/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 22322 - (show annotations) (download)
Wed May 22 05:13:28 2013 UTC (27 hours, 43 minutes ago) by jmm
File size: 71829 byte(s)
texlive code copies fixed
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy
14 <unfixed> if the issue is not yet fixed
15 <removed> if the package was removed from the archive
16 <itp> if the package is in the process of being packaged
17 <not-affected> if the package does not use the embedded copy
18 <unknown> if the version number can not be determined
19 <unfixable> for unavoidable cases (e.g., forks that add real value)
20 sort: static (linking statically against a lib)
21 embed (embeds a copy of the library into another source package)
22 modified-embed (embeds a code copy that differs from upstream code)
23 fork (a full-blown fork of another source package)
24 old-version (an older version of essentially the same code)
25
26 The srcpkg might be some string to identify the code if there is no
27 specific source package.
28
29 Everything up to the next line is ignored.
30 ---BEGIN
31 poppler
32 - pdftohtml <unknown>
33 [sarge] - pdftohtml <unfixed>
34 [etch] - pdftohtml <unfixed>
35 NOTE: has been replaced by poppler-utils
36 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37 - texlive-base 3.0-12 (embed)
38 - texlive-bin 2007-1 (embed)
39 - koffice 1:2.0.0-1 (embed; bug #436163)
40 - libextractor 0.5.12-1 (embed)
41 NOTE: libextractor is using its own pdf decoder now
42 - ipe <unfixed> (embed)
43 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 - ruby-gnome2 <unknown> (embed)
45 - pdfedit <unfixed> (embed; bug #510794)
46 - swftools <removed> (embed; bug #551293)
47 - xpdf 3.02-9 (fork)
48
49 pdksh (no longer developed since 1999)
50 - mksh <unfixable> (fork)
51 - posh <unfixable> (fork)
52
53 ppmd
54 - libcomplearn-mod-ppmd <unfixed> (fork)
55 NOTE: discussion in #458152
56
57 libevent
58 - transmission 1.71-1 (embed; bug #529372)
59 - chromium-browser 5.0.375.29~r46008-1
60 - dnsproxy <unknown> (embed)
61
62 lrmi
63 - read-edid 2.0.0-1 (embed; bug #495131)
64 - s3switch <unfixed> (embed)
65 - xresprobe <unfixed> (embed)
66 - zhcon <unfixed> (embed)
67
68 php-htmlpurifier
69 - mahara 1.2.5-1 (embed)
70 - knowledgeroot 0.9.9.5-5 (embed)
71 - moodle <unfixed> (embed)
72
73 peercast
74 - gnome-peercast <removed> (embed)
75 [etch] - gnome-peercast <unfixed> (embed)
76
77 silc-toolkit
78 - silc-client 1.1~beta6-1 (embed)
79
80 icclib
81 - ghostscript <unfixed> (embed)
82 - argyll <unfixed> (embed)
83
84 libusb
85 - argyll <unfixed> (embed)
86 - ia32-libs <unfixable> (embed)
87
88 dietlibc
89 - ccontrol 0.9.1+20071204-1 (static)
90 - mksh <unfixable> (static)
91 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
92
93 libmikmod
94 - pysol-sound-server <unfixed> (modified-embed)
95 - sdl-mixer1.2 <unfixed> (embed)
96 TODO: report bug
97 - uqm 0.6.2.dfsg-8 (embed)
98 NOTE: Might be fixed earlier. Lenny version recorded.
99 - black-box 1.4.6-2.2 (embed)
100 NOTE: Might be fixed earlier. Lenny version recorded.
101
102 libiax
103 - iaxmodem <unfixable> (embed; bug #548885)
104
105 spandsp
106 - iaxmodem <unfixable> (embed; bug #548885)
107
108 python-paramiko
109 - fabric 0.9.0-2 (embed; bug #561398)
110
111 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
112 - dpkg 1.15.6 (static)
113 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
114 - rsync <unfixed> (embed)
115 - cherokee <unfixed> (embed)
116 NOTE: somehow derived code base
117 - mono <unfixed> (embed)
118 TODO: check mozilla
119 - linux-2.6 <unfixed> (embed)
120 - pvpgn 1.7.8-2 (embed)
121 - mrtg 2.12.2-1 (embed)
122 - rpm <unknown> (embed)
123 NOTE: pinged anibal since when rpm was fixed
124 - tuxcmd-modules <unfixed> (embed)
125 - zsync <unfixed>
126 - tra <unfixed>
127 - sash <unfixed>
128 - nsis <unfixed>
129 - pyfits 1:2.3.1-1
130 - mseide-msegui <unfixed>
131 NOTE: mseide
132 - mirrordir <unfixed>
133 - poco <unfixed>
134 - klibc <unfixed>
135 - emboss 6.3.1-1 (embed)
136 - ghostscript 8.71~dfsg2-6 (embed)
137 NOTE: ghostscript fixed sometime before this, but this is the version i checked
138 - freeimage <unfixed>
139 - clamav <unfixed> (fork)
140 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
141 - tuxonice-userui <unfixed> (static)
142 - plt-scheme <unfixed>
143 - perl <unfixed>
144 - paraview <unfixed>
145 - velvet 0.7.56~nozlibcopy-1
146 - gcvs <unfixed>
147 - dump <unfixed>
148 - aide <unfixed> (static)
149 - dar <unfixed> (static)
150 - avfs <unfixed>
151 - fpc <unfixed>
152 - winff <unfixed>
153 NOTE: inherited from fpc, see #472304
154 - lazarus <unfixed>
155 NOTE: inherited from fpc, see #472304
156 - erlang <unfixed> (embed)
157 - gamera 3.2.3-1 (embed)
158 - python2.4 <unfixed> (embed; bug #553403)
159 - python2.5 <unfixed> (embed; bug #553403)
160 - texlive-bin 2013.20130522.30620-1 (embed)
161 - sudo <unknown> (embed)
162 NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
163
164 dulwich
165 - hg-git 0.1.0-1 (embed; bug #541996)
166
167 libvigraimpex
168 - hugin <unfixed> (embed; bug #542259)
169 - enblend-enfuse <unfixed> (embed; bug #542258)
170 - gamera 3.2.3-1 (embed)
171
172 libbz2
173 - dpkg 1.15.6 (static)
174 - amd64-libs <unfixed> (static)
175 NOTE: let's call it "static"
176 - dar <unfixed> (static)
177 - dump <unfixed> (static)
178 - unalz 0.64-1 (embed)
179 NOTE: has code, by the maint, to use the system version but links against the internal copy
180 - clamav <unfixed> (embed)
181 NOTE: libclamav/nsis/bzlib*
182 - pristine-tar <unfixable> (modified-embed)
183 NOTE: compression code only, not uncompression
184 - r-base-core-ra 1.2.8 (static)
185 - r-base-core 2.11.1 (static)
186 NOTE: links dynamically in squeeze, statically in lenny
187 - rpm <unfixed> (static)
188 NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
189
190 libyahoo2
191 - centerim <unfixed> (embed; bug #559783)
192
193 libmsn
194 - centerim <unfixed> (embed; bug #559783)
195
196 libgadu
197 - centerim <unfixed> (embed; bug #559783)
198 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
199 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
200 - kdenetwork 4:3.3.2-5 (embed)
201 NOTE: from kdenetwork: kopete
202 - ekg 1:1.8~rc0-1 (embed)
203 - kadu 0.6.0.2-3 (embed; bug #504430)
204 - gadu <itp> (embed)
205
206 xmlrpc (which package is the "origin" of this code?)
207 - drupal <unfixed> (embed)
208 - phpgroupware <unfixed> (embed)
209 - egroupware <unfixed> (embed)
210 - phpwiki <unfixed> (embed)
211 - php4 <removed> (embed)
212 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
213
214 shtool (affects build-time only)
215 - mysql-ocaml <unfixed> (embed)
216 - php4 <removed> (embed)
217 - php5 <unfixed> (embed)
218
219 xulrunner
220 - iceape <unfixed> (embed; bug #561749)
221 - iceweasel 2.0.0.19 (embed)
222 - icedove <unfixed> (embed; bug #561750)
223 - kompozer <unfixed> (embed; bug #532168)
224 - galeon 2.0.2-4 (embed)
225 - epiphany-browser 2.14.3-8 (embed)
226 - conkeror 0.9~git080629-2 (embed)
227 - kazehakase 0.4.2-1 (embed)
228 - wine-gecko-unstable <unfixed> (embed; bug #669672)
229
230 xli
231 - xloadimage <unfixed> (embed)
232
233 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
234 - openmotif <unfixed> (embed)
235
236 libxpm
237 - lesstif2 <unfixed> (embed; bug #575750)
238 - ia32-libs <unfixable> (embed)
239
240 kerberized apps with BSD origin
241 - krb4 <removed> (embed)
242 - krb5 <unfixed> (embed)
243 - heimdal <unfixed> (embed)
244
245 grip (which pkg is the origin?)
246 - libcdaudio <unfixed>
247 - grip <unfixed>
248 - gnome-vfs <unfixed>
249 TODO: check vfs2 as well
250
251 fudforum
252 [etch] - phpgroupware <unfixed> (embed)
253 NOTE: phpgroupware-fudforum
254 [sarge] - egroupware-fudforum <removed> (embed)
255
256 libbsd
257 - rdate 1:1.2-3 (embed)
258 - atheme-services <unfixed>
259 - libbsd-arc4random-perl <not-affected> (modified-embed)
260 NOTE: code not used, it links dynamically against libbsd instead
261 - isakmpd <unfixed>
262 - bsdgames <unfixed> (embed)
263 - bsd-mailx <unfixed> (embed)
264 - netcat-openbsd <unfixed> (embed; bug #550611)
265 - openssh <unfixed> (embed)
266 - unworkable <unfixed> (embed)
267 - mksh <unfixed> (modified-embed)
268 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
269 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
270 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
271 - ia32-libs <unfixable> (embed)
272
273 cvs
274 - gcvs <unfixed> (embed)
275 NOTE: see cvsunix/src in tarball
276
277 pcre3
278 - php4 <removed> (embed)
279 - analog 2:5.23-0woody1 (embed)
280 - chicken 3.2.7-2 (embed)
281 NOTE: Might be fixed earlier. Lenny version recorded.
282 - goffice <unfixed> (embed)
283 NOTE: libgoffice-*
284 - hypermail 2.2.0.dfsg-2 (embed)
285 NOTE: Might be fixed earlier. Lenny version recorded.
286 - privoxy 3.0.9-1 (embed)
287 NOTE: Might be fixed earlier. Lenny version recorded.
288 - vfu 4.06-4.1 (embed; bug #450754)
289 - tf5 5.0beta7-1 (embed)
290 - monotone 0.43-1 (embed)
291 NOTE: this only affects versions >= 0.37
292 - glib2.0 2.15.2-1 (embed)
293 - apache2 2.0.53-4 (embed)
294 - exim4 4.10-0.srh20.12 (embed)
295 - yacas <unfixed> (embed)
296 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
297 - gtamsanalyzer.app 0.42-5 (embed)
298 - tin 980117-1 (embed)
299 - kazehakase 0.5.2-1
300 - webkit 1.0.1-1 (embed)
301 - qt4-x11 <unfixed> (embed)
302 NOTE: embedded via webkit copy
303 - erlang <unfixed> (embed)
304 - ssed <unfixed> (embed)
305 - ircd-hybrid <unfixed> (static)
306 - emboss <unfixed> (fork)
307 - cherokee <unfixed> (embed)
308 - oftc-hybrid 1.6.9.dfsg-1 (embed)
309 - ratbox-services <unfixed> (embed)
310 - squeak-vm <unfixed> (embed)
311 - tinymux <unfixed> (embed)
312 - mp4h <unfixed> (embed)
313
314 tiff
315 - wxwindows2.4 2.2.1 (embed)
316 - gamera 3.2.3-1 (embed)
317 - freeimage <unfixed> (embed)
318 - libtk-img <unfixed> (embed)
319 NOTE: there are two copies, one under tiff/ other under libtiff/
320 - gdal <unfixed>
321 - ia32-libs <unfixable> (embed)
322
323 uudeview
324 - libconvert-uulib-perl <unfixed> (embed)
325 - pan <unfixed> (embed)
326
327 sqlite
328 - amarok <unfixed> (embed)
329 - monotone 0.43-1 (embed)
330 - iceweasel <unfixed> (embed)
331 - heimdal <unfixed> (embed; bug #559616)
332
333 util-linux
334 - loop-aes-utils <unfixed> (embed)
335 NOTE: contains code from util-linux' mount in the mount-aes-udeb
336 - ia32-libs <unfixable> (embed)
337
338 sylpheed
339 - sylpheed-claws <unfixed> (fork)
340
341 phpsysinfo
342 - egroupware <unfixed> (embed)
343 - phpgroupware <unfixed> (embed)
344
345 phpldapadmin
346 [sarge] - egroupware <unfixed> (embed)
347 NOTE: removed from egroupware after sarge
348
349 chmlib
350 - kchmviewer <unknown> (embed)
351
352 ffmpeg (libavcodec/libavformat)
353 - mplayer 1.0~rc2-14 (embed; bug #395252)
354 - kino 1.0.0-1
355 - vlc <not-affected> (Links dynamically since initial release)
356 - smilutils 0.3.0-10
357 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
358 - motion 3.1.19-1
359 - gstreamer0.10-ffmpeg 0.10.3-2
360 - xmovie <removed> (static)
361 TODO: gimp-gap (potentially using ffmpeg code as well)
362 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
363 - audacity 1.3.7-2 (embed; bug #512278)
364 - chromium-browser <unfixed> (fork)
365 - libav <unfixed>
366
367 faad2
368 - mplayer 1.0~rc2-20 (embed)
369 - avifile <unfixed> (embed; bug #538750)
370 - ffmpeg-debian <removed> (embed)
371
372 libmad (MPEG decoding lib)
373 - xine-lib <unfixed> (embed)
374 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
375 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
376
377 libdts
378 - xine-lib <unfixed> (embed)
379
380 flac
381 - xine-lib <unfixed> (embed)
382 - ia32-libs <unfixable> (embed)
383
384 liba52
385 - a52dec <unfixed> (embed)
386 - xine-lib <unfixed> (embed)
387
388 mpeg2dec (libmpeg2)
389 - xine-lib <unfixed> (embed)
390
391 libmpeg3
392 - squeak-vm <unfixed> (embed)
393
394 libntlm
395 - wget <unfixed> (fork; bug #550436)
396 - curl <unfixed> (fork; bug #550437)
397 - cntlm <unfixed> (fork; bug #550438)
398
399 uw-imap
400 - pine <unfixed> (embed)
401 - alpine <unfixed> (embed)
402
403 imagemagick
404 - graphicsmagick <unfixed> (fork)
405
406 python-urlgrabber
407 - mercurial <unfixed> (embed; bug #531062)
408 - w3af <unfixed> (embed; bug #555372)
409 [experimental] - harvestman <unfixed> (embed; bug #555373)
410
411 beautifulsoup
412 - python-mechanize <unfixed> (embed; bug #555349)
413 - zope2.11 <removed> (embed; bug #555350)
414 - twill <unknown> (embed)
415
416 halibut
417 - nsis <unfixed> (fork)
418
419 libghttp
420 - hotway <unfixed> (embed)
421
422 libsndfile
423 - ardour 1:2.7.1-1 (embed)
424 - ia32-libs <unfixable> (embed)
425
426 glibmm2.4
427 - ardour 1:2.7.1-1 (embed)
428
429 libgnomecanvasmm2.6
430 - ardour 1:2.7.1-1 (embed)
431
432 libsigc++-2.0
433 - ardour 1:2.7.1-1 (embed)
434 - ia32-libs <unfixable> (embed)
435
436 soundtouch
437 - ardour 1:2.7.1-1 (embed)
438
439 libmms
440 - xine-lib <unfixed> (embed)
441 - mimms <unfixed> (embed)
442
443 fckeditor
444 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
445 - moin 1.8.2-2 (embed; bug #452599)
446 - karrigell <removed> (embed; bug #452598)
447 - gforge 4.6.99+svn6225-1 (embed)
448 - request-tracker3.8 <unfixed> (embed)
449 - otrs2 <unfixed> (embed)
450
451 ipatlas (not packaged in Debian)
452 - moodle <unfixed> (embed; bug #507185)
453
454 libphp-phpmailer
455 - moodle <unfixed> (embed; bug #507185)
456 - mahara <unfixed> (embed)
457 - symfony <unfixed> (embed; bug #566778)
458 [etch] - phpgroupware <unfixed> (embed)
459 NOTE: phpgroupware-felamimail is only in etch
460 - egroupware <unfixed> (embed; bug #504283)
461 - glpi 0.80.7-2
462
463 htmlArea (not packaged in Debian)
464 - moodle <unfixed> (embed)
465
466 giflib
467 - wine <unfixed> (embed; bug #466181)
468
469 bennu (not packaged in Debian, http://bennu.sourceforge.net)
470 - moodle <unfixed> (embed)
471
472 smarty
473 - moodle 1.8.2-2 (embed; bug #471158)
474 - gallery2 2.2.5-2 (embed; bug #471160)
475 - mahara 0.9.2-2 (embed; bug #471201)
476 - gosa 2.4beta1-1 (embed; bug #471200)
477
478 TinyMCE
479 - wordpress 2.5.1-3 (embed; bug #478257)
480 - moodle <unfixed> (embed; bug #507185)
481 - knowledgeroot <unfixed> (embed)
482 - joomla <itp> (bug #326398)
483 - mahara 1.2.6-1 (embed; #597752)
484 - glpi 0.80.7-2
485
486 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
487 - scite <unfixed> (embed)
488 - qscintilla <unfixed> (embed)
489 - qscintilla2 <unfixed> (embed)
490 - geany <unfixed> (fork)
491 - anjuta <unfixed> (embed)
492 - sdlbasic <unfixed> (embed)
493
494 libphp-adodb
495 - moodle <unfixed> (embed; bug #507185)
496 NOTE: also AdoDB-XML Schema
497 - gallery2 <unfixed> (embed)
498 - phppgadmin <unfixed> (embed)
499 - egroupware <unfixed> (embed)
500 - phpwiki <unfixed> (embed)
501 - torrentflux 2.0beta1-2 (embed)
502 - ipplan <unfixed> (embed)
503 - typo3-src <unfixed> (embed)
504 - cacti <unknown> (embed)
505 [sarge] - cacti <unfixed> (embed)
506 NOTE: dependency exists, but internal version is used
507 - gforge 4.7~rc2-6 (embed)
508 - mahara <unfixed> (embed)
509
510 gzip
511 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
512 - klibc <unfixed> (embed)
513 NOTE: based on linux-kernel gzip code
514 - busybox <unfixed> (embed)
515 - pristine-tar <unfixed> (modified-embed)
516 NOTE: compression code only, not uncompression
517 - ncompress <unfixed> (old-version)
518
519 neon
520 - cadaver 0.22.3+debian-1 (embed; bug #188381)
521 - gnome-vfs2 <unfixed> (embed; bug #395874)
522 [etch] - litmus <unfixed> (embed; #395875)
523 - litmus <removed> (embed; #395875)
524 [sarge] - screem <unfixed> (embed)
525 - sitecopy 1:0.16.0-1 (embed; bug #395876)
526 [etch] - tla <unfixed> (embed; bug #395877)
527 [sarge] - tla <unfixed> (embed; bug #395877)
528
529 libmodplug
530 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
531
532 libvncserver
533 - vino <unfixed> (embed)
534
535 putty
536 - filezilla <unfixed> (embed)
537
538 tinyxml
539 - filezilla <unfixed>
540 - crystalspace <unfixed> (embed)
541 - libwfut <unfixed> (embed)
542 - rarian <unfixed> (embed)
543 - bulletml <unfixed> (embed)
544 - pokerth <unfixed> (embed)
545 - qutecom <unfixed> (embed)
546 - sofa-framework <unfixed> (embed)
547 - yate <unfixed> (embed)
548 - antigrav <unfixed> (embed)
549 - balder2d <unfixed> (embed)
550 - cal3d <unfixed> (embed)
551 - criticalmass <unfixed> (embed)
552 - ember <unfixed> (embed)
553 - epiphany <unfixed> (embed)
554 - gambit <unfixed> (embed)
555 - noiz2sa <unfixed> (embed)
556 - ogre <unfixed> (embed)
557 - opencity <unfixed> (embed)
558 - openmovieeditor <unfixed> (embed)
559 - pouetchess <unfixed> (embed)
560 - tecnoballz <unfixed> (embed)
561 - trigger-rally <unfixed> (embed)
562 - xmoto <unfixed> (embed)
563 - mapnik <unknown> (embed)
564 NOTE: uses a different XML parser by default
565 - rrootage 0.23a-6 <embed>
566 NOTE: links to libbulltetml
567 - boson <unknown> (embed)
568 NOTE: the embedded code is unused
569 - cppcheck <unfixed> (embed)
570 NOTE: introduced in 1.47, will use system's version in 1.48
571 [squeeze] - cppcheck <not-affected>
572
573 gv
574 - evince <unfixed> (embed)
575 NOTE: ps/ tree from gv 3.5.8
576 NOTE: evince-gtk is affected (a component of evince source package)
577
578 libXbae
579 - paw <unfixed> (embed)
580
581 libgtkhtml
582 - claws-mail-extra-plugins <unfixed> (fork)
583
584 libXaw
585 - paw <unfixed> (embed)
586 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
587 - ia32-libs <unfixable> (embed)
588
589 libgd2
590 - graphviz 2.16-1 (embed)
591 NOTE: lib/gd seems to be 2.0.33
592 - wml 2.0.11ds2-1 (embed)
593 - libwmf <unfixed> (embed)
594 NOTE: derived from gd 1.6.3, but only used to write images
595 - plt-scheme <unfixed> (embed; bug #601525)
596 - texlive-bin 2013.20130522.30620-1 (embed)
597
598 rar
599 - unrar-nonfree <unfixed> (embed)
600
601 unrar-free (maybe this code is derived from the original rar, too?)
602 - clamav <unfixed> (embed)
603 NOTE: seems to be disabled in default config
604
605 mplayer (DirectMedia Object loader)
606 - xine-lib <unfixed> (embed)
607 NOTE: src/libw32dll/
608 - vlc <unfixed> (embed)
609 NOTE: modules/codec/dmo/
610 - mplayer 1.0~rc2-20 (embed)
611
612 libwpd (WordPerfect converter)
613 - openoffice.org <unfixed> (embed)
614
615 fsplib (http://sourceforge.net/projects/fsp/)
616 - gftp <unfixed> (embed)
617 NOTE: lib/fsplib version 0.3
618
619 sprng
620 - tree-puzzle <unfixed> (embed)
621
622 librpcsecgss
623 - krb5 <unfixed> (embed)
624
625 jasper
626 - ghostscript 8.64~dfsg-2 (embed)
627
628 libiris
629 - psi <unfixed> (embed)
630 - kdenetwork <unfixed> (embed)
631 NOTE: kopete embeds libiris but links dynamically to libidn
632 - kdegames <unfixed> (embed)
633 NOTE: ksirk/kde4
634
635 libidn
636 - monotone 0.43-1 (embed)
637 - psi <unfixed> (embed)
638 NOTE: psi embeds libiris which embeds libidn
639 - kdegames <unfixed> (embed)
640 NOTE: kdegames/kde4 embeds libiris which embeds libidn
641 - ia32-libs <unfixable> (embed)
642
643 lua5.1
644 - monotone 0.43-1 (embed)
645 - nmap 5.00-1 (embed; bug #527997)
646 [lenny] - nmap <unfixed> (embed; bug #527997)
647 - ocropus <unfixed> (embed)
648 - enigma <unfixed> (embed)
649 NOTE: requires lua built with C++
650 - freeciv <unfixed> (embed)
651 - spring <unfixed> (embed)
652
653 libbotan
654 - monotone 0.43-1 (embed)
655
656 NetXX
657 - monotone 0.43-1 (embed)
658
659 libgc
660 - mono <unfixed> (embed)
661
662 lzma
663 - p7zip <unfixed> (embed)
664 - xz-utils <unfixed> (fork)
665 - r-base <unfixed> (embed)
666 NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
667
668 lzo
669 - grub2 <unfixed> (embed)
670
671 yassl
672 - mysql-5.1 <unfixed> (embed)
673 - mysql-5.5 <unfixed> (embed; bug #627207)
674
675 pax code
676 - tar <unfixed> (embed)
677 - cpio <unfixed> (embed)
678
679 t1lib
680 - tetex-bin 2.0.2-1 (embed)
681 - texlive-bin 2013.20130522.30620-1 (embed; bug #667912)
682 NOTE: used only in xdivk (a dvi file viewer that the maintainer refuses to drop)
683 - grace 5.1.14-2 (embed)
684 - evince <unfixed> (embed)
685 NOTE: at least parseafm code, maybe more?
686 - vftool <unfixed> (embed)
687 NOTE: just parseafm code it seems
688
689 guichan
690 - boswars <unfixed> (embed)
691 NOTE: maintainer notified us, working on it
692
693 tolua
694 - boswars <unfixed> (embed)
695 NOTE: maintainer notified us, working on it
696 NOTE: actually tolua++
697 - ocropus <unfixed> (embed)
698 NOTE: actually tolua++
699 - freeciv <unfixed> (embed)
700 NOTE: actually tolua++
701 - enigma <unfixed> (embed)
702
703 asio-dev
704 - luxrender <removed> (embed)
705
706 xine-lib
707 - vlc <unfixed> (embed)
708 NOTE: only parts included in modules/access/rtsp
709
710 netpbm
711 - tcl8.3 <unfixed> (embed)
712 - tcl8.4 <unfixed> (embed)
713 - tcl8.5 <unfixed> (embed)
714 NOTE: generic/tkImgGIF.c
715
716 tk8.5
717 - tk8.0 <removed> (old-version)
718 - tk8.3 <unfixed> (old-version)
719 - tk8.4 <unfixed> (old-version)
720 - perl-tk <unfixable> (fork)
721
722 samba
723 - mc 2:4.6.2~git20080311-1 (embed)
724 NOTE: maintainer is aware of this, currently searching a solution
725
726 plib1.8.4c2
727 - boson <unfixed> (fork)
728 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
729
730 fribidi
731 - quesoglc 0.7.2-2 (embed)
732
733 glew
734 - quesoglc <unfixed> (embed; bug #489341)
735 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
736 - trigger 0.5.2.1-2 (embed)
737 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
738 - trigger-rally 0.5.2.1-2 (embed)
739 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
740 - chromium-browser 5.0.375.70~r48679-2
741
742 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
743 - transcend <unfixed> (embed)
744 - cultivation <unfixed> (embed)
745 - passage <unfixed> (embed)
746 - gravitation <unfixed> (embed)
747
748 tar
749 - libarchive <unfixed> (embed)
750 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
751
752 cpio
753 - libarchive <unfixed> (embed)
754 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
755
756 kde4libs
757 - kdelibs <unfixable> (old-version)
758
759 webkit
760 - qt4-x11 <unfixed> (embed; bug #479851)
761 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
762 - kde4libs <unfixable> (fork)
763 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
764 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
765 - chromium-browser <unfixed> (fork)
766
767 ftgl
768 - blender 2.46+dfsg-1 (embed)
769 - vtk <unfixed> (embed)
770 - paraview <unfixed> (embed)
771 NOTE: as part of its copy of vtk
772 - tulip <unfixed> (embed)
773 NOTE: depends on -dev but string found on binary
774 - root-system <unknown> (embed)
775 NOTE: depends on -dev package; not confirmed at source
776 - rgl <unknown> (embed)
777 NOTE: not sure if it is built
778 - mysql-gui-tools <unknown> (embed)
779 NOTE: not sure if it is built
780 - k3d <unfixed> (embed)
781 - extremetuxracer <unknown> (embed)
782 NOTE: not sure if it is built
783 - critterding <unknown> (embed)
784 - lightspeed <unfixed>
785 NOTE: depends on -dev but string found on binary
786
787 wv
788 - abiword <unfixed>
789
790 wv2
791 - koffice <unfixed>
792 - calligra <unfixed>
793
794 qemu
795 - kvm <removed> (embed; bug #543159)
796 - qemu-kvm <unfixed> (embed; bug #560853)
797 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
798 - xen-3 3.4.2-2 (embed; bug #560856)
799 - xen-unstable <unfixed> (embed; bug #560856)
800
801 vgabios
802 - kvm <removed> (embed; bug #489442)
803 - qemu-kvm <unfixed> (embed)
804
805 bochs
806 - kvm <removed> (embed; bug #489442)
807 - qemu-kvm <unfixed> (embed)
808
809 speex
810 - vorbis-tools <unfixed> (embed)
811 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
812 - gst-plugins-good0.10 <unfixed> (embed)
813 - xine-lib <unfixed> (embed)
814 - libfishsound <unfixed> (embed)
815 - libannodex <removed> (embed)
816 - opal 3.4.2~dfsg-2 (embed)
817 - mumble 1.2.0~beta1-1 (embed)
818 - vlc <unfixed> (embed)
819 - xmms-speex <unfixed> (embed)
820 - libsdl-sound1.2 <unfixed> (embed)
821 - sweep <unfixed> (embed)
822
823 libreadline
824 - magic <itp> (old-version)
825
826 opcode
827 - ode <unfixed> (embed)
828 NOTE: opcode is not a package in debian, it is just embedded
829 NOTE: http://www.codercorner.com/Opcode.htm
830
831 gimpact
832 - ode <unfixed> (embed)
833 NOTE: gimpact is not a package in debian, it is just embedded
834 NOTE: http://gimpact.sf.net
835
836 mochikit
837 - mahara <unfixed> (embed)
838 NOTE: they require extra patches, still unmerged upstream
839 - ntop <unfixed> (embed)
840 - coherence 0.6.2-1 (embed)
841 - paste <unfixed> (embed)
842 - turbogears <unfixed> (embed)
843 - plone3 <removed> (embed)
844 - xulrunner <unfixed> (embed)
845 - libjifty-plugin-chart-perl <unfixed> (embed)
846 - sabnzbdplus <unfixed> (embed)
847 - tgmochikit <unfixed> (embed)
848
849 prototypejs
850 - netbeans-ide 6.0.1+dfsg-2 (embed)
851 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
852 - webcit <unfixed> (embed; bug #555219)
853 - asterisk 1:1.6.2.0~rc3-1 (embed)
854 - libjson-ruby 1.1.4-1 (embed; bug #555224)
855 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
856 - horde3 <unfixed> (embed)
857 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
858 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
859 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
860 - ebug-http <unfixed> (embed; bug #555236)
861 - libaws 2.7-1 (embed; bug #555222)
862 - phpgedview <removed> (embed)
863 - poker-network 1.7.6-1 (embed; bug #555238)
864 - rails 2.1.0-6 (embed)
865 - wordpress 2.5.0-2 (embed; bug #555243)
866 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
867 TODO: search through all of the other zope packages
868 - ampache 3.4.1-2 (embed)
869 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
870 - hobix 0.5~svn20070319-4 (embed; bug #555247)
871 - zabbix 1.6.6-4 (embed; bug #555250)
872 - chora2 2.1.1+debian0-1 (embed; bug #555253)
873 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
874 - jscropperui 1.2.1-1 (embed; bug #555257)
875 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
876 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
877 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
878 - activeldap 1.2.1-1 (embed)
879 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
880 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
881 - otrs2 2.3.4-6 (embed; bug #555267)
882 - webcalendar 1.2~b1-2 (embed; bug #555269)
883 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
884 - jifty 0.90519-1 (embed; bug #555271)
885 - jquery 1.4-1 (embed; bug #555272)
886 - passenger 2.2.5debian1-1 (embed; bug #555273)
887 - plone3 <removed> (embed; bug #555275)
888 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
889 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
890 - xulrunner <unfixed> (embed)
891 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
892 - jclicmoodle <unfixed> (embed)
893 - git-cola <unfixed> (embed)
894
895 gdb
896 - insight <unfixed> (embed)
897
898 e2fsprogs
899 - ldiskfsprogs <unfixable> (fork)
900 - ia32-libs <unfixable> (embed)
901
902 quazip (not packaged in Debian)
903 - qcake <unfixed> (embed)
904 NOTE: starting with upstream version 0.6.4
905
906 exo
907 - pcmanfm <unfixed> (embed; bug #499677)
908 NOTE: slightly modified source code
909
910 xfce4-taskmanager
911 - lxtask <unfixed> (embed)
912 NOTE: old fork, maybe outdated
913
914 isync
915 - postler <unfixed> (embed; bug #628798)
916
917 java
918 - openjdk-6 <unfixed>
919 - sun-java5 <unfixed>
920 - sun-java6 <unfixed>
921
922 libphp-snoopy
923 - ampache 3.4.1-2 (embed; bug #504169)
924 - gforge 4.6.99+svn6094-2 (embed)
925 - mahara 1.0.5-2 (embed; bug #504170)
926 - pixelpost 1.7.1-5 (embed; bug #504171)
927 - mediamate 0.9.3.6-5 (embed; bug #504172)
928 - opendb <removed> (embed; bug #504173)
929 [etch] - opendb <unfixed> (embed; bug #504173)
930 - wordpress 2.5.1-9 (embed; bug #443948)
931 - moodle <unfixed> (embed; bug #507185)
932 [etch] - phpgroupware <unfixed> (embed)
933 NOTE: phpgroupware-felamimail
934 - magpierss 0.72-3 (embed; bug #431089)
935
936 jquery
937 - jsonbot <unfixed> (embed; bug #625524)
938 - zekr <unfixed> (embed)
939 - wordpress <unknown> (embed)
940 - yocto-reader <unfixed> (embed)
941 - textpattern <unfixed> (embed)
942 - genshi 0.5.1-1 (embed)
943 NOTE: compressed file under examples/ dir
944 - prewikka <unfixed> (embed)
945 - libramaze-ruby <unfixed> (embed)
946 - drupal6 <unfixed> (embed)
947 - b2evolution <unfixed> (embed)
948 - wesnoth <unfixed> (embed)
949 - gammu 1.28.95-1 (embed)
950 - trac <unfixed> (embed; bug #645339)
951
952 jquery-goodies
953 - horizon <unfixed> (embed)
954 NOTE: jquery.cookie.js, jquery.table-sorter.js, jquery-ui.min.js
955
956 tablesorter (jquery plugin, not packaged yet)
957 - wesnoth <unfixed> (embed)
958
959 kses
960 - wordpress <unfixed> (embed; bug #504242)
961 NOTE: their copy has all methods renamed to wp_<foo>
962 NOTE: kses isn't in Debian, RFP: #504240
963 - moodle <unfixed> (embed; bug #507185)
964 - egroupware <unfixed> (embed)
965
966 magpierss
967 - wordpress <unfixed> (embed; bug #504242)
968 - moodle <unfixed>
969
970 php-gettext
971 - wordpress 2.8.4-1 (embed; bug #504242)
972 - docbookwiki <unfixed> (embed)
973 - knowledgeroot 0.9.9.5-1
974 NOTE: non-free
975
976 libphp-ixr (name may change, it is the Incutio XML-RPC)
977 - wordpress <unfixed> (embed; bug #504242)
978 NOTE: libphp-ixr isn't in Debian, RFP: #504236
979 - dokuwiki <unfixed> (embed)
980 - textpattern <unfixed> (embed)
981
982 libphp-cas
983 - glpi 0.80.7-2 (embed)
984 - moodle <unfixed> (embed; bug #505984)
985
986 scriptaculous (prototype.js is among the embeds in the following)
987 - glpi <unfixed> (embed)
988 - libaws <unfixed> (embed; bug #555222)
989 - op-panel <unfixed> (embed)
990 - symfony <unfixed> (embed)
991 NOTE: maintainer says there are extra incompatible changes required
992 - pixelpost 1.7.1-6 (embed)
993 - webhelpers <unfixed> (embed)
994 - qwik <removed> (embed; bug #555241)
995 - smokeping <unfixed> (embed)
996 - turba2 <unfixed> (embed)
997 - typo3-src 4.2.3-1 (embed)
998 - request-tracker3.6 <unfixed> (embed)
999 - request-tracker3.8 <unfixed> (embed)
1000 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
1001 - wordpress 2.5.0-2 (embed)
1002 - libhtml-prototype-perl 1.48-3 (embed)
1003
1004 libmarkdown-php
1005 - moodle <unfixed> (embed; bug #507185)
1006 - pixelpost 1.7.1-6 (embed)
1007
1008 php-openid
1009 - wordpress-openid 3.3.2-1 (embed)
1010
1011 geshi
1012 - dokuwiki 0.0.20080505-3.1 (embed)
1013 - pgfouine 1.0-1.1 (embed)
1014 - websvn 2.1.0-1 (embed)
1015
1016 webcalendar
1017 - gforge 4.7~rc2-6 (embed; bug #504758)
1018
1019 libical
1020 - kdepim <unknown> (fork)
1021 NOTE: fixed at some point during 4.0
1022 - kdepimlibs 4.2.0-1 (fork)
1023 - claws-mail-extra-plugins <unfixed> (fork)
1024
1025 harfbuzz
1026 - qt4-x11 <unfixed> (embed)
1027 - pango1.0 <unfixed> (embed)
1028 - fontmatrix <unfixed> (embed)
1029
1030 libzip
1031 - php5 <unfixable> (modified-embed)
1032 - odt2txt <unfixed> (embed; bug #523808)
1033
1034 json.php (not packaged; should be replaced with php's built-in functions)
1035 - moodle <unfixed>
1036 - yui <unfixed>
1037 - gallery2 <unfixed>
1038 - dokuwiki <unfixed>
1039 - typo3-src <unfixed>
1040
1041 php-fpdf
1042 - tcpdf <itp> (fork)
1043 - moodle <unfixed>
1044 - phpwiki <unfixed>
1045 - egroupware <unfixed>
1046 - ldap-account-manager <unfixed> (fork)
1047
1048 tcpdf (itp: #495985)
1049 - moodle <unfixed>
1050 - phpmyadmin <unfixed>
1051 - collabtive <unfixed>
1052
1053 typo3
1054 - moodle <unfixed>
1055
1056 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1057 - moodle <unfixed>
1058 - gosa <unfixed>
1059
1060 php-ole (itp: #487558)
1061 - moodle <unfixed>
1062
1063 pieforms (http://www.catalyst.net.nz)
1064 - mahara <unfixed>
1065
1066 savant2 (http://phpsavant.com)
1067 - egroupware <unfixed>
1068
1069 rssparser (http://nwow.org)
1070 - egroupware <unfixed>
1071 - phpgroupware <unfixed>
1072
1073 lcms
1074 - openjdk-6 <unfixed> (fork)
1075 - gimp 2.4.0~rc2-2
1076 - ia32-libs <unfixable> (embed)
1077
1078 libphp-phplayersmenu
1079 - diogenes <unfixed>
1080 - phpldapadmin <unfixed>
1081
1082 libphp-pclzip
1083 - docvert <unfixed>
1084 - moodle <unfixed>
1085 - egroupware <unfixed>
1086
1087 libphp-simplepie
1088 - dokuwiki <unfixed>
1089 - wordpress <unfixed>
1090
1091 libphp-jpgraph
1092 - egroupware <unfixed>
1093
1094 php-simpletest
1095 - moodle <unfixed>
1096
1097 libpng
1098 - doxygen 1.5.6-2 (embed)
1099 NOTE: Might be fixed earlier. Lenny version recorded.
1100 - gdal 1.5.2-3 (embed)
1101 NOTE: Might be fixed earlier. Lenny version recorded.
1102 - iceweasel <not-affected> (uses xulrunner)
1103 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1104 - iceape 1.0.13~pre080614i-0etch1 (embed)
1105 - libfltk1.1 1.1.9-6 (embed)
1106 NOTE: Might be fixed earlier. Lenny version recorded.
1107 - libtk-img <unfixed> (embed)
1108 - htmldoc 1.8.27-3 (embed)
1109 NOTE: Might be fixed earlier. Lenny version recorded.
1110 - xulrunner 1.9.0.13-1 (embed)
1111 [lenny] - xulrunner 1.9.0.11-0lenny1
1112 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1113 - gamera 3.2.3-1 (embed)
1114 - freeimage <unfixed> (embed)
1115 - syslinux-common <unfixable> (embed)
1116 - tuxonice-userui <unfixed> (static)
1117 - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1118 NOTE: Might be fixed earlier. Lenny version recorded.
1119 - vice 1.22.dfsg1-0.1 (embed)
1120 NOTE: Might be fixed earlier. Lenny version recorded.
1121 - visualboyadvance 1.8.0-4 (embed)
1122 NOTE: Might be fixed earlier. Lenny version recorded.
1123 - ia32-libs <unfixable> (embed)
1124
1125 irssi
1126 - silc-client <unfixed> (embed)
1127 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1128
1129 extc
1130 - mtasc <unfixed> (embed)
1131 - haxe <unfixed> (embed)
1132
1133 swflib
1134 - mtasc <unfixed> (embed)
1135 - haxe <unfixed> (embed)
1136
1137 libitext-java
1138 - bouncycastle 2.1.4-1 (embed)
1139
1140 python-ply
1141 - pyke <unfixed> (embed; bug #555363)
1142 - pywbem 0.7.0-4 (embed; bug #555364)
1143 - sepolgen <unfixed> (embed; bug #555365)
1144 - zope-textindexng3 <unknown> (embed)
1145 - iceweasel <not-affected> (uses xulrunner)
1146 - xulrunner <unknown> (embed)
1147 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1148
1149 libdumbnet (libdnet upstream)
1150 - nmap <unfixed> (fork)
1151
1152 gcc-4.4
1153 - gcc-mingw32 <unfixed> (embed)
1154
1155 camlimages
1156 - advi <unfixed> (static; bug #550441)
1157
1158 memcached
1159 - memcachedb <unfixed> (embed)
1160
1161 yajl
1162 - argyll <unfixed> (embed; bug #544223)
1163 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1164
1165 nusoap
1166 - gforge 4.8.2-1 (embed)
1167 - ampache <unfixed> (embed)
1168 - poker-network <unfixed> (embed)
1169 - moodle <unfixed> (embed)
1170 NOTE: code is not used when running under php5 and soap is enabled
1171 - phpwiki <unfixed> (embed)
1172 - gallery2 <unfixed> (embed)
1173 - typo3-src <unfixed> (embed)
1174 - phpgacl 3.3.7-7 (embed)
1175 - mantis 1.1.8+dfsg-1 (embed)
1176
1177 libept
1178 - adept <unfixed> (embed; bug #540649)
1179
1180 libvorbis
1181 - iceweasel <not-affected> (uses xulrunner)
1182 - xulrunner <unfixed> (embed; bug #540959)
1183 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1184 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1185 - iceape <unfixed> (embed)
1186 [etch] - iceape <not-affected> (introduced in 2.0)
1187 [lenny] - iceape <not-affected> (introduced in 2.0)
1188 - ia32-libs <unfixable> (embed)
1189 - libvorbisidec <unfixed> (modified-embed)
1190
1191 cairo
1192 - iceweasel <not-affected> (uses xulrunner)
1193 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1194
1195 liboggz
1196 - iceweasel <not-affected> (uses xulrunner)
1197 - xulrunner <unfixed> (embed; bug #540959)
1198 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1199 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1200 - iceape <unfixed> (embed)
1201 [etch] - iceape <not-affected> (introduced in 2.0)
1202 [lenny] - iceape <not-affected> (introduced in 2.0)
1203
1204 liboggplay
1205 - iceweasel <not-affected> (uses xulrunner)
1206 - xulrunner <unfixed> (embed; bug #540959)
1207 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1208 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1209 - iceape <unfixed> (embed)
1210 [etch] - iceape <not-affected> (introduced in 2.0)
1211 [lenny] - iceape <not-affected> (introduced in 2.0)
1212
1213 php-net-dnsbl
1214 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1215
1216 php-onyx-rss
1217 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1218
1219 php-text-wiki
1220 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1221
1222 php-xml-rpc
1223 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1224
1225 polarssl (does not have a shared library)
1226 - pdkim <itp> (embed; bug #543150)
1227 - xyssl <unfixed> (old-version)
1228
1229 pidgin (libpurple)
1230 - gaim <removed> (old-version)
1231 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1232 - wengophone <unfixed> (embed; bug #601425)
1233
1234 icu
1235 - webkit 1.0.1-1 (embed; bug #547214)
1236 - texlive-bin 2013.20130522.30620-1 (fork)
1237 NOTE: texlive upstream working with icu upstream to merge their changes
1238 - chromium-browser 5.0.375.29~r46008-3
1239
1240 cyrus-imapd-2.2
1241 - kolab-cyrus-imapd <unfixed> (fork)
1242 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1243
1244 python-cxx-dev
1245 - freecad 0.9.2646.3-1 (embed; bug #547936)
1246
1247 zipios++
1248 - freecad 0.9.2646.3-1 (embed; bug #547941)
1249 - enigma 0.92.3-3 (embed)
1250 NOTE: likely fixed earlier, marking etch's version as fixed
1251
1252 linux-2.6
1253 - kvm <removed> (embed; bug #549973) [./kernel/*]
1254 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1255 - kernel-source-2.6.8 <removed> (old-version)
1256 - kernel-source-2.4.27 <removed> (old-version)
1257 - kernel-source-2.4.24 <removed> (old-version)
1258 - kernel-source-2.2.25 <removed> (old-version)
1259 - kernel-source-2.2.20 <removed> (old-version)
1260
1261 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1262 - kvm <removed> (embed) [./libfdt/*]
1263 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1264
1265 qweb (not packaged)
1266 - ajaxterm <unfixed>
1267
1268 opensaml2
1269 - opensaml <removed> (old-version)
1270
1271 shibboleth-sp2
1272 - shibboleth-sp <removed> (old-version)
1273
1274 tuxonice-userui
1275 - suspend2-userui <removed> (old-version)
1276
1277 expat
1278 - w3c-libwww <removed> (embed; bug #551941)
1279 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1280 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1281 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1282 - python2.4 <unfixable> (embed; bug #553403)
1283 - python2.6 2.6.6-4 (embed)
1284 - python2.7 2.7-6 (embed)
1285 - mcabber 0.10.0-1 (low; bug #601053)
1286 - python-4suite <unfixed> (embed; bug #516935)
1287 - wxwindows2.4 <removed> (embed)
1288 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1289 - wxwidgets2.8 2.8.10.1-2 (embed)
1290 - albert <unfixed> (embed; bug #600974)
1291 - celementtree 1.0.5-8 (embed)
1292 NOTE: Maybe that was fixed even earlier
1293 - centerim <unfixed> (embed; bug #559783)
1294 - audacity 1.3.2-1 (embed)
1295 - matanza <unfixed> (embed)
1296 - tdom 0.8.3~20080525-1 (embed)
1297 - udunits 2.1.8-4 (embed)
1298 - apr-util 1.2 (embed)
1299 - ayttm <unfxed> (embed; bug #561006)
1300 - cableswig <unfixed> (embed)
1301 - cadaver <unfixed> (embed)
1302 - cmake 2.6.0-6 (embed)
1303 - coin3 <unfixed> (embed)
1304 - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1305 NOTE: Might be fixed earlier. Lenny version recorded.
1306 - dasher 4.7.3-1 (embed)
1307 NOTE: Might be fixed earlier. Lenny version recorded.
1308 - emboss 6.3.1-1 (embed)
1309 - gdcm 2.0.14-2 (embed)
1310 - ghostscript 8.71~dfsg-2 (embed)
1311 - grmonitor <removed> (embed)
1312 - iceape <unfixed> (embed)
1313 - insighttoolkit 3.16.0-1 (embed)
1314 NOTE: insighttoolkit might've been fixed earlier
1315 - jabber 1.4.3-3.4 (embed)
1316 NOTE: Might be fixed earlier. Lenny version recorded.
1317 - libparagui1.1 1.0.2-1 (embed)
1318 - libspiff1 0.8.3-1 (embed)
1319 NOTE: Might be fixed earlier. Lenny version recorded.
1320 - paraview 3.6.2-1 (embed)
1321 - poco 1.3.6p1-1 (embed)
1322 - scorched3d 41.3dfsg-1+b1 (embed)
1323 NOTE: Might be fixed earlier. Lenny version recorded.
1324 - simgear <unfixed> (embed)
1325 - sitecopy 1:0.16.0-1
1326 - smart <unfixed> (embed)
1327 NOTE: smart embeds celementree, and it includes expat
1328 - swish-e <not-affected> (Linked against libxml, which is used instead)
1329 - tla 1.3.5+dfsg-15 (embed)
1330 - vtk 4.1.20030227-1 (embed)
1331 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1332 - xmlrpc-c <unfixed> (embed)
1333 - iceweasel <unfixed> (embed)
1334 - kompozer <unfixed> (embed)
1335 - vxl 1.13.0-2 (embed)
1336 - xulrunner <unfixed> (embed)
1337 - xmame 0.106-2.1 (embed)
1338 NOTE: Might be fixed earlier. Lenny version recorded.
1339 - apache2 2.2 (embed)
1340 - texlive-bin <not-affected> (Embedded code not compiled in)
1341 - vnc4 <unfixed> (embed)
1342 - xotcl 1.6.6-1 (embed)
1343 - chromium-browser 5.0.375.29~r46008-3
1344 - ia32-libs <unfixable> (embed)
1345
1346 xerces-c
1347 - xerces-c2 <unfixed> (old-version)
1348 - xerces27 <removed> (old-version)
1349
1350 md5 (RSA's version; not the gnu version provided by coreutils)
1351 - w3c-libwww <removed> (embed; bug #551942)
1352 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1353
1354 libparagui1.1
1355 - asc <unfixable> (fork)
1356
1357 enet
1358 - sauerbraten <unfixed> (embed; #497194)
1359
1360 eglibc
1361 - glibc <removed> (old-version)
1362 - mksh <unfixable> (static)
1363 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1364
1365 galib
1366 - gamera 3.2.3-1 (embed)
1367
1368 configobj
1369 - bzr <unfixed> (embed; bug #555336)
1370 - elisa <unfixed> (embed; bug #555337)
1371 - gaupol <unfixed> (embed; bug #555338)
1372 - ipython <unfixed> (embed; bug #555339)
1373 - pida <unfixed> (embed; bug #555340)
1374 - psychopy <unfixed> (embed; bug #555341)
1375 - rest2web <unfixed> (embed; bug #555342)
1376 - auth2db <unknown> (embed)
1377 - dynagen <unknown> (embed)
1378 - iceweasel <unknown> (embed)
1379 - sabnzbdplus <unknown> (embed)
1380 - xulrunner <unknown> (embed)
1381 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1382
1383 python-clientform
1384 - bibus <unfixed> (embed; bug #555332)
1385 - zope2.10 <unfixed> (embed; bug #555333)
1386 - zope2.11 <removed> (embed; bug #555334)
1387 - python-mechanize <unknown> (embed)
1388 - twill <unknown> (embed)
1389
1390 python-mechanize
1391 - zope2.10 <unfixed> (embed; bug #555337)
1392 - zope2.11 <removed> (embed; bug #555338)
1393 - twill <unknown> (embed; bug #555339)
1394
1395 pexpect
1396 - duplicity 0.6.06-1 (embed; bug #555361)
1397 - hplip <unfixed> (embed; bug #555362)
1398 - smart <unfixed> (embed; bug #555363)
1399
1400 pyparsing
1401 - bauble <unfixed> (embed; bug #555366)
1402 - boa-constructor 0.6.1-8 (embed; bug #555367)
1403 - calibre <unfixed> (embed; bug #555368)
1404 - matplotlib <unfixed> (embed; bug #531024)
1405 - zhpy 1.7.3.1-1 (embed; bug #555370)
1406 - polybori <unknown> (embed)
1407 - python-whoosh <unknown> (embed)
1408 - twill <unknown> (embed)
1409 - zope-textindexng3 <unknown> (embed)
1410
1411 python-pysqlite2
1412 - python2.4 <unfixed> (embed; bug #553403)
1413 - python2.5 <unfixed> (embed; bug #553403)
1414
1415 celementtree
1416 - python2.5 <unfixed> (embed)
1417 - smart <unfixed> (embed)
1418
1419 elementtree
1420 - python2.5 <unfixed> (embed)
1421 - python2.6 <unfixed> (embed)
1422 - bzr <unfixed> (embed; bug #555343)
1423 - gedit 2.28.2-1 (embed; bug #555344)
1424 - smart <unfixed> (embed)
1425 - solfege <unfixed> (embed; bug #555345)
1426 - w3af <unfixed> (embed; bug #555346)
1427 - python-qt4 <unknown> (embed)
1428 - sphinx <unknown> (embed)
1429 - python-nltk <itp> (embed)
1430
1431 python2.5
1432 - python2.4 <unfixed> (old-version)
1433 - jython <unfixed> (embed)
1434 NOTE: embeds many stdlib modules
1435 - python-django <unfixed> (embed; bug #555419)
1436 NOTE: embeds stdlib modules: doctest, decimal
1437 - gamera 3.2.3-1 (embed)
1438 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1439 - boa-constructor <unfixed> (embed; bug #555426)
1440 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1441 - nicotine <unfixed> (embed; bug #555427)
1442 NOTE: embeds stdlib modules: ConfigParser
1443 - museek+ <unfixed> (embed; bug #555428)
1444 NOTE: embeds stdlib modules: ConfigParser
1445 - vegastrike-data <removed> (embed)
1446 NOTE: embeds many stdlib modules
1447 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1448 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1449 - config-manager <unfixed> (embed; bug #555423)
1450 NOTE: embeds stdlib modules: optparse
1451 - jhbuild 2.28.0-1 (embed; bug #555421)
1452 NOTE: embeds stdlib modules: optparse, subprocess
1453 - smart <unfixed> (embed; bug #555432)
1454 NOTE: embeds stdlib modules: optparse
1455 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1456 NOTE: embeds stdlib modules: doctest
1457 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1458 NOTE: embeds stdlib modules: doctest
1459 - distribute <unfixed> (embed)
1460 NOTE: embeds stdlib modules: doctest
1461 - python-setuptools <unfixed> (embed; bug #555435)
1462 NOTE: embeds stdlib modules: doctest
1463 - zope.testing <unfixed> (embed; bug #555436)
1464 NOTE: embeds stdlib modules: doctest
1465 - translate-toolkit <unfixed> (embed; bug #555422)
1466 NOTE: embeds stdlib modules: textwrap, contextlib
1467 - libtpclient-py <unfixed> (embed; bug #555424)
1468 NOTE: embeds stdlib modules: subprocess
1469 - grass <unfixed> (embed; bug #555425)
1470 NOTE: embeds stdlib modules: subprocess
1471 - coherence <unfixed> (embed; bug #555429)
1472 NOTE: embeds stdlib modules: uuid
1473 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1474 NOTE: embeds stdlib modules: uuid
1475 - setroubleshoot <removed> (embed; bug #555431)
1476 NOTE: embeds stdlib modules: uuid
1477 - linkchecker <unfixed> (embed; bug #555414)
1478 NOTE: embeds msgfmt.py script
1479 - imdbpy <unfixed> (embed)
1480 NOTE: embeds msgfmt.py script
1481 - kiwi <unfixed> (embed)
1482 NOTE: embeds msgfmt.py script
1483 - moin <unfixed> (embed)
1484 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1485 - plone3 <removed> (embed)
1486 NOTE: embeds msgfmt.py script
1487 - roundup <unfixed> (embed)
1488 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1489 - rednotebook <unfixed> (embed; bug #555415)
1490 NOTE: embeds msgfmt.py script
1491 - turbogears <unfixed> (embed)
1492 NOTE: embeds msgfmt.py script
1493 - elisa <unfixed> (embed)
1494 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1495 - calibre <unfixed> (embed)
1496 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1497 - mailman 1:2.1.13-1 (embed; #555416)
1498 NOTE: embeds msgfmt.py script
1499 - python-docutils <unknown> (embed)
1500 NOTE: embeds stdlib modules: optparse, textwrap
1501 - python-imaging <unknown> (embed)
1502 NOTE: embeds stdlib modules: doctest
1503 - python-mechanize <unknown> (embed)
1504 NOTE: embeds stdlib modules: doctest
1505 - twill <unknown> (embed)
1506 NOTE: embeds stdlib modules: subprocess
1507 - zeroc-ice <unknown> (embed)
1508 NOTE: embeds stdlib modules: subprocess
1509 - wxwidgets2.8 <unknown> (embed)
1510 NOTE: embeds stdlib modules: subprocess
1511 - cycle <unknown> (embed)
1512 NOTE: embeds msgfmt.py script
1513 - deluge <unknown> (embed)
1514 NOTE: embeds msgfmt.py script
1515 - opendict <unknown> (embed)
1516 NOTE: embeds msgfmt.py script
1517 - openerp-client <unknown> (embed)
1518 NOTE: embeds msgfmt.py script
1519 - rapidsvn <unknown> (embed)
1520 NOTE: embeds msgfmt.py script
1521 - wammu <unknown> (embed)
1522 NOTE: embeds msgfmt.py script
1523 - gaphor <unknown> (embed)
1524 NOTE: embeds msgfmt.py script
1525 - pida <unknown> (embed)
1526 NOTE: embeds msgfmt.py script
1527 - python-formencode <unknown> (embed)
1528 NOTE: embeds msgfmt.py script
1529 - duplicity <unfixed> (embed)
1530 NOTE: embeds stdlib module: urlparse, tarfile
1531 - pygopherd <unfixed> (embed)
1532 NOTE: embeds stdlib module: zipfile
1533
1534 argparse
1535 - twill <unfixed> (embed; bug #555347)
1536 - ipython <unfixed> (embed; bug #555348)
1537
1538 coherence
1539 - elisa <unfixed> (embed; bug #555335)
1540
1541 simpletal
1542 - plastex <unfixed> (embed; bug #555371)
1543
1544 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1545 - postr <unfixed> (embed)
1546 - elisa <unfixed> (embed)
1547
1548 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1549 - apertium-tolk <unfixed> (embed)
1550 - ipython <unfixed> (embed)
1551 - virtaal <unfixed> (embed)
1552
1553 distribute
1554 - setuptools <removed> (old-version)
1555
1556 rails
1557 - jruby1.2 <removed> (embed) [./bench/rails/*]
1558 NOTE: jruby is in non-free, it probably includes rails too
1559 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1560 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1561 - thin <unfixed> (embed) [./spec/rails_app/*]
1562 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1563 NOTE: be dangerous if developers are naively basing their code off of the examples
1564 NOTE: prototype.js is among the example files
1565
1566 lucene2 (prototype.js is among the embeds in the following)
1567 - lucene <unfixed> (old-version)
1568 - pylucene <unfixed> (embed)
1569 - libpdfbox-java <unfixed> (embed)
1570 - libfontbox-java <unfixed> (embed)
1571 - libjempbox-java <unfixed> (embed)
1572 - solr <unfixed> (embed)
1573
1574 unicode-data
1575 - syslinux <unfixed> (embed)
1576 - camomile <unfixed> (embed)
1577 - fribidi <unfixed> (embed)
1578 - m17n-db <unfixed> (embed)
1579 - sbcl <unfixed> (embed)
1580 - heimdal <unfixed> (embed)
1581 - icu <unfixed> (embed)
1582 - icu4j <unfixed> (embed)
1583 - krb5 <unfixed> (embed)
1584 - moodle <unfixed> (embed)
1585 - openldap <unfixed> (embed)
1586 - pike7.6 <unfixed> (embed)
1587 - samba <unfixed> (embed)
1588 - samba4 <unfixed> (embed)
1589 - cmucl <unfixed> (embed)
1590 - typo3-src <unfixed> (embed)
1591 - mauve <unfixed> (embed)
1592 - texlive-bin <unfixed> (embed)
1593 - ypsilon <unfixed> (embed)
1594 - jeuclid <unfixed> (embed)
1595 - charmap.app <unfixed> (embed)
1596 - clisp <unfixed> (embed)
1597 - gnulib <unfixed> (embed)
1598 - opensrs-client <unfixed> (embed)
1599 - saxonb <unfixed> (embed)
1600 - rails <unfixed> (embed)
1601
1602 feedparser
1603 - rawdog <unfixed> (embed; bug #383422)
1604 - miro <unfixed> (embed; bug #555351)
1605 - calibre <unfixed> (embed; bug #555352)
1606 - freevo <unfixed> (embed; bug #555353)
1607 - pida <unfixed> (embed; bug #555354)
1608 - planet-venus <unfixed> (embed; bug #555355)
1609 - plone3 <removed> (embed; bug #555356)
1610 - exaile 0.2.14+debian-1 (embed)
1611 - screenlets 0.1.2-3 (embed)
1612 NOTE: included twice
1613
1614 agg:
1615 - matplotlib <unfixed> (embed: bug #377271)
1616 - contextfree <unfixed> (embed)
1617 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1618 - exactimage <unfixed> (embed)
1619 - python-enable <unfixed> (embed)
1620 - mapnik 0.5.1-3 (embed)
1621 NOTE: links statically to agg, but shared library is not available (bug #377271)
1622
1623 vtk
1624 - paraview <unfixable> (embed; bug #495426)
1625 - libmesh <unfixed>
1626 NOTE: embeds exodus; not sure if there's a version external to vtk
1627
1628 txt2tags
1629 - rednotebook <unfixed> (embed)
1630
1631 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1632 - gajim <unfixed> (embed)
1633 - emesene <unfixed> (embed)
1634 - convirt <unfixed> (embed)
1635 - pida <unfixed> (embed)
1636 - rednotebook <unfixed> (embed)
1637
1638 horde3 (prototype.js is among the embeds in the following)
1639 - mnemo2 <unfixed> (embed)
1640 - nag2 <unfixed> (embed)
1641 - wordpress <unfixed> (embed)
1642 NOTE: Text_Diff (wp-includes/Text/Diff*)
1643
1644 cimg
1645 - gmic <unfixed> (embed)
1646
1647 mootools
1648 - kdenetwork <unfixed> (embed)
1649 - gallery <unfixed> (embed)
1650 - jspwiki <unfixed> (embed)
1651 - vdr-plugin-live <unfixed> (embed)
1652 - perl-doc-html <unfixed> (embed)
1653
1654 openldap
1655 - openldap2.3 <removed> (old-version)
1656 - ia32-libs <unfixable> (embed)
1657
1658 grub2
1659 - grub <unfixed> (old-version)
1660
1661 gnupginterface
1662 - duplicity <unfixed> (embed)
1663
1664 python-dateutil
1665 - awn-extras-applets <unfixed> (embed)
1666 - matplotlib <unknown> (embed)
1667
1668 cups
1669 - cupsys <removed> (old-version)
1670 - ia32-libs <unfixable> (embed)
1671
1672 yui
1673 - bcfg2 <not-affected> (present in source but not included in any binary files)
1674 - serendipity 1.5.3-1 (embed; bug #557746)
1675 - moodle 1.8.2.dfsg-5 (embed)
1676 - jifty 0.91117-1 (embed; bug #557748)
1677 - webgui 7.7.26-1 (embed)
1678 - loggerhead 1.17-1 (embed)
1679 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1680
1681 quake3 (vanilla source not packaged in debian)
1682 - openarena <unfixable> (fork)
1683
1684 quake2 (vanilla source not packaged in debian)
1685 - alien-arena <unfixable> (fork)
1686 - warsow <unfixable> (fork)
1687
1688 quake (vanilla source not packaged in debian)
1689 - darkplaces <unfixable> (fork)
1690 - quakespasm <unfixable> (fork)
1691 - nexuiz 2.5.2+dp-1 (old-version)
1692 NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1693
1694 libtheora
1695 - iceweasel <not-affected> (uses xulrunner)
1696 - xulrunner <unfixed> (embed; bug #540959)
1697 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1698 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1699 - iceape <unfixed> (embed; bug #559276)
1700 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1701 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1702
1703 dtoa
1704 - bfilter <unfixed> (embed)
1705 - cacao <removed> (embed)
1706 - cdrdao <unfixed> (embed)
1707 - classpath <unfixed> (embed)
1708 - freej <unfixed> (embed)
1709 - iceape <unfixed> (embed)
1710 - iceweasel <unfixed> (embed)
1711 - jscoverage <unfixed> (embed)
1712 - kde4libs <unfixed> (embed)
1713 - kdelibs <unfixed> (embed)
1714 - kompozer <unfixed> (embed)
1715 - libv8 <unfixed> (embed)
1716 - mono <unfixed> (embed)
1717 - newlib <unfixed> (embed)
1718 - nspr <unfixed> (embed)
1719 - php5 <unfixed> (embed)
1720 - polyml <unfixed> (embed)
1721 - qt4-x11 <unfixed> (embed)
1722 - rhino <unfixed> (embed)
1723 NOTE: code translated to Java
1724 - ruby1.8 <unfixed> (embed)
1725 - ruby1.9 <unfixed> (embed)
1726 - ruby1.9.1 <unfixed> (embed)
1727 - sdd <unfixed> (embed)
1728 - sfind <unfixed> (embed)
1729 - star <unfixed> (embed)
1730 - tinymux <unfixed> (embed)
1731 - virtualbox-ose <unfixed> (embed)
1732 - webkit <unfixed> (embed)
1733 - xulrunner <unfixed> (embed)
1734
1735 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1736 - firegpg <unfixed> (embed)
1737 - enigmail <unfixed> (embed)
1738
1739 ptmalloc (not packaged in Debian)
1740 - crystalspace <unfixed> (embed)
1741 - qt4-x11 <unfixed> (embed)
1742
1743 svgalib
1744 - usplash <unfixed> (embed)
1745 - ia32-libs <unfixable> (embed)
1746
1747 bogl
1748 - usplash <unfixed> (embed)
1749
1750 taglist
1751 - usplash <unfixed> (embed)
1752
1753 portaudio
1754 - audacity <unfixed> (embed; bug #323711)
1755
1756 nyquist
1757 - audacity <unfixed> (embed)
1758 NOTE: embeds a forked nyquist with support for a shared library
1759
1760 vamp-plugin-sdk
1761 - audacity <unfixed> (embed)
1762
1763 wordpress
1764 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1765 - wordpress-mu <removed> (fork)
1766
1767 php5
1768 - php4 <removed> (old-version)
1769
1770 classpath
1771 - libgnucrypto-java <removed> (embed; bug #559788)
1772
1773 libtool
1774 - apr <unfixed> (static; bug #489625)
1775 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1776 - arts <unfixed> (embed)
1777 - bochs 2.4.2-1 (embed; bug #560884)
1778 - camserv <unfixed> (embed)
1779 - collectd 4.8.2-1 (embed)
1780 - courier-authlib 0.58-4 (embed)
1781 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1782 - cvsnt 2.5.04.3236-1.2 (embed)
1783 - dico <not-affected> (Uses the system copy of ltdl)
1784 - freeradius 0.1+20010527-1 (embed)
1785 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1786 - ggobi 2.1.9~20091212-1 (embed)
1787 - glame 2.0.1-4 (embed)
1788 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1789 - gnash 0.8.7-2 (embed)
1790 - gnu-smalltalk <unfixed> (embed; bug #566777)
1791 - google-gadgets 0.10.5-0.3 (embed)
1792 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1793 - graphicsmagick 1.3.5-6 (embed)
1794 - graphviz 2.8-3 (embed)
1795 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1796 - guile-1.6 1.6.8-7 (embed)
1797 - hamlib 1.2.11-1 (embed)
1798 - hercules 3.06-1.2 (embed)
1799 - jags 1.0.4-3 (embed; bug #560864)
1800 - kdelibs <unfixed> (embed)
1801 - libannodex <removed> (embed)
1802 - libextractor 0.5.23+dfsg-4 (embed)
1803 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1804 - libtunepimp 0.5.3-7.3 (embed)
1805 - mp4h 1.3.1-4.1 (Contains source code, but is compiled with --without-included-ltdl)
1806 - naim <removed> (embed)
1807 - parser-mysql <unfixed> (embed)
1808 - pinball 0.3.1-11 (embed)
1809 - redland <unfixed> (embed)
1810 - siproxd 1:0.8.1-2 (embed; bug #657070)
1811 - ski <unfixed> (embed)
1812 - synfig 0.62.00-1 (embed)
1813 - unixodbc 2.2.4-5 (embed)
1814 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1815 - clamav 0.95+dfsg-1 (embed)
1816 - imagemagick 6:6.2.3.1-1 (embed)
1817 - hypre 2.4.0b-5 (embed)
1818 - lam <unfixed> (embed)
1819 - openmpi <unfixable> (embed; bug #559386)
1820 - parser <unfixed> (embed)
1821 - pdsh 2.18-5 (embed; bug #560892)
1822 - sbnc 1.2-8 (embed)
1823 - sdcc <unfixed> (embed)
1824 - wml 2.0.11ds2-1 (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1825 - proftpd-dfsg <unfixed> (embed; bug #561748)
1826 - babel 1.4.0.dfsg-5 (embed)
1827 - libprelude 0.9.14-2 (embed)
1828 - heartbeat 2.1.4-7 (embed)
1829 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1830 NOTE: might've been fixed earlier
1831 - gcc-* <unknown> (embed)
1832 - ia32-libs <unfixable> (embed)
1833
1834 ocamlgsl
1835 - orpie 1.5.1-7.1 (embed; bug #550058)
1836
1837 xdotool
1838 - keynav <unfixed> (embed; bug #560103)
1839
1840 bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1841 - supertuxkart <unfixed> (embed)
1842 - blender <unfixed> (embed)
1843 - critterding <unfixed> (embed)
1844 NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1845
1846 ghostscript
1847 - gs-gpl <removed> (old-version)
1848
1849 icedove
1850 - thunderbird <removed> (old-version)
1851
1852 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1853 - jquery <unfixed> (embed)
1854
1855 sed
1856 - ssed <unfixed> (fork)
1857
1858 phpatomlib (http://code.google.com/p/phpatomlib)
1859 - wordpress <unfixed> (embed)
1860
1861 Services_JSON (http://pear.php.net/package/Services_JSON)
1862 - wordpress <unfixed> (embed)
1863
1864 phpass (http://www.openwall.com/phpass/)
1865 - gallery2 <unfixed> (embed)
1866 - wordpress <unfixed> (embed)
1867 - typo3-src <unfixed> (modified-embed)
1868 NOTE: file refers to drupal, maybe there's a copy somewhere there
1869 NOTE: a copyright owner search didn't match anything
1870 - libauthen-passphrase-perl <unfixable> (fork)
1871 NOTE: perl implementation of phpass
1872 - phpbb3 <unfixed>
1873 NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1874
1875 squirrelmail
1876 - wordpress <unfixed> (embed)
1877 NOTE: class-pop3.php
1878
1879 ezSQL (http://www.woyano.com/jv/ezsql)
1880 - wordpress <unfixable> (fork)
1881 NOTE: wp-db.php
1882
1883 Diff.php (Clay Loveless' version/killersoft.com)
1884 - php-versioncontrol-svn <unfixed>
1885
1886 libm (provided by libc)
1887 - spring <unfixed> (embed)
1888 NOTE: embedded by embedded copy of streflop
1889 - megaglest <unfixed> (embed)
1890 NOTE: embedded by embedded copy of streflop
1891 - aide <unfixed> (static)
1892 - busybox <unfixed> (static)
1893 - mindi-busybox <unfixed> (static)
1894 - qemu <unfixed> (static)
1895 NOTE: qemu-user-static
1896 - tuxonice-userui <unfixed> (static)
1897 - zsh <unfixed> (static)
1898 NOTE: zsh-static
1899 - tripwire <unfixed>
1900
1901 streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1902 - spring <unfixed> (modified-embed)
1903 NOTE: old, modified version of streflop
1904 - megaglest <unfixed> (modified-embed)
1905 NOTE: megaglest uses the same streflop code as spring
1906
1907 minizip
1908 - spring <unfixed> (embed)
1909
1910 oscpack
1911 - spring <unfixed> (embed)
1912
1913 hpiutil2
1914 - spring <unfixed> (embed)
1915
1916 p7zip
1917 - spring <unfixed> (embed)
1918
1919 pythonqt (doesn't seem to be python-qtN, unknown source)
1920 - fontmatrix <unfixed> (embed)
1921 - elmerfem <unfixed> (embed)
1922
1923 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1924 - docvert <unfixed> (embed)
1925 - jifty <unfixed> (embed)
1926 - kdenetwork <unfixed> (embed)
1927 - mediatomb <unfixed> (embed)
1928 - plastex <unfixed> (embed)
1929 - plone3 <removed> (embed)
1930 - python-chaco <unfixed> (embed)
1931 - python-docutils <unfixed> (embed)
1932 - s5 <unfixed> (embed)
1933 - zope2.10 <unfixed> (embed)
1934 - zope2.11 <removed> (embed)
1935 - cython <not-affcted> (embed)
1936 NOTE: part of documentation, which is not installed into the binary package
1937
1938 python-docutils
1939 - zope2.10 <unfixed> (embed)
1940 - zope2.11 <removed> (embed)
1941
1942 tesseract
1943 - ocropus <unfixed> (static)
1944
1945 antlr
1946 - kdevelop <unfixed> (embed)
1947
1948 libxerces2
1949 - openjdk-6 <unfixed> (embed)
1950
1951 kfreebsd-8
1952 - kfreebsd-7 <unfixed> (old-version)
1953 - kfreebsd-6 <removed> (old-version)
1954
1955 ruby1.9.1
1956 - ruby1.9 <unfixed> (old-version)
1957 - ruby1.8 <unfixed> (old-version)
1958
1959 maildrop
1960 - courier <unfixed> (embed) [./maildrop]
1961
1962 glee
1963 - warzone2100 <not-affected> (embed)
1964 - love 0.8.0-2 (embed; bug #690492)
1965
1966 phing
1967 - symfony <unfixed> (embed)
1968
1969 pake
1970 - symfony <unfixed> (embed)
1971
1972 propel
1973 - symfony <unfixed> (embed)
1974
1975 creole
1976 - symfony <unfixed> (embed)
1977
1978 hfsutils
1979 - cdrkit <unfixed> (embed; bug #570187)
1980 NOTE: embeds hfsutils code in genisoimage
1981
1982 cdrkit
1983 - grub2 <unfixed> (embed; bug #570156)
1984 NOTE: genisoimage imported into grub-mkisofs
1985
1986 kdebase-workspace
1987 - kdebase <unfixed> (old-version)
1988
1989 file
1990 - php5 <unfixable> (modified-embed)
1991 [lenny] - php5 <not-affected>
1992
1993 cdb
1994 - php5 <unfixed> (embed)
1995
1996 libmbfl (itp: #570708)
1997 - php5 <unfixed> (embed)
1998 NOTE: PHP is actually the current upstream, ITP is of that code
1999
2000 libonig
2001 - php5 5.3.2-1 (embed)
2002
2003 xmlrpc-epi
2004 - php5 <unfixed> (embed)
2005
2006 swt-gtk
2007 - eclipse <unfixed> (embed; bug #538808)
2008
2009 txt2html
2010 - wml 2.0.11ds2-1 (embed)
2011
2012 ca-certificates
2013 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
2014
2015 openexr
2016 - freeimage <unfixed> (embed)
2017
2018 libmng
2019 - freeimage <unfixed> (embed)
2020
2021 openjpeg
2022 - freeimage <unfixed> (embed)
2023
2024 libjpeg6b
2025 - freeimage <unfixed> (embed)
2026 - ia32-libs <unfixable> (embed)
2027
2028 libjpeg (don't know what exact version)
2029 - dcmtk <unfixed>
2030 - gdcm <unfixed>
2031 - insighttoolkit <unfixed>
2032 - openarena 0.8.5-5+exp1 (bug #495966)
2033 - outguess <unfixed>
2034 - squeak-vm <unfixed> (embed)
2035 - tremulous <unfixed>
2036 - tuxonice-userui <unfixed> (static)
2037 - fpc <unfixed> (static)
2038 - lazarus <unfixed> (static)
2039 NOTE: inherited from fpc, see #472304
2040 - mseide-msegui <unfixed> (static)
2041 NOTE: inherited from fpc, see #472304
2042 - easymp3gain <unfixed> (static)
2043 NOTE: inherited from fpc, see #472304
2044 - winff <unfixed> (static)
2045 NOTE: inherited from fpc, see #472304
2046 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2047
2048
2049 lxr
2050 - lxr-cvs <unfixed> (embed)
2051
2052 libfile-copy-recursive-perl
2053 - r-base <unfixed> (embed; bug #577427)
2054 - r-base-core-ra <unfixed> (embed; bug #577429)
2055
2056 delimmatch
2057 - r-base <unfixed> (embed; bug #577433)
2058 - r-base-core-ra <unfixed> (embed; bug #577434)
2059
2060 libsmf (ITP: #572558)
2061 - denemo <unfixed> (embed)
2062 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2063
2064 libselinux
2065 - dpkg 1.15.6 (static)
2066 - ia32-libs <unfixable> (embed)
2067
2068 xinha (ITP: #479708)
2069 - horde3 <unfixed>
2070 - serendipity <unfixed>
2071 - openacs <unfixed>
2072 - dotlrn <unfixed>
2073
2074 dvipng
2075 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2076
2077 dvipdfmx
2078 - texlive-bin <unfixed> (embed)
2079 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2080
2081 lcdf-typetools
2082 - texlive-bin 2009-1 (embed)
2083
2084 tex4ht
2085 - texlive-bin 2009-1 (embed)
2086
2087 freetype
2088 - texlive-bin 2009-1 (embed)
2089 - ia32-libs <unfixable> (embed)
2090
2091 freetype2
2092 - texlive-bin 2009-1 (embed)
2093 - tuxonice-userui <unfixed> (static)
2094 - instantbird <unfixed>
2095 - qt4-x11 <unknown> (embed)
2096 - vtk <unknown> (embed)
2097 - paraview <unknown> (embed)
2098 NOTE: from embedded copy of vtk
2099
2100 silgraphite
2101 - texlive-bin <unfixed> (embed)
2102
2103 unzip
2104 - texlive-bin 2009-1 (embed)
2105
2106 jbig2dec
2107 - ghostscript 8.71~dfsg2-1 (embed)
2108
2109 libxml2
2110 - chromium-browser 5.0.375.29~r46008-1
2111 - ia32-libs <unfixable> (embed)
2112
2113 protobuf
2114 - chromium-browser 5.0.375.70~r48679-2
2115
2116 libv8
2117 - chromium-browser 5.0.375.38~r46659-1
2118
2119 nspr
2120 - chromium-browser 5.0.375.29~r46008-3
2121 - ia32-libs <unfixable> (embed)
2122
2123 yasm
2124 - chromium-browser 5.0.375.29~r46008-2
2125
2126 libxslt
2127 - chromium-browser 5.0.375.29~r46008-1
2128 - ia32-libs <unfixable> (embed)
2129
2130 miniupnpc
2131 - warzone2100 2.3.7-2
2132 NOTE: code still present in tarball but removed during build and unused
2133 - vino 3.2.2-1
2134 NOTE: code still present in tarball but removed during build and unused
2135
2136 iniparser (not packaged in Debian; RFP bug #582657)
2137 - warzone2100 <unfixed> (modified-embed)
2138
2139 pyglet
2140 - sympy <unfixed> (embed; bug #459716)
2141
2142 mpmath
2143 - sympy <unfixed> (embed; bug #541746)
2144
2145 openssh
2146 - libpam-ssh <unfixed> (embed; bug #598522)
2147
2148 curl
2149 - cmake 2.6.0-6 (embed)
2150 NOTE: Might be fixed earlier. Lenny version recorded.
2151 - criticalmass <unfixed> (static; bug #599061)
2152 - wengophone 2.1.0~beta1-svn9983-1 (embed)
2153 - ia32-libs <unfixable> (embed)
2154
2155 lib3ds
2156 - boson <unfixed> (embed; bug #600900)
2157 - openscenegraph <unfixed> (embed; bug #601181)
2158
2159 xcftools
2160 - gnome-xcf-thumbnailer <unfixed> (embed)
2161
2162 simplejson
2163 - exaile <unfixed> (embed; bug #604547)
2164
2165 libasycns
2166 - loudmouth <unfixed> (embed; bug #566143)
2167
2168 plplot
2169 - emboss <unfixed> (fork)
2170
2171 acl
2172 - ia32-libs <unfixable> (embed)
2173
2174 arts
2175 - ia32-libs <unfixable> (embed)
2176
2177 attr
2178 - ia32-libs <unfixable> (embed)
2179
2180 audiofile
2181 - ia32-libs <unfixable> (embed)
2182
2183 avahi
2184 - ia32-libs <unfixable> (embed)
2185
2186 celt
2187 - ia32-libs <unfixable> (embed)
2188
2189 coreutils
2190 - ia32-libs <unfixable> (embed)
2191
2192 cyrus-sasl2
2193 - ia32-libs <unfixable> (embed)
2194
2195 db4.8
2196 - ia32-libs <unfixable> (embed)
2197
2198 dbus
2199 - ia32-libs <unfixable> (embed)
2200
2201 directfb
2202 - ia32-libs <unfixable> (embed)
2203
2204 esound
2205 - ia32-libs <unfixable> (embed)
2206
2207 fltk1.1
2208 - ia32-libs <unfixable> (embed)
2209
2210 fontconfig
2211 - ia32-libs <unfixable> (embed)
2212
2213 freeglut
2214 - ia32-libs <unfixable> (embed)
2215
2216 gcc-3.3
2217 - ia32-libs <unfixable> (embed)
2218
2219 gdbm
2220 - ia32-libs <unfixable> (embed)
2221
2222 gnutls26
2223 - ia32-libs <unfixable> (embed)
2224
2225 hal
2226 - ia32-libs <unfixable> (embed)
2227
2228 isdnutils
2229 - ia32-libs <unfixable> (embed)
2230
2231 jack-audio-connection-kit
2232 - ia32-libs <unfixable> (embed)
2233
2234 keyutils
2235 - ia32-libs <unfixable> (embed)
2236
2237 krb5
2238 - ia32-libs <unfixable> (embed)
2239
2240 lesstif2
2241 - ia32-libs <unfixable> (embed)
2242
2243 libaio
2244 - ia32-libs <unfixable> (embed)
2245
2246 libasyncns
2247 - ia32-libs <unfixable> (embed)
2248
2249 libcap2
2250 - ia32-libs <unfixable> (embed)
2251
2252 libdrm
2253 - ia32-libs <unfixable> (embed)
2254
2255 libedit
2256 - ia32-libs <unfixable> (embed)
2257
2258 libexif
2259 - ia32-libs <unfixable> (embed)
2260
2261 libgcrypt11
2262 - ia32-libs <unfixable> (embed)
2263
2264 libgpg-error
2265 - ia32-libs <unfixable> (embed)
2266
2267 libgphoto2
2268 - ia32-libs <unfixable> (embed)
2269
2270 libice
2271 - ia32-libs <unfixable> (embed)
2272
2273 libieee1284
2274 - ia32-libs <unfixable> (embed)
2275
2276 libjpeg8
2277 - ia32-libs <unfixable> (embed)
2278
2279 libnss-ldap
2280 - ia32-libs <unfixable> (embed)
2281
2282 libogg
2283 - ia32-libs <unfixable> (embed)
2284
2285 libpam-ldap
2286 - ia32-libs <unfixable> (embed)
2287
2288 libsamplerate
2289 - ia32-libs <unfixable> (embed)
2290
2291 libsdl1.2
2292 - ia32-libs <unfixable> (embed)
2293
2294 libsm
2295 - ia32-libs <unfixable> (embed)
2296
2297 libssh2
2298 - ia32-libs <unfixable> (embed)
2299
2300 libtasn1-3
2301 - ia32-libs <unfixable> (embed)
2302
2303 libx11
2304 - ia32-libs <unfixable> (embed)
2305
2306 libx86
2307 - ia32-libs <unfixable> (embed)
2308
2309 libxau
2310 - ia32-libs <unfixable> (embed)
2311
2312 libxcb
2313 - ia32-libs <unfixable> (embed)
2314
2315 libxcomposite
2316 - ia32-libs <unfixable> (embed)
2317
2318 libxcursor
2319 - ia32-libs <unfixable> (embed)
2320
2321 libxdamage
2322 - ia32-libs <unfixable> (embed)
2323
2324 libxdmcp
2325 - ia32-libs <unfixable> (embed)
2326
2327 libxext
2328 - ia32-libs <unfixable> (embed)
2329
2330 libxfixes
2331 - ia32-libs <unfixable> (embed)
2332
2333 libxi
2334 - ia32-libs <unfixable> (embed)
2335
2336 libxinerama
2337 - ia32-libs <unfixable> (embed)
2338
2339 libxmu
2340 - ia32-libs <unfixable> (embed)
2341
2342 libxp
2343 - ia32-libs <unfixable> (embed)
2344
2345 libxrandr
2346 - ia32-libs <unfixable> (embed)
2347
2348 libxrender
2349 - ia32-libs <unfixable> (embed)
2350
2351 libxss
2352 - ia32-libs <unfixable> (embed)
2353
2354 libxt
2355 - ia32-libs <unfixable> (embed)
2356
2357 libxtst
2358 - ia32-libs <unfixable> (embed)
2359
2360 libxv
2361 - ia32-libs <unfixable> (embed)
2362
2363 libxxf86vm
2364 - ia32-libs <unfixable> (embed)
2365
2366 lzo2
2367 - ia32-libs <unfixable> (embed)
2368
2369 mesa
2370 - ia32-libs <unfixable> (embed)
2371
2372 mpg123
2373 - ia32-libs <unfixable> (embed)
2374
2375 nas
2376 - ia32-libs <unfixable> (embed)
2377
2378 nss
2379 - ia32-libs <unfixable> (embed)
2380
2381 openal-soft
2382 - ia32-libs <unfixable> (embed)
2383
2384 openssl
2385 - ia32-libs <unfixable> (embed)
2386
2387 pam
2388 - ia32-libs <unfixable> (embed)
2389
2390 popt
2391 - ia32-libs <unfixable> (embed)
2392
2393 pulseaudio
2394 - ia32-libs <unfixable> (embed)
2395
2396 sane-backends
2397 - ia32-libs <unfixable> (embed)
2398
2399 sqlite3
2400 - ia32-libs <unfixable> (embed)
2401 - chromium-browser <unfixed> (embed)
2402
2403 sysfsutils
2404 - ia32-libs <unfixable> (embed)
2405
2406 tcp-wrappers
2407 - ia32-libs <unfixable> (embed)
2408
2409 tdb
2410 - thunar 1.2.1-3 (old-version)
2411 - ia32-libs <unfixable> (embed)
2412
2413 tslib
2414 - ia32-libs <unfixable> (embed)
2415
2416 unixodbc
2417 - ia32-libs <unfixable> (embed)
2418
2419 xaw3d
2420 - ia32-libs <unfixable> (embed)
2421
2422 xbitmaps
2423 - ia32-libs <unfixable> (embed)
2424
2425 xcb-util
2426 - ia32-libs <unfixable> (embed)
2427
2428 xcursor-themes
2429 - ia32-libs <unfixable> (embed)
2430
2431 xft
2432 - ia32-libs <unfixable> (embed)
2433
2434 dicomparser
2435 - vtk <unfixed>
2436 - paraview <unfixed>
2437 NOTE: as part of its copy of vtk
2438 - insighttoolkit <unfixed>
2439
2440 proj
2441 - vtk <unfixed>
2442 - paraview <unfixed>
2443 NOTE: as part of its copy of vtk
2444 - therion <unfixed>
2445 - python-pyproj 1.8.6-1
2446
2447 netcdf
2448 - vtk <unfixed>
2449 - paraview <unfixed>
2450 NOTE: as part of its copy of vtk
2451
2452 insighttoolkit
2453 - vtk <unfixed> (embed)
2454 NOTE: embeds at least MetaIO
2455 - paraview <unfixed> (embed)
2456 NOTE: embeds at least MetaIO
2457
2458 gl2ps
2459 - vtk <unfixed>
2460 - paraview <unfixed>
2461 NOTE: as part of its copy of vtk
2462 - avogadro <unfixed>
2463 - gabedit <unknown> (embed)
2464 NOTE: not sure if it is built
2465 - drawxtl <unfixed> (embed)
2466 - rgl <unfixed> (embed)
2467 - gmsh <unfixed>
2468 - mcrl2 <unfixed> (embed)
2469 - mysql-gui-tools <unknown> (embed)
2470 NOTE: not sure if it is built
2471 - opencascade <unfixed> (embed)
2472 - orsa <unfixed> (embed)
2473 - qtiplot <unfixed> (embed)
2474 - qwtplot3d <unfixed> (embed)
2475 - root-system <unknown> (embed)
2476 NOTE: not sure if it is built
2477 - scilab <unfixed> (embed)
2478 - snd <unknown> (embed)
2479 NOTE: not sure if it is built
2480 - xmakemol <unfixed> (embed)
2481
2482 qwtplot3d
2483 - qtiplot <unfixed>
2484
2485 parseafm (from Adobe)
2486 - vftool <unfixed>
2487 - gnustep-back <unknown>
2488 NOTE: looks like it isn't built
2489 - evince <unfixed>
2490
2491 bugzilla
2492 - perl <unknown>
2493 - libcgi-pm-perl <unknown>
2494
2495 isc-dhcp
2496 - dhcp3 <unfixable> (old-version)
2497 - dhcp <unfixable> (old-version)
2498
2499 chipmunk (ITP: #623274)
2500 - xmoto <unfixed> (embed; bug #623299)
2501 - libtuxcap <unfixed> (embed; bug #623300)
2502
2503 libsigsegv
2504 - gawk 3.1.8+dfsg-0.1
2505
2506 pdfrw
2507 - rst2pdf <unfixed> (embed; bug #638607)
2508
2509 bind9
2510 - isc-dhcp <unfixed> (embed; bug #643569)
2511 NOTE: introduced in upstream 4.2 series
2512
2513 qof
2514 - gnucash <unfixed> (embed; bug #556245)
2515
2516 feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2517 - megaglest <unfixed> (modified-embed)
2518
2519 acsccid
2520 - ccid 1.3.11 <unfixed> (fork)
2521 - openct <unfixed> (modified-embed)
2522 - towitoko <unfixed> (modified-embed)
2523
2524 ccid
2525 - openct <unfixed> (modified-embed)
2526 - towitoko <unfixed> (modified-embed)
2527
2528 msmtp
2529 - mpop <unfixed> (embed)
2530
2531 iCalcreator
2532 - collabtive <unfixed>
2533 NOTE: class.ical.php
2534 - glpi <unfixed>
2535
2536 plupload
2537 - wordpress <unfixed>
2538
2539 feedcreator (php lib)
2540 - collabtive <unfixed>
2541 NOTE: class.rss.php
2542 - piwigo <unfixed>
2543 - dokuwiki <unfixed> (modified-embed)
2544 NOTE: dokuwiki uses an "enhanced" version
2545
2546 emacs
2547 - le <unfixed>
2548 NOTE: it uses an almost-pristine 2008 version of emacs' regex.{c,h}
2549
2550 libjsoncpp
2551 - eiskaltdcpp <unfixed> (embed)
2552 - drizzle <unfixed> (embed)
2553
2554 mongoose
2555 - phantomjs <unfixed> (modified-embed)
2556
2557 rapidxml (not packaged in Debian, http://rapidxml.sourceforge.net)
2558 - boost1.49 <unfixed> (embed)
2559 - boost1.50 <unfixed> (embed)
2560 - deal.ii <unfixed> (embed)
2561 - fife <unfixed> (embed)
2562 - witty <unfixed> (embed)
2563
2564 make
2565 - remake <unfixed> (fork)
2566
2567 metacity
2568 - mutter <unfixed> (fork)
2569
2570 mutter
2571 - muffin <unfixed> (fork)
2572
2573 libjson-spirit-dev
2574 - bitcoin <unfixed> (modified-embed)
2575 - litecoin <itp> (modified-embed; bug #693492)
2576
2577 bitcoin
2578 - litecoin <itp> (fork; bug #693492)
2579
2580 json-spirit
2581 - bitcoin <unfixed> (modified-embed)
2582 - litecoin <itp> (modified-embed; bug #693492)
2583
2584 libupnp
2585 - mediatomb <unfixable> (fork)
2586 - djmount <unfixed> (embed; bug #699562)
2587
2588 flowplayer-core (not packaged in Debian)
2589 - mahara <unfixed> (modified-embed)
2590
2591 darktable
2592 - libraw <unfixed> (modified-embed; bug #682980)
2593
2594 mednafen
2595 - lzo2 0.8.D.3-4
2596 [squeeze] - lzo2 <unfixed>
2597 NOTE: not-affected since 0.8.D.3-4 and 0.9.17.1-
2598 - libvorbisidec 0.9.17.1-1
2599 [squeeze] - libvorbisidec <unfixed>
2600 [wheezy] - libvorbisidec <unfixed>
2601 NOTE: not-affected since 0.9.17.1-1 (as above)
2602 NOTE: mednafen 0.8.D.3-4 and 0.8.D.3-5 attempted to use the packaged libvorbisidec,
2603 NOTE: but this breaks CD playback when using .ogg files (see #699143), so it's
2604 NOTE: likely that future packages in the 0.8 series will build using the embedded code.
2605 - libmpcdec 0.9.21-1
2606 NOTE: not-affected since 0.9.21-1 (as above)
2607
2608 xmoto
2609 - chipmunk <unfixed> (bug #623299)
2610
2611 irrlicht
2612 - supertuxkart <unfixed> (modified-embed)
2613
2614 snappy
2615 - chromium-browser <unfixed>
2616 NOTE: not sure if it's build
2617 - mongodb <unfixed>
2618 NOTE: needs further checks
2619 - couchdb <unfixed>
2620 - libsereal-decoder-perl <unfixed>
2621 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2622 - libsereal-encoder-perl <unfixed>
2623 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2624
2625 automysqlbackup
2626 - autopostgresqlbackup <unfixed>
2627 NOTE: fork

  ViewVC Help
Powered by ViewVC 1.1.5