/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 32598 - (show annotations) (download)
Tue Mar 3 06:13:47 2015 UTC (2 days, 4 hours ago) by carnil
File size: 79680 byte(s)
flightcrew embedds a modified copy of zipios++
1 Embedded code copies
2 ====================
3
4 https://wiki.debian.org/EmbeddedCodeCopies
5 This file collects source packages that embed code from other projects.
6 This is considered bad for fixing security flaws because the fix needs
7 to be applied in multiple source packages.
8
9 Format:
10 <srcpkg> (<optional comment about srcpkg>)
11 - <embedding srcpkg> <status> (<sort>; bug #<number>)
12 NOTE: optional comments about the linkage of the embedding srcpkg
13
14 status: version number fixing the embedded copy
15 <unfixed> if the issue is not yet fixed
16 <removed> if the package was removed from the archive
17 <itp> if the package is in the process of being packaged
18 <not-affected> if the package does not use the embedded copy
19 <unknown> if the version number can not be determined
20 <unfixable> for unavoidable cases (e.g., forks that add real value)
21 sort: static (linking statically against a lib)
22 embed (embeds a copy of the library into another source package)
23 modified-embed (embeds a code copy that differs from upstream code)
24 fork (a full-blown fork of another source package)
25 old-version (an older version of essentially the same code)
26
27 The srcpkg might be some string to identify the code if there is no
28 specific source package.
29
30 Everything up to the next line is ignored.
31 ---BEGIN
32 poppler
33 - pdftohtml <unknown>
34 [sarge] - pdftohtml <unfixed>
35 [etch] - pdftohtml <unfixed>
36 NOTE: has been replaced by poppler-utils
37 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38 - texlive-base 3.0-12 (embed)
39 - texlive-bin 2007-1 (embed)
40 - koffice 1:2.0.0-1 (embed; bug #436163)
41 - libextractor 0.5.12-1 (embed)
42 NOTE: libextractor is using its own pdf decoder now
43 - ipe <unfixed> (embed)
44 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45 - ruby-gnome2 <unknown> (embed)
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <removed> (embed; bug #551293)
48 - xpdf 3.02-9 (fork)
49 - luatex <unfixed>
50 NOTE: detected by lintian, needs to be checked/confirmed
51
52 pdksh (no longer developed since 1999)
53 - mksh <unfixable> (fork)
54 - posh <unfixable> (fork)
55
56 ppmd
57 - libcomplearn-mod-ppmd <unfixed> (fork)
58 NOTE: discussion in #458152
59
60 libevent
61 - transmission 1.71-1 (embed; bug #529372)
62 - chromium-browser 5.0.375.29~r46008-1
63 - dnsproxy <unknown> (embed)
64 - iceweasel <unknown> (embed)
65 - icedove <unknown> (embed)
66
67 lrmi
68 - read-edid 2.0.0-1 (embed; bug #495131)
69 - s3switch <unfixed> (embed)
70 - xresprobe <unfixed> (embed)
71 - zhcon <unfixed> (embed)
72
73 php-htmlpurifier
74 - mahara 1.2.5-1 (embed)
75 - knowledgeroot 0.9.9.5-5 (embed)
76 - moodle 2.5.1-1 (embed)
77
78 peercast
79 - gnome-peercast <removed> (embed)
80 [etch] - gnome-peercast <unfixed> (embed)
81
82 silc-toolkit
83 - silc-client 1.1~beta6-1 (embed)
84
85 icclib
86 - ghostscript <unfixed> (embed)
87 - argyll <unfixed> (embed)
88
89 libusb
90 - argyll <unfixed> (embed)
91 - ia32-libs <removed> (embed)
92
93 dietlibc
94 - ccontrol 0.9.1+20071204-1 (static)
95 - mksh <unfixable> (static)
96 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
97
98 libmikmod
99 - pysol-sound-server <unfixed> (modified-embed)
100 - sdl-mixer1.2 <unfixed> (embed)
101 TODO: report bug
102 - uqm 0.6.2.dfsg-8 (embed)
103 NOTE: Might be fixed earlier. Lenny version recorded.
104 - black-box 1.4.6-2.2 (embed)
105 NOTE: Might be fixed earlier. Lenny version recorded.
106
107 libiax
108 - iaxmodem <unfixable> (embed; bug #548885)
109
110 spandsp
111 - iaxmodem <unfixable> (embed; bug #548885)
112
113 python-paramiko
114 - fabric 0.9.0-2 (embed; bug #561398)
115
116 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
117 - dpkg 1.15.6 (static)
118 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
119 - rsync <unfixed> (embed)
120 - cherokee <unfixed> (embed)
121 NOTE: somehow derived code base
122 - mono <unfixed> (embed)
123 TODO: check mozilla
124 - linux-2.6 <unfixed> (embed)
125 - pvpgn 1.7.8-2 (embed)
126 - mrtg 2.12.2-1 (embed)
127 - rpm <unknown> (embed)
128 NOTE: pinged anibal since when rpm was fixed
129 - tuxcmd-modules <unfixed> (embed)
130 - zsync <unfixed>
131 - tra <unfixed>
132 - sash <unfixed>
133 - nsis <unfixed>
134 - pyfits 1:2.3.1-1
135 - mseide-msegui <unfixed>
136 NOTE: mseide
137 - mirrordir <unfixed>
138 - poco <unfixed>
139 - klibc <unfixed>
140 - emboss 6.3.1-1 (embed)
141 - ghostscript 8.71~dfsg2-6 (embed)
142 NOTE: ghostscript fixed sometime before this, but this is the version i checked
143 - freeimage <unfixed>
144 - clamav <unfixed> (fork)
145 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
146 - tuxonice-userui <unfixed> (static)
147 - plt-scheme <unfixed>
148 - perl <unfixed>
149 - paraview <unfixed>
150 - velvet 0.7.56~nozlibcopy-1
151 - gcvs <unfixed>
152 - dump <unfixed>
153 - aide <unfixed> (static)
154 - dar <unfixed> (static)
155 - avfs <unfixed>
156 - fpc <unfixed>
157 - winff <unfixed>
158 NOTE: inherited from fpc, see #472304
159 - lazarus <unfixed>
160 NOTE: inherited from fpc, see #472304
161 - erlang <unfixed> (embed)
162 - gamera 3.2.3-1 (embed)
163 - python2.4 <unfixed> (embed; bug #553403)
164 - python2.5 <unfixed> (embed; bug #553403)
165 - texlive-bin 2013.20130522.30620-1 (embed)
166 - sudo <unknown> (embed)
167 NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
168
169 dulwich
170 - hg-git 0.1.0-1 (embed; bug #541996)
171
172 libvigraimpex
173 - hugin <unfixed> (embed; bug #542259)
174 - enblend-enfuse <unfixed> (embed; bug #542258)
175 - gamera 3.2.3-1 (embed)
176
177 libbz2
178 - dpkg 1.15.6 (static)
179 - amd64-libs <unfixed> (static)
180 NOTE: let's call it "static"
181 - dar <unfixed> (static)
182 - dump <unfixed> (static)
183 - unalz 0.64-1 (embed)
184 NOTE: has code, by the maint, to use the system version but links against the internal copy
185 - clamav <unfixed> (embed)
186 NOTE: libclamav/nsis/bzlib*
187 - pristine-tar <unfixable> (modified-embed)
188 NOTE: compression code only, not uncompression
189 - r-base-core-ra 1.2.8 (static)
190 - r-base-core 2.11.1 (static)
191 NOTE: links dynamically in squeeze, statically in lenny
192 - rpm <unfixed> (static)
193 NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
194
195 libyahoo2
196 - centerim <unfixed> (embed; bug #559783)
197
198 libmsn
199 - centerim <unfixed> (embed; bug #559783)
200
201 libgadu
202 - centerim <unfixed> (embed; bug #559783)
203 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
204 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
205 - kdenetwork 4:3.3.2-5 (embed)
206 NOTE: from kdenetwork: kopete
207 - ekg 1:1.8~rc0-1 (embed)
208 - kadu 0.6.0.2-3 (embed; bug #504430)
209 - gadu <itp> (embed)
210
211 xmlrpc (which package is the "origin" of this code?)
212 - drupal <unfixed> (embed)
213 - phpgroupware <unfixed> (embed)
214 - egroupware <unfixed> (embed)
215 - phpwiki <unfixed> (embed)
216 - php4 <removed> (embed)
217 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
218
219 shtool (affects build-time only)
220 - mysql-ocaml <unfixed> (embed)
221 - php4 <removed> (embed)
222 - php5 <unfixed> (embed)
223
224 xulrunner
225 - iceape <unfixed> (embed; bug #561749)
226 - iceweasel 2.0.0.19 (embed)
227 - icedove <unfixed> (embed; bug #561750)
228 - kompozer <unfixed> (embed; bug #532168)
229 - galeon 2.0.2-4 (embed)
230 - epiphany-browser 2.14.3-8 (embed)
231 - conkeror 0.9~git080629-2 (embed)
232 - kazehakase 0.4.2-1 (embed)
233 - wine-gecko-unstable <unfixed> (embed; bug #669672)
234
235 xli
236 - xloadimage <unfixed> (embed)
237
238 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
239 - openmotif <unfixed> (embed)
240
241 libxpm
242 - lesstif2 <unfixed> (embed; bug #575750)
243 - ia32-libs <removed> (embed)
244
245 kerberized apps with BSD origin
246 - krb4 <removed> (embed)
247 - krb5 <unfixed> (embed)
248 - heimdal <unfixed> (embed)
249
250 grip (which pkg is the origin?)
251 - libcdaudio <unfixed>
252 - grip <unfixed>
253 - gnome-vfs <unfixed>
254 TODO: check vfs2 as well
255
256 fudforum
257 [etch] - phpgroupware <unfixed> (embed)
258 NOTE: phpgroupware-fudforum
259 [sarge] - egroupware-fudforum <removed> (embed)
260
261 libbsd
262 - rdate 1:1.2-3 (embed)
263 - atheme-services <unfixed>
264 - libbsd-arc4random-perl <not-affected> (modified-embed)
265 NOTE: code not used, it links dynamically against libbsd instead
266 - isakmpd <unfixed>
267 - bsdgames <unfixed> (embed)
268 - bsd-mailx <unfixed> (embed)
269 - netcat-openbsd <unfixed> (embed; bug #550611)
270 - openssh <unfixed> (embed)
271 - unworkable <unfixed> (embed)
272 - mksh <unfixed> (modified-embed)
273 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
274 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
275 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
276 - ia32-libs <removed> (embed)
277
278 cvs
279 - gcvs <unfixed> (embed)
280 NOTE: see cvsunix/src in tarball
281
282 pcre3
283 - php4 <removed> (embed)
284 - analog 2:5.23-0woody1 (embed)
285 - chicken 3.2.7-2 (embed)
286 NOTE: Might be fixed earlier. Lenny version recorded.
287 - goffice <unfixed> (embed)
288 NOTE: libgoffice-*
289 - hypermail 2.2.0.dfsg-2 (embed)
290 NOTE: Might be fixed earlier. Lenny version recorded.
291 - privoxy 3.0.9-1 (embed)
292 NOTE: Might be fixed earlier. Lenny version recorded.
293 - vfu 4.06-4.1 (embed; bug #450754)
294 - tf5 5.0beta7-1 (embed)
295 - monotone 0.43-1 (embed)
296 NOTE: this only affects versions >= 0.37
297 - glib2.0 2.15.2-1 (embed)
298 - apache2 2.0.53-4 (embed)
299 - exim4 4.10-0.srh20.12 (embed)
300 - yacas <unfixed> (embed)
301 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
302 - gtamsanalyzer.app 0.42-5 (embed)
303 - tin 980117-1 (embed)
304 - kazehakase 0.5.2-1
305 - webkit 1.0.1-1 (embed)
306 - qt4-x11 <unfixed> (embed)
307 NOTE: embedded via webkit copy
308 - erlang <unfixed> (embed)
309 - ssed <unfixed> (embed)
310 - ircd-hybrid <unfixed> (static)
311 - emboss <unfixed> (fork)
312 - cherokee <unfixed> (embed)
313 - oftc-hybrid 1.6.9.dfsg-1 (embed)
314 - ratbox-services <unfixed> (embed)
315 - squeak-vm <unfixed> (embed)
316 - tinymux <unfixed> (embed)
317 - mp4h <unfixed> (embed)
318
319 tiff
320 - wxwindows2.4 2.2.1 (embed)
321 - gamera 3.2.3-1 (embed)
322 - freeimage <unfixed> (embed)
323 - libtk-img <unfixed> (embed; bug #732147)
324 NOTE: there are two copies, one under tiff/ other under libtiff/
325 - gdal <unfixed>
326 - ia32-libs <removed> (embed)
327 - tiff3 <unfixable> (old-version)
328
329 uudeview
330 - libconvert-uulib-perl <unfixed> (embed)
331 - pan <unfixed> (embed)
332
333 sqlite
334 - amarok <unfixed> (embed)
335 - monotone 0.43-1 (embed)
336 - iceweasel <unfixed> (embed)
337 - heimdal <unfixed> (embed; bug #559616)
338
339 util-linux
340 - loop-aes-utils <unfixed> (embed)
341 NOTE: contains code from util-linux' mount in the mount-aes-udeb
342 - ia32-libs <removed> (embed)
343
344 sylpheed
345 - sylpheed-claws <unfixed> (fork)
346
347 phpsysinfo
348 - egroupware <unfixed> (embed)
349 - phpgroupware <unfixed> (embed)
350
351 phpldapadmin
352 [sarge] - egroupware <unfixed> (embed)
353 NOTE: removed from egroupware after sarge
354
355 chmlib
356 - kchmviewer <unknown> (embed)
357
358 ffmpeg (libavcodec/libavformat)
359 - mplayer 1.0~rc2-14 (embed; bug #395252)
360 - kino 1.0.0-1
361 - vlc <not-affected> (Links dynamically since initial release)
362 - smilutils 0.3.0-10
363 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
364 - motion 3.1.19-1
365 - gstreamer0.10-ffmpeg 0.10.3-2
366 - xmovie <removed> (static)
367 TODO: gimp-gap (potentially using ffmpeg code as well)
368 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
369 - audacity 1.3.7-2 (embed; bug #512278)
370 - chromium-browser <unfixed> (fork; bug #763632)
371 - libav <unfixed>
372
373 faad2
374 - mplayer 1.0~rc2-20 (embed)
375 - avifile <unfixed> (embed; bug #538750)
376 - ffmpeg-debian <removed> (embed)
377
378 libmad (MPEG decoding lib)
379 - xine-lib <unfixed> (embed)
380 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
381 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
382
383 libdts
384 - xine-lib <unfixed> (embed)
385
386 flac
387 - xine-lib <unfixed> (embed)
388 - ia32-libs <removed> (embed)
389
390 liba52
391 - a52dec <unfixed> (embed)
392 - xine-lib <unfixed> (embed)
393
394 mpeg2dec (libmpeg2)
395 - xine-lib <unfixed> (embed)
396
397 libmpeg3
398 - squeak-vm <unfixed> (embed)
399
400 libntlm
401 - wget <unfixed> (fork; bug #550436)
402 - curl <unfixed> (fork; bug #550437)
403 - cntlm <unfixed> (fork; bug #550438)
404
405 uw-imap
406 - pine <unfixed> (embed)
407 - alpine <unfixed> (embed)
408
409 imagemagick
410 - graphicsmagick <unfixed> (fork)
411
412 python-urlgrabber
413 - mercurial <unfixed> (embed; bug #531062)
414 - w3af <unfixed> (embed; bug #555372)
415 [experimental] - harvestman <unfixed> (embed; bug #555373)
416
417 beautifulsoup
418 - python-mechanize <unfixed> (embed; bug #555349)
419 - zope2.11 <removed> (embed; bug #555350)
420 - twill <unknown> (embed)
421
422 halibut
423 - nsis <unfixed> (fork)
424
425 libghttp
426 - hotway <unfixed> (embed)
427
428 libsndfile
429 - ardour 1:2.7.1-1 (embed)
430 - ia32-libs <removed> (embed)
431
432 glibmm2.4
433 - ardour 1:2.7.1-1 (embed)
434
435 libgnomecanvasmm2.6
436 - ardour 1:2.7.1-1 (embed)
437
438 libsigc++-2.0
439 - ardour 1:2.7.1-1 (embed)
440 - ia32-libs <removed> (embed)
441
442 soundtouch
443 - ardour 1:2.7.1-1 (embed)
444
445 libmms
446 - xine-lib <unfixed> (embed)
447 - mimms <unfixed> (embed)
448
449 ckeditor
450 - request-tracker4 <unfixed> (embed)
451
452 fckeditor
453 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
454 - moin 1.8.2-2 (embed; bug #452599)
455 - karrigell <removed> (embed; bug #452598)
456 - gforge 4.6.99+svn6225-1 (embed)
457 - request-tracker3.8 <unfixed> (embed)
458 - otrs2 <unfixed> (embed)
459
460 libphp-phpmailer
461 - moodle 2.5.1-1 (embed; bug #507185)
462 - mahara <unfixed> (embed)
463 - symfony <unfixed> (embed; bug #566778)
464 [etch] - phpgroupware <unfixed> (embed)
465 NOTE: phpgroupware-felamimail is only in etch
466 - egroupware <unfixed> (embed; bug #504283)
467 - glpi 0.80.7-2
468
469 giflib
470 - wine <unfixed> (fork; bug #466181)
471 NOTE: the embedded code is a fork of ungif, which is an older version of giflib
472
473 bennu (not packaged in Debian, http://bennu.sourceforge.net)
474 - moodle <unfixed> (embed)
475
476 smarty
477 - gallery2 2.2.5-2 (embed; bug #471160)
478 - mahara 0.9.2-2 (embed; bug #471201)
479 - gosa 2.4beta1-1 (embed; bug #471200)
480
481 TinyMCE
482 - wordpress 2.5.1-3 (embed; bug #478257)
483 - moodle <unfixed> (embed; bug #507185)
484 - knowledgeroot <unfixed> (embed)
485 - joomla <itp> (bug #326398)
486 - mahara 1.2.6-1 (embed; #597752)
487 - glpi 0.80.7-2
488
489 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
490 - scite <unfixed> (embed)
491 - qscintilla <unfixed> (embed)
492 - qscintilla2 <unfixed> (embed)
493 - geany <unfixed> (fork)
494 - anjuta <unfixed> (embed)
495 - sdlbasic <unfixed> (embed)
496
497 libphp-adodb
498 - moodle 2.5.1-1 (embed; bug #507185)
499 NOTE: also AdoDB-XML Schema
500 - gallery2 <unfixed> (embed)
501 - phppgadmin <unfixed> (embed)
502 - egroupware <unfixed> (embed)
503 - phpwiki <unfixed> (embed)
504 - torrentflux 2.0beta1-2 (embed)
505 - ipplan <unfixed> (embed)
506 - typo3-src <unfixed> (embed)
507 - cacti 0.8.6d-1 (embed)
508 [sarge] - cacti <unfixed> (embed)
509 NOTE: dependency exists, but internal version is used
510 - gforge 4.7~rc2-6 (embed)
511 - mahara <unfixed> (embed)
512
513 gzip
514 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
515 - klibc <unfixed> (embed)
516 NOTE: based on linux-kernel gzip code
517 - busybox <unfixed> (embed)
518 - pristine-tar <unfixed> (modified-embed)
519 NOTE: compression code only, not uncompression
520 - ncompress <unfixed> (old-version)
521
522 neon
523 - cadaver 0.22.3+debian-1 (embed; bug #188381)
524 - gnome-vfs2 <unfixed> (embed; bug #395874)
525 [etch] - litmus <unfixed> (embed; #395875)
526 - litmus <removed> (embed; #395875)
527 [sarge] - screem <unfixed> (embed)
528 - sitecopy 1:0.16.0-1 (embed; bug #395876)
529 [etch] - tla <unfixed> (embed; bug #395877)
530 [sarge] - tla <unfixed> (embed; bug #395877)
531
532 libmodplug
533 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
534
535 libvncserver
536 - vino <unfixed> (embed)
537 - krfb <unfixed> (embed)
538
539 putty
540 - filezilla <unfixed> (embed)
541
542 tinyxml
543 - filezilla <unfixed>
544 - crystalspace <unfixed> (embed)
545 - libwfut <unfixed> (embed)
546 - rarian <unfixed> (embed)
547 - bulletml <unfixed> (embed)
548 - pokerth <unfixed> (embed)
549 - qutecom <unfixed> (embed)
550 - sofa-framework <unfixed> (embed)
551 - yate <unfixed> (embed)
552 - antigrav <unfixed> (embed)
553 - balder2d <unfixed> (embed)
554 - cal3d <unfixed> (embed)
555 - criticalmass <unfixed> (embed)
556 - ember <unfixed> (embed)
557 - epiphany <unfixed> (embed)
558 - gambit <unfixed> (embed)
559 - noiz2sa <unfixed> (embed)
560 - ogre <unfixed> (embed)
561 - opencity <unfixed> (embed)
562 - openmovieeditor <unfixed> (embed)
563 - pouetchess <unfixed> (embed)
564 - tecnoballz <unfixed> (embed)
565 - trigger-rally <unfixed> (embed)
566 - xmoto <unfixed> (embed)
567 - mapnik <unknown> (embed)
568 NOTE: uses a different XML parser by default
569 - rrootage 0.23a-6 <embed>
570 NOTE: links to libbulltetml
571 - boson <unknown> (embed)
572 NOTE: the embedded code is unused
573 - cppcheck <unfixed> (embed)
574 NOTE: introduced in 1.47, will use system's version in 1.48
575 [squeeze] - cppcheck <not-affected>
576 - xye <unfixed> (embed; bug #758429)
577 NOTE: https://sourceforge.net/p/xye/bugs/7/
578
579 gv
580 - evince <unfixed> (embed)
581 NOTE: ps/ tree from gv 3.5.8
582 NOTE: evince-gtk is affected (a component of evince source package)
583
584 libXbae
585 - paw <unfixed> (embed)
586
587 libgtkhtml
588 - claws-mail-extra-plugins <unfixed> (fork)
589
590 libXaw
591 - paw <unfixed> (embed)
592 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
593 - ia32-libs <removed> (embed)
594
595 libgd2
596 - graphviz 2.16-1 (embed)
597 NOTE: lib/gd seems to be 2.0.33
598 - wml 2.0.11ds2-1 (embed)
599 - libwmf <unfixed> (embed)
600 NOTE: derived from gd 1.6.3, but only used to write images
601 - plt-scheme <unfixed> (embed; bug #601525)
602 - texlive-bin <unfixed> (embed)
603 [wheezy] - texlive-bin 2013.20130522.30620-1 (embed)
604 [squeeze] - texlive-bin 2013.20130522.30620-1 (embed)
605
606 rar
607 - unrar-nonfree <unfixed> (embed)
608
609 unrar-free (maybe this code is derived from the original rar, too?)
610 - clamav <unfixed> (embed)
611 NOTE: seems to be disabled in default config
612
613 mplayer (DirectMedia Object loader)
614 - xine-lib <unfixed> (embed)
615 NOTE: src/libw32dll/
616 - vlc <unfixed> (embed)
617 NOTE: modules/codec/dmo/
618 - mplayer 1.0~rc2-20 (embed)
619
620 libwpd (WordPerfect converter)
621 - openoffice.org <unfixed> (embed)
622
623 fsplib (http://sourceforge.net/projects/fsp/)
624 - gftp <unfixed> (embed)
625 NOTE: lib/fsplib version 0.3
626
627 sprng
628 - tree-puzzle <unfixed> (embed)
629
630 librpcsecgss
631 - krb5 <unfixed> (embed)
632
633 jasper
634 - ghostscript 8.64~dfsg-2 (embed)
635
636 libiris
637 - psi <unfixed> (embed)
638 - kdenetwork <unfixed> (embed)
639 NOTE: kopete embeds libiris but links dynamically to libidn
640 - kdegames <unfixed> (embed)
641 NOTE: ksirk/kde4
642
643 libidn
644 - monotone 0.43-1 (embed)
645 - psi <unfixed> (embed)
646 NOTE: psi embeds libiris which embeds libidn
647 - kdegames <unfixed> (embed)
648 NOTE: kdegames/kde4 embeds libiris which embeds libidn
649 - ia32-libs <removed> (embed)
650
651 lua5.1
652 - monotone 0.43-1 (embed)
653 - nmap 5.00-1 (embed; bug #527997)
654 [lenny] - nmap <unfixed> (embed; bug #527997)
655 - ocropus <unfixed> (embed)
656 - enigma <unfixed> (embed)
657 NOTE: requires lua built with C++
658 - freeciv 2.4.1-1 (embed)
659 NOTE: from 2.4.1-1 on freeciv uses system library instead
660 - spring <unfixed> (embed)
661
662 libbotan
663 - monotone 0.43-1 (embed)
664
665 NetXX
666 - monotone 0.43-1 (embed)
667
668 libgc
669 - mono <unfixed> (embed)
670
671 lzma
672 - p7zip <unfixed> (embed)
673 - xz-utils <unfixed> (fork)
674 - r-base <unfixed> (embed)
675 NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
676
677 lzo2
678 - ia32-libs <removed> (embed)
679 - busybox <unfixed> (embed)
680 - grub2 <unfixed> (embed)
681 - syslinux <unfixed> (modified-embed)
682 - valgrind <unfixed> (modified-embed)
683 - xen <unfixed> (embed)
684 - remmina <unfixed> (embed)
685 - blender <unfixed> (embed)
686 - x11vnc <unfixed> (embed)
687 - italc <unfixed> (embed)
688 - dump <unfixed> (embed)
689 - krfb <unfixed> (embed)
690 - nfdump <unfixed> (embed)
691 - kino <unfixed> (embed)
692 - samhain <unfixed> (embed)
693 - u-boot <unfixed> (modified-embed)
694 - icecc <unfixed> (embed)
695 - bb <unfixed> (embed)
696 - mednafen 0.8.D.3-4 (embed)
697 - ht <unfixed> (embed)
698 - n2n <unfixed> (embed)
699 NOTE: still not sure if all those embedded copies are actually used
700 NOTE: some packages actually use minilzo, which is not built by src:lzo2 and is only available as source in liblzo2-dev
701
702 lz4
703 - eet <unfixed> (embed)
704 - efl <unfixed> (embed)
705 - grub2 <unfixed> (embed)
706 - gtkwave <unfixed> (embed)
707 - iceweasel <unfixed> (embed)
708 - kfreebsd-9 <unfixed> (embed)
709 - kfreebsd-10 <unfixed> (embed)
710 - php-horde-lz4 <unfixed> (embed)
711 - pytables <unfixed> (embed)
712 - zfsutils <unfixed> (embed)
713
714 yassl
715 - mysql-5.1 <unfixed> (embed)
716 - mysql-5.5 <unfixed> (embed; bug #627207)
717
718 pax code
719 - tar <unfixed> (embed)
720 - cpio <unfixed> (embed)
721
722 t1lib
723 - tetex-bin 2.0.2-1 (embed)
724 - texlive-bin 2013.20130522.30620-1 (embed; bug #667912)
725 NOTE: used only in xdivk (a dvi file viewer that the maintainer refuses to drop)
726 - grace 5.1.14-2 (embed)
727 - evince <unfixed> (embed)
728 NOTE: at least parseafm code, maybe more?
729 - vftool <unfixed> (embed)
730 NOTE: just parseafm code it seems
731
732 guichan
733 - boswars <unfixed> (embed)
734 NOTE: maintainer notified us, working on it
735
736 tolua
737 - boswars <unfixed> (embed)
738 NOTE: maintainer notified us, working on it
739 NOTE: actually tolua++
740 - ocropus <unfixed> (embed)
741 NOTE: actually tolua++
742 - freeciv <unfixed> (embed)
743 NOTE: actually tolua++
744 - enigma <unfixed> (embed)
745
746 asio-dev
747 - luxrender <removed> (embed)
748
749 xine-lib
750 - vlc <unfixed> (embed)
751 NOTE: only parts included in modules/access/rtsp
752
753 netpbm
754 - tcl8.3 <unfixed> (embed)
755 - tcl8.4 <unfixed> (embed)
756 - tcl8.5 <unfixed> (embed)
757 NOTE: generic/tkImgGIF.c
758
759 tk8.5
760 - tk8.0 <removed> (old-version)
761 - tk8.3 <unfixed> (old-version)
762 - tk8.4 <unfixed> (old-version)
763 - perl-tk <unfixable> (fork)
764
765 samba
766 - mc 2:4.6.2~git20080311-1 (embed)
767 NOTE: maintainer is aware of this, currently searching a solution
768
769 plib1.8.4c2
770 - boson <unfixed> (fork)
771 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
772
773 fribidi
774 - quesoglc 0.7.2-2 (embed)
775
776 glew
777 - quesoglc <unfixed> (embed; bug #489341)
778 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
779 - trigger 0.5.2.1-2 (embed)
780 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
781 - trigger-rally 0.5.2.1-2 (embed)
782 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
783 - chromium-browser 5.0.375.70~r48679-2
784
785 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
786 - transcend <unfixed> (embed)
787 - cultivation <unfixed> (embed)
788 - passage <unfixed> (embed)
789 - gravitation <unfixed> (embed)
790
791 tar
792 - libarchive <unfixed> (embed)
793 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
794
795 cpio
796 - libarchive <unfixed> (embed)
797 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
798
799 kde4libs
800 - kdelibs <unfixable> (old-version)
801
802 webkit
803 - qt4-x11 <unfixed> (embed; bug #479851)
804 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
805 - kde4libs <unfixable> (fork)
806 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
807 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
808 - chromium-browser <unfixed> (fork)
809
810 ftgl
811 - blender 2.46+dfsg-1 (embed)
812 - vtk <unfixed> (embed)
813 - paraview <unfixed> (embed)
814 NOTE: as part of its copy of vtk
815 - tulip <unfixed> (embed)
816 NOTE: depends on -dev but string found on binary
817 - root-system <unknown> (embed)
818 NOTE: depends on -dev package; not confirmed at source
819 - rgl <unknown> (embed)
820 NOTE: not sure if it is built
821 - mysql-gui-tools <unknown> (embed)
822 NOTE: not sure if it is built
823 - k3d <unfixed> (embed)
824 - extremetuxracer <unknown> (embed)
825 NOTE: not sure if it is built
826 - critterding <unknown> (embed)
827 - lightspeed <unfixed>
828 NOTE: depends on -dev but string found on binary
829
830 wv
831 - abiword <unfixed>
832
833 wv2
834 - koffice <unfixed>
835 - calligra <unfixed>
836
837 qemu
838 - kvm <removed> (embed; bug #543159)
839 - qemu-kvm <unfixed> (embed; bug #560853)
840 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
841 - xen-3 3.4.2-2 (embed; bug #560856)
842 - xen-unstable <unfixed> (embed; bug #560856)
843
844 vgabios
845 - kvm <removed> (embed; bug #489442)
846 - qemu-kvm <unfixed> (embed)
847
848 bochs
849 - kvm <removed> (embed; bug #489442)
850 - qemu-kvm <unfixed> (embed)
851
852 speex
853 - vorbis-tools <unfixed> (embed)
854 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
855 - gst-plugins-good0.10 <unfixed> (embed)
856 - xine-lib <unfixed> (embed)
857 - libfishsound <unfixed> (embed)
858 - libannodex <removed> (embed)
859 - opal 3.4.2~dfsg-2 (embed)
860 - mumble 1.2.0~beta1-1 (embed)
861 - vlc <unfixed> (embed)
862 - xmms-speex <unfixed> (embed)
863 - libsdl-sound1.2 <unfixed> (embed)
864 - sweep <unfixed> (embed)
865
866 readline6
867 - magic <itp> (old-version)
868 - gdb 5.2.cvs20020401-1
869
870 opcode
871 - ode <unfixed> (embed)
872 NOTE: opcode is not a package in debian, it is just embedded
873 NOTE: http://www.codercorner.com/Opcode.htm
874
875 gimpact
876 - ode <unfixed> (embed)
877 NOTE: gimpact is not a package in debian, it is just embedded
878 NOTE: http://gimpact.sf.net
879
880 mochikit
881 - mahara <unfixed> (embed)
882 NOTE: they require extra patches, still unmerged upstream
883 - ntop <unfixed> (embed)
884 - coherence 0.6.2-1 (embed)
885 - paste <unfixed> (embed)
886 - turbogears <unfixed> (embed)
887 - plone3 <removed> (embed)
888 - xulrunner <unfixed> (embed)
889 - libjifty-plugin-chart-perl <unfixed> (embed)
890 - sabnzbdplus <unfixed> (embed)
891 - tgmochikit <unfixed> (embed)
892
893 prototypejs
894 - netbeans-ide 6.0.1+dfsg-2 (embed)
895 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
896 - webcit <unfixed> (embed; bug #555219)
897 - asterisk 1:1.6.2.0~rc3-1 (embed)
898 - libjson-ruby 1.1.4-1 (embed; bug #555224)
899 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
900 - horde3 <unfixed> (embed)
901 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
902 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
903 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
904 - ebug-http <unfixed> (embed; bug #555236)
905 - libaws 2.7-1 (embed; bug #555222)
906 - phpgedview <removed> (embed)
907 - poker-network 1.7.6-1 (embed; bug #555238)
908 - rails 2.1.0-6 (embed)
909 - wordpress 2.5.0-2 (embed; bug #555243)
910 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
911 TODO: search through all of the other zope packages
912 - ampache 3.4.1-2 (embed)
913 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
914 - hobix 0.5~svn20070319-4 (embed; bug #555247)
915 - zabbix 1.6.6-4 (embed; bug #555250)
916 - chora2 2.1.1+debian0-1 (embed; bug #555253)
917 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
918 - jscropperui 1.2.1-1 (embed; bug #555257)
919 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
920 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
921 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
922 - activeldap 1.2.1-1 (embed)
923 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
924 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
925 - otrs2 2.3.4-6 (embed; bug #555267)
926 - webcalendar 1.2~b1-2 (embed; bug #555269)
927 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
928 - jifty 0.90519-1 (embed; bug #555271)
929 - jquery 1.4-1 (embed; bug #555272)
930 - passenger 2.2.5debian1-1 (embed; bug #555273)
931 - plone3 <removed> (embed; bug #555275)
932 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
933 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
934 - xulrunner <unfixed> (embed)
935 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
936 - jclicmoodle <unfixed> (embed)
937 - git-cola <unfixed> (embed)
938
939 gdb
940 - insight <unfixed> (embed)
941
942 e2fsprogs
943 - ldiskfsprogs <unfixable> (fork)
944 - ia32-libs <removed> (embed)
945
946 quazip (not packaged in Debian)
947 - qcake <unfixed> (embed)
948 NOTE: starting with upstream version 0.6.4
949
950 exo
951 - pcmanfm <unfixed> (embed; bug #499677)
952 NOTE: slightly modified source code
953
954 xfce4-taskmanager
955 - lxtask <unfixed> (embed)
956 NOTE: old fork, maybe outdated
957
958 isync
959 - postler <unfixed> (embed; bug #628798)
960
961 java
962 - openjdk-6 <unfixed>
963 - sun-java5 <unfixed>
964 - sun-java6 <unfixed>
965
966 libphp-snoopy
967 - ampache 3.4.1-2 (embed; bug #504169)
968 - gforge 4.6.99+svn6094-2 (embed)
969 - mahara 1.0.5-2 (embed; bug #504170)
970 - pixelpost 1.7.1-5 (embed; bug #504171)
971 - mediamate 0.9.3.6-5 (embed; bug #504172)
972 - opendb <removed> (embed; bug #504173)
973 [etch] - opendb <unfixed> (embed; bug #504173)
974 - wordpress 2.5.1-9 (embed; bug #443948)
975 [etch] - phpgroupware <unfixed> (embed)
976 NOTE: phpgroupware-felamimail
977 - magpierss 0.72-3 (embed; bug #431089)
978
979 jquery
980 - jsonbot <unfixed> (embed; bug #625524)
981 - zekr <unfixed> (embed)
982 - wordpress <unknown> (embed)
983 - yocto-reader <unfixed> (embed)
984 - textpattern <unfixed> (embed)
985 - genshi 0.5.1-1 (embed)
986 NOTE: compressed file under examples/ dir
987 - prewikka <unfixed> (embed)
988 - libramaze-ruby <unfixed> (embed)
989 - drupal6 <unfixed> (embed)
990 - b2evolution <unfixed> (embed)
991 - wesnoth <unfixed> (embed)
992 - gammu 1.28.95-1 (embed)
993 - trac <unfixed> (embed; bug #645339)
994 - request-tracker4 <unfixed> (embed; bug #693821)
995 - otrs2 <unfixed> (embed)
996 NOTE: Embeds jquery 1.10
997 - cacti <unfixed> (embed)
998 NOTE: Embeds jquery 1.10.2
999
1000 jquery-goodies
1001 - horizon <unfixed> (embed)
1002 NOTE: jquery.cookie.js, jquery.table-sorter.js, jquery-ui.min.js
1003 - request-tracker4 <unfixed> (embed; bug #693821)
1004 NOTE: libjs-jquery-tablesorter
1005
1006 jqueryui
1007 - request-tracker4 <unfixed> (embed; bug #693821)
1008
1009 tablesorter (jquery plugin, not packaged yet)
1010 - wesnoth <unfixed> (embed)
1011
1012 kses
1013 - wordpress <unfixed> (embed; bug #504242)
1014 NOTE: their copy has all methods renamed to wp_<foo>
1015 NOTE: kses isn't in Debian, RFP: #504240
1016 - egroupware <unfixed> (embed)
1017
1018 magpierss
1019 - wordpress <unfixed> (embed; bug #504242)
1020
1021 php-gettext
1022 - wordpress 2.8.4-1 (embed; bug #504242)
1023 - docbookwiki <unfixed> (embed)
1024 - knowledgeroot 0.9.9.5-1
1025 NOTE: non-free
1026
1027 libphp-ixr (name may change, it is the Incutio XML-RPC)
1028 - wordpress <unfixed> (embed; bug #504242)
1029 NOTE: libphp-ixr isn't in Debian, RFP: #504236
1030 - dokuwiki <unfixed> (embed)
1031 - textpattern <unfixed> (embed)
1032
1033 libphp-cas
1034 - glpi 0.80.7-2 (embed)
1035 - moodle <unfixed> (embed; bug #505984)
1036
1037 scriptaculous (prototype.js is among the embeds in the following)
1038 - glpi <unfixed> (embed)
1039 - libaws <unfixed> (embed; bug #555222)
1040 - op-panel <unfixed> (embed)
1041 - symfony <unfixed> (embed)
1042 NOTE: maintainer says there are extra incompatible changes required
1043 - pixelpost 1.7.1-6 (embed)
1044 - webhelpers <unfixed> (embed)
1045 - qwik <removed> (embed; bug #555241)
1046 - smokeping <unfixed> (embed)
1047 - turba2 <unfixed> (embed)
1048 - typo3-src 4.2.3-1 (embed)
1049 - request-tracker3.6 <unfixed> (embed)
1050 - request-tracker3.8 <unfixed> (embed)
1051 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
1052 - wordpress 2.5.0-2 (embed)
1053 - libhtml-prototype-perl 1.48-3 (embed)
1054
1055 libmarkdown-php
1056 - pixelpost 1.7.1-6 (embed)
1057 NOTE: the markdown in Moodle is not the Markdown from this package
1058
1059 php-openid
1060 - wordpress-openid 3.3.2-1 (embed)
1061
1062 geshi
1063 - dokuwiki 0.0.20080505-3.1 (embed)
1064 - pgfouine 1.0-1.1 (embed)
1065 - websvn 2.1.0-1 (embed)
1066
1067 webcalendar
1068 - gforge 4.7~rc2-6 (embed; bug #504758)
1069
1070 libical
1071 - kdepim <unknown> (fork)
1072 NOTE: fixed at some point during 4.0
1073 - kdepimlibs 4.2.0-1 (fork)
1074 - claws-mail-extra-plugins <unfixed> (fork)
1075
1076 harfbuzz
1077 - qt4-x11 <unfixed> (embed)
1078 - pango1.0 1.36.0-1 (embed)
1079 - fontmatrix <unfixed> (embed)
1080
1081 libzip
1082 - php5 <unfixable> (modified-embed)
1083 - odt2txt <unfixed> (embed; bug #523808)
1084
1085 json.php (not packaged; should be replaced with php's built-in functions)
1086 - yui <unfixed>
1087 - gallery2 <unfixed>
1088 - dokuwiki <unfixed>
1089 - typo3-src <unfixed>
1090
1091 php-fpdf
1092 - tcpdf <itp> (fork)
1093 - phpwiki <unfixed>
1094 - egroupware <unfixed>
1095 - ldap-account-manager <unfixed> (fork)
1096
1097 tcpdf (itp: #495985)
1098 - moodle <unfixed>
1099 - phpmyadmin <unfixed>
1100 - collabtive <unfixed>
1101
1102 typo3
1103 - moodle <unfixed>
1104
1105 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1106 - moodle <unfixed>
1107 - gosa <unfixed>
1108
1109 php-ole (itp: #487558)
1110 - moodle <unfixed>
1111
1112 pieforms (http://www.catalyst.net.nz)
1113 - mahara <unfixed>
1114
1115 savant2 (http://phpsavant.com)
1116 - egroupware <unfixed>
1117
1118 rssparser (http://nwow.org)
1119 - egroupware <unfixed>
1120 - phpgroupware <unfixed>
1121
1122 lcms
1123 - openjdk-6 <unfixed> (fork)
1124 - gimp 2.4.0~rc2-2
1125 - ia32-libs <removed> (embed)
1126
1127 libphp-phplayersmenu
1128 - diogenes <unfixed>
1129 - phpldapadmin <unfixed>
1130
1131 libphp-pclzip
1132 - docvert <unfixed>
1133 - moodle 2.5.1-1
1134 - egroupware <unfixed>
1135
1136 libphp-simplepie
1137 - dokuwiki <unfixed>
1138 - wordpress <unfixed>
1139
1140 libphp-jpgraph
1141 - egroupware <unfixed>
1142
1143 libpng
1144 - doxygen 1.5.6-2 (embed)
1145 NOTE: Might be fixed earlier. Lenny version recorded.
1146 - gdal 1.5.2-3 (embed)
1147 NOTE: Might be fixed earlier. Lenny version recorded.
1148 - iceweasel <unfixed>
1149 NOTE: previous entry: - iceweasel <not-affected> (uses xulrunner)
1150 - icedove <unfixed>
1151 NOTE: previous entry: - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1152 - iceape 1.0.13~pre080614i-0etch1 (embed)
1153 - libfltk1.1 1.1.9-6 (embed)
1154 NOTE: Might be fixed earlier. Lenny version recorded.
1155 - libtk-img <unfixed> (embed; #732147)
1156 - htmldoc 1.8.27-3 (embed)
1157 NOTE: Might be fixed earlier. Lenny version recorded.
1158 - xulrunner 1.9.0.13-1 (embed)
1159 [lenny] - xulrunner 1.9.0.11-0lenny1
1160 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1161 - gamera 3.2.3-1 (embed)
1162 - freeimage <unfixed> (embed)
1163 - syslinux-common <unfixable> (embed)
1164 - tuxonice-userui <unfixed> (static)
1165 - texlive-bin <unfixed> (embed)
1166 [wheezy] - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1167 [squeeze] - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1168 NOTE: Might be fixed earlier. Lenny version recorded.
1169 - vice 1.22.dfsg1-0.1 (embed)
1170 NOTE: Might be fixed earlier. Lenny version recorded.
1171 - visualboyadvance 1.8.0-4 (embed)
1172 NOTE: Might be fixed earlier. Lenny version recorded.
1173 - ia32-libs <removed> (embed)
1174
1175 irssi
1176 - silc-client <unfixed> (embed)
1177 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1178
1179 extc
1180 - mtasc <unfixed> (embed)
1181 - haxe <unfixed> (embed)
1182
1183 swflib
1184 - mtasc <unfixed> (embed)
1185 - haxe <unfixed> (embed)
1186
1187 libitext-java
1188 - bouncycastle 2.1.4-1 (embed)
1189
1190 python-ply
1191 - pyke <unfixed> (embed; bug #555363)
1192 - pywbem 0.7.0-4 (embed; bug #555364)
1193 - sepolgen <unfixed> (embed; bug #555365)
1194 - zope-textindexng3 <unknown> (embed)
1195 - iceweasel <not-affected> (uses xulrunner)
1196 - xulrunner <unknown> (embed)
1197 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1198
1199 libdumbnet (libdnet upstream)
1200 - nmap <unfixed> (fork)
1201
1202 gcc-4.4
1203 - gcc-mingw32 <unfixed> (embed)
1204
1205 camlimages
1206 - advi <unfixed> (static; bug #550441)
1207
1208 memcached
1209 - memcachedb <unfixed> (embed)
1210
1211 yajl
1212 - argyll <unfixed> (embed; bug #544223)
1213 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1214 - lnav <unfixed> (embed; bug #724693)
1215
1216 nusoap
1217 - gforge 4.8.2-1 (embed)
1218 - ampache <unfixed> (embed)
1219 - poker-network <unfixed> (embed)
1220 - phpwiki <unfixed> (embed)
1221 - gallery2 <unfixed> (embed)
1222 - typo3-src <unfixed> (embed)
1223 - phpgacl 3.3.7-7 (embed)
1224 - mantis 1.1.8+dfsg-1 (embed)
1225
1226 libept
1227 - adept <unfixed> (embed; bug #540649)
1228
1229 libvorbis
1230 - iceweasel <not-affected> (uses xulrunner)
1231 - xulrunner <unfixed> (embed; bug #540959)
1232 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1233 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1234 - iceape <unfixed> (embed)
1235 [etch] - iceape <not-affected> (introduced in 2.0)
1236 [lenny] - iceape <not-affected> (introduced in 2.0)
1237 - ia32-libs <removed> (embed)
1238 - libvorbisidec <unfixed> (modified-embed)
1239
1240 cairo
1241 - iceweasel <not-affected> (uses xulrunner)
1242 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1243 - texlive-bin <unfixed> (embed)
1244
1245 liboggz
1246 - iceweasel <not-affected> (uses xulrunner)
1247 - xulrunner <unfixed> (embed; bug #540959)
1248 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1249 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1250 - iceape <unfixed> (embed)
1251 [etch] - iceape <not-affected> (introduced in 2.0)
1252 [lenny] - iceape <not-affected> (introduced in 2.0)
1253
1254 liboggplay
1255 - iceweasel <not-affected> (uses xulrunner)
1256 - xulrunner <unfixed> (embed; bug #540959)
1257 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1258 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1259 - iceape <unfixed> (embed)
1260 [etch] - iceape <not-affected> (introduced in 2.0)
1261 [lenny] - iceape <not-affected> (introduced in 2.0)
1262
1263 php-net-dnsbl
1264 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1265
1266 php-onyx-rss
1267 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1268
1269 php-text-wiki
1270 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1271
1272 php-xml-rpc
1273 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1274
1275 polarssl (does not have a shared library)
1276 - pdkim <itp> (embed; bug #543150)
1277 - xyssl <unfixed> (old-version)
1278
1279 pidgin (libpurple)
1280 - gaim <removed> (old-version)
1281 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1282 - wengophone <unfixed> (embed; bug #601425)
1283
1284 icu
1285 - webkit 1.0.1-1 (embed; bug #547214)
1286 - texlive-bin 2013.20130522.30620-1 (fork)
1287 NOTE: texlive upstream working with icu upstream to merge their changes
1288 - chromium-browser 5.0.375.29~r46008-3
1289
1290 cyrus-imapd-2.2
1291 - kolab-cyrus-imapd <unfixed> (fork)
1292 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1293
1294 python-cxx-dev
1295 - freecad 0.9.2646.3-1 (embed; bug #547936)
1296
1297 zipios++
1298 - freecad 0.9.2646.3-1 (embed; bug #547941)
1299 - enigma 0.92.3-3 (embed)
1300 NOTE: likely fixed earlier, marking etch's version as fixed
1301 - flightcrew <unfixed> (modified-embed)
1302
1303 linux-2.6
1304 - kvm <removed> (embed; bug #549973) [./kernel/*]
1305 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1306 - kernel-source-2.6.8 <removed> (old-version)
1307 - kernel-source-2.4.27 <removed> (old-version)
1308 - kernel-source-2.4.24 <removed> (old-version)
1309 - kernel-source-2.2.25 <removed> (old-version)
1310 - kernel-source-2.2.20 <removed> (old-version)
1311
1312 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1313 - kvm <removed> (embed) [./libfdt/*]
1314 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1315
1316 qweb (not packaged)
1317 - ajaxterm <unfixed>
1318
1319 opensaml2
1320 - opensaml <removed> (old-version)
1321
1322 shibboleth-sp2
1323 - shibboleth-sp <removed> (old-version)
1324
1325 tuxonice-userui
1326 - suspend2-userui <removed> (old-version)
1327
1328 expat
1329 - w3c-libwww <removed> (embed; bug #551941)
1330 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1331 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1332 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1333 - python2.4 <unfixable> (embed; bug #553403)
1334 - python2.6 2.6.6-4 (embed)
1335 - python2.7 2.7-6 (embed)
1336 - mcabber 0.10.0-1 (low; bug #601053)
1337 - python-4suite <unfixed> (embed; bug #516935)
1338 - wxwindows2.4 <removed> (embed)
1339 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1340 - wxwidgets2.8 2.8.10.1-2 (embed)
1341 - albert <unfixed> (embed; bug #600974)
1342 - celementtree 1.0.5-8 (embed)
1343 NOTE: Maybe that was fixed even earlier
1344 - centerim <unfixed> (embed; bug #559783)
1345 - audacity 1.3.2-1 (embed)
1346 - matanza <unfixed> (embed)
1347 - tdom 0.8.3~20080525-1 (embed)
1348 - udunits 2.1.8-4 (embed)
1349 - apr-util 1.2 (embed)
1350 - ayttm <unfxed> (embed; bug #561006)
1351 - cableswig <unfixed> (embed)
1352 - cadaver <unfixed> (embed)
1353 - cmake 2.6.0-6 (embed)
1354 - coin3 <unfixed> (embed)
1355 - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1356 NOTE: Might be fixed earlier. Lenny version recorded.
1357 - dasher 4.7.3-1 (embed)
1358 NOTE: Might be fixed earlier. Lenny version recorded.
1359 - emboss 6.3.1-1 (embed)
1360 - gdcm 2.0.14-2 (embed)
1361 - ghostscript 8.71~dfsg-2 (embed)
1362 - grmonitor <removed> (embed)
1363 - iceape <unfixed> (embed)
1364 - insighttoolkit 3.16.0-1 (embed)
1365 NOTE: insighttoolkit might've been fixed earlier
1366 - jabber 1.4.3-3.4 (embed)
1367 NOTE: Might be fixed earlier. Lenny version recorded.
1368 - libparagui1.1 1.0.2-1 (embed)
1369 - libspiff1 0.8.3-1 (embed)
1370 NOTE: Might be fixed earlier. Lenny version recorded.
1371 - paraview 3.6.2-1 (embed)
1372 - poco 1.3.6p1-1 (embed)
1373 - scorched3d 41.3dfsg-1+b1 (embed)
1374 NOTE: Might be fixed earlier. Lenny version recorded.
1375 - simgear <unfixed> (embed)
1376 - sitecopy 1:0.16.0-1
1377 - smart <unfixed> (embed)
1378 NOTE: smart embeds celementree, and it includes expat
1379 - swish-e <not-affected> (Linked against libxml, which is used instead)
1380 - tla 1.3.5+dfsg-15 (embed)
1381 - vtk 4.1.20030227-1 (embed)
1382 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1383 - xmlrpc-c <unfixed> (embed)
1384 - iceweasel <unfixed> (embed)
1385 - kompozer <unfixed> (embed)
1386 - vxl 1.13.0-2 (embed)
1387 - xulrunner <unfixed> (embed)
1388 - xmame 0.106-2.1 (embed)
1389 NOTE: Might be fixed earlier. Lenny version recorded.
1390 - apache2 2.2 (embed)
1391 - texlive-bin <not-affected> (Embedded code not compiled in)
1392 - vnc4 <unfixed> (embed)
1393 - xotcl 1.6.6-1 (embed)
1394 - chromium-browser 5.0.375.29~r46008-3
1395 - ia32-libs <removed> (embed)
1396
1397 xerces-c
1398 - xerces-c2 <unfixed> (old-version)
1399 - xerces27 <removed> (old-version)
1400
1401 md5 (RSA's version; not the gnu version provided by coreutils)
1402 - w3c-libwww <removed> (embed; bug #551942)
1403 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1404
1405 libparagui1.1
1406 - asc <unfixable> (fork)
1407
1408 enet
1409 - sauerbraten <unfixed> (embed; #497194)
1410
1411 eglibc
1412 - glibc <removed> (old-version)
1413 - mksh <unfixable> (static)
1414 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1415
1416 galib
1417 - gamera 3.2.3-1 (embed)
1418
1419 configobj
1420 - bzr <unfixed> (embed; bug #555336)
1421 - elisa <unfixed> (embed; bug #555337)
1422 - gaupol <unfixed> (embed; bug #555338)
1423 - ipython <unfixed> (embed; bug #555339)
1424 - pida <unfixed> (embed; bug #555340)
1425 - psychopy <unfixed> (embed; bug #555341)
1426 - rest2web <unfixed> (embed; bug #555342)
1427 - auth2db <unknown> (embed)
1428 - dynagen <unknown> (embed)
1429 - iceweasel <unknown> (embed)
1430 - sabnzbdplus <unknown> (embed)
1431 - xulrunner <unknown> (embed)
1432 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1433
1434 python-clientform
1435 - bibus <unfixed> (embed; bug #555332)
1436 - zope2.10 <removed> (embed; bug #555333)
1437 - zope2.11 <removed> (embed; bug #555334)
1438 - python-mechanize <unknown> (embed)
1439 - twill <unknown> (embed)
1440
1441 python-mechanize
1442 - zope2.10 <removed> (embed; bug #555357)
1443 - zope2.11 <removed> (embed; bug #555358)
1444 - twill <unknown> (embed; bug #555339)
1445
1446 pexpect
1447 - duplicity 0.6.06-1 (embed; bug #555359)
1448 - hplip <unfixed> (embed; bug #555361)
1449 - smart <unfixed> (embed; bug #555362)
1450
1451 pyparsing
1452 - bauble <unfixed> (embed; bug #555366)
1453 - boa-constructor 0.6.1-8 (embed; bug #555367)
1454 - calibre <unfixed> (embed; bug #555368)
1455 - matplotlib 1.3.0-1 (embed; bug #531024; bug #555369)
1456 - zhpy 1.7.3.1-1 (embed; bug #555370)
1457 - polybori <unknown> (embed)
1458 - python-whoosh <unknown> (embed)
1459 - twill <unknown> (embed)
1460 - zope-textindexng3 <unknown> (embed)
1461
1462 python-pysqlite2
1463 - python2.4 <unfixed> (embed; bug #553403)
1464 - python2.5 <unfixed> (embed; bug #553403)
1465
1466 celementtree
1467 - python2.5 <unfixed> (embed)
1468 - smart <unfixed> (embed)
1469
1470 elementtree
1471 - python2.5 <unfixed> (embed)
1472 - python2.6 <unfixed> (embed)
1473 - bzr <unfixed> (embed; bug #555343)
1474 - gedit 2.28.2-1 (embed; bug #555344)
1475 - smart <unfixed> (embed)
1476 - solfege <unfixed> (embed; bug #555345)
1477 - w3af <unfixed> (embed; bug #555346)
1478 - python-qt4 <unknown> (embed)
1479 - sphinx <unknown> (embed)
1480 - python-nltk <itp> (embed)
1481
1482 python2.5
1483 - python2.4 <unfixed> (old-version)
1484 - jython <unfixed> (embed)
1485 NOTE: embeds many stdlib modules
1486 - python-django <unfixed> (embed; bug #555419)
1487 NOTE: embeds stdlib modules: doctest, decimal
1488 - gamera 3.2.3-1 (embed)
1489 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1490 - boa-constructor <unfixed> (embed; bug #555426)
1491 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1492 - nicotine <unfixed> (embed; bug #555427)
1493 NOTE: embeds stdlib modules: ConfigParser
1494 - museek+ <unfixed> (embed; bug #555428)
1495 NOTE: embeds stdlib modules: ConfigParser
1496 - vegastrike-data <removed> (embed)
1497 NOTE: embeds many stdlib modules
1498 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1499 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1500 - config-manager <unfixed> (embed; bug #555423)
1501 NOTE: embeds stdlib modules: optparse
1502 - jhbuild 2.28.0-1 (embed; bug #555421)
1503 NOTE: embeds stdlib modules: optparse, subprocess
1504 - smart <unfixed> (embed; bug #555432)
1505 NOTE: embeds stdlib modules: optparse
1506 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1507 NOTE: embeds stdlib modules: doctest
1508 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1509 NOTE: embeds stdlib modules: doctest
1510 - distribute <unfixed> (embed)
1511 NOTE: embeds stdlib modules: doctest
1512 - python-setuptools <unfixed> (embed; bug #555435)
1513 NOTE: embeds stdlib modules: doctest
1514 - zope.testing <unfixed> (embed; bug #555436)
1515 NOTE: embeds stdlib modules: doctest
1516 - translate-toolkit <unfixed> (embed; bug #555422)
1517 NOTE: embeds stdlib modules: textwrap, contextlib
1518 - libtpclient-py <unfixed> (embed; bug #555424)
1519 NOTE: embeds stdlib modules: subprocess
1520 - grass <unfixed> (embed; bug #555425)
1521 NOTE: embeds stdlib modules: subprocess
1522 - coherence <unfixed> (embed; bug #555429)
1523 NOTE: embeds stdlib modules: uuid
1524 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1525 NOTE: embeds stdlib modules: uuid
1526 - setroubleshoot <removed> (embed; bug #555431)
1527 NOTE: embeds stdlib modules: uuid
1528 - linkchecker <unfixed> (embed; bug #555414)
1529 NOTE: embeds msgfmt.py script
1530 - imdbpy <unfixed> (embed)
1531 NOTE: embeds msgfmt.py script
1532 - kiwi <unfixed> (embed)
1533 NOTE: embeds msgfmt.py script
1534 - moin <unfixed> (embed)
1535 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1536 - plone3 <removed> (embed)
1537 NOTE: embeds msgfmt.py script
1538 - roundup <unfixed> (embed)
1539 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1540 - rednotebook <unfixed> (embed; bug #555415)
1541 NOTE: embeds msgfmt.py script
1542 - turbogears <unfixed> (embed)
1543 NOTE: embeds msgfmt.py script
1544 - elisa <unfixed> (embed)
1545 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1546 - calibre <unfixed> (embed)
1547 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1548 - mailman 1:2.1.13-1 (embed; #555416)
1549 NOTE: embeds msgfmt.py script
1550 - python-docutils <unknown> (embed)
1551 NOTE: embeds stdlib modules: optparse, textwrap
1552 - python-imaging <unknown> (embed)
1553 NOTE: embeds stdlib modules: doctest
1554 - python-mechanize <unknown> (embed)
1555 NOTE: embeds stdlib modules: doctest
1556 - twill <unknown> (embed)
1557 NOTE: embeds stdlib modules: subprocess
1558 - zeroc-ice <unknown> (embed)
1559 NOTE: embeds stdlib modules: subprocess
1560 - wxwidgets2.8 <unknown> (embed)
1561 NOTE: embeds stdlib modules: subprocess
1562 - cycle <unknown> (embed)
1563 NOTE: embeds msgfmt.py script
1564 - deluge <unknown> (embed)
1565 NOTE: embeds msgfmt.py script
1566 - opendict <unknown> (embed)
1567 NOTE: embeds msgfmt.py script
1568 - openerp-client <unknown> (embed)
1569 NOTE: embeds msgfmt.py script
1570 - rapidsvn <unknown> (embed)
1571 NOTE: embeds msgfmt.py script
1572 - wammu <unknown> (embed)
1573 NOTE: embeds msgfmt.py script
1574 - gaphor <unknown> (embed)
1575 NOTE: embeds msgfmt.py script
1576 - pida <unknown> (embed)
1577 NOTE: embeds msgfmt.py script
1578 - python-formencode <unknown> (embed)
1579 NOTE: embeds msgfmt.py script
1580 - duplicity <unfixed> (embed)
1581 NOTE: embeds stdlib module: urlparse, tarfile
1582 - pygopherd <unfixed> (embed)
1583 NOTE: embeds stdlib module: zipfile
1584 - sphinx <unfixed> (embed; bug #609485)
1585 NOTE: embeds only lib2to3.pgen2 in sphinx.pycode.pygen2
1586 - vegastrike-data <removed> (embed; bug #555630)
1587
1588 argparse
1589 - twill <unfixed> (embed; bug #555347)
1590 - ipython <unfixed> (embed; bug #555348)
1591
1592 coherence
1593 - elisa <unfixed> (embed; bug #555335)
1594
1595 simpletal
1596 - plastex <unfixed> (embed; bug #555371)
1597
1598 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1599 - postr <unfixed> (embed)
1600 - elisa <unfixed> (embed)
1601
1602 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1603 - apertium-tolk <unfixed> (embed)
1604 - ipython <unfixed> (embed)
1605 - virtaal <unfixed> (embed)
1606
1607 distribute
1608 - setuptools <removed> (old-version)
1609
1610 rails
1611 - jruby1.2 <removed> (embed) [./bench/rails/*]
1612 NOTE: jruby is in non-free, it probably includes rails too
1613 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1614 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1615 - thin <unfixed> (embed) [./spec/rails_app/*]
1616 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1617 NOTE: be dangerous if developers are naively basing their code off of the examples
1618 NOTE: prototype.js is among the example files
1619
1620 lucene2 (prototype.js is among the embeds in the following)
1621 - lucene <unfixed> (old-version)
1622 - pylucene <unfixed> (embed)
1623 - libpdfbox-java <unfixed> (embed)
1624 - libfontbox-java <unfixed> (embed)
1625 - libjempbox-java <unfixed> (embed)
1626 - solr <unfixed> (embed)
1627
1628 unicode-data
1629 - syslinux <unfixed> (embed)
1630 - camomile <unfixed> (embed)
1631 - chromium-browser <unfixed> (embed)
1632 - cyrus-imapd-2.4 <unfixed> (embed)
1633 - dovecot <unfixed> (embed)
1634 - emacs24 <unfixed> (embed)
1635 - fribidi <unfixed> (embed)
1636 - m17n-db <unfixed> (embed)
1637 - sbcl <unfixed> (embed)
1638 - grub2 <unfixed> (embed)
1639 - haskell-hxt-charproperties <unfixed> (embed)
1640 - heimdal <unfixed> (embed)
1641 - icu <unfixed> (embed)
1642 - icu4j-4.4 <unfixed> (embed)
1643 - icu4j <unfixed> (embed)
1644 - icedove <unfixed> (embed)
1645 - iceweasel <unfixed> (embed)
1646 - ikarus <unfixed> (embed)
1647 - jython <unfixed> (embed)
1648 - krb5 <unfixed> (embed)
1649 - moodle <unfixed> (embed)
1650 - mozc <unfixed> (embed)
1651 - mozjs17 <unfixed> (embed)
1652 - mozjs24 <unfixed> (embed)
1653 - openldap <unfixed> (embed)
1654 - openocd <unfixed> (embed)
1655 - perl <unfixed> (embed)
1656 - pike7.6 <removed> (embed)
1657 - pike7.8 <unfixed> (embed)
1658 - qtbase-opensource-src <unfixed> (embed)
1659 - samba <unfixed> (embed)
1660 - samba4 <unfixed> (embed)
1661 - cmucl <unfixed> (embed)
1662 - typo3-src <unfixed> (embed)
1663 - mauve <unfixed> (embed)
1664 - texlive-bin <unfixed> (embed)
1665 - ypsilon <removed> (embed)
1666 - jeuclid <unfixed> (embed)
1667 - charmap.app <unfixed> (embed)
1668 - clisp <unfixed> (embed)
1669 - gnulib <unfixed> (embed)
1670 - opensrs-client <unfixed> (embed)
1671 - saxonb <unfixed> (embed)
1672 - rails <unfixed> (embed)
1673 - scheme48 <unfixed> (embed)
1674 - slang2 <unfixed> (embed)
1675 - sqlcipher <unfixed> (embed)
1676 - sqlite3 <unfixed> (embed)
1677 - unorm.js <unfixed> (embed)
1678 - wine-gecko-2.21 <unfixed> (embed)
1679 - wine-gecko-2.24 <unfixed> (embed)
1680 - xapian-core <unfixed> (embed)
1681 - boost1.49 <unfixed> (embed)
1682 - boost1.54 <unfixed> (embed; bug #751880)
1683 - boost1.55 <unfixed> (embed; bug #751881)
1684
1685 feedparser
1686 - rawdog 2.19-1 (embed; bug #383422)
1687 [wheezy] - rawdog <unfixed> (modified-embed)
1688 - miro <unfixed> (embed; bug #555351)
1689 - calibre <unfixed> (embed; bug #555352)
1690 - freevo <unfixed> (embed; bug #555353)
1691 - pida <unfixed> (embed; bug #555354)
1692 - planet-venus <unfixed> (embed; bug #555355)
1693 - plone3 <removed> (embed; bug #555356)
1694 - exaile 0.2.14+debian-1 (embed)
1695 - screenlets 0.1.2-3 (embed)
1696 NOTE: included twice
1697
1698 agg:
1699 - matplotlib <unfixed> (embed: bug #377271)
1700 - contextfree <unfixed> (embed)
1701 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1702 - exactimage <unfixed> (embed)
1703 - python-enable <unfixed> (embed)
1704 - mapnik 0.5.1-3 (embed)
1705 NOTE: links statically to agg, but shared library is not available (bug #377271)
1706
1707 vtk
1708 - paraview <unfixable> (embed; bug #495426)
1709 - libmesh <unfixed>
1710 NOTE: embeds exodus; not sure if there's a version external to vtk
1711
1712 txt2tags
1713 - rednotebook <unfixed> (embed)
1714
1715 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1716 - gajim <unfixed> (embed)
1717 - emesene <unfixed> (embed)
1718 - convirt <unfixed> (embed)
1719 - pida <unfixed> (embed)
1720 - rednotebook <unfixed> (embed)
1721
1722 horde3 (prototype.js is among the embeds in the following)
1723 - mnemo2 <unfixed> (embed)
1724 - nag2 <unfixed> (embed)
1725 - wordpress <unfixed> (embed)
1726 NOTE: Text_Diff (wp-includes/Text/Diff*)
1727
1728 cimg
1729 - gmic <unfixed> (embed)
1730
1731 mootools
1732 - kdenetwork <unfixed> (embed)
1733 - gallery <unfixed> (embed)
1734 - jspwiki <unfixed> (embed)
1735 - vdr-plugin-live <unfixed> (embed)
1736 - perl-doc-html <unfixed> (embed)
1737
1738 openldap
1739 - openldap2.3 <removed> (old-version)
1740 - ia32-libs <removed> (embed)
1741
1742 grub2
1743 - grub <unfixed> (old-version)
1744
1745 gnupginterface
1746 - duplicity <unfixed> (embed)
1747
1748 python-dateutil
1749 - awn-extras-applets <unfixed> (embed)
1750 - matplotlib <unknown> (embed)
1751
1752 cups
1753 - cupsys <removed> (old-version)
1754 - ia32-libs <removed> (embed)
1755
1756 yui
1757 - bcfg2 <not-affected> (present in source but not included in any binary files)
1758 - serendipity 1.5.3-1 (embed; bug #557746)
1759 - moodle <unfixed> (embed)
1760 - jifty 0.91117-1 (embed; bug #557748)
1761 - webgui 7.7.26-1 (embed)
1762 - loggerhead 1.17-1 (embed)
1763 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1764
1765 quake3 (vanilla source not packaged in debian)
1766 - openarena <unfixable> (fork)
1767
1768 quake2 (vanilla source not packaged in debian)
1769 - alien-arena <unfixable> (fork)
1770 - warsow <unfixable> (fork)
1771
1772 quake (vanilla source not packaged in debian)
1773 - darkplaces <unfixable> (fork)
1774 - quakespasm <unfixable> (fork)
1775 - nexuiz 2.5.2+dp-1 (old-version)
1776 NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1777
1778 libtheora
1779 - iceweasel <not-affected> (uses xulrunner)
1780 - xulrunner <unfixed> (embed; bug #540959)
1781 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1782 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1783 - iceape <unfixed> (embed; bug #559276)
1784 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1785 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1786
1787 dtoa
1788 - bfilter <unfixed> (embed)
1789 - cacao <removed> (embed)
1790 - cdrdao <unfixed> (embed)
1791 - classpath <unfixed> (embed)
1792 - freej <unfixed> (embed)
1793 - iceape <unfixed> (embed)
1794 - iceweasel <unfixed> (embed)
1795 - jscoverage <unfixed> (embed)
1796 - kde4libs <unfixed> (embed)
1797 - kdelibs <unfixed> (embed)
1798 - kompozer <unfixed> (embed)
1799 - libv8 <unfixed> (embed)
1800 - mono <unfixed> (embed)
1801 - newlib <unfixed> (embed)
1802 - nspr <unfixed> (embed)
1803 - php5 <unfixed> (embed)
1804 - polyml <unfixed> (embed)
1805 - qt4-x11 <unfixed> (embed)
1806 - rhino <unfixed> (embed)
1807 NOTE: code translated to Java
1808 - ruby1.8 <removed> (embed)
1809 - ruby1.9 <unfixed> (embed)
1810 - ruby1.9.1 <removed> (embed)
1811 - sdd <unfixed> (embed)
1812 - sfind <unfixed> (embed)
1813 - star <unfixed> (embed)
1814 - tinymux <unfixed> (embed)
1815 - virtualbox-ose <unfixed> (embed)
1816 - webkit <unfixed> (embed)
1817 - xulrunner <unfixed> (embed)
1818
1819 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1820 - firegpg <unfixed> (embed)
1821 - enigmail <unfixed> (embed)
1822
1823 ptmalloc (not packaged in Debian)
1824 - crystalspace <unfixed> (embed)
1825 - qt4-x11 <unfixed> (embed)
1826
1827 svgalib
1828 - usplash <unfixed> (embed)
1829 - ia32-libs <removed> (embed)
1830
1831 bogl
1832 - usplash <unfixed> (embed)
1833
1834 taglist
1835 - usplash <unfixed> (embed)
1836
1837 portaudio
1838 - audacity <unfixed> (embed; bug #323711)
1839
1840 nyquist
1841 - audacity <unfixed> (embed)
1842 NOTE: embeds a forked nyquist with support for a shared library
1843
1844 vamp-plugin-sdk
1845 - audacity <unfixed> (embed)
1846
1847 wordpress
1848 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1849 - wordpress-mu <removed> (fork)
1850
1851 php5
1852 - php4 <removed> (old-version)
1853
1854 classpath
1855 - libgnucrypto-java <removed> (embed; bug #559788)
1856
1857 libtool
1858 - apr <unfixed> (static; bug #489625)
1859 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1860 - arts <unfixed> (embed)
1861 - bochs 2.4.2-1 (embed; bug #560884)
1862 - camserv <unfixed> (embed)
1863 - collectd 4.8.2-1 (embed)
1864 - courier-authlib 0.58-4 (embed)
1865 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1866 - cvsnt 2.5.04.3236-1.2 (embed)
1867 - dico <not-affected> (Uses the system copy of ltdl)
1868 - freeradius 0.1+20010527-1 (embed)
1869 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1870 - ggobi 2.1.9~20091212-1 (embed)
1871 - glame 2.0.1-4 (embed)
1872 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1873 - gnash 0.8.7-2 (embed)
1874 - gnu-smalltalk <unfixed> (embed; bug #566777)
1875 - google-gadgets 0.10.5-0.3 (embed)
1876 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1877 - graphicsmagick 1.3.5-6 (embed)
1878 - graphviz 2.8-3 (embed)
1879 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1880 - guile-1.6 1.6.8-7 (embed)
1881 - hamlib 1.2.11-1 (embed)
1882 - hercules 3.06-1.2 (embed)
1883 - jags 1.0.4-3 (embed; bug #560864)
1884 - kdelibs <unfixed> (embed)
1885 - libannodex <removed> (embed)
1886 - libextractor 0.5.23+dfsg-4 (embed)
1887 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1888 - libtunepimp 0.5.3-7.3 (embed)
1889 - mp4h 1.3.1-4.1 (Contains source code, but is compiled with --without-included-ltdl)
1890 - naim <removed> (embed)
1891 - parser-mysql <unfixed> (embed)
1892 - pinball 0.3.1-11 (embed)
1893 - redland <unfixed> (embed)
1894 - siproxd 1:0.8.1-2 (embed; bug #657070)
1895 - ski <unfixed> (embed)
1896 - synfig 0.62.00-1 (embed)
1897 - unixodbc 2.2.4-5 (embed)
1898 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1899 - clamav 0.95+dfsg-1 (embed)
1900 - imagemagick 6:6.2.3.1-1 (embed)
1901 - hypre 2.4.0b-5 (embed)
1902 - lam <unfixed> (embed)
1903 - openmpi <unfixable> (embed; bug #559386)
1904 - parser <unfixed> (embed)
1905 - pdsh 2.18-5 (embed; bug #560892)
1906 - sbnc 1.2-8 (embed)
1907 - sdcc <unfixed> (embed)
1908 - wml 2.0.11ds2-1 (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1909 - proftpd-dfsg <unfixed> (embed; bug #561748)
1910 - babel 1.4.0.dfsg-5 (embed)
1911 - libprelude 0.9.14-2 (embed)
1912 - heartbeat 2.1.4-7 (embed)
1913 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1914 NOTE: might've been fixed earlier
1915 - gcc-* <unknown> (embed)
1916 - ia32-libs <removed> (embed)
1917
1918 ocamlgsl
1919 - orpie 1.5.1-7.1 (embed; bug #550058)
1920
1921 xdotool
1922 - keynav <unfixed> (embed; bug #560103)
1923
1924 bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1925 - supertuxkart <unfixed> (embed)
1926 - blender <unfixed> (embed)
1927 - critterding <unfixed> (embed)
1928 NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1929
1930 ghostscript
1931 - gs-gpl <removed> (old-version)
1932
1933 icedove
1934 - thunderbird <removed> (old-version)
1935
1936 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1937 - jquery <unfixed> (embed)
1938
1939 sed
1940 - ssed <unfixed> (fork)
1941
1942 phpatomlib (http://code.google.com/p/phpatomlib)
1943 - wordpress <unfixed> (embed)
1944
1945 Services_JSON (http://pear.php.net/package/Services_JSON)
1946 - wordpress <unfixed> (embed)
1947
1948 phpass (http://www.openwall.com/phpass/)
1949 - gallery2 <unfixed> (embed)
1950 - wordpress <unfixed> (embed)
1951 - typo3-src <unfixed> (modified-embed)
1952 NOTE: file refers to drupal, maybe there's a copy somewhere there
1953 NOTE: a copyright owner search didn't match anything
1954 - libauthen-passphrase-perl <unfixable> (fork)
1955 NOTE: perl implementation of phpass
1956 - phpbb3 <unfixed>
1957 NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1958
1959 squirrelmail
1960 - wordpress <unfixed> (embed)
1961 NOTE: class-pop3.php
1962
1963 ezSQL (http://www.woyano.com/jv/ezsql)
1964 - wordpress <unfixable> (fork)
1965 NOTE: wp-db.php
1966
1967 Diff.php (Clay Loveless' version/killersoft.com)
1968 - php-versioncontrol-svn <unfixed>
1969
1970 libm (provided by libc)
1971 - spring <unfixed> (embed)
1972 NOTE: embedded by embedded copy of streflop
1973 - megaglest <unfixed> (embed)
1974 NOTE: embedded by embedded copy of streflop
1975 - aide <unfixed> (static)
1976 - busybox <unfixed> (static)
1977 - mindi-busybox <unfixed> (static)
1978 - qemu <unfixed> (static)
1979 NOTE: qemu-user-static
1980 - tuxonice-userui <unfixed> (static)
1981 - zsh <unfixed> (static)
1982 NOTE: zsh-static
1983 - tripwire <unfixed>
1984
1985 streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1986 - spring <unfixed> (modified-embed)
1987 NOTE: old, modified version of streflop
1988 - megaglest <unfixed> (modified-embed)
1989 NOTE: megaglest uses the same streflop code as spring
1990
1991 minizip
1992 - spring <unfixed> (embed)
1993 - libkml <unfixed> (modified-embed; bug #753069)
1994 - samba <unfixed> (embed)
1995 NOTE: didn't check whether it's used
1996 - zlib <unfixed> (embed; bug #753070)
1997 NOTE: only used to build minizip and miniunzip in zlib-bin package
1998 - virtuoso-opensource <unfixed> (embed)
1999 NOTE: didn't check whether it's used
2000 - luatex <unfixed> (embed)
2001 NOTE: didn't check whether it's used
2002 - tcl8.6 <unfixed> (embed)
2003 NOTE: didn't check whether it's used
2004 - chromium-browser <unfixed> (embed)
2005 - perl-tk <unfixed> (embed)
2006 NOTE: didn't check whether it's used
2007 - icedove <unfixed> (modified-embed)
2008 NOTE: didn't check whether it's used
2009 - ace <unfixed> (embed)
2010 NOTE: didn't check whether it's used
2011 - smplayer <unfixed> (embed)
2012 NOTE: didn't check whether it's used
2013 - povray <unfixed> (embed)
2014 NOTE: didn't check whether it's used
2015 - cegui-mk2 <unfixed> (embed)
2016 NOTE: didn't check whether it's used
2017 - freemat <unfixed> (embed)
2018 NOTE: didn't check whether it's used
2019 - funtools <unfixed> (embed)
2020 NOTE: didn't check whether it's used
2021 - tntnet <unfixed> (embed)
2022 NOTE: didn't check whether it's used
2023 - orthanc <unfixed> (embed)
2024 NOTE: didn't check whether it's used
2025 - instead <unfixed> (embed)
2026 NOTE: didn't check whether it's used
2027 - mupen64plus-core <unfixed> (embed)
2028 NOTE: didn't check whether it's used
2029 - sks-ecc <unfixed> (embed)
2030 NOTE: didn't check whether it's used
2031 - psi <unfixed> (embed)
2032 NOTE: didn't check whether it's used
2033 - fossil <unfixed> (embed)
2034 NOTE: didn't check whether it's used
2035 - wordgrinder <unfixed> (embed)
2036 NOTE: didn't check whether it's used
2037 - critcl <unfixed> (embed)
2038 NOTE: didn't check whether it's used
2039 - fceux <unfixed> (embed)
2040 NOTE: didn't check whether it's used
2041
2042 oscpack
2043 - spring <unfixed> (embed)
2044
2045 hpiutil2
2046 - spring <unfixed> (embed)
2047
2048 p7zip
2049 - spring <unfixed> (embed)
2050
2051 pythonqt (doesn't seem to be python-qtN, unknown source)
2052 - fontmatrix <unfixed> (embed)
2053 - elmerfem <unfixed> (embed)
2054
2055 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
2056 - docvert <unfixed> (embed)
2057 - jifty <unfixed> (embed)
2058 - kdenetwork <unfixed> (embed)
2059 - mediatomb <unfixed> (embed)
2060 - plastex <unfixed> (embed)
2061 - plone3 <removed> (embed)
2062 - python-chaco <unfixed> (embed)
2063 - python-docutils <unfixed> (embed)
2064 - s5 <unfixed> (embed)
2065 - zope2.10 <unfixed> (embed)
2066 - zope2.11 <removed> (embed)
2067 - cython <not-affcted> (embed)
2068 NOTE: part of documentation, which is not installed into the binary package
2069
2070 python-docutils
2071 - zope2.10 <unfixed> (embed)
2072 - zope2.11 <removed> (embed)
2073
2074 tesseract
2075 - ocropus <unfixed> (static)
2076
2077 antlr
2078 - kdevelop <unfixed> (embed)
2079
2080 libxerces2
2081 - openjdk-6 <unfixed> (embed)
2082
2083 kfreebsd-8
2084 - kfreebsd-7 <unfixed> (old-version)
2085 - kfreebsd-6 <removed> (old-version)
2086
2087 ruby1.9.1
2088 - ruby1.9 <unfixed> (old-version)
2089 - ruby1.8 <removed> (old-version)
2090
2091 maildrop
2092 - courier <unfixed> (embed) [./maildrop]
2093
2094 glee
2095 - warzone2100 <not-affected> (embed)
2096 - love 0.8.0-2 (embed; bug #690492)
2097
2098 phing
2099 - symfony <unfixed> (embed)
2100
2101 pake
2102 - symfony <unfixed> (embed)
2103
2104 propel
2105 - symfony <unfixed> (embed)
2106
2107 creole
2108 - symfony <unfixed> (embed)
2109
2110 hfsutils
2111 - cdrkit <unfixed> (embed; bug #570187)
2112 NOTE: embeds hfsutils code in genisoimage
2113
2114 cdrkit
2115 - grub2 <unfixed> (embed; bug #570156)
2116 NOTE: genisoimage imported into grub-mkisofs
2117
2118 kdebase-workspace
2119 - kdebase <unfixed> (old-version)
2120
2121 file
2122 - php5 <unfixable> (modified-embed)
2123 [lenny] - php5 <not-affected>
2124 - radare2 <unfixed> (embed)
2125 TODO: check if embed, modfied-embed or old-version
2126 - sleuthkit <unfixed> (embed)
2127 TODO: check if used
2128
2129 cdb
2130 - php5 <unfixed> (embed)
2131
2132 libmbfl (itp: #570708)
2133 - php5 <unfixed> (embed)
2134 NOTE: PHP is actually the current upstream, ITP is of that code
2135
2136 libonig
2137 - php5 5.3.2-1 (embed)
2138
2139 xmlrpc-epi
2140 - php5 <unfixed> (embed)
2141
2142 swt-gtk
2143 - eclipse <unfixed> (embed; bug #538808)
2144
2145 txt2html
2146 - wml 2.0.11ds2-1 (embed)
2147
2148 ca-certificates
2149 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
2150
2151 openexr
2152 - freeimage <unfixed> (embed)
2153
2154 libmng
2155 - freeimage <unfixed> (embed)
2156
2157 openjpeg
2158 - freeimage <unfixed> (embed)
2159
2160 libjpeg6b
2161 - freeimage <unfixed> (embed)
2162 - ia32-libs <removed> (embed)
2163
2164 libjpeg (don't know what exact version)
2165 - dcmtk <unfixed>
2166 - gdcm <unfixed>
2167 - insighttoolkit <unfixed>
2168 - openarena 0.8.5-5+exp1 (bug #495966)
2169 - outguess <unfixed>
2170 - squeak-vm <unfixed> (embed)
2171 - tremulous <unfixed>
2172 - tuxonice-userui <unfixed> (static)
2173 - fpc <unfixed> (static)
2174 - lazarus <unfixed> (static)
2175 NOTE: inherited from fpc, see #472304
2176 - mseide-msegui <unfixed> (static)
2177 NOTE: inherited from fpc, see #472304
2178 - easymp3gain <unfixed> (static)
2179 NOTE: inherited from fpc, see #472304
2180 - winff <unfixed> (static)
2181 NOTE: inherited from fpc, see #472304
2182 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2183 - ghostscript 8.64~dfsg-2 (embed)
2184
2185 lxr
2186 - lxr-cvs <unfixed> (embed)
2187
2188 libfile-copy-recursive-perl
2189 - r-base <unfixed> (embed; bug #577427)
2190 - r-base-core-ra <unfixed> (embed; bug #577429)
2191
2192 delimmatch
2193 - r-base <unfixed> (embed; bug #577433)
2194 - r-base-core-ra <unfixed> (embed; bug #577434)
2195
2196 libsmf (ITP: #572558)
2197 - denemo <unfixed> (embed)
2198 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2199
2200 libselinux
2201 - dpkg 1.15.6 (static)
2202 - ia32-libs <removed> (embed)
2203
2204 xinha (ITP: #479708)
2205 - horde3 <unfixed>
2206 - serendipity <unfixed>
2207 - openacs <unfixed>
2208 - dotlrn <unfixed>
2209
2210 dvipng
2211 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2212
2213 dvipdfmx
2214 - texlive-bin <unfixed> (embed)
2215 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2216
2217 lcdf-typetools
2218 - texlive-bin 2009-1 (embed)
2219
2220 tex4ht
2221 - texlive-bin 2009-1 (embed)
2222
2223 freetype
2224 - texlive-bin 2009-1 (embed)
2225 - ia32-libs <removed> (embed)
2226
2227 freetype2
2228 - texlive-bin <unfixed> (embed)
2229 [wheezy] - texlive-bin 2009-1 (embed)
2230 [squeeze] - texlive-bin 2009-1 (embed)
2231 - tuxonice-userui <unknown> (static)
2232 - instantbird <removed>
2233 - qt4-x11 <unknown> (embed)
2234 - vtk <unknown> (embed)
2235 - paraview <unknown> (embed)
2236 NOTE: from embedded copy of vtk
2237
2238 silgraphite
2239 - texlive-bin <unfixed> (embed)
2240
2241 unzip
2242 - texlive-bin 2009-1 (embed)
2243
2244 jbig2dec
2245 - ghostscript 8.71~dfsg2-1 (embed)
2246
2247 libxml2
2248 - chromium-browser 5.0.375.29~r46008-1
2249 - ia32-libs <removed> (embed)
2250
2251 protobuf
2252 - chromium-browser 5.0.375.70~r48679-2
2253
2254 libv8
2255 - chromium-browser 5.0.375.38~r46659-1
2256 - mongodb <not-affected>
2257 NOTE: builds against system copy
2258
2259 nspr
2260 - chromium-browser 5.0.375.29~r46008-3
2261 - ia32-libs <removed> (embed)
2262 - virtualbox <unfixed> (modified-embed)
2263
2264 yasm
2265 - chromium-browser 5.0.375.29~r46008-2
2266
2267 libxslt
2268 - chromium-browser 5.0.375.29~r46008-1
2269 - ia32-libs <removed> (embed)
2270
2271 miniupnpc
2272 - warzone2100 2.3.7-2
2273 NOTE: code still present in tarball but removed during build and unused
2274 - vino 3.2.2-1
2275 NOTE: code still present in tarball but removed during build and unused
2276 - vidalia 0.2.21-2 <unfixed> (old-version)
2277 NOTE: embedded old version might be modified
2278 - vidalia 0.2.21-3 <not-affected> (old-version)
2279 NOTE: code still present in tarball but unused during build
2280
2281 iniparser (not packaged in Debian; RFP bug #582657)
2282 - warzone2100 <unfixed> (modified-embed)
2283
2284 pyglet
2285 - sympy <unfixed> (embed; bug #459716)
2286
2287 mpmath
2288 - sympy <unfixed> (embed; bug #541746)
2289
2290 openssh
2291 - libpam-ssh <unfixed> (embed; bug #598522)
2292
2293 curl
2294 - cmake 2.6.0-6 (embed)
2295 NOTE: Might be fixed earlier. Lenny version recorded.
2296 - criticalmass <unfixed> (static; bug #599061)
2297 - wengophone 2.1.0~beta1-svn9983-1 (embed)
2298 - ia32-libs <removed> (embed)
2299
2300 lib3ds
2301 - boson <unfixed> (embed; bug #600900)
2302 - openscenegraph <unfixed> (embed; bug #601181)
2303
2304 xcftools
2305 - gnome-xcf-thumbnailer <unfixed> (embed)
2306
2307 simplejson
2308 - exaile <unfixed> (embed; bug #604547)
2309
2310 libasycns
2311 - loudmouth <unfixed> (embed; bug #566143)
2312
2313 plplot
2314 - emboss <unfixed> (fork)
2315
2316 acl
2317 - ia32-libs <removed> (embed)
2318
2319 arts
2320 - ia32-libs <removed> (embed)
2321
2322 attr
2323 - ia32-libs <removed> (embed)
2324
2325 audiofile
2326 - ia32-libs <removed> (embed)
2327
2328 avahi
2329 - ia32-libs <removed> (embed)
2330
2331 celt
2332 - ia32-libs <removed> (embed)
2333
2334 coreutils
2335 - ia32-libs <removed> (embed)
2336
2337 cyrus-sasl2
2338 - ia32-libs <removed> (embed)
2339
2340 db4.8
2341 - ia32-libs <removed> (embed)
2342
2343 dbus
2344 - ia32-libs <removed> (embed)
2345
2346 directfb
2347 - ia32-libs <removed> (embed)
2348
2349 esound
2350 - ia32-libs <removed> (embed)
2351
2352 fltk1.1
2353 - ia32-libs <removed> (embed)
2354
2355 fontconfig
2356 - ia32-libs <removed> (embed)
2357
2358 freeglut
2359 - ia32-libs <removed> (embed)
2360
2361 gcc-3.3
2362 - ia32-libs <removed> (embed)
2363
2364 gdbm
2365 - ia32-libs <removed> (embed)
2366
2367 gnutls26
2368 - ia32-libs <removed> (embed)
2369
2370 hal
2371 - ia32-libs <removed> (embed)
2372
2373 isdnutils
2374 - ia32-libs <removed> (embed)
2375
2376 jack-audio-connection-kit
2377 - ia32-libs <removed> (embed)
2378
2379 keyutils
2380 - ia32-libs <removed> (embed)
2381
2382 krb5
2383 - ia32-libs <removed> (embed)
2384
2385 lesstif2
2386 - ia32-libs <removed> (embed)
2387
2388 libaio
2389 - ia32-libs <removed> (embed)
2390
2391 libasyncns
2392 - ia32-libs <removed> (embed)
2393
2394 libcap2
2395 - ia32-libs <removed> (embed)
2396
2397 libdrm
2398 - ia32-libs <removed> (embed)
2399
2400 libedit
2401 - ia32-libs <removed> (embed)
2402
2403 libexif
2404 - ia32-libs <removed> (embed)
2405
2406 libgcrypt11
2407 - ia32-libs <removed> (embed)
2408
2409 libgpg-error
2410 - ia32-libs <removed> (embed)
2411
2412 libgphoto2
2413 - ia32-libs <removed> (embed)
2414
2415 libice
2416 - ia32-libs <removed> (embed)
2417
2418 libieee1284
2419 - ia32-libs <removed> (embed)
2420
2421 libjpeg8
2422 - ia32-libs <removed> (embed)
2423
2424 libnss-ldap
2425 - ia32-libs <removed> (embed)
2426
2427 libogg
2428 - ia32-libs <removed> (embed)
2429
2430 libpam-ldap
2431 - ia32-libs <removed> (embed)
2432
2433 libsamplerate
2434 - ia32-libs <removed> (embed)
2435
2436 libsdl1.2
2437 - ia32-libs <removed> (embed)
2438
2439 libsm
2440 - ia32-libs <removed> (embed)
2441
2442 libssh2
2443 - ia32-libs <removed> (embed)
2444
2445 libtasn1-3
2446 - ia32-libs <removed> (embed)
2447
2448 libx11
2449 - ia32-libs <removed> (embed)
2450
2451 libx86
2452 - ia32-libs <removed> (embed)
2453
2454 libxau
2455 - ia32-libs <removed> (embed)
2456
2457 libxcb
2458 - ia32-libs <removed> (embed)
2459
2460 libxcomposite
2461 - ia32-libs <removed> (embed)
2462
2463 libxcursor
2464 - ia32-libs <removed> (embed)
2465
2466 libxdamage
2467 - ia32-libs <removed> (embed)
2468
2469 libxdmcp
2470 - ia32-libs <removed> (embed)
2471
2472 libxext
2473 - ia32-libs <removed> (embed)
2474
2475 libxfixes
2476 - ia32-libs <removed> (embed)
2477
2478 libxi
2479 - ia32-libs <removed> (embed)
2480
2481 libxinerama
2482 - ia32-libs <removed> (embed)
2483
2484 libxmu
2485 - ia32-libs <removed> (embed)
2486
2487 libxp
2488 - ia32-libs <removed> (embed)
2489
2490 libxrandr
2491 - ia32-libs <removed> (embed)
2492
2493 libxrender
2494 - ia32-libs <removed> (embed)
2495
2496 libxss
2497 - ia32-libs <removed> (embed)
2498
2499 libxt
2500 - ia32-libs <removed> (embed)
2501
2502 libxtst
2503 - ia32-libs <removed> (embed)
2504
2505 libxv
2506 - ia32-libs <removed> (embed)
2507
2508 libxxf86vm
2509 - ia32-libs <removed> (embed)
2510
2511 mesa
2512 - ia32-libs <removed> (embed)
2513
2514 mpg123
2515 - ia32-libs <removed> (embed)
2516
2517 nas
2518 - ia32-libs <removed> (embed)
2519
2520 nss
2521 - ia32-libs <removed> (embed)
2522
2523 openal-soft
2524 - ia32-libs <removed> (embed)
2525
2526 openssl
2527 - ia32-libs <removed> (embed)
2528
2529 pam
2530 - ia32-libs <removed> (embed)
2531
2532 popt
2533 - ia32-libs <removed> (embed)
2534
2535 pulseaudio
2536 - ia32-libs <removed> (embed)
2537
2538 sane-backends
2539 - ia32-libs <removed> (embed)
2540
2541 sqlite3
2542 - ia32-libs <removed> (embed)
2543 - chromium-browser <unfixed> (embed)
2544
2545 sysfsutils
2546 - ia32-libs <removed> (embed)
2547
2548 tcp-wrappers
2549 - ia32-libs <removed> (embed)
2550
2551 tdb
2552 - thunar 1.2.1-3 (old-version)
2553 - ia32-libs <removed> (embed)
2554
2555 tslib
2556 - ia32-libs <removed> (embed)
2557
2558 unixodbc
2559 - ia32-libs <removed> (embed)
2560
2561 xaw3d
2562 - ia32-libs <removed> (embed)
2563
2564 xbitmaps
2565 - ia32-libs <removed> (embed)
2566
2567 xcb-util
2568 - ia32-libs <removed> (embed)
2569
2570 xcursor-themes
2571 - ia32-libs <removed> (embed)
2572
2573 xft
2574 - ia32-libs <removed> (embed)
2575
2576 dicomparser
2577 - vtk <unfixed>
2578 - paraview <unfixed>
2579 NOTE: as part of its copy of vtk
2580 - insighttoolkit <unfixed>
2581
2582 proj
2583 - vtk <unfixed>
2584 - paraview <unfixed>
2585 NOTE: as part of its copy of vtk
2586 - therion <unfixed>
2587 - python-pyproj 1.8.6-1
2588
2589 netcdf
2590 - vtk <unfixed>
2591 - paraview <unfixed>
2592 NOTE: as part of its copy of vtk
2593
2594 insighttoolkit
2595 - vtk <unfixed> (embed)
2596 NOTE: embeds at least MetaIO
2597 - paraview <unfixed> (embed)
2598 NOTE: embeds at least MetaIO
2599
2600 gl2ps
2601 - vtk <unfixed>
2602 - paraview <unfixed>
2603 NOTE: as part of its copy of vtk
2604 - avogadro <unfixed>
2605 - gabedit <unknown> (embed)
2606 NOTE: not sure if it is built
2607 - drawxtl <unfixed> (embed)
2608 - rgl <unfixed> (embed)
2609 - gmsh <unfixed>
2610 - mcrl2 <unfixed> (embed)
2611 - mysql-gui-tools <unknown> (embed)
2612 NOTE: not sure if it is built
2613 - opencascade <unfixed> (embed)
2614 - orsa <unfixed> (embed)
2615 - qtiplot <unfixed> (embed)
2616 - qwtplot3d <unfixed> (embed)
2617 - root-system <unknown> (embed)
2618 NOTE: not sure if it is built
2619 - scilab <unfixed> (embed)
2620 - snd <unknown> (embed)
2621 NOTE: not sure if it is built
2622 - xmakemol <unfixed> (embed)
2623
2624 qwtplot3d
2625 - qtiplot <unfixed>
2626
2627 parseafm (from Adobe)
2628 - vftool <unfixed>
2629 - gnustep-back <unknown>
2630 NOTE: looks like it isn't built
2631 - evince <unfixed>
2632
2633 bugzilla
2634 - perl <unknown>
2635 - libcgi-pm-perl <unknown>
2636
2637 isc-dhcp
2638 - dhcp3 <unfixable> (old-version)
2639 - dhcp <unfixable> (old-version)
2640
2641 chipmunk (ITP: #623274)
2642 - xmoto <unfixed> (embed; bug #623299)
2643 - libtuxcap <unfixed> (embed; bug #623300)
2644
2645 libsigsegv
2646 - gawk 3.1.8+dfsg-0.1
2647
2648 pdfrw
2649 - rst2pdf <unfixed> (embed; bug #638607)
2650
2651 bind9
2652 - isc-dhcp <unfixed> (embed; bug #643569)
2653 NOTE: introduced in upstream 4.2 series
2654
2655 qof
2656 - gnucash <unfixed> (embed; bug #556245)
2657
2658 feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2659 - megaglest <unfixed> (modified-embed)
2660
2661 acsccid
2662 - ccid 1.3.11 <unfixed> (fork)
2663 - openct <unfixed> (modified-embed)
2664 - towitoko <unfixed> (modified-embed)
2665
2666 ccid
2667 - openct <unfixed> (modified-embed)
2668 - towitoko <unfixed> (modified-embed)
2669
2670 msmtp
2671 - mpop <unfixed> (embed)
2672
2673 iCalcreator
2674 - collabtive <unfixed>
2675 NOTE: class.ical.php
2676 - glpi <unfixed>
2677
2678 plupload
2679 - wordpress <unfixed>
2680
2681 feedcreator (php lib)
2682 - collabtive <unfixed>
2683 NOTE: class.rss.php
2684 - piwigo <unfixed>
2685 - dokuwiki <unfixed> (modified-embed)
2686 NOTE: dokuwiki uses an "enhanced" version
2687
2688 emacs
2689 - le <unfixed>
2690 NOTE: it uses an almost-pristine 2008 version of emacs' regex.{c,h}
2691
2692 libjsoncpp
2693 - eiskaltdcpp <unfixed> (embed)
2694 - drizzle <unfixed> (embed)
2695
2696 mongoose
2697 - phantomjs <unfixed> (modified-embed)
2698
2699 rapidxml (not packaged in Debian, http://rapidxml.sourceforge.net)
2700 - boost1.49 <unfixed> (embed)
2701 - boost1.50 <unfixed> (embed)
2702 - deal.ii <unfixed> (embed)
2703 - fife <unfixed> (embed)
2704 - witty <unfixed> (embed)
2705
2706 make
2707 - remake <unfixed> (fork)
2708
2709 metacity
2710 - mutter <unfixed> (fork)
2711
2712 mutter
2713 - muffin <unfixed> (fork)
2714
2715 libjson-spirit-dev
2716 - bitcoin <unfixed> (modified-embed)
2717 - litecoin <itp> (modified-embed; bug #693492)
2718
2719 bitcoin
2720 - litecoin <itp> (fork; bug #693492)
2721
2722 json-spirit
2723 - bitcoin <unfixed> (modified-embed)
2724 - litecoin <itp> (modified-embed; bug #693492)
2725
2726 libupnp
2727 - mediatomb <unfixable> (fork)
2728 - djmount <unfixed> (embed; bug #699562)
2729
2730 flowplayer-core (not packaged in Debian)
2731 - mahara <unfixed> (modified-embed)
2732
2733 dcraw
2734 - ufraw <unfixed>
2735 - libraw <unfixed>
2736 - kdcraw <unfixed>
2737 NOTE: in embedded copy of libraw
2738 - xbmc <unfixed>
2739 - exactimage <unfixed>
2740 - rawtherapee <unfixed>
2741 - rawstudio <unfixed>
2742
2743 libraw
2744 - libkdcraw 4:4.12.3-1
2745 - darktable <unfixed> (modified-embed; bug #682980)
2746 - shotwell <unfixed>
2747 NOTE: possibly fixed in wheezy and greater
2748
2749 mednafen
2750 - libvorbisidec 0.9.17.1-1
2751 [squeeze] - libvorbisidec <unfixed>
2752 [wheezy] - libvorbisidec <unfixed>
2753 NOTE: not-affected since 0.9.17.1-1 (as above)
2754 NOTE: mednafen 0.8.D.3-4 and 0.8.D.3-5 attempted to use the packaged libvorbisidec,
2755 NOTE: but this breaks CD playback when using .ogg files (see #699143), so it's
2756 NOTE: likely that future packages in the 0.8 series will build using the embedded code.
2757 - libmpcdec 0.9.21-1
2758 NOTE: not-affected since 0.9.21-1 (as above)
2759
2760 xmoto
2761 - chipmunk <unfixed> (bug #623299)
2762
2763 irrlicht
2764 - supertuxkart <unfixed> (modified-embed)
2765
2766 snappy
2767 - chromium-browser 35.0.1916.86-1
2768 NOTE: not sure if it's build
2769 - mongodb <unfixed>
2770 NOTE: needs further checks
2771 - couchdb <unfixed>
2772 - libsereal-decoder-perl <unfixed>
2773 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2774 - libsereal-encoder-perl <unfixed>
2775 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2776
2777 automysqlbackup
2778 - autopostgresqlbackup <unfixed>
2779 NOTE: fork
2780
2781 python-pip
2782 - python-virtualenv <unfixed>
2783
2784 scrypt
2785 - python-scrypt <unfixed> (embed; wontfix; package in NEW)
2786 NOTE: upstream scrypt does not provide a shared library/API
2787
2788 srtp
2789 - chromium <unfixed>
2790 - qutecom <unfixed>
2791
2792 fonttools
2793 - python-enable <unfixed> (embed; bug #715145)
2794
2795 uglifyjs
2796 - ruby-uglifier <unfixed> (modified-embed; bug #718367)
2797
2798 openacs
2799 - dotlrn <unfixed> (modified-embed; bug #718487)
2800
2801 jsgantt
2802 - rt4-extension-jsgantt <unfixed> (embed; bug #724287)
2803 - trac-jsgantt <unfixed> (embed; bug #724287)
2804 NOTE: jsgantt is not packaged seperately so far
2805
2806 libjs-pdf
2807 - iceweasel <unfixed> (fork)
2808
2809 jmapviewer
2810 - josm <unfixed> (embed; bug #731029)
2811
2812 qt4-x11
2813 - phantomjs <unfixed> (embed)
2814 NOTE: phantomjs embeds parts of src/
2815
2816 eigen3
2817 - r-cran-rcppeigen <unfixed> (modified-embed; bug #729716)
2818
2819 libyaml
2820 - libyaml-libyaml-perl <unfixed> (embed; bug #664224)
2821
2822 liblivemedia
2823 - vlc <unfixed> (static)
2824 - mplayer <removed> (static)
2825
2826 python-gnupg
2827 - gajim <unfixed> (modified-embed)
2828
2829 xchat:
2830 - hexchat <unfixed> (fork)
2831
2832 libjs-jquery-filetree (not packaged in Debian; RFP bug #741581; http://www.abeautifulsite.net/blog/2008/03/jquery-file-tree/ https://github.com/daverogers/jQueryFileTree)
2833 - controlaula <unfixed> (embed)
2834 - dolibarr <unfixed> (embed)
2835
2836 libjs-jquery-bbq (not packaged in Debian; RFP bug #741586; http://benalman.com/projects/jquery-bbq-plugin/ http://github.com/cowboy/jquery-bbq)
2837 - drupal7 <unfixed> (embed)
2838 - ganglia-web <unfixed> (embed)
2839 - jqapi <unfixed> (embed)
2840
2841 lame
2842 - mp3gain <unfixed> (modified-embed)
2843 NOTE: ancient copy, part of mpglib which was probably part of mpg123 at some point
2844
2845 zopfli
2846 - pigz <unfixed> (embed)
2847 - advancecomp <unfixed> (embed)
2848
2849 libquazip
2850 - pencil2d <unfixed> (modified-embed)
2851
2852 syslogd
2853 - rsyslog <unfixed> (fork)
2854
2855 libebur128
2856 - mlt <unfixed> (modified-embed; bug #762341)
2857
2858 wpa
2859 - moonshot-gss-eap <unfixed> (embed)
2860 NOTE: Functionality not available in stable library form
2861
2862 liblmdb
2863 - openldap <unfixed> (embed; bug #750023)
2864
2865 gnome-screensaver
2866 - mate-screensaver <unfixed>
2867 - cinnamon-screensaver <unfixed>
2868 - light-locker <unfixed>
2869
2870 aglfn
2871 - cups-filters <unfixed> (embed; bug #709584)
2872 - qtbase-opensource-src <unfixed> (embed; bug #709586)
2873 - gnuplot 4.6.3-2 (embed; bug #709583)
2874 - latex-cjk-chinese-arphic 1.23 (embed; bug #709585)
2875
2876 texlive-bin
2877 - texstudio 2.8.0+debian-1 (embed; bug #753806)
2878 NOTE: embeds synctex parser
2879 - texmaker 4.2-2 (embed; bug #753812)
2880 NOTE: embeds synctex parser
2881 - texworks 0.5~svn1363-5 (embed; bug #753818)
2882 NOTE: embeds synctex parser
2883 - gummi <unfixed> (embed; bug #753827)
2884 NOTE: embeds synctex parser
2885 - evince <unfixed> (embed; bug #754136)
2886 NOTE: embeds synctex parser
2887 - okular <unfixed> (embed; bug #754137)
2888 NOTE: embeds synctex parser
2889 - qpdfview <unfixed> (embed; bug #754138)
2890 NOTE: embeds synctex parser
2891
2892 libmspack
2893 - cabextract 1.4-5 (embed; bug #675560)
2894 - msn-pecan <unfixed> (embed; bug #675555)
2895 - evolution-ews <unfixed> (embed; bug #675556)
2896 - convlit <unfixed> (embed; bug #675557)
2897 - clamav 0.98.5~beta1+dfsg-1 (modified-embed; bug #675558)
2898 - wine <not-affected> (bug #675559)
2899 NOTE: wine: has a lot of source files that share the same names as the files
2900 NOTE: in libmspack, but they are entirely different implementations.
2901 - wine-development <not-affected> (bug #675561)
2902 NOTE: wine: has a lot of source files that share the same names as the files
2903 NOTE: in libmspack, but they are entirely different implementations.
2904 - calibre <unfixed> (embed; bug #675562)
2905
2906 tzdata
2907 - postgresql-9.1 <unfixed> (modified-embed)
2908 NOTE: unused (./configure --with-system-tzdata)
2909 - postgresql-9.4 <unfixed> (modified-embed)
2910 NOTE: unused (./configure --with-system-tzdata)
2911 - pike7.8 <unfixed> (embed)
2912 - libdatetime-timezone-perl <unfixed> (modified-embed; bug #416206)

  ViewVC Help
Powered by ViewVC 1.1.5