/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 28335 - (show annotations) (download)
Mon Aug 18 15:46:23 2014 UTC (9 days, 23 hours ago) by carnil
File size: 75899 byte(s)
ruby1.9.1 removed from unstable
1 Embedded code copies
2 ====================
3
4 https://wiki.debian.org/EmbeddedCodeCopies
5 This file collects source packages that embed code from other projects.
6 This is considered bad for fixing security flaws because the fix needs
7 to be applied in multiple source packages.
8
9 Format:
10 <srcpkg> (<optional comment about srcpkg>)
11 - <embedding srcpkg> <status> (<sort>; bug #<number>)
12 NOTE: optional comments about the linkage of the embedding srcpkg
13
14 status: version number fixing the embedded copy
15 <unfixed> if the issue is not yet fixed
16 <removed> if the package was removed from the archive
17 <itp> if the package is in the process of being packaged
18 <not-affected> if the package does not use the embedded copy
19 <unknown> if the version number can not be determined
20 <unfixable> for unavoidable cases (e.g., forks that add real value)
21 sort: static (linking statically against a lib)
22 embed (embeds a copy of the library into another source package)
23 modified-embed (embeds a code copy that differs from upstream code)
24 fork (a full-blown fork of another source package)
25 old-version (an older version of essentially the same code)
26
27 The srcpkg might be some string to identify the code if there is no
28 specific source package.
29
30 Everything up to the next line is ignored.
31 ---BEGIN
32 poppler
33 - pdftohtml <unknown>
34 [sarge] - pdftohtml <unfixed>
35 [etch] - pdftohtml <unfixed>
36 NOTE: has been replaced by poppler-utils
37 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38 - texlive-base 3.0-12 (embed)
39 - texlive-bin 2007-1 (embed)
40 - koffice 1:2.0.0-1 (embed; bug #436163)
41 - libextractor 0.5.12-1 (embed)
42 NOTE: libextractor is using its own pdf decoder now
43 - ipe <unfixed> (embed)
44 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45 - ruby-gnome2 <unknown> (embed)
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <removed> (embed; bug #551293)
48 - xpdf 3.02-9 (fork)
49 - luatex <unfixed>
50 NOTE: detected by lintian, needs to be checked/confirmed
51
52 pdksh (no longer developed since 1999)
53 - mksh <unfixable> (fork)
54 - posh <unfixable> (fork)
55
56 ppmd
57 - libcomplearn-mod-ppmd <unfixed> (fork)
58 NOTE: discussion in #458152
59
60 libevent
61 - transmission 1.71-1 (embed; bug #529372)
62 - chromium-browser 5.0.375.29~r46008-1
63 - dnsproxy <unknown> (embed)
64
65 lrmi
66 - read-edid 2.0.0-1 (embed; bug #495131)
67 - s3switch <unfixed> (embed)
68 - xresprobe <unfixed> (embed)
69 - zhcon <unfixed> (embed)
70
71 php-htmlpurifier
72 - mahara 1.2.5-1 (embed)
73 - knowledgeroot 0.9.9.5-5 (embed)
74 - moodle 2.5.1-1 (embed)
75
76 peercast
77 - gnome-peercast <removed> (embed)
78 [etch] - gnome-peercast <unfixed> (embed)
79
80 silc-toolkit
81 - silc-client 1.1~beta6-1 (embed)
82
83 icclib
84 - ghostscript <unfixed> (embed)
85 - argyll <unfixed> (embed)
86
87 libusb
88 - argyll <unfixed> (embed)
89 - ia32-libs <removed> (embed)
90
91 dietlibc
92 - ccontrol 0.9.1+20071204-1 (static)
93 - mksh <unfixable> (static)
94 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
95
96 libmikmod
97 - pysol-sound-server <unfixed> (modified-embed)
98 - sdl-mixer1.2 <unfixed> (embed)
99 TODO: report bug
100 - uqm 0.6.2.dfsg-8 (embed)
101 NOTE: Might be fixed earlier. Lenny version recorded.
102 - black-box 1.4.6-2.2 (embed)
103 NOTE: Might be fixed earlier. Lenny version recorded.
104
105 libiax
106 - iaxmodem <unfixable> (embed; bug #548885)
107
108 spandsp
109 - iaxmodem <unfixable> (embed; bug #548885)
110
111 python-paramiko
112 - fabric 0.9.0-2 (embed; bug #561398)
113
114 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
115 - dpkg 1.15.6 (static)
116 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
117 - rsync <unfixed> (embed)
118 - cherokee <unfixed> (embed)
119 NOTE: somehow derived code base
120 - mono <unfixed> (embed)
121 TODO: check mozilla
122 - linux-2.6 <unfixed> (embed)
123 - pvpgn 1.7.8-2 (embed)
124 - mrtg 2.12.2-1 (embed)
125 - rpm <unknown> (embed)
126 NOTE: pinged anibal since when rpm was fixed
127 - tuxcmd-modules <unfixed> (embed)
128 - zsync <unfixed>
129 - tra <unfixed>
130 - sash <unfixed>
131 - nsis <unfixed>
132 - pyfits 1:2.3.1-1
133 - mseide-msegui <unfixed>
134 NOTE: mseide
135 - mirrordir <unfixed>
136 - poco <unfixed>
137 - klibc <unfixed>
138 - emboss 6.3.1-1 (embed)
139 - ghostscript 8.71~dfsg2-6 (embed)
140 NOTE: ghostscript fixed sometime before this, but this is the version i checked
141 - freeimage <unfixed>
142 - clamav <unfixed> (fork)
143 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
144 - tuxonice-userui <unfixed> (static)
145 - plt-scheme <unfixed>
146 - perl <unfixed>
147 - paraview <unfixed>
148 - velvet 0.7.56~nozlibcopy-1
149 - gcvs <unfixed>
150 - dump <unfixed>
151 - aide <unfixed> (static)
152 - dar <unfixed> (static)
153 - avfs <unfixed>
154 - fpc <unfixed>
155 - winff <unfixed>
156 NOTE: inherited from fpc, see #472304
157 - lazarus <unfixed>
158 NOTE: inherited from fpc, see #472304
159 - erlang <unfixed> (embed)
160 - gamera 3.2.3-1 (embed)
161 - python2.4 <unfixed> (embed; bug #553403)
162 - python2.5 <unfixed> (embed; bug #553403)
163 - texlive-bin 2013.20130522.30620-1 (embed)
164 - sudo <unknown> (embed)
165 NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
166
167 dulwich
168 - hg-git 0.1.0-1 (embed; bug #541996)
169
170 libvigraimpex
171 - hugin <unfixed> (embed; bug #542259)
172 - enblend-enfuse <unfixed> (embed; bug #542258)
173 - gamera 3.2.3-1 (embed)
174
175 libbz2
176 - dpkg 1.15.6 (static)
177 - amd64-libs <unfixed> (static)
178 NOTE: let's call it "static"
179 - dar <unfixed> (static)
180 - dump <unfixed> (static)
181 - unalz 0.64-1 (embed)
182 NOTE: has code, by the maint, to use the system version but links against the internal copy
183 - clamav <unfixed> (embed)
184 NOTE: libclamav/nsis/bzlib*
185 - pristine-tar <unfixable> (modified-embed)
186 NOTE: compression code only, not uncompression
187 - r-base-core-ra 1.2.8 (static)
188 - r-base-core 2.11.1 (static)
189 NOTE: links dynamically in squeeze, statically in lenny
190 - rpm <unfixed> (static)
191 NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
192
193 libyahoo2
194 - centerim <unfixed> (embed; bug #559783)
195
196 libmsn
197 - centerim <unfixed> (embed; bug #559783)
198
199 libgadu
200 - centerim <unfixed> (embed; bug #559783)
201 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
202 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
203 - kdenetwork 4:3.3.2-5 (embed)
204 NOTE: from kdenetwork: kopete
205 - ekg 1:1.8~rc0-1 (embed)
206 - kadu 0.6.0.2-3 (embed; bug #504430)
207 - gadu <itp> (embed)
208
209 xmlrpc (which package is the "origin" of this code?)
210 - drupal <unfixed> (embed)
211 - phpgroupware <unfixed> (embed)
212 - egroupware <unfixed> (embed)
213 - phpwiki <unfixed> (embed)
214 - php4 <removed> (embed)
215 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
216
217 shtool (affects build-time only)
218 - mysql-ocaml <unfixed> (embed)
219 - php4 <removed> (embed)
220 - php5 <unfixed> (embed)
221
222 xulrunner
223 - iceape <unfixed> (embed; bug #561749)
224 - iceweasel 2.0.0.19 (embed)
225 - icedove <unfixed> (embed; bug #561750)
226 - kompozer <unfixed> (embed; bug #532168)
227 - galeon 2.0.2-4 (embed)
228 - epiphany-browser 2.14.3-8 (embed)
229 - conkeror 0.9~git080629-2 (embed)
230 - kazehakase 0.4.2-1 (embed)
231 - wine-gecko-unstable <unfixed> (embed; bug #669672)
232
233 xli
234 - xloadimage <unfixed> (embed)
235
236 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
237 - openmotif <unfixed> (embed)
238
239 libxpm
240 - lesstif2 <unfixed> (embed; bug #575750)
241 - ia32-libs <removed> (embed)
242
243 kerberized apps with BSD origin
244 - krb4 <removed> (embed)
245 - krb5 <unfixed> (embed)
246 - heimdal <unfixed> (embed)
247
248 grip (which pkg is the origin?)
249 - libcdaudio <unfixed>
250 - grip <unfixed>
251 - gnome-vfs <unfixed>
252 TODO: check vfs2 as well
253
254 fudforum
255 [etch] - phpgroupware <unfixed> (embed)
256 NOTE: phpgroupware-fudforum
257 [sarge] - egroupware-fudforum <removed> (embed)
258
259 libbsd
260 - rdate 1:1.2-3 (embed)
261 - atheme-services <unfixed>
262 - libbsd-arc4random-perl <not-affected> (modified-embed)
263 NOTE: code not used, it links dynamically against libbsd instead
264 - isakmpd <unfixed>
265 - bsdgames <unfixed> (embed)
266 - bsd-mailx <unfixed> (embed)
267 - netcat-openbsd <unfixed> (embed; bug #550611)
268 - openssh <unfixed> (embed)
269 - unworkable <unfixed> (embed)
270 - mksh <unfixed> (modified-embed)
271 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
272 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
273 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
274 - ia32-libs <removed> (embed)
275
276 cvs
277 - gcvs <unfixed> (embed)
278 NOTE: see cvsunix/src in tarball
279
280 pcre3
281 - php4 <removed> (embed)
282 - analog 2:5.23-0woody1 (embed)
283 - chicken 3.2.7-2 (embed)
284 NOTE: Might be fixed earlier. Lenny version recorded.
285 - goffice <unfixed> (embed)
286 NOTE: libgoffice-*
287 - hypermail 2.2.0.dfsg-2 (embed)
288 NOTE: Might be fixed earlier. Lenny version recorded.
289 - privoxy 3.0.9-1 (embed)
290 NOTE: Might be fixed earlier. Lenny version recorded.
291 - vfu 4.06-4.1 (embed; bug #450754)
292 - tf5 5.0beta7-1 (embed)
293 - monotone 0.43-1 (embed)
294 NOTE: this only affects versions >= 0.37
295 - glib2.0 2.15.2-1 (embed)
296 - apache2 2.0.53-4 (embed)
297 - exim4 4.10-0.srh20.12 (embed)
298 - yacas <unfixed> (embed)
299 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
300 - gtamsanalyzer.app 0.42-5 (embed)
301 - tin 980117-1 (embed)
302 - kazehakase 0.5.2-1
303 - webkit 1.0.1-1 (embed)
304 - qt4-x11 <unfixed> (embed)
305 NOTE: embedded via webkit copy
306 - erlang <unfixed> (embed)
307 - ssed <unfixed> (embed)
308 - ircd-hybrid <unfixed> (static)
309 - emboss <unfixed> (fork)
310 - cherokee <unfixed> (embed)
311 - oftc-hybrid 1.6.9.dfsg-1 (embed)
312 - ratbox-services <unfixed> (embed)
313 - squeak-vm <unfixed> (embed)
314 - tinymux <unfixed> (embed)
315 - mp4h <unfixed> (embed)
316
317 tiff
318 - wxwindows2.4 2.2.1 (embed)
319 - gamera 3.2.3-1 (embed)
320 - freeimage <unfixed> (embed)
321 - libtk-img <unfixed> (embed; bug #732147)
322 NOTE: there are two copies, one under tiff/ other under libtiff/
323 - gdal <unfixed>
324 - ia32-libs <removed> (embed)
325 - tiff3 <unfixable> (old-version)
326
327 uudeview
328 - libconvert-uulib-perl <unfixed> (embed)
329 - pan <unfixed> (embed)
330
331 sqlite
332 - amarok <unfixed> (embed)
333 - monotone 0.43-1 (embed)
334 - iceweasel <unfixed> (embed)
335 - heimdal <unfixed> (embed; bug #559616)
336
337 util-linux
338 - loop-aes-utils <unfixed> (embed)
339 NOTE: contains code from util-linux' mount in the mount-aes-udeb
340 - ia32-libs <removed> (embed)
341
342 sylpheed
343 - sylpheed-claws <unfixed> (fork)
344
345 phpsysinfo
346 - egroupware <unfixed> (embed)
347 - phpgroupware <unfixed> (embed)
348
349 phpldapadmin
350 [sarge] - egroupware <unfixed> (embed)
351 NOTE: removed from egroupware after sarge
352
353 chmlib
354 - kchmviewer <unknown> (embed)
355
356 ffmpeg (libavcodec/libavformat)
357 - mplayer 1.0~rc2-14 (embed; bug #395252)
358 - kino 1.0.0-1
359 - vlc <not-affected> (Links dynamically since initial release)
360 - smilutils 0.3.0-10
361 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
362 - motion 3.1.19-1
363 - gstreamer0.10-ffmpeg 0.10.3-2
364 - xmovie <removed> (static)
365 TODO: gimp-gap (potentially using ffmpeg code as well)
366 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
367 - audacity 1.3.7-2 (embed; bug #512278)
368 - chromium-browser <unfixed> (fork)
369 - libav <unfixed>
370
371 faad2
372 - mplayer 1.0~rc2-20 (embed)
373 - avifile <unfixed> (embed; bug #538750)
374 - ffmpeg-debian <removed> (embed)
375
376 libmad (MPEG decoding lib)
377 - xine-lib <unfixed> (embed)
378 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
379 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
380
381 libdts
382 - xine-lib <unfixed> (embed)
383
384 flac
385 - xine-lib <unfixed> (embed)
386 - ia32-libs <removed> (embed)
387
388 liba52
389 - a52dec <unfixed> (embed)
390 - xine-lib <unfixed> (embed)
391
392 mpeg2dec (libmpeg2)
393 - xine-lib <unfixed> (embed)
394
395 libmpeg3
396 - squeak-vm <unfixed> (embed)
397
398 libntlm
399 - wget <unfixed> (fork; bug #550436)
400 - curl <unfixed> (fork; bug #550437)
401 - cntlm <unfixed> (fork; bug #550438)
402
403 uw-imap
404 - pine <unfixed> (embed)
405 - alpine <unfixed> (embed)
406
407 imagemagick
408 - graphicsmagick <unfixed> (fork)
409
410 python-urlgrabber
411 - mercurial <unfixed> (embed; bug #531062)
412 - w3af <unfixed> (embed; bug #555372)
413 [experimental] - harvestman <unfixed> (embed; bug #555373)
414
415 beautifulsoup
416 - python-mechanize <unfixed> (embed; bug #555349)
417 - zope2.11 <removed> (embed; bug #555350)
418 - twill <unknown> (embed)
419
420 halibut
421 - nsis <unfixed> (fork)
422
423 libghttp
424 - hotway <unfixed> (embed)
425
426 libsndfile
427 - ardour 1:2.7.1-1 (embed)
428 - ia32-libs <removed> (embed)
429
430 glibmm2.4
431 - ardour 1:2.7.1-1 (embed)
432
433 libgnomecanvasmm2.6
434 - ardour 1:2.7.1-1 (embed)
435
436 libsigc++-2.0
437 - ardour 1:2.7.1-1 (embed)
438 - ia32-libs <removed> (embed)
439
440 soundtouch
441 - ardour 1:2.7.1-1 (embed)
442
443 libmms
444 - xine-lib <unfixed> (embed)
445 - mimms <unfixed> (embed)
446
447 ckeditor
448 - request-tracker4 <unfixed> (embed)
449
450 fckeditor
451 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
452 - moin 1.8.2-2 (embed; bug #452599)
453 - karrigell <removed> (embed; bug #452598)
454 - gforge 4.6.99+svn6225-1 (embed)
455 - request-tracker3.8 <unfixed> (embed)
456 - otrs2 <unfixed> (embed)
457
458 libphp-phpmailer
459 - moodle 2.5.1-1 (embed; bug #507185)
460 - mahara <unfixed> (embed)
461 - symfony <unfixed> (embed; bug #566778)
462 [etch] - phpgroupware <unfixed> (embed)
463 NOTE: phpgroupware-felamimail is only in etch
464 - egroupware <unfixed> (embed; bug #504283)
465 - glpi 0.80.7-2
466
467 giflib
468 - wine <unfixed> (fork; bug #466181)
469 NOTE: the embedded code is a fork of ungif, which is an older version of giflib
470
471 bennu (not packaged in Debian, http://bennu.sourceforge.net)
472 - moodle <unfixed> (embed)
473
474 smarty
475 - gallery2 2.2.5-2 (embed; bug #471160)
476 - mahara 0.9.2-2 (embed; bug #471201)
477 - gosa 2.4beta1-1 (embed; bug #471200)
478
479 TinyMCE
480 - wordpress 2.5.1-3 (embed; bug #478257)
481 - moodle <unfixed> (embed; bug #507185)
482 - knowledgeroot <unfixed> (embed)
483 - joomla <itp> (bug #326398)
484 - mahara 1.2.6-1 (embed; #597752)
485 - glpi 0.80.7-2
486
487 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
488 - scite <unfixed> (embed)
489 - qscintilla <unfixed> (embed)
490 - qscintilla2 <unfixed> (embed)
491 - geany <unfixed> (fork)
492 - anjuta <unfixed> (embed)
493 - sdlbasic <unfixed> (embed)
494
495 libphp-adodb
496 - moodle 2.5.1-1 (embed; bug #507185)
497 NOTE: also AdoDB-XML Schema
498 - gallery2 <unfixed> (embed)
499 - phppgadmin <unfixed> (embed)
500 - egroupware <unfixed> (embed)
501 - phpwiki <unfixed> (embed)
502 - torrentflux 2.0beta1-2 (embed)
503 - ipplan <unfixed> (embed)
504 - typo3-src <unfixed> (embed)
505 - cacti 0.8.6d-1 (embed)
506 [sarge] - cacti <unfixed> (embed)
507 NOTE: dependency exists, but internal version is used
508 - gforge 4.7~rc2-6 (embed)
509 - mahara <unfixed> (embed)
510
511 gzip
512 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
513 - klibc <unfixed> (embed)
514 NOTE: based on linux-kernel gzip code
515 - busybox <unfixed> (embed)
516 - pristine-tar <unfixed> (modified-embed)
517 NOTE: compression code only, not uncompression
518 - ncompress <unfixed> (old-version)
519
520 neon
521 - cadaver 0.22.3+debian-1 (embed; bug #188381)
522 - gnome-vfs2 <unfixed> (embed; bug #395874)
523 [etch] - litmus <unfixed> (embed; #395875)
524 - litmus <removed> (embed; #395875)
525 [sarge] - screem <unfixed> (embed)
526 - sitecopy 1:0.16.0-1 (embed; bug #395876)
527 [etch] - tla <unfixed> (embed; bug #395877)
528 [sarge] - tla <unfixed> (embed; bug #395877)
529
530 libmodplug
531 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
532
533 libvncserver
534 - vino <unfixed> (embed)
535
536 putty
537 - filezilla <unfixed> (embed)
538
539 tinyxml
540 - filezilla <unfixed>
541 - crystalspace <unfixed> (embed)
542 - libwfut <unfixed> (embed)
543 - rarian <unfixed> (embed)
544 - bulletml <unfixed> (embed)
545 - pokerth <unfixed> (embed)
546 - qutecom <unfixed> (embed)
547 - sofa-framework <unfixed> (embed)
548 - yate <unfixed> (embed)
549 - antigrav <unfixed> (embed)
550 - balder2d <unfixed> (embed)
551 - cal3d <unfixed> (embed)
552 - criticalmass <unfixed> (embed)
553 - ember <unfixed> (embed)
554 - epiphany <unfixed> (embed)
555 - gambit <unfixed> (embed)
556 - noiz2sa <unfixed> (embed)
557 - ogre <unfixed> (embed)
558 - opencity <unfixed> (embed)
559 - openmovieeditor <unfixed> (embed)
560 - pouetchess <unfixed> (embed)
561 - tecnoballz <unfixed> (embed)
562 - trigger-rally <unfixed> (embed)
563 - xmoto <unfixed> (embed)
564 - mapnik <unknown> (embed)
565 NOTE: uses a different XML parser by default
566 - rrootage 0.23a-6 <embed>
567 NOTE: links to libbulltetml
568 - boson <unknown> (embed)
569 NOTE: the embedded code is unused
570 - cppcheck <unfixed> (embed)
571 NOTE: introduced in 1.47, will use system's version in 1.48
572 [squeeze] - cppcheck <not-affected>
573 - xye <unfixed> (embed; bug #758429)
574 NOTE: https://sourceforge.net/p/xye/bugs/7/
575
576 gv
577 - evince <unfixed> (embed)
578 NOTE: ps/ tree from gv 3.5.8
579 NOTE: evince-gtk is affected (a component of evince source package)
580
581 libXbae
582 - paw <unfixed> (embed)
583
584 libgtkhtml
585 - claws-mail-extra-plugins <unfixed> (fork)
586
587 libXaw
588 - paw <unfixed> (embed)
589 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
590 - ia32-libs <removed> (embed)
591
592 libgd2
593 - graphviz 2.16-1 (embed)
594 NOTE: lib/gd seems to be 2.0.33
595 - wml 2.0.11ds2-1 (embed)
596 - libwmf <unfixed> (embed)
597 NOTE: derived from gd 1.6.3, but only used to write images
598 - plt-scheme <unfixed> (embed; bug #601525)
599 - texlive-bin 2013.20130522.30620-1 (embed)
600
601 rar
602 - unrar-nonfree <unfixed> (embed)
603
604 unrar-free (maybe this code is derived from the original rar, too?)
605 - clamav <unfixed> (embed)
606 NOTE: seems to be disabled in default config
607
608 mplayer (DirectMedia Object loader)
609 - xine-lib <unfixed> (embed)
610 NOTE: src/libw32dll/
611 - vlc <unfixed> (embed)
612 NOTE: modules/codec/dmo/
613 - mplayer 1.0~rc2-20 (embed)
614
615 libwpd (WordPerfect converter)
616 - openoffice.org <unfixed> (embed)
617
618 fsplib (http://sourceforge.net/projects/fsp/)
619 - gftp <unfixed> (embed)
620 NOTE: lib/fsplib version 0.3
621
622 sprng
623 - tree-puzzle <unfixed> (embed)
624
625 librpcsecgss
626 - krb5 <unfixed> (embed)
627
628 jasper
629 - ghostscript 8.64~dfsg-2 (embed)
630
631 libiris
632 - psi <unfixed> (embed)
633 - kdenetwork <unfixed> (embed)
634 NOTE: kopete embeds libiris but links dynamically to libidn
635 - kdegames <unfixed> (embed)
636 NOTE: ksirk/kde4
637
638 libidn
639 - monotone 0.43-1 (embed)
640 - psi <unfixed> (embed)
641 NOTE: psi embeds libiris which embeds libidn
642 - kdegames <unfixed> (embed)
643 NOTE: kdegames/kde4 embeds libiris which embeds libidn
644 - ia32-libs <removed> (embed)
645
646 lua5.1
647 - monotone 0.43-1 (embed)
648 - nmap 5.00-1 (embed; bug #527997)
649 [lenny] - nmap <unfixed> (embed; bug #527997)
650 - ocropus <unfixed> (embed)
651 - enigma <unfixed> (embed)
652 NOTE: requires lua built with C++
653 - freeciv 2.4.1-1 (embed)
654 NOTE: from 2.4.1-1 on freeciv uses system library instead
655 - spring <unfixed> (embed)
656
657 libbotan
658 - monotone 0.43-1 (embed)
659
660 NetXX
661 - monotone 0.43-1 (embed)
662
663 libgc
664 - mono <unfixed> (embed)
665
666 lzma
667 - p7zip <unfixed> (embed)
668 - xz-utils <unfixed> (fork)
669 - r-base <unfixed> (embed)
670 NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
671
672 lzo2
673 - ia32-libs <removed> (embed)
674 - busybox <unfixed> (embed)
675 - grub2 <unfixed> (embed)
676 - syslinux <unfixed> (modified-embed)
677 - valgrind <unfixed> (modified-embed)
678 - xen <unfixed> (embed)
679 - remmina <unfixed> (embed)
680 - blender <unfixed> (embed)
681 - x11vnc <unfixed> (embed)
682 - italc <unfixed> (embed)
683 - dump <unfixed> (embed)
684 - krfb <unfixed> (embed)
685 - nfdump <unfixed> (embed)
686 - kino <unfixed> (embed)
687 - samhain <unfixed> (embed)
688 - u-boot (modified-embed)
689 - icecc <unfixed> (embed)
690 - bb <unfixed> (embed)
691 - mednafen 0.8.D.3-4 (embed)
692 - ht <unfixed> (embed)
693 - n2n <unfixed> (embed)
694 NOTE: still not sure if all those embedded copies are actually used
695 NOTE: some packages actually use minilzo, which is not built by src:lzo2 and is only available as source in liblzo2-dev
696
697 lz4
698 - eet <unfixed> (embed)
699 - efl <unfixed> (embed)
700 - grub2 <unfixed> (embed)
701 - gtkwave <unfixed> (embed)
702 - iceweasel <unfixed> (embed)
703 - kfreebsd-9 <unfixed> (embed)
704 - kfreebsd-10 <unfixed> (embed)
705 - php-horde-lz4 <unfixed> (embed)
706 - pytables <unfixed> (embed)
707 - zfsutils <unfixed> (embed)
708
709 yassl
710 - mysql-5.1 <unfixed> (embed)
711 - mysql-5.5 <unfixed> (embed; bug #627207)
712
713 pax code
714 - tar <unfixed> (embed)
715 - cpio <unfixed> (embed)
716
717 t1lib
718 - tetex-bin 2.0.2-1 (embed)
719 - texlive-bin 2013.20130522.30620-1 (embed; bug #667912)
720 NOTE: used only in xdivk (a dvi file viewer that the maintainer refuses to drop)
721 - grace 5.1.14-2 (embed)
722 - evince <unfixed> (embed)
723 NOTE: at least parseafm code, maybe more?
724 - vftool <unfixed> (embed)
725 NOTE: just parseafm code it seems
726
727 guichan
728 - boswars <unfixed> (embed)
729 NOTE: maintainer notified us, working on it
730
731 tolua
732 - boswars <unfixed> (embed)
733 NOTE: maintainer notified us, working on it
734 NOTE: actually tolua++
735 - ocropus <unfixed> (embed)
736 NOTE: actually tolua++
737 - freeciv <unfixed> (embed)
738 NOTE: actually tolua++
739 - enigma <unfixed> (embed)
740
741 asio-dev
742 - luxrender <removed> (embed)
743
744 xine-lib
745 - vlc <unfixed> (embed)
746 NOTE: only parts included in modules/access/rtsp
747
748 netpbm
749 - tcl8.3 <unfixed> (embed)
750 - tcl8.4 <unfixed> (embed)
751 - tcl8.5 <unfixed> (embed)
752 NOTE: generic/tkImgGIF.c
753
754 tk8.5
755 - tk8.0 <removed> (old-version)
756 - tk8.3 <unfixed> (old-version)
757 - tk8.4 <unfixed> (old-version)
758 - perl-tk <unfixable> (fork)
759
760 samba
761 - mc 2:4.6.2~git20080311-1 (embed)
762 NOTE: maintainer is aware of this, currently searching a solution
763
764 plib1.8.4c2
765 - boson <unfixed> (fork)
766 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
767
768 fribidi
769 - quesoglc 0.7.2-2 (embed)
770
771 glew
772 - quesoglc <unfixed> (embed; bug #489341)
773 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
774 - trigger 0.5.2.1-2 (embed)
775 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
776 - trigger-rally 0.5.2.1-2 (embed)
777 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
778 - chromium-browser 5.0.375.70~r48679-2
779
780 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
781 - transcend <unfixed> (embed)
782 - cultivation <unfixed> (embed)
783 - passage <unfixed> (embed)
784 - gravitation <unfixed> (embed)
785
786 tar
787 - libarchive <unfixed> (embed)
788 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
789
790 cpio
791 - libarchive <unfixed> (embed)
792 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
793
794 kde4libs
795 - kdelibs <unfixable> (old-version)
796
797 webkit
798 - qt4-x11 <unfixed> (embed; bug #479851)
799 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
800 - kde4libs <unfixable> (fork)
801 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
802 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
803 - chromium-browser <unfixed> (fork)
804
805 ftgl
806 - blender 2.46+dfsg-1 (embed)
807 - vtk <unfixed> (embed)
808 - paraview <unfixed> (embed)
809 NOTE: as part of its copy of vtk
810 - tulip <unfixed> (embed)
811 NOTE: depends on -dev but string found on binary
812 - root-system <unknown> (embed)
813 NOTE: depends on -dev package; not confirmed at source
814 - rgl <unknown> (embed)
815 NOTE: not sure if it is built
816 - mysql-gui-tools <unknown> (embed)
817 NOTE: not sure if it is built
818 - k3d <unfixed> (embed)
819 - extremetuxracer <unknown> (embed)
820 NOTE: not sure if it is built
821 - critterding <unknown> (embed)
822 - lightspeed <unfixed>
823 NOTE: depends on -dev but string found on binary
824
825 wv
826 - abiword <unfixed>
827
828 wv2
829 - koffice <unfixed>
830 - calligra <unfixed>
831
832 qemu
833 - kvm <removed> (embed; bug #543159)
834 - qemu-kvm <unfixed> (embed; bug #560853)
835 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
836 - xen-3 3.4.2-2 (embed; bug #560856)
837 - xen-unstable <unfixed> (embed; bug #560856)
838
839 vgabios
840 - kvm <removed> (embed; bug #489442)
841 - qemu-kvm <unfixed> (embed)
842
843 bochs
844 - kvm <removed> (embed; bug #489442)
845 - qemu-kvm <unfixed> (embed)
846
847 speex
848 - vorbis-tools <unfixed> (embed)
849 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
850 - gst-plugins-good0.10 <unfixed> (embed)
851 - xine-lib <unfixed> (embed)
852 - libfishsound <unfixed> (embed)
853 - libannodex <removed> (embed)
854 - opal 3.4.2~dfsg-2 (embed)
855 - mumble 1.2.0~beta1-1 (embed)
856 - vlc <unfixed> (embed)
857 - xmms-speex <unfixed> (embed)
858 - libsdl-sound1.2 <unfixed> (embed)
859 - sweep <unfixed> (embed)
860
861 readline6
862 - magic <itp> (old-version)
863 - gdb 5.2.cvs20020401-1
864
865 opcode
866 - ode <unfixed> (embed)
867 NOTE: opcode is not a package in debian, it is just embedded
868 NOTE: http://www.codercorner.com/Opcode.htm
869
870 gimpact
871 - ode <unfixed> (embed)
872 NOTE: gimpact is not a package in debian, it is just embedded
873 NOTE: http://gimpact.sf.net
874
875 mochikit
876 - mahara <unfixed> (embed)
877 NOTE: they require extra patches, still unmerged upstream
878 - ntop <unfixed> (embed)
879 - coherence 0.6.2-1 (embed)
880 - paste <unfixed> (embed)
881 - turbogears <unfixed> (embed)
882 - plone3 <removed> (embed)
883 - xulrunner <unfixed> (embed)
884 - libjifty-plugin-chart-perl <unfixed> (embed)
885 - sabnzbdplus <unfixed> (embed)
886 - tgmochikit <unfixed> (embed)
887
888 prototypejs
889 - netbeans-ide 6.0.1+dfsg-2 (embed)
890 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
891 - webcit <unfixed> (embed; bug #555219)
892 - asterisk 1:1.6.2.0~rc3-1 (embed)
893 - libjson-ruby 1.1.4-1 (embed; bug #555224)
894 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
895 - horde3 <unfixed> (embed)
896 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
897 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
898 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
899 - ebug-http <unfixed> (embed; bug #555236)
900 - libaws 2.7-1 (embed; bug #555222)
901 - phpgedview <removed> (embed)
902 - poker-network 1.7.6-1 (embed; bug #555238)
903 - rails 2.1.0-6 (embed)
904 - wordpress 2.5.0-2 (embed; bug #555243)
905 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
906 TODO: search through all of the other zope packages
907 - ampache 3.4.1-2 (embed)
908 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
909 - hobix 0.5~svn20070319-4 (embed; bug #555247)
910 - zabbix 1.6.6-4 (embed; bug #555250)
911 - chora2 2.1.1+debian0-1 (embed; bug #555253)
912 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
913 - jscropperui 1.2.1-1 (embed; bug #555257)
914 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
915 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
916 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
917 - activeldap 1.2.1-1 (embed)
918 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
919 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
920 - otrs2 2.3.4-6 (embed; bug #555267)
921 - webcalendar 1.2~b1-2 (embed; bug #555269)
922 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
923 - jifty 0.90519-1 (embed; bug #555271)
924 - jquery 1.4-1 (embed; bug #555272)
925 - passenger 2.2.5debian1-1 (embed; bug #555273)
926 - plone3 <removed> (embed; bug #555275)
927 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
928 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
929 - xulrunner <unfixed> (embed)
930 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
931 - jclicmoodle <unfixed> (embed)
932 - git-cola <unfixed> (embed)
933
934 gdb
935 - insight <unfixed> (embed)
936
937 e2fsprogs
938 - ldiskfsprogs <unfixable> (fork)
939 - ia32-libs <removed> (embed)
940
941 quazip (not packaged in Debian)
942 - qcake <unfixed> (embed)
943 NOTE: starting with upstream version 0.6.4
944
945 exo
946 - pcmanfm <unfixed> (embed; bug #499677)
947 NOTE: slightly modified source code
948
949 xfce4-taskmanager
950 - lxtask <unfixed> (embed)
951 NOTE: old fork, maybe outdated
952
953 isync
954 - postler <unfixed> (embed; bug #628798)
955
956 java
957 - openjdk-6 <unfixed>
958 - sun-java5 <unfixed>
959 - sun-java6 <unfixed>
960
961 libphp-snoopy
962 - ampache 3.4.1-2 (embed; bug #504169)
963 - gforge 4.6.99+svn6094-2 (embed)
964 - mahara 1.0.5-2 (embed; bug #504170)
965 - pixelpost 1.7.1-5 (embed; bug #504171)
966 - mediamate 0.9.3.6-5 (embed; bug #504172)
967 - opendb <removed> (embed; bug #504173)
968 [etch] - opendb <unfixed> (embed; bug #504173)
969 - wordpress 2.5.1-9 (embed; bug #443948)
970 [etch] - phpgroupware <unfixed> (embed)
971 NOTE: phpgroupware-felamimail
972 - magpierss 0.72-3 (embed; bug #431089)
973
974 jquery
975 - jsonbot <unfixed> (embed; bug #625524)
976 - zekr <unfixed> (embed)
977 - wordpress <unknown> (embed)
978 - yocto-reader <unfixed> (embed)
979 - textpattern <unfixed> (embed)
980 - genshi 0.5.1-1 (embed)
981 NOTE: compressed file under examples/ dir
982 - prewikka <unfixed> (embed)
983 - libramaze-ruby <unfixed> (embed)
984 - drupal6 <unfixed> (embed)
985 - b2evolution <unfixed> (embed)
986 - wesnoth <unfixed> (embed)
987 - gammu 1.28.95-1 (embed)
988 - trac <unfixed> (embed; bug #645339)
989 - request-tracker4 <unfixed> (embed; bug #693821)
990
991 jquery-goodies
992 - horizon <unfixed> (embed)
993 NOTE: jquery.cookie.js, jquery.table-sorter.js, jquery-ui.min.js
994 - request-tracker4 <unfixed> (embed; bug #693821)
995 NOTE: libjs-jquery-tablesorter
996
997 jqueryui
998 - request-tracker4 <unfixed> (embed; bug #693821)
999
1000 tablesorter (jquery plugin, not packaged yet)
1001 - wesnoth <unfixed> (embed)
1002
1003 kses
1004 - wordpress <unfixed> (embed; bug #504242)
1005 NOTE: their copy has all methods renamed to wp_<foo>
1006 NOTE: kses isn't in Debian, RFP: #504240
1007 - egroupware <unfixed> (embed)
1008
1009 magpierss
1010 - wordpress <unfixed> (embed; bug #504242)
1011
1012 php-gettext
1013 - wordpress 2.8.4-1 (embed; bug #504242)
1014 - docbookwiki <unfixed> (embed)
1015 - knowledgeroot 0.9.9.5-1
1016 NOTE: non-free
1017
1018 libphp-ixr (name may change, it is the Incutio XML-RPC)
1019 - wordpress <unfixed> (embed; bug #504242)
1020 NOTE: libphp-ixr isn't in Debian, RFP: #504236
1021 - dokuwiki <unfixed> (embed)
1022 - textpattern <unfixed> (embed)
1023
1024 libphp-cas
1025 - glpi 0.80.7-2 (embed)
1026 - moodle <unfixed> (embed; bug #505984)
1027
1028 scriptaculous (prototype.js is among the embeds in the following)
1029 - glpi <unfixed> (embed)
1030 - libaws <unfixed> (embed; bug #555222)
1031 - op-panel <unfixed> (embed)
1032 - symfony <unfixed> (embed)
1033 NOTE: maintainer says there are extra incompatible changes required
1034 - pixelpost 1.7.1-6 (embed)
1035 - webhelpers <unfixed> (embed)
1036 - qwik <removed> (embed; bug #555241)
1037 - smokeping <unfixed> (embed)
1038 - turba2 <unfixed> (embed)
1039 - typo3-src 4.2.3-1 (embed)
1040 - request-tracker3.6 <unfixed> (embed)
1041 - request-tracker3.8 <unfixed> (embed)
1042 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
1043 - wordpress 2.5.0-2 (embed)
1044 - libhtml-prototype-perl 1.48-3 (embed)
1045
1046 libmarkdown-php
1047 - pixelpost 1.7.1-6 (embed)
1048 NOTE: the markdown in Moodle is not the Markdown from this package
1049
1050 php-openid
1051 - wordpress-openid 3.3.2-1 (embed)
1052
1053 geshi
1054 - dokuwiki 0.0.20080505-3.1 (embed)
1055 - pgfouine 1.0-1.1 (embed)
1056 - websvn 2.1.0-1 (embed)
1057
1058 webcalendar
1059 - gforge 4.7~rc2-6 (embed; bug #504758)
1060
1061 libical
1062 - kdepim <unknown> (fork)
1063 NOTE: fixed at some point during 4.0
1064 - kdepimlibs 4.2.0-1 (fork)
1065 - claws-mail-extra-plugins <unfixed> (fork)
1066
1067 harfbuzz
1068 - qt4-x11 <unfixed> (embed)
1069 - pango1.0 1.36.0-1 (embed)
1070 - fontmatrix <unfixed> (embed)
1071
1072 libzip
1073 - php5 <unfixable> (modified-embed)
1074 - odt2txt <unfixed> (embed; bug #523808)
1075
1076 json.php (not packaged; should be replaced with php's built-in functions)
1077 - yui <unfixed>
1078 - gallery2 <unfixed>
1079 - dokuwiki <unfixed>
1080 - typo3-src <unfixed>
1081
1082 php-fpdf
1083 - tcpdf <itp> (fork)
1084 - phpwiki <unfixed>
1085 - egroupware <unfixed>
1086 - ldap-account-manager <unfixed> (fork)
1087
1088 tcpdf (itp: #495985)
1089 - moodle <unfixed>
1090 - phpmyadmin <unfixed>
1091 - collabtive <unfixed>
1092
1093 typo3
1094 - moodle <unfixed>
1095
1096 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1097 - moodle <unfixed>
1098 - gosa <unfixed>
1099
1100 php-ole (itp: #487558)
1101 - moodle <unfixed>
1102
1103 pieforms (http://www.catalyst.net.nz)
1104 - mahara <unfixed>
1105
1106 savant2 (http://phpsavant.com)
1107 - egroupware <unfixed>
1108
1109 rssparser (http://nwow.org)
1110 - egroupware <unfixed>
1111 - phpgroupware <unfixed>
1112
1113 lcms
1114 - openjdk-6 <unfixed> (fork)
1115 - gimp 2.4.0~rc2-2
1116 - ia32-libs <removed> (embed)
1117
1118 libphp-phplayersmenu
1119 - diogenes <unfixed>
1120 - phpldapadmin <unfixed>
1121
1122 libphp-pclzip
1123 - docvert <unfixed>
1124 - moodle 2.5.1-1
1125 - egroupware <unfixed>
1126
1127 libphp-simplepie
1128 - dokuwiki <unfixed>
1129 - wordpress <unfixed>
1130
1131 libphp-jpgraph
1132 - egroupware <unfixed>
1133
1134 libpng
1135 - doxygen 1.5.6-2 (embed)
1136 NOTE: Might be fixed earlier. Lenny version recorded.
1137 - gdal 1.5.2-3 (embed)
1138 NOTE: Might be fixed earlier. Lenny version recorded.
1139 - iceweasel <not-affected> (uses xulrunner)
1140 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1141 - iceape 1.0.13~pre080614i-0etch1 (embed)
1142 - libfltk1.1 1.1.9-6 (embed)
1143 NOTE: Might be fixed earlier. Lenny version recorded.
1144 - libtk-img <unfixed> (embed; #732147)
1145 - htmldoc 1.8.27-3 (embed)
1146 NOTE: Might be fixed earlier. Lenny version recorded.
1147 - xulrunner 1.9.0.13-1 (embed)
1148 [lenny] - xulrunner 1.9.0.11-0lenny1
1149 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1150 - gamera 3.2.3-1 (embed)
1151 - freeimage <unfixed> (embed)
1152 - syslinux-common <unfixable> (embed)
1153 - tuxonice-userui <unfixed> (static)
1154 - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1155 NOTE: Might be fixed earlier. Lenny version recorded.
1156 - vice 1.22.dfsg1-0.1 (embed)
1157 NOTE: Might be fixed earlier. Lenny version recorded.
1158 - visualboyadvance 1.8.0-4 (embed)
1159 NOTE: Might be fixed earlier. Lenny version recorded.
1160 - ia32-libs <removed> (embed)
1161
1162 irssi
1163 - silc-client <unfixed> (embed)
1164 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1165
1166 extc
1167 - mtasc <unfixed> (embed)
1168 - haxe <unfixed> (embed)
1169
1170 swflib
1171 - mtasc <unfixed> (embed)
1172 - haxe <unfixed> (embed)
1173
1174 libitext-java
1175 - bouncycastle 2.1.4-1 (embed)
1176
1177 python-ply
1178 - pyke <unfixed> (embed; bug #555363)
1179 - pywbem 0.7.0-4 (embed; bug #555364)
1180 - sepolgen <unfixed> (embed; bug #555365)
1181 - zope-textindexng3 <unknown> (embed)
1182 - iceweasel <not-affected> (uses xulrunner)
1183 - xulrunner <unknown> (embed)
1184 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1185
1186 libdumbnet (libdnet upstream)
1187 - nmap <unfixed> (fork)
1188
1189 gcc-4.4
1190 - gcc-mingw32 <unfixed> (embed)
1191
1192 camlimages
1193 - advi <unfixed> (static; bug #550441)
1194
1195 memcached
1196 - memcachedb <unfixed> (embed)
1197
1198 yajl
1199 - argyll <unfixed> (embed; bug #544223)
1200 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1201 - lnav <unfixed> (embed; bug #724693)
1202
1203 nusoap
1204 - gforge 4.8.2-1 (embed)
1205 - ampache <unfixed> (embed)
1206 - poker-network <unfixed> (embed)
1207 - phpwiki <unfixed> (embed)
1208 - gallery2 <unfixed> (embed)
1209 - typo3-src <unfixed> (embed)
1210 - phpgacl 3.3.7-7 (embed)
1211 - mantis 1.1.8+dfsg-1 (embed)
1212
1213 libept
1214 - adept <unfixed> (embed; bug #540649)
1215
1216 libvorbis
1217 - iceweasel <not-affected> (uses xulrunner)
1218 - xulrunner <unfixed> (embed; bug #540959)
1219 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1220 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1221 - iceape <unfixed> (embed)
1222 [etch] - iceape <not-affected> (introduced in 2.0)
1223 [lenny] - iceape <not-affected> (introduced in 2.0)
1224 - ia32-libs <removed> (embed)
1225 - libvorbisidec <unfixed> (modified-embed)
1226
1227 cairo
1228 - iceweasel <not-affected> (uses xulrunner)
1229 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1230
1231 liboggz
1232 - iceweasel <not-affected> (uses xulrunner)
1233 - xulrunner <unfixed> (embed; bug #540959)
1234 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1235 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1236 - iceape <unfixed> (embed)
1237 [etch] - iceape <not-affected> (introduced in 2.0)
1238 [lenny] - iceape <not-affected> (introduced in 2.0)
1239
1240 liboggplay
1241 - iceweasel <not-affected> (uses xulrunner)
1242 - xulrunner <unfixed> (embed; bug #540959)
1243 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1244 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1245 - iceape <unfixed> (embed)
1246 [etch] - iceape <not-affected> (introduced in 2.0)
1247 [lenny] - iceape <not-affected> (introduced in 2.0)
1248
1249 php-net-dnsbl
1250 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1251
1252 php-onyx-rss
1253 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1254
1255 php-text-wiki
1256 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1257
1258 php-xml-rpc
1259 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1260
1261 polarssl (does not have a shared library)
1262 - pdkim <itp> (embed; bug #543150)
1263 - xyssl <unfixed> (old-version)
1264
1265 pidgin (libpurple)
1266 - gaim <removed> (old-version)
1267 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1268 - wengophone <unfixed> (embed; bug #601425)
1269
1270 icu
1271 - webkit 1.0.1-1 (embed; bug #547214)
1272 - texlive-bin 2013.20130522.30620-1 (fork)
1273 NOTE: texlive upstream working with icu upstream to merge their changes
1274 - chromium-browser 5.0.375.29~r46008-3
1275
1276 cyrus-imapd-2.2
1277 - kolab-cyrus-imapd <unfixed> (fork)
1278 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1279
1280 python-cxx-dev
1281 - freecad 0.9.2646.3-1 (embed; bug #547936)
1282
1283 zipios++
1284 - freecad 0.9.2646.3-1 (embed; bug #547941)
1285 - enigma 0.92.3-3 (embed)
1286 NOTE: likely fixed earlier, marking etch's version as fixed
1287
1288 linux-2.6
1289 - kvm <removed> (embed; bug #549973) [./kernel/*]
1290 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1291 - kernel-source-2.6.8 <removed> (old-version)
1292 - kernel-source-2.4.27 <removed> (old-version)
1293 - kernel-source-2.4.24 <removed> (old-version)
1294 - kernel-source-2.2.25 <removed> (old-version)
1295 - kernel-source-2.2.20 <removed> (old-version)
1296
1297 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1298 - kvm <removed> (embed) [./libfdt/*]
1299 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1300
1301 qweb (not packaged)
1302 - ajaxterm <unfixed>
1303
1304 opensaml2
1305 - opensaml <removed> (old-version)
1306
1307 shibboleth-sp2
1308 - shibboleth-sp <removed> (old-version)
1309
1310 tuxonice-userui
1311 - suspend2-userui <removed> (old-version)
1312
1313 expat
1314 - w3c-libwww <removed> (embed; bug #551941)
1315 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1316 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1317 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1318 - python2.4 <unfixable> (embed; bug #553403)
1319 - python2.6 2.6.6-4 (embed)
1320 - python2.7 2.7-6 (embed)
1321 - mcabber 0.10.0-1 (low; bug #601053)
1322 - python-4suite <unfixed> (embed; bug #516935)
1323 - wxwindows2.4 <removed> (embed)
1324 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1325 - wxwidgets2.8 2.8.10.1-2 (embed)
1326 - albert <unfixed> (embed; bug #600974)
1327 - celementtree 1.0.5-8 (embed)
1328 NOTE: Maybe that was fixed even earlier
1329 - centerim <unfixed> (embed; bug #559783)
1330 - audacity 1.3.2-1 (embed)
1331 - matanza <unfixed> (embed)
1332 - tdom 0.8.3~20080525-1 (embed)
1333 - udunits 2.1.8-4 (embed)
1334 - apr-util 1.2 (embed)
1335 - ayttm <unfxed> (embed; bug #561006)
1336 - cableswig <unfixed> (embed)
1337 - cadaver <unfixed> (embed)
1338 - cmake 2.6.0-6 (embed)
1339 - coin3 <unfixed> (embed)
1340 - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1341 NOTE: Might be fixed earlier. Lenny version recorded.
1342 - dasher 4.7.3-1 (embed)
1343 NOTE: Might be fixed earlier. Lenny version recorded.
1344 - emboss 6.3.1-1 (embed)
1345 - gdcm 2.0.14-2 (embed)
1346 - ghostscript 8.71~dfsg-2 (embed)
1347 - grmonitor <removed> (embed)
1348 - iceape <unfixed> (embed)
1349 - insighttoolkit 3.16.0-1 (embed)
1350 NOTE: insighttoolkit might've been fixed earlier
1351 - jabber 1.4.3-3.4 (embed)
1352 NOTE: Might be fixed earlier. Lenny version recorded.
1353 - libparagui1.1 1.0.2-1 (embed)
1354 - libspiff1 0.8.3-1 (embed)
1355 NOTE: Might be fixed earlier. Lenny version recorded.
1356 - paraview 3.6.2-1 (embed)
1357 - poco 1.3.6p1-1 (embed)
1358 - scorched3d 41.3dfsg-1+b1 (embed)
1359 NOTE: Might be fixed earlier. Lenny version recorded.
1360 - simgear <unfixed> (embed)
1361 - sitecopy 1:0.16.0-1
1362 - smart <unfixed> (embed)
1363 NOTE: smart embeds celementree, and it includes expat
1364 - swish-e <not-affected> (Linked against libxml, which is used instead)
1365 - tla 1.3.5+dfsg-15 (embed)
1366 - vtk 4.1.20030227-1 (embed)
1367 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1368 - xmlrpc-c <unfixed> (embed)
1369 - iceweasel <unfixed> (embed)
1370 - kompozer <unfixed> (embed)
1371 - vxl 1.13.0-2 (embed)
1372 - xulrunner <unfixed> (embed)
1373 - xmame 0.106-2.1 (embed)
1374 NOTE: Might be fixed earlier. Lenny version recorded.
1375 - apache2 2.2 (embed)
1376 - texlive-bin <not-affected> (Embedded code not compiled in)
1377 - vnc4 <unfixed> (embed)
1378 - xotcl 1.6.6-1 (embed)
1379 - chromium-browser 5.0.375.29~r46008-3
1380 - ia32-libs <removed> (embed)
1381
1382 xerces-c
1383 - xerces-c2 <unfixed> (old-version)
1384 - xerces27 <removed> (old-version)
1385
1386 md5 (RSA's version; not the gnu version provided by coreutils)
1387 - w3c-libwww <removed> (embed; bug #551942)
1388 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1389
1390 libparagui1.1
1391 - asc <unfixable> (fork)
1392
1393 enet
1394 - sauerbraten <unfixed> (embed; #497194)
1395
1396 eglibc
1397 - glibc <removed> (old-version)
1398 - mksh <unfixable> (static)
1399 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1400
1401 galib
1402 - gamera 3.2.3-1 (embed)
1403
1404 configobj
1405 - bzr <unfixed> (embed; bug #555336)
1406 - elisa <unfixed> (embed; bug #555337)
1407 - gaupol <unfixed> (embed; bug #555338)
1408 - ipython <unfixed> (embed; bug #555339)
1409 - pida <unfixed> (embed; bug #555340)
1410 - psychopy <unfixed> (embed; bug #555341)
1411 - rest2web <unfixed> (embed; bug #555342)
1412 - auth2db <unknown> (embed)
1413 - dynagen <unknown> (embed)
1414 - iceweasel <unknown> (embed)
1415 - sabnzbdplus <unknown> (embed)
1416 - xulrunner <unknown> (embed)
1417 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1418
1419 python-clientform
1420 - bibus <unfixed> (embed; bug #555332)
1421 - zope2.10 <unfixed> (embed; bug #555333)
1422 - zope2.11 <removed> (embed; bug #555334)
1423 - python-mechanize <unknown> (embed)
1424 - twill <unknown> (embed)
1425
1426 python-mechanize
1427 - zope2.10 <unfixed> (embed; bug #555337)
1428 - zope2.11 <removed> (embed; bug #555338)
1429 - twill <unknown> (embed; bug #555339)
1430
1431 pexpect
1432 - duplicity 0.6.06-1 (embed; bug #555361)
1433 - hplip <unfixed> (embed; bug #555362)
1434 - smart <unfixed> (embed; bug #555363)
1435
1436 pyparsing
1437 - bauble <unfixed> (embed; bug #555366)
1438 - boa-constructor 0.6.1-8 (embed; bug #555367)
1439 - calibre <unfixed> (embed; bug #555368)
1440 - matplotlib <unfixed> (embed; bug #531024)
1441 - zhpy 1.7.3.1-1 (embed; bug #555370)
1442 - polybori <unknown> (embed)
1443 - python-whoosh <unknown> (embed)
1444 - twill <unknown> (embed)
1445 - zope-textindexng3 <unknown> (embed)
1446
1447 python-pysqlite2
1448 - python2.4 <unfixed> (embed; bug #553403)
1449 - python2.5 <unfixed> (embed; bug #553403)
1450
1451 celementtree
1452 - python2.5 <unfixed> (embed)
1453 - smart <unfixed> (embed)
1454
1455 elementtree
1456 - python2.5 <unfixed> (embed)
1457 - python2.6 <unfixed> (embed)
1458 - bzr <unfixed> (embed; bug #555343)
1459 - gedit 2.28.2-1 (embed; bug #555344)
1460 - smart <unfixed> (embed)
1461 - solfege <unfixed> (embed; bug #555345)
1462 - w3af <unfixed> (embed; bug #555346)
1463 - python-qt4 <unknown> (embed)
1464 - sphinx <unknown> (embed)
1465 - python-nltk <itp> (embed)
1466
1467 python2.5
1468 - python2.4 <unfixed> (old-version)
1469 - jython <unfixed> (embed)
1470 NOTE: embeds many stdlib modules
1471 - python-django <unfixed> (embed; bug #555419)
1472 NOTE: embeds stdlib modules: doctest, decimal
1473 - gamera 3.2.3-1 (embed)
1474 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1475 - boa-constructor <unfixed> (embed; bug #555426)
1476 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1477 - nicotine <unfixed> (embed; bug #555427)
1478 NOTE: embeds stdlib modules: ConfigParser
1479 - museek+ <unfixed> (embed; bug #555428)
1480 NOTE: embeds stdlib modules: ConfigParser
1481 - vegastrike-data <removed> (embed)
1482 NOTE: embeds many stdlib modules
1483 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1484 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1485 - config-manager <unfixed> (embed; bug #555423)
1486 NOTE: embeds stdlib modules: optparse
1487 - jhbuild 2.28.0-1 (embed; bug #555421)
1488 NOTE: embeds stdlib modules: optparse, subprocess
1489 - smart <unfixed> (embed; bug #555432)
1490 NOTE: embeds stdlib modules: optparse
1491 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1492 NOTE: embeds stdlib modules: doctest
1493 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1494 NOTE: embeds stdlib modules: doctest
1495 - distribute <unfixed> (embed)
1496 NOTE: embeds stdlib modules: doctest
1497 - python-setuptools <unfixed> (embed; bug #555435)
1498 NOTE: embeds stdlib modules: doctest
1499 - zope.testing <unfixed> (embed; bug #555436)
1500 NOTE: embeds stdlib modules: doctest
1501 - translate-toolkit <unfixed> (embed; bug #555422)
1502 NOTE: embeds stdlib modules: textwrap, contextlib
1503 - libtpclient-py <unfixed> (embed; bug #555424)
1504 NOTE: embeds stdlib modules: subprocess
1505 - grass <unfixed> (embed; bug #555425)
1506 NOTE: embeds stdlib modules: subprocess
1507 - coherence <unfixed> (embed; bug #555429)
1508 NOTE: embeds stdlib modules: uuid
1509 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1510 NOTE: embeds stdlib modules: uuid
1511 - setroubleshoot <removed> (embed; bug #555431)
1512 NOTE: embeds stdlib modules: uuid
1513 - linkchecker <unfixed> (embed; bug #555414)
1514 NOTE: embeds msgfmt.py script
1515 - imdbpy <unfixed> (embed)
1516 NOTE: embeds msgfmt.py script
1517 - kiwi <unfixed> (embed)
1518 NOTE: embeds msgfmt.py script
1519 - moin <unfixed> (embed)
1520 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1521 - plone3 <removed> (embed)
1522 NOTE: embeds msgfmt.py script
1523 - roundup <unfixed> (embed)
1524 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1525 - rednotebook <unfixed> (embed; bug #555415)
1526 NOTE: embeds msgfmt.py script
1527 - turbogears <unfixed> (embed)
1528 NOTE: embeds msgfmt.py script
1529 - elisa <unfixed> (embed)
1530 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1531 - calibre <unfixed> (embed)
1532 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1533 - mailman 1:2.1.13-1 (embed; #555416)
1534 NOTE: embeds msgfmt.py script
1535 - python-docutils <unknown> (embed)
1536 NOTE: embeds stdlib modules: optparse, textwrap
1537 - python-imaging <unknown> (embed)
1538 NOTE: embeds stdlib modules: doctest
1539 - python-mechanize <unknown> (embed)
1540 NOTE: embeds stdlib modules: doctest
1541 - twill <unknown> (embed)
1542 NOTE: embeds stdlib modules: subprocess
1543 - zeroc-ice <unknown> (embed)
1544 NOTE: embeds stdlib modules: subprocess
1545 - wxwidgets2.8 <unknown> (embed)
1546 NOTE: embeds stdlib modules: subprocess
1547 - cycle <unknown> (embed)
1548 NOTE: embeds msgfmt.py script
1549 - deluge <unknown> (embed)
1550 NOTE: embeds msgfmt.py script
1551 - opendict <unknown> (embed)
1552 NOTE: embeds msgfmt.py script
1553 - openerp-client <unknown> (embed)
1554 NOTE: embeds msgfmt.py script
1555 - rapidsvn <unknown> (embed)
1556 NOTE: embeds msgfmt.py script
1557 - wammu <unknown> (embed)
1558 NOTE: embeds msgfmt.py script
1559 - gaphor <unknown> (embed)
1560 NOTE: embeds msgfmt.py script
1561 - pida <unknown> (embed)
1562 NOTE: embeds msgfmt.py script
1563 - python-formencode <unknown> (embed)
1564 NOTE: embeds msgfmt.py script
1565 - duplicity <unfixed> (embed)
1566 NOTE: embeds stdlib module: urlparse, tarfile
1567 - pygopherd <unfixed> (embed)
1568 NOTE: embeds stdlib module: zipfile
1569
1570 argparse
1571 - twill <unfixed> (embed; bug #555347)
1572 - ipython <unfixed> (embed; bug #555348)
1573
1574 coherence
1575 - elisa <unfixed> (embed; bug #555335)
1576
1577 simpletal
1578 - plastex <unfixed> (embed; bug #555371)
1579
1580 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1581 - postr <unfixed> (embed)
1582 - elisa <unfixed> (embed)
1583
1584 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1585 - apertium-tolk <unfixed> (embed)
1586 - ipython <unfixed> (embed)
1587 - virtaal <unfixed> (embed)
1588
1589 distribute
1590 - setuptools <removed> (old-version)
1591
1592 rails
1593 - jruby1.2 <removed> (embed) [./bench/rails/*]
1594 NOTE: jruby is in non-free, it probably includes rails too
1595 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1596 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1597 - thin <unfixed> (embed) [./spec/rails_app/*]
1598 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1599 NOTE: be dangerous if developers are naively basing their code off of the examples
1600 NOTE: prototype.js is among the example files
1601
1602 lucene2 (prototype.js is among the embeds in the following)
1603 - lucene <unfixed> (old-version)
1604 - pylucene <unfixed> (embed)
1605 - libpdfbox-java <unfixed> (embed)
1606 - libfontbox-java <unfixed> (embed)
1607 - libjempbox-java <unfixed> (embed)
1608 - solr <unfixed> (embed)
1609
1610 unicode-data
1611 - syslinux <unfixed> (embed)
1612 - camomile <unfixed> (embed)
1613 - fribidi <unfixed> (embed)
1614 - m17n-db <unfixed> (embed)
1615 - sbcl <unfixed> (embed)
1616 - heimdal <unfixed> (embed)
1617 - icu <unfixed> (embed)
1618 - icu4j <unfixed> (embed)
1619 - krb5 <unfixed> (embed)
1620 - openldap <unfixed> (embed)
1621 - pike7.6 <unfixed> (embed)
1622 - samba <unfixed> (embed)
1623 - samba4 <unfixed> (embed)
1624 - cmucl <unfixed> (embed)
1625 - typo3-src <unfixed> (embed)
1626 - mauve <unfixed> (embed)
1627 - texlive-bin <unfixed> (embed)
1628 - ypsilon <unfixed> (embed)
1629 - jeuclid <unfixed> (embed)
1630 - charmap.app <unfixed> (embed)
1631 - clisp <unfixed> (embed)
1632 - gnulib <unfixed> (embed)
1633 - opensrs-client <unfixed> (embed)
1634 - saxonb <unfixed> (embed)
1635 - rails <unfixed> (embed)
1636 - boost1.49 <unfixed> (embed)
1637 - boost1.54 <unfixed> (embed; bug #751880)
1638 - boost1.55 <unfixed> (embed; bug #751881)
1639
1640 feedparser
1641 - rawdog 2.19-1 (embed; bug #383422)
1642 [wheezy] - rawdog <unfixed> (modified-embed)
1643 - miro <unfixed> (embed; bug #555351)
1644 - calibre <unfixed> (embed; bug #555352)
1645 - freevo <unfixed> (embed; bug #555353)
1646 - pida <unfixed> (embed; bug #555354)
1647 - planet-venus <unfixed> (embed; bug #555355)
1648 - plone3 <removed> (embed; bug #555356)
1649 - exaile 0.2.14+debian-1 (embed)
1650 - screenlets 0.1.2-3 (embed)
1651 NOTE: included twice
1652
1653 agg:
1654 - matplotlib <unfixed> (embed: bug #377271)
1655 - contextfree <unfixed> (embed)
1656 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1657 - exactimage <unfixed> (embed)
1658 - python-enable <unfixed> (embed)
1659 - mapnik 0.5.1-3 (embed)
1660 NOTE: links statically to agg, but shared library is not available (bug #377271)
1661
1662 vtk
1663 - paraview <unfixable> (embed; bug #495426)
1664 - libmesh <unfixed>
1665 NOTE: embeds exodus; not sure if there's a version external to vtk
1666
1667 txt2tags
1668 - rednotebook <unfixed> (embed)
1669
1670 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1671 - gajim <unfixed> (embed)
1672 - emesene <unfixed> (embed)
1673 - convirt <unfixed> (embed)
1674 - pida <unfixed> (embed)
1675 - rednotebook <unfixed> (embed)
1676
1677 horde3 (prototype.js is among the embeds in the following)
1678 - mnemo2 <unfixed> (embed)
1679 - nag2 <unfixed> (embed)
1680 - wordpress <unfixed> (embed)
1681 NOTE: Text_Diff (wp-includes/Text/Diff*)
1682
1683 cimg
1684 - gmic <unfixed> (embed)
1685
1686 mootools
1687 - kdenetwork <unfixed> (embed)
1688 - gallery <unfixed> (embed)
1689 - jspwiki <unfixed> (embed)
1690 - vdr-plugin-live <unfixed> (embed)
1691 - perl-doc-html <unfixed> (embed)
1692
1693 openldap
1694 - openldap2.3 <removed> (old-version)
1695 - ia32-libs <removed> (embed)
1696
1697 grub2
1698 - grub <unfixed> (old-version)
1699
1700 gnupginterface
1701 - duplicity <unfixed> (embed)
1702
1703 python-dateutil
1704 - awn-extras-applets <unfixed> (embed)
1705 - matplotlib <unknown> (embed)
1706
1707 cups
1708 - cupsys <removed> (old-version)
1709 - ia32-libs <removed> (embed)
1710
1711 yui
1712 - bcfg2 <not-affected> (present in source but not included in any binary files)
1713 - serendipity 1.5.3-1 (embed; bug #557746)
1714 - moodle <unfixed> (embed)
1715 - jifty 0.91117-1 (embed; bug #557748)
1716 - webgui 7.7.26-1 (embed)
1717 - loggerhead 1.17-1 (embed)
1718 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1719
1720 quake3 (vanilla source not packaged in debian)
1721 - openarena <unfixable> (fork)
1722
1723 quake2 (vanilla source not packaged in debian)
1724 - alien-arena <unfixable> (fork)
1725 - warsow <unfixable> (fork)
1726
1727 quake (vanilla source not packaged in debian)
1728 - darkplaces <unfixable> (fork)
1729 - quakespasm <unfixable> (fork)
1730 - nexuiz 2.5.2+dp-1 (old-version)
1731 NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1732
1733 libtheora
1734 - iceweasel <not-affected> (uses xulrunner)
1735 - xulrunner <unfixed> (embed; bug #540959)
1736 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1737 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1738 - iceape <unfixed> (embed; bug #559276)
1739 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1740 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1741
1742 dtoa
1743 - bfilter <unfixed> (embed)
1744 - cacao <removed> (embed)
1745 - cdrdao <unfixed> (embed)
1746 - classpath <unfixed> (embed)
1747 - freej <unfixed> (embed)
1748 - iceape <unfixed> (embed)
1749 - iceweasel <unfixed> (embed)
1750 - jscoverage <unfixed> (embed)
1751 - kde4libs <unfixed> (embed)
1752 - kdelibs <unfixed> (embed)
1753 - kompozer <unfixed> (embed)
1754 - libv8 <unfixed> (embed)
1755 - mono <unfixed> (embed)
1756 - newlib <unfixed> (embed)
1757 - nspr <unfixed> (embed)
1758 - php5 <unfixed> (embed)
1759 - polyml <unfixed> (embed)
1760 - qt4-x11 <unfixed> (embed)
1761 - rhino <unfixed> (embed)
1762 NOTE: code translated to Java
1763 - ruby1.8 <removed> (embed)
1764 - ruby1.9 <unfixed> (embed)
1765 - ruby1.9.1 <removed> (embed)
1766 - sdd <unfixed> (embed)
1767 - sfind <unfixed> (embed)
1768 - star <unfixed> (embed)
1769 - tinymux <unfixed> (embed)
1770 - virtualbox-ose <unfixed> (embed)
1771 - webkit <unfixed> (embed)
1772 - xulrunner <unfixed> (embed)
1773
1774 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1775 - firegpg <unfixed> (embed)
1776 - enigmail <unfixed> (embed)
1777
1778 ptmalloc (not packaged in Debian)
1779 - crystalspace <unfixed> (embed)
1780 - qt4-x11 <unfixed> (embed)
1781
1782 svgalib
1783 - usplash <unfixed> (embed)
1784 - ia32-libs <removed> (embed)
1785
1786 bogl
1787 - usplash <unfixed> (embed)
1788
1789 taglist
1790 - usplash <unfixed> (embed)
1791
1792 portaudio
1793 - audacity <unfixed> (embed; bug #323711)
1794
1795 nyquist
1796 - audacity <unfixed> (embed)
1797 NOTE: embeds a forked nyquist with support for a shared library
1798
1799 vamp-plugin-sdk
1800 - audacity <unfixed> (embed)
1801
1802 wordpress
1803 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1804 - wordpress-mu <removed> (fork)
1805
1806 php5
1807 - php4 <removed> (old-version)
1808
1809 classpath
1810 - libgnucrypto-java <removed> (embed; bug #559788)
1811
1812 libtool
1813 - apr <unfixed> (static; bug #489625)
1814 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1815 - arts <unfixed> (embed)
1816 - bochs 2.4.2-1 (embed; bug #560884)
1817 - camserv <unfixed> (embed)
1818 - collectd 4.8.2-1 (embed)
1819 - courier-authlib 0.58-4 (embed)
1820 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1821 - cvsnt 2.5.04.3236-1.2 (embed)
1822 - dico <not-affected> (Uses the system copy of ltdl)
1823 - freeradius 0.1+20010527-1 (embed)
1824 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1825 - ggobi 2.1.9~20091212-1 (embed)
1826 - glame 2.0.1-4 (embed)
1827 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1828 - gnash 0.8.7-2 (embed)
1829 - gnu-smalltalk <unfixed> (embed; bug #566777)
1830 - google-gadgets 0.10.5-0.3 (embed)
1831 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1832 - graphicsmagick 1.3.5-6 (embed)
1833 - graphviz 2.8-3 (embed)
1834 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1835 - guile-1.6 1.6.8-7 (embed)
1836 - hamlib 1.2.11-1 (embed)
1837 - hercules 3.06-1.2 (embed)
1838 - jags 1.0.4-3 (embed; bug #560864)
1839 - kdelibs <unfixed> (embed)
1840 - libannodex <removed> (embed)
1841 - libextractor 0.5.23+dfsg-4 (embed)
1842 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1843 - libtunepimp 0.5.3-7.3 (embed)
1844 - mp4h 1.3.1-4.1 (Contains source code, but is compiled with --without-included-ltdl)
1845 - naim <removed> (embed)
1846 - parser-mysql <unfixed> (embed)
1847 - pinball 0.3.1-11 (embed)
1848 - redland <unfixed> (embed)
1849 - siproxd 1:0.8.1-2 (embed; bug #657070)
1850 - ski <unfixed> (embed)
1851 - synfig 0.62.00-1 (embed)
1852 - unixodbc 2.2.4-5 (embed)
1853 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1854 - clamav 0.95+dfsg-1 (embed)
1855 - imagemagick 6:6.2.3.1-1 (embed)
1856 - hypre 2.4.0b-5 (embed)
1857 - lam <unfixed> (embed)
1858 - openmpi <unfixable> (embed; bug #559386)
1859 - parser <unfixed> (embed)
1860 - pdsh 2.18-5 (embed; bug #560892)
1861 - sbnc 1.2-8 (embed)
1862 - sdcc <unfixed> (embed)
1863 - wml 2.0.11ds2-1 (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1864 - proftpd-dfsg <unfixed> (embed; bug #561748)
1865 - babel 1.4.0.dfsg-5 (embed)
1866 - libprelude 0.9.14-2 (embed)
1867 - heartbeat 2.1.4-7 (embed)
1868 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1869 NOTE: might've been fixed earlier
1870 - gcc-* <unknown> (embed)
1871 - ia32-libs <removed> (embed)
1872
1873 ocamlgsl
1874 - orpie 1.5.1-7.1 (embed; bug #550058)
1875
1876 xdotool
1877 - keynav <unfixed> (embed; bug #560103)
1878
1879 bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1880 - supertuxkart <unfixed> (embed)
1881 - blender <unfixed> (embed)
1882 - critterding <unfixed> (embed)
1883 NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1884
1885 ghostscript
1886 - gs-gpl <removed> (old-version)
1887
1888 icedove
1889 - thunderbird <removed> (old-version)
1890
1891 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1892 - jquery <unfixed> (embed)
1893
1894 sed
1895 - ssed <unfixed> (fork)
1896
1897 phpatomlib (http://code.google.com/p/phpatomlib)
1898 - wordpress <unfixed> (embed)
1899
1900 Services_JSON (http://pear.php.net/package/Services_JSON)
1901 - wordpress <unfixed> (embed)
1902
1903 phpass (http://www.openwall.com/phpass/)
1904 - gallery2 <unfixed> (embed)
1905 - wordpress <unfixed> (embed)
1906 - typo3-src <unfixed> (modified-embed)
1907 NOTE: file refers to drupal, maybe there's a copy somewhere there
1908 NOTE: a copyright owner search didn't match anything
1909 - libauthen-passphrase-perl <unfixable> (fork)
1910 NOTE: perl implementation of phpass
1911 - phpbb3 <unfixed>
1912 NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1913
1914 squirrelmail
1915 - wordpress <unfixed> (embed)
1916 NOTE: class-pop3.php
1917
1918 ezSQL (http://www.woyano.com/jv/ezsql)
1919 - wordpress <unfixable> (fork)
1920 NOTE: wp-db.php
1921
1922 Diff.php (Clay Loveless' version/killersoft.com)
1923 - php-versioncontrol-svn <unfixed>
1924
1925 libm (provided by libc)
1926 - spring <unfixed> (embed)
1927 NOTE: embedded by embedded copy of streflop
1928 - megaglest <unfixed> (embed)
1929 NOTE: embedded by embedded copy of streflop
1930 - aide <unfixed> (static)
1931 - busybox <unfixed> (static)
1932 - mindi-busybox <unfixed> (static)
1933 - qemu <unfixed> (static)
1934 NOTE: qemu-user-static
1935 - tuxonice-userui <unfixed> (static)
1936 - zsh <unfixed> (static)
1937 NOTE: zsh-static
1938 - tripwire <unfixed>
1939
1940 streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1941 - spring <unfixed> (modified-embed)
1942 NOTE: old, modified version of streflop
1943 - megaglest <unfixed> (modified-embed)
1944 NOTE: megaglest uses the same streflop code as spring
1945
1946 minizip
1947 - spring <unfixed> (embed)
1948 - libkml <unfixed> (modified-embed; bug #753069)
1949 - samba <unfixed> (embed)
1950 NOTE: didn't check whether it's used
1951 - zlib <unfixed> (embed; bug #753070)
1952 NOTE: only used to build minizip and miniunzip in zlib-bin package
1953 - virtuoso-opensource <unfixed> (embed)
1954 NOTE: didn't check whether it's used
1955 - luatex <unfixed> (embed)
1956 NOTE: didn't check whether it's used
1957 - tcl8.6 <unfixed> (embed)
1958 NOTE: didn't check whether it's used
1959 - chromium-browser <unfixed> (embed)
1960 - perl-tk <unfixed> (embed)
1961 NOTE: didn't check whether it's used
1962 - icedove <unfixed> (modified-embed)
1963 NOTE: didn't check whether it's used
1964 - ace <unfixed> (embed)
1965 NOTE: didn't check whether it's used
1966 - smplayer <unfixed> (embed)
1967 NOTE: didn't check whether it's used
1968 - povray <unfixed> (embed)
1969 NOTE: didn't check whether it's used
1970 - cegui-mk2 <unfixed> (embed)
1971 NOTE: didn't check whether it's used
1972 - freemat <unfixed> (embed)
1973 NOTE: didn't check whether it's used
1974 - funtools <unfixed> (embed)
1975 NOTE: didn't check whether it's used
1976 - tntnet <unfixed> (embed)
1977 NOTE: didn't check whether it's used
1978 - orthanc <unfixed> (embed)
1979 NOTE: didn't check whether it's used
1980 - instead <unfixed> (embed)
1981 NOTE: didn't check whether it's used
1982 - mupen64plus-core <unfixed> (embed)
1983 NOTE: didn't check whether it's used
1984 - sks-ecc <unfixed> (embed)
1985 NOTE: didn't check whether it's used
1986 - psi <unfixed> (embed)
1987 NOTE: didn't check whether it's used
1988 - fossil <unfixed> (embed)
1989 NOTE: didn't check whether it's used
1990 - wordgrinder <unfixed> (embed)
1991 NOTE: didn't check whether it's used
1992 - critcl <unfixed> (embed)
1993 NOTE: didn't check whether it's used
1994 - fceux <unfixed> (embed)
1995 NOTE: didn't check whether it's used
1996
1997 oscpack
1998 - spring <unfixed> (embed)
1999
2000 hpiutil2
2001 - spring <unfixed> (embed)
2002
2003 p7zip
2004 - spring <unfixed> (embed)
2005
2006 pythonqt (doesn't seem to be python-qtN, unknown source)
2007 - fontmatrix <unfixed> (embed)
2008 - elmerfem <unfixed> (embed)
2009
2010 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
2011 - docvert <unfixed> (embed)
2012 - jifty <unfixed> (embed)
2013 - kdenetwork <unfixed> (embed)
2014 - mediatomb <unfixed> (embed)
2015 - plastex <unfixed> (embed)
2016 - plone3 <removed> (embed)
2017 - python-chaco <unfixed> (embed)
2018 - python-docutils <unfixed> (embed)
2019 - s5 <unfixed> (embed)
2020 - zope2.10 <unfixed> (embed)
2021 - zope2.11 <removed> (embed)
2022 - cython <not-affcted> (embed)
2023 NOTE: part of documentation, which is not installed into the binary package
2024
2025 python-docutils
2026 - zope2.10 <unfixed> (embed)
2027 - zope2.11 <removed> (embed)
2028
2029 tesseract
2030 - ocropus <unfixed> (static)
2031
2032 antlr
2033 - kdevelop <unfixed> (embed)
2034
2035 libxerces2
2036 - openjdk-6 <unfixed> (embed)
2037
2038 kfreebsd-8
2039 - kfreebsd-7 <unfixed> (old-version)
2040 - kfreebsd-6 <removed> (old-version)
2041
2042 ruby1.9.1
2043 - ruby1.9 <unfixed> (old-version)
2044 - ruby1.8 <removed> (old-version)
2045
2046 maildrop
2047 - courier <unfixed> (embed) [./maildrop]
2048
2049 glee
2050 - warzone2100 <not-affected> (embed)
2051 - love 0.8.0-2 (embed; bug #690492)
2052
2053 phing
2054 - symfony <unfixed> (embed)
2055
2056 pake
2057 - symfony <unfixed> (embed)
2058
2059 propel
2060 - symfony <unfixed> (embed)
2061
2062 creole
2063 - symfony <unfixed> (embed)
2064
2065 hfsutils
2066 - cdrkit <unfixed> (embed; bug #570187)
2067 NOTE: embeds hfsutils code in genisoimage
2068
2069 cdrkit
2070 - grub2 <unfixed> (embed; bug #570156)
2071 NOTE: genisoimage imported into grub-mkisofs
2072
2073 kdebase-workspace
2074 - kdebase <unfixed> (old-version)
2075
2076 file
2077 - php5 <unfixable> (modified-embed)
2078 [lenny] - php5 <not-affected>
2079 - radare2 <unfixed> (embed)
2080 TODO: check if embed, modfied-embed or old-version
2081 - sleuthkit <unfixed> (embed)
2082 TODO: check if used
2083
2084 cdb
2085 - php5 <unfixed> (embed)
2086
2087 libmbfl (itp: #570708)
2088 - php5 <unfixed> (embed)
2089 NOTE: PHP is actually the current upstream, ITP is of that code
2090
2091 libonig
2092 - php5 5.3.2-1 (embed)
2093
2094 xmlrpc-epi
2095 - php5 <unfixed> (embed)
2096
2097 swt-gtk
2098 - eclipse <unfixed> (embed; bug #538808)
2099
2100 txt2html
2101 - wml 2.0.11ds2-1 (embed)
2102
2103 ca-certificates
2104 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
2105
2106 openexr
2107 - freeimage <unfixed> (embed)
2108
2109 libmng
2110 - freeimage <unfixed> (embed)
2111
2112 openjpeg
2113 - freeimage <unfixed> (embed)
2114
2115 libjpeg6b
2116 - freeimage <unfixed> (embed)
2117 - ia32-libs <removed> (embed)
2118
2119 libjpeg (don't know what exact version)
2120 - dcmtk <unfixed>
2121 - gdcm <unfixed>
2122 - insighttoolkit <unfixed>
2123 - openarena 0.8.5-5+exp1 (bug #495966)
2124 - outguess <unfixed>
2125 - squeak-vm <unfixed> (embed)
2126 - tremulous <unfixed>
2127 - tuxonice-userui <unfixed> (static)
2128 - fpc <unfixed> (static)
2129 - lazarus <unfixed> (static)
2130 NOTE: inherited from fpc, see #472304
2131 - mseide-msegui <unfixed> (static)
2132 NOTE: inherited from fpc, see #472304
2133 - easymp3gain <unfixed> (static)
2134 NOTE: inherited from fpc, see #472304
2135 - winff <unfixed> (static)
2136 NOTE: inherited from fpc, see #472304
2137 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2138 - ghostscript 8.64~dfsg-2 (embed)
2139
2140 lxr
2141 - lxr-cvs <unfixed> (embed)
2142
2143 libfile-copy-recursive-perl
2144 - r-base <unfixed> (embed; bug #577427)
2145 - r-base-core-ra <unfixed> (embed; bug #577429)
2146
2147 delimmatch
2148 - r-base <unfixed> (embed; bug #577433)
2149 - r-base-core-ra <unfixed> (embed; bug #577434)
2150
2151 libsmf (ITP: #572558)
2152 - denemo <unfixed> (embed)
2153 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2154
2155 libselinux
2156 - dpkg 1.15.6 (static)
2157 - ia32-libs <removed> (embed)
2158
2159 xinha (ITP: #479708)
2160 - horde3 <unfixed>
2161 - serendipity <unfixed>
2162 - openacs <unfixed>
2163 - dotlrn <unfixed>
2164
2165 dvipng
2166 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2167
2168 dvipdfmx
2169 - texlive-bin <unfixed> (embed)
2170 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2171
2172 lcdf-typetools
2173 - texlive-bin 2009-1 (embed)
2174
2175 tex4ht
2176 - texlive-bin 2009-1 (embed)
2177
2178 freetype
2179 - texlive-bin 2009-1 (embed)
2180 - ia32-libs <removed> (embed)
2181
2182 freetype2
2183 - texlive-bin 2009-1 (embed)
2184 - tuxonice-userui <unknown> (static)
2185 - instantbird <removed>
2186 - qt4-x11 <unknown> (embed)
2187 - vtk <unknown> (embed)
2188 - paraview <unknown> (embed)
2189 NOTE: from embedded copy of vtk
2190
2191 silgraphite
2192 - texlive-bin <unfixed> (embed)
2193
2194 unzip
2195 - texlive-bin 2009-1 (embed)
2196
2197 jbig2dec
2198 - ghostscript 8.71~dfsg2-1 (embed)
2199
2200 libxml2
2201 - chromium-browser 5.0.375.29~r46008-1
2202 - ia32-libs <removed> (embed)
2203
2204 protobuf
2205 - chromium-browser 5.0.375.70~r48679-2
2206
2207 libv8
2208 - chromium-browser 5.0.375.38~r46659-1
2209
2210 nspr
2211 - chromium-browser 5.0.375.29~r46008-3
2212 - ia32-libs <removed> (embed)
2213 - virtualbox <unfixed> (modified-embed)
2214
2215 yasm
2216 - chromium-browser 5.0.375.29~r46008-2
2217
2218 libxslt
2219 - chromium-browser 5.0.375.29~r46008-1
2220 - ia32-libs <removed> (embed)
2221
2222 miniupnpc
2223 - warzone2100 2.3.7-2
2224 NOTE: code still present in tarball but removed during build and unused
2225 - vino 3.2.2-1
2226 NOTE: code still present in tarball but removed during build and unused
2227 - vidalia 0.2.21-2 <unfixed> (old-version)
2228 NOTE: embedded old version might be modified
2229 - vidalia 0.2.21-3 <not-affected> (old-version)
2230 NOTE: code still present in tarball but unused during build
2231
2232 iniparser (not packaged in Debian; RFP bug #582657)
2233 - warzone2100 <unfixed> (modified-embed)
2234
2235 pyglet
2236 - sympy <unfixed> (embed; bug #459716)
2237
2238 mpmath
2239 - sympy <unfixed> (embed; bug #541746)
2240
2241 openssh
2242 - libpam-ssh <unfixed> (embed; bug #598522)
2243
2244 curl
2245 - cmake 2.6.0-6 (embed)
2246 NOTE: Might be fixed earlier. Lenny version recorded.
2247 - criticalmass <unfixed> (static; bug #599061)
2248 - wengophone 2.1.0~beta1-svn9983-1 (embed)
2249 - ia32-libs <removed> (embed)
2250
2251 lib3ds
2252 - boson <unfixed> (embed; bug #600900)
2253 - openscenegraph <unfixed> (embed; bug #601181)
2254
2255 xcftools
2256 - gnome-xcf-thumbnailer <unfixed> (embed)
2257
2258 simplejson
2259 - exaile <unfixed> (embed; bug #604547)
2260
2261 libasycns
2262 - loudmouth <unfixed> (embed; bug #566143)
2263
2264 plplot
2265 - emboss <unfixed> (fork)
2266
2267 acl
2268 - ia32-libs <removed> (embed)
2269
2270 arts
2271 - ia32-libs <removed> (embed)
2272
2273 attr
2274 - ia32-libs <removed> (embed)
2275
2276 audiofile
2277 - ia32-libs <removed> (embed)
2278
2279 avahi
2280 - ia32-libs <removed> (embed)
2281
2282 celt
2283 - ia32-libs <removed> (embed)
2284
2285 coreutils
2286 - ia32-libs <removed> (embed)
2287
2288 cyrus-sasl2
2289 - ia32-libs <removed> (embed)
2290
2291 db4.8
2292 - ia32-libs <removed> (embed)
2293
2294 dbus
2295 - ia32-libs <removed> (embed)
2296
2297 directfb
2298 - ia32-libs <removed> (embed)
2299
2300 esound
2301 - ia32-libs <removed> (embed)
2302
2303 fltk1.1
2304 - ia32-libs <removed> (embed)
2305
2306 fontconfig
2307 - ia32-libs <removed> (embed)
2308
2309 freeglut
2310 - ia32-libs <removed> (embed)
2311
2312 gcc-3.3
2313 - ia32-libs <removed> (embed)
2314
2315 gdbm
2316 - ia32-libs <removed> (embed)
2317
2318 gnutls26
2319 - ia32-libs <removed> (embed)
2320
2321 hal
2322 - ia32-libs <removed> (embed)
2323
2324 isdnutils
2325 - ia32-libs <removed> (embed)
2326
2327 jack-audio-connection-kit
2328 - ia32-libs <removed> (embed)
2329
2330 keyutils
2331 - ia32-libs <removed> (embed)
2332
2333 krb5
2334 - ia32-libs <removed> (embed)
2335
2336 lesstif2
2337 - ia32-libs <removed> (embed)
2338
2339 libaio
2340 - ia32-libs <removed> (embed)
2341
2342 libasyncns
2343 - ia32-libs <removed> (embed)
2344
2345 libcap2
2346 - ia32-libs <removed> (embed)
2347
2348 libdrm
2349 - ia32-libs <removed> (embed)
2350
2351 libedit
2352 - ia32-libs <removed> (embed)
2353
2354 libexif
2355 - ia32-libs <removed> (embed)
2356
2357 libgcrypt11
2358 - ia32-libs <removed> (embed)
2359
2360 libgpg-error
2361 - ia32-libs <removed> (embed)
2362
2363 libgphoto2
2364 - ia32-libs <removed> (embed)
2365
2366 libice
2367 - ia32-libs <removed> (embed)
2368
2369 libieee1284
2370 - ia32-libs <removed> (embed)
2371
2372 libjpeg8
2373 - ia32-libs <removed> (embed)
2374
2375 libnss-ldap
2376 - ia32-libs <removed> (embed)
2377
2378 libogg
2379 - ia32-libs <removed> (embed)
2380
2381 libpam-ldap
2382 - ia32-libs <removed> (embed)
2383
2384 libsamplerate
2385 - ia32-libs <removed> (embed)
2386
2387 libsdl1.2
2388 - ia32-libs <removed> (embed)
2389
2390 libsm
2391 - ia32-libs <removed> (embed)
2392
2393 libssh2
2394 - ia32-libs <removed> (embed)
2395
2396 libtasn1-3
2397 - ia32-libs <removed> (embed)
2398
2399 libx11
2400 - ia32-libs <removed> (embed)
2401
2402 libx86
2403 - ia32-libs <removed> (embed)
2404
2405 libxau
2406 - ia32-libs <removed> (embed)
2407
2408 libxcb
2409 - ia32-libs <removed> (embed)
2410
2411 libxcomposite
2412 - ia32-libs <removed> (embed)
2413
2414 libxcursor
2415 - ia32-libs <removed> (embed)
2416
2417 libxdamage
2418 - ia32-libs <removed> (embed)
2419
2420 libxdmcp
2421 - ia32-libs <removed> (embed)
2422
2423 libxext
2424 - ia32-libs <removed> (embed)
2425
2426 libxfixes
2427 - ia32-libs <removed> (embed)
2428
2429 libxi
2430 - ia32-libs <removed> (embed)
2431
2432 libxinerama
2433 - ia32-libs <removed> (embed)
2434
2435 libxmu
2436 - ia32-libs <removed> (embed)
2437
2438 libxp
2439 - ia32-libs <removed> (embed)
2440
2441 libxrandr
2442 - ia32-libs <removed> (embed)
2443
2444 libxrender
2445 - ia32-libs <removed> (embed)
2446
2447 libxss
2448 - ia32-libs <removed> (embed)
2449
2450 libxt
2451 - ia32-libs <removed> (embed)
2452
2453 libxtst
2454 - ia32-libs <removed> (embed)
2455
2456 libxv
2457 - ia32-libs <removed> (embed)
2458
2459 libxxf86vm
2460 - ia32-libs <removed> (embed)
2461
2462 mesa
2463 - ia32-libs <removed> (embed)
2464
2465 mpg123
2466 - ia32-libs <removed> (embed)
2467
2468 nas
2469 - ia32-libs <removed> (embed)
2470
2471 nss
2472 - ia32-libs <removed> (embed)
2473
2474 openal-soft
2475 - ia32-libs <removed> (embed)
2476
2477 openssl
2478 - ia32-libs <removed> (embed)
2479
2480 pam
2481 - ia32-libs <removed> (embed)
2482
2483 popt
2484 - ia32-libs <removed> (embed)
2485
2486 pulseaudio
2487 - ia32-libs <removed> (embed)
2488
2489 sane-backends
2490 - ia32-libs <removed> (embed)
2491
2492 sqlite3
2493 - ia32-libs <removed> (embed)
2494 - chromium-browser <unfixed> (embed)
2495
2496 sysfsutils
2497 - ia32-libs <removed> (embed)
2498
2499 tcp-wrappers
2500 - ia32-libs <removed> (embed)
2501
2502 tdb
2503 - thunar 1.2.1-3 (old-version)
2504 - ia32-libs <removed> (embed)
2505
2506 tslib
2507 - ia32-libs <removed> (embed)
2508
2509 unixodbc
2510 - ia32-libs <removed> (embed)
2511
2512 xaw3d
2513 - ia32-libs <removed> (embed)
2514
2515 xbitmaps
2516 - ia32-libs <removed> (embed)
2517
2518 xcb-util
2519 - ia32-libs <removed> (embed)
2520
2521 xcursor-themes
2522 - ia32-libs <removed> (embed)
2523
2524 xft
2525 - ia32-libs <removed> (embed)
2526
2527 dicomparser
2528 - vtk <unfixed>
2529 - paraview <unfixed>
2530 NOTE: as part of its copy of vtk
2531 - insighttoolkit <unfixed>
2532
2533 proj
2534 - vtk <unfixed>
2535 - paraview <unfixed>
2536 NOTE: as part of its copy of vtk
2537 - therion <unfixed>
2538 - python-pyproj 1.8.6-1
2539
2540 netcdf
2541 - vtk <unfixed>
2542 - paraview <unfixed>
2543 NOTE: as part of its copy of vtk
2544
2545 insighttoolkit
2546 - vtk <unfixed> (embed)
2547 NOTE: embeds at least MetaIO
2548 - paraview <unfixed> (embed)
2549 NOTE: embeds at least MetaIO
2550
2551 gl2ps
2552 - vtk <unfixed>
2553 - paraview <unfixed>
2554 NOTE: as part of its copy of vtk
2555 - avogadro <unfixed>
2556 - gabedit <unknown> (embed)
2557 NOTE: not sure if it is built
2558 - drawxtl <unfixed> (embed)
2559 - rgl <unfixed> (embed)
2560 - gmsh <unfixed>
2561 - mcrl2 <unfixed> (embed)
2562 - mysql-gui-tools <unknown> (embed)
2563 NOTE: not sure if it is built
2564 - opencascade <unfixed> (embed)
2565 - orsa <unfixed> (embed)
2566 - qtiplot <unfixed> (embed)
2567 - qwtplot3d <unfixed> (embed)
2568 - root-system <unknown> (embed)
2569 NOTE: not sure if it is built
2570 - scilab <unfixed> (embed)
2571 - snd <unknown> (embed)
2572 NOTE: not sure if it is built
2573 - xmakemol <unfixed> (embed)
2574
2575 qwtplot3d
2576 - qtiplot <unfixed>
2577
2578 parseafm (from Adobe)
2579 - vftool <unfixed>
2580 - gnustep-back <unknown>
2581 NOTE: looks like it isn't built
2582 - evince <unfixed>
2583
2584 bugzilla
2585 - perl <unknown>
2586 - libcgi-pm-perl <unknown>
2587
2588 isc-dhcp
2589 - dhcp3 <unfixable> (old-version)
2590 - dhcp <unfixable> (old-version)
2591
2592 chipmunk (ITP: #623274)
2593 - xmoto <unfixed> (embed; bug #623299)
2594 - libtuxcap <unfixed> (embed; bug #623300)
2595
2596 libsigsegv
2597 - gawk 3.1.8+dfsg-0.1
2598
2599 pdfrw
2600 - rst2pdf <unfixed> (embed; bug #638607)
2601
2602 bind9
2603 - isc-dhcp <unfixed> (embed; bug #643569)
2604 NOTE: introduced in upstream 4.2 series
2605
2606 qof
2607 - gnucash <unfixed> (embed; bug #556245)
2608
2609 feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2610 - megaglest <unfixed> (modified-embed)
2611
2612 acsccid
2613 - ccid 1.3.11 <unfixed> (fork)
2614 - openct <unfixed> (modified-embed)
2615 - towitoko <unfixed> (modified-embed)
2616
2617 ccid
2618 - openct <unfixed> (modified-embed)
2619 - towitoko <unfixed> (modified-embed)
2620
2621 msmtp
2622 - mpop <unfixed> (embed)
2623
2624 iCalcreator
2625 - collabtive <unfixed>
2626 NOTE: class.ical.php
2627 - glpi <unfixed>
2628
2629 plupload
2630 - wordpress <unfixed>
2631
2632 feedcreator (php lib)
2633 - collabtive <unfixed>
2634 NOTE: class.rss.php
2635 - piwigo <unfixed>
2636 - dokuwiki <unfixed> (modified-embed)
2637 NOTE: dokuwiki uses an "enhanced" version
2638
2639 emacs
2640 - le <unfixed>
2641 NOTE: it uses an almost-pristine 2008 version of emacs' regex.{c,h}
2642
2643 libjsoncpp
2644 - eiskaltdcpp <unfixed> (embed)
2645 - drizzle <unfixed> (embed)
2646
2647 mongoose
2648 - phantomjs <unfixed> (modified-embed)
2649
2650 rapidxml (not packaged in Debian, http://rapidxml.sourceforge.net)
2651 - boost1.49 <unfixed> (embed)
2652 - boost1.50 <unfixed> (embed)
2653 - deal.ii <unfixed> (embed)
2654 - fife <unfixed> (embed)
2655 - witty <unfixed> (embed)
2656
2657 make
2658 - remake <unfixed> (fork)
2659
2660 metacity
2661 - mutter <unfixed> (fork)
2662
2663 mutter
2664 - muffin <unfixed> (fork)
2665
2666 libjson-spirit-dev
2667 - bitcoin <unfixed> (modified-embed)
2668 - litecoin <itp> (modified-embed; bug #693492)
2669
2670 bitcoin
2671 - litecoin <itp> (fork; bug #693492)
2672
2673 json-spirit
2674 - bitcoin <unfixed> (modified-embed)
2675 - litecoin <itp> (modified-embed; bug #693492)
2676
2677 libupnp
2678 - mediatomb <unfixable> (fork)
2679 - djmount <unfixed> (embed; bug #699562)
2680
2681 flowplayer-core (not packaged in Debian)
2682 - mahara <unfixed> (modified-embed)
2683
2684 dcraw
2685 - ufraw <unfixed>
2686 - libraw <unfixed>
2687 - kdcraw <unfixed>
2688 NOTE: in embedded copy of libraw
2689 - xbmc <unfixed>
2690 - exactimage <unfixed>
2691 - rawtherapee <unfixed>
2692 - rawstudio <unfixed>
2693
2694 libraw
2695 - libkdcraw 4:4.12.3-1
2696 - darktable <unfixed> (modified-embed; bug #682980)
2697 - shotwell <unfixed>
2698 NOTE: possibly fixed in wheezy and greater
2699
2700 mednafen
2701 - libvorbisidec 0.9.17.1-1
2702 [squeeze] - libvorbisidec <unfixed>
2703 [wheezy] - libvorbisidec <unfixed>
2704 NOTE: not-affected since 0.9.17.1-1 (as above)
2705 NOTE: mednafen 0.8.D.3-4 and 0.8.D.3-5 attempted to use the packaged libvorbisidec,
2706 NOTE: but this breaks CD playback when using .ogg files (see #699143), so it's
2707 NOTE: likely that future packages in the 0.8 series will build using the embedded code.
2708 - libmpcdec 0.9.21-1
2709 NOTE: not-affected since 0.9.21-1 (as above)
2710
2711 xmoto
2712 - chipmunk <unfixed> (bug #623299)
2713
2714 irrlicht
2715 - supertuxkart <unfixed> (modified-embed)
2716
2717 snappy
2718 - chromium-browser 35.0.1916.86-1
2719 NOTE: not sure if it's build
2720 - mongodb <unfixed>
2721 NOTE: needs further checks
2722 - couchdb <unfixed>
2723 - libsereal-decoder-perl <unfixed>
2724 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2725 - libsereal-encoder-perl <unfixed>
2726 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2727
2728 automysqlbackup
2729 - autopostgresqlbackup <unfixed>
2730 NOTE: fork
2731
2732 python-pip
2733 - python-virtualenv <unfixed>
2734
2735 scrypt
2736 - python-scrypt <unfixed> (embed; wontfix; package in NEW)
2737 NOTE: upstream scrypt does not provide a shared library/API
2738
2739 srtp
2740 - chromium <unfixed>
2741 - qutecom <unfixed>
2742
2743 fonttools
2744 - python-enable <unfixed> (embed; bug #715145)
2745
2746 uglifyjs
2747 - ruby-uglifier <unfixed> (modified-embed; bug #718367)
2748
2749 openacs
2750 - dotlrn <unfixed> (modified-embed; bug #718487)
2751
2752 jsgantt
2753 - rt4-extension-jsgantt <unfixed> (embed; bug #724287)
2754 - trac-jsgantt <unfixed> (embed; bug #724287)
2755 NOTE: jsgantt is not packaged seperately so far
2756
2757 libjs-pdf
2758 - iceweasel <unfixed> (fork)
2759
2760 jmapviewer
2761 - josm <unfixed> (embed; bug #731029)
2762
2763 qt4-x11
2764 - phantomjs <unfixed> (embed)
2765 NOTE: phantomjs embeds parts of src/
2766
2767 eigen3
2768 - r-cran-rcppeigen <unfixed> (modified-embed; bug #729716)
2769
2770 libyaml
2771 - libyaml-libyaml-perl <unfixed> (embed; bug #664224)
2772
2773 liblivemedia
2774 - vlc <unfixed> (static)
2775 - mplayer <removed> (static)
2776
2777 python-gnupg
2778 - gajim <unfixed> (modified-embed)
2779
2780 xchat:
2781 - hexchat <unfixed> (fork)
2782
2783 libjs-jquery-filetree (not packaged in Debian; RFP bug #741581; http://www.abeautifulsite.net/blog/2008/03/jquery-file-tree/ https://github.com/daverogers/jQueryFileTree)
2784 - controlaula <unfixed> (embed)
2785 - dolibarr <unfixed> (embed)
2786
2787 libjs-jquery-bbq (not packaged in Debian; RFP bug #741586; http://benalman.com/projects/jquery-bbq-plugin/ http://github.com/cowboy/jquery-bbq)
2788 - drupal7 <unfixed> (embed)
2789 - ganglia-web <unfixed> (embed)
2790 - jqapi <unfixed> (embed)
2791
2792 lame
2793 - mp3gain <unfixed> (modified-embed)
2794 NOTE: ancient copy, part of mpglib which was probably part of mpg123 at some point
2795
2796 zopfli
2797 - pigz <unfixed> (embed)
2798 - advancecomp <unfixed> (embed)
2799
2800 libquazip
2801 - pencil2d (modified-embed)

  ViewVC Help
Powered by ViewVC 1.1.5