/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 31543 - (show annotations) (download)
Mon Jan 19 20:38:03 2015 UTC (10 days, 21 hours ago) by geissert
File size: 79249 byte(s)
update libpng's ecc entries for iceweasel and icedove
they use the embedded copy for some time now
1 Embedded code copies
2 ====================
3
4 https://wiki.debian.org/EmbeddedCodeCopies
5 This file collects source packages that embed code from other projects.
6 This is considered bad for fixing security flaws because the fix needs
7 to be applied in multiple source packages.
8
9 Format:
10 <srcpkg> (<optional comment about srcpkg>)
11 - <embedding srcpkg> <status> (<sort>; bug #<number>)
12 NOTE: optional comments about the linkage of the embedding srcpkg
13
14 status: version number fixing the embedded copy
15 <unfixed> if the issue is not yet fixed
16 <removed> if the package was removed from the archive
17 <itp> if the package is in the process of being packaged
18 <not-affected> if the package does not use the embedded copy
19 <unknown> if the version number can not be determined
20 <unfixable> for unavoidable cases (e.g., forks that add real value)
21 sort: static (linking statically against a lib)
22 embed (embeds a copy of the library into another source package)
23 modified-embed (embeds a code copy that differs from upstream code)
24 fork (a full-blown fork of another source package)
25 old-version (an older version of essentially the same code)
26
27 The srcpkg might be some string to identify the code if there is no
28 specific source package.
29
30 Everything up to the next line is ignored.
31 ---BEGIN
32 poppler
33 - pdftohtml <unknown>
34 [sarge] - pdftohtml <unfixed>
35 [etch] - pdftohtml <unfixed>
36 NOTE: has been replaced by poppler-utils
37 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38 - texlive-base 3.0-12 (embed)
39 - texlive-bin 2007-1 (embed)
40 - koffice 1:2.0.0-1 (embed; bug #436163)
41 - libextractor 0.5.12-1 (embed)
42 NOTE: libextractor is using its own pdf decoder now
43 - ipe <unfixed> (embed)
44 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45 - ruby-gnome2 <unknown> (embed)
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <removed> (embed; bug #551293)
48 - xpdf 3.02-9 (fork)
49 - luatex <unfixed>
50 NOTE: detected by lintian, needs to be checked/confirmed
51
52 pdksh (no longer developed since 1999)
53 - mksh <unfixable> (fork)
54 - posh <unfixable> (fork)
55
56 ppmd
57 - libcomplearn-mod-ppmd <unfixed> (fork)
58 NOTE: discussion in #458152
59
60 libevent
61 - transmission 1.71-1 (embed; bug #529372)
62 - chromium-browser 5.0.375.29~r46008-1
63 - dnsproxy <unknown> (embed)
64 - iceweasel <unknown> (embed)
65 - icedove <unknown> (embed)
66
67 lrmi
68 - read-edid 2.0.0-1 (embed; bug #495131)
69 - s3switch <unfixed> (embed)
70 - xresprobe <unfixed> (embed)
71 - zhcon <unfixed> (embed)
72
73 php-htmlpurifier
74 - mahara 1.2.5-1 (embed)
75 - knowledgeroot 0.9.9.5-5 (embed)
76 - moodle 2.5.1-1 (embed)
77
78 peercast
79 - gnome-peercast <removed> (embed)
80 [etch] - gnome-peercast <unfixed> (embed)
81
82 silc-toolkit
83 - silc-client 1.1~beta6-1 (embed)
84
85 icclib
86 - ghostscript <unfixed> (embed)
87 - argyll <unfixed> (embed)
88
89 libusb
90 - argyll <unfixed> (embed)
91 - ia32-libs <removed> (embed)
92
93 dietlibc
94 - ccontrol 0.9.1+20071204-1 (static)
95 - mksh <unfixable> (static)
96 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
97
98 libmikmod
99 - pysol-sound-server <unfixed> (modified-embed)
100 - sdl-mixer1.2 <unfixed> (embed)
101 TODO: report bug
102 - uqm 0.6.2.dfsg-8 (embed)
103 NOTE: Might be fixed earlier. Lenny version recorded.
104 - black-box 1.4.6-2.2 (embed)
105 NOTE: Might be fixed earlier. Lenny version recorded.
106
107 libiax
108 - iaxmodem <unfixable> (embed; bug #548885)
109
110 spandsp
111 - iaxmodem <unfixable> (embed; bug #548885)
112
113 python-paramiko
114 - fabric 0.9.0-2 (embed; bug #561398)
115
116 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
117 - dpkg 1.15.6 (static)
118 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
119 - rsync <unfixed> (embed)
120 - cherokee <unfixed> (embed)
121 NOTE: somehow derived code base
122 - mono <unfixed> (embed)
123 TODO: check mozilla
124 - linux-2.6 <unfixed> (embed)
125 - pvpgn 1.7.8-2 (embed)
126 - mrtg 2.12.2-1 (embed)
127 - rpm <unknown> (embed)
128 NOTE: pinged anibal since when rpm was fixed
129 - tuxcmd-modules <unfixed> (embed)
130 - zsync <unfixed>
131 - tra <unfixed>
132 - sash <unfixed>
133 - nsis <unfixed>
134 - pyfits 1:2.3.1-1
135 - mseide-msegui <unfixed>
136 NOTE: mseide
137 - mirrordir <unfixed>
138 - poco <unfixed>
139 - klibc <unfixed>
140 - emboss 6.3.1-1 (embed)
141 - ghostscript 8.71~dfsg2-6 (embed)
142 NOTE: ghostscript fixed sometime before this, but this is the version i checked
143 - freeimage <unfixed>
144 - clamav <unfixed> (fork)
145 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
146 - tuxonice-userui <unfixed> (static)
147 - plt-scheme <unfixed>
148 - perl <unfixed>
149 - paraview <unfixed>
150 - velvet 0.7.56~nozlibcopy-1
151 - gcvs <unfixed>
152 - dump <unfixed>
153 - aide <unfixed> (static)
154 - dar <unfixed> (static)
155 - avfs <unfixed>
156 - fpc <unfixed>
157 - winff <unfixed>
158 NOTE: inherited from fpc, see #472304
159 - lazarus <unfixed>
160 NOTE: inherited from fpc, see #472304
161 - erlang <unfixed> (embed)
162 - gamera 3.2.3-1 (embed)
163 - python2.4 <unfixed> (embed; bug #553403)
164 - python2.5 <unfixed> (embed; bug #553403)
165 - texlive-bin 2013.20130522.30620-1 (embed)
166 - sudo <unknown> (embed)
167 NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
168
169 dulwich
170 - hg-git 0.1.0-1 (embed; bug #541996)
171
172 libvigraimpex
173 - hugin <unfixed> (embed; bug #542259)
174 - enblend-enfuse <unfixed> (embed; bug #542258)
175 - gamera 3.2.3-1 (embed)
176
177 libbz2
178 - dpkg 1.15.6 (static)
179 - amd64-libs <unfixed> (static)
180 NOTE: let's call it "static"
181 - dar <unfixed> (static)
182 - dump <unfixed> (static)
183 - unalz 0.64-1 (embed)
184 NOTE: has code, by the maint, to use the system version but links against the internal copy
185 - clamav <unfixed> (embed)
186 NOTE: libclamav/nsis/bzlib*
187 - pristine-tar <unfixable> (modified-embed)
188 NOTE: compression code only, not uncompression
189 - r-base-core-ra 1.2.8 (static)
190 - r-base-core 2.11.1 (static)
191 NOTE: links dynamically in squeeze, statically in lenny
192 - rpm <unfixed> (static)
193 NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
194
195 libyahoo2
196 - centerim <unfixed> (embed; bug #559783)
197
198 libmsn
199 - centerim <unfixed> (embed; bug #559783)
200
201 libgadu
202 - centerim <unfixed> (embed; bug #559783)
203 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
204 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
205 - kdenetwork 4:3.3.2-5 (embed)
206 NOTE: from kdenetwork: kopete
207 - ekg 1:1.8~rc0-1 (embed)
208 - kadu 0.6.0.2-3 (embed; bug #504430)
209 - gadu <itp> (embed)
210
211 xmlrpc (which package is the "origin" of this code?)
212 - drupal <unfixed> (embed)
213 - phpgroupware <unfixed> (embed)
214 - egroupware <unfixed> (embed)
215 - phpwiki <unfixed> (embed)
216 - php4 <removed> (embed)
217 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
218
219 shtool (affects build-time only)
220 - mysql-ocaml <unfixed> (embed)
221 - php4 <removed> (embed)
222 - php5 <unfixed> (embed)
223
224 xulrunner
225 - iceape <unfixed> (embed; bug #561749)
226 - iceweasel 2.0.0.19 (embed)
227 - icedove <unfixed> (embed; bug #561750)
228 - kompozer <unfixed> (embed; bug #532168)
229 - galeon 2.0.2-4 (embed)
230 - epiphany-browser 2.14.3-8 (embed)
231 - conkeror 0.9~git080629-2 (embed)
232 - kazehakase 0.4.2-1 (embed)
233 - wine-gecko-unstable <unfixed> (embed; bug #669672)
234
235 xli
236 - xloadimage <unfixed> (embed)
237
238 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
239 - openmotif <unfixed> (embed)
240
241 libxpm
242 - lesstif2 <unfixed> (embed; bug #575750)
243 - ia32-libs <removed> (embed)
244
245 kerberized apps with BSD origin
246 - krb4 <removed> (embed)
247 - krb5 <unfixed> (embed)
248 - heimdal <unfixed> (embed)
249
250 grip (which pkg is the origin?)
251 - libcdaudio <unfixed>
252 - grip <unfixed>
253 - gnome-vfs <unfixed>
254 TODO: check vfs2 as well
255
256 fudforum
257 [etch] - phpgroupware <unfixed> (embed)
258 NOTE: phpgroupware-fudforum
259 [sarge] - egroupware-fudforum <removed> (embed)
260
261 libbsd
262 - rdate 1:1.2-3 (embed)
263 - atheme-services <unfixed>
264 - libbsd-arc4random-perl <not-affected> (modified-embed)
265 NOTE: code not used, it links dynamically against libbsd instead
266 - isakmpd <unfixed>
267 - bsdgames <unfixed> (embed)
268 - bsd-mailx <unfixed> (embed)
269 - netcat-openbsd <unfixed> (embed; bug #550611)
270 - openssh <unfixed> (embed)
271 - unworkable <unfixed> (embed)
272 - mksh <unfixed> (modified-embed)
273 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
274 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
275 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
276 - ia32-libs <removed> (embed)
277
278 cvs
279 - gcvs <unfixed> (embed)
280 NOTE: see cvsunix/src in tarball
281
282 pcre3
283 - php4 <removed> (embed)
284 - analog 2:5.23-0woody1 (embed)
285 - chicken 3.2.7-2 (embed)
286 NOTE: Might be fixed earlier. Lenny version recorded.
287 - goffice <unfixed> (embed)
288 NOTE: libgoffice-*
289 - hypermail 2.2.0.dfsg-2 (embed)
290 NOTE: Might be fixed earlier. Lenny version recorded.
291 - privoxy 3.0.9-1 (embed)
292 NOTE: Might be fixed earlier. Lenny version recorded.
293 - vfu 4.06-4.1 (embed; bug #450754)
294 - tf5 5.0beta7-1 (embed)
295 - monotone 0.43-1 (embed)
296 NOTE: this only affects versions >= 0.37
297 - glib2.0 2.15.2-1 (embed)
298 - apache2 2.0.53-4 (embed)
299 - exim4 4.10-0.srh20.12 (embed)
300 - yacas <unfixed> (embed)
301 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
302 - gtamsanalyzer.app 0.42-5 (embed)
303 - tin 980117-1 (embed)
304 - kazehakase 0.5.2-1
305 - webkit 1.0.1-1 (embed)
306 - qt4-x11 <unfixed> (embed)
307 NOTE: embedded via webkit copy
308 - erlang <unfixed> (embed)
309 - ssed <unfixed> (embed)
310 - ircd-hybrid <unfixed> (static)
311 - emboss <unfixed> (fork)
312 - cherokee <unfixed> (embed)
313 - oftc-hybrid 1.6.9.dfsg-1 (embed)
314 - ratbox-services <unfixed> (embed)
315 - squeak-vm <unfixed> (embed)
316 - tinymux <unfixed> (embed)
317 - mp4h <unfixed> (embed)
318
319 tiff
320 - wxwindows2.4 2.2.1 (embed)
321 - gamera 3.2.3-1 (embed)
322 - freeimage <unfixed> (embed)
323 - libtk-img <unfixed> (embed; bug #732147)
324 NOTE: there are two copies, one under tiff/ other under libtiff/
325 - gdal <unfixed>
326 - ia32-libs <removed> (embed)
327 - tiff3 <unfixable> (old-version)
328
329 uudeview
330 - libconvert-uulib-perl <unfixed> (embed)
331 - pan <unfixed> (embed)
332
333 sqlite
334 - amarok <unfixed> (embed)
335 - monotone 0.43-1 (embed)
336 - iceweasel <unfixed> (embed)
337 - heimdal <unfixed> (embed; bug #559616)
338
339 util-linux
340 - loop-aes-utils <unfixed> (embed)
341 NOTE: contains code from util-linux' mount in the mount-aes-udeb
342 - ia32-libs <removed> (embed)
343
344 sylpheed
345 - sylpheed-claws <unfixed> (fork)
346
347 phpsysinfo
348 - egroupware <unfixed> (embed)
349 - phpgroupware <unfixed> (embed)
350
351 phpldapadmin
352 [sarge] - egroupware <unfixed> (embed)
353 NOTE: removed from egroupware after sarge
354
355 chmlib
356 - kchmviewer <unknown> (embed)
357
358 ffmpeg (libavcodec/libavformat)
359 - mplayer 1.0~rc2-14 (embed; bug #395252)
360 - kino 1.0.0-1
361 - vlc <not-affected> (Links dynamically since initial release)
362 - smilutils 0.3.0-10
363 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
364 - motion 3.1.19-1
365 - gstreamer0.10-ffmpeg 0.10.3-2
366 - xmovie <removed> (static)
367 TODO: gimp-gap (potentially using ffmpeg code as well)
368 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
369 - audacity 1.3.7-2 (embed; bug #512278)
370 - chromium-browser <unfixed> (fork; bug #763632)
371 - libav <unfixed>
372
373 faad2
374 - mplayer 1.0~rc2-20 (embed)
375 - avifile <unfixed> (embed; bug #538750)
376 - ffmpeg-debian <removed> (embed)
377
378 libmad (MPEG decoding lib)
379 - xine-lib <unfixed> (embed)
380 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
381 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
382
383 libdts
384 - xine-lib <unfixed> (embed)
385
386 flac
387 - xine-lib <unfixed> (embed)
388 - ia32-libs <removed> (embed)
389
390 liba52
391 - a52dec <unfixed> (embed)
392 - xine-lib <unfixed> (embed)
393
394 mpeg2dec (libmpeg2)
395 - xine-lib <unfixed> (embed)
396
397 libmpeg3
398 - squeak-vm <unfixed> (embed)
399
400 libntlm
401 - wget <unfixed> (fork; bug #550436)
402 - curl <unfixed> (fork; bug #550437)
403 - cntlm <unfixed> (fork; bug #550438)
404
405 uw-imap
406 - pine <unfixed> (embed)
407 - alpine <unfixed> (embed)
408
409 imagemagick
410 - graphicsmagick <unfixed> (fork)
411
412 python-urlgrabber
413 - mercurial <unfixed> (embed; bug #531062)
414 - w3af <unfixed> (embed; bug #555372)
415 [experimental] - harvestman <unfixed> (embed; bug #555373)
416
417 beautifulsoup
418 - python-mechanize <unfixed> (embed; bug #555349)
419 - zope2.11 <removed> (embed; bug #555350)
420 - twill <unknown> (embed)
421
422 halibut
423 - nsis <unfixed> (fork)
424
425 libghttp
426 - hotway <unfixed> (embed)
427
428 libsndfile
429 - ardour 1:2.7.1-1 (embed)
430 - ia32-libs <removed> (embed)
431
432 glibmm2.4
433 - ardour 1:2.7.1-1 (embed)
434
435 libgnomecanvasmm2.6
436 - ardour 1:2.7.1-1 (embed)
437
438 libsigc++-2.0
439 - ardour 1:2.7.1-1 (embed)
440 - ia32-libs <removed> (embed)
441
442 soundtouch
443 - ardour 1:2.7.1-1 (embed)
444
445 libmms
446 - xine-lib <unfixed> (embed)
447 - mimms <unfixed> (embed)
448
449 ckeditor
450 - request-tracker4 <unfixed> (embed)
451
452 fckeditor
453 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
454 - moin 1.8.2-2 (embed; bug #452599)
455 - karrigell <removed> (embed; bug #452598)
456 - gforge 4.6.99+svn6225-1 (embed)
457 - request-tracker3.8 <unfixed> (embed)
458 - otrs2 <unfixed> (embed)
459
460 libphp-phpmailer
461 - moodle 2.5.1-1 (embed; bug #507185)
462 - mahara <unfixed> (embed)
463 - symfony <unfixed> (embed; bug #566778)
464 [etch] - phpgroupware <unfixed> (embed)
465 NOTE: phpgroupware-felamimail is only in etch
466 - egroupware <unfixed> (embed; bug #504283)
467 - glpi 0.80.7-2
468
469 giflib
470 - wine <unfixed> (fork; bug #466181)
471 NOTE: the embedded code is a fork of ungif, which is an older version of giflib
472
473 bennu (not packaged in Debian, http://bennu.sourceforge.net)
474 - moodle <unfixed> (embed)
475
476 smarty
477 - gallery2 2.2.5-2 (embed; bug #471160)
478 - mahara 0.9.2-2 (embed; bug #471201)
479 - gosa 2.4beta1-1 (embed; bug #471200)
480
481 TinyMCE
482 - wordpress 2.5.1-3 (embed; bug #478257)
483 - moodle <unfixed> (embed; bug #507185)
484 - knowledgeroot <unfixed> (embed)
485 - joomla <itp> (bug #326398)
486 - mahara 1.2.6-1 (embed; #597752)
487 - glpi 0.80.7-2
488
489 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
490 - scite <unfixed> (embed)
491 - qscintilla <unfixed> (embed)
492 - qscintilla2 <unfixed> (embed)
493 - geany <unfixed> (fork)
494 - anjuta <unfixed> (embed)
495 - sdlbasic <unfixed> (embed)
496
497 libphp-adodb
498 - moodle 2.5.1-1 (embed; bug #507185)
499 NOTE: also AdoDB-XML Schema
500 - gallery2 <unfixed> (embed)
501 - phppgadmin <unfixed> (embed)
502 - egroupware <unfixed> (embed)
503 - phpwiki <unfixed> (embed)
504 - torrentflux 2.0beta1-2 (embed)
505 - ipplan <unfixed> (embed)
506 - typo3-src <unfixed> (embed)
507 - cacti 0.8.6d-1 (embed)
508 [sarge] - cacti <unfixed> (embed)
509 NOTE: dependency exists, but internal version is used
510 - gforge 4.7~rc2-6 (embed)
511 - mahara <unfixed> (embed)
512
513 gzip
514 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
515 - klibc <unfixed> (embed)
516 NOTE: based on linux-kernel gzip code
517 - busybox <unfixed> (embed)
518 - pristine-tar <unfixed> (modified-embed)
519 NOTE: compression code only, not uncompression
520 - ncompress <unfixed> (old-version)
521
522 neon
523 - cadaver 0.22.3+debian-1 (embed; bug #188381)
524 - gnome-vfs2 <unfixed> (embed; bug #395874)
525 [etch] - litmus <unfixed> (embed; #395875)
526 - litmus <removed> (embed; #395875)
527 [sarge] - screem <unfixed> (embed)
528 - sitecopy 1:0.16.0-1 (embed; bug #395876)
529 [etch] - tla <unfixed> (embed; bug #395877)
530 [sarge] - tla <unfixed> (embed; bug #395877)
531
532 libmodplug
533 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
534
535 libvncserver
536 - vino <unfixed> (embed)
537 - krfb <unfixed> (embed)
538
539 putty
540 - filezilla <unfixed> (embed)
541
542 tinyxml
543 - filezilla <unfixed>
544 - crystalspace <unfixed> (embed)
545 - libwfut <unfixed> (embed)
546 - rarian <unfixed> (embed)
547 - bulletml <unfixed> (embed)
548 - pokerth <unfixed> (embed)
549 - qutecom <unfixed> (embed)
550 - sofa-framework <unfixed> (embed)
551 - yate <unfixed> (embed)
552 - antigrav <unfixed> (embed)
553 - balder2d <unfixed> (embed)
554 - cal3d <unfixed> (embed)
555 - criticalmass <unfixed> (embed)
556 - ember <unfixed> (embed)
557 - epiphany <unfixed> (embed)
558 - gambit <unfixed> (embed)
559 - noiz2sa <unfixed> (embed)
560 - ogre <unfixed> (embed)
561 - opencity <unfixed> (embed)
562 - openmovieeditor <unfixed> (embed)
563 - pouetchess <unfixed> (embed)
564 - tecnoballz <unfixed> (embed)
565 - trigger-rally <unfixed> (embed)
566 - xmoto <unfixed> (embed)
567 - mapnik <unknown> (embed)
568 NOTE: uses a different XML parser by default
569 - rrootage 0.23a-6 <embed>
570 NOTE: links to libbulltetml
571 - boson <unknown> (embed)
572 NOTE: the embedded code is unused
573 - cppcheck <unfixed> (embed)
574 NOTE: introduced in 1.47, will use system's version in 1.48
575 [squeeze] - cppcheck <not-affected>
576 - xye <unfixed> (embed; bug #758429)
577 NOTE: https://sourceforge.net/p/xye/bugs/7/
578
579 gv
580 - evince <unfixed> (embed)
581 NOTE: ps/ tree from gv 3.5.8
582 NOTE: evince-gtk is affected (a component of evince source package)
583
584 libXbae
585 - paw <unfixed> (embed)
586
587 libgtkhtml
588 - claws-mail-extra-plugins <unfixed> (fork)
589
590 libXaw
591 - paw <unfixed> (embed)
592 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
593 - ia32-libs <removed> (embed)
594
595 libgd2
596 - graphviz 2.16-1 (embed)
597 NOTE: lib/gd seems to be 2.0.33
598 - wml 2.0.11ds2-1 (embed)
599 - libwmf <unfixed> (embed)
600 NOTE: derived from gd 1.6.3, but only used to write images
601 - plt-scheme <unfixed> (embed; bug #601525)
602 - texlive-bin <unfixed> (embed)
603 [wheezy] - texlive-bin 2013.20130522.30620-1 (embed)
604 [squeeze] - texlive-bin 2013.20130522.30620-1 (embed)
605
606 rar
607 - unrar-nonfree <unfixed> (embed)
608
609 unrar-free (maybe this code is derived from the original rar, too?)
610 - clamav <unfixed> (embed)
611 NOTE: seems to be disabled in default config
612
613 mplayer (DirectMedia Object loader)
614 - xine-lib <unfixed> (embed)
615 NOTE: src/libw32dll/
616 - vlc <unfixed> (embed)
617 NOTE: modules/codec/dmo/
618 - mplayer 1.0~rc2-20 (embed)
619
620 libwpd (WordPerfect converter)
621 - openoffice.org <unfixed> (embed)
622
623 fsplib (http://sourceforge.net/projects/fsp/)
624 - gftp <unfixed> (embed)
625 NOTE: lib/fsplib version 0.3
626
627 sprng
628 - tree-puzzle <unfixed> (embed)
629
630 librpcsecgss
631 - krb5 <unfixed> (embed)
632
633 jasper
634 - ghostscript 8.64~dfsg-2 (embed)
635
636 libiris
637 - psi <unfixed> (embed)
638 - kdenetwork <unfixed> (embed)
639 NOTE: kopete embeds libiris but links dynamically to libidn
640 - kdegames <unfixed> (embed)
641 NOTE: ksirk/kde4
642
643 libidn
644 - monotone 0.43-1 (embed)
645 - psi <unfixed> (embed)
646 NOTE: psi embeds libiris which embeds libidn
647 - kdegames <unfixed> (embed)
648 NOTE: kdegames/kde4 embeds libiris which embeds libidn
649 - ia32-libs <removed> (embed)
650
651 lua5.1
652 - monotone 0.43-1 (embed)
653 - nmap 5.00-1 (embed; bug #527997)
654 [lenny] - nmap <unfixed> (embed; bug #527997)
655 - ocropus <unfixed> (embed)
656 - enigma <unfixed> (embed)
657 NOTE: requires lua built with C++
658 - freeciv 2.4.1-1 (embed)
659 NOTE: from 2.4.1-1 on freeciv uses system library instead
660 - spring <unfixed> (embed)
661
662 libbotan
663 - monotone 0.43-1 (embed)
664
665 NetXX
666 - monotone 0.43-1 (embed)
667
668 libgc
669 - mono <unfixed> (embed)
670
671 lzma
672 - p7zip <unfixed> (embed)
673 - xz-utils <unfixed> (fork)
674 - r-base <unfixed> (embed)
675 NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
676
677 lzo2
678 - ia32-libs <removed> (embed)
679 - busybox <unfixed> (embed)
680 - grub2 <unfixed> (embed)
681 - syslinux <unfixed> (modified-embed)
682 - valgrind <unfixed> (modified-embed)
683 - xen <unfixed> (embed)
684 - remmina <unfixed> (embed)
685 - blender <unfixed> (embed)
686 - x11vnc <unfixed> (embed)
687 - italc <unfixed> (embed)
688 - dump <unfixed> (embed)
689 - krfb <unfixed> (embed)
690 - nfdump <unfixed> (embed)
691 - kino <unfixed> (embed)
692 - samhain <unfixed> (embed)
693 - u-boot (modified-embed)
694 - icecc <unfixed> (embed)
695 - bb <unfixed> (embed)
696 - mednafen 0.8.D.3-4 (embed)
697 - ht <unfixed> (embed)
698 - n2n <unfixed> (embed)
699 NOTE: still not sure if all those embedded copies are actually used
700 NOTE: some packages actually use minilzo, which is not built by src:lzo2 and is only available as source in liblzo2-dev
701
702 lz4
703 - eet <unfixed> (embed)
704 - efl <unfixed> (embed)
705 - grub2 <unfixed> (embed)
706 - gtkwave <unfixed> (embed)
707 - iceweasel <unfixed> (embed)
708 - kfreebsd-9 <unfixed> (embed)
709 - kfreebsd-10 <unfixed> (embed)
710 - php-horde-lz4 <unfixed> (embed)
711 - pytables <unfixed> (embed)
712 - zfsutils <unfixed> (embed)
713
714 yassl
715 - mysql-5.1 <unfixed> (embed)
716 - mysql-5.5 <unfixed> (embed; bug #627207)
717
718 pax code
719 - tar <unfixed> (embed)
720 - cpio <unfixed> (embed)
721
722 t1lib
723 - tetex-bin 2.0.2-1 (embed)
724 - texlive-bin 2013.20130522.30620-1 (embed; bug #667912)
725 NOTE: used only in xdivk (a dvi file viewer that the maintainer refuses to drop)
726 - grace 5.1.14-2 (embed)
727 - evince <unfixed> (embed)
728 NOTE: at least parseafm code, maybe more?
729 - vftool <unfixed> (embed)
730 NOTE: just parseafm code it seems
731
732 guichan
733 - boswars <unfixed> (embed)
734 NOTE: maintainer notified us, working on it
735
736 tolua
737 - boswars <unfixed> (embed)
738 NOTE: maintainer notified us, working on it
739 NOTE: actually tolua++
740 - ocropus <unfixed> (embed)
741 NOTE: actually tolua++
742 - freeciv <unfixed> (embed)
743 NOTE: actually tolua++
744 - enigma <unfixed> (embed)
745
746 asio-dev
747 - luxrender <removed> (embed)
748
749 xine-lib
750 - vlc <unfixed> (embed)
751 NOTE: only parts included in modules/access/rtsp
752
753 netpbm
754 - tcl8.3 <unfixed> (embed)
755 - tcl8.4 <unfixed> (embed)
756 - tcl8.5 <unfixed> (embed)
757 NOTE: generic/tkImgGIF.c
758
759 tk8.5
760 - tk8.0 <removed> (old-version)
761 - tk8.3 <unfixed> (old-version)
762 - tk8.4 <unfixed> (old-version)
763 - perl-tk <unfixable> (fork)
764
765 samba
766 - mc 2:4.6.2~git20080311-1 (embed)
767 NOTE: maintainer is aware of this, currently searching a solution
768
769 plib1.8.4c2
770 - boson <unfixed> (fork)
771 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
772
773 fribidi
774 - quesoglc 0.7.2-2 (embed)
775
776 glew
777 - quesoglc <unfixed> (embed; bug #489341)
778 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
779 - trigger 0.5.2.1-2 (embed)
780 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
781 - trigger-rally 0.5.2.1-2 (embed)
782 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
783 - chromium-browser 5.0.375.70~r48679-2
784
785 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
786 - transcend <unfixed> (embed)
787 - cultivation <unfixed> (embed)
788 - passage <unfixed> (embed)
789 - gravitation <unfixed> (embed)
790
791 tar
792 - libarchive <unfixed> (embed)
793 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
794
795 cpio
796 - libarchive <unfixed> (embed)
797 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
798
799 kde4libs
800 - kdelibs <unfixable> (old-version)
801
802 webkit
803 - qt4-x11 <unfixed> (embed; bug #479851)
804 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
805 - kde4libs <unfixable> (fork)
806 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
807 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
808 - chromium-browser <unfixed> (fork)
809
810 ftgl
811 - blender 2.46+dfsg-1 (embed)
812 - vtk <unfixed> (embed)
813 - paraview <unfixed> (embed)
814 NOTE: as part of its copy of vtk
815 - tulip <unfixed> (embed)
816 NOTE: depends on -dev but string found on binary
817 - root-system <unknown> (embed)
818 NOTE: depends on -dev package; not confirmed at source
819 - rgl <unknown> (embed)
820 NOTE: not sure if it is built
821 - mysql-gui-tools <unknown> (embed)
822 NOTE: not sure if it is built
823 - k3d <unfixed> (embed)
824 - extremetuxracer <unknown> (embed)
825 NOTE: not sure if it is built
826 - critterding <unknown> (embed)
827 - lightspeed <unfixed>
828 NOTE: depends on -dev but string found on binary
829
830 wv
831 - abiword <unfixed>
832
833 wv2
834 - koffice <unfixed>
835 - calligra <unfixed>
836
837 qemu
838 - kvm <removed> (embed; bug #543159)
839 - qemu-kvm <unfixed> (embed; bug #560853)
840 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
841 - xen-3 3.4.2-2 (embed; bug #560856)
842 - xen-unstable <unfixed> (embed; bug #560856)
843
844 vgabios
845 - kvm <removed> (embed; bug #489442)
846 - qemu-kvm <unfixed> (embed)
847
848 bochs
849 - kvm <removed> (embed; bug #489442)
850 - qemu-kvm <unfixed> (embed)
851
852 speex
853 - vorbis-tools <unfixed> (embed)
854 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
855 - gst-plugins-good0.10 <unfixed> (embed)
856 - xine-lib <unfixed> (embed)
857 - libfishsound <unfixed> (embed)
858 - libannodex <removed> (embed)
859 - opal 3.4.2~dfsg-2 (embed)
860 - mumble 1.2.0~beta1-1 (embed)
861 - vlc <unfixed> (embed)
862 - xmms-speex <unfixed> (embed)
863 - libsdl-sound1.2 <unfixed> (embed)
864 - sweep <unfixed> (embed)
865
866 readline6
867 - magic <itp> (old-version)
868 - gdb 5.2.cvs20020401-1
869
870 opcode
871 - ode <unfixed> (embed)
872 NOTE: opcode is not a package in debian, it is just embedded
873 NOTE: http://www.codercorner.com/Opcode.htm
874
875 gimpact
876 - ode <unfixed> (embed)
877 NOTE: gimpact is not a package in debian, it is just embedded
878 NOTE: http://gimpact.sf.net
879
880 mochikit
881 - mahara <unfixed> (embed)
882 NOTE: they require extra patches, still unmerged upstream
883 - ntop <unfixed> (embed)
884 - coherence 0.6.2-1 (embed)
885 - paste <unfixed> (embed)
886 - turbogears <unfixed> (embed)
887 - plone3 <removed> (embed)
888 - xulrunner <unfixed> (embed)
889 - libjifty-plugin-chart-perl <unfixed> (embed)
890 - sabnzbdplus <unfixed> (embed)
891 - tgmochikit <unfixed> (embed)
892
893 prototypejs
894 - netbeans-ide 6.0.1+dfsg-2 (embed)
895 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
896 - webcit <unfixed> (embed; bug #555219)
897 - asterisk 1:1.6.2.0~rc3-1 (embed)
898 - libjson-ruby 1.1.4-1 (embed; bug #555224)
899 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
900 - horde3 <unfixed> (embed)
901 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
902 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
903 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
904 - ebug-http <unfixed> (embed; bug #555236)
905 - libaws 2.7-1 (embed; bug #555222)
906 - phpgedview <removed> (embed)
907 - poker-network 1.7.6-1 (embed; bug #555238)
908 - rails 2.1.0-6 (embed)
909 - wordpress 2.5.0-2 (embed; bug #555243)
910 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
911 TODO: search through all of the other zope packages
912 - ampache 3.4.1-2 (embed)
913 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
914 - hobix 0.5~svn20070319-4 (embed; bug #555247)
915 - zabbix 1.6.6-4 (embed; bug #555250)
916 - chora2 2.1.1+debian0-1 (embed; bug #555253)
917 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
918 - jscropperui 1.2.1-1 (embed; bug #555257)
919 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
920 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
921 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
922 - activeldap 1.2.1-1 (embed)
923 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
924 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
925 - otrs2 2.3.4-6 (embed; bug #555267)
926 - webcalendar 1.2~b1-2 (embed; bug #555269)
927 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
928 - jifty 0.90519-1 (embed; bug #555271)
929 - jquery 1.4-1 (embed; bug #555272)
930 - passenger 2.2.5debian1-1 (embed; bug #555273)
931 - plone3 <removed> (embed; bug #555275)
932 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
933 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
934 - xulrunner <unfixed> (embed)
935 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
936 - jclicmoodle <unfixed> (embed)
937 - git-cola <unfixed> (embed)
938
939 gdb
940 - insight <unfixed> (embed)
941
942 e2fsprogs
943 - ldiskfsprogs <unfixable> (fork)
944 - ia32-libs <removed> (embed)
945
946 quazip (not packaged in Debian)
947 - qcake <unfixed> (embed)
948 NOTE: starting with upstream version 0.6.4
949
950 exo
951 - pcmanfm <unfixed> (embed; bug #499677)
952 NOTE: slightly modified source code
953
954 xfce4-taskmanager
955 - lxtask <unfixed> (embed)
956 NOTE: old fork, maybe outdated
957
958 isync
959 - postler <unfixed> (embed; bug #628798)
960
961 java
962 - openjdk-6 <unfixed>
963 - sun-java5 <unfixed>
964 - sun-java6 <unfixed>
965
966 libphp-snoopy
967 - ampache 3.4.1-2 (embed; bug #504169)
968 - gforge 4.6.99+svn6094-2 (embed)
969 - mahara 1.0.5-2 (embed; bug #504170)
970 - pixelpost 1.7.1-5 (embed; bug #504171)
971 - mediamate 0.9.3.6-5 (embed; bug #504172)
972 - opendb <removed> (embed; bug #504173)
973 [etch] - opendb <unfixed> (embed; bug #504173)
974 - wordpress 2.5.1-9 (embed; bug #443948)
975 [etch] - phpgroupware <unfixed> (embed)
976 NOTE: phpgroupware-felamimail
977 - magpierss 0.72-3 (embed; bug #431089)
978
979 jquery
980 - jsonbot <unfixed> (embed; bug #625524)
981 - zekr <unfixed> (embed)
982 - wordpress <unknown> (embed)
983 - yocto-reader <unfixed> (embed)
984 - textpattern <unfixed> (embed)
985 - genshi 0.5.1-1 (embed)
986 NOTE: compressed file under examples/ dir
987 - prewikka <unfixed> (embed)
988 - libramaze-ruby <unfixed> (embed)
989 - drupal6 <unfixed> (embed)
990 - b2evolution <unfixed> (embed)
991 - wesnoth <unfixed> (embed)
992 - gammu 1.28.95-1 (embed)
993 - trac <unfixed> (embed; bug #645339)
994 - request-tracker4 <unfixed> (embed; bug #693821)
995 - otrs2 <unfixed> (embed)
996 NOTE: Embeds jquery 1.10
997 - cacti <unfixed> (embed)
998 NOTE: Embeds jquery 1.10.2
999
1000 jquery-goodies
1001 - horizon <unfixed> (embed)
1002 NOTE: jquery.cookie.js, jquery.table-sorter.js, jquery-ui.min.js
1003 - request-tracker4 <unfixed> (embed; bug #693821)
1004 NOTE: libjs-jquery-tablesorter
1005
1006 jqueryui
1007 - request-tracker4 <unfixed> (embed; bug #693821)
1008
1009 tablesorter (jquery plugin, not packaged yet)
1010 - wesnoth <unfixed> (embed)
1011
1012 kses
1013 - wordpress <unfixed> (embed; bug #504242)
1014 NOTE: their copy has all methods renamed to wp_<foo>
1015 NOTE: kses isn't in Debian, RFP: #504240
1016 - egroupware <unfixed> (embed)
1017
1018 magpierss
1019 - wordpress <unfixed> (embed; bug #504242)
1020
1021 php-gettext
1022 - wordpress 2.8.4-1 (embed; bug #504242)
1023 - docbookwiki <unfixed> (embed)
1024 - knowledgeroot 0.9.9.5-1
1025 NOTE: non-free
1026
1027 libphp-ixr (name may change, it is the Incutio XML-RPC)
1028 - wordpress <unfixed> (embed; bug #504242)
1029 NOTE: libphp-ixr isn't in Debian, RFP: #504236
1030 - dokuwiki <unfixed> (embed)
1031 - textpattern <unfixed> (embed)
1032
1033 libphp-cas
1034 - glpi 0.80.7-2 (embed)
1035 - moodle <unfixed> (embed; bug #505984)
1036
1037 scriptaculous (prototype.js is among the embeds in the following)
1038 - glpi <unfixed> (embed)
1039 - libaws <unfixed> (embed; bug #555222)
1040 - op-panel <unfixed> (embed)
1041 - symfony <unfixed> (embed)
1042 NOTE: maintainer says there are extra incompatible changes required
1043 - pixelpost 1.7.1-6 (embed)
1044 - webhelpers <unfixed> (embed)
1045 - qwik <removed> (embed; bug #555241)
1046 - smokeping <unfixed> (embed)
1047 - turba2 <unfixed> (embed)
1048 - typo3-src 4.2.3-1 (embed)
1049 - request-tracker3.6 <unfixed> (embed)
1050 - request-tracker3.8 <unfixed> (embed)
1051 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
1052 - wordpress 2.5.0-2 (embed)
1053 - libhtml-prototype-perl 1.48-3 (embed)
1054
1055 libmarkdown-php
1056 - pixelpost 1.7.1-6 (embed)
1057 NOTE: the markdown in Moodle is not the Markdown from this package
1058
1059 php-openid
1060 - wordpress-openid 3.3.2-1 (embed)
1061
1062 geshi
1063 - dokuwiki 0.0.20080505-3.1 (embed)
1064 - pgfouine 1.0-1.1 (embed)
1065 - websvn 2.1.0-1 (embed)
1066
1067 webcalendar
1068 - gforge 4.7~rc2-6 (embed; bug #504758)
1069
1070 libical
1071 - kdepim <unknown> (fork)
1072 NOTE: fixed at some point during 4.0
1073 - kdepimlibs 4.2.0-1 (fork)
1074 - claws-mail-extra-plugins <unfixed> (fork)
1075
1076 harfbuzz
1077 - qt4-x11 <unfixed> (embed)
1078 - pango1.0 1.36.0-1 (embed)
1079 - fontmatrix <unfixed> (embed)
1080
1081 libzip
1082 - php5 <unfixable> (modified-embed)
1083 - odt2txt <unfixed> (embed; bug #523808)
1084
1085 json.php (not packaged; should be replaced with php's built-in functions)
1086 - yui <unfixed>
1087 - gallery2 <unfixed>
1088 - dokuwiki <unfixed>
1089 - typo3-src <unfixed>
1090
1091 php-fpdf
1092 - tcpdf <itp> (fork)
1093 - phpwiki <unfixed>
1094 - egroupware <unfixed>
1095 - ldap-account-manager <unfixed> (fork)
1096
1097 tcpdf (itp: #495985)
1098 - moodle <unfixed>
1099 - phpmyadmin <unfixed>
1100 - collabtive <unfixed>
1101
1102 typo3
1103 - moodle <unfixed>
1104
1105 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1106 - moodle <unfixed>
1107 - gosa <unfixed>
1108
1109 php-ole (itp: #487558)
1110 - moodle <unfixed>
1111
1112 pieforms (http://www.catalyst.net.nz)
1113 - mahara <unfixed>
1114
1115 savant2 (http://phpsavant.com)
1116 - egroupware <unfixed>
1117
1118 rssparser (http://nwow.org)
1119 - egroupware <unfixed>
1120 - phpgroupware <unfixed>
1121
1122 lcms
1123 - openjdk-6 <unfixed> (fork)
1124 - gimp 2.4.0~rc2-2
1125 - ia32-libs <removed> (embed)
1126
1127 libphp-phplayersmenu
1128 - diogenes <unfixed>
1129 - phpldapadmin <unfixed>
1130
1131 libphp-pclzip
1132 - docvert <unfixed>
1133 - moodle 2.5.1-1
1134 - egroupware <unfixed>
1135
1136 libphp-simplepie
1137 - dokuwiki <unfixed>
1138 - wordpress <unfixed>
1139
1140 libphp-jpgraph
1141 - egroupware <unfixed>
1142
1143 libpng
1144 - doxygen 1.5.6-2 (embed)
1145 NOTE: Might be fixed earlier. Lenny version recorded.
1146 - gdal 1.5.2-3 (embed)
1147 NOTE: Might be fixed earlier. Lenny version recorded.
1148 - iceweasel <unfixed>
1149 NOTE: previous entry: - iceweasel <not-affected> (uses xulrunner)
1150 - icedove <unfixed>
1151 NOTE: previous entry: - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1152 - iceape 1.0.13~pre080614i-0etch1 (embed)
1153 - libfltk1.1 1.1.9-6 (embed)
1154 NOTE: Might be fixed earlier. Lenny version recorded.
1155 - libtk-img <unfixed> (embed; #732147)
1156 - htmldoc 1.8.27-3 (embed)
1157 NOTE: Might be fixed earlier. Lenny version recorded.
1158 - xulrunner 1.9.0.13-1 (embed)
1159 [lenny] - xulrunner 1.9.0.11-0lenny1
1160 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1161 - gamera 3.2.3-1 (embed)
1162 - freeimage <unfixed> (embed)
1163 - syslinux-common <unfixable> (embed)
1164 - tuxonice-userui <unfixed> (static)
1165 - texlive-bin <unfixed> (embed)
1166 [wheezy] - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1167 [squeeze] - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1168 NOTE: Might be fixed earlier. Lenny version recorded.
1169 - vice 1.22.dfsg1-0.1 (embed)
1170 NOTE: Might be fixed earlier. Lenny version recorded.
1171 - visualboyadvance 1.8.0-4 (embed)
1172 NOTE: Might be fixed earlier. Lenny version recorded.
1173 - ia32-libs <removed> (embed)
1174
1175 irssi
1176 - silc-client <unfixed> (embed)
1177 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1178
1179 extc
1180 - mtasc <unfixed> (embed)
1181 - haxe <unfixed> (embed)
1182
1183 swflib
1184 - mtasc <unfixed> (embed)
1185 - haxe <unfixed> (embed)
1186
1187 libitext-java
1188 - bouncycastle 2.1.4-1 (embed)
1189
1190 python-ply
1191 - pyke <unfixed> (embed; bug #555363)
1192 - pywbem 0.7.0-4 (embed; bug #555364)
1193 - sepolgen <unfixed> (embed; bug #555365)
1194 - zope-textindexng3 <unknown> (embed)
1195 - iceweasel <not-affected> (uses xulrunner)
1196 - xulrunner <unknown> (embed)
1197 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1198
1199 libdumbnet (libdnet upstream)
1200 - nmap <unfixed> (fork)
1201
1202 gcc-4.4
1203 - gcc-mingw32 <unfixed> (embed)
1204
1205 camlimages
1206 - advi <unfixed> (static; bug #550441)
1207
1208 memcached
1209 - memcachedb <unfixed> (embed)
1210
1211 yajl
1212 - argyll <unfixed> (embed; bug #544223)
1213 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1214 - lnav <unfixed> (embed; bug #724693)
1215
1216 nusoap
1217 - gforge 4.8.2-1 (embed)
1218 - ampache <unfixed> (embed)
1219 - poker-network <unfixed> (embed)
1220 - phpwiki <unfixed> (embed)
1221 - gallery2 <unfixed> (embed)
1222 - typo3-src <unfixed> (embed)
1223 - phpgacl 3.3.7-7 (embed)
1224 - mantis 1.1.8+dfsg-1 (embed)
1225
1226 libept
1227 - adept <unfixed> (embed; bug #540649)
1228
1229 libvorbis
1230 - iceweasel <not-affected> (uses xulrunner)
1231 - xulrunner <unfixed> (embed; bug #540959)
1232 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1233 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1234 - iceape <unfixed> (embed)
1235 [etch] - iceape <not-affected> (introduced in 2.0)
1236 [lenny] - iceape <not-affected> (introduced in 2.0)
1237 - ia32-libs <removed> (embed)
1238 - libvorbisidec <unfixed> (modified-embed)
1239
1240 cairo
1241 - iceweasel <not-affected> (uses xulrunner)
1242 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1243 - texlive-bin <unfixed> (embed)
1244
1245 liboggz
1246 - iceweasel <not-affected> (uses xulrunner)
1247 - xulrunner <unfixed> (embed; bug #540959)
1248 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1249 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1250 - iceape <unfixed> (embed)
1251 [etch] - iceape <not-affected> (introduced in 2.0)
1252 [lenny] - iceape <not-affected> (introduced in 2.0)
1253
1254 liboggplay
1255 - iceweasel <not-affected> (uses xulrunner)
1256 - xulrunner <unfixed> (embed; bug #540959)
1257 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1258 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1259 - iceape <unfixed> (embed)
1260 [etch] - iceape <not-affected> (introduced in 2.0)
1261 [lenny] - iceape <not-affected> (introduced in 2.0)
1262
1263 php-net-dnsbl
1264 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1265
1266 php-onyx-rss
1267 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1268
1269 php-text-wiki
1270 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1271
1272 php-xml-rpc
1273 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1274
1275 polarssl (does not have a shared library)
1276 - pdkim <itp> (embed; bug #543150)
1277 - xyssl <unfixed> (old-version)
1278
1279 pidgin (libpurple)
1280 - gaim <removed> (old-version)
1281 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1282 - wengophone <unfixed> (embed; bug #601425)
1283
1284 icu
1285 - webkit 1.0.1-1 (embed; bug #547214)
1286 - texlive-bin 2013.20130522.30620-1 (fork)
1287 NOTE: texlive upstream working with icu upstream to merge their changes
1288 - chromium-browser 5.0.375.29~r46008-3
1289
1290 cyrus-imapd-2.2
1291 - kolab-cyrus-imapd <unfixed> (fork)
1292 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1293
1294 python-cxx-dev
1295 - freecad 0.9.2646.3-1 (embed; bug #547936)
1296
1297 zipios++
1298 - freecad 0.9.2646.3-1 (embed; bug #547941)
1299 - enigma 0.92.3-3 (embed)
1300 NOTE: likely fixed earlier, marking etch's version as fixed
1301
1302 linux-2.6
1303 - kvm <removed> (embed; bug #549973) [./kernel/*]
1304 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1305 - kernel-source-2.6.8 <removed> (old-version)
1306 - kernel-source-2.4.27 <removed> (old-version)
1307 - kernel-source-2.4.24 <removed> (old-version)
1308 - kernel-source-2.2.25 <removed> (old-version)
1309 - kernel-source-2.2.20 <removed> (old-version)
1310
1311 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1312 - kvm <removed> (embed) [./libfdt/*]
1313 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1314
1315 qweb (not packaged)
1316 - ajaxterm <unfixed>
1317
1318 opensaml2
1319 - opensaml <removed> (old-version)
1320
1321 shibboleth-sp2
1322 - shibboleth-sp <removed> (old-version)
1323
1324 tuxonice-userui
1325 - suspend2-userui <removed> (old-version)
1326
1327 expat
1328 - w3c-libwww <removed> (embed; bug #551941)
1329 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1330 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1331 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1332 - python2.4 <unfixable> (embed; bug #553403)
1333 - python2.6 2.6.6-4 (embed)
1334 - python2.7 2.7-6 (embed)
1335 - mcabber 0.10.0-1 (low; bug #601053)
1336 - python-4suite <unfixed> (embed; bug #516935)
1337 - wxwindows2.4 <removed> (embed)
1338 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1339 - wxwidgets2.8 2.8.10.1-2 (embed)
1340 - albert <unfixed> (embed; bug #600974)
1341 - celementtree 1.0.5-8 (embed)
1342 NOTE: Maybe that was fixed even earlier
1343 - centerim <unfixed> (embed; bug #559783)
1344 - audacity 1.3.2-1 (embed)
1345 - matanza <unfixed> (embed)
1346 - tdom 0.8.3~20080525-1 (embed)
1347 - udunits 2.1.8-4 (embed)
1348 - apr-util 1.2 (embed)
1349 - ayttm <unfxed> (embed; bug #561006)
1350 - cableswig <unfixed> (embed)
1351 - cadaver <unfixed> (embed)
1352 - cmake 2.6.0-6 (embed)
1353 - coin3 <unfixed> (embed)
1354 - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1355 NOTE: Might be fixed earlier. Lenny version recorded.
1356 - dasher 4.7.3-1 (embed)
1357 NOTE: Might be fixed earlier. Lenny version recorded.
1358 - emboss 6.3.1-1 (embed)
1359 - gdcm 2.0.14-2 (embed)
1360 - ghostscript 8.71~dfsg-2 (embed)
1361 - grmonitor <removed> (embed)
1362 - iceape <unfixed> (embed)
1363 - insighttoolkit 3.16.0-1 (embed)
1364 NOTE: insighttoolkit might've been fixed earlier
1365 - jabber 1.4.3-3.4 (embed)
1366 NOTE: Might be fixed earlier. Lenny version recorded.
1367 - libparagui1.1 1.0.2-1 (embed)
1368 - libspiff1 0.8.3-1 (embed)
1369 NOTE: Might be fixed earlier. Lenny version recorded.
1370 - paraview 3.6.2-1 (embed)
1371 - poco 1.3.6p1-1 (embed)
1372 - scorched3d 41.3dfsg-1+b1 (embed)
1373 NOTE: Might be fixed earlier. Lenny version recorded.
1374 - simgear <unfixed> (embed)
1375 - sitecopy 1:0.16.0-1
1376 - smart <unfixed> (embed)
1377 NOTE: smart embeds celementree, and it includes expat
1378 - swish-e <not-affected> (Linked against libxml, which is used instead)
1379 - tla 1.3.5+dfsg-15 (embed)
1380 - vtk 4.1.20030227-1 (embed)
1381 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1382 - xmlrpc-c <unfixed> (embed)
1383 - iceweasel <unfixed> (embed)
1384 - kompozer <unfixed> (embed)
1385 - vxl 1.13.0-2 (embed)
1386 - xulrunner <unfixed> (embed)
1387 - xmame 0.106-2.1 (embed)
1388 NOTE: Might be fixed earlier. Lenny version recorded.
1389 - apache2 2.2 (embed)
1390 - texlive-bin <not-affected> (Embedded code not compiled in)
1391 - vnc4 <unfixed> (embed)
1392 - xotcl 1.6.6-1 (embed)
1393 - chromium-browser 5.0.375.29~r46008-3
1394 - ia32-libs <removed> (embed)
1395
1396 xerces-c
1397 - xerces-c2 <unfixed> (old-version)
1398 - xerces27 <removed> (old-version)
1399
1400 md5 (RSA's version; not the gnu version provided by coreutils)
1401 - w3c-libwww <removed> (embed; bug #551942)
1402 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1403
1404 libparagui1.1
1405 - asc <unfixable> (fork)
1406
1407 enet
1408 - sauerbraten <unfixed> (embed; #497194)
1409
1410 eglibc
1411 - glibc <removed> (old-version)
1412 - mksh <unfixable> (static)
1413 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1414
1415 galib
1416 - gamera 3.2.3-1 (embed)
1417
1418 configobj
1419 - bzr <unfixed> (embed; bug #555336)
1420 - elisa <unfixed> (embed; bug #555337)
1421 - gaupol <unfixed> (embed; bug #555338)
1422 - ipython <unfixed> (embed; bug #555339)
1423 - pida <unfixed> (embed; bug #555340)
1424 - psychopy <unfixed> (embed; bug #555341)
1425 - rest2web <unfixed> (embed; bug #555342)
1426 - auth2db <unknown> (embed)
1427 - dynagen <unknown> (embed)
1428 - iceweasel <unknown> (embed)
1429 - sabnzbdplus <unknown> (embed)
1430 - xulrunner <unknown> (embed)
1431 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1432
1433 python-clientform
1434 - bibus <unfixed> (embed; bug #555332)
1435 - zope2.10 <removed> (embed; bug #555333)
1436 - zope2.11 <removed> (embed; bug #555334)
1437 - python-mechanize <unknown> (embed)
1438 - twill <unknown> (embed)
1439
1440 python-mechanize
1441 - zope2.10 <removed> (embed; bug #555357)
1442 - zope2.11 <removed> (embed; bug #555358)
1443 - twill <unknown> (embed; bug #555339)
1444
1445 pexpect
1446 - duplicity 0.6.06-1 (embed; bug #555359)
1447 - hplip <unfixed> (embed; bug #555361)
1448 - smart <unfixed> (embed; bug #555362)
1449
1450 pyparsing
1451 - bauble <unfixed> (embed; bug #555366)
1452 - boa-constructor 0.6.1-8 (embed; bug #555367)
1453 - calibre <unfixed> (embed; bug #555368)
1454 - matplotlib 1.3.0-1 (embed; bug #531024; bug #555369)
1455 - zhpy 1.7.3.1-1 (embed; bug #555370)
1456 - polybori <unknown> (embed)
1457 - python-whoosh <unknown> (embed)
1458 - twill <unknown> (embed)
1459 - zope-textindexng3 <unknown> (embed)
1460
1461 python-pysqlite2
1462 - python2.4 <unfixed> (embed; bug #553403)
1463 - python2.5 <unfixed> (embed; bug #553403)
1464
1465 celementtree
1466 - python2.5 <unfixed> (embed)
1467 - smart <unfixed> (embed)
1468
1469 elementtree
1470 - python2.5 <unfixed> (embed)
1471 - python2.6 <unfixed> (embed)
1472 - bzr <unfixed> (embed; bug #555343)
1473 - gedit 2.28.2-1 (embed; bug #555344)
1474 - smart <unfixed> (embed)
1475 - solfege <unfixed> (embed; bug #555345)
1476 - w3af <unfixed> (embed; bug #555346)
1477 - python-qt4 <unknown> (embed)
1478 - sphinx <unknown> (embed)
1479 - python-nltk <itp> (embed)
1480
1481 python2.5
1482 - python2.4 <unfixed> (old-version)
1483 - jython <unfixed> (embed)
1484 NOTE: embeds many stdlib modules
1485 - python-django <unfixed> (embed; bug #555419)
1486 NOTE: embeds stdlib modules: doctest, decimal
1487 - gamera 3.2.3-1 (embed)
1488 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1489 - boa-constructor <unfixed> (embed; bug #555426)
1490 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1491 - nicotine <unfixed> (embed; bug #555427)
1492 NOTE: embeds stdlib modules: ConfigParser
1493 - museek+ <unfixed> (embed; bug #555428)
1494 NOTE: embeds stdlib modules: ConfigParser
1495 - vegastrike-data <removed> (embed)
1496 NOTE: embeds many stdlib modules
1497 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1498 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1499 - config-manager <unfixed> (embed; bug #555423)
1500 NOTE: embeds stdlib modules: optparse
1501 - jhbuild 2.28.0-1 (embed; bug #555421)
1502 NOTE: embeds stdlib modules: optparse, subprocess
1503 - smart <unfixed> (embed; bug #555432)
1504 NOTE: embeds stdlib modules: optparse
1505 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1506 NOTE: embeds stdlib modules: doctest
1507 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1508 NOTE: embeds stdlib modules: doctest
1509 - distribute <unfixed> (embed)
1510 NOTE: embeds stdlib modules: doctest
1511 - python-setuptools <unfixed> (embed; bug #555435)
1512 NOTE: embeds stdlib modules: doctest
1513 - zope.testing <unfixed> (embed; bug #555436)
1514 NOTE: embeds stdlib modules: doctest
1515 - translate-toolkit <unfixed> (embed; bug #555422)
1516 NOTE: embeds stdlib modules: textwrap, contextlib
1517 - libtpclient-py <unfixed> (embed; bug #555424)
1518 NOTE: embeds stdlib modules: subprocess
1519 - grass <unfixed> (embed; bug #555425)
1520 NOTE: embeds stdlib modules: subprocess
1521 - coherence <unfixed> (embed; bug #555429)
1522 NOTE: embeds stdlib modules: uuid
1523 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1524 NOTE: embeds stdlib modules: uuid
1525 - setroubleshoot <removed> (embed; bug #555431)
1526 NOTE: embeds stdlib modules: uuid
1527 - linkchecker <unfixed> (embed; bug #555414)
1528 NOTE: embeds msgfmt.py script
1529 - imdbpy <unfixed> (embed)
1530 NOTE: embeds msgfmt.py script
1531 - kiwi <unfixed> (embed)
1532 NOTE: embeds msgfmt.py script
1533 - moin <unfixed> (embed)
1534 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1535 - plone3 <removed> (embed)
1536 NOTE: embeds msgfmt.py script
1537 - roundup <unfixed> (embed)
1538 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1539 - rednotebook <unfixed> (embed; bug #555415)
1540 NOTE: embeds msgfmt.py script
1541 - turbogears <unfixed> (embed)
1542 NOTE: embeds msgfmt.py script
1543 - elisa <unfixed> (embed)
1544 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1545 - calibre <unfixed> (embed)
1546 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1547 - mailman 1:2.1.13-1 (embed; #555416)
1548 NOTE: embeds msgfmt.py script
1549 - python-docutils <unknown> (embed)
1550 NOTE: embeds stdlib modules: optparse, textwrap
1551 - python-imaging <unknown> (embed)
1552 NOTE: embeds stdlib modules: doctest
1553 - python-mechanize <unknown> (embed)
1554 NOTE: embeds stdlib modules: doctest
1555 - twill <unknown> (embed)
1556 NOTE: embeds stdlib modules: subprocess
1557 - zeroc-ice <unknown> (embed)
1558 NOTE: embeds stdlib modules: subprocess
1559 - wxwidgets2.8 <unknown> (embed)
1560 NOTE: embeds stdlib modules: subprocess
1561 - cycle <unknown> (embed)
1562 NOTE: embeds msgfmt.py script
1563 - deluge <unknown> (embed)
1564 NOTE: embeds msgfmt.py script
1565 - opendict <unknown> (embed)
1566 NOTE: embeds msgfmt.py script
1567 - openerp-client <unknown> (embed)
1568 NOTE: embeds msgfmt.py script
1569 - rapidsvn <unknown> (embed)
1570 NOTE: embeds msgfmt.py script
1571 - wammu <unknown> (embed)
1572 NOTE: embeds msgfmt.py script
1573 - gaphor <unknown> (embed)
1574 NOTE: embeds msgfmt.py script
1575 - pida <unknown> (embed)
1576 NOTE: embeds msgfmt.py script
1577 - python-formencode <unknown> (embed)
1578 NOTE: embeds msgfmt.py script
1579 - duplicity <unfixed> (embed)
1580 NOTE: embeds stdlib module: urlparse, tarfile
1581 - pygopherd <unfixed> (embed)
1582 NOTE: embeds stdlib module: zipfile
1583 - sphinx <unfixed> (embed; bug #609485)
1584 NOTE: embeds only lib2to3.pgen2 in sphinx.pycode.pygen2
1585 - vegastrike-data <removed> (embed; bug #555630)
1586
1587 argparse
1588 - twill <unfixed> (embed; bug #555347)
1589 - ipython <unfixed> (embed; bug #555348)
1590
1591 coherence
1592 - elisa <unfixed> (embed; bug #555335)
1593
1594 simpletal
1595 - plastex <unfixed> (embed; bug #555371)
1596
1597 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1598 - postr <unfixed> (embed)
1599 - elisa <unfixed> (embed)
1600
1601 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1602 - apertium-tolk <unfixed> (embed)
1603 - ipython <unfixed> (embed)
1604 - virtaal <unfixed> (embed)
1605
1606 distribute
1607 - setuptools <removed> (old-version)
1608
1609 rails
1610 - jruby1.2 <removed> (embed) [./bench/rails/*]
1611 NOTE: jruby is in non-free, it probably includes rails too
1612 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1613 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1614 - thin <unfixed> (embed) [./spec/rails_app/*]
1615 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1616 NOTE: be dangerous if developers are naively basing their code off of the examples
1617 NOTE: prototype.js is among the example files
1618
1619 lucene2 (prototype.js is among the embeds in the following)
1620 - lucene <unfixed> (old-version)
1621 - pylucene <unfixed> (embed)
1622 - libpdfbox-java <unfixed> (embed)
1623 - libfontbox-java <unfixed> (embed)
1624 - libjempbox-java <unfixed> (embed)
1625 - solr <unfixed> (embed)
1626
1627 unicode-data
1628 - syslinux <unfixed> (embed)
1629 - camomile <unfixed> (embed)
1630 - chromium-browser <unfixed> (embed)
1631 - cyrus-imapd-2.4 <unfixed> (embed)
1632 - dovecot <unfixed> (embed)
1633 - emacs24 <unfixed> (embed)
1634 - fribidi <unfixed> (embed)
1635 - m17n-db <unfixed> (embed)
1636 - sbcl <unfixed> (embed)
1637 - grub2 <unfixed> (embed)
1638 - haskell-hxt-charproperties <unfixed> (embed)
1639 - heimdal <unfixed> (embed)
1640 - icu <unfixed> (embed)
1641 - icu4j-4.4 <unfixed> (embed)
1642 - icu4j <unfixed> (embed)
1643 - icedove <unfixed> (embed)
1644 - iceweasel <unfixed> (embed)
1645 - ikarus <unfixed> (embed)
1646 - jython <unfixed> (embed)
1647 - krb5 <unfixed> (embed)
1648 - moodle <unfixed> (embed)
1649 - mozc <unfixed> (embed)
1650 - mozjs17 <unfixed> (embed)
1651 - mozjs24 <unfixed> (embed)
1652 - openldap <unfixed> (embed)
1653 - openocd <unfixed> (embed)
1654 - perl <unfixed> (embed)
1655 - pike7.6 <removed> (embed)
1656 - pike7.8 <unfixed> (embed)
1657 - qtbase-opensource-src <unfixed> (embed)
1658 - samba <unfixed> (embed)
1659 - samba4 <unfixed> (embed)
1660 - cmucl <unfixed> (embed)
1661 - typo3-src <unfixed> (embed)
1662 - mauve <unfixed> (embed)
1663 - texlive-bin <unfixed> (embed)
1664 - ypsilon <removed> (embed)
1665 - jeuclid <unfixed> (embed)
1666 - charmap.app <unfixed> (embed)
1667 - clisp <unfixed> (embed)
1668 - gnulib <unfixed> (embed)
1669 - opensrs-client <unfixed> (embed)
1670 - saxonb <unfixed> (embed)
1671 - rails <unfixed> (embed)
1672 - scheme48 <unfixed> (embed)
1673 - slang2 <unfixed> (embed)
1674 - sqlcipher <unfixed> (embed)
1675 - sqlite3 <unfixed> (embed)
1676 - unorm.js <unfixed> (embed)
1677 - wine-gecko-2.21 <unfixed> (embed)
1678 - wine-gecko-2.24 <unfixed> (embed)
1679 - xapian-core <unfixed> (embed)
1680 - boost1.49 <unfixed> (embed)
1681 - boost1.54 <unfixed> (embed; bug #751880)
1682 - boost1.55 <unfixed> (embed; bug #751881)
1683
1684 feedparser
1685 - rawdog 2.19-1 (embed; bug #383422)
1686 [wheezy] - rawdog <unfixed> (modified-embed)
1687 - miro <unfixed> (embed; bug #555351)
1688 - calibre <unfixed> (embed; bug #555352)
1689 - freevo <unfixed> (embed; bug #555353)
1690 - pida <unfixed> (embed; bug #555354)
1691 - planet-venus <unfixed> (embed; bug #555355)
1692 - plone3 <removed> (embed; bug #555356)
1693 - exaile 0.2.14+debian-1 (embed)
1694 - screenlets 0.1.2-3 (embed)
1695 NOTE: included twice
1696
1697 agg:
1698 - matplotlib <unfixed> (embed: bug #377271)
1699 - contextfree <unfixed> (embed)
1700 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1701 - exactimage <unfixed> (embed)
1702 - python-enable <unfixed> (embed)
1703 - mapnik 0.5.1-3 (embed)
1704 NOTE: links statically to agg, but shared library is not available (bug #377271)
1705
1706 vtk
1707 - paraview <unfixable> (embed; bug #495426)
1708 - libmesh <unfixed>
1709 NOTE: embeds exodus; not sure if there's a version external to vtk
1710
1711 txt2tags
1712 - rednotebook <unfixed> (embed)
1713
1714 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1715 - gajim <unfixed> (embed)
1716 - emesene <unfixed> (embed)
1717 - convirt <unfixed> (embed)
1718 - pida <unfixed> (embed)
1719 - rednotebook <unfixed> (embed)
1720
1721 horde3 (prototype.js is among the embeds in the following)
1722 - mnemo2 <unfixed> (embed)
1723 - nag2 <unfixed> (embed)
1724 - wordpress <unfixed> (embed)
1725 NOTE: Text_Diff (wp-includes/Text/Diff*)
1726
1727 cimg
1728 - gmic <unfixed> (embed)
1729
1730 mootools
1731 - kdenetwork <unfixed> (embed)
1732 - gallery <unfixed> (embed)
1733 - jspwiki <unfixed> (embed)
1734 - vdr-plugin-live <unfixed> (embed)
1735 - perl-doc-html <unfixed> (embed)
1736
1737 openldap
1738 - openldap2.3 <removed> (old-version)
1739 - ia32-libs <removed> (embed)
1740
1741 grub2
1742 - grub <unfixed> (old-version)
1743
1744 gnupginterface
1745 - duplicity <unfixed> (embed)
1746
1747 python-dateutil
1748 - awn-extras-applets <unfixed> (embed)
1749 - matplotlib <unknown> (embed)
1750
1751 cups
1752 - cupsys <removed> (old-version)
1753 - ia32-libs <removed> (embed)
1754
1755 yui
1756 - bcfg2 <not-affected> (present in source but not included in any binary files)
1757 - serendipity 1.5.3-1 (embed; bug #557746)
1758 - moodle <unfixed> (embed)
1759 - jifty 0.91117-1 (embed; bug #557748)
1760 - webgui 7.7.26-1 (embed)
1761 - loggerhead 1.17-1 (embed)
1762 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1763
1764 quake3 (vanilla source not packaged in debian)
1765 - openarena <unfixable> (fork)
1766
1767 quake2 (vanilla source not packaged in debian)
1768 - alien-arena <unfixable> (fork)
1769 - warsow <unfixable> (fork)
1770
1771 quake (vanilla source not packaged in debian)
1772 - darkplaces <unfixable> (fork)
1773 - quakespasm <unfixable> (fork)
1774 - nexuiz 2.5.2+dp-1 (old-version)
1775 NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1776
1777 libtheora
1778 - iceweasel <not-affected> (uses xulrunner)
1779 - xulrunner <unfixed> (embed; bug #540959)
1780 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1781 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1782 - iceape <unfixed> (embed; bug #559276)
1783 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1784 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1785
1786 dtoa
1787 - bfilter <unfixed> (embed)
1788 - cacao <removed> (embed)
1789 - cdrdao <unfixed> (embed)
1790 - classpath <unfixed> (embed)
1791 - freej <unfixed> (embed)
1792 - iceape <unfixed> (embed)
1793 - iceweasel <unfixed> (embed)
1794 - jscoverage <unfixed> (embed)
1795 - kde4libs <unfixed> (embed)
1796 - kdelibs <unfixed> (embed)
1797 - kompozer <unfixed> (embed)
1798 - libv8 <unfixed> (embed)
1799 - mono <unfixed> (embed)
1800 - newlib <unfixed> (embed)
1801 - nspr <unfixed> (embed)
1802 - php5 <unfixed> (embed)
1803 - polyml <unfixed> (embed)
1804 - qt4-x11 <unfixed> (embed)
1805 - rhino <unfixed> (embed)
1806 NOTE: code translated to Java
1807 - ruby1.8 <removed> (embed)
1808 - ruby1.9 <unfixed> (embed)
1809 - ruby1.9.1 <removed> (embed)
1810 - sdd <unfixed> (embed)
1811 - sfind <unfixed> (embed)
1812 - star <unfixed> (embed)
1813 - tinymux <unfixed> (embed)
1814 - virtualbox-ose <unfixed> (embed)
1815 - webkit <unfixed> (embed)
1816 - xulrunner <unfixed> (embed)
1817
1818 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1819 - firegpg <unfixed> (embed)
1820 - enigmail <unfixed> (embed)
1821
1822 ptmalloc (not packaged in Debian)
1823 - crystalspace <unfixed> (embed)
1824 - qt4-x11 <unfixed> (embed)
1825
1826 svgalib
1827 - usplash <unfixed> (embed)
1828 - ia32-libs <removed> (embed)
1829
1830 bogl
1831 - usplash <unfixed> (embed)
1832
1833 taglist
1834 - usplash <unfixed> (embed)
1835
1836 portaudio
1837 - audacity <unfixed> (embed; bug #323711)
1838
1839 nyquist
1840 - audacity <unfixed> (embed)
1841 NOTE: embeds a forked nyquist with support for a shared library
1842
1843 vamp-plugin-sdk
1844 - audacity <unfixed> (embed)
1845
1846 wordpress
1847 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1848 - wordpress-mu <removed> (fork)
1849
1850 php5
1851 - php4 <removed> (old-version)
1852
1853 classpath
1854 - libgnucrypto-java <removed> (embed; bug #559788)
1855
1856 libtool
1857 - apr <unfixed> (static; bug #489625)
1858 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1859 - arts <unfixed> (embed)
1860 - bochs 2.4.2-1 (embed; bug #560884)
1861 - camserv <unfixed> (embed)
1862 - collectd 4.8.2-1 (embed)
1863 - courier-authlib 0.58-4 (embed)
1864 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1865 - cvsnt 2.5.04.3236-1.2 (embed)
1866 - dico <not-affected> (Uses the system copy of ltdl)
1867 - freeradius 0.1+20010527-1 (embed)
1868 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1869 - ggobi 2.1.9~20091212-1 (embed)
1870 - glame 2.0.1-4 (embed)
1871 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1872 - gnash 0.8.7-2 (embed)
1873 - gnu-smalltalk <unfixed> (embed; bug #566777)
1874 - google-gadgets 0.10.5-0.3 (embed)
1875 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1876 - graphicsmagick 1.3.5-6 (embed)
1877 - graphviz 2.8-3 (embed)
1878 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1879 - guile-1.6 1.6.8-7 (embed)
1880 - hamlib 1.2.11-1 (embed)
1881 - hercules 3.06-1.2 (embed)
1882 - jags 1.0.4-3 (embed; bug #560864)
1883 - kdelibs <unfixed> (embed)
1884 - libannodex <removed> (embed)
1885 - libextractor 0.5.23+dfsg-4 (embed)
1886 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1887 - libtunepimp 0.5.3-7.3 (embed)
1888 - mp4h 1.3.1-4.1 (Contains source code, but is compiled with --without-included-ltdl)
1889 - naim <removed> (embed)
1890 - parser-mysql <unfixed> (embed)
1891 - pinball 0.3.1-11 (embed)
1892 - redland <unfixed> (embed)
1893 - siproxd 1:0.8.1-2 (embed; bug #657070)
1894 - ski <unfixed> (embed)
1895 - synfig 0.62.00-1 (embed)
1896 - unixodbc 2.2.4-5 (embed)
1897 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1898 - clamav 0.95+dfsg-1 (embed)
1899 - imagemagick 6:6.2.3.1-1 (embed)
1900 - hypre 2.4.0b-5 (embed)
1901 - lam <unfixed> (embed)
1902 - openmpi <unfixable> (embed; bug #559386)
1903 - parser <unfixed> (embed)
1904 - pdsh 2.18-5 (embed; bug #560892)
1905 - sbnc 1.2-8 (embed)
1906 - sdcc <unfixed> (embed)
1907 - wml 2.0.11ds2-1 (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1908 - proftpd-dfsg <unfixed> (embed; bug #561748)
1909 - babel 1.4.0.dfsg-5 (embed)
1910 - libprelude 0.9.14-2 (embed)
1911 - heartbeat 2.1.4-7 (embed)
1912 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1913 NOTE: might've been fixed earlier
1914 - gcc-* <unknown> (embed)
1915 - ia32-libs <removed> (embed)
1916
1917 ocamlgsl
1918 - orpie 1.5.1-7.1 (embed; bug #550058)
1919
1920 xdotool
1921 - keynav <unfixed> (embed; bug #560103)
1922
1923 bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1924 - supertuxkart <unfixed> (embed)
1925 - blender <unfixed> (embed)
1926 - critterding <unfixed> (embed)
1927 NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1928
1929 ghostscript
1930 - gs-gpl <removed> (old-version)
1931
1932 icedove
1933 - thunderbird <removed> (old-version)
1934
1935 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1936 - jquery <unfixed> (embed)
1937
1938 sed
1939 - ssed <unfixed> (fork)
1940
1941 phpatomlib (http://code.google.com/p/phpatomlib)
1942 - wordpress <unfixed> (embed)
1943
1944 Services_JSON (http://pear.php.net/package/Services_JSON)
1945 - wordpress <unfixed> (embed)
1946
1947 phpass (http://www.openwall.com/phpass/)
1948 - gallery2 <unfixed> (embed)
1949 - wordpress <unfixed> (embed)
1950 - typo3-src <unfixed> (modified-embed)
1951 NOTE: file refers to drupal, maybe there's a copy somewhere there
1952 NOTE: a copyright owner search didn't match anything
1953 - libauthen-passphrase-perl <unfixable> (fork)
1954 NOTE: perl implementation of phpass
1955 - phpbb3 <unfixed>
1956 NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1957
1958 squirrelmail
1959 - wordpress <unfixed> (embed)
1960 NOTE: class-pop3.php
1961
1962 ezSQL (http://www.woyano.com/jv/ezsql)
1963 - wordpress <unfixable> (fork)
1964 NOTE: wp-db.php
1965
1966 Diff.php (Clay Loveless' version/killersoft.com)
1967 - php-versioncontrol-svn <unfixed>
1968
1969 libm (provided by libc)
1970 - spring <unfixed> (embed)
1971 NOTE: embedded by embedded copy of streflop
1972 - megaglest <unfixed> (embed)
1973 NOTE: embedded by embedded copy of streflop
1974 - aide <unfixed> (static)
1975 - busybox <unfixed> (static)
1976 - mindi-busybox <unfixed> (static)
1977 - qemu <unfixed> (static)
1978 NOTE: qemu-user-static
1979 - tuxonice-userui <unfixed> (static)
1980 - zsh <unfixed> (static)
1981 NOTE: zsh-static
1982 - tripwire <unfixed>
1983
1984 streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1985 - spring <unfixed> (modified-embed)
1986 NOTE: old, modified version of streflop
1987 - megaglest <unfixed> (modified-embed)
1988 NOTE: megaglest uses the same streflop code as spring
1989
1990 minizip
1991 - spring <unfixed> (embed)
1992 - libkml <unfixed> (modified-embed; bug #753069)
1993 - samba <unfixed> (embed)
1994 NOTE: didn't check whether it's used
1995 - zlib <unfixed> (embed; bug #753070)
1996 NOTE: only used to build minizip and miniunzip in zlib-bin package
1997 - virtuoso-opensource <unfixed> (embed)
1998 NOTE: didn't check whether it's used
1999 - luatex <unfixed> (embed)
2000 NOTE: didn't check whether it's used
2001 - tcl8.6 <unfixed> (embed)
2002 NOTE: didn't check whether it's used
2003 - chromium-browser <unfixed> (embed)
2004 - perl-tk <unfixed> (embed)
2005 NOTE: didn't check whether it's used
2006 - icedove <unfixed> (modified-embed)
2007 NOTE: didn't check whether it's used
2008 - ace <unfixed> (embed)
2009 NOTE: didn't check whether it's used
2010 - smplayer <unfixed> (embed)
2011 NOTE: didn't check whether it's used
2012 - povray <unfixed> (embed)
2013 NOTE: didn't check whether it's used
2014 - cegui-mk2 <unfixed> (embed)
2015 NOTE: didn't check whether it's used
2016 - freemat <unfixed> (embed)
2017 NOTE: didn't check whether it's used
2018 - funtools <unfixed> (embed)
2019 NOTE: didn't check whether it's used
2020 - tntnet <unfixed> (embed)
2021 NOTE: didn't check whether it's used
2022 - orthanc <unfixed> (embed)
2023 NOTE: didn't check whether it's used
2024 - instead <unfixed> (embed)
2025 NOTE: didn't check whether it's used
2026 - mupen64plus-core <unfixed> (embed)
2027 NOTE: didn't check whether it's used
2028 - sks-ecc <unfixed> (embed)
2029 NOTE: didn't check whether it's used
2030 - psi <unfixed> (embed)
2031 NOTE: didn't check whether it's used
2032 - fossil <unfixed> (embed)
2033 NOTE: didn't check whether it's used
2034 - wordgrinder <unfixed> (embed)
2035 NOTE: didn't check whether it's used
2036 - critcl <unfixed> (embed)
2037 NOTE: didn't check whether it's used
2038 - fceux <unfixed> (embed)
2039 NOTE: didn't check whether it's used
2040
2041 oscpack
2042 - spring <unfixed> (embed)
2043
2044 hpiutil2
2045 - spring <unfixed> (embed)
2046
2047 p7zip
2048 - spring <unfixed> (embed)
2049
2050 pythonqt (doesn't seem to be python-qtN, unknown source)
2051 - fontmatrix <unfixed> (embed)
2052 - elmerfem <unfixed> (embed)
2053
2054 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
2055 - docvert <unfixed> (embed)
2056 - jifty <unfixed> (embed)
2057 - kdenetwork <unfixed> (embed)
2058 - mediatomb <unfixed> (embed)
2059 - plastex <unfixed> (embed)
2060 - plone3 <removed> (embed)
2061 - python-chaco <unfixed> (embed)
2062 - python-docutils <unfixed> (embed)
2063 - s5 <unfixed> (embed)
2064 - zope2.10 <unfixed> (embed)
2065 - zope2.11 <removed> (embed)
2066 - cython <not-affcted> (embed)
2067 NOTE: part of documentation, which is not installed into the binary package
2068
2069 python-docutils
2070 - zope2.10 <unfixed> (embed)
2071 - zope2.11 <removed> (embed)
2072
2073 tesseract
2074 - ocropus <unfixed> (static)
2075
2076 antlr
2077 - kdevelop <unfixed> (embed)
2078
2079 libxerces2
2080 - openjdk-6 <unfixed> (embed)
2081
2082 kfreebsd-8
2083 - kfreebsd-7 <unfixed> (old-version)
2084 - kfreebsd-6 <removed> (old-version)
2085
2086 ruby1.9.1
2087 - ruby1.9 <unfixed> (old-version)
2088 - ruby1.8 <removed> (old-version)
2089
2090 maildrop
2091 - courier <unfixed> (embed) [./maildrop]
2092
2093 glee
2094 - warzone2100 <not-affected> (embed)
2095 - love 0.8.0-2 (embed; bug #690492)
2096
2097 phing
2098 - symfony <unfixed> (embed)
2099
2100 pake
2101 - symfony <unfixed> (embed)
2102
2103 propel
2104 - symfony <unfixed> (embed)
2105
2106 creole
2107 - symfony <unfixed> (embed)
2108
2109 hfsutils
2110 - cdrkit <unfixed> (embed; bug #570187)
2111 NOTE: embeds hfsutils code in genisoimage
2112
2113 cdrkit
2114 - grub2 <unfixed> (embed; bug #570156)
2115 NOTE: genisoimage imported into grub-mkisofs
2116
2117 kdebase-workspace
2118 - kdebase <unfixed> (old-version)
2119
2120 file
2121 - php5 <unfixable> (modified-embed)
2122 [lenny] - php5 <not-affected>
2123 - radare2 <unfixed> (embed)
2124 TODO: check if embed, modfied-embed or old-version
2125 - sleuthkit <unfixed> (embed)
2126 TODO: check if used
2127
2128 cdb
2129 - php5 <unfixed> (embed)
2130
2131 libmbfl (itp: #570708)
2132 - php5 <unfixed> (embed)
2133 NOTE: PHP is actually the current upstream, ITP is of that code
2134
2135 libonig
2136 - php5 5.3.2-1 (embed)
2137
2138 xmlrpc-epi
2139 - php5 <unfixed> (embed)
2140
2141 swt-gtk
2142 - eclipse <unfixed> (embed; bug #538808)
2143
2144 txt2html
2145 - wml 2.0.11ds2-1 (embed)
2146
2147 ca-certificates
2148 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
2149
2150 openexr
2151 - freeimage <unfixed> (embed)
2152
2153 libmng
2154 - freeimage <unfixed> (embed)
2155
2156 openjpeg
2157 - freeimage <unfixed> (embed)
2158
2159 libjpeg6b
2160 - freeimage <unfixed> (embed)
2161 - ia32-libs <removed> (embed)
2162
2163 libjpeg (don't know what exact version)
2164 - dcmtk <unfixed>
2165 - gdcm <unfixed>
2166 - insighttoolkit <unfixed>
2167 - openarena 0.8.5-5+exp1 (bug #495966)
2168 - outguess <unfixed>
2169 - squeak-vm <unfixed> (embed)
2170 - tremulous <unfixed>
2171 - tuxonice-userui <unfixed> (static)
2172 - fpc <unfixed> (static)
2173 - lazarus <unfixed> (static)
2174 NOTE: inherited from fpc, see #472304
2175 - mseide-msegui <unfixed> (static)
2176 NOTE: inherited from fpc, see #472304
2177 - easymp3gain <unfixed> (static)
2178 NOTE: inherited from fpc, see #472304
2179 - winff <unfixed> (static)
2180 NOTE: inherited from fpc, see #472304
2181 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2182 - ghostscript 8.64~dfsg-2 (embed)
2183
2184 lxr
2185 - lxr-cvs <unfixed> (embed)
2186
2187 libfile-copy-recursive-perl
2188 - r-base <unfixed> (embed; bug #577427)
2189 - r-base-core-ra <unfixed> (embed; bug #577429)
2190
2191 delimmatch
2192 - r-base <unfixed> (embed; bug #577433)
2193 - r-base-core-ra <unfixed> (embed; bug #577434)
2194
2195 libsmf (ITP: #572558)
2196 - denemo <unfixed> (embed)
2197 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2198
2199 libselinux
2200 - dpkg 1.15.6 (static)
2201 - ia32-libs <removed> (embed)
2202
2203 xinha (ITP: #479708)
2204 - horde3 <unfixed>
2205 - serendipity <unfixed>
2206 - openacs <unfixed>
2207 - dotlrn <unfixed>
2208
2209 dvipng
2210 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2211
2212 dvipdfmx
2213 - texlive-bin <unfixed> (embed)
2214 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2215
2216 lcdf-typetools
2217 - texlive-bin 2009-1 (embed)
2218
2219 tex4ht
2220 - texlive-bin 2009-1 (embed)
2221
2222 freetype
2223 - texlive-bin 2009-1 (embed)
2224 - ia32-libs <removed> (embed)
2225
2226 freetype2
2227 - texlive-bin <unfixed> (embed)
2228 [wheezy] - texlive-bin 2009-1 (embed)
2229 [squeeze] - texlive-bin 2009-1 (embed)
2230 - tuxonice-userui <unknown> (static)
2231 - instantbird <removed>
2232 - qt4-x11 <unknown> (embed)
2233 - vtk <unknown> (embed)
2234 - paraview <unknown> (embed)
2235 NOTE: from embedded copy of vtk
2236
2237 silgraphite
2238 - texlive-bin <unfixed> (embed)
2239
2240 unzip
2241 - texlive-bin 2009-1 (embed)
2242
2243 jbig2dec
2244 - ghostscript 8.71~dfsg2-1 (embed)
2245
2246 libxml2
2247 - chromium-browser 5.0.375.29~r46008-1
2248 - ia32-libs <removed> (embed)
2249
2250 protobuf
2251 - chromium-browser 5.0.375.70~r48679-2
2252
2253 libv8
2254 - chromium-browser 5.0.375.38~r46659-1
2255
2256 nspr
2257 - chromium-browser 5.0.375.29~r46008-3
2258 - ia32-libs <removed> (embed)
2259 - virtualbox <unfixed> (modified-embed)
2260
2261 yasm
2262 - chromium-browser 5.0.375.29~r46008-2
2263
2264 libxslt
2265 - chromium-browser 5.0.375.29~r46008-1
2266 - ia32-libs <removed> (embed)
2267
2268 miniupnpc
2269 - warzone2100 2.3.7-2
2270 NOTE: code still present in tarball but removed during build and unused
2271 - vino 3.2.2-1
2272 NOTE: code still present in tarball but removed during build and unused
2273 - vidalia 0.2.21-2 <unfixed> (old-version)
2274 NOTE: embedded old version might be modified
2275 - vidalia 0.2.21-3 <not-affected> (old-version)
2276 NOTE: code still present in tarball but unused during build
2277
2278 iniparser (not packaged in Debian; RFP bug #582657)
2279 - warzone2100 <unfixed> (modified-embed)
2280
2281 pyglet
2282 - sympy <unfixed> (embed; bug #459716)
2283
2284 mpmath
2285 - sympy <unfixed> (embed; bug #541746)
2286
2287 openssh
2288 - libpam-ssh <unfixed> (embed; bug #598522)
2289
2290 curl
2291 - cmake 2.6.0-6 (embed)
2292 NOTE: Might be fixed earlier. Lenny version recorded.
2293 - criticalmass <unfixed> (static; bug #599061)
2294 - wengophone 2.1.0~beta1-svn9983-1 (embed)
2295 - ia32-libs <removed> (embed)
2296
2297 lib3ds
2298 - boson <unfixed> (embed; bug #600900)
2299 - openscenegraph <unfixed> (embed; bug #601181)
2300
2301 xcftools
2302 - gnome-xcf-thumbnailer <unfixed> (embed)
2303
2304 simplejson
2305 - exaile <unfixed> (embed; bug #604547)
2306
2307 libasycns
2308 - loudmouth <unfixed> (embed; bug #566143)
2309
2310 plplot
2311 - emboss <unfixed> (fork)
2312
2313 acl
2314 - ia32-libs <removed> (embed)
2315
2316 arts
2317 - ia32-libs <removed> (embed)
2318
2319 attr
2320 - ia32-libs <removed> (embed)
2321
2322 audiofile
2323 - ia32-libs <removed> (embed)
2324
2325 avahi
2326 - ia32-libs <removed> (embed)
2327
2328 celt
2329 - ia32-libs <removed> (embed)
2330
2331 coreutils
2332 - ia32-libs <removed> (embed)
2333
2334 cyrus-sasl2
2335 - ia32-libs <removed> (embed)
2336
2337 db4.8
2338 - ia32-libs <removed> (embed)
2339
2340 dbus
2341 - ia32-libs <removed> (embed)
2342
2343 directfb
2344 - ia32-libs <removed> (embed)
2345
2346 esound
2347 - ia32-libs <removed> (embed)
2348
2349 fltk1.1
2350 - ia32-libs <removed> (embed)
2351
2352 fontconfig
2353 - ia32-libs <removed> (embed)
2354
2355 freeglut
2356 - ia32-libs <removed> (embed)
2357
2358 gcc-3.3
2359 - ia32-libs <removed> (embed)
2360
2361 gdbm
2362 - ia32-libs <removed> (embed)
2363
2364 gnutls26
2365 - ia32-libs <removed> (embed)
2366
2367 hal
2368 - ia32-libs <removed> (embed)
2369
2370 isdnutils
2371 - ia32-libs <removed> (embed)
2372
2373 jack-audio-connection-kit
2374 - ia32-libs <removed> (embed)
2375
2376 keyutils
2377 - ia32-libs <removed> (embed)
2378
2379 krb5
2380 - ia32-libs <removed> (embed)
2381
2382 lesstif2
2383 - ia32-libs <removed> (embed)
2384
2385 libaio
2386 - ia32-libs <removed> (embed)
2387
2388 libasyncns
2389 - ia32-libs <removed> (embed)
2390
2391 libcap2
2392 - ia32-libs <removed> (embed)
2393
2394 libdrm
2395 - ia32-libs <removed> (embed)
2396
2397 libedit
2398 - ia32-libs <removed> (embed)
2399
2400 libexif
2401 - ia32-libs <removed> (embed)
2402
2403 libgcrypt11
2404 - ia32-libs <removed> (embed)
2405
2406 libgpg-error
2407 - ia32-libs <removed> (embed)
2408
2409 libgphoto2
2410 - ia32-libs <removed> (embed)
2411
2412 libice
2413 - ia32-libs <removed> (embed)
2414
2415 libieee1284
2416 - ia32-libs <removed> (embed)
2417
2418 libjpeg8
2419 - ia32-libs <removed> (embed)
2420
2421 libnss-ldap
2422 - ia32-libs <removed> (embed)
2423
2424 libogg
2425 - ia32-libs <removed> (embed)
2426
2427 libpam-ldap
2428 - ia32-libs <removed> (embed)
2429
2430 libsamplerate
2431 - ia32-libs <removed> (embed)
2432
2433 libsdl1.2
2434 - ia32-libs <removed> (embed)
2435
2436 libsm
2437 - ia32-libs <removed> (embed)
2438
2439 libssh2
2440 - ia32-libs <removed> (embed)
2441
2442 libtasn1-3
2443 - ia32-libs <removed> (embed)
2444
2445 libx11
2446 - ia32-libs <removed> (embed)
2447
2448 libx86
2449 - ia32-libs <removed> (embed)
2450
2451 libxau
2452 - ia32-libs <removed> (embed)
2453
2454 libxcb
2455 - ia32-libs <removed> (embed)
2456
2457 libxcomposite
2458 - ia32-libs <removed> (embed)
2459
2460 libxcursor
2461 - ia32-libs <removed> (embed)
2462
2463 libxdamage
2464 - ia32-libs <removed> (embed)
2465
2466 libxdmcp
2467 - ia32-libs <removed> (embed)
2468
2469 libxext
2470 - ia32-libs <removed> (embed)
2471
2472 libxfixes
2473 - ia32-libs <removed> (embed)
2474
2475 libxi
2476 - ia32-libs <removed> (embed)
2477
2478 libxinerama
2479 - ia32-libs <removed> (embed)
2480
2481 libxmu
2482 - ia32-libs <removed> (embed)
2483
2484 libxp
2485 - ia32-libs <removed> (embed)
2486
2487 libxrandr
2488 - ia32-libs <removed> (embed)
2489
2490 libxrender
2491 - ia32-libs <removed> (embed)
2492
2493 libxss
2494 - ia32-libs <removed> (embed)
2495
2496 libxt
2497 - ia32-libs <removed> (embed)
2498
2499 libxtst
2500 - ia32-libs <removed> (embed)
2501
2502 libxv
2503 - ia32-libs <removed> (embed)
2504
2505 libxxf86vm
2506 - ia32-libs <removed> (embed)
2507
2508 mesa
2509 - ia32-libs <removed> (embed)
2510
2511 mpg123
2512 - ia32-libs <removed> (embed)
2513
2514 nas
2515 - ia32-libs <removed> (embed)
2516
2517 nss
2518 - ia32-libs <removed> (embed)
2519
2520 openal-soft
2521 - ia32-libs <removed> (embed)
2522
2523 openssl
2524 - ia32-libs <removed> (embed)
2525
2526 pam
2527 - ia32-libs <removed> (embed)
2528
2529 popt
2530 - ia32-libs <removed> (embed)
2531
2532 pulseaudio
2533 - ia32-libs <removed> (embed)
2534
2535 sane-backends
2536 - ia32-libs <removed> (embed)
2537
2538 sqlite3
2539 - ia32-libs <removed> (embed)
2540 - chromium-browser <unfixed> (embed)
2541
2542 sysfsutils
2543 - ia32-libs <removed> (embed)
2544
2545 tcp-wrappers
2546 - ia32-libs <removed> (embed)
2547
2548 tdb
2549 - thunar 1.2.1-3 (old-version)
2550 - ia32-libs <removed> (embed)
2551
2552 tslib
2553 - ia32-libs <removed> (embed)
2554
2555 unixodbc
2556 - ia32-libs <removed> (embed)
2557
2558 xaw3d
2559 - ia32-libs <removed> (embed)
2560
2561 xbitmaps
2562 - ia32-libs <removed> (embed)
2563
2564 xcb-util
2565 - ia32-libs <removed> (embed)
2566
2567 xcursor-themes
2568 - ia32-libs <removed> (embed)
2569
2570 xft
2571 - ia32-libs <removed> (embed)
2572
2573 dicomparser
2574 - vtk <unfixed>
2575 - paraview <unfixed>
2576 NOTE: as part of its copy of vtk
2577 - insighttoolkit <unfixed>
2578
2579 proj
2580 - vtk <unfixed>
2581 - paraview <unfixed>
2582 NOTE: as part of its copy of vtk
2583 - therion <unfixed>
2584 - python-pyproj 1.8.6-1
2585
2586 netcdf
2587 - vtk <unfixed>
2588 - paraview <unfixed>
2589 NOTE: as part of its copy of vtk
2590
2591 insighttoolkit
2592 - vtk <unfixed> (embed)
2593 NOTE: embeds at least MetaIO
2594 - paraview <unfixed> (embed)
2595 NOTE: embeds at least MetaIO
2596
2597 gl2ps
2598 - vtk <unfixed>
2599 - paraview <unfixed>
2600 NOTE: as part of its copy of vtk
2601 - avogadro <unfixed>
2602 - gabedit <unknown> (embed)
2603 NOTE: not sure if it is built
2604 - drawxtl <unfixed> (embed)
2605 - rgl <unfixed> (embed)
2606 - gmsh <unfixed>
2607 - mcrl2 <unfixed> (embed)
2608 - mysql-gui-tools <unknown> (embed)
2609 NOTE: not sure if it is built
2610 - opencascade <unfixed> (embed)
2611 - orsa <unfixed> (embed)
2612 - qtiplot <unfixed> (embed)
2613 - qwtplot3d <unfixed> (embed)
2614 - root-system <unknown> (embed)
2615 NOTE: not sure if it is built
2616 - scilab <unfixed> (embed)
2617 - snd <unknown> (embed)
2618 NOTE: not sure if it is built
2619 - xmakemol <unfixed> (embed)
2620
2621 qwtplot3d
2622 - qtiplot <unfixed>
2623
2624 parseafm (from Adobe)
2625 - vftool <unfixed>
2626 - gnustep-back <unknown>
2627 NOTE: looks like it isn't built
2628 - evince <unfixed>
2629
2630 bugzilla
2631 - perl <unknown>
2632 - libcgi-pm-perl <unknown>
2633
2634 isc-dhcp
2635 - dhcp3 <unfixable> (old-version)
2636 - dhcp <unfixable> (old-version)
2637
2638 chipmunk (ITP: #623274)
2639 - xmoto <unfixed> (embed; bug #623299)
2640 - libtuxcap <unfixed> (embed; bug #623300)
2641
2642 libsigsegv
2643 - gawk 3.1.8+dfsg-0.1
2644
2645 pdfrw
2646 - rst2pdf <unfixed> (embed; bug #638607)
2647
2648 bind9
2649 - isc-dhcp <unfixed> (embed; bug #643569)
2650 NOTE: introduced in upstream 4.2 series
2651
2652 qof
2653 - gnucash <unfixed> (embed; bug #556245)
2654
2655 feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2656 - megaglest <unfixed> (modified-embed)
2657
2658 acsccid
2659 - ccid 1.3.11 <unfixed> (fork)
2660 - openct <unfixed> (modified-embed)
2661 - towitoko <unfixed> (modified-embed)
2662
2663 ccid
2664 - openct <unfixed> (modified-embed)
2665 - towitoko <unfixed> (modified-embed)
2666
2667 msmtp
2668 - mpop <unfixed> (embed)
2669
2670 iCalcreator
2671 - collabtive <unfixed>
2672 NOTE: class.ical.php
2673 - glpi <unfixed>
2674
2675 plupload
2676 - wordpress <unfixed>
2677
2678 feedcreator (php lib)
2679 - collabtive <unfixed>
2680 NOTE: class.rss.php
2681 - piwigo <unfixed>
2682 - dokuwiki <unfixed> (modified-embed)
2683 NOTE: dokuwiki uses an "enhanced" version
2684
2685 emacs
2686 - le <unfixed>
2687 NOTE: it uses an almost-pristine 2008 version of emacs' regex.{c,h}
2688
2689 libjsoncpp
2690 - eiskaltdcpp <unfixed> (embed)
2691 - drizzle <unfixed> (embed)
2692
2693 mongoose
2694 - phantomjs <unfixed> (modified-embed)
2695
2696 rapidxml (not packaged in Debian, http://rapidxml.sourceforge.net)
2697 - boost1.49 <unfixed> (embed)
2698 - boost1.50 <unfixed> (embed)
2699 - deal.ii <unfixed> (embed)
2700 - fife <unfixed> (embed)
2701 - witty <unfixed> (embed)
2702
2703 make
2704 - remake <unfixed> (fork)
2705
2706 metacity
2707 - mutter <unfixed> (fork)
2708
2709 mutter
2710 - muffin <unfixed> (fork)
2711
2712 libjson-spirit-dev
2713 - bitcoin <unfixed> (modified-embed)
2714 - litecoin <itp> (modified-embed; bug #693492)
2715
2716 bitcoin
2717 - litecoin <itp> (fork; bug #693492)
2718
2719 json-spirit
2720 - bitcoin <unfixed> (modified-embed)
2721 - litecoin <itp> (modified-embed; bug #693492)
2722
2723 libupnp
2724 - mediatomb <unfixable> (fork)
2725 - djmount <unfixed> (embed; bug #699562)
2726
2727 flowplayer-core (not packaged in Debian)
2728 - mahara <unfixed> (modified-embed)
2729
2730 dcraw
2731 - ufraw <unfixed>
2732 - libraw <unfixed>
2733 - kdcraw <unfixed>
2734 NOTE: in embedded copy of libraw
2735 - xbmc <unfixed>
2736 - exactimage <unfixed>
2737 - rawtherapee <unfixed>
2738 - rawstudio <unfixed>
2739
2740 libraw
2741 - libkdcraw 4:4.12.3-1
2742 - darktable <unfixed> (modified-embed; bug #682980)
2743 - shotwell <unfixed>
2744 NOTE: possibly fixed in wheezy and greater
2745
2746 mednafen
2747 - libvorbisidec 0.9.17.1-1
2748 [squeeze] - libvorbisidec <unfixed>
2749 [wheezy] - libvorbisidec <unfixed>
2750 NOTE: not-affected since 0.9.17.1-1 (as above)
2751 NOTE: mednafen 0.8.D.3-4 and 0.8.D.3-5 attempted to use the packaged libvorbisidec,
2752 NOTE: but this breaks CD playback when using .ogg files (see #699143), so it's
2753 NOTE: likely that future packages in the 0.8 series will build using the embedded code.
2754 - libmpcdec 0.9.21-1
2755 NOTE: not-affected since 0.9.21-1 (as above)
2756
2757 xmoto
2758 - chipmunk <unfixed> (bug #623299)
2759
2760 irrlicht
2761 - supertuxkart <unfixed> (modified-embed)
2762
2763 snappy
2764 - chromium-browser 35.0.1916.86-1
2765 NOTE: not sure if it's build
2766 - mongodb <unfixed>
2767 NOTE: needs further checks
2768 - couchdb <unfixed>
2769 - libsereal-decoder-perl <unfixed>
2770 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2771 - libsereal-encoder-perl <unfixed>
2772 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2773
2774 automysqlbackup
2775 - autopostgresqlbackup <unfixed>
2776 NOTE: fork
2777
2778 python-pip
2779 - python-virtualenv <unfixed>
2780
2781 scrypt
2782 - python-scrypt <unfixed> (embed; wontfix; package in NEW)
2783 NOTE: upstream scrypt does not provide a shared library/API
2784
2785 srtp
2786 - chromium <unfixed>
2787 - qutecom <unfixed>
2788
2789 fonttools
2790 - python-enable <unfixed> (embed; bug #715145)
2791
2792 uglifyjs
2793 - ruby-uglifier <unfixed> (modified-embed; bug #718367)
2794
2795 openacs
2796 - dotlrn <unfixed> (modified-embed; bug #718487)
2797
2798 jsgantt
2799 - rt4-extension-jsgantt <unfixed> (embed; bug #724287)
2800 - trac-jsgantt <unfixed> (embed; bug #724287)
2801 NOTE: jsgantt is not packaged seperately so far
2802
2803 libjs-pdf
2804 - iceweasel <unfixed> (fork)
2805
2806 jmapviewer
2807 - josm <unfixed> (embed; bug #731029)
2808
2809 qt4-x11
2810 - phantomjs <unfixed> (embed)
2811 NOTE: phantomjs embeds parts of src/
2812
2813 eigen3
2814 - r-cran-rcppeigen <unfixed> (modified-embed; bug #729716)
2815
2816 libyaml
2817 - libyaml-libyaml-perl <unfixed> (embed; bug #664224)
2818
2819 liblivemedia
2820 - vlc <unfixed> (static)
2821 - mplayer <removed> (static)
2822
2823 python-gnupg
2824 - gajim <unfixed> (modified-embed)
2825
2826 xchat:
2827 - hexchat <unfixed> (fork)
2828
2829 libjs-jquery-filetree (not packaged in Debian; RFP bug #741581; http://www.abeautifulsite.net/blog/2008/03/jquery-file-tree/ https://github.com/daverogers/jQueryFileTree)
2830 - controlaula <unfixed> (embed)
2831 - dolibarr <unfixed> (embed)
2832
2833 libjs-jquery-bbq (not packaged in Debian; RFP bug #741586; http://benalman.com/projects/jquery-bbq-plugin/ http://github.com/cowboy/jquery-bbq)
2834 - drupal7 <unfixed> (embed)
2835 - ganglia-web <unfixed> (embed)
2836 - jqapi <unfixed> (embed)
2837
2838 lame
2839 - mp3gain <unfixed> (modified-embed)
2840 NOTE: ancient copy, part of mpglib which was probably part of mpg123 at some point
2841
2842 zopfli
2843 - pigz <unfixed> (embed)
2844 - advancecomp <unfixed> (embed)
2845
2846 libquazip
2847 - pencil2d (modified-embed)
2848
2849 syslogd
2850 - rsyslog (fork)
2851
2852 libebur128
2853 - mlt (modified-embed; bug #762341)
2854
2855 wpa
2856 - moonshot-gss-eap <unfixed> (embed)
2857 NOTE: Functionality not available in stable library form
2858
2859 liblmdb
2860 - openldap <unfixed> (embed; bug #750023)
2861
2862 gnome-screensaver
2863 - mate-screensaver <unfixed>
2864 - cinnamon-screensaver <unfixed>
2865 - light-locker <unfixed>
2866
2867 aglfn
2868 - cups-filters <unfixed> (embed; bug #709584)
2869 - qtbase-opensource-src <unfixed> (embed; bug #709586)
2870 - gnuplot 4.6.3-2 (embed; bug #709583)
2871 - latex-cjk-chinese-arphic 1.23 (embed; bug #709585)
2872
2873 texlive-bin
2874 - texstudio 2.8.0+debian-1 (embed; bug #753806)
2875 NOTE: embeds synctex parser
2876 - texmaker 4.2-2 (embed; bug #753812)
2877 NOTE: embeds synctex parser
2878 - texworks 0.5~svn1363-5 (embed; bug #753818)
2879 NOTE: embeds synctex parser
2880 - gummi <unfixed> (embed; bug #753827)
2881 NOTE: embeds synctex parser
2882 - evince <unfixed> (embed; bug #754136)
2883 NOTE: embeds synctex parser
2884 - okular <unfixed> (embed; bug #754137)
2885 NOTE: embeds synctex parser
2886 - qpdfview <unfixed> (embed; bug #754138)
2887 NOTE: embeds synctex parser
2888
2889 libmspack
2890 - cabextract <unfixed> (embed; bug #675560)
2891 - msn-pecan <unfixed> (embed; bug #675555)
2892 - evolution-ews <unfixed> (embed; bug #675556)
2893 - convlit <unfixed> (embed; bug #675557)
2894 - clamav 0.98.5~beta1+dfsg-1 (modified-embed; bug #675558)
2895 - wine <not-affected> (bug #675559)
2896 NOTE: wine: has a lot of source files that share the same names as the files
2897 NOTE: in libmspack, but they are entirely different implementations.
2898 - wine-development <not-affected> (bug #675561)
2899 NOTE: wine: has a lot of source files that share the same names as the files
2900 NOTE: in libmspack, but they are entirely different implementations.
2901 - calibre <unfixed> (embed; bug #675562)

  ViewVC Help
Powered by ViewVC 1.1.5