>
289            - cherokee <unfixed> (embed)
290            - oftc-hybrid 1.6.9.dfsg-1 (embed)
291            - ratbox-services <unfixed> (embed)
292            - squeak-vm <unfixed> (embed)
293            - tinymux <unfixed> (embed)
294    
295  tiff  tiff
296          - wxwindows2.4 2.2.1 (embed)          - wxwindows2.4 2.2.1 (embed)
297            - gamera 3.2.3-1 (embed)
298            - freeimage <unfixed> (embed)
299            - libtk-img <unfixed> (embed)
300            NOTE: there are two copies, one under tiff/ other under libtiff/
301            - gdal <unfixed>
302    
303  uudeview  uudeview
304          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
# Line 173  uudeview Line 306  uudeview
306    
307  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
308          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
309          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
310          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
311            - heimdal <unfixed> (embed; bug #559616)
312    
313  util-linux/mount  util-linux/mount
314          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
315          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
316    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
317  sylpheed  sylpheed
318          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
319    
# Line 198  phpldapadmin Line 328  phpldapadmin
328  chmlib  chmlib
329          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
330    
331  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
332          - mplayer 1.0~rc2-14 (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
333          - kino 1.0.0-1          - kino 1.0.0-1
334          - vlc <not-affected> (Links dynamically since initial release)          - vlc <not-affected> (Links dynamically since initial release)
# Line 206  libavcodec/libavformat (source: ffmpeg) Line 336  libavcodec/libavformat (source: ffmpeg)
336          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
337          - motion 3.1.19-1          - motion 3.1.19-1
338          - gstreamer0.10-ffmpeg 0.10.3-2          - gstreamer0.10-ffmpeg 0.10.3-2
339          - xmovie <unfixed>          - xmovie <removed> (static)
340          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
341            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
342            - audacity 1.3.7-2 (embed; bug #512278)
343            - chromium-browser <unfixed> (fork)
344    
345    faad2
346            - mplayer 1.0~rc2-20 (embed)
347            - avifile <unfixed> (embed; bug #538750)
348            - ffmpeg-debian <removed> (embed)
349    
350  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
351          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
352            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
353            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
354    
355  libdts  libdts
356          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 223  liba52 Line 362  liba52
362          - a52dec <unfixed> (embed)          - a52dec <unfixed> (embed)
363          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
364    
365  libmpeg2  mpeg2dec (libmpeg2)
         - mpeg2dec <unfixed> (embed)  
366          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
367    
368  curl  libmpeg3
369          - wget <unfixed> (embed)          - squeak-vm <unfixed> (embed)
370          NOTE: code for NTLM authentication  
371    libntlm
372            - wget <unfixed> (fork; bug #550436)
373            - curl <unfixed> (fork; bug #550437)
374            - cntlm <unfixed> (fork; bug #550438)
375    
376  uw-imap  uw-imap
377          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 238  uw-imap Line 380  uw-imap
380  imagemagick  imagemagick
381          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
382    
383    python-urlgrabber
384            - mercurial <unfixed> (embed; bug #531062)
385            - w3af <unfixed> (embed; bug #555372)
386            [experimental] - harvestman <unfixed> (embed; bug #555373)
387    
388    beautifulsoup
389            - python-mechanize <unfixed> (embed; bug #555349)
390            - zope2.11 <removed> (embed; bug #555350)
391            - twill <unknown> (embed)
392    
393  halibut  halibut
394          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
395    
396  libghttp  libghttp
397          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
398    
399  libsndfile  libsndfile
400          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
401    
402  glibmm2.4  glibmm2.4
403          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
404    
405  libgnomecanvasmm2.6  libgnomecanvasmm2.6
406          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
407    
408  libsigc++-2.0  libsigc++-2.0
409          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
410    
411  soundtouch  soundtouch
412          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
413    
414  libmms  libmms
415          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 265  libmms Line 417  libmms
417    
418  fckeditor  fckeditor
419          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
420          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
421          - karrigell <removed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
422          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
423            - request-tracker3.8 <unfixed> (embed)
424            - otrs2 <unfixed> (embed)
425    
426  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
427          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
428    
429  libphp-phpmailer  libphp-phpmailer
430          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
431            - mahara <unfixed> (embed)
432            - symfony <unfixed> (embed; bug #566778)
433            [etch] - phpgroupware <unfixed> (embed)
434            NOTE: phpgroupware-felamimail is only in etch
435            - egroupware <unfixed> (embed; bug #504283)
436            - glpi <unfixed>
437    
438  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
439          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
440    
441  giflib:  giflib
442          - wine <unfixed> (embed; bug #466181)          - wine <unfixed> (embed; bug #466181)
443    
444  bennu (not packaged in Debian)  bennu (not packaged in Debian, http://bennu.sourceforge.net)
445          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
446    
447  smarty:  smarty
448          - moodle <unfixed> (embed; bug #471158)          - moodle 1.8.2-2 (embed; bug #471158)
449          - gallery2 2.2.5-2 (embed; bug #471160)          - gallery2 2.2.5-2 (embed; bug #471160)
450          - mahara 0.9.2-2 (embed; bug #471201)          - mahara 0.9.2-2 (embed; bug #471201)
451          - gosa 2.4beta1-1 (embed; bug #471200)          - gosa 2.4beta1-1 (embed; bug #471200)
452    
453  TinyMCE  TinyMCE
454          - wordpress 2.5.1-3 (embed; bug #478257)          - wordpress 2.5.1-3 (embed; bug #478257)
455          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
456          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
457          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
458            - mahara 1.2.6-1 (embed; #597752)
459    
460  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
461          - scite <unfixed> (embed)          - scite <unfixed> (embed)
462          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
463          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
464          - geany <unfixed> (embed)          - geany <unfixed> (fork)
465            - anjuta <unfixed> (embed)
466    
467  libphp-adodb  libphp-adodb
468          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
469          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
470          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
471          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
472          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
473          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
474            - torrentflux 2.0beta1-2 (embed)
475          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
476          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
477          - cacti <unknown> (embed)          - cacti <unknown> (embed)
478          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
479          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
480            - gforge 4.7~rc2-6 (embed)
481            - mahara <unfixed> (embed)
482    
483  gzip  gzip
484          - linux-kernel <unfixed> (embed)          - linux-2.6 <unfixed> (embed) [lib/inflate.c]
         NOTE: lib/inflate.c  
485          - klibc <unfixed> (embed)          - klibc <unfixed> (embed)
486          NOTE: based on linux-kernel gzip code          NOTE: based on linux-kernel gzip code
487          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
488            - pristine-tar <unfixed> (modified-embed)
489            NOTE: compression code only, not uncompression
490            - ncompress <unfixed> (old-version)
491    
492  neon  neon
493          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
494          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
495          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
496            - litmus <removed> (embed; #395875)
497          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
498          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
499          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
500          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
501    
502  libmodplug  libmodplug
503          - gst-plugins-bad0.10 <unfixed> (embed)          - gst-plugins-bad0.10 0.10.10.2-1 (embed)
504    
505  libvncserver  libvncserver
506          - vino <unfixed> (embed)          - vino <unfixed> (embed)
# Line 341  libvncserver Line 508  libvncserver
508  putty  putty
509          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
510    
511  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
512          - filezilla <unfixed>          - filezilla <unfixed>
513            - crystalspace <unfixed> (embed)
514            - libwfut <unfixed> (embed)
515            - rarian <unfixed> (embed)
516            - bulletml <unfixed> (embed)
517            - pokerth <unfixed> (embed)
518            - qutecom <unfixed> (embed)
519            - sofa-framework <unfixed> (embed)
520            - yate <unfixed> (embed)
521            - antigrav <unfixed> (embed)
522            - balder2d <unfixed> (embed)
523            - cal3d <unfixed> (embed)
524            - criticalmass <unfixed> (embed)
525            - ember <unfixed> (embed)
526            - epiphany <unfixed> (embed)
527            - gambit <unfixed> (embed)
528            - noiz2sa <unfixed> (embed)
529            - ogre <unfixed> (embed)
530            - opencity <unfixed> (embed)
531            - openmovieeditor <unfixed> (embed)
532            - pouetchess <unfixed> (embed)
533            - tecnoballz <unfixed> (embed)
534            - trigger-rally <unfixed> (embed)
535            - xmoto <unfixed> (embed)
536            - mapnik <unknown> (embed)
537            NOTE: uses a different XML parser by default
538            - rrootage 0.23a-6 <embed>
539            NOTE: links to libbulltetml
540            - boson <unknown> (embed)
541            NOTE: the embedded code is unused
542    
543  gv  gv
544          - evince <unfixed> (embed)          - evince <unfixed> (embed)
545          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
546          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
547    
548  libXbae  libXbae
549          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <unfixed> (embed)
550          NOTE: from Cernlib  
551    libgtkhtml
552            - claws-mail-extra-plugins <unfixed> (fork)
553    
554  libXaw  libXaw
555          [etch] - libpawlib2-lesstif          - paw <unfixed> (embed)
         NOTE: from Cernlib  
556          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
557    
558  libgd2  libgd2
559          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
560          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
561          - wml <unfixed> (embed)          - wml 2.0.11ds2-1 (embed)
562            - libwmf <unfixed> (embed)
563          NOTE: derived from gd 1.6.3          NOTE: derived from gd 1.6.3
564            - texlive-bin 2009-1 (embed)
565    
566  rar  rar
567          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 377  mplayer (DirectMedia Object loader) Line 575  mplayer (DirectMedia Object loader)
575          NOTE: src/libw32dll/          NOTE: src/libw32dll/
576          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
577          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
578            - mplayer 1.0~rc2-20 (embed)
579    
580  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
581          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 392  librpcsecgss Line 591  librpcsecgss
591          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
592    
593  jasper  jasper
594          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
595    
596    libiris
597            - psi <unfixed> (embed)
598            - kdenetwork <unfixed> (embed)
599            NOTE: kopete embeds libiris but links dynamically to libidn
600            - kdegames <unfixed> (embed)
601            NOTE: ksirk/kde4
602    
603  libidn  libidn
604          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
605            - psi <unfixed> (embed)
606  liblua          NOTE: psi embeds libiris which embeds libidn
607          - monotone <unfixed> (embed)          - kdegames <unfixed> (embed)
608            NOTE: kdegames/kde4 embeds libiris which embeds libidn
609    
610    lua5.1
611            - monotone 0.43-1 (embed)
612            - nmap 5.00-1 (embed; bug #527997)
613            [lenny] - nmap <unfixed> (embed; bug #527997)
614            - ocropus <unfixed> (embed)
615            - enigma <unfixed> (embed)
616            NOTE: requires lua built with C++
617            - freeciv <unfixed> (embed)
618            - spring <unfixed> (embed)
619    
620  libbotan  libbotan
621          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
622    
623  NetXX  NetXX
624          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
625    
626  libgc  libgc
627          - mono <unfixed> (embed)          - mono <unfixed> (embed)
628    
629  lzma  lzma
630          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
631            - xz-utils <unfixed> (fork)
632            - r-base <unfixed> (embed)
633            NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
634    
635  lzo  lzo
636          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
637    
638  yassl  yassl
639          - mysql-dfsg-5.0 <unfixed> (embed)          - mysql-dfsg-5.0 <unfixed> (embed)
640            - mysql-5.1 <unfixed> (embed)
641    
642  pax code  pax code
643          - tar <unfixed> (embed)          - tar <unfixed> (embed)
# Line 426  pax code Line 646  pax code
646  t1lib  t1lib
647          - tetex-bin 2.0.2-1 (embed)          - tetex-bin 2.0.2-1 (embed)
648          - texlive-bin <unknown> (embed)          - texlive-bin <unknown> (embed)
649            - grace <unknown> (embed)
650    
651  guichan  guichan
652          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
# Line 434  guichan Line 655  guichan
655  tolua  tolua
656          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
657          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
658            NOTE: actually tolua++
659            - ocropus <unfixed> (embed)
660            NOTE: actually tolua++
661            - freeciv <unfixed> (embed)
662            NOTE: actually tolua++
663            - enigma <unfixed> (embed)
664    
665  asio-dev  asio-dev
666          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
667    
668  xine-lib  xine-lib
669          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 457  tk8.5 Line 682  tk8.5
682          - perl-tk <unfixable> (fork)          - perl-tk <unfixable> (fork)
683    
684  samba  samba
685          - mc <unfixed> (embed)          - mc 2:4.6.2~git20080311-1 (embed)
686          NOTE: maintainer is aware of this, currently searching a solution          NOTE: maintainer is aware of this, currently searching a solution
687    
688  plib1.8.4c2  plib1.8.4c2
# Line 465  plib1.8.4c2 Line 690  plib1.8.4c2
690          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
691    
692  fribidi  fribidi
693          - quesoglc <unfixed> (embed)          - quesoglc 0.7.2-2 (embed)
694    
695  glew  glew
696          - quesoglc <unfixed> (embed)          - quesoglc <unfixed> (embed; bug #489341)
697            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
698            - trigger 0.5.2.1-2 (embed)
699            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
700            - trigger-rally 0.5.2.1-2 (embed)
701            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
702            - chromium-browser 5.0.375.70~r48679-2
703    
704  minorGems  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
705          - transcend <unfixed> (embed)          - transcend <unfixed> (embed)
706          - cultivation <unfixed> (embed)          - cultivation <unfixed> (embed)
707            - passage <unfixed> (embed)
708            - gravitation <unfixed> (embed)
709    
710  tar  tar
711          - libarchive <unfixed> (embed)          - libarchive <unfixed> (embed)
# Line 482  cpio Line 715  cpio
715          - libarchive <unfixed> (embed)          - libarchive <unfixed> (embed)
716          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
717    
718    kde4libs
719            - kdelibs <unfixable> (old-version)
720    
721  webkit  webkit
722          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed; bug #479851)
723            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
724            - kde4libs <unfixable> (fork)
725            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
726            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
727            - chromium-browser <unfixed> (fork)
728    
729  ftgl  ftgl
730          - blender 2.46+dfsg-1 (embed)          - blender 2.46+dfsg-1 (embed)
# Line 492  wv Line 733  wv
733          - abiword <unfixed>          - abiword <unfixed>
734    
735  qemu  qemu
736          - kvm <unfixed> (embed)          - kvm <removed> (embed; bug #543159)
737          - xen-3 <unfixed> (embed)          - qemu-kvm <unfixed> (embed; bug #560853)
738          - xen-unstable <unfixed> (embed)          NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
739            - xen-3 3.4.2-2 (embed; bug #560856)
740            - xen-unstable <unfixed> (embed; bug #560856)
741    
742    vgabios
743            - kvm <removed> (embed; bug #489442)
744            - qemu-kvm <unfixed> (embed)
745    
746  bochs  bochs
747          - kvm <unfixed> (embed; bug #489442)          - kvm <removed> (embed; bug #489442)
748            - qemu-kvm <unfixed> (embed)
749    
750  speex  speex
751          - vorbis-tools <unfixed> (embed)          - vorbis-tools <unfixed> (embed)
# Line 505  speex Line 753  speex
753          - gst-plugins-good0.10 <unfixed> (embed)          - gst-plugins-good0.10 <unfixed> (embed)
754          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
755          - libfishsound <unfixed> (embed)          - libfishsound <unfixed> (embed)
756          - libannodex <unfixed> (embed)          - libannodex <removed> (embed)
757          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
758          - xmms-speex <unfixed> (embed)          - xmms-speex <unfixed> (embed)
759          - libsdl-sound1.2 <unfixed> (embed)          - libsdl-sound1.2 <unfixed> (embed)
760          - sweep <unfixed> (embed)          - sweep <unfixed> (embed)
761    
762  libreadline  libreadline
763          - magic <unfixed> (old-version)          - magic <itp> (old-version)
         NOTE: magic is currently an RFS  
764    
765  opcode  opcode
766          - ode <unfixed> (embed)          - ode <unfixed> (embed)
# Line 525  gimpact Line 772  gimpact
772          NOTE: gimpact is not a package in debian, it is just embedded          NOTE: gimpact is not a package in debian, it is just embedded
773          NOTE: http://gimpact.sf.net          NOTE: http://gimpact.sf.net
774    
775  MochiKit.js  mochikit
776          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
777            NOTE: they require extra patches, still unmerged upstream
778          - ntop <unfixed> (embed)          - ntop <unfixed> (embed)
779          - python-oherence <unfixed> (embed)          - coherence 0.6.2-1 (embed)
780          - python-paste <unfixed> (embed)          - paste <unfixed> (embed)
781          - python-turbogears <unfixed> (embed)          - turbogears <unfixed> (embed)
782          - zope-plone3 <unfixed> (embed)          - plone3 <removed> (embed)
783            - xulrunner <unfixed> (embed)
784  prototype.js          - libjifty-plugin-chart-perl <unfixed> (embed)
785          - netbeans-ide <unfixed> (embed)          - sabnzbdplus <unfixed> (embed)
786          - auth2db-frontend <unfixed> (embed)          - tgmochikit <unfixed> (embed)
787          - citadel-webcit <unfixed> (embed)  
788          - asterisk <unfixed> (embed)  prototypejs
789          - doc-iana <unfixed> (embed)          - netbeans-ide 6.0.1+dfsg-2 (embed)
790          - libaws-doc <unfixed> (embed)          - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
791          - libgettext-ruby-data <unfixed> (embed)          - webcit <unfixed> (embed; bug #555219)
792          - libjson-ruby-doc <unfixed> (embed)          - asterisk 1:1.6.2.0~rc3-1 (embed)
793          - liblucene2-java-doc <unfixed> (embed)          - libjson-ruby 1.1.4-1 (embed; bug #555224)
794          - libopenid-ruby <unfixed> (embed)          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
795          - solr-common <unfixed> (embed)          - horde3 <unfixed> (embed)
796          - glpi <unfixed> (embed)          - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
797          - hobbix <unfixed> (embed)          - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
798          - mnemo2 <unfixed> (embed)          - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
799          - nag2 <unfixed> (embed)          - ebug-http <unfixed> (embed; bug #555236)
800          - libjs-prototype <unfixed> (embed)          - libaws 2.7-1 (embed; bug #555222)
         - libjs-scriptaculous <unfixed> (embed)  
         - knowledgeroot <unfixed> (embed)  
         - mediatomb-common <unfixed> (embed)  
         - mt-daapd <unfixed> (embed)  
         - op-panel <unfixed> (embed)  
         - ebug-http <unfixed> (embed)  
801          - phpgedview <removed> (embed)          - phpgedview <removed> (embed)
802          - poker-web <unfixed> (embed)          - poker-network 1.7.6-1 (embed; bug #555238)
803          - python-webhelpers <unfixed> (embed)          - rails 2.1.0-6 (embed)
804          - qwik <unfixed> (embed)          - wordpress 2.5.0-2 (embed; bug #555243)
805          - rails <unfixed> (embed)          - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
806          - typo3-src-4.1 <unfixed> (embed)          TODO: search through all of the other zope packages
807          - wordpress <unfixed> (embed)          - ampache 3.4.1-2 (embed)
808          - zope-plone3 <unfixed> (embed)          - exaile 0.2.14+debian-2.1 (embed; bug #555245)
809          - smokeping <unfixed> (embed)          - hobix 0.5~svn20070319-4 (embed; bug #555247)
810            - zabbix 1.6.6-4 (embed; bug #555250)
811            - chora2 2.1.1+debian0-1 (embed; bug #555253)
812            - gollem 1.1.1+debian0-1 (embed; bug # 555254)
813            - jscropperui 1.2.1-1 (embed; bug #555257)
814            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
815            - ingo1 1.2.3+debian0-1 (embed; bug #555261)
816            - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
817            - activeldap 1.2.1-1 (embed)
818            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
819            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
820            - otrs2 2.3.4-6 (embed; bug #555267)
821            - webcalendar 1.2~b1-2 (embed; bug #555269)
822            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
823            - jifty 0.90519-1 (embed; bug #555271)
824            - jquery 1.4-1 (embed; bug #555272)
825            - passenger 2.2.5debian1-1 (embed; bug #555273)
826            - plone3 <removed> (embed; bug #555275)
827            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
828            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
829            - xulrunner <unfixed> (embed)
830            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
831            - jclicmoodle <unfixed> (embed)
832            - git-cola <unfixed> (embed)
833    
834  gdb  gdb
835          - insight <unfixed> (embed)          - insight <unfixed> (embed)
# Line 579  quazip (not packaged in Debian) Line 844  quazip (not packaged in Debian)
844  exo  exo
845          - pcmanfm <unfixed> (embed; bug #499677)          - pcmanfm <unfixed> (embed; bug #499677)
846          NOTE: slightly modified source code          NOTE: slightly modified source code
847    
848    java
849            - openjdk-6 <unfixed>
850            - sun-java5 <unfixed>
851            - sun-java6 <unfixed>
852    
853    libphp-snoopy
854            - ampache 3.4.1-2 (embed; bug #504169)
855            - gforge 4.6.99+svn6094-2 (embed)
856            - mahara 1.0.5-2 (embed; bug #504170)
857            - pixelpost 1.7.1-5 (embed; bug #504171)
858            - mediamate 0.9.3.6-5 (embed; bug #504172)
859            - opendb <removed> (embed; bug #504173)
860            [etch] - opendb <unfixed> (embed; bug #504173)
861            - wordpress 2.5.1-9 (embed; bug #443948)
862            - moodle <unfixed> (embed; bug #507185)
863            [etch] - phpgroupware <unfixed> (embed)
864            NOTE: phpgroupware-felamimail
865            - magpierss 0.72-3 (embed; bug #431089)
866    
867    jquery
868            - zekr <unfixed> (embed)
869            - wordpress <unknown> (embed)
870            - yocto-reader <unfixed> (embed)
871            - textpattern <unfixed> (embed)
872            - genshi 0.5.1-1 (embed)
873            NOTE: compressed file under examples/ dir
874            - prewikka <unfixed> (embed)
875            - libramaze-ruby <unfixed> (embed)
876            - drupal6 <unfixed> (embed)
877            - b2evolution <unfixed> (embed)
878            - wesnoth <unfixed> (embed)
879    
880    tablesorter (jquery plugin, not packaged yet)
881            - wesnoth <unfixed> (embed)
882    
883    kses
884            - wordpress <unfixed> (embed; bug #504242)
885            NOTE: their copy has all methods renamed to wp_<foo>
886            NOTE: kses isn't in Debian, RFP: #504240
887            - moodle <unfixed> (embed; bug #507185)
888            - egroupware <unfixed> (embed)
889    
890    magpierss
891            - wordpress <unfixed> (embed; bug #504242)
892            - moodle <unfixed>
893    
894    php-gettext
895            - wordpress 2.8.4-1 (embed; bug #504242)
896            - docbookwiki <unfixed> (embed)
897            - knowledgeroot 0.9.9.5-1
898            NOTE: non-free
899    
900    libphp-ixr (name may change, it is the Incutio XML-RPC)
901            - wordpress <unfixed> (embed; bug #504242)
902            NOTE: libphp-ixr isn't in Debian, RFP: #504236
903            - dokuwiki <unfixed> (embed)
904            - textpattern <unfixed> (embed)
905    
906    libphp-cas
907            - glpi <unfixed> (embed)
908            - moodle <unfixed> (embed; bug #505984)
909    
910    scriptaculous (prototype.js is among the embeds in the following)
911            - glpi <unfixed> (embed)
912            - libaws <unfixed> (embed; bug #555222)
913            - op-panel <unfixed> (embed)
914            - symfony <unfixed> (embed)
915            NOTE: maintainer says there are extra incompatible changes required
916            - pixelpost 1.7.1-6 (embed)
917            - webhelpers <unfixed> (embed)
918            - qwik <removed> (embed; bug #555241)
919            - smokeping <unfixed> (embed)
920            - turba2 <unfixed> (embed)
921            - typo3-src 4.2.3-1 (embed)
922            - request-tracker3.6 <unfixed> (embed)
923            - request-tracker3.8 <unfixed> (embed)
924            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
925            - wordpress 2.5.0-2 (embed)
926            - libhtml-prototype-perl 1.48-3 (embed)
927    
928    libmarkdown-php
929            - moodle <unfixed> (embed; bug #507185)
930            - pixelpost 1.7.1-6 (embed)
931    
932    php-openid
933            - wordpress-openid 3.3.2-1 (embed)
934    
935    geshi
936            - dokuwiki 0.0.20080505-3.1 (embed)
937            - pgfouine 1.0-1.1 (embed)
938            - websvn 2.1.0-1 (embed)
939    
940    webcalendar
941            - gforge 4.7~rc2-6 (embed; bug #504758)
942    
943    libical
944            - kdepim <unknown> (fork)
945            NOTE: fixed at some point during 4.0
946            - kdepimlibs 4.2.0-1 (fork)
947            - claws-mail-extra-plugins <unfixed> (fork)
948    
949    harfbuzz
950            - qt4-x11 <unfixed> (embed)
951            - pango1.0 <unfixed> (embed)
952            - fontmatrix <unfixed> (embed)
953    
954    libzip
955            - php5 <unfixable> (modified-embed)
956            - odt2txt <unfixed> (embed; bug #523808)
957    
958    json.php (not packaged; should be replaced with php's built-in functions)
959            - moodle <unfixed>
960            - yui <unfixed>
961            - gallery2 <unfixed>
962            - dokuwiki <unfixed>
963            - typo3-src <unfixed>
964    
965    php-fpdf
966            - tcpdf <itp> (fork)
967            - moodle <unfixed>
968            - phpwiki <unfixed>
969            - egroupware <unfixed>
970            - ldap-account-manager <unfixed> (fork)
971    
972    tcpdf (itp: #495985)
973            - moodle <unfixed>
974            - phpmyadmin <unfixed>
975    
976    typo3
977            - moodle <unfixed>
978    
979    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
980            - moodle <unfixed>
981            - gosa <unfixed>
982    
983    php-ole (itp: #487558)
984            - moodle <unfixed>
985    
986    pieforms (http://www.catalyst.net.nz)
987            - mahara <unfixed>
988    
989    savant2 (http://phpsavant.com)
990            - egroupware <unfixed>
991    
992    rssparser (http://nwow.org)
993            - egroupware <unfixed>
994            - phpgroupware <unfixed>
995    
996    lcms
997            - openjdk-6 <unfixed> (fork)
998            - gimp 2.4.0~rc2-2
999    
1000    libphp-phplayersmenu
1001            - diogenes <unfixed>
1002            - phpldapadmin <unfixed>
1003    
1004    libphp-pclzip
1005            - docvert <unfixed>
1006            - moodle <unfixed>
1007            - egroupware <unfixed>
1008    
1009    libphp-simplepie
1010            - dokuwiki <unfixed>
1011            - wordpress <unfixed>
1012    
1013    libphp-jpgraph
1014            - egroupware <unfixed>
1015    
1016    php-simpletest
1017            - moodle <unfixed>
1018    
1019    libpng
1020            - iceweasel <not-affected> (uses xulrunner)
1021            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1022            - iceape 1.0.13~pre080614i-0etch1 (embed)
1023            - xulrunner 1.9.0.13-1 (embed)
1024            [lenny] - xulrunner 1.9.0.11-0lenny1
1025            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1026            - gamera 3.2.3-1 (embed)
1027            - freeimage <unfixed> (embed)
1028            - tuxonice-userui <unfixed> (static)
1029    
1030    irssi
1031            - silc-client <unfixed> (embed)
1032            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1033    
1034    extc
1035            - mtasc <unfixed> (embed)
1036            - haxe <unfixed> (embed)
1037    
1038    swflib
1039            - mtasc <unfixed> (embed)
1040            - haxe <unfixed> (embed)
1041    
1042    libitext-java
1043            - bouncycastle 2.1.4-1 (embed)
1044    
1045    python-ply
1046            - pyke <unfixed> (embed; bug #555363)
1047            - pywbem 0.7.0-4 (embed; bug #555364)
1048            - sepolgen <unfixed> (embed; bug #555365)
1049            - zope-textindexng3 <unknown> (embed)
1050            - iceweasel <not-affected> (uses xulrunner)
1051            - xulrunner <unknown> (embed)
1052            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1053    
1054    libdumbnet (libdnet upstream)
1055            - nmap <unfixed> (fork)
1056    
1057    gcc-4.4
1058            - gcc-mingw32 <unfixed> (embed)
1059    
1060    camlimages
1061            - advi <unfixed> (static; bug #550441)
1062    
1063    memcached
1064            - memcachedb <unfixed> (embed)
1065    
1066    yajl
1067            - argyll <unfixed> (embed; bug #544223)
1068            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1069    
1070    nusoap
1071            - gforge 4.8.2-1 (embed)
1072            - ampache <unfixed> (embed)
1073            - poker-network <unfixed> (embed)
1074            - moodle <unfixed> (embed)
1075            NOTE: code is not used when running under php5 and soap is enabled
1076            - phpwiki <unfixed> (embed)
1077            - gallery2 <unfixed> (embed)
1078            - typo3-src <unfixed> (embed)
1079            - phpgacl 3.3.7-7 (embed)
1080            - mantis 1.1.8+dfsg-1 (embed)
1081    
1082    libept
1083            - adept <unfixed> (embed; bug #540649)
1084    
1085    libvorbis
1086            - iceweasel <not-affected> (uses xulrunner)
1087            - xulrunner <unfixed> (embed; bug #540959)
1088            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1089            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1090            - iceape <unfixed> (embed)
1091            [etch] - iceape <not-affected> (introduced in 2.0)
1092            [lenny] - iceape <not-affected> (introduced in 2.0)
1093    
1094    cairo
1095            - iceweasel <not-affected> (uses xulrunner)
1096            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1097    
1098    liboggz
1099            - iceweasel <not-affected> (uses xulrunner)
1100            - xulrunner <unfixed> (embed; bug #540959)
1101            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1102            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1103            - iceape <unfixed> (embed)
1104            [etch] - iceape <not-affected> (introduced in 2.0)
1105            [lenny] - iceape <not-affected> (introduced in 2.0)
1106    
1107    liboggplay
1108            - iceweasel <not-affected> (uses xulrunner)
1109            - xulrunner <unfixed> (embed; bug #540959)
1110            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1111            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1112            - iceape <unfixed> (embed)
1113            [etch] - iceape <not-affected> (introduced in 2.0)
1114            [lenny] - iceape <not-affected> (introduced in 2.0)
1115    
1116    php-net-dnsbl
1117            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1118    
1119    php-onyx-rss
1120            - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1121    
1122    php-text-wiki
1123            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1124    
1125    php-xml-rpc
1126            - serendipity <unfixed> (embed; bug #541740; package in NEW)
1127    
1128    polarssl (does not have a shared library)
1129            - pdkim <itp> (embed; bug #543150)
1130            - xyssl <unfixed> (old-version)
1131    
1132    pidgin (libpurple)
1133            - gaim <removed> (old-version)
1134            - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1135    
1136    icu
1137            - webkit 1.0.1-1 (embed; bug #547214)
1138            - texlive-bin <unfixed> (fork)
1139            NOTE: texlive upstream working with icu upstream to merge their changes
1140            - chromium-browser 5.0.375.29~r46008-3
1141    
1142    cyrus-imapd-2.2
1143            - kolab-cyrus-imapd <unfixed> (fork)
1144            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1145    
1146    python-cxx-dev
1147            - freecad 0.9.2646.3-1 (embed; bug #547936)
1148    
1149    zipios++
1150            - freecad 0.9.2646.3-1 (embed; bug #547941)
1151            - enigma 0.92.3-3 (embed)
1152            NOTE: likely fixed earlier, marking etch's version as fixed
1153    
1154    linux-2.6
1155            - kvm <removed> (embed; bug #549973) [./kernel/*]
1156            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1157            - kernel-source-2.6.8 <removed> (old-version)
1158            - kernel-source-2.4.27 <removed> (old-version)
1159            - kernel-source-2.4.24 <removed> (old-version)
1160            - kernel-source-2.2.25 <removed> (old-version)
1161            - kernel-source-2.2.20 <removed> (old-version)
1162    
1163    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1164            - kvm <removed> (embed) [./libfdt/*]
1165            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1166    
1167    qweb (not packaged)
1168            - ajaxterm <unfixed>
1169    
1170    opensaml2
1171            - opensaml <removed> (old-version)
1172    
1173    shibboleth-sp2
1174            - shibboleth-sp <removed> (old-version)
1175    
1176    tuxonice-userui
1177            - suspend2-userui <removed> (old-version)
1178    
1179    expat
1180            - w3c-libwww <removed> (embed; bug #551941)
1181            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1182            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1183            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1184            - python2.4 <unfixable> (embed; bug #553403)
1185            - python2.7 2.7-6 (embed)
1186            - python-4suite <unfixed> (embed; bug #516935)
1187            - wxwindows2.4 <removed> (embed)
1188            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1189            - wxwidgets2.8 2.8.10.1-2 (embed)
1190            - celementtree 1.0.5-8 (embed)
1191            NOTE: Maybe that was fixed even earlier
1192            - audacity 1.3.2-1 (embed)
1193            - matanza <unfixed> (embed)
1194            - tdom 0.8.3~20080525-1 (embed)
1195            - udunits 2.1.8-4 (embed)
1196            - apr-util 1.2 (embed)
1197            - ayttm <unfxed> (embed; bug #561006)
1198            - cableswig <unfixed> (embed)
1199            - cadaver <unfixed> (embed)
1200            - cmake 2.6.0-6 (embed)
1201            - coin3 <unfixed> (embed)
1202            - gdcm 2.0.14-2 (embed)
1203            - ghostscript 8.71~dfsg-2 (embed)
1204            - grmonitor <removed> (embed)
1205            - iceape <unfixed> (embed)
1206            - insighttoolkit 3.16.0-1 (embed)
1207            NOTE: insighttoolkit might've been fixed earlier
1208            - libparagui1.1 1.0.2-1 (embed)
1209            - paraview 3.6.2-1 (embed)
1210            - poco 1.3.6p1-1 (embed)
1211            - simgear <unfixed> (embed)
1212            - sitecopy 1:0.16.0-1
1213            - smart <unfixed> (embed)
1214            NOTE: smart embeds celementree, and it includes expat
1215            - swish-e <not-affected> (Linked against libxml, which is used instead)
1216            - tla 1.3.5+dfsg-15 (embed)
1217            - vtk 4.1.20030227-1 (embed)
1218            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1219            - xmlrpc-c <unfixed> (embed)
1220            - iceweasel <unfixed> (embed)
1221            - kompozer <unfixed> (embed)
1222            - vxl 1.13.0-2 (embed)
1223            - xulrunner <unfixed> (embed)
1224            - apache2 2.2 (embed)
1225            - texlive-bin <not-affected> (Embedded code not compiled in)
1226            - vnc4 <unfixed> (embed)
1227            - xotcl 1.6.6-1 (embed)
1228            - chromium-browser 5.0.375.29~r46008-3
1229    
1230    xerces-c
1231            - xerces-c2 <unfixed> (old-version)
1232            - xerces27 <removed> (old-version)
1233    
1234    md5 (RSA's version; not the gnu version provided by coreutils)
1235            - w3c-libwww <removed> (embed; bug #551942)
1236            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1237    
1238    libparagui1.1
1239            - asc <unfixable> (fork)
1240    
1241    enet
1242            - sauerbraten <unfixed> (embed; #497194)
1243    
1244    eglibc
1245            - glibc <removed> (old-version)
1246            - mksh <unfixable> (static)
1247              NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1248    
1249    galib
1250            - gamera 3.2.3-1 (embed)
1251    
1252    configobj
1253            - bzr 2.1.0~rc2-1 (embed; bug #555336)
1254            - elisa <unfixed> (embed; bug #555337)
1255            - gaupol <unfixed> (embed; bug #555338)
1256            - ipython <unfixed> (embed; bug #555339)
1257            - pida <unfixed> (embed; bug #555340)
1258            - psychopy <unfixed> (embed; bug #555341)
1259            - rest2web <unfixed> (embed; bug #555342)
1260            - auth2db <unknown> (embed)
1261            - dynagen <unknown> (embed)
1262            - iceweasel <unknown> (embed)
1263            - sabnzbdplus <unknown> (embed)
1264            - xulrunner <unknown> (embed)
1265            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1266    
1267    python-clientform
1268            - bibus <unfixed> (embed; bug #555332)
1269            - zope2.10 <unfixed> (embed; bug #555333)
1270            - zope2.11 <removed> (embed; bug #555334)
1271            - python-mechanize <unknown> (embed)
1272            - twill <unknown> (embed)
1273    
1274    python-mechanize
1275            - zope2.10 <unfixed> (embed; bug #555337)
1276            - zope2.11 <removed> (embed; bug #555338)
1277            - twill <unknown> (embed; bug #555339)
1278    
1279    pexpect
1280            - duplicity 0.6.06-1 (embed; bug #555361)
1281            - hplip <unfixed> (embed; bug #555362)
1282            - smart <unfixed> (embed; bug #555363)
1283    
1284    pyparsing
1285            - bauble <unfixed> (embed; bug #555366)
1286            - boa-constructor 0.6.1-8 (embed; bug #555367)
1287            - calibre <unfixed> (embed; bug #555368)
1288            - matplotlib <unfixed> (embed; bug #531024)
1289            - zhpy 1.7.3.1-1 (embed; bug #555370)
1290            - polybori <unknown> (embed)
1291            - python-whoosh <unknown> (embed)
1292            - twill <unknown> (embed)
1293            - zope-textindexng3 <unknown> (embed)
1294    
1295    python-pysqlite2
1296            - python2.4 <unfixed> (embed; bug #553403)
1297            - python2.5 <unfixed> (embed; bug #553403)
1298    
1299    celementtree
1300            - python2.5 <unfixed> (embed)
1301            - smart <unfixed> (embed)
1302    
1303    elementtree
1304            - python2.5 <unfixed> (embed)
1305            - python2.6 <unfixed> (embed)
1306            - bzr 2.1.0~rc2-1 (embed; bug #555343)
1307            - gedit 2.28.2-1 (embed; bug #555344)
1308            - smart <unfixed> (embed)
1309            - solfege <unfixed> (embed; bug #555345)
1310            - w3af <unfixed> (embed; bug #555346)
1311            - python-qt4 <unknown> (embed)
1312            - sphinx <unknown> (embed)
1313            - python-nltk <itp> (embed)
1314    
1315    python2.5
1316            - python2.4 <unfixed> (old-version)
1317            - jython <unfixed> (embed)
1318            NOTE: embeds many stdlib modules
1319            - python-django <unfixed> (embed; bug #555419)
1320            NOTE: embeds stdlib modules: doctest, decimal
1321            - gamera 3.2.3-1 (embed)
1322            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1323            - boa-constructor <unfixed> (embed; bug #555426)
1324            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1325            - nicotine <unfixed> (embed; bug #555427)
1326            NOTE: embeds stdlib modules: ConfigParser
1327            - museek+ <unfixed> (embed; bug #555428)
1328            NOTE: embeds stdlib modules: ConfigParser
1329            - vegastrike-data <removed> (embed)
1330            NOTE: embeds many stdlib modules
1331            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1332            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1333            - config-manager <unfixed> (embed; bug #555423)
1334            NOTE: embeds stdlib modules: optparse
1335            - jhbuild 2.28.0-1 (embed; bug #555421)
1336            NOTE: embeds stdlib modules: optparse, subprocess
1337            - smart <unfixed> (embed; bug #555432)
1338            NOTE: embeds stdlib modules: optparse
1339            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1340            NOTE: embeds stdlib modules: doctest
1341            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1342            NOTE: embeds stdlib modules: doctest
1343            - distribute <unfixed> (embed)
1344            NOTE: embeds stdlib modules: doctest
1345            - python-setuptools <unfixed> (embed; bug #555435)
1346            NOTE: embeds stdlib modules: doctest
1347            - zope.testing <unfixed> (embed; bug #555436)
1348            NOTE: embeds stdlib modules: doctest
1349            - translate-toolkit <unfixed> (embed; bug #555422)
1350            NOTE: embeds stdlib modules: textwrap, contextlib
1351            - libtpclient-py <unfixed> (embed; bug #555424)
1352            NOTE: embeds stdlib modules: subprocess
1353            - grass <unfixed> (embed; bug #555425)
1354            NOTE: embeds stdlib modules: subprocess
1355            - coherence <unfixed> (embed; bug #555429)
1356            NOTE: embeds stdlib modules: uuid
1357            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1358            NOTE: embeds stdlib modules: uuid
1359            - setroubleshoot <removed> (embed; bug #555431)
1360            NOTE: embeds stdlib modules: uuid
1361            - linkchecker <unfixed> (embed; bug #555414)
1362            NOTE: embeds msgfmt.py script
1363            - imdbpy <unfixed> (embed)
1364            NOTE: embeds msgfmt.py script
1365            - kiwi <unfixed> (embed)
1366            NOTE: embeds msgfmt.py script
1367            - moin <unfixed> (embed)
1368            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1369            - plone3 <removed> (embed)
1370            NOTE: embeds msgfmt.py script
1371            - roundup <unfixed> (embed)
1372            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1373            - rednotebook <unfixed> (embed; bug #555415)
1374            NOTE: embeds msgfmt.py script
1375            - turbogears <unfixed> (embed)
1376            NOTE: embeds msgfmt.py script
1377            - elisa <unfixed> (embed)
1378            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1379            - calibre <unfixed> (embed)
1380            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1381            - mailman 1:2.1.13-1 (embed; #555416)
1382            NOTE: embeds msgfmt.py script
1383            - python-docutils <unknown> (embed)
1384            NOTE: embeds stdlib modules: optparse, textwrap
1385            - python-imaging <unknown> (embed)
1386            NOTE: embeds stdlib modules: doctest
1387            - python-mechanize <unknown> (embed)
1388            NOTE: embeds stdlib modules: doctest
1389            - twill <unknown> (embed)
1390            NOTE: embeds stdlib modules: subprocess
1391            - zeroc-ice <unknown> (embed)
1392            NOTE: embeds stdlib modules: subprocess
1393            - wxwidgets2.8 <unknown> (embed)
1394            NOTE: embeds stdlib modules: subprocess
1395            - cycle <unknown> (embed)
1396            NOTE: embeds msgfmt.py script
1397            - deluge <unknown> (embed)
1398            NOTE: embeds msgfmt.py script
1399            - opendict <unknown> (embed)
1400            NOTE: embeds msgfmt.py script
1401            - openerp-client <unknown> (embed)
1402            NOTE: embeds msgfmt.py script
1403            - rapidsvn <unknown> (embed)
1404            NOTE: embeds msgfmt.py script
1405            - wammu <unknown> (embed)
1406            NOTE: embeds msgfmt.py script
1407            - gaphor <unknown> (embed)
1408            NOTE: embeds msgfmt.py script
1409            - pida <unknown> (embed)
1410            NOTE: embeds msgfmt.py script
1411            - python-formencode <unknown> (embed)
1412            NOTE: embeds msgfmt.py script
1413            - duplicity <unfixed> (embed)
1414            NOTE: embeds stdlib module: urlparse, tarfile
1415            - pygopherd <unfixed> (embed)
1416            NOTE: embeds stdlib module: zipfile
1417    
1418    argparse
1419            - twill <unfixed> (embed; bug #555347)
1420            - ipython <unfixed> (embed; bug #555348)
1421    
1422    coherence
1423            - elisa <unfixed> (embed; bug #555335)
1424    
1425    simpletal
1426            - plastex <unfixed> (embed; bug #555371)
1427    
1428    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1429            - postr <unfixed> (embed)
1430            - elisa <unfixed> (embed)
1431    
1432    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1433            - apertium-tolk <unfixed> (embed)
1434            - ipython <unfixed> (embed)
1435            - virtaal <unfixed> (embed)
1436    
1437    distribute
1438            - setuptools <removed> (old-version)
1439    
1440    rails
1441            - jruby1.2 <removed> (embed) [./bench/rails/*]
1442            NOTE: jruby is in non-free, it probably includes rails too
1443            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1444            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1445            - thin <unfixed> (embed) [./spec/rails_app/*]
1446            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1447            NOTE: be dangerous if developers are naively basing their code off of the examples
1448            NOTE: prototype.js is among the example files
1449    
1450    lucene2 (prototype.js is among the embeds in the following)
1451            - lucene <unfixed> (old-version)
1452            - pylucene <unfixed> (embed)
1453            - libpdfbox-java <unfixed> (embed)
1454            - libfontbox-java <unfixed> (embed)
1455            - libjempbox-java <unfixed> (embed)
1456            - solr <unfixed> (embed)
1457    
1458    unicode-data
1459            - syslinux <unfixed> (embed)
1460            - camomile <unfixed> (embed)
1461            - fribidi <unfixed> (embed)
1462            - m17n-db <unfixed> (embed)
1463            - sbcl <unfixed> (embed)
1464            - heimdal <unfixed> (embed)
1465            - icu <unfixed> (embed)
1466            - icu4j <unfixed> (embed)
1467            - krb5 <unfixed> (embed)
1468            - moodle <unfixed> (embed)
1469            - openldap <unfixed> (embed)
1470            - pike7.6 <unfixed> (embed)
1471            - samba <unfixed> (embed)
1472            - samba4 <unfixed> (embed)
1473            - cmucl <unfixed> (embed)
1474            - typo3-src <unfixed> (embed)
1475            - mauve <unfixed> (embed)
1476            - texlive-bin <unfixed> (embed)
1477            - ypsilon <unfixed> (embed)
1478            - jeuclid <unfixed> (embed)
1479            - charmap.app <unfixed> (embed)
1480            - clisp <unfixed> (embed)
1481            - gnulib <unfixed> (embed)
1482            - opensrs-client <unfixed> (embed)
1483            - saxonb <unfixed> (embed)
1484            - rails <unfixed> (embed)
1485    
1486    feedparser
1487            - rawdog <unfixed> (embed; bug #383422)
1488            - miro <unfixed> (embed; bug #555351)
1489            - calibre <unfixed> (embed; bug #555352)
1490            - freevo <unfixed> (embed; bug #555353)
1491            - pida <unfixed> (embed; bug #555354)
1492            - planet-venus <unfixed> (embed; bug #555355)
1493            - plone3 <removed> (embed; bug #555356)
1494            - exaile 0.2.14+debian-1 (embed)
1495            - screenlets 0.1.2-3 (embed)
1496            NOTE: included twice
1497    
1498    agg:
1499            - matplotlib <unfixed> (embed: bug #377271)
1500            - contextfree <unfixed> (embed)
1501            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1502            - exactimage <unfixed> (embed)
1503            - python-enable <unfixed> (embed)
1504            - mapnik 0.5.1-3 (embed)
1505            NOTE: links statically to agg, but shared library is not available (bug #377271)
1506    
1507    vtk
1508            - paraview <unfixable> (embed; bug #495426)
1509    
1510    txt2tags
1511            - rednotebook <unfixed> (embed)
1512    
1513    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1514            - gajim <unfixed> (embed)
1515            - emesene <unfixed> (embed)
1516            - convirt <unfixed> (embed)
1517            - pida <unfixed> (embed)
1518            - rednotebook <unfixed> (embed)
1519    
1520    horde3 (prototype.js is among the embeds in the following)
1521            - mnemo2 <unfixed> (embed)
1522            - nag2 <unfixed> (embed)
1523            - wordpress <unfixed> (embed)
1524            NOTE: Text_Diff (wp-includes/Text/Diff*)
1525    
1526    cimg
1527            - gmic <unfixed> (embed)
1528    
1529    mootools
1530            - kdenetwork <unfixed> (embed)
1531            - gallery <unfixed> (embed)
1532            - jspwiki <unfixed> (embed)
1533            - vdr-plugin-live <unfixed> (embed)
1534            - perl-doc-html <unfixed> (embed)
1535    
1536    openldap
1537            - openldap2.3 <removed> (old-version)
1538    
1539    grub2
1540            - grub <unfixed> (old-version)
1541    
1542    gnupginterface
1543            - duplicity <unfixed> (embed)
1544    
1545    python-dateutil
1546            - awn-extras-applets <unfixed> (embed)
1547            - matplotlib <unknown> (embed)
1548    
1549    cups
1550            - cupsys <removed> (old-version)
1551    
1552    yui
1553            - bcfg2 <not-affected> (present in source but not included in any binary files)
1554            - serendipity 1.5.3-1 (embed; bug #557746)
1555            - moodle 1.8.2.dfsg-5 (embed)
1556            - jifty 0.91117-1 (embed; bug #557748)
1557            - webgui 7.7.26-1 (embed)
1558            - loggerhead 1.17-1 (embed)
1559            - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1560    
1561    quake3 (vanilla source not packaged in debian)
1562            - openarena <unfixable> (fork)
1563    
1564    quake2 (vanilla source not packaged in debian)
1565            - alien-arena <unfixable> (fork)
1566            - warsow <unfixable> (fork)
1567    
1568    libtheora
1569            - iceweasel <not-affected> (uses xulrunner)
1570            - xulrunner <unfixed> (embed; bug #540959)
1571            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1572            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1573            - iceape <unfixed> (embed; bug #559276)
1574            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1575            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1576    
1577    dtoa
1578            - bfilter <unfixed> (embed)
1579            - cacao <removed> (embed)
1580            - cdrdao <unfixed> (embed)
1581            - classpath <unfixed> (embed)
1582            - freej <unfixed> (embed)
1583            - iceape <unfixed> (embed)
1584            - iceweasel <unfixed> (embed)
1585            - jscoverage <unfixed> (embed)
1586            - kde4libs <unfixed> (embed)
1587            - kdelibs <unfixed> (embed)
1588            - kompozer <unfixed> (embed)
1589            - libv8 <unfixed> (embed)
1590            - mono <unfixed> (embed)
1591            - newlib <unfixed> (embed)
1592            - nspr <unfixed> (embed)
1593            - php5 <unfixed> (embed)
1594            - polyml <unfixed> (embed)
1595            - qt4-x11 <unfixed> (embed)
1596            - rhino <unfixed> (embed)
1597            NOTE: code translated to Java
1598            - ruby1.8 <unfixed> (embed)
1599            - ruby1.9 <unfixed> (embed)
1600            - ruby1.9.1 <unfixed> (embed)
1601            - sdd <unfixed> (embed)
1602            - sfind <unfixed> (embed)
1603            - star <unfixed> (embed)
1604            - tinymux <unfixed> (embed)
1605            - virtualbox-ose <unfixed> (embed)
1606            - webkit <unfixed> (embed)
1607            - xulrunner <unfixed> (embed)
1608    
1609    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1610            - firegpg <unfixed> (embed)
1611            - enigmail <unfixed> (embed)
1612    
1613    ptmalloc (not packaged in Debian)
1614            - crystalspace <unfixed> (embed)
1615            - qt4-x11 <unfixed> (embed)
1616    
1617    svgalib
1618            - usplash <unfixed> (embed)
1619    
1620    bogl
1621            - usplash <unfixed> (embed)
1622    
1623    taglist
1624            - usplash <unfixed> (embed)
1625    
1626    portaudio
1627            - audacity <unfixed> (embed; bug #323711)
1628    
1629    nyquist
1630            - audacity <unfixed> (embed)
1631            NOTE: embeds a forked nyquist with support for a shared library
1632    
1633    vamp-plugin-sdk
1634            - audacity <unfixed> (embed)
1635    
1636    wordpress
1637            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1638            - wordpress-mu <removed> (fork)
1639    
1640    php5
1641            - php4 <removed> (old-version)
1642    
1643    classpath
1644            - libgnucrypto-java <removed> (embed; bug #559788)
1645    
1646    libtool
1647            - apr <unfixed> (static; bug #489625)
1648            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1649            - arts <unfixed> (embed)
1650            - bochs 2.4.2-1 (embed; bug #560884)
1651            - camserv <unfixed> (embed)
1652            - collectd 4.8.2-1 (embed)
1653            - courier-authlib 0.58-4 (embed)
1654            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1655            - cvsnt 2.5.04.3236-1.2 (embed)
1656            - dico <not-affected> (Uses the system copy of ltdl)
1657            - freeradius 0.1+20010527-1 (embed)
1658            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1659            - ggobi 2.1.9~20091212-1 (embed)
1660            - glame 2.0.1-4 (embed)
1661            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1662            - gnash 0.8.7-2 (embed)
1663            - gnu-smalltalk <unfixed> (embed; bug #566777)
1664            - google-gadgets 0.10.5-0.3 (embed)
1665            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1666            - graphicsmagick 1.3.5-6 (embed)
1667            - graphviz 2.8-3 (embed)
1668            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1669            - guile-1.6 1.6.8-7 (embed)
1670            - hamlib 1.2.11-1 (embed)
1671            - hercules 3.06-1.2 (embed)
1672            - jags 1.0.4-3 (embed; bug #560864)
1673            - kdelibs <unfixed> (embed)
1674            - libannodex <removed> (embed)
1675            - libextractor 0.5.23+dfsg-4 (embed)
1676            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1677            - libtunepimp 0.5.3-7.3 (embed)
1678            - mp4h 1.3.1-4.1 (embed)
1679            - naim <removed> (embed)
1680            - parser-mysql <unfixed> (embed)
1681            - pinball 0.3.1-11 (embed)
1682            - redland <unfixed> (embed)
1683            - siproxd <unfixed> (embed)
1684            - ski <unfixed> (embed)
1685            - synfig 0.62.00-1 (embed)
1686            - unixodbc 2.2.4-5 (embed)
1687            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1688            - clamav 0.95+dfsg-1 (embed)
1689            - imagemagick 6:6.2.3.1-1 (embed)
1690            - hypre 2.4.0b-5 (embed)
1691            - lam <unfixed> (embed)
1692            - openmpi <unfixable> (embed; bug #559386)
1693            - parser <unfixed> (embed)
1694            - pdsh 2.18-5 (embed; bug #560892)
1695            - sbnc 1.2-8 (embed)
1696            - sdcc <unfixed> (embed)
1697            - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1698            - proftpd-dfsg <unfixed> (embed; bug #561748)
1699            - babel 1.4.0.dfsg-5 (embed)
1700            - libprelude 0.9.14-2 (embed)
1701            - heartbeat 2.1.4-7 (embed)
1702            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1703            NOTE: might've been fixed earlier
1704            - gcc-* <unknown> (embed)
1705    
1706    ocamlgsl
1707            - orpie 1.5.1-7.1 (embed; bug #550058)
1708    
1709    xdotool
1710            - keynav <unfixed> (embed; bug #560103)
1711    
1712    bulletphysics (not packaged; http://www.bulletphysics.org/)
1713            - supertuxkart <unfixed> (embed)
1714            - blender <unfixed> (embed)
1715    
1716    ghostscript
1717            - gs-gpl <removed> (old-version)
1718    
1719    icedove
1720            - thunderbird <removed> (old-version)
1721    
1722    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1723            - jquery <unfixed> (embed)
1724    
1725    sed
1726            - ssed <unfixed> (fork)
1727    
1728    phpatomlib (http://code.google.com/p/phpatomlib)
1729            - wordpress <unfixed> (embed)
1730    
1731    Services_JSON (http://pear.php.net/package/Services_JSON)
1732            - wordpress <unfixed> (embed)
1733    
1734    phpass (http://www.openwall.com/phpass/)
1735            - gallery2 <unfixed> (embed)
1736            - wordpress <unfixed> (embed)
1737            - typo3-src <unfixed> (modified-embed)
1738            NOTE: file refers to drupal, maybe there's a copy somewhere there
1739            NOTE: a copyright owner search didn't match anything
1740            - libauthen-passphrase-perl <unfixable> (fork)
1741            NOTE: perl implementation of phpass
1742    
1743    squirrelmail
1744            - wordpress <unfixed> (embed)
1745            NOTE: class-pop3.php
1746    
1747    ezSQL (http://www.woyano.com/jv/ezsql)
1748            - wordpress <unfixable> (fork)
1749            NOTE: wp-db.php
1750    
1751    Diff.php (Clay Loveless' version/killersoft.com)
1752            - php-versioncontrol-svn <unfixed>
1753    
1754    libm (provided by libc)
1755            - spring <unfixed> (embed)
1756            NOTE: embedded by embedded copy of streflop
1757            - aide <unfixed> (static)
1758            - busybox <unfixed> (static)
1759            - mindi-busybox <unfixed> (static)
1760            - qemu <unfixed> (static)
1761            NOTE: qemu-user-static
1762            - tuxonice-userui <unfixed> (static)
1763            - zsh <unfixed> (static)
1764            NOTE: zsh-static
1765            - tripwire <unfixed>
1766    
1767    streflop
1768            - spring <unfixed> (embed)
1769    
1770    minizip
1771            - spring <unfixed> (embed)
1772    
1773    oscpack
1774            - spring <unfixed> (embed)
1775    
1776    hpiutil2
1777            - spring <unfixed> (embed)
1778    
1779    p7zip
1780            - spring <unfixed> (embed)
1781    
1782    pythonqt (doesn't seem to be python-qtN, unknown source)
1783            - fontmatrix <unfixed> (embed)
1784            - elmerfem <unfixed> (embed)
1785    
1786    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1787            - docvert <unfixed> (embed)
1788            - jifty <unfixed> (embed)
1789            - kdenetwork <unfixed> (embed)
1790            - mediatomb <unfixed> (embed)
1791            - plastex <unfixed> (embed)
1792            - plone3 <removed> (embed)
1793            - python-chaco <unfixed> (embed)
1794            - python-docutils <unfixed> (embed)
1795            - s5 <unfixed> (embed)
1796            - zope2.10 <unfixed> (embed)
1797            - zope2.11 <removed> (embed)
1798            - cython <not-affcted> (embed)
1799            NOTE: part of documentation, which is not installed into the binary package
1800    
1801    python-docutils
1802            - zope2.10 <unfixed> (embed)
1803            - zope2.11 <removed> (embed)
1804    
1805    tesseract
1806            - ocropus <unfixed> (static)
1807    
1808    antlr
1809            - kdevelop <unfixed> (embed)
1810    
1811    libxerces2
1812            - openjdk-6 <unfixed> (embed)
1813    
1814    kfreebsd-8
1815            - kfreebsd-7 <unfixed> (old-version)
1816            - kfreebsd-6 <removed> (old-version)
1817    
1818    ruby1.9.1
1819            - ruby1.9 <unfixed> (old-version)
1820            - ruby1.8 <unfixed> (old-version)
1821    
1822    maildrop
1823            - courier <unfixed> (embed) [./maildrop]
1824    
1825    glee
1826            - warzone2100 <not-affected> (embed)
1827    
1828    phing
1829            - symfony <unfixed> (embed)
1830    
1831    pake
1832            - symfony <unfixed> (embed)
1833    
1834    propel
1835            - symfony <unfixed> (embed)
1836    
1837    creole
1838            - symfony <unfixed> (embed)
1839    
1840    hfsutils
1841            - cdrkit <unfixed> (embed; bug #570187)
1842            NOTE: embeds hfsutils code in genisoimage
1843    
1844    cdrkit
1845            - grub2 <unfixed> (embed; bug #570156)
1846            NOTE: genisoimage imported into grub-mkisofs
1847    
1848    kdebase-workspace
1849            - kdebase <unfixed> (old-version)
1850    
1851    file
1852            - php5 <unfixable> (modified-embed)
1853            [lenny] - php5 <not-affected>
1854    
1855    cdb
1856            - php5 <unfixed> (embed)
1857    
1858    libmbfl (itp: #570708)
1859            - php5 <unfixed> (embed)
1860            NOTE: PHP is actually the current upstream, ITP is of that code
1861    
1862    libonig
1863            - php5 5.3.2-1 (embed)
1864    
1865    xmlrpc-epi
1866            - php5 <unfixed> (embed)
1867    
1868    swt-gtk
1869            - eclipse <unfixed> (embed; bug #538808)
1870    
1871    txt2html
1872            - wml 2.0.11ds2-1 (embed)
1873    
1874    ca-certificates
1875            - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1876    
1877    openexr
1878            - freeimage <unfixed> (embed)
1879    
1880    libmng
1881            - freeimage <unfixed> (embed)
1882    
1883    openjpeg
1884            - freeimage <unfixed> (embed)
1885    
1886    libjpeg6b
1887            - freeimage <unfixed> (embed)
1888    
1889    libjpeg (don't know what exact version)
1890            - dcmtk <unfixed>
1891            - gdcm <unfixed>
1892            - insighttoolkit <unfixed>
1893            - openarena 0.8.5-5+exp1 (bug #495966)
1894            - outguess <unfixed>
1895            - squeak-vm <unfixed> (embed)
1896            - tremulous <unfixed>
1897            - tuxonice-userui <unfixed> (static)
1898            - fpc <unfixed> (static)
1899            - lazarus <unfixed> (static)
1900            NOTE: inherited from fpc, see #472304
1901            - mseide-msegui <unfixed> (static)
1902            NOTE: inherited from fpc, see #472304
1903            - easymp3gain <unfixed> (static)
1904            NOTE: inherited from fpc, see #472304
1905            - winff <unfixed> (static)
1906            NOTE: inherited from fpc, see #472304
1907            - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1908    
1909    
1910    lxr
1911            - lxr-cvs <unfixed> (embed)
1912    
1913    libfile-copy-recursive-perl
1914            - r-base <unfixed> (embed; bug #577427)
1915            - r-base-core-ra <unfixed> (embed; bug #577429)
1916    
1917    delimmatch
1918            - r-base <unfixed> (embed; bug #577433)
1919            - r-base-core-ra <unfixed> (embed; bug #577434)
1920    
1921    libsmf (ITP: #572558)
1922            - denemo <unfixed> (embed)
1923            NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1924    
1925    libselinux
1926            - dpkg 1.15.6 (static)
1927    
1928    xinha (ITP: #479708)
1929            - horde3 <unfixed>
1930            - serendipity <unfixed>
1931            - openacs <unfixed>
1932            - dotlrn <unfixed>
1933    
1934    dvipng
1935            - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1936    
1937    dvipdfmx
1938            - texlive-bin <unfixed> (embed)
1939            NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1940    
1941    lcdf-typetools
1942            - texlive-bin 2009-1 (embed)
1943    
1944    tex4ht
1945            - texlive-bin 2009-1 (embed)
1946    
1947    freetype
1948            - texlive-bin 2009-1 (embed)
1949    
1950    freetype2
1951            - texlive-bin 2009-1 (embed)
1952    
1953    silgraphite
1954            - texlive-bin <unfixed> (embed)
1955    
1956    unzip
1957            - texlive-bin 2009-1 (embed)
1958    
1959    jbig2dec
1960            - ghostscript 8.71~dfsg2-1 (embed)
1961    
1962    libxml2
1963            - chromium-browser 5.0.375.29~r46008-1
1964    
1965    protobuf
1966            - chromium-browser 5.0.375.70~r48679-2
1967    
1968    libv8
1969            - chromium-browser 5.0.375.38~r46659-1
1970    
1971    nspr
1972            - chromium-browser 5.0.375.29~r46008-3
1973    
1974    yasm
1975            - chromium-browser 5.0.375.29~r46008-2
1976    
1977    libxslt
1978            - chromium-browser 5.0.375.29~r46008-1
1979    
1980    miniupnpc (not packaged in Debian; ITP bug #444392)
1981            - warzone2100 <unfixed> (embed)
1982    
1983    iniparser (not packaged in Debian; RFP bug #582657)
1984            - warzone2100 <unfixed> (modified-embed)
1985    
1986    pyglet
1987            - sympy <unfixed> (embed; bug #459716)
1988    
1989    mpmath
1990            - sympy <unfixed> (embed; bug #541746)
1991    
1992    curl
1993            - criticalmass <unfixed> (static; bug #599061)
1994            - wengophone <unknown> (embed)
1995    
1996    lib3ds
1997            - boson <unfixed> (embed; bug #600900)
Legend:
Removed from v.9887  
changed lines
  Added in v.15497
  ViewVC Help
Powered by ViewVC 1.1.5