/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 27609 - (show annotations) (download)
Sat Jul 5 18:34:50 2014 UTC (3 weeks, 5 days ago) by elbrus
File size: 75786 byte(s)
Update version in embedded-code-copies for cacti
1 Embedded code copies
2 ====================
3
4 https://wiki.debian.org/EmbeddedCodeCopies
5 This file collects source packages that embed code from other projects.
6 This is considered bad for fixing security flaws because the fix needs
7 to be applied in multiple source packages.
8
9 Format:
10 <srcpkg> (<optional comment about srcpkg>)
11 - <embedding srcpkg> <status> (<sort>; bug #<number>)
12 NOTE: optional comments about the linkage of the embedding srcpkg
13
14 status: version number fixing the embedded copy
15 <unfixed> if the issue is not yet fixed
16 <removed> if the package was removed from the archive
17 <itp> if the package is in the process of being packaged
18 <not-affected> if the package does not use the embedded copy
19 <unknown> if the version number can not be determined
20 <unfixable> for unavoidable cases (e.g., forks that add real value)
21 sort: static (linking statically against a lib)
22 embed (embeds a copy of the library into another source package)
23 modified-embed (embeds a code copy that differs from upstream code)
24 fork (a full-blown fork of another source package)
25 old-version (an older version of essentially the same code)
26
27 The srcpkg might be some string to identify the code if there is no
28 specific source package.
29
30 Everything up to the next line is ignored.
31 ---BEGIN
32 poppler
33 - pdftohtml <unknown>
34 [sarge] - pdftohtml <unfixed>
35 [etch] - pdftohtml <unfixed>
36 NOTE: has been replaced by poppler-utils
37 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38 - texlive-base 3.0-12 (embed)
39 - texlive-bin 2007-1 (embed)
40 - koffice 1:2.0.0-1 (embed; bug #436163)
41 - libextractor 0.5.12-1 (embed)
42 NOTE: libextractor is using its own pdf decoder now
43 - ipe <unfixed> (embed)
44 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45 - ruby-gnome2 <unknown> (embed)
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <removed> (embed; bug #551293)
48 - xpdf 3.02-9 (fork)
49 - luatex <unfixed>
50 NOTE: detected by lintian, needs to be checked/confirmed
51
52 pdksh (no longer developed since 1999)
53 - mksh <unfixable> (fork)
54 - posh <unfixable> (fork)
55
56 ppmd
57 - libcomplearn-mod-ppmd <unfixed> (fork)
58 NOTE: discussion in #458152
59
60 libevent
61 - transmission 1.71-1 (embed; bug #529372)
62 - chromium-browser 5.0.375.29~r46008-1
63 - dnsproxy <unknown> (embed)
64
65 lrmi
66 - read-edid 2.0.0-1 (embed; bug #495131)
67 - s3switch <unfixed> (embed)
68 - xresprobe <unfixed> (embed)
69 - zhcon <unfixed> (embed)
70
71 php-htmlpurifier
72 - mahara 1.2.5-1 (embed)
73 - knowledgeroot 0.9.9.5-5 (embed)
74 - moodle 2.5.1-1 (embed)
75
76 peercast
77 - gnome-peercast <removed> (embed)
78 [etch] - gnome-peercast <unfixed> (embed)
79
80 silc-toolkit
81 - silc-client 1.1~beta6-1 (embed)
82
83 icclib
84 - ghostscript <unfixed> (embed)
85 - argyll <unfixed> (embed)
86
87 libusb
88 - argyll <unfixed> (embed)
89 - ia32-libs <removed> (embed)
90
91 dietlibc
92 - ccontrol 0.9.1+20071204-1 (static)
93 - mksh <unfixable> (static)
94 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
95
96 libmikmod
97 - pysol-sound-server <unfixed> (modified-embed)
98 - sdl-mixer1.2 <unfixed> (embed)
99 TODO: report bug
100 - uqm 0.6.2.dfsg-8 (embed)
101 NOTE: Might be fixed earlier. Lenny version recorded.
102 - black-box 1.4.6-2.2 (embed)
103 NOTE: Might be fixed earlier. Lenny version recorded.
104
105 libiax
106 - iaxmodem <unfixable> (embed; bug #548885)
107
108 spandsp
109 - iaxmodem <unfixable> (embed; bug #548885)
110
111 python-paramiko
112 - fabric 0.9.0-2 (embed; bug #561398)
113
114 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
115 - dpkg 1.15.6 (static)
116 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
117 - rsync <unfixed> (embed)
118 - cherokee <unfixed> (embed)
119 NOTE: somehow derived code base
120 - mono <unfixed> (embed)
121 TODO: check mozilla
122 - linux-2.6 <unfixed> (embed)
123 - pvpgn 1.7.8-2 (embed)
124 - mrtg 2.12.2-1 (embed)
125 - rpm <unknown> (embed)
126 NOTE: pinged anibal since when rpm was fixed
127 - tuxcmd-modules <unfixed> (embed)
128 - zsync <unfixed>
129 - tra <unfixed>
130 - sash <unfixed>
131 - nsis <unfixed>
132 - pyfits 1:2.3.1-1
133 - mseide-msegui <unfixed>
134 NOTE: mseide
135 - mirrordir <unfixed>
136 - poco <unfixed>
137 - klibc <unfixed>
138 - emboss 6.3.1-1 (embed)
139 - ghostscript 8.71~dfsg2-6 (embed)
140 NOTE: ghostscript fixed sometime before this, but this is the version i checked
141 - freeimage <unfixed>
142 - clamav <unfixed> (fork)
143 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
144 - tuxonice-userui <unfixed> (static)
145 - plt-scheme <unfixed>
146 - perl <unfixed>
147 - paraview <unfixed>
148 - velvet 0.7.56~nozlibcopy-1
149 - gcvs <unfixed>
150 - dump <unfixed>
151 - aide <unfixed> (static)
152 - dar <unfixed> (static)
153 - avfs <unfixed>
154 - fpc <unfixed>
155 - winff <unfixed>
156 NOTE: inherited from fpc, see #472304
157 - lazarus <unfixed>
158 NOTE: inherited from fpc, see #472304
159 - erlang <unfixed> (embed)
160 - gamera 3.2.3-1 (embed)
161 - python2.4 <unfixed> (embed; bug #553403)
162 - python2.5 <unfixed> (embed; bug #553403)
163 - texlive-bin 2013.20130522.30620-1 (embed)
164 - sudo <unknown> (embed)
165 NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
166
167 dulwich
168 - hg-git 0.1.0-1 (embed; bug #541996)
169
170 libvigraimpex
171 - hugin <unfixed> (embed; bug #542259)
172 - enblend-enfuse <unfixed> (embed; bug #542258)
173 - gamera 3.2.3-1 (embed)
174
175 libbz2
176 - dpkg 1.15.6 (static)
177 - amd64-libs <unfixed> (static)
178 NOTE: let's call it "static"
179 - dar <unfixed> (static)
180 - dump <unfixed> (static)
181 - unalz 0.64-1 (embed)
182 NOTE: has code, by the maint, to use the system version but links against the internal copy
183 - clamav <unfixed> (embed)
184 NOTE: libclamav/nsis/bzlib*
185 - pristine-tar <unfixable> (modified-embed)
186 NOTE: compression code only, not uncompression
187 - r-base-core-ra 1.2.8 (static)
188 - r-base-core 2.11.1 (static)
189 NOTE: links dynamically in squeeze, statically in lenny
190 - rpm <unfixed> (static)
191 NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
192
193 libyahoo2
194 - centerim <unfixed> (embed; bug #559783)
195
196 libmsn
197 - centerim <unfixed> (embed; bug #559783)
198
199 libgadu
200 - centerim <unfixed> (embed; bug #559783)
201 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
202 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
203 - kdenetwork 4:3.3.2-5 (embed)
204 NOTE: from kdenetwork: kopete
205 - ekg 1:1.8~rc0-1 (embed)
206 - kadu 0.6.0.2-3 (embed; bug #504430)
207 - gadu <itp> (embed)
208
209 xmlrpc (which package is the "origin" of this code?)
210 - drupal <unfixed> (embed)
211 - phpgroupware <unfixed> (embed)
212 - egroupware <unfixed> (embed)
213 - phpwiki <unfixed> (embed)
214 - php4 <removed> (embed)
215 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
216
217 shtool (affects build-time only)
218 - mysql-ocaml <unfixed> (embed)
219 - php4 <removed> (embed)
220 - php5 <unfixed> (embed)
221
222 xulrunner
223 - iceape <unfixed> (embed; bug #561749)
224 - iceweasel 2.0.0.19 (embed)
225 - icedove <unfixed> (embed; bug #561750)
226 - kompozer <unfixed> (embed; bug #532168)
227 - galeon 2.0.2-4 (embed)
228 - epiphany-browser 2.14.3-8 (embed)
229 - conkeror 0.9~git080629-2 (embed)
230 - kazehakase 0.4.2-1 (embed)
231 - wine-gecko-unstable <unfixed> (embed; bug #669672)
232
233 xli
234 - xloadimage <unfixed> (embed)
235
236 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
237 - openmotif <unfixed> (embed)
238
239 libxpm
240 - lesstif2 <unfixed> (embed; bug #575750)
241 - ia32-libs <removed> (embed)
242
243 kerberized apps with BSD origin
244 - krb4 <removed> (embed)
245 - krb5 <unfixed> (embed)
246 - heimdal <unfixed> (embed)
247
248 grip (which pkg is the origin?)
249 - libcdaudio <unfixed>
250 - grip <unfixed>
251 - gnome-vfs <unfixed>
252 TODO: check vfs2 as well
253
254 fudforum
255 [etch] - phpgroupware <unfixed> (embed)
256 NOTE: phpgroupware-fudforum
257 [sarge] - egroupware-fudforum <removed> (embed)
258
259 libbsd
260 - rdate 1:1.2-3 (embed)
261 - atheme-services <unfixed>
262 - libbsd-arc4random-perl <not-affected> (modified-embed)
263 NOTE: code not used, it links dynamically against libbsd instead
264 - isakmpd <unfixed>
265 - bsdgames <unfixed> (embed)
266 - bsd-mailx <unfixed> (embed)
267 - netcat-openbsd <unfixed> (embed; bug #550611)
268 - openssh <unfixed> (embed)
269 - unworkable <unfixed> (embed)
270 - mksh <unfixed> (modified-embed)
271 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
272 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
273 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
274 - ia32-libs <removed> (embed)
275
276 cvs
277 - gcvs <unfixed> (embed)
278 NOTE: see cvsunix/src in tarball
279
280 pcre3
281 - php4 <removed> (embed)
282 - analog 2:5.23-0woody1 (embed)
283 - chicken 3.2.7-2 (embed)
284 NOTE: Might be fixed earlier. Lenny version recorded.
285 - goffice <unfixed> (embed)
286 NOTE: libgoffice-*
287 - hypermail 2.2.0.dfsg-2 (embed)
288 NOTE: Might be fixed earlier. Lenny version recorded.
289 - privoxy 3.0.9-1 (embed)
290 NOTE: Might be fixed earlier. Lenny version recorded.
291 - vfu 4.06-4.1 (embed; bug #450754)
292 - tf5 5.0beta7-1 (embed)
293 - monotone 0.43-1 (embed)
294 NOTE: this only affects versions >= 0.37
295 - glib2.0 2.15.2-1 (embed)
296 - apache2 2.0.53-4 (embed)
297 - exim4 4.10-0.srh20.12 (embed)
298 - yacas <unfixed> (embed)
299 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
300 - gtamsanalyzer.app 0.42-5 (embed)
301 - tin 980117-1 (embed)
302 - kazehakase 0.5.2-1
303 - webkit 1.0.1-1 (embed)
304 - qt4-x11 <unfixed> (embed)
305 NOTE: embedded via webkit copy
306 - erlang <unfixed> (embed)
307 - ssed <unfixed> (embed)
308 - ircd-hybrid <unfixed> (static)
309 - emboss <unfixed> (fork)
310 - cherokee <unfixed> (embed)
311 - oftc-hybrid 1.6.9.dfsg-1 (embed)
312 - ratbox-services <unfixed> (embed)
313 - squeak-vm <unfixed> (embed)
314 - tinymux <unfixed> (embed)
315 - mp4h <unfixed> (embed)
316
317 tiff
318 - wxwindows2.4 2.2.1 (embed)
319 - gamera 3.2.3-1 (embed)
320 - freeimage <unfixed> (embed)
321 - libtk-img <unfixed> (embed; bug #732147)
322 NOTE: there are two copies, one under tiff/ other under libtiff/
323 - gdal <unfixed>
324 - ia32-libs <removed> (embed)
325 - tiff3 <unfixable> (old-version)
326
327 uudeview
328 - libconvert-uulib-perl <unfixed> (embed)
329 - pan <unfixed> (embed)
330
331 sqlite
332 - amarok <unfixed> (embed)
333 - monotone 0.43-1 (embed)
334 - iceweasel <unfixed> (embed)
335 - heimdal <unfixed> (embed; bug #559616)
336
337 util-linux
338 - loop-aes-utils <unfixed> (embed)
339 NOTE: contains code from util-linux' mount in the mount-aes-udeb
340 - ia32-libs <removed> (embed)
341
342 sylpheed
343 - sylpheed-claws <unfixed> (fork)
344
345 phpsysinfo
346 - egroupware <unfixed> (embed)
347 - phpgroupware <unfixed> (embed)
348
349 phpldapadmin
350 [sarge] - egroupware <unfixed> (embed)
351 NOTE: removed from egroupware after sarge
352
353 chmlib
354 - kchmviewer <unknown> (embed)
355
356 ffmpeg (libavcodec/libavformat)
357 - mplayer 1.0~rc2-14 (embed; bug #395252)
358 - kino 1.0.0-1
359 - vlc <not-affected> (Links dynamically since initial release)
360 - smilutils 0.3.0-10
361 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
362 - motion 3.1.19-1
363 - gstreamer0.10-ffmpeg 0.10.3-2
364 - xmovie <removed> (static)
365 TODO: gimp-gap (potentially using ffmpeg code as well)
366 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
367 - audacity 1.3.7-2 (embed; bug #512278)
368 - chromium-browser <unfixed> (fork)
369 - libav <unfixed>
370
371 faad2
372 - mplayer 1.0~rc2-20 (embed)
373 - avifile <unfixed> (embed; bug #538750)
374 - ffmpeg-debian <removed> (embed)
375
376 libmad (MPEG decoding lib)
377 - xine-lib <unfixed> (embed)
378 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
379 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
380
381 libdts
382 - xine-lib <unfixed> (embed)
383
384 flac
385 - xine-lib <unfixed> (embed)
386 - ia32-libs <removed> (embed)
387
388 liba52
389 - a52dec <unfixed> (embed)
390 - xine-lib <unfixed> (embed)
391
392 mpeg2dec (libmpeg2)
393 - xine-lib <unfixed> (embed)
394
395 libmpeg3
396 - squeak-vm <unfixed> (embed)
397
398 libntlm
399 - wget <unfixed> (fork; bug #550436)
400 - curl <unfixed> (fork; bug #550437)
401 - cntlm <unfixed> (fork; bug #550438)
402
403 uw-imap
404 - pine <unfixed> (embed)
405 - alpine <unfixed> (embed)
406
407 imagemagick
408 - graphicsmagick <unfixed> (fork)
409
410 python-urlgrabber
411 - mercurial <unfixed> (embed; bug #531062)
412 - w3af <unfixed> (embed; bug #555372)
413 [experimental] - harvestman <unfixed> (embed; bug #555373)
414
415 beautifulsoup
416 - python-mechanize <unfixed> (embed; bug #555349)
417 - zope2.11 <removed> (embed; bug #555350)
418 - twill <unknown> (embed)
419
420 halibut
421 - nsis <unfixed> (fork)
422
423 libghttp
424 - hotway <unfixed> (embed)
425
426 libsndfile
427 - ardour 1:2.7.1-1 (embed)
428 - ia32-libs <removed> (embed)
429
430 glibmm2.4
431 - ardour 1:2.7.1-1 (embed)
432
433 libgnomecanvasmm2.6
434 - ardour 1:2.7.1-1 (embed)
435
436 libsigc++-2.0
437 - ardour 1:2.7.1-1 (embed)
438 - ia32-libs <removed> (embed)
439
440 soundtouch
441 - ardour 1:2.7.1-1 (embed)
442
443 libmms
444 - xine-lib <unfixed> (embed)
445 - mimms <unfixed> (embed)
446
447 ckeditor
448 - request-tracker4 <unfixed> (embed)
449
450 fckeditor
451 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
452 - moin 1.8.2-2 (embed; bug #452599)
453 - karrigell <removed> (embed; bug #452598)
454 - gforge 4.6.99+svn6225-1 (embed)
455 - request-tracker3.8 <unfixed> (embed)
456 - otrs2 <unfixed> (embed)
457
458 libphp-phpmailer
459 - moodle 2.5.1-1 (embed; bug #507185)
460 - mahara <unfixed> (embed)
461 - symfony <unfixed> (embed; bug #566778)
462 [etch] - phpgroupware <unfixed> (embed)
463 NOTE: phpgroupware-felamimail is only in etch
464 - egroupware <unfixed> (embed; bug #504283)
465 - glpi 0.80.7-2
466
467 giflib
468 - wine <unfixed> (fork; bug #466181)
469 NOTE: the embedded code is a fork of ungif, which is an older version of giflib
470
471 bennu (not packaged in Debian, http://bennu.sourceforge.net)
472 - moodle <unfixed> (embed)
473
474 smarty
475 - gallery2 2.2.5-2 (embed; bug #471160)
476 - mahara 0.9.2-2 (embed; bug #471201)
477 - gosa 2.4beta1-1 (embed; bug #471200)
478
479 TinyMCE
480 - wordpress 2.5.1-3 (embed; bug #478257)
481 - moodle <unfixed> (embed; bug #507185)
482 - knowledgeroot <unfixed> (embed)
483 - joomla <itp> (bug #326398)
484 - mahara 1.2.6-1 (embed; #597752)
485 - glpi 0.80.7-2
486
487 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
488 - scite <unfixed> (embed)
489 - qscintilla <unfixed> (embed)
490 - qscintilla2 <unfixed> (embed)
491 - geany <unfixed> (fork)
492 - anjuta <unfixed> (embed)
493 - sdlbasic <unfixed> (embed)
494
495 libphp-adodb
496 - moodle 2.5.1-1 (embed; bug #507185)
497 NOTE: also AdoDB-XML Schema
498 - gallery2 <unfixed> (embed)
499 - phppgadmin <unfixed> (embed)
500 - egroupware <unfixed> (embed)
501 - phpwiki <unfixed> (embed)
502 - torrentflux 2.0beta1-2 (embed)
503 - ipplan <unfixed> (embed)
504 - typo3-src <unfixed> (embed)
505 - cacti 0.8.6d-1 (embed)
506 [sarge] - cacti <unfixed> (embed)
507 NOTE: dependency exists, but internal version is used
508 - gforge 4.7~rc2-6 (embed)
509 - mahara <unfixed> (embed)
510
511 gzip
512 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
513 - klibc <unfixed> (embed)
514 NOTE: based on linux-kernel gzip code
515 - busybox <unfixed> (embed)
516 - pristine-tar <unfixed> (modified-embed)
517 NOTE: compression code only, not uncompression
518 - ncompress <unfixed> (old-version)
519
520 neon
521 - cadaver 0.22.3+debian-1 (embed; bug #188381)
522 - gnome-vfs2 <unfixed> (embed; bug #395874)
523 [etch] - litmus <unfixed> (embed; #395875)
524 - litmus <removed> (embed; #395875)
525 [sarge] - screem <unfixed> (embed)
526 - sitecopy 1:0.16.0-1 (embed; bug #395876)
527 [etch] - tla <unfixed> (embed; bug #395877)
528 [sarge] - tla <unfixed> (embed; bug #395877)
529
530 libmodplug
531 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
532
533 libvncserver
534 - vino <unfixed> (embed)
535
536 putty
537 - filezilla <unfixed> (embed)
538
539 tinyxml
540 - filezilla <unfixed>
541 - crystalspace <unfixed> (embed)
542 - libwfut <unfixed> (embed)
543 - rarian <unfixed> (embed)
544 - bulletml <unfixed> (embed)
545 - pokerth <unfixed> (embed)
546 - qutecom <unfixed> (embed)
547 - sofa-framework <unfixed> (embed)
548 - yate <unfixed> (embed)
549 - antigrav <unfixed> (embed)
550 - balder2d <unfixed> (embed)
551 - cal3d <unfixed> (embed)
552 - criticalmass <unfixed> (embed)
553 - ember <unfixed> (embed)
554 - epiphany <unfixed> (embed)
555 - gambit <unfixed> (embed)
556 - noiz2sa <unfixed> (embed)
557 - ogre <unfixed> (embed)
558 - opencity <unfixed> (embed)
559 - openmovieeditor <unfixed> (embed)
560 - pouetchess <unfixed> (embed)
561 - tecnoballz <unfixed> (embed)
562 - trigger-rally <unfixed> (embed)
563 - xmoto <unfixed> (embed)
564 - mapnik <unknown> (embed)
565 NOTE: uses a different XML parser by default
566 - rrootage 0.23a-6 <embed>
567 NOTE: links to libbulltetml
568 - boson <unknown> (embed)
569 NOTE: the embedded code is unused
570 - cppcheck <unfixed> (embed)
571 NOTE: introduced in 1.47, will use system's version in 1.48
572 [squeeze] - cppcheck <not-affected>
573
574 gv
575 - evince <unfixed> (embed)
576 NOTE: ps/ tree from gv 3.5.8
577 NOTE: evince-gtk is affected (a component of evince source package)
578
579 libXbae
580 - paw <unfixed> (embed)
581
582 libgtkhtml
583 - claws-mail-extra-plugins <unfixed> (fork)
584
585 libXaw
586 - paw <unfixed> (embed)
587 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
588 - ia32-libs <removed> (embed)
589
590 libgd2
591 - graphviz 2.16-1 (embed)
592 NOTE: lib/gd seems to be 2.0.33
593 - wml 2.0.11ds2-1 (embed)
594 - libwmf <unfixed> (embed)
595 NOTE: derived from gd 1.6.3, but only used to write images
596 - plt-scheme <unfixed> (embed; bug #601525)
597 - texlive-bin 2013.20130522.30620-1 (embed)
598
599 rar
600 - unrar-nonfree <unfixed> (embed)
601
602 unrar-free (maybe this code is derived from the original rar, too?)
603 - clamav <unfixed> (embed)
604 NOTE: seems to be disabled in default config
605
606 mplayer (DirectMedia Object loader)
607 - xine-lib <unfixed> (embed)
608 NOTE: src/libw32dll/
609 - vlc <unfixed> (embed)
610 NOTE: modules/codec/dmo/
611 - mplayer 1.0~rc2-20 (embed)
612
613 libwpd (WordPerfect converter)
614 - openoffice.org <unfixed> (embed)
615
616 fsplib (http://sourceforge.net/projects/fsp/)
617 - gftp <unfixed> (embed)
618 NOTE: lib/fsplib version 0.3
619
620 sprng
621 - tree-puzzle <unfixed> (embed)
622
623 librpcsecgss
624 - krb5 <unfixed> (embed)
625
626 jasper
627 - ghostscript 8.64~dfsg-2 (embed)
628
629 libiris
630 - psi <unfixed> (embed)
631 - kdenetwork <unfixed> (embed)
632 NOTE: kopete embeds libiris but links dynamically to libidn
633 - kdegames <unfixed> (embed)
634 NOTE: ksirk/kde4
635
636 libidn
637 - monotone 0.43-1 (embed)
638 - psi <unfixed> (embed)
639 NOTE: psi embeds libiris which embeds libidn
640 - kdegames <unfixed> (embed)
641 NOTE: kdegames/kde4 embeds libiris which embeds libidn
642 - ia32-libs <removed> (embed)
643
644 lua5.1
645 - monotone 0.43-1 (embed)
646 - nmap 5.00-1 (embed; bug #527997)
647 [lenny] - nmap <unfixed> (embed; bug #527997)
648 - ocropus <unfixed> (embed)
649 - enigma <unfixed> (embed)
650 NOTE: requires lua built with C++
651 - freeciv 2.4.1-1 (embed)
652 NOTE: from 2.4.1-1 on freeciv uses system library instead
653 - spring <unfixed> (embed)
654
655 libbotan
656 - monotone 0.43-1 (embed)
657
658 NetXX
659 - monotone 0.43-1 (embed)
660
661 libgc
662 - mono <unfixed> (embed)
663
664 lzma
665 - p7zip <unfixed> (embed)
666 - xz-utils <unfixed> (fork)
667 - r-base <unfixed> (embed)
668 NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
669
670 lzo2
671 - ia32-libs <removed> (embed)
672 - busybox <unfixed> (embed)
673 - grub2 <unfixed> (embed)
674 - syslinux <unfixed> (modified-embed)
675 - valgrind <unfixed> (modified-embed)
676 - xen <unfixed> (embed)
677 - remmina <unfixed> (embed)
678 - blender <unfixed> (embed)
679 - x11vnc <unfixed> (embed)
680 - italc <unfixed> (embed)
681 - dump <unfixed> (embed)
682 - krfb <unfixed> (embed)
683 - nfdump <unfixed> (embed)
684 - kino <unfixed> (embed)
685 - samhain <unfixed> (embed)
686 - u-boot (modified-embed)
687 - icecc <unfixed> (embed)
688 - bb <unfixed> (embed)
689 - mednafen 0.8.D.3-4 (embed)
690 - ht <unfixed> (embed)
691 - n2n <unfixed> (embed)
692 NOTE: still not sure if all those embedded copies are actually used
693 NOTE: some packages actually use minilzo, which is not built by src:lzo2 and is only available as source in liblzo2-dev
694
695 lz4
696 - eet <unfixed> (embed)
697 - efl <unfixed> (embed)
698 - grub2 <unfixed> (embed)
699 - gtkwave <unfixed> (embed)
700 - iceweasel <unfixed> (embed)
701 - kfreebsd-9 <unfixed> (embed)
702 - kfreebsd-10 <unfixed> (embed)
703 - php-horde-lz4 <unfixed> (embed)
704 - pytables <unfixed> (embed)
705 - zfsutils <unfixed> (embed)
706
707 yassl
708 - mysql-5.1 <unfixed> (embed)
709 - mysql-5.5 <unfixed> (embed; bug #627207)
710
711 pax code
712 - tar <unfixed> (embed)
713 - cpio <unfixed> (embed)
714
715 t1lib
716 - tetex-bin 2.0.2-1 (embed)
717 - texlive-bin 2013.20130522.30620-1 (embed; bug #667912)
718 NOTE: used only in xdivk (a dvi file viewer that the maintainer refuses to drop)
719 - grace 5.1.14-2 (embed)
720 - evince <unfixed> (embed)
721 NOTE: at least parseafm code, maybe more?
722 - vftool <unfixed> (embed)
723 NOTE: just parseafm code it seems
724
725 guichan
726 - boswars <unfixed> (embed)
727 NOTE: maintainer notified us, working on it
728
729 tolua
730 - boswars <unfixed> (embed)
731 NOTE: maintainer notified us, working on it
732 NOTE: actually tolua++
733 - ocropus <unfixed> (embed)
734 NOTE: actually tolua++
735 - freeciv <unfixed> (embed)
736 NOTE: actually tolua++
737 - enigma <unfixed> (embed)
738
739 asio-dev
740 - luxrender <removed> (embed)
741
742 xine-lib
743 - vlc <unfixed> (embed)
744 NOTE: only parts included in modules/access/rtsp
745
746 netpbm
747 - tcl8.3 <unfixed> (embed)
748 - tcl8.4 <unfixed> (embed)
749 - tcl8.5 <unfixed> (embed)
750 NOTE: generic/tkImgGIF.c
751
752 tk8.5
753 - tk8.0 <removed> (old-version)
754 - tk8.3 <unfixed> (old-version)
755 - tk8.4 <unfixed> (old-version)
756 - perl-tk <unfixable> (fork)
757
758 samba
759 - mc 2:4.6.2~git20080311-1 (embed)
760 NOTE: maintainer is aware of this, currently searching a solution
761
762 plib1.8.4c2
763 - boson <unfixed> (fork)
764 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
765
766 fribidi
767 - quesoglc 0.7.2-2 (embed)
768
769 glew
770 - quesoglc <unfixed> (embed; bug #489341)
771 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
772 - trigger 0.5.2.1-2 (embed)
773 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
774 - trigger-rally 0.5.2.1-2 (embed)
775 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
776 - chromium-browser 5.0.375.70~r48679-2
777
778 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
779 - transcend <unfixed> (embed)
780 - cultivation <unfixed> (embed)
781 - passage <unfixed> (embed)
782 - gravitation <unfixed> (embed)
783
784 tar
785 - libarchive <unfixed> (embed)
786 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
787
788 cpio
789 - libarchive <unfixed> (embed)
790 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
791
792 kde4libs
793 - kdelibs <unfixable> (old-version)
794
795 webkit
796 - qt4-x11 <unfixed> (embed; bug #479851)
797 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
798 - kde4libs <unfixable> (fork)
799 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
800 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
801 - chromium-browser <unfixed> (fork)
802
803 ftgl
804 - blender 2.46+dfsg-1 (embed)
805 - vtk <unfixed> (embed)
806 - paraview <unfixed> (embed)
807 NOTE: as part of its copy of vtk
808 - tulip <unfixed> (embed)
809 NOTE: depends on -dev but string found on binary
810 - root-system <unknown> (embed)
811 NOTE: depends on -dev package; not confirmed at source
812 - rgl <unknown> (embed)
813 NOTE: not sure if it is built
814 - mysql-gui-tools <unknown> (embed)
815 NOTE: not sure if it is built
816 - k3d <unfixed> (embed)
817 - extremetuxracer <unknown> (embed)
818 NOTE: not sure if it is built
819 - critterding <unknown> (embed)
820 - lightspeed <unfixed>
821 NOTE: depends on -dev but string found on binary
822
823 wv
824 - abiword <unfixed>
825
826 wv2
827 - koffice <unfixed>
828 - calligra <unfixed>
829
830 qemu
831 - kvm <removed> (embed; bug #543159)
832 - qemu-kvm <unfixed> (embed; bug #560853)
833 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
834 - xen-3 3.4.2-2 (embed; bug #560856)
835 - xen-unstable <unfixed> (embed; bug #560856)
836
837 vgabios
838 - kvm <removed> (embed; bug #489442)
839 - qemu-kvm <unfixed> (embed)
840
841 bochs
842 - kvm <removed> (embed; bug #489442)
843 - qemu-kvm <unfixed> (embed)
844
845 speex
846 - vorbis-tools <unfixed> (embed)
847 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
848 - gst-plugins-good0.10 <unfixed> (embed)
849 - xine-lib <unfixed> (embed)
850 - libfishsound <unfixed> (embed)
851 - libannodex <removed> (embed)
852 - opal 3.4.2~dfsg-2 (embed)
853 - mumble 1.2.0~beta1-1 (embed)
854 - vlc <unfixed> (embed)
855 - xmms-speex <unfixed> (embed)
856 - libsdl-sound1.2 <unfixed> (embed)
857 - sweep <unfixed> (embed)
858
859 libreadline
860 - magic <itp> (old-version)
861
862 opcode
863 - ode <unfixed> (embed)
864 NOTE: opcode is not a package in debian, it is just embedded
865 NOTE: http://www.codercorner.com/Opcode.htm
866
867 gimpact
868 - ode <unfixed> (embed)
869 NOTE: gimpact is not a package in debian, it is just embedded
870 NOTE: http://gimpact.sf.net
871
872 mochikit
873 - mahara <unfixed> (embed)
874 NOTE: they require extra patches, still unmerged upstream
875 - ntop <unfixed> (embed)
876 - coherence 0.6.2-1 (embed)
877 - paste <unfixed> (embed)
878 - turbogears <unfixed> (embed)
879 - plone3 <removed> (embed)
880 - xulrunner <unfixed> (embed)
881 - libjifty-plugin-chart-perl <unfixed> (embed)
882 - sabnzbdplus <unfixed> (embed)
883 - tgmochikit <unfixed> (embed)
884
885 prototypejs
886 - netbeans-ide 6.0.1+dfsg-2 (embed)
887 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
888 - webcit <unfixed> (embed; bug #555219)
889 - asterisk 1:1.6.2.0~rc3-1 (embed)
890 - libjson-ruby 1.1.4-1 (embed; bug #555224)
891 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
892 - horde3 <unfixed> (embed)
893 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
894 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
895 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
896 - ebug-http <unfixed> (embed; bug #555236)
897 - libaws 2.7-1 (embed; bug #555222)
898 - phpgedview <removed> (embed)
899 - poker-network 1.7.6-1 (embed; bug #555238)
900 - rails 2.1.0-6 (embed)
901 - wordpress 2.5.0-2 (embed; bug #555243)
902 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
903 TODO: search through all of the other zope packages
904 - ampache 3.4.1-2 (embed)
905 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
906 - hobix 0.5~svn20070319-4 (embed; bug #555247)
907 - zabbix 1.6.6-4 (embed; bug #555250)
908 - chora2 2.1.1+debian0-1 (embed; bug #555253)
909 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
910 - jscropperui 1.2.1-1 (embed; bug #555257)
911 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
912 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
913 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
914 - activeldap 1.2.1-1 (embed)
915 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
916 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
917 - otrs2 2.3.4-6 (embed; bug #555267)
918 - webcalendar 1.2~b1-2 (embed; bug #555269)
919 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
920 - jifty 0.90519-1 (embed; bug #555271)
921 - jquery 1.4-1 (embed; bug #555272)
922 - passenger 2.2.5debian1-1 (embed; bug #555273)
923 - plone3 <removed> (embed; bug #555275)
924 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
925 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
926 - xulrunner <unfixed> (embed)
927 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
928 - jclicmoodle <unfixed> (embed)
929 - git-cola <unfixed> (embed)
930
931 gdb
932 - insight <unfixed> (embed)
933
934 e2fsprogs
935 - ldiskfsprogs <unfixable> (fork)
936 - ia32-libs <removed> (embed)
937
938 quazip (not packaged in Debian)
939 - qcake <unfixed> (embed)
940 NOTE: starting with upstream version 0.6.4
941
942 exo
943 - pcmanfm <unfixed> (embed; bug #499677)
944 NOTE: slightly modified source code
945
946 xfce4-taskmanager
947 - lxtask <unfixed> (embed)
948 NOTE: old fork, maybe outdated
949
950 isync
951 - postler <unfixed> (embed; bug #628798)
952
953 java
954 - openjdk-6 <unfixed>
955 - sun-java5 <unfixed>
956 - sun-java6 <unfixed>
957
958 libphp-snoopy
959 - ampache 3.4.1-2 (embed; bug #504169)
960 - gforge 4.6.99+svn6094-2 (embed)
961 - mahara 1.0.5-2 (embed; bug #504170)
962 - pixelpost 1.7.1-5 (embed; bug #504171)
963 - mediamate 0.9.3.6-5 (embed; bug #504172)
964 - opendb <removed> (embed; bug #504173)
965 [etch] - opendb <unfixed> (embed; bug #504173)
966 - wordpress 2.5.1-9 (embed; bug #443948)
967 [etch] - phpgroupware <unfixed> (embed)
968 NOTE: phpgroupware-felamimail
969 - magpierss 0.72-3 (embed; bug #431089)
970
971 jquery
972 - jsonbot <unfixed> (embed; bug #625524)
973 - zekr <unfixed> (embed)
974 - wordpress <unknown> (embed)
975 - yocto-reader <unfixed> (embed)
976 - textpattern <unfixed> (embed)
977 - genshi 0.5.1-1 (embed)
978 NOTE: compressed file under examples/ dir
979 - prewikka <unfixed> (embed)
980 - libramaze-ruby <unfixed> (embed)
981 - drupal6 <unfixed> (embed)
982 - b2evolution <unfixed> (embed)
983 - wesnoth <unfixed> (embed)
984 - gammu 1.28.95-1 (embed)
985 - trac <unfixed> (embed; bug #645339)
986 - request-tracker4 <unfixed> (embed; bug #693821)
987
988 jquery-goodies
989 - horizon <unfixed> (embed)
990 NOTE: jquery.cookie.js, jquery.table-sorter.js, jquery-ui.min.js
991 - request-tracker4 <unfixed> (embed; bug #693821)
992 NOTE: libjs-jquery-tablesorter
993
994 jqueryui
995 - request-tracker4 <unfixed> (embed; bug #693821)
996
997 tablesorter (jquery plugin, not packaged yet)
998 - wesnoth <unfixed> (embed)
999
1000 kses
1001 - wordpress <unfixed> (embed; bug #504242)
1002 NOTE: their copy has all methods renamed to wp_<foo>
1003 NOTE: kses isn't in Debian, RFP: #504240
1004 - egroupware <unfixed> (embed)
1005
1006 magpierss
1007 - wordpress <unfixed> (embed; bug #504242)
1008
1009 php-gettext
1010 - wordpress 2.8.4-1 (embed; bug #504242)
1011 - docbookwiki <unfixed> (embed)
1012 - knowledgeroot 0.9.9.5-1
1013 NOTE: non-free
1014
1015 libphp-ixr (name may change, it is the Incutio XML-RPC)
1016 - wordpress <unfixed> (embed; bug #504242)
1017 NOTE: libphp-ixr isn't in Debian, RFP: #504236
1018 - dokuwiki <unfixed> (embed)
1019 - textpattern <unfixed> (embed)
1020
1021 libphp-cas
1022 - glpi 0.80.7-2 (embed)
1023 - moodle <unfixed> (embed; bug #505984)
1024
1025 scriptaculous (prototype.js is among the embeds in the following)
1026 - glpi <unfixed> (embed)
1027 - libaws <unfixed> (embed; bug #555222)
1028 - op-panel <unfixed> (embed)
1029 - symfony <unfixed> (embed)
1030 NOTE: maintainer says there are extra incompatible changes required
1031 - pixelpost 1.7.1-6 (embed)
1032 - webhelpers <unfixed> (embed)
1033 - qwik <removed> (embed; bug #555241)
1034 - smokeping <unfixed> (embed)
1035 - turba2 <unfixed> (embed)
1036 - typo3-src 4.2.3-1 (embed)
1037 - request-tracker3.6 <unfixed> (embed)
1038 - request-tracker3.8 <unfixed> (embed)
1039 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
1040 - wordpress 2.5.0-2 (embed)
1041 - libhtml-prototype-perl 1.48-3 (embed)
1042
1043 libmarkdown-php
1044 - pixelpost 1.7.1-6 (embed)
1045 NOTE: the markdown in Moodle is not the Markdown from this package
1046
1047 php-openid
1048 - wordpress-openid 3.3.2-1 (embed)
1049
1050 geshi
1051 - dokuwiki 0.0.20080505-3.1 (embed)
1052 - pgfouine 1.0-1.1 (embed)
1053 - websvn 2.1.0-1 (embed)
1054
1055 webcalendar
1056 - gforge 4.7~rc2-6 (embed; bug #504758)
1057
1058 libical
1059 - kdepim <unknown> (fork)
1060 NOTE: fixed at some point during 4.0
1061 - kdepimlibs 4.2.0-1 (fork)
1062 - claws-mail-extra-plugins <unfixed> (fork)
1063
1064 harfbuzz
1065 - qt4-x11 <unfixed> (embed)
1066 - pango1.0 1.36.0-1 (embed)
1067 - fontmatrix <unfixed> (embed)
1068
1069 libzip
1070 - php5 <unfixable> (modified-embed)
1071 - odt2txt <unfixed> (embed; bug #523808)
1072
1073 json.php (not packaged; should be replaced with php's built-in functions)
1074 - yui <unfixed>
1075 - gallery2 <unfixed>
1076 - dokuwiki <unfixed>
1077 - typo3-src <unfixed>
1078
1079 php-fpdf
1080 - tcpdf <itp> (fork)
1081 - phpwiki <unfixed>
1082 - egroupware <unfixed>
1083 - ldap-account-manager <unfixed> (fork)
1084
1085 tcpdf (itp: #495985)
1086 - moodle <unfixed>
1087 - phpmyadmin <unfixed>
1088 - collabtive <unfixed>
1089
1090 typo3
1091 - moodle <unfixed>
1092
1093 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1094 - moodle <unfixed>
1095 - gosa <unfixed>
1096
1097 php-ole (itp: #487558)
1098 - moodle <unfixed>
1099
1100 pieforms (http://www.catalyst.net.nz)
1101 - mahara <unfixed>
1102
1103 savant2 (http://phpsavant.com)
1104 - egroupware <unfixed>
1105
1106 rssparser (http://nwow.org)
1107 - egroupware <unfixed>
1108 - phpgroupware <unfixed>
1109
1110 lcms
1111 - openjdk-6 <unfixed> (fork)
1112 - gimp 2.4.0~rc2-2
1113 - ia32-libs <removed> (embed)
1114
1115 libphp-phplayersmenu
1116 - diogenes <unfixed>
1117 - phpldapadmin <unfixed>
1118
1119 libphp-pclzip
1120 - docvert <unfixed>
1121 - moodle 2.5.1-1
1122 - egroupware <unfixed>
1123
1124 libphp-simplepie
1125 - dokuwiki <unfixed>
1126 - wordpress <unfixed>
1127
1128 libphp-jpgraph
1129 - egroupware <unfixed>
1130
1131 libpng
1132 - doxygen 1.5.6-2 (embed)
1133 NOTE: Might be fixed earlier. Lenny version recorded.
1134 - gdal 1.5.2-3 (embed)
1135 NOTE: Might be fixed earlier. Lenny version recorded.
1136 - iceweasel <not-affected> (uses xulrunner)
1137 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1138 - iceape 1.0.13~pre080614i-0etch1 (embed)
1139 - libfltk1.1 1.1.9-6 (embed)
1140 NOTE: Might be fixed earlier. Lenny version recorded.
1141 - libtk-img <unfixed> (embed; #732147)
1142 - htmldoc 1.8.27-3 (embed)
1143 NOTE: Might be fixed earlier. Lenny version recorded.
1144 - xulrunner 1.9.0.13-1 (embed)
1145 [lenny] - xulrunner 1.9.0.11-0lenny1
1146 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1147 - gamera 3.2.3-1 (embed)
1148 - freeimage <unfixed> (embed)
1149 - syslinux-common <unfixable> (embed)
1150 - tuxonice-userui <unfixed> (static)
1151 - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1152 NOTE: Might be fixed earlier. Lenny version recorded.
1153 - vice 1.22.dfsg1-0.1 (embed)
1154 NOTE: Might be fixed earlier. Lenny version recorded.
1155 - visualboyadvance 1.8.0-4 (embed)
1156 NOTE: Might be fixed earlier. Lenny version recorded.
1157 - ia32-libs <removed> (embed)
1158
1159 irssi
1160 - silc-client <unfixed> (embed)
1161 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1162
1163 extc
1164 - mtasc <unfixed> (embed)
1165 - haxe <unfixed> (embed)
1166
1167 swflib
1168 - mtasc <unfixed> (embed)
1169 - haxe <unfixed> (embed)
1170
1171 libitext-java
1172 - bouncycastle 2.1.4-1 (embed)
1173
1174 python-ply
1175 - pyke <unfixed> (embed; bug #555363)
1176 - pywbem 0.7.0-4 (embed; bug #555364)
1177 - sepolgen <unfixed> (embed; bug #555365)
1178 - zope-textindexng3 <unknown> (embed)
1179 - iceweasel <not-affected> (uses xulrunner)
1180 - xulrunner <unknown> (embed)
1181 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1182
1183 libdumbnet (libdnet upstream)
1184 - nmap <unfixed> (fork)
1185
1186 gcc-4.4
1187 - gcc-mingw32 <unfixed> (embed)
1188
1189 camlimages
1190 - advi <unfixed> (static; bug #550441)
1191
1192 memcached
1193 - memcachedb <unfixed> (embed)
1194
1195 yajl
1196 - argyll <unfixed> (embed; bug #544223)
1197 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1198 - lnav <unfixed> (embed; bug #724693)
1199
1200 nusoap
1201 - gforge 4.8.2-1 (embed)
1202 - ampache <unfixed> (embed)
1203 - poker-network <unfixed> (embed)
1204 - phpwiki <unfixed> (embed)
1205 - gallery2 <unfixed> (embed)
1206 - typo3-src <unfixed> (embed)
1207 - phpgacl 3.3.7-7 (embed)
1208 - mantis 1.1.8+dfsg-1 (embed)
1209
1210 libept
1211 - adept <unfixed> (embed; bug #540649)
1212
1213 libvorbis
1214 - iceweasel <not-affected> (uses xulrunner)
1215 - xulrunner <unfixed> (embed; bug #540959)
1216 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1217 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1218 - iceape <unfixed> (embed)
1219 [etch] - iceape <not-affected> (introduced in 2.0)
1220 [lenny] - iceape <not-affected> (introduced in 2.0)
1221 - ia32-libs <removed> (embed)
1222 - libvorbisidec <unfixed> (modified-embed)
1223
1224 cairo
1225 - iceweasel <not-affected> (uses xulrunner)
1226 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1227
1228 liboggz
1229 - iceweasel <not-affected> (uses xulrunner)
1230 - xulrunner <unfixed> (embed; bug #540959)
1231 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1232 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1233 - iceape <unfixed> (embed)
1234 [etch] - iceape <not-affected> (introduced in 2.0)
1235 [lenny] - iceape <not-affected> (introduced in 2.0)
1236
1237 liboggplay
1238 - iceweasel <not-affected> (uses xulrunner)
1239 - xulrunner <unfixed> (embed; bug #540959)
1240 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1241 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1242 - iceape <unfixed> (embed)
1243 [etch] - iceape <not-affected> (introduced in 2.0)
1244 [lenny] - iceape <not-affected> (introduced in 2.0)
1245
1246 php-net-dnsbl
1247 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1248
1249 php-onyx-rss
1250 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1251
1252 php-text-wiki
1253 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1254
1255 php-xml-rpc
1256 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1257
1258 polarssl (does not have a shared library)
1259 - pdkim <itp> (embed; bug #543150)
1260 - xyssl <unfixed> (old-version)
1261
1262 pidgin (libpurple)
1263 - gaim <removed> (old-version)
1264 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1265 - wengophone <unfixed> (embed; bug #601425)
1266
1267 icu
1268 - webkit 1.0.1-1 (embed; bug #547214)
1269 - texlive-bin 2013.20130522.30620-1 (fork)
1270 NOTE: texlive upstream working with icu upstream to merge their changes
1271 - chromium-browser 5.0.375.29~r46008-3
1272
1273 cyrus-imapd-2.2
1274 - kolab-cyrus-imapd <unfixed> (fork)
1275 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1276
1277 python-cxx-dev
1278 - freecad 0.9.2646.3-1 (embed; bug #547936)
1279
1280 zipios++
1281 - freecad 0.9.2646.3-1 (embed; bug #547941)
1282 - enigma 0.92.3-3 (embed)
1283 NOTE: likely fixed earlier, marking etch's version as fixed
1284
1285 linux-2.6
1286 - kvm <removed> (embed; bug #549973) [./kernel/*]
1287 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1288 - kernel-source-2.6.8 <removed> (old-version)
1289 - kernel-source-2.4.27 <removed> (old-version)
1290 - kernel-source-2.4.24 <removed> (old-version)
1291 - kernel-source-2.2.25 <removed> (old-version)
1292 - kernel-source-2.2.20 <removed> (old-version)
1293
1294 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1295 - kvm <removed> (embed) [./libfdt/*]
1296 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1297
1298 qweb (not packaged)
1299 - ajaxterm <unfixed>
1300
1301 opensaml2
1302 - opensaml <removed> (old-version)
1303
1304 shibboleth-sp2
1305 - shibboleth-sp <removed> (old-version)
1306
1307 tuxonice-userui
1308 - suspend2-userui <removed> (old-version)
1309
1310 expat
1311 - w3c-libwww <removed> (embed; bug #551941)
1312 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1313 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1314 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1315 - python2.4 <unfixable> (embed; bug #553403)
1316 - python2.6 2.6.6-4 (embed)
1317 - python2.7 2.7-6 (embed)
1318 - mcabber 0.10.0-1 (low; bug #601053)
1319 - python-4suite <unfixed> (embed; bug #516935)
1320 - wxwindows2.4 <removed> (embed)
1321 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1322 - wxwidgets2.8 2.8.10.1-2 (embed)
1323 - albert <unfixed> (embed; bug #600974)
1324 - celementtree 1.0.5-8 (embed)
1325 NOTE: Maybe that was fixed even earlier
1326 - centerim <unfixed> (embed; bug #559783)
1327 - audacity 1.3.2-1 (embed)
1328 - matanza <unfixed> (embed)
1329 - tdom 0.8.3~20080525-1 (embed)
1330 - udunits 2.1.8-4 (embed)
1331 - apr-util 1.2 (embed)
1332 - ayttm <unfxed> (embed; bug #561006)
1333 - cableswig <unfixed> (embed)
1334 - cadaver <unfixed> (embed)
1335 - cmake 2.6.0-6 (embed)
1336 - coin3 <unfixed> (embed)
1337 - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1338 NOTE: Might be fixed earlier. Lenny version recorded.
1339 - dasher 4.7.3-1 (embed)
1340 NOTE: Might be fixed earlier. Lenny version recorded.
1341 - emboss 6.3.1-1 (embed)
1342 - gdcm 2.0.14-2 (embed)
1343 - ghostscript 8.71~dfsg-2 (embed)
1344 - grmonitor <removed> (embed)
1345 - iceape <unfixed> (embed)
1346 - insighttoolkit 3.16.0-1 (embed)
1347 NOTE: insighttoolkit might've been fixed earlier
1348 - jabber 1.4.3-3.4 (embed)
1349 NOTE: Might be fixed earlier. Lenny version recorded.
1350 - libparagui1.1 1.0.2-1 (embed)
1351 - libspiff1 0.8.3-1 (embed)
1352 NOTE: Might be fixed earlier. Lenny version recorded.
1353 - paraview 3.6.2-1 (embed)
1354 - poco 1.3.6p1-1 (embed)
1355 - scorched3d 41.3dfsg-1+b1 (embed)
1356 NOTE: Might be fixed earlier. Lenny version recorded.
1357 - simgear <unfixed> (embed)
1358 - sitecopy 1:0.16.0-1
1359 - smart <unfixed> (embed)
1360 NOTE: smart embeds celementree, and it includes expat
1361 - swish-e <not-affected> (Linked against libxml, which is used instead)
1362 - tla 1.3.5+dfsg-15 (embed)
1363 - vtk 4.1.20030227-1 (embed)
1364 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1365 - xmlrpc-c <unfixed> (embed)
1366 - iceweasel <unfixed> (embed)
1367 - kompozer <unfixed> (embed)
1368 - vxl 1.13.0-2 (embed)
1369 - xulrunner <unfixed> (embed)
1370 - xmame 0.106-2.1 (embed)
1371 NOTE: Might be fixed earlier. Lenny version recorded.
1372 - apache2 2.2 (embed)
1373 - texlive-bin <not-affected> (Embedded code not compiled in)
1374 - vnc4 <unfixed> (embed)
1375 - xotcl 1.6.6-1 (embed)
1376 - chromium-browser 5.0.375.29~r46008-3
1377 - ia32-libs <removed> (embed)
1378
1379 xerces-c
1380 - xerces-c2 <unfixed> (old-version)
1381 - xerces27 <removed> (old-version)
1382
1383 md5 (RSA's version; not the gnu version provided by coreutils)
1384 - w3c-libwww <removed> (embed; bug #551942)
1385 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1386
1387 libparagui1.1
1388 - asc <unfixable> (fork)
1389
1390 enet
1391 - sauerbraten <unfixed> (embed; #497194)
1392
1393 eglibc
1394 - glibc <removed> (old-version)
1395 - mksh <unfixable> (static)
1396 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1397
1398 galib
1399 - gamera 3.2.3-1 (embed)
1400
1401 configobj
1402 - bzr <unfixed> (embed; bug #555336)
1403 - elisa <unfixed> (embed; bug #555337)
1404 - gaupol <unfixed> (embed; bug #555338)
1405 - ipython <unfixed> (embed; bug #555339)
1406 - pida <unfixed> (embed; bug #555340)
1407 - psychopy <unfixed> (embed; bug #555341)
1408 - rest2web <unfixed> (embed; bug #555342)
1409 - auth2db <unknown> (embed)
1410 - dynagen <unknown> (embed)
1411 - iceweasel <unknown> (embed)
1412 - sabnzbdplus <unknown> (embed)
1413 - xulrunner <unknown> (embed)
1414 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1415
1416 python-clientform
1417 - bibus <unfixed> (embed; bug #555332)
1418 - zope2.10 <unfixed> (embed; bug #555333)
1419 - zope2.11 <removed> (embed; bug #555334)
1420 - python-mechanize <unknown> (embed)
1421 - twill <unknown> (embed)
1422
1423 python-mechanize
1424 - zope2.10 <unfixed> (embed; bug #555337)
1425 - zope2.11 <removed> (embed; bug #555338)
1426 - twill <unknown> (embed; bug #555339)
1427
1428 pexpect
1429 - duplicity 0.6.06-1 (embed; bug #555361)
1430 - hplip <unfixed> (embed; bug #555362)
1431 - smart <unfixed> (embed; bug #555363)
1432
1433 pyparsing
1434 - bauble <unfixed> (embed; bug #555366)
1435 - boa-constructor 0.6.1-8 (embed; bug #555367)
1436 - calibre <unfixed> (embed; bug #555368)
1437 - matplotlib <unfixed> (embed; bug #531024)
1438 - zhpy 1.7.3.1-1 (embed; bug #555370)
1439 - polybori <unknown> (embed)
1440 - python-whoosh <unknown> (embed)
1441 - twill <unknown> (embed)
1442 - zope-textindexng3 <unknown> (embed)
1443
1444 python-pysqlite2
1445 - python2.4 <unfixed> (embed; bug #553403)
1446 - python2.5 <unfixed> (embed; bug #553403)
1447
1448 celementtree
1449 - python2.5 <unfixed> (embed)
1450 - smart <unfixed> (embed)
1451
1452 elementtree
1453 - python2.5 <unfixed> (embed)
1454 - python2.6 <unfixed> (embed)
1455 - bzr <unfixed> (embed; bug #555343)
1456 - gedit 2.28.2-1 (embed; bug #555344)
1457 - smart <unfixed> (embed)
1458 - solfege <unfixed> (embed; bug #555345)
1459 - w3af <unfixed> (embed; bug #555346)
1460 - python-qt4 <unknown> (embed)
1461 - sphinx <unknown> (embed)
1462 - python-nltk <itp> (embed)
1463
1464 python2.5
1465 - python2.4 <unfixed> (old-version)
1466 - jython <unfixed> (embed)
1467 NOTE: embeds many stdlib modules
1468 - python-django <unfixed> (embed; bug #555419)
1469 NOTE: embeds stdlib modules: doctest, decimal
1470 - gamera 3.2.3-1 (embed)
1471 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1472 - boa-constructor <unfixed> (embed; bug #555426)
1473 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1474 - nicotine <unfixed> (embed; bug #555427)
1475 NOTE: embeds stdlib modules: ConfigParser
1476 - museek+ <unfixed> (embed; bug #555428)
1477 NOTE: embeds stdlib modules: ConfigParser
1478 - vegastrike-data <removed> (embed)
1479 NOTE: embeds many stdlib modules
1480 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1481 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1482 - config-manager <unfixed> (embed; bug #555423)
1483 NOTE: embeds stdlib modules: optparse
1484 - jhbuild 2.28.0-1 (embed; bug #555421)
1485 NOTE: embeds stdlib modules: optparse, subprocess
1486 - smart <unfixed> (embed; bug #555432)
1487 NOTE: embeds stdlib modules: optparse
1488 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1489 NOTE: embeds stdlib modules: doctest
1490 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1491 NOTE: embeds stdlib modules: doctest
1492 - distribute <unfixed> (embed)
1493 NOTE: embeds stdlib modules: doctest
1494 - python-setuptools <unfixed> (embed; bug #555435)
1495 NOTE: embeds stdlib modules: doctest
1496 - zope.testing <unfixed> (embed; bug #555436)
1497 NOTE: embeds stdlib modules: doctest
1498 - translate-toolkit <unfixed> (embed; bug #555422)
1499 NOTE: embeds stdlib modules: textwrap, contextlib
1500 - libtpclient-py <unfixed> (embed; bug #555424)
1501 NOTE: embeds stdlib modules: subprocess
1502 - grass <unfixed> (embed; bug #555425)
1503 NOTE: embeds stdlib modules: subprocess
1504 - coherence <unfixed> (embed; bug #555429)
1505 NOTE: embeds stdlib modules: uuid
1506 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1507 NOTE: embeds stdlib modules: uuid
1508 - setroubleshoot <removed> (embed; bug #555431)
1509 NOTE: embeds stdlib modules: uuid
1510 - linkchecker <unfixed> (embed; bug #555414)
1511 NOTE: embeds msgfmt.py script
1512 - imdbpy <unfixed> (embed)
1513 NOTE: embeds msgfmt.py script
1514 - kiwi <unfixed> (embed)
1515 NOTE: embeds msgfmt.py script
1516 - moin <unfixed> (embed)
1517 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1518 - plone3 <removed> (embed)
1519 NOTE: embeds msgfmt.py script
1520 - roundup <unfixed> (embed)
1521 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1522 - rednotebook <unfixed> (embed; bug #555415)
1523 NOTE: embeds msgfmt.py script
1524 - turbogears <unfixed> (embed)
1525 NOTE: embeds msgfmt.py script
1526 - elisa <unfixed> (embed)
1527 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1528 - calibre <unfixed> (embed)
1529 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1530 - mailman 1:2.1.13-1 (embed; #555416)
1531 NOTE: embeds msgfmt.py script
1532 - python-docutils <unknown> (embed)
1533 NOTE: embeds stdlib modules: optparse, textwrap
1534 - python-imaging <unknown> (embed)
1535 NOTE: embeds stdlib modules: doctest
1536 - python-mechanize <unknown> (embed)
1537 NOTE: embeds stdlib modules: doctest
1538 - twill <unknown> (embed)
1539 NOTE: embeds stdlib modules: subprocess
1540 - zeroc-ice <unknown> (embed)
1541 NOTE: embeds stdlib modules: subprocess
1542 - wxwidgets2.8 <unknown> (embed)
1543 NOTE: embeds stdlib modules: subprocess
1544 - cycle <unknown> (embed)
1545 NOTE: embeds msgfmt.py script
1546 - deluge <unknown> (embed)
1547 NOTE: embeds msgfmt.py script
1548 - opendict <unknown> (embed)
1549 NOTE: embeds msgfmt.py script
1550 - openerp-client <unknown> (embed)
1551 NOTE: embeds msgfmt.py script
1552 - rapidsvn <unknown> (embed)
1553 NOTE: embeds msgfmt.py script
1554 - wammu <unknown> (embed)
1555 NOTE: embeds msgfmt.py script
1556 - gaphor <unknown> (embed)
1557 NOTE: embeds msgfmt.py script
1558 - pida <unknown> (embed)
1559 NOTE: embeds msgfmt.py script
1560 - python-formencode <unknown> (embed)
1561 NOTE: embeds msgfmt.py script
1562 - duplicity <unfixed> (embed)
1563 NOTE: embeds stdlib module: urlparse, tarfile
1564 - pygopherd <unfixed> (embed)
1565 NOTE: embeds stdlib module: zipfile
1566
1567 argparse
1568 - twill <unfixed> (embed; bug #555347)
1569 - ipython <unfixed> (embed; bug #555348)
1570
1571 coherence
1572 - elisa <unfixed> (embed; bug #555335)
1573
1574 simpletal
1575 - plastex <unfixed> (embed; bug #555371)
1576
1577 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1578 - postr <unfixed> (embed)
1579 - elisa <unfixed> (embed)
1580
1581 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1582 - apertium-tolk <unfixed> (embed)
1583 - ipython <unfixed> (embed)
1584 - virtaal <unfixed> (embed)
1585
1586 distribute
1587 - setuptools <removed> (old-version)
1588
1589 rails
1590 - jruby1.2 <removed> (embed) [./bench/rails/*]
1591 NOTE: jruby is in non-free, it probably includes rails too
1592 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1593 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1594 - thin <unfixed> (embed) [./spec/rails_app/*]
1595 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1596 NOTE: be dangerous if developers are naively basing their code off of the examples
1597 NOTE: prototype.js is among the example files
1598
1599 lucene2 (prototype.js is among the embeds in the following)
1600 - lucene <unfixed> (old-version)
1601 - pylucene <unfixed> (embed)
1602 - libpdfbox-java <unfixed> (embed)
1603 - libfontbox-java <unfixed> (embed)
1604 - libjempbox-java <unfixed> (embed)
1605 - solr <unfixed> (embed)
1606
1607 unicode-data
1608 - syslinux <unfixed> (embed)
1609 - camomile <unfixed> (embed)
1610 - fribidi <unfixed> (embed)
1611 - m17n-db <unfixed> (embed)
1612 - sbcl <unfixed> (embed)
1613 - heimdal <unfixed> (embed)
1614 - icu <unfixed> (embed)
1615 - icu4j <unfixed> (embed)
1616 - krb5 <unfixed> (embed)
1617 - openldap <unfixed> (embed)
1618 - pike7.6 <unfixed> (embed)
1619 - samba <unfixed> (embed)
1620 - samba4 <unfixed> (embed)
1621 - cmucl <unfixed> (embed)
1622 - typo3-src <unfixed> (embed)
1623 - mauve <unfixed> (embed)
1624 - texlive-bin <unfixed> (embed)
1625 - ypsilon <unfixed> (embed)
1626 - jeuclid <unfixed> (embed)
1627 - charmap.app <unfixed> (embed)
1628 - clisp <unfixed> (embed)
1629 - gnulib <unfixed> (embed)
1630 - opensrs-client <unfixed> (embed)
1631 - saxonb <unfixed> (embed)
1632 - rails <unfixed> (embed)
1633 - boost1.49 <unfixed> (embed)
1634 - boost1.54 <unfixed> (embed; bug #751880)
1635 - boost1.55 <unfixed> (embed; bug #751881)
1636
1637 feedparser
1638 - rawdog 2.19-1 (embed; bug #383422)
1639 [wheezy] - rawdog <unfixed> (modified-embed)
1640 - miro <unfixed> (embed; bug #555351)
1641 - calibre <unfixed> (embed; bug #555352)
1642 - freevo <unfixed> (embed; bug #555353)
1643 - pida <unfixed> (embed; bug #555354)
1644 - planet-venus <unfixed> (embed; bug #555355)
1645 - plone3 <removed> (embed; bug #555356)
1646 - exaile 0.2.14+debian-1 (embed)
1647 - screenlets 0.1.2-3 (embed)
1648 NOTE: included twice
1649
1650 agg:
1651 - matplotlib <unfixed> (embed: bug #377271)
1652 - contextfree <unfixed> (embed)
1653 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1654 - exactimage <unfixed> (embed)
1655 - python-enable <unfixed> (embed)
1656 - mapnik 0.5.1-3 (embed)
1657 NOTE: links statically to agg, but shared library is not available (bug #377271)
1658
1659 vtk
1660 - paraview <unfixable> (embed; bug #495426)
1661 - libmesh <unfixed>
1662 NOTE: embeds exodus; not sure if there's a version external to vtk
1663
1664 txt2tags
1665 - rednotebook <unfixed> (embed)
1666
1667 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1668 - gajim <unfixed> (embed)
1669 - emesene <unfixed> (embed)
1670 - convirt <unfixed> (embed)
1671 - pida <unfixed> (embed)
1672 - rednotebook <unfixed> (embed)
1673
1674 horde3 (prototype.js is among the embeds in the following)
1675 - mnemo2 <unfixed> (embed)
1676 - nag2 <unfixed> (embed)
1677 - wordpress <unfixed> (embed)
1678 NOTE: Text_Diff (wp-includes/Text/Diff*)
1679
1680 cimg
1681 - gmic <unfixed> (embed)
1682
1683 mootools
1684 - kdenetwork <unfixed> (embed)
1685 - gallery <unfixed> (embed)
1686 - jspwiki <unfixed> (embed)
1687 - vdr-plugin-live <unfixed> (embed)
1688 - perl-doc-html <unfixed> (embed)
1689
1690 openldap
1691 - openldap2.3 <removed> (old-version)
1692 - ia32-libs <removed> (embed)
1693
1694 grub2
1695 - grub <unfixed> (old-version)
1696
1697 gnupginterface
1698 - duplicity <unfixed> (embed)
1699
1700 python-dateutil
1701 - awn-extras-applets <unfixed> (embed)
1702 - matplotlib <unknown> (embed)
1703
1704 cups
1705 - cupsys <removed> (old-version)
1706 - ia32-libs <removed> (embed)
1707
1708 yui
1709 - bcfg2 <not-affected> (present in source but not included in any binary files)
1710 - serendipity 1.5.3-1 (embed; bug #557746)
1711 - moodle <unfixed> (embed)
1712 - jifty 0.91117-1 (embed; bug #557748)
1713 - webgui 7.7.26-1 (embed)
1714 - loggerhead 1.17-1 (embed)
1715 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1716
1717 quake3 (vanilla source not packaged in debian)
1718 - openarena <unfixable> (fork)
1719
1720 quake2 (vanilla source not packaged in debian)
1721 - alien-arena <unfixable> (fork)
1722 - warsow <unfixable> (fork)
1723
1724 quake (vanilla source not packaged in debian)
1725 - darkplaces <unfixable> (fork)
1726 - quakespasm <unfixable> (fork)
1727 - nexuiz 2.5.2+dp-1 (old-version)
1728 NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1729
1730 libtheora
1731 - iceweasel <not-affected> (uses xulrunner)
1732 - xulrunner <unfixed> (embed; bug #540959)
1733 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1734 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1735 - iceape <unfixed> (embed; bug #559276)
1736 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1737 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1738
1739 dtoa
1740 - bfilter <unfixed> (embed)
1741 - cacao <removed> (embed)
1742 - cdrdao <unfixed> (embed)
1743 - classpath <unfixed> (embed)
1744 - freej <unfixed> (embed)
1745 - iceape <unfixed> (embed)
1746 - iceweasel <unfixed> (embed)
1747 - jscoverage <unfixed> (embed)
1748 - kde4libs <unfixed> (embed)
1749 - kdelibs <unfixed> (embed)
1750 - kompozer <unfixed> (embed)
1751 - libv8 <unfixed> (embed)
1752 - mono <unfixed> (embed)
1753 - newlib <unfixed> (embed)
1754 - nspr <unfixed> (embed)
1755 - php5 <unfixed> (embed)
1756 - polyml <unfixed> (embed)
1757 - qt4-x11 <unfixed> (embed)
1758 - rhino <unfixed> (embed)
1759 NOTE: code translated to Java
1760 - ruby1.8 <unfixed> (embed)
1761 - ruby1.9 <unfixed> (embed)
1762 - ruby1.9.1 <unfixed> (embed)
1763 - sdd <unfixed> (embed)
1764 - sfind <unfixed> (embed)
1765 - star <unfixed> (embed)
1766 - tinymux <unfixed> (embed)
1767 - virtualbox-ose <unfixed> (embed)
1768 - webkit <unfixed> (embed)
1769 - xulrunner <unfixed> (embed)
1770
1771 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1772 - firegpg <unfixed> (embed)
1773 - enigmail <unfixed> (embed)
1774
1775 ptmalloc (not packaged in Debian)
1776 - crystalspace <unfixed> (embed)
1777 - qt4-x11 <unfixed> (embed)
1778
1779 svgalib
1780 - usplash <unfixed> (embed)
1781 - ia32-libs <removed> (embed)
1782
1783 bogl
1784 - usplash <unfixed> (embed)
1785
1786 taglist
1787 - usplash <unfixed> (embed)
1788
1789 portaudio
1790 - audacity <unfixed> (embed; bug #323711)
1791
1792 nyquist
1793 - audacity <unfixed> (embed)
1794 NOTE: embeds a forked nyquist with support for a shared library
1795
1796 vamp-plugin-sdk
1797 - audacity <unfixed> (embed)
1798
1799 wordpress
1800 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1801 - wordpress-mu <removed> (fork)
1802
1803 php5
1804 - php4 <removed> (old-version)
1805
1806 classpath
1807 - libgnucrypto-java <removed> (embed; bug #559788)
1808
1809 libtool
1810 - apr <unfixed> (static; bug #489625)
1811 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1812 - arts <unfixed> (embed)
1813 - bochs 2.4.2-1 (embed; bug #560884)
1814 - camserv <unfixed> (embed)
1815 - collectd 4.8.2-1 (embed)
1816 - courier-authlib 0.58-4 (embed)
1817 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1818 - cvsnt 2.5.04.3236-1.2 (embed)
1819 - dico <not-affected> (Uses the system copy of ltdl)
1820 - freeradius 0.1+20010527-1 (embed)
1821 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1822 - ggobi 2.1.9~20091212-1 (embed)
1823 - glame 2.0.1-4 (embed)
1824 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1825 - gnash 0.8.7-2 (embed)
1826 - gnu-smalltalk <unfixed> (embed; bug #566777)
1827 - google-gadgets 0.10.5-0.3 (embed)
1828 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1829 - graphicsmagick 1.3.5-6 (embed)
1830 - graphviz 2.8-3 (embed)
1831 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1832 - guile-1.6 1.6.8-7 (embed)
1833 - hamlib 1.2.11-1 (embed)
1834 - hercules 3.06-1.2 (embed)
1835 - jags 1.0.4-3 (embed; bug #560864)
1836 - kdelibs <unfixed> (embed)
1837 - libannodex <removed> (embed)
1838 - libextractor 0.5.23+dfsg-4 (embed)
1839 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1840 - libtunepimp 0.5.3-7.3 (embed)
1841 - mp4h 1.3.1-4.1 (Contains source code, but is compiled with --without-included-ltdl)
1842 - naim <removed> (embed)
1843 - parser-mysql <unfixed> (embed)
1844 - pinball 0.3.1-11 (embed)
1845 - redland <unfixed> (embed)
1846 - siproxd 1:0.8.1-2 (embed; bug #657070)
1847 - ski <unfixed> (embed)
1848 - synfig 0.62.00-1 (embed)
1849 - unixodbc 2.2.4-5 (embed)
1850 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1851 - clamav 0.95+dfsg-1 (embed)
1852 - imagemagick 6:6.2.3.1-1 (embed)
1853 - hypre 2.4.0b-5 (embed)
1854 - lam <unfixed> (embed)
1855 - openmpi <unfixable> (embed; bug #559386)
1856 - parser <unfixed> (embed)
1857 - pdsh 2.18-5 (embed; bug #560892)
1858 - sbnc 1.2-8 (embed)
1859 - sdcc <unfixed> (embed)
1860 - wml 2.0.11ds2-1 (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1861 - proftpd-dfsg <unfixed> (embed; bug #561748)
1862 - babel 1.4.0.dfsg-5 (embed)
1863 - libprelude 0.9.14-2 (embed)
1864 - heartbeat 2.1.4-7 (embed)
1865 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1866 NOTE: might've been fixed earlier
1867 - gcc-* <unknown> (embed)
1868 - ia32-libs <removed> (embed)
1869
1870 ocamlgsl
1871 - orpie 1.5.1-7.1 (embed; bug #550058)
1872
1873 xdotool
1874 - keynav <unfixed> (embed; bug #560103)
1875
1876 bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1877 - supertuxkart <unfixed> (embed)
1878 - blender <unfixed> (embed)
1879 - critterding <unfixed> (embed)
1880 NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1881
1882 ghostscript
1883 - gs-gpl <removed> (old-version)
1884
1885 icedove
1886 - thunderbird <removed> (old-version)
1887
1888 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1889 - jquery <unfixed> (embed)
1890
1891 sed
1892 - ssed <unfixed> (fork)
1893
1894 phpatomlib (http://code.google.com/p/phpatomlib)
1895 - wordpress <unfixed> (embed)
1896
1897 Services_JSON (http://pear.php.net/package/Services_JSON)
1898 - wordpress <unfixed> (embed)
1899
1900 phpass (http://www.openwall.com/phpass/)
1901 - gallery2 <unfixed> (embed)
1902 - wordpress <unfixed> (embed)
1903 - typo3-src <unfixed> (modified-embed)
1904 NOTE: file refers to drupal, maybe there's a copy somewhere there
1905 NOTE: a copyright owner search didn't match anything
1906 - libauthen-passphrase-perl <unfixable> (fork)
1907 NOTE: perl implementation of phpass
1908 - phpbb3 <unfixed>
1909 NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1910
1911 squirrelmail
1912 - wordpress <unfixed> (embed)
1913 NOTE: class-pop3.php
1914
1915 ezSQL (http://www.woyano.com/jv/ezsql)
1916 - wordpress <unfixable> (fork)
1917 NOTE: wp-db.php
1918
1919 Diff.php (Clay Loveless' version/killersoft.com)
1920 - php-versioncontrol-svn <unfixed>
1921
1922 libm (provided by libc)
1923 - spring <unfixed> (embed)
1924 NOTE: embedded by embedded copy of streflop
1925 - megaglest <unfixed> (embed)
1926 NOTE: embedded by embedded copy of streflop
1927 - aide <unfixed> (static)
1928 - busybox <unfixed> (static)
1929 - mindi-busybox <unfixed> (static)
1930 - qemu <unfixed> (static)
1931 NOTE: qemu-user-static
1932 - tuxonice-userui <unfixed> (static)
1933 - zsh <unfixed> (static)
1934 NOTE: zsh-static
1935 - tripwire <unfixed>
1936
1937 streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1938 - spring <unfixed> (modified-embed)
1939 NOTE: old, modified version of streflop
1940 - megaglest <unfixed> (modified-embed)
1941 NOTE: megaglest uses the same streflop code as spring
1942
1943 minizip
1944 - spring <unfixed> (embed)
1945 - libkml <unfixed> (modified-embed; bug #753069)
1946 - samba <unfixed> (embed)
1947 NOTE: didn't check whether it's used
1948 - zlib <unfixed> (embed; bug #753070)
1949 NOTE: only used to build minizip and miniunzip in zlib-bin package
1950 - virtuoso-opensource <unfixed> (embed)
1951 NOTE: didn't check whether it's used
1952 - luatex <unfixed> (embed)
1953 NOTE: didn't check whether it's used
1954 - tcl8.6 <unfixed> (embed)
1955 NOTE: didn't check whether it's used
1956 - chromium-browser <unfixed> (embed)
1957 - perl-tk <unfixed> (embed)
1958 NOTE: didn't check whether it's used
1959 - icedove <unfixed> (modified-embed)
1960 NOTE: didn't check whether it's used
1961 - ace <unfixed> (embed)
1962 NOTE: didn't check whether it's used
1963 - smplayer <unfixed> (embed)
1964 NOTE: didn't check whether it's used
1965 - povray <unfixed> (embed)
1966 NOTE: didn't check whether it's used
1967 - cegui-mk2 <unfixed> (embed)
1968 NOTE: didn't check whether it's used
1969 - freemat <unfixed> (embed)
1970 NOTE: didn't check whether it's used
1971 - funtools <unfixed> (embed)
1972 NOTE: didn't check whether it's used
1973 - tntnet <unfixed> (embed)
1974 NOTE: didn't check whether it's used
1975 - orthanc <unfixed> (embed)
1976 NOTE: didn't check whether it's used
1977 - instead <unfixed> (embed)
1978 NOTE: didn't check whether it's used
1979 - mupen64plus-core <unfixed> (embed)
1980 NOTE: didn't check whether it's used
1981 - sks-ecc <unfixed> (embed)
1982 NOTE: didn't check whether it's used
1983 - psi <unfixed> (embed)
1984 NOTE: didn't check whether it's used
1985 - fossil <unfixed> (embed)
1986 NOTE: didn't check whether it's used
1987 - wordgrinder <unfixed> (embed)
1988 NOTE: didn't check whether it's used
1989 - critcl <unfixed> (embed)
1990 NOTE: didn't check whether it's used
1991 - fceux <unfixed> (embed)
1992 NOTE: didn't check whether it's used
1993
1994 oscpack
1995 - spring <unfixed> (embed)
1996
1997 hpiutil2
1998 - spring <unfixed> (embed)
1999
2000 p7zip
2001 - spring <unfixed> (embed)
2002
2003 pythonqt (doesn't seem to be python-qtN, unknown source)
2004 - fontmatrix <unfixed> (embed)
2005 - elmerfem <unfixed> (embed)
2006
2007 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
2008 - docvert <unfixed> (embed)
2009 - jifty <unfixed> (embed)
2010 - kdenetwork <unfixed> (embed)
2011 - mediatomb <unfixed> (embed)
2012 - plastex <unfixed> (embed)
2013 - plone3 <removed> (embed)
2014 - python-chaco <unfixed> (embed)
2015 - python-docutils <unfixed> (embed)
2016 - s5 <unfixed> (embed)
2017 - zope2.10 <unfixed> (embed)
2018 - zope2.11 <removed> (embed)
2019 - cython <not-affcted> (embed)
2020 NOTE: part of documentation, which is not installed into the binary package
2021
2022 python-docutils
2023 - zope2.10 <unfixed> (embed)
2024 - zope2.11 <removed> (embed)
2025
2026 tesseract
2027 - ocropus <unfixed> (static)
2028
2029 antlr
2030 - kdevelop <unfixed> (embed)
2031
2032 libxerces2
2033 - openjdk-6 <unfixed> (embed)
2034
2035 kfreebsd-8
2036 - kfreebsd-7 <unfixed> (old-version)
2037 - kfreebsd-6 <removed> (old-version)
2038
2039 ruby1.9.1
2040 - ruby1.9 <unfixed> (old-version)
2041 - ruby1.8 <unfixed> (old-version)
2042
2043 maildrop
2044 - courier <unfixed> (embed) [./maildrop]
2045
2046 glee
2047 - warzone2100 <not-affected> (embed)
2048 - love 0.8.0-2 (embed; bug #690492)
2049
2050 phing
2051 - symfony <unfixed> (embed)
2052
2053 pake
2054 - symfony <unfixed> (embed)
2055
2056 propel
2057 - symfony <unfixed> (embed)
2058
2059 creole
2060 - symfony <unfixed> (embed)
2061
2062 hfsutils
2063 - cdrkit <unfixed> (embed; bug #570187)
2064 NOTE: embeds hfsutils code in genisoimage
2065
2066 cdrkit
2067 - grub2 <unfixed> (embed; bug #570156)
2068 NOTE: genisoimage imported into grub-mkisofs
2069
2070 kdebase-workspace
2071 - kdebase <unfixed> (old-version)
2072
2073 file
2074 - php5 <unfixable> (modified-embed)
2075 [lenny] - php5 <not-affected>
2076 - radare2 <unfixed> (embed)
2077 TODO: check if embed, modfied-embed or old-version
2078 - sleuthkit <unfixed> (embed)
2079 TODO: check if used
2080
2081 cdb
2082 - php5 <unfixed> (embed)
2083
2084 libmbfl (itp: #570708)
2085 - php5 <unfixed> (embed)
2086 NOTE: PHP is actually the current upstream, ITP is of that code
2087
2088 libonig
2089 - php5 5.3.2-1 (embed)
2090
2091 xmlrpc-epi
2092 - php5 <unfixed> (embed)
2093
2094 swt-gtk
2095 - eclipse <unfixed> (embed; bug #538808)
2096
2097 txt2html
2098 - wml 2.0.11ds2-1 (embed)
2099
2100 ca-certificates
2101 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
2102
2103 openexr
2104 - freeimage <unfixed> (embed)
2105
2106 libmng
2107 - freeimage <unfixed> (embed)
2108
2109 openjpeg
2110 - freeimage <unfixed> (embed)
2111
2112 libjpeg6b
2113 - freeimage <unfixed> (embed)
2114 - ia32-libs <removed> (embed)
2115
2116 libjpeg (don't know what exact version)
2117 - dcmtk <unfixed>
2118 - gdcm <unfixed>
2119 - insighttoolkit <unfixed>
2120 - openarena 0.8.5-5+exp1 (bug #495966)
2121 - outguess <unfixed>
2122 - squeak-vm <unfixed> (embed)
2123 - tremulous <unfixed>
2124 - tuxonice-userui <unfixed> (static)
2125 - fpc <unfixed> (static)
2126 - lazarus <unfixed> (static)
2127 NOTE: inherited from fpc, see #472304
2128 - mseide-msegui <unfixed> (static)
2129 NOTE: inherited from fpc, see #472304
2130 - easymp3gain <unfixed> (static)
2131 NOTE: inherited from fpc, see #472304
2132 - winff <unfixed> (static)
2133 NOTE: inherited from fpc, see #472304
2134 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2135 - ghostscript 8.64~dfsg-2 (embed)
2136
2137 lxr
2138 - lxr-cvs <unfixed> (embed)
2139
2140 libfile-copy-recursive-perl
2141 - r-base <unfixed> (embed; bug #577427)
2142 - r-base-core-ra <unfixed> (embed; bug #577429)
2143
2144 delimmatch
2145 - r-base <unfixed> (embed; bug #577433)
2146 - r-base-core-ra <unfixed> (embed; bug #577434)
2147
2148 libsmf (ITP: #572558)
2149 - denemo <unfixed> (embed)
2150 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2151
2152 libselinux
2153 - dpkg 1.15.6 (static)
2154 - ia32-libs <removed> (embed)
2155
2156 xinha (ITP: #479708)
2157 - horde3 <unfixed>
2158 - serendipity <unfixed>
2159 - openacs <unfixed>
2160 - dotlrn <unfixed>
2161
2162 dvipng
2163 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2164
2165 dvipdfmx
2166 - texlive-bin <unfixed> (embed)
2167 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2168
2169 lcdf-typetools
2170 - texlive-bin 2009-1 (embed)
2171
2172 tex4ht
2173 - texlive-bin 2009-1 (embed)
2174
2175 freetype
2176 - texlive-bin 2009-1 (embed)
2177 - ia32-libs <removed> (embed)
2178
2179 freetype2
2180 - texlive-bin 2009-1 (embed)
2181 - tuxonice-userui <unknown> (static)
2182 - instantbird <removed>
2183 - qt4-x11 <unknown> (embed)
2184 - vtk <unknown> (embed)
2185 - paraview <unknown> (embed)
2186 NOTE: from embedded copy of vtk
2187
2188 silgraphite
2189 - texlive-bin <unfixed> (embed)
2190
2191 unzip
2192 - texlive-bin 2009-1 (embed)
2193
2194 jbig2dec
2195 - ghostscript 8.71~dfsg2-1 (embed)
2196
2197 libxml2
2198 - chromium-browser 5.0.375.29~r46008-1
2199 - ia32-libs <removed> (embed)
2200
2201 protobuf
2202 - chromium-browser 5.0.375.70~r48679-2
2203
2204 libv8
2205 - chromium-browser 5.0.375.38~r46659-1
2206
2207 nspr
2208 - chromium-browser 5.0.375.29~r46008-3
2209 - ia32-libs <removed> (embed)
2210 - virtualbox <unfixed> (modified-embed)
2211
2212 yasm
2213 - chromium-browser 5.0.375.29~r46008-2
2214
2215 libxslt
2216 - chromium-browser 5.0.375.29~r46008-1
2217 - ia32-libs <removed> (embed)
2218
2219 miniupnpc
2220 - warzone2100 2.3.7-2
2221 NOTE: code still present in tarball but removed during build and unused
2222 - vino 3.2.2-1
2223 NOTE: code still present in tarball but removed during build and unused
2224 - vidalia 0.2.21-2 <unfixed> (old-version)
2225 NOTE: embedded old version might be modified
2226 - vidalia 0.2.21-3 <not-affected> (old-version)
2227 NOTE: code still present in tarball but unused during build
2228
2229 iniparser (not packaged in Debian; RFP bug #582657)
2230 - warzone2100 <unfixed> (modified-embed)
2231
2232 pyglet
2233 - sympy <unfixed> (embed; bug #459716)
2234
2235 mpmath
2236 - sympy <unfixed> (embed; bug #541746)
2237
2238 openssh
2239 - libpam-ssh <unfixed> (embed; bug #598522)
2240
2241 curl
2242 - cmake 2.6.0-6 (embed)
2243 NOTE: Might be fixed earlier. Lenny version recorded.
2244 - criticalmass <unfixed> (static; bug #599061)
2245 - wengophone 2.1.0~beta1-svn9983-1 (embed)
2246 - ia32-libs <removed> (embed)
2247
2248 lib3ds
2249 - boson <unfixed> (embed; bug #600900)
2250 - openscenegraph <unfixed> (embed; bug #601181)
2251
2252 xcftools
2253 - gnome-xcf-thumbnailer <unfixed> (embed)
2254
2255 simplejson
2256 - exaile <unfixed> (embed; bug #604547)
2257
2258 libasycns
2259 - loudmouth <unfixed> (embed; bug #566143)
2260
2261 plplot
2262 - emboss <unfixed> (fork)
2263
2264 acl
2265 - ia32-libs <removed> (embed)
2266
2267 arts
2268 - ia32-libs <removed> (embed)
2269
2270 attr
2271 - ia32-libs <removed> (embed)
2272
2273 audiofile
2274 - ia32-libs <removed> (embed)
2275
2276 avahi
2277 - ia32-libs <removed> (embed)
2278
2279 celt
2280 - ia32-libs <removed> (embed)
2281
2282 coreutils
2283 - ia32-libs <removed> (embed)
2284
2285 cyrus-sasl2
2286 - ia32-libs <removed> (embed)
2287
2288 db4.8
2289 - ia32-libs <removed> (embed)
2290
2291 dbus
2292 - ia32-libs <removed> (embed)
2293
2294 directfb
2295 - ia32-libs <removed> (embed)
2296
2297 esound
2298 - ia32-libs <removed> (embed)
2299
2300 fltk1.1
2301 - ia32-libs <removed> (embed)
2302
2303 fontconfig
2304 - ia32-libs <removed> (embed)
2305
2306 freeglut
2307 - ia32-libs <removed> (embed)
2308
2309 gcc-3.3
2310 - ia32-libs <removed> (embed)
2311
2312 gdbm
2313 - ia32-libs <removed> (embed)
2314
2315 gnutls26
2316 - ia32-libs <removed> (embed)
2317
2318 hal
2319 - ia32-libs <removed> (embed)
2320
2321 isdnutils
2322 - ia32-libs <removed> (embed)
2323
2324 jack-audio-connection-kit
2325 - ia32-libs <removed> (embed)
2326
2327 keyutils
2328 - ia32-libs <removed> (embed)
2329
2330 krb5
2331 - ia32-libs <removed> (embed)
2332
2333 lesstif2
2334 - ia32-libs <removed> (embed)
2335
2336 libaio
2337 - ia32-libs <removed> (embed)
2338
2339 libasyncns
2340 - ia32-libs <removed> (embed)
2341
2342 libcap2
2343 - ia32-libs <removed> (embed)
2344
2345 libdrm
2346 - ia32-libs <removed> (embed)
2347
2348 libedit
2349 - ia32-libs <removed> (embed)
2350
2351 libexif
2352 - ia32-libs <removed> (embed)
2353
2354 libgcrypt11
2355 - ia32-libs <removed> (embed)
2356
2357 libgpg-error
2358 - ia32-libs <removed> (embed)
2359
2360 libgphoto2
2361 - ia32-libs <removed> (embed)
2362
2363 libice
2364 - ia32-libs <removed> (embed)
2365
2366 libieee1284
2367 - ia32-libs <removed> (embed)
2368
2369 libjpeg8
2370 - ia32-libs <removed> (embed)
2371
2372 libnss-ldap
2373 - ia32-libs <removed> (embed)
2374
2375 libogg
2376 - ia32-libs <removed> (embed)
2377
2378 libpam-ldap
2379 - ia32-libs <removed> (embed)
2380
2381 libsamplerate
2382 - ia32-libs <removed> (embed)
2383
2384 libsdl1.2
2385 - ia32-libs <removed> (embed)
2386
2387 libsm
2388 - ia32-libs <removed> (embed)
2389
2390 libssh2
2391 - ia32-libs <removed> (embed)
2392
2393 libtasn1-3
2394 - ia32-libs <removed> (embed)
2395
2396 libx11
2397 - ia32-libs <removed> (embed)
2398
2399 libx86
2400 - ia32-libs <removed> (embed)
2401
2402 libxau
2403 - ia32-libs <removed> (embed)
2404
2405 libxcb
2406 - ia32-libs <removed> (embed)
2407
2408 libxcomposite
2409 - ia32-libs <removed> (embed)
2410
2411 libxcursor
2412 - ia32-libs <removed> (embed)
2413
2414 libxdamage
2415 - ia32-libs <removed> (embed)
2416
2417 libxdmcp
2418 - ia32-libs <removed> (embed)
2419
2420 libxext
2421 - ia32-libs <removed> (embed)
2422
2423 libxfixes
2424 - ia32-libs <removed> (embed)
2425
2426 libxi
2427 - ia32-libs <removed> (embed)
2428
2429 libxinerama
2430 - ia32-libs <removed> (embed)
2431
2432 libxmu
2433 - ia32-libs <removed> (embed)
2434
2435 libxp
2436 - ia32-libs <removed> (embed)
2437
2438 libxrandr
2439 - ia32-libs <removed> (embed)
2440
2441 libxrender
2442 - ia32-libs <removed> (embed)
2443
2444 libxss
2445 - ia32-libs <removed> (embed)
2446
2447 libxt
2448 - ia32-libs <removed> (embed)
2449
2450 libxtst
2451 - ia32-libs <removed> (embed)
2452
2453 libxv
2454 - ia32-libs <removed> (embed)
2455
2456 libxxf86vm
2457 - ia32-libs <removed> (embed)
2458
2459 mesa
2460 - ia32-libs <removed> (embed)
2461
2462 mpg123
2463 - ia32-libs <removed> (embed)
2464
2465 nas
2466 - ia32-libs <removed> (embed)
2467
2468 nss
2469 - ia32-libs <removed> (embed)
2470
2471 openal-soft
2472 - ia32-libs <removed> (embed)
2473
2474 openssl
2475 - ia32-libs <removed> (embed)
2476
2477 pam
2478 - ia32-libs <removed> (embed)
2479
2480 popt
2481 - ia32-libs <removed> (embed)
2482
2483 pulseaudio
2484 - ia32-libs <removed> (embed)
2485
2486 sane-backends
2487 - ia32-libs <removed> (embed)
2488
2489 sqlite3
2490 - ia32-libs <removed> (embed)
2491 - chromium-browser <unfixed> (embed)
2492
2493 sysfsutils
2494 - ia32-libs <removed> (embed)
2495
2496 tcp-wrappers
2497 - ia32-libs <removed> (embed)
2498
2499 tdb
2500 - thunar 1.2.1-3 (old-version)
2501 - ia32-libs <removed> (embed)
2502
2503 tslib
2504 - ia32-libs <removed> (embed)
2505
2506 unixodbc
2507 - ia32-libs <removed> (embed)
2508
2509 xaw3d
2510 - ia32-libs <removed> (embed)
2511
2512 xbitmaps
2513 - ia32-libs <removed> (embed)
2514
2515 xcb-util
2516 - ia32-libs <removed> (embed)
2517
2518 xcursor-themes
2519 - ia32-libs <removed> (embed)
2520
2521 xft
2522 - ia32-libs <removed> (embed)
2523
2524 dicomparser
2525 - vtk <unfixed>
2526 - paraview <unfixed>
2527 NOTE: as part of its copy of vtk
2528 - insighttoolkit <unfixed>
2529
2530 proj
2531 - vtk <unfixed>
2532 - paraview <unfixed>
2533 NOTE: as part of its copy of vtk
2534 - therion <unfixed>
2535 - python-pyproj 1.8.6-1
2536
2537 netcdf
2538 - vtk <unfixed>
2539 - paraview <unfixed>
2540 NOTE: as part of its copy of vtk
2541
2542 insighttoolkit
2543 - vtk <unfixed> (embed)
2544 NOTE: embeds at least MetaIO
2545 - paraview <unfixed> (embed)
2546 NOTE: embeds at least MetaIO
2547
2548 gl2ps
2549 - vtk <unfixed>
2550 - paraview <unfixed>
2551 NOTE: as part of its copy of vtk
2552 - avogadro <unfixed>
2553 - gabedit <unknown> (embed)
2554 NOTE: not sure if it is built
2555 - drawxtl <unfixed> (embed)
2556 - rgl <unfixed> (embed)
2557 - gmsh <unfixed>
2558 - mcrl2 <unfixed> (embed)
2559 - mysql-gui-tools <unknown> (embed)
2560 NOTE: not sure if it is built
2561 - opencascade <unfixed> (embed)
2562 - orsa <unfixed> (embed)
2563 - qtiplot <unfixed> (embed)
2564 - qwtplot3d <unfixed> (embed)
2565 - root-system <unknown> (embed)
2566 NOTE: not sure if it is built
2567 - scilab <unfixed> (embed)
2568 - snd <unknown> (embed)
2569 NOTE: not sure if it is built
2570 - xmakemol <unfixed> (embed)
2571
2572 qwtplot3d
2573 - qtiplot <unfixed>
2574
2575 parseafm (from Adobe)
2576 - vftool <unfixed>
2577 - gnustep-back <unknown>
2578 NOTE: looks like it isn't built
2579 - evince <unfixed>
2580
2581 bugzilla
2582 - perl <unknown>
2583 - libcgi-pm-perl <unknown>
2584
2585 isc-dhcp
2586 - dhcp3 <unfixable> (old-version)
2587 - dhcp <unfixable> (old-version)
2588
2589 chipmunk (ITP: #623274)
2590 - xmoto <unfixed> (embed; bug #623299)
2591 - libtuxcap <unfixed> (embed; bug #623300)
2592
2593 libsigsegv
2594 - gawk 3.1.8+dfsg-0.1
2595
2596 pdfrw
2597 - rst2pdf <unfixed> (embed; bug #638607)
2598
2599 bind9
2600 - isc-dhcp <unfixed> (embed; bug #643569)
2601 NOTE: introduced in upstream 4.2 series
2602
2603 qof
2604 - gnucash <unfixed> (embed; bug #556245)
2605
2606 feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2607 - megaglest <unfixed> (modified-embed)
2608
2609 acsccid
2610 - ccid 1.3.11 <unfixed> (fork)
2611 - openct <unfixed> (modified-embed)
2612 - towitoko <unfixed> (modified-embed)
2613
2614 ccid
2615 - openct <unfixed> (modified-embed)
2616 - towitoko <unfixed> (modified-embed)
2617
2618 msmtp
2619 - mpop <unfixed> (embed)
2620
2621 iCalcreator
2622 - collabtive <unfixed>
2623 NOTE: class.ical.php
2624 - glpi <unfixed>
2625
2626 plupload
2627 - wordpress <unfixed>
2628
2629 feedcreator (php lib)
2630 - collabtive <unfixed>
2631 NOTE: class.rss.php
2632 - piwigo <unfixed>
2633 - dokuwiki <unfixed> (modified-embed)
2634 NOTE: dokuwiki uses an "enhanced" version
2635
2636 emacs
2637 - le <unfixed>
2638 NOTE: it uses an almost-pristine 2008 version of emacs' regex.{c,h}
2639
2640 libjsoncpp
2641 - eiskaltdcpp <unfixed> (embed)
2642 - drizzle <unfixed> (embed)
2643
2644 mongoose
2645 - phantomjs <unfixed> (modified-embed)
2646
2647 rapidxml (not packaged in Debian, http://rapidxml.sourceforge.net)
2648 - boost1.49 <unfixed> (embed)
2649 - boost1.50 <unfixed> (embed)
2650 - deal.ii <unfixed> (embed)
2651 - fife <unfixed> (embed)
2652 - witty <unfixed> (embed)
2653
2654 make
2655 - remake <unfixed> (fork)
2656
2657 metacity
2658 - mutter <unfixed> (fork)
2659
2660 mutter
2661 - muffin <unfixed> (fork)
2662
2663 libjson-spirit-dev
2664 - bitcoin <unfixed> (modified-embed)
2665 - litecoin <itp> (modified-embed; bug #693492)
2666
2667 bitcoin
2668 - litecoin <itp> (fork; bug #693492)
2669
2670 json-spirit
2671 - bitcoin <unfixed> (modified-embed)
2672 - litecoin <itp> (modified-embed; bug #693492)
2673
2674 libupnp
2675 - mediatomb <unfixable> (fork)
2676 - djmount <unfixed> (embed; bug #699562)
2677
2678 flowplayer-core (not packaged in Debian)
2679 - mahara <unfixed> (modified-embed)
2680
2681 dcraw
2682 - ufraw <unfixed>
2683 - libraw <unfixed>
2684 - kdcraw <unfixed>
2685 NOTE: in embedded copy of libraw
2686 - xbmc <unfixed>
2687 - exactimage <unfixed>
2688 - rawtherapee <unfixed>
2689 - rawstudio <unfixed>
2690
2691 libraw
2692 - libkdcraw 4:4.12.3-1
2693 - darktable <unfixed> (modified-embed; bug #682980)
2694 - shotwell <unfixed>
2695 NOTE: possibly fixed in wheezy and greater
2696
2697 mednafen
2698 - libvorbisidec 0.9.17.1-1
2699 [squeeze] - libvorbisidec <unfixed>
2700 [wheezy] - libvorbisidec <unfixed>
2701 NOTE: not-affected since 0.9.17.1-1 (as above)
2702 NOTE: mednafen 0.8.D.3-4 and 0.8.D.3-5 attempted to use the packaged libvorbisidec,
2703 NOTE: but this breaks CD playback when using .ogg files (see #699143), so it's
2704 NOTE: likely that future packages in the 0.8 series will build using the embedded code.
2705 - libmpcdec 0.9.21-1
2706 NOTE: not-affected since 0.9.21-1 (as above)
2707
2708 xmoto
2709 - chipmunk <unfixed> (bug #623299)
2710
2711 irrlicht
2712 - supertuxkart <unfixed> (modified-embed)
2713
2714 snappy
2715 - chromium-browser 35.0.1916.86-1
2716 NOTE: not sure if it's build
2717 - mongodb <unfixed>
2718 NOTE: needs further checks
2719 - couchdb <unfixed>
2720 - libsereal-decoder-perl <unfixed>
2721 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2722 - libsereal-encoder-perl <unfixed>
2723 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2724
2725 automysqlbackup
2726 - autopostgresqlbackup <unfixed>
2727 NOTE: fork
2728
2729 python-pip
2730 - python-virtualenv <unfixed>
2731
2732 scrypt
2733 - python-scrypt <unfixed> (embed; wontfix; package in NEW)
2734 NOTE: upstream scrypt does not provide a shared library/API
2735
2736 srtp
2737 - chromium <unfixed>
2738 - qutecom <unfixed>
2739
2740 fonttools
2741 - python-enable <unfixed> (embed; bug #715145)
2742
2743 uglifyjs
2744 - ruby-uglifier <unfixed> (modified-embed; bug #718367)
2745
2746 openacs
2747 - dotlrn <unfixed> (modified-embed; bug #718487)
2748
2749 jsgantt
2750 - rt4-extension-jsgantt <unfixed> (embed; bug #724287)
2751 - trac-jsgantt <unfixed> (embed; bug #724287)
2752 NOTE: jsgantt is not packaged seperately so far
2753
2754 libjs-pdf
2755 - iceweasel <unfixed> (fork)
2756
2757 jmapviewer
2758 - josm <unfixed> (embed; bug #731029)
2759
2760 qt4-x11
2761 - phantomjs <unfixed> (embed)
2762 NOTE: phantomjs embeds parts of src/
2763
2764 eigen3
2765 - r-cran-rcppeigen <unfixed> (modified-embed; bug #729716)
2766
2767 libyaml
2768 - libyaml-libyaml-perl <unfixed> (embed; bug #664224)
2769
2770 liblivemedia
2771 - vlc <unfixed> (static)
2772 - mplayer <removed> (static)
2773
2774 python-gnupg
2775 - gajim <unfixed> (modified-embed)
2776
2777 xchat:
2778 - hexchat <unfixed> (fork)
2779
2780 libjs-jquery-filetree (not packaged in Debian; RFP bug #741581; http://www.abeautifulsite.net/blog/2008/03/jquery-file-tree/ https://github.com/daverogers/jQueryFileTree)
2781 - controlaula <unfixed> (embed)
2782 - dolibarr <unfixed> (embed)
2783
2784 libjs-jquery-bbq (not packaged in Debian; RFP bug #741586; http://benalman.com/projects/jquery-bbq-plugin/ http://github.com/cowboy/jquery-bbq)
2785 - drupal7 <unfixed> (embed)
2786 - ganglia-web <unfixed> (embed)
2787 - jqapi <unfixed> (embed)
2788
2789 lame
2790 - mp3gain <unfixed> (modified-embed)
2791 NOTE: ancient copy, part of mpglib which was probably part of mpg123 at some point
2792
2793 zopfli
2794 - pigz <unfixed> (embed)
2795 - advancecomp <unfixed> (embed)
2796
2797 libquazip
2798 - pencil2d (modified-embed)

  ViewVC Help
Powered by ViewVC 1.1.5