/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 33408 - (show annotations) (download)
Tue Apr 7 04:28:51 2015 UTC (12 days, 9 hours ago) by carnil
File size: 80035 byte(s)
collabtive/2.0+dfsg-6 uses systemwide provided php-htmlpurifier and phpseclib, #781414
1 Embedded code copies
2 ====================
3
4 https://wiki.debian.org/EmbeddedCodeCopies
5 This file collects source packages that embed code from other projects.
6 This is considered bad for fixing security flaws because the fix needs
7 to be applied in multiple source packages.
8
9 Format:
10 <srcpkg> (<optional comment about srcpkg>)
11 - <embedding srcpkg> <status> (<sort>; bug #<number>)
12 NOTE: optional comments about the linkage of the embedding srcpkg
13
14 status: version number fixing the embedded copy
15 <unfixed> if the issue is not yet fixed
16 <removed> if the package was removed from the archive
17 <itp> if the package is in the process of being packaged
18 <not-affected> if the package does not use the embedded copy
19 <unknown> if the version number can not be determined
20 <unfixable> for unavoidable cases (e.g., forks that add real value)
21 sort: static (linking statically against a lib)
22 embed (embeds a copy of the library into another source package)
23 modified-embed (embeds a code copy that differs from upstream code)
24 fork (a full-blown fork of another source package)
25 old-version (an older version of essentially the same code)
26
27 The srcpkg might be some string to identify the code if there is no
28 specific source package.
29
30 Everything up to the next line is ignored.
31 ---BEGIN
32 poppler
33 - pdftohtml <unknown>
34 [sarge] - pdftohtml <unfixed>
35 [etch] - pdftohtml <unfixed>
36 NOTE: has been replaced by poppler-utils
37 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38 - texlive-base 3.0-12 (embed)
39 - texlive-bin 2007-1 (embed)
40 - koffice 1:2.0.0-1 (embed; bug #436163)
41 - libextractor 0.5.12-1 (embed)
42 NOTE: libextractor is using its own pdf decoder now
43 - ipe <unfixed> (embed)
44 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45 - ruby-gnome2 <unknown> (embed)
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <removed> (embed; bug #551293)
48 - xpdf 3.02-9 (fork)
49 - luatex <unfixed>
50 NOTE: detected by lintian, needs to be checked/confirmed
51
52 pdksh (no longer developed since 1999)
53 - mksh <unfixable> (fork)
54 - posh <unfixable> (fork)
55
56 ppmd
57 - libcomplearn-mod-ppmd <unfixed> (fork)
58 NOTE: discussion in #458152
59
60 libevent
61 - transmission 1.71-1 (embed; bug #529372)
62 - chromium-browser 5.0.375.29~r46008-1
63 - dnsproxy <unknown> (embed)
64 - iceweasel <unknown> (embed)
65 - icedove <unknown> (embed)
66
67 lrmi
68 - read-edid 2.0.0-1 (embed; bug #495131)
69 - s3switch <unfixed> (embed)
70 - xresprobe <unfixed> (embed)
71 - zhcon <unfixed> (embed)
72
73 php-htmlpurifier
74 - mahara 1.2.5-1 (embed)
75 - knowledgeroot 0.9.9.5-5 (embed)
76 - moodle 2.5.1-1 (embed)
77 - collabtive 2.0+dfsg-6 (embed; bug #781414)
78
79 peercast
80 - gnome-peercast <removed> (embed)
81 [etch] - gnome-peercast <unfixed> (embed)
82
83 silc-toolkit
84 - silc-client 1.1~beta6-1 (embed)
85
86 icclib
87 - ghostscript <unfixed> (embed)
88 - argyll <unfixed> (embed)
89
90 libusb
91 - argyll <unfixed> (embed)
92 - ia32-libs <removed> (embed)
93
94 dietlibc
95 - ccontrol 0.9.1+20071204-1 (static)
96 - mksh <unfixable> (static)
97 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
98
99 libmikmod
100 - pysol-sound-server <unfixed> (modified-embed)
101 - sdl-mixer1.2 <unfixed> (embed)
102 TODO: report bug
103 - uqm 0.6.2.dfsg-8 (embed)
104 NOTE: Might be fixed earlier. Lenny version recorded.
105 - black-box 1.4.6-2.2 (embed)
106 NOTE: Might be fixed earlier. Lenny version recorded.
107
108 libiax
109 - iaxmodem <unfixable> (embed; bug #548885)
110
111 spandsp
112 - iaxmodem <unfixable> (embed; bug #548885)
113
114 python-paramiko
115 - fabric 0.9.0-2 (embed; bug #561398)
116
117 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
118 - dpkg 1.15.6 (static)
119 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
120 - rsync <unfixed> (embed)
121 - cherokee <unfixed> (embed)
122 NOTE: somehow derived code base
123 - mono <unfixed> (embed)
124 TODO: check mozilla
125 - linux-2.6 <unfixed> (embed)
126 - pvpgn 1.7.8-2 (embed)
127 - mrtg 2.12.2-1 (embed)
128 - rpm <unknown> (embed)
129 NOTE: pinged anibal since when rpm was fixed
130 - tuxcmd-modules <unfixed> (embed)
131 - zsync <unfixed>
132 - tra <unfixed>
133 - sash <unfixed>
134 - nsis <unfixed>
135 - pyfits 1:2.3.1-1
136 - mseide-msegui <unfixed>
137 NOTE: mseide
138 - mirrordir <unfixed>
139 - poco <unfixed>
140 - klibc <unfixed>
141 - emboss 6.3.1-1 (embed)
142 - ghostscript 8.71~dfsg2-6 (embed)
143 NOTE: ghostscript fixed sometime before this, but this is the version i checked
144 - freeimage <unfixed>
145 - clamav <unfixed> (fork)
146 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
147 - tuxonice-userui <unfixed> (static)
148 - plt-scheme <unfixed>
149 - perl <unfixed>
150 - paraview <unfixed>
151 - velvet 0.7.56~nozlibcopy-1
152 - gcvs <unfixed>
153 - dump <unfixed>
154 - aide <unfixed> (static)
155 - dar <unfixed> (static)
156 - avfs <unfixed>
157 - fpc <unfixed>
158 - winff <unfixed>
159 NOTE: inherited from fpc, see #472304
160 - lazarus <unfixed>
161 NOTE: inherited from fpc, see #472304
162 - erlang <unfixed> (embed)
163 - gamera 3.2.3-1 (embed)
164 - python2.4 <unfixed> (embed; bug #553403)
165 - python2.5 <unfixed> (embed; bug #553403)
166 - texlive-bin 2013.20130522.30620-1 (embed)
167 - sudo <unknown> (embed)
168 NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
169
170 dulwich
171 - hg-git 0.1.0-1 (embed; bug #541996)
172
173 libvigraimpex
174 - hugin <unfixed> (embed; bug #542259)
175 - enblend-enfuse <unfixed> (embed; bug #542258)
176 - gamera 3.2.3-1 (embed)
177
178 libbz2
179 - dpkg 1.15.6 (static)
180 - amd64-libs <unfixed> (static)
181 NOTE: let's call it "static"
182 - dar <unfixed> (static)
183 - dump <unfixed> (static)
184 - unalz 0.64-1 (embed)
185 NOTE: has code, by the maint, to use the system version but links against the internal copy
186 - clamav <unfixed> (embed)
187 NOTE: libclamav/nsis/bzlib*
188 - pristine-tar <unfixable> (modified-embed)
189 NOTE: compression code only, not uncompression
190 - r-base-core-ra 1.2.8 (static)
191 - r-base-core 2.11.1 (static)
192 NOTE: links dynamically in squeeze, statically in lenny
193 - rpm <unfixed> (static)
194 NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
195
196 libyahoo2
197 - centerim <unfixed> (embed; bug #559783)
198
199 libmsn
200 - centerim <unfixed> (embed; bug #559783)
201
202 libgadu
203 - centerim <unfixed> (embed; bug #559783)
204 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
205 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
206 - kdenetwork 4:3.3.2-5 (embed)
207 NOTE: from kdenetwork: kopete
208 - ekg 1:1.8~rc0-1 (embed)
209 - kadu 0.6.0.2-3 (embed; bug #504430)
210 - gadu <itp> (embed)
211
212 xmlrpc (which package is the "origin" of this code?)
213 - drupal <unfixed> (embed)
214 - phpgroupware <unfixed> (embed)
215 - egroupware <unfixed> (embed)
216 - phpwiki <unfixed> (embed)
217 - php4 <removed> (embed)
218 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
219
220 shtool (affects build-time only)
221 - mysql-ocaml <unfixed> (embed)
222 - php4 <removed> (embed)
223 - php5 <unfixed> (embed)
224
225 xulrunner
226 - iceape <unfixed> (embed; bug #561749)
227 - iceweasel 2.0.0.19 (embed)
228 - icedove <unfixed> (embed; bug #561750)
229 - kompozer <unfixed> (embed; bug #532168)
230 - galeon 2.0.2-4 (embed)
231 - epiphany-browser 2.14.3-8 (embed)
232 - conkeror 0.9~git080629-2 (embed)
233 - kazehakase 0.4.2-1 (embed)
234 - wine-gecko-unstable <unfixed> (embed; bug #669672)
235
236 xli
237 - xloadimage <unfixed> (embed)
238
239 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
240 - openmotif <unfixed> (embed)
241
242 libxpm
243 - lesstif2 <unfixed> (embed; bug #575750)
244 - ia32-libs <removed> (embed)
245
246 kerberized apps with BSD origin
247 - krb4 <removed> (embed)
248 - krb5 <unfixed> (embed)
249 - heimdal <unfixed> (embed)
250
251 grip (which pkg is the origin?)
252 - libcdaudio <unfixed>
253 - grip <unfixed>
254 - gnome-vfs <unfixed>
255 TODO: check vfs2 as well
256
257 fudforum
258 [etch] - phpgroupware <unfixed> (embed)
259 NOTE: phpgroupware-fudforum
260 [sarge] - egroupware-fudforum <removed> (embed)
261
262 libbsd
263 - rdate 1:1.2-3 (embed)
264 - atheme-services <unfixed>
265 - libbsd-arc4random-perl <not-affected> (modified-embed)
266 NOTE: code not used, it links dynamically against libbsd instead
267 - isakmpd <unfixed>
268 - bsdgames <unfixed> (embed)
269 - bsd-mailx <unfixed> (embed)
270 - netcat-openbsd <unfixed> (embed; bug #550611)
271 - openssh <unfixed> (embed)
272 - unworkable <unfixed> (embed)
273 - mksh <unfixed> (modified-embed)
274 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
275 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
276 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
277 - ia32-libs <removed> (embed)
278
279 cvs
280 - gcvs <unfixed> (embed)
281 NOTE: see cvsunix/src in tarball
282
283 pcre3
284 - php4 <removed> (embed)
285 - analog 2:5.23-0woody1 (embed)
286 - chicken 3.2.7-2 (embed)
287 NOTE: Might be fixed earlier. Lenny version recorded.
288 - goffice <unfixed> (embed)
289 NOTE: libgoffice-*
290 - hypermail 2.2.0.dfsg-2 (embed)
291 NOTE: Might be fixed earlier. Lenny version recorded.
292 - privoxy 3.0.9-1 (embed)
293 NOTE: Might be fixed earlier. Lenny version recorded.
294 - vfu 4.06-4.1 (embed; bug #450754)
295 - tf5 5.0beta7-1 (embed)
296 - monotone 0.43-1 (embed)
297 NOTE: this only affects versions >= 0.37
298 - glib2.0 2.15.2-1 (embed)
299 - apache2 2.0.53-4 (embed)
300 - exim4 4.10-0.srh20.12 (embed)
301 - yacas <unfixed> (embed)
302 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
303 - gtamsanalyzer.app 0.42-5 (embed)
304 - tin 980117-1 (embed)
305 - kazehakase 0.5.2-1
306 - webkit 1.0.1-1 (embed)
307 - qt4-x11 <unfixed> (embed)
308 NOTE: embedded via webkit copy
309 - erlang <unfixed> (embed)
310 - ssed <unfixed> (embed)
311 - ircd-hybrid <unfixed> (static)
312 - emboss <unfixed> (fork)
313 - cherokee <unfixed> (embed)
314 - oftc-hybrid 1.6.9.dfsg-1 (embed)
315 - ratbox-services <unfixed> (embed)
316 - squeak-vm <unfixed> (embed)
317 - tinymux <unfixed> (embed)
318 - mp4h <unfixed> (embed)
319
320 tiff
321 - wxwindows2.4 2.2.1 (embed)
322 - gamera 3.2.3-1 (embed)
323 - freeimage <unfixed> (embed)
324 - libtk-img <unfixed> (embed; bug #732147)
325 NOTE: there are two copies, one under tiff/ other under libtiff/
326 - gdal <unfixed>
327 - ia32-libs <removed> (embed)
328 - tiff3 <unfixable> (old-version)
329
330 uudeview
331 - libconvert-uulib-perl <unfixed> (embed)
332 - pan <unfixed> (embed)
333
334 sqlite
335 - amarok <unfixed> (embed)
336 - monotone 0.43-1 (embed)
337 - iceweasel <unfixed> (embed)
338 - heimdal <unfixed> (embed; bug #559616)
339
340 util-linux
341 - loop-aes-utils <unfixed> (embed)
342 NOTE: contains code from util-linux' mount in the mount-aes-udeb
343 - ia32-libs <removed> (embed)
344
345 sylpheed
346 - sylpheed-claws <unfixed> (fork)
347
348 phpsysinfo
349 - egroupware <unfixed> (embed)
350 - phpgroupware <unfixed> (embed)
351
352 phpldapadmin
353 [sarge] - egroupware <unfixed> (embed)
354 NOTE: removed from egroupware after sarge
355 - ldap-account-manager <unfixed> (embed; bug #781419)
356
357 chmlib
358 - kchmviewer <unknown> (embed)
359
360 ffmpeg (libavcodec/libavformat)
361 - mplayer 1.0~rc2-14 (embed; bug #395252)
362 - kino 1.0.0-1
363 - vlc <not-affected> (Links dynamically since initial release)
364 - smilutils 0.3.0-10
365 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
366 - motion 3.1.19-1
367 - gstreamer0.10-ffmpeg 0.10.3-2
368 - xmovie <removed> (static)
369 TODO: gimp-gap (potentially using ffmpeg code as well)
370 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
371 - audacity 1.3.7-2 (embed; bug #512278)
372 - chromium-browser <unfixed> (fork; bug #763632)
373 - libav <unfixed>
374
375 faad2
376 - mplayer 1.0~rc2-20 (embed)
377 - avifile <unfixed> (embed; bug #538750)
378 - ffmpeg-debian <removed> (embed)
379
380 libmad (MPEG decoding lib)
381 - xine-lib <unfixed> (embed)
382 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
383 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
384
385 libdts
386 - xine-lib <unfixed> (embed)
387
388 flac
389 - xine-lib <unfixed> (embed)
390 - ia32-libs <removed> (embed)
391
392 liba52
393 - a52dec <unfixed> (embed)
394 - xine-lib <unfixed> (embed)
395
396 mpeg2dec (libmpeg2)
397 - xine-lib <unfixed> (embed)
398
399 libmpeg3
400 - squeak-vm <unfixed> (embed)
401
402 libntlm
403 - wget <unfixed> (fork; bug #550436)
404 - curl <unfixed> (fork; bug #550437)
405 - cntlm <unfixed> (fork; bug #550438)
406
407 uw-imap
408 - pine <unfixed> (embed)
409 - alpine <unfixed> (embed)
410
411 imagemagick
412 - graphicsmagick <unfixed> (fork)
413
414 python-urlgrabber
415 - mercurial <unfixed> (embed; bug #531062)
416 - w3af <unfixed> (embed; bug #555372)
417 [experimental] - harvestman <unfixed> (embed; bug #555373)
418
419 beautifulsoup
420 - python-mechanize <unfixed> (embed; bug #555349)
421 - zope2.11 <removed> (embed; bug #555350)
422 - twill <unknown> (embed)
423
424 halibut
425 - nsis <unfixed> (fork)
426
427 libghttp
428 - hotway <unfixed> (embed)
429
430 libsndfile
431 - ardour 1:2.7.1-1 (embed)
432 - ia32-libs <removed> (embed)
433
434 glibmm2.4
435 - ardour 1:2.7.1-1 (embed)
436
437 libgnomecanvasmm2.6
438 - ardour 1:2.7.1-1 (embed)
439
440 libsigc++-2.0
441 - ardour 1:2.7.1-1 (embed)
442 - ia32-libs <removed> (embed)
443
444 soundtouch
445 - ardour 1:2.7.1-1 (embed)
446
447 libmms
448 - xine-lib <unfixed> (embed)
449 - mimms <unfixed> (embed)
450
451 ckeditor
452 - request-tracker4 <unfixed> (embed)
453
454 fckeditor
455 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
456 - moin 1.8.2-2 (embed; bug #452599)
457 - karrigell <removed> (embed; bug #452598)
458 - gforge 4.6.99+svn6225-1 (embed)
459 - request-tracker3.8 <unfixed> (embed)
460 - otrs2 <unfixed> (embed)
461
462 libphp-phpmailer
463 - moodle 2.5.1-1 (embed; bug #507185)
464 - mahara <unfixed> (embed)
465 - symfony <unfixed> (embed; bug #566778)
466 [etch] - phpgroupware <unfixed> (embed)
467 NOTE: phpgroupware-felamimail is only in etch
468 - egroupware <unfixed> (embed; bug #504283)
469 - glpi 0.80.7-2
470
471 giflib
472 - wine <unfixed> (fork; bug #466181)
473 NOTE: the embedded code is a fork of ungif, which is an older version of giflib
474
475 bennu (not packaged in Debian, http://bennu.sourceforge.net)
476 - moodle <unfixed> (embed)
477
478 smarty
479 - gallery2 2.2.5-2 (embed; bug #471160)
480 - mahara 0.9.2-2 (embed; bug #471201)
481 - gosa 2.4beta1-1 (embed; bug #471200)
482
483 TinyMCE
484 - wordpress 2.5.1-3 (embed; bug #478257)
485 - moodle <unfixed> (embed; bug #507185)
486 - knowledgeroot <unfixed> (embed)
487 - joomla <itp> (bug #326398)
488 - mahara 1.2.6-1 (embed; #597752)
489 - glpi 0.80.7-2
490
491 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
492 - scite <unfixed> (embed)
493 - qscintilla <unfixed> (embed)
494 - qscintilla2 <unfixed> (embed)
495 - geany <unfixed> (fork)
496 - anjuta <unfixed> (embed)
497 - sdlbasic <unfixed> (embed)
498
499 libphp-adodb
500 - moodle 2.5.1-1 (embed; bug #507185)
501 NOTE: also AdoDB-XML Schema
502 - gallery2 <unfixed> (embed)
503 - phppgadmin <unfixed> (embed)
504 - egroupware <unfixed> (embed)
505 - phpwiki <unfixed> (embed)
506 - torrentflux 2.0beta1-2 (embed)
507 - ipplan <unfixed> (embed)
508 - typo3-src <unfixed> (embed)
509 - cacti 0.8.6d-1 (embed)
510 [sarge] - cacti <unfixed> (embed)
511 NOTE: dependency exists, but internal version is used
512 - gforge 4.7~rc2-6 (embed)
513 - mahara <unfixed> (embed)
514
515 gzip
516 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
517 - klibc <unfixed> (embed)
518 NOTE: based on linux-kernel gzip code
519 - busybox <unfixed> (embed)
520 - pristine-tar <unfixed> (modified-embed)
521 NOTE: compression code only, not uncompression
522 - ncompress <unfixed> (old-version)
523
524 neon
525 - cadaver 0.22.3+debian-1 (embed; bug #188381)
526 - gnome-vfs2 <unfixed> (embed; bug #395874)
527 [etch] - litmus <unfixed> (embed; #395875)
528 - litmus <removed> (embed; #395875)
529 [sarge] - screem <unfixed> (embed)
530 - sitecopy 1:0.16.0-1 (embed; bug #395876)
531 [etch] - tla <unfixed> (embed; bug #395877)
532 [sarge] - tla <unfixed> (embed; bug #395877)
533
534 libmodplug
535 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
536
537 libvncserver
538 - vino <unfixed> (embed)
539 - krfb <unfixed> (embed)
540
541 putty
542 - filezilla <unfixed> (embed)
543
544 tinyxml
545 - filezilla <unfixed>
546 - crystalspace <unfixed> (embed)
547 - libwfut <unfixed> (embed)
548 - rarian <unfixed> (embed)
549 - bulletml <unfixed> (embed)
550 - pokerth <unfixed> (embed)
551 - qutecom <unfixed> (embed)
552 - sofa-framework <unfixed> (embed)
553 - yate <unfixed> (embed)
554 - antigrav <unfixed> (embed)
555 - balder2d <unfixed> (embed)
556 - cal3d <unfixed> (embed)
557 - criticalmass <unfixed> (embed)
558 - ember <unfixed> (embed)
559 - epiphany <unfixed> (embed)
560 - gambit <unfixed> (embed)
561 - noiz2sa <unfixed> (embed)
562 - ogre <unfixed> (embed)
563 - opencity <unfixed> (embed)
564 - openmovieeditor <unfixed> (embed)
565 - pouetchess <unfixed> (embed)
566 - tecnoballz <unfixed> (embed)
567 - trigger-rally <unfixed> (embed)
568 - xmoto <unfixed> (embed)
569 - mapnik <unknown> (embed)
570 NOTE: uses a different XML parser by default
571 - rrootage 0.23a-6 <embed>
572 NOTE: links to libbulltetml
573 - boson <unknown> (embed)
574 NOTE: the embedded code is unused
575 - cppcheck <unfixed> (embed)
576 NOTE: introduced in 1.47, will use system's version in 1.48
577 [squeeze] - cppcheck <not-affected>
578 - xye <unfixed> (embed; bug #758429)
579 NOTE: https://sourceforge.net/p/xye/bugs/7/
580
581 gv
582 - evince <unfixed> (embed)
583 NOTE: ps/ tree from gv 3.5.8
584 NOTE: evince-gtk is affected (a component of evince source package)
585
586 libXbae
587 - paw <unfixed> (embed)
588
589 libgtkhtml
590 - claws-mail-extra-plugins <unfixed> (fork)
591
592 libXaw
593 - paw <unfixed> (embed)
594 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
595 - ia32-libs <removed> (embed)
596
597 libgd2
598 - graphviz 2.16-1 (embed)
599 NOTE: lib/gd seems to be 2.0.33
600 - wml 2.0.11ds2-1 (embed)
601 - libwmf <unfixed> (embed)
602 NOTE: derived from gd 1.6.3, but only used to write images
603 - plt-scheme <unfixed> (embed; bug #601525)
604 - texlive-bin <unfixed> (embed)
605 [wheezy] - texlive-bin 2013.20130522.30620-1 (embed)
606 [squeeze] - texlive-bin 2013.20130522.30620-1 (embed)
607
608 rar
609 - unrar-nonfree <unfixed> (embed)
610
611 unrar-free (maybe this code is derived from the original rar, too?)
612 - clamav <unfixed> (embed)
613 NOTE: seems to be disabled in default config
614
615 mplayer (DirectMedia Object loader)
616 - xine-lib <unfixed> (embed)
617 NOTE: src/libw32dll/
618 - vlc <unfixed> (embed)
619 NOTE: modules/codec/dmo/
620 - mplayer 1.0~rc2-20 (embed)
621
622 libwpd (WordPerfect converter)
623 - openoffice.org <unfixed> (embed)
624
625 fsplib (http://sourceforge.net/projects/fsp/)
626 - gftp <unfixed> (embed)
627 NOTE: lib/fsplib version 0.3
628
629 sprng
630 - tree-puzzle <unfixed> (embed)
631
632 librpcsecgss
633 - krb5 <unfixed> (embed)
634
635 jasper
636 - ghostscript 8.64~dfsg-2 (embed)
637
638 libiris
639 - psi <unfixed> (embed)
640 - kdenetwork <unfixed> (embed)
641 NOTE: kopete embeds libiris but links dynamically to libidn
642 - kdegames <unfixed> (embed)
643 NOTE: ksirk/kde4
644
645 libidn
646 - monotone 0.43-1 (embed)
647 - psi <unfixed> (embed)
648 NOTE: psi embeds libiris which embeds libidn
649 - kdegames <unfixed> (embed)
650 NOTE: kdegames/kde4 embeds libiris which embeds libidn
651 - ia32-libs <removed> (embed)
652
653 lua5.1
654 - monotone 0.43-1 (embed)
655 - nmap 5.00-1 (embed; bug #527997)
656 [lenny] - nmap <unfixed> (embed; bug #527997)
657 - ocropus <unfixed> (embed)
658 - enigma <unfixed> (embed)
659 NOTE: requires lua built with C++
660 - freeciv 2.4.1-1 (embed)
661 NOTE: from 2.4.1-1 on freeciv uses system library instead
662 - spring <unfixed> (embed)
663
664 libbotan
665 - monotone 0.43-1 (embed)
666
667 NetXX
668 - monotone 0.43-1 (embed)
669
670 libgc
671 - mono <unfixed> (embed)
672
673 lzma
674 - p7zip <unfixed> (embed)
675 - xz-utils <unfixed> (fork)
676 - r-base <unfixed> (embed)
677 NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
678
679 lzo2
680 - ia32-libs <removed> (embed)
681 - busybox <unfixed> (embed)
682 - grub2 <unfixed> (embed)
683 - syslinux <unfixed> (modified-embed)
684 - valgrind <unfixed> (modified-embed)
685 - xen <unfixed> (embed)
686 - remmina <unfixed> (embed)
687 - blender <unfixed> (embed)
688 - x11vnc <unfixed> (embed)
689 - italc <unfixed> (embed)
690 - dump <unfixed> (embed)
691 - krfb <unfixed> (embed)
692 - nfdump <unfixed> (embed)
693 - kino <unfixed> (embed)
694 - samhain <unfixed> (embed)
695 - u-boot <unfixed> (modified-embed)
696 - icecc <unfixed> (embed)
697 - bb <unfixed> (embed)
698 - mednafen 0.8.D.3-4 (embed)
699 - ht <unfixed> (embed)
700 - n2n <unfixed> (embed)
701 NOTE: still not sure if all those embedded copies are actually used
702 NOTE: some packages actually use minilzo, which is not built by src:lzo2 and is only available as source in liblzo2-dev
703
704 lz4
705 - eet <unfixed> (embed)
706 - efl <unfixed> (embed)
707 - grub2 <unfixed> (embed)
708 - gtkwave <unfixed> (embed)
709 - iceweasel <unfixed> (embed)
710 - kfreebsd-9 <unfixed> (embed)
711 - kfreebsd-10 <unfixed> (embed)
712 - php-horde-lz4 <unfixed> (embed)
713 - pytables <unfixed> (embed)
714 - zfsutils <unfixed> (embed)
715
716 yassl
717 - mysql-5.1 <unfixed> (embed)
718 - mysql-5.5 <unfixed> (embed; bug #627207)
719
720 pax code
721 - tar <unfixed> (embed)
722 - cpio <unfixed> (embed)
723
724 t1lib
725 - tetex-bin 2.0.2-1 (embed)
726 - texlive-bin 2013.20130522.30620-1 (embed; bug #667912)
727 NOTE: used only in xdivk (a dvi file viewer that the maintainer refuses to drop)
728 - grace 5.1.14-2 (embed)
729 - evince <unfixed> (embed)
730 NOTE: at least parseafm code, maybe more?
731 - vftool <unfixed> (embed)
732 NOTE: just parseafm code it seems
733
734 guichan
735 - boswars <unfixed> (embed)
736 NOTE: maintainer notified us, working on it
737
738 tolua
739 - boswars <unfixed> (embed)
740 NOTE: maintainer notified us, working on it
741 NOTE: actually tolua++
742 - ocropus <unfixed> (embed)
743 NOTE: actually tolua++
744 - freeciv <unfixed> (embed)
745 NOTE: actually tolua++
746 - enigma <unfixed> (embed)
747
748 asio-dev
749 - luxrender <removed> (embed)
750
751 xine-lib
752 - vlc <unfixed> (embed)
753 NOTE: only parts included in modules/access/rtsp
754
755 netpbm
756 - tcl8.3 <unfixed> (embed)
757 - tcl8.4 <unfixed> (embed)
758 - tcl8.5 <unfixed> (embed)
759 NOTE: generic/tkImgGIF.c
760
761 tk8.5
762 - tk8.0 <removed> (old-version)
763 - tk8.3 <unfixed> (old-version)
764 - tk8.4 <unfixed> (old-version)
765 - perl-tk <unfixable> (fork)
766
767 samba
768 - mc 2:4.6.2~git20080311-1 (embed)
769 NOTE: maintainer is aware of this, currently searching a solution
770
771 plib1.8.4c2
772 - boson <unfixed> (fork)
773 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
774
775 fribidi
776 - quesoglc 0.7.2-2 (embed)
777
778 glew
779 - quesoglc <unfixed> (embed; bug #489341)
780 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
781 - trigger 0.5.2.1-2 (embed)
782 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
783 - trigger-rally 0.5.2.1-2 (embed)
784 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
785 - chromium-browser 5.0.375.70~r48679-2
786
787 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
788 - transcend <unfixed> (embed)
789 - cultivation <unfixed> (embed)
790 - passage <unfixed> (embed)
791 - gravitation <unfixed> (embed)
792
793 tar
794 - libarchive <unfixed> (embed)
795 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
796
797 cpio
798 - libarchive <unfixed> (embed)
799 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
800
801 kde4libs
802 - kdelibs <unfixable> (old-version)
803
804 webkit
805 - qt4-x11 <unfixed> (embed; bug #479851)
806 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
807 - kde4libs <unfixable> (fork)
808 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
809 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
810 - chromium-browser <unfixed> (fork)
811
812 ftgl
813 - blender 2.46+dfsg-1 (embed)
814 - vtk <unfixed> (embed)
815 - paraview <unfixed> (embed)
816 NOTE: as part of its copy of vtk
817 - tulip <unfixed> (embed)
818 NOTE: depends on -dev but string found on binary
819 - root-system <unknown> (embed)
820 NOTE: depends on -dev package; not confirmed at source
821 - rgl <unknown> (embed)
822 NOTE: not sure if it is built
823 - mysql-gui-tools <unknown> (embed)
824 NOTE: not sure if it is built
825 - k3d <unfixed> (embed)
826 - extremetuxracer <unknown> (embed)
827 NOTE: not sure if it is built
828 - critterding <unknown> (embed)
829 - lightspeed <unfixed>
830 NOTE: depends on -dev but string found on binary
831
832 wv
833 - abiword <unfixed>
834
835 wv2
836 - koffice <unfixed>
837 - calligra <unfixed>
838
839 qemu
840 - kvm <removed> (embed; bug #543159)
841 - qemu-kvm <unfixed> (embed; bug #560853)
842 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
843 - xen-3 3.4.2-2 (embed; bug #560856)
844 - xen-unstable <unfixed> (embed; bug #560856)
845
846 vgabios
847 - kvm <removed> (embed; bug #489442)
848 - qemu-kvm <unfixed> (embed)
849
850 bochs
851 - kvm <removed> (embed; bug #489442)
852 - qemu-kvm <unfixed> (embed)
853
854 speex
855 - vorbis-tools <unfixed> (embed)
856 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
857 - gst-plugins-good0.10 <unfixed> (embed)
858 - xine-lib <unfixed> (embed)
859 - libfishsound <unfixed> (embed)
860 - libannodex <removed> (embed)
861 - opal 3.4.2~dfsg-2 (embed)
862 - mumble 1.2.0~beta1-1 (embed)
863 - vlc <unfixed> (embed)
864 - xmms-speex <unfixed> (embed)
865 - libsdl-sound1.2 <unfixed> (embed)
866 - sweep <unfixed> (embed)
867
868 readline6
869 - magic <itp> (old-version)
870 - gdb 5.2.cvs20020401-1
871
872 opcode
873 - ode <unfixed> (embed)
874 NOTE: opcode is not a package in debian, it is just embedded
875 NOTE: http://www.codercorner.com/Opcode.htm
876
877 gimpact
878 - ode <unfixed> (embed)
879 NOTE: gimpact is not a package in debian, it is just embedded
880 NOTE: http://gimpact.sf.net
881
882 mochikit
883 - mahara <unfixed> (embed)
884 NOTE: they require extra patches, still unmerged upstream
885 - ntop <unfixed> (embed)
886 - coherence 0.6.2-1 (embed)
887 - paste <unfixed> (embed)
888 - turbogears <unfixed> (embed)
889 - plone3 <removed> (embed)
890 - xulrunner <unfixed> (embed)
891 - libjifty-plugin-chart-perl <unfixed> (embed)
892 - sabnzbdplus <unfixed> (embed)
893 - tgmochikit <unfixed> (embed)
894
895 prototypejs
896 - netbeans-ide 6.0.1+dfsg-2 (embed)
897 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
898 - webcit <unfixed> (embed; bug #555219)
899 - asterisk 1:1.6.2.0~rc3-1 (embed)
900 - libjson-ruby 1.1.4-1 (embed; bug #555224)
901 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
902 - horde3 <unfixed> (embed)
903 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
904 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
905 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
906 - ebug-http <unfixed> (embed; bug #555236)
907 - libaws 2.7-1 (embed; bug #555222)
908 - phpgedview <removed> (embed)
909 - poker-network 1.7.6-1 (embed; bug #555238)
910 - rails 2.1.0-6 (embed)
911 - wordpress 2.5.0-2 (embed; bug #555243)
912 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
913 TODO: search through all of the other zope packages
914 - ampache 3.4.1-2 (embed)
915 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
916 - hobix 0.5~svn20070319-4 (embed; bug #555247)
917 - zabbix 1.6.6-4 (embed; bug #555250)
918 - chora2 2.1.1+debian0-1 (embed; bug #555253)
919 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
920 - jscropperui 1.2.1-1 (embed; bug #555257)
921 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
922 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
923 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
924 - activeldap 1.2.1-1 (embed)
925 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
926 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
927 - otrs2 2.3.4-6 (embed; bug #555267)
928 - webcalendar 1.2~b1-2 (embed; bug #555269)
929 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
930 - jifty 0.90519-1 (embed; bug #555271)
931 - jquery 1.4-1 (embed; bug #555272)
932 - passenger 2.2.5debian1-1 (embed; bug #555273)
933 - plone3 <removed> (embed; bug #555275)
934 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
935 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
936 - xulrunner <unfixed> (embed)
937 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
938 - jclicmoodle <unfixed> (embed)
939 - git-cola <unfixed> (embed)
940
941 gdb
942 - insight <unfixed> (embed)
943
944 e2fsprogs
945 - ldiskfsprogs <unfixable> (fork)
946 - ia32-libs <removed> (embed)
947
948 quazip (not packaged in Debian)
949 - qcake <unfixed> (embed)
950 NOTE: starting with upstream version 0.6.4
951
952 exo
953 - pcmanfm <unfixed> (embed; bug #499677)
954 NOTE: slightly modified source code
955
956 xfce4-taskmanager
957 - lxtask <unfixed> (embed)
958 NOTE: old fork, maybe outdated
959
960 isync
961 - postler <unfixed> (embed; bug #628798)
962
963 java
964 - openjdk-6 <unfixed>
965 - sun-java5 <unfixed>
966 - sun-java6 <unfixed>
967
968 libphp-snoopy
969 - ampache 3.4.1-2 (embed; bug #504169)
970 - gforge 4.6.99+svn6094-2 (embed)
971 - mahara 1.0.5-2 (embed; bug #504170)
972 - pixelpost 1.7.1-5 (embed; bug #504171)
973 - mediamate 0.9.3.6-5 (embed; bug #504172)
974 - opendb <removed> (embed; bug #504173)
975 [etch] - opendb <unfixed> (embed; bug #504173)
976 - wordpress 2.5.1-9 (embed; bug #443948)
977 [etch] - phpgroupware <unfixed> (embed)
978 NOTE: phpgroupware-felamimail
979 - magpierss 0.72-3 (embed; bug #431089)
980
981 jquery
982 - jsonbot <unfixed> (embed; bug #625524)
983 - zekr <unfixed> (embed)
984 - wordpress <unknown> (embed)
985 - yocto-reader <unfixed> (embed)
986 - textpattern <unfixed> (embed)
987 - genshi 0.5.1-1 (embed)
988 NOTE: compressed file under examples/ dir
989 - prewikka <unfixed> (embed)
990 - libramaze-ruby <unfixed> (embed)
991 - drupal6 <unfixed> (embed)
992 - b2evolution <unfixed> (embed)
993 - wesnoth <unfixed> (embed)
994 - gammu 1.28.95-1 (embed)
995 - trac <unfixed> (embed; bug #645339)
996 - request-tracker4 <unfixed> (embed; bug #693821)
997 - otrs2 <unfixed> (embed)
998 NOTE: Embeds jquery 1.10
999 - cacti <unfixed> (embed)
1000 NOTE: Embeds jquery 1.10.2
1001
1002 jquery-goodies
1003 - horizon <unfixed> (embed)
1004 NOTE: jquery.cookie.js, jquery.table-sorter.js, jquery-ui.min.js
1005 - request-tracker4 <unfixed> (embed; bug #693821)
1006 NOTE: libjs-jquery-tablesorter
1007
1008 jqueryui
1009 - request-tracker4 <unfixed> (embed; bug #693821)
1010
1011 tablesorter (jquery plugin, not packaged yet)
1012 - wesnoth <unfixed> (embed)
1013
1014 kses
1015 - wordpress <unfixed> (embed; bug #504242)
1016 NOTE: their copy has all methods renamed to wp_<foo>
1017 NOTE: kses isn't in Debian, RFP: #504240
1018 - egroupware <unfixed> (embed)
1019
1020 magpierss
1021 - wordpress <unfixed> (embed; bug #504242)
1022
1023 php-gettext
1024 - wordpress 2.8.4-1 (embed; bug #504242)
1025 - docbookwiki <unfixed> (embed)
1026 - knowledgeroot 0.9.9.5-1
1027 NOTE: non-free
1028
1029 libphp-ixr (name may change, it is the Incutio XML-RPC)
1030 - wordpress <unfixed> (embed; bug #504242)
1031 NOTE: libphp-ixr isn't in Debian, RFP: #504236
1032 - dokuwiki <unfixed> (embed)
1033 - textpattern <unfixed> (embed)
1034
1035 libphp-cas
1036 - glpi 0.80.7-2 (embed)
1037 - moodle <unfixed> (embed; bug #505984)
1038
1039 scriptaculous (prototype.js is among the embeds in the following)
1040 - glpi <unfixed> (embed)
1041 - libaws <unfixed> (embed; bug #555222)
1042 - op-panel <unfixed> (embed)
1043 - symfony <unfixed> (embed)
1044 NOTE: maintainer says there are extra incompatible changes required
1045 - pixelpost 1.7.1-6 (embed)
1046 - webhelpers <unfixed> (embed)
1047 - qwik <removed> (embed; bug #555241)
1048 - smokeping <unfixed> (embed)
1049 - turba2 <unfixed> (embed)
1050 - typo3-src 4.2.3-1 (embed)
1051 - request-tracker3.6 <unfixed> (embed)
1052 - request-tracker3.8 <unfixed> (embed)
1053 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
1054 - wordpress 2.5.0-2 (embed)
1055 - libhtml-prototype-perl 1.48-3 (embed)
1056
1057 libmarkdown-php
1058 - pixelpost 1.7.1-6 (embed)
1059 NOTE: the markdown in Moodle is not the Markdown from this package
1060
1061 php-openid
1062 - wordpress-openid 3.3.2-1 (embed)
1063
1064 geshi
1065 - dokuwiki 0.0.20080505-3.1 (embed)
1066 - pgfouine 1.0-1.1 (embed)
1067 - websvn 2.1.0-1 (embed)
1068
1069 webcalendar
1070 - gforge 4.7~rc2-6 (embed; bug #504758)
1071
1072 libical
1073 - kdepim <unknown> (fork)
1074 NOTE: fixed at some point during 4.0
1075 - kdepimlibs 4.2.0-1 (fork)
1076 - claws-mail-extra-plugins <unfixed> (fork)
1077
1078 harfbuzz
1079 - qt4-x11 <unfixed> (embed)
1080 - pango1.0 1.36.0-1 (embed)
1081 - fontmatrix <unfixed> (embed)
1082
1083 libzip
1084 - php5 <unfixable> (modified-embed)
1085 - odt2txt <unfixed> (embed; bug #523808)
1086
1087 json.php (not packaged; should be replaced with php's built-in functions)
1088 - yui <unfixed>
1089 - gallery2 <unfixed>
1090 - dokuwiki <unfixed>
1091 - typo3-src <unfixed>
1092
1093 php-fpdf
1094 - tcpdf <itp> (fork)
1095 - phpwiki <unfixed>
1096 - egroupware <unfixed>
1097 - ldap-account-manager <unfixed> (fork)
1098
1099 tcpdf (itp: #495985)
1100 - moodle <unfixed>
1101 - phpmyadmin <unfixed>
1102 - collabtive <unfixed>
1103
1104 typo3
1105 - moodle <unfixed>
1106
1107 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1108 - moodle <unfixed>
1109 - gosa <unfixed>
1110
1111 php-ole (itp: #487558)
1112 - moodle <unfixed>
1113
1114 pieforms (http://www.catalyst.net.nz)
1115 - mahara <unfixed>
1116
1117 savant2 (http://phpsavant.com)
1118 - egroupware <unfixed>
1119
1120 rssparser (http://nwow.org)
1121 - egroupware <unfixed>
1122 - phpgroupware <unfixed>
1123
1124 lcms
1125 - openjdk-6 <unfixed> (fork)
1126 - gimp 2.4.0~rc2-2
1127 - ia32-libs <removed> (embed)
1128
1129 libphp-phplayersmenu
1130 - diogenes <unfixed>
1131 - phpldapadmin <unfixed>
1132
1133 libphp-pclzip
1134 - docvert <unfixed>
1135 - moodle 2.5.1-1
1136 - egroupware <unfixed>
1137
1138 libphp-simplepie
1139 - dokuwiki <unfixed>
1140 - wordpress <unfixed>
1141
1142 libphp-jpgraph
1143 - egroupware <unfixed>
1144
1145 libpng
1146 - doxygen 1.5.6-2 (embed)
1147 NOTE: Might be fixed earlier. Lenny version recorded.
1148 - gdal 1.5.2-3 (embed)
1149 NOTE: Might be fixed earlier. Lenny version recorded.
1150 - iceweasel <unfixed>
1151 NOTE: previous entry: - iceweasel <not-affected> (uses xulrunner)
1152 - icedove <unfixed>
1153 NOTE: previous entry: - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1154 - iceape 1.0.13~pre080614i-0etch1 (embed)
1155 - libfltk1.1 1.1.9-6 (embed)
1156 NOTE: Might be fixed earlier. Lenny version recorded.
1157 - libtk-img <unfixed> (embed; #732147)
1158 - htmldoc 1.8.27-3 (embed)
1159 NOTE: Might be fixed earlier. Lenny version recorded.
1160 - xulrunner 1.9.0.13-1 (embed)
1161 [lenny] - xulrunner 1.9.0.11-0lenny1
1162 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1163 - gamera 3.2.3-1 (embed)
1164 - freeimage <unfixed> (embed)
1165 - syslinux-common <unfixable> (embed)
1166 - tuxonice-userui <unfixed> (static)
1167 - texlive-bin <unfixed> (embed)
1168 [wheezy] - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1169 [squeeze] - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1170 NOTE: Might be fixed earlier. Lenny version recorded.
1171 - vice 1.22.dfsg1-0.1 (embed)
1172 NOTE: Might be fixed earlier. Lenny version recorded.
1173 - visualboyadvance 1.8.0-4 (embed)
1174 NOTE: Might be fixed earlier. Lenny version recorded.
1175 - ia32-libs <removed> (embed)
1176
1177 irssi
1178 - silc-client <unfixed> (embed)
1179 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1180
1181 extc
1182 - mtasc <unfixed> (embed)
1183 - haxe <unfixed> (embed)
1184
1185 swflib
1186 - mtasc <unfixed> (embed)
1187 - haxe <unfixed> (embed)
1188
1189 libitext-java
1190 - bouncycastle 2.1.4-1 (embed)
1191
1192 python-ply
1193 - pyke <unfixed> (embed; bug #555363)
1194 - pywbem 0.7.0-4 (embed; bug #555364)
1195 - sepolgen <unfixed> (embed; bug #555365)
1196 - zope-textindexng3 <unknown> (embed)
1197 - iceweasel <not-affected> (uses xulrunner)
1198 - xulrunner <unknown> (embed)
1199 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1200
1201 libdumbnet (libdnet upstream)
1202 - nmap <unfixed> (fork)
1203
1204 gcc-4.4
1205 - gcc-mingw32 <unfixed> (embed)
1206
1207 camlimages
1208 - advi <unfixed> (static; bug #550441)
1209
1210 memcached
1211 - memcachedb <unfixed> (embed)
1212
1213 yajl
1214 - argyll <unfixed> (embed; bug #544223)
1215 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1216 - lnav <unfixed> (embed; bug #724693)
1217
1218 nusoap
1219 - gforge 4.8.2-1 (embed)
1220 - ampache <unfixed> (embed)
1221 - poker-network <unfixed> (embed)
1222 - phpwiki <unfixed> (embed)
1223 - gallery2 <unfixed> (embed)
1224 - typo3-src <unfixed> (embed)
1225 - phpgacl 3.3.7-7 (embed)
1226 - mantis 1.1.8+dfsg-1 (embed)
1227
1228 libept
1229 - adept <unfixed> (embed; bug #540649)
1230
1231 libvorbis
1232 - iceweasel <not-affected> (uses xulrunner)
1233 - xulrunner <unfixed> (embed; bug #540959)
1234 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1235 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1236 - iceape <unfixed> (embed)
1237 [etch] - iceape <not-affected> (introduced in 2.0)
1238 [lenny] - iceape <not-affected> (introduced in 2.0)
1239 - ia32-libs <removed> (embed)
1240 - libvorbisidec <unfixed> (modified-embed)
1241
1242 cairo
1243 - iceweasel <not-affected> (uses xulrunner)
1244 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1245 - texlive-bin <unfixed> (embed)
1246
1247 liboggz
1248 - iceweasel <not-affected> (uses xulrunner)
1249 - xulrunner <unfixed> (embed; bug #540959)
1250 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1251 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1252 - iceape <unfixed> (embed)
1253 [etch] - iceape <not-affected> (introduced in 2.0)
1254 [lenny] - iceape <not-affected> (introduced in 2.0)
1255
1256 liboggplay
1257 - iceweasel <not-affected> (uses xulrunner)
1258 - xulrunner <unfixed> (embed; bug #540959)
1259 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1260 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1261 - iceape <unfixed> (embed)
1262 [etch] - iceape <not-affected> (introduced in 2.0)
1263 [lenny] - iceape <not-affected> (introduced in 2.0)
1264
1265 php-net-dnsbl
1266 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1267
1268 php-onyx-rss
1269 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1270
1271 php-text-wiki
1272 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1273
1274 php-xml-rpc
1275 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1276
1277 polarssl (does not have a shared library)
1278 - pdkim <itp> (embed; bug #543150)
1279 - xyssl <unfixed> (old-version)
1280
1281 pidgin (libpurple)
1282 - gaim <removed> (old-version)
1283 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1284 - wengophone <unfixed> (embed; bug #601425)
1285
1286 icu
1287 - webkit 1.0.1-1 (embed; bug #547214)
1288 - texlive-bin 2013.20130522.30620-1 (fork)
1289 NOTE: texlive upstream working with icu upstream to merge their changes
1290 - chromium-browser 5.0.375.29~r46008-3
1291
1292 cyrus-imapd-2.2
1293 - kolab-cyrus-imapd <unfixed> (fork)
1294 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1295
1296 python-cxx-dev
1297 - freecad 0.9.2646.3-1 (embed; bug #547936)
1298
1299 zipios++
1300 - freecad 0.9.2646.3-1 (embed; bug #547941)
1301 - enigma 0.92.3-3 (embed)
1302 NOTE: likely fixed earlier, marking etch's version as fixed
1303 - flightcrew <unfixed> (modified-embed)
1304
1305 linux-2.6
1306 - kvm <removed> (embed; bug #549973) [./kernel/*]
1307 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1308 - kernel-source-2.6.8 <removed> (old-version)
1309 - kernel-source-2.4.27 <removed> (old-version)
1310 - kernel-source-2.4.24 <removed> (old-version)
1311 - kernel-source-2.2.25 <removed> (old-version)
1312 - kernel-source-2.2.20 <removed> (old-version)
1313
1314 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1315 - kvm <removed> (embed) [./libfdt/*]
1316 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1317
1318 qweb (not packaged)
1319 - ajaxterm <unfixed>
1320
1321 opensaml2
1322 - opensaml <removed> (old-version)
1323
1324 shibboleth-sp2
1325 - shibboleth-sp <removed> (old-version)
1326
1327 tuxonice-userui
1328 - suspend2-userui <removed> (old-version)
1329
1330 expat
1331 - w3c-libwww <removed> (embed; bug #551941)
1332 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1333 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1334 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1335 - python2.4 <unfixable> (embed; bug #553403)
1336 - python2.6 2.6.6-4 (embed)
1337 - python2.7 2.7-6 (embed)
1338 - mcabber 0.10.0-1 (low; bug #601053)
1339 - python-4suite <unfixed> (embed; bug #516935)
1340 - wxwindows2.4 <removed> (embed)
1341 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1342 - wxwidgets2.8 2.8.10.1-2 (embed)
1343 - albert <unfixed> (embed; bug #600974)
1344 - celementtree 1.0.5-8 (embed)
1345 NOTE: Maybe that was fixed even earlier
1346 - centerim <unfixed> (embed; bug #559783)
1347 - audacity 1.3.2-1 (embed)
1348 - matanza <unfixed> (embed)
1349 - tdom 0.8.3~20080525-1 (embed)
1350 - udunits 2.1.8-4 (embed)
1351 - apr-util 1.2 (embed)
1352 - ayttm <unfxed> (embed; bug #561006)
1353 - cableswig <unfixed> (embed)
1354 - cadaver <unfixed> (embed)
1355 - cmake 2.6.0-6 (embed)
1356 - coin3 <unfixed> (embed)
1357 - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1358 NOTE: Might be fixed earlier. Lenny version recorded.
1359 - dasher 4.7.3-1 (embed)
1360 NOTE: Might be fixed earlier. Lenny version recorded.
1361 - emboss 6.3.1-1 (embed)
1362 - gdcm 2.0.14-2 (embed)
1363 - ghostscript 8.71~dfsg-2 (embed)
1364 - grmonitor <removed> (embed)
1365 - iceape <unfixed> (embed)
1366 - insighttoolkit 3.16.0-1 (embed)
1367 NOTE: insighttoolkit might've been fixed earlier
1368 - jabber 1.4.3-3.4 (embed)
1369 NOTE: Might be fixed earlier. Lenny version recorded.
1370 - libparagui1.1 1.0.2-1 (embed)
1371 - libspiff1 0.8.3-1 (embed)
1372 NOTE: Might be fixed earlier. Lenny version recorded.
1373 - paraview 3.6.2-1 (embed)
1374 - poco 1.3.6p1-1 (embed)
1375 - scorched3d 41.3dfsg-1+b1 (embed)
1376 NOTE: Might be fixed earlier. Lenny version recorded.
1377 - simgear <unfixed> (embed)
1378 - sitecopy 1:0.16.0-1
1379 - smart <unfixed> (embed)
1380 NOTE: smart embeds celementree, and it includes expat
1381 - swish-e <not-affected> (Linked against libxml, which is used instead)
1382 - tla 1.3.5+dfsg-15 (embed)
1383 - vtk 4.1.20030227-1 (embed)
1384 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1385 - xmlrpc-c <unfixed> (embed)
1386 - iceweasel <unfixed> (embed)
1387 - kompozer <unfixed> (embed)
1388 - vxl 1.13.0-2 (embed)
1389 - xulrunner <unfixed> (embed)
1390 - xmame 0.106-2.1 (embed)
1391 NOTE: Might be fixed earlier. Lenny version recorded.
1392 - apache2 2.2 (embed)
1393 - texlive-bin <not-affected> (Embedded code not compiled in)
1394 - vnc4 <unfixed> (embed)
1395 - xotcl 1.6.6-1 (embed)
1396 - chromium-browser 5.0.375.29~r46008-3
1397 - ia32-libs <removed> (embed)
1398
1399 xerces-c
1400 - xerces-c2 <unfixed> (old-version)
1401 - xerces27 <removed> (old-version)
1402
1403 md5 (RSA's version; not the gnu version provided by coreutils)
1404 - w3c-libwww <removed> (embed; bug #551942)
1405 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1406
1407 libparagui1.1
1408 - asc <unfixable> (fork)
1409
1410 enet
1411 - sauerbraten <unfixed> (embed; #497194)
1412
1413 eglibc
1414 - glibc <removed> (old-version)
1415 - mksh <unfixable> (static)
1416 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1417
1418 galib
1419 - gamera 3.2.3-1 (embed)
1420
1421 configobj
1422 - bzr <unfixed> (embed; bug #555336)
1423 - elisa <unfixed> (embed; bug #555337)
1424 - gaupol <unfixed> (embed; bug #555338)
1425 - ipython <unfixed> (embed; bug #555339)
1426 - pida <unfixed> (embed; bug #555340)
1427 - psychopy <unfixed> (embed; bug #555341)
1428 - rest2web <unfixed> (embed; bug #555342)
1429 - auth2db <unknown> (embed)
1430 - dynagen <unknown> (embed)
1431 - iceweasel <unknown> (embed)
1432 - sabnzbdplus <unknown> (embed)
1433 - xulrunner <unknown> (embed)
1434 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1435
1436 python-clientform
1437 - bibus <unfixed> (embed; bug #555332)
1438 - zope2.10 <removed> (embed; bug #555333)
1439 - zope2.11 <removed> (embed; bug #555334)
1440 - python-mechanize <unknown> (embed)
1441 - twill <unknown> (embed)
1442
1443 python-mechanize
1444 - zope2.10 <removed> (embed; bug #555357)
1445 - zope2.11 <removed> (embed; bug #555358)
1446 - twill <unknown> (embed; bug #555339)
1447
1448 pexpect
1449 - duplicity 0.6.06-1 (embed; bug #555359)
1450 - hplip <unfixed> (embed; bug #555361)
1451 - smart <unfixed> (embed; bug #555362)
1452
1453 pyparsing
1454 - bauble <unfixed> (embed; bug #555366)
1455 - boa-constructor 0.6.1-8 (embed; bug #555367)
1456 - calibre <unfixed> (embed; bug #555368)
1457 - matplotlib 1.3.0-1 (embed; bug #531024; bug #555369)
1458 - zhpy 1.7.3.1-1 (embed; bug #555370)
1459 - polybori <unknown> (embed)
1460 - python-whoosh <unknown> (embed)
1461 - twill <unknown> (embed)
1462 - zope-textindexng3 <unknown> (embed)
1463
1464 python-pysqlite2
1465 - python2.4 <unfixed> (embed; bug #553403)
1466 - python2.5 <unfixed> (embed; bug #553403)
1467
1468 celementtree
1469 - python2.5 <unfixed> (embed)
1470 - smart <unfixed> (embed)
1471
1472 elementtree
1473 - python2.5 <unfixed> (embed)
1474 - python2.6 <unfixed> (embed)
1475 - bzr <unfixed> (embed; bug #555343)
1476 - gedit 2.28.2-1 (embed; bug #555344)
1477 - smart <unfixed> (embed)
1478 - solfege <unfixed> (embed; bug #555345)
1479 - w3af <unfixed> (embed; bug #555346)
1480 - python-qt4 <unknown> (embed)
1481 - sphinx <unknown> (embed)
1482 - python-nltk <itp> (embed)
1483
1484 python2.5
1485 - python2.4 <unfixed> (old-version)
1486 - jython <unfixed> (embed)
1487 NOTE: embeds many stdlib modules
1488 - python-django <unfixed> (embed; bug #555419)
1489 NOTE: embeds stdlib modules: doctest, decimal
1490 - gamera 3.2.3-1 (embed)
1491 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1492 - boa-constructor <unfixed> (embed; bug #555426)
1493 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1494 - nicotine <unfixed> (embed; bug #555427)
1495 NOTE: embeds stdlib modules: ConfigParser
1496 - museek+ <unfixed> (embed; bug #555428)
1497 NOTE: embeds stdlib modules: ConfigParser
1498 - vegastrike-data <removed> (embed)
1499 NOTE: embeds many stdlib modules
1500 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1501 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1502 - config-manager <unfixed> (embed; bug #555423)
1503 NOTE: embeds stdlib modules: optparse
1504 - jhbuild 2.28.0-1 (embed; bug #555421)
1505 NOTE: embeds stdlib modules: optparse, subprocess
1506 - smart <unfixed> (embed; bug #555432)
1507 NOTE: embeds stdlib modules: optparse
1508 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1509 NOTE: embeds stdlib modules: doctest
1510 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1511 NOTE: embeds stdlib modules: doctest
1512 - distribute <unfixed> (embed)
1513 NOTE: embeds stdlib modules: doctest
1514 - python-setuptools <unfixed> (embed; bug #555435)
1515 NOTE: embeds stdlib modules: doctest
1516 - zope.testing <unfixed> (embed; bug #555436)
1517 NOTE: embeds stdlib modules: doctest
1518 - translate-toolkit <unfixed> (embed; bug #555422)
1519 NOTE: embeds stdlib modules: textwrap, contextlib
1520 - libtpclient-py <unfixed> (embed; bug #555424)
1521 NOTE: embeds stdlib modules: subprocess
1522 - grass <unfixed> (embed; bug #555425)
1523 NOTE: embeds stdlib modules: subprocess
1524 - coherence <unfixed> (embed; bug #555429)
1525 NOTE: embeds stdlib modules: uuid
1526 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1527 NOTE: embeds stdlib modules: uuid
1528 - setroubleshoot <removed> (embed; bug #555431)
1529 NOTE: embeds stdlib modules: uuid
1530 - linkchecker <unfixed> (embed; bug #555414)
1531 NOTE: embeds msgfmt.py script
1532 - imdbpy <unfixed> (embed)
1533 NOTE: embeds msgfmt.py script
1534 - kiwi <unfixed> (embed)
1535 NOTE: embeds msgfmt.py script
1536 - moin <unfixed> (embed)
1537 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1538 - plone3 <removed> (embed)
1539 NOTE: embeds msgfmt.py script
1540 - roundup <unfixed> (embed)
1541 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1542 - rednotebook <unfixed> (embed; bug #555415)
1543 NOTE: embeds msgfmt.py script
1544 - turbogears <unfixed> (embed)
1545 NOTE: embeds msgfmt.py script
1546 - elisa <unfixed> (embed)
1547 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1548 - calibre <unfixed> (embed)
1549 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1550 - mailman 1:2.1.13-1 (embed; #555416)
1551 NOTE: embeds msgfmt.py script
1552 - python-docutils <unknown> (embed)
1553 NOTE: embeds stdlib modules: optparse, textwrap
1554 - python-imaging <unknown> (embed)
1555 NOTE: embeds stdlib modules: doctest
1556 - python-mechanize <unknown> (embed)
1557 NOTE: embeds stdlib modules: doctest
1558 - twill <unknown> (embed)
1559 NOTE: embeds stdlib modules: subprocess
1560 - zeroc-ice <unknown> (embed)
1561 NOTE: embeds stdlib modules: subprocess
1562 - wxwidgets2.8 <unknown> (embed)
1563 NOTE: embeds stdlib modules: subprocess
1564 - cycle <unknown> (embed)
1565 NOTE: embeds msgfmt.py script
1566 - deluge <unknown> (embed)
1567 NOTE: embeds msgfmt.py script
1568 - opendict <unknown> (embed)
1569 NOTE: embeds msgfmt.py script
1570 - openerp-client <unknown> (embed)
1571 NOTE: embeds msgfmt.py script
1572 - rapidsvn <unknown> (embed)
1573 NOTE: embeds msgfmt.py script
1574 - wammu <unknown> (embed)
1575 NOTE: embeds msgfmt.py script
1576 - gaphor <unknown> (embed)
1577 NOTE: embeds msgfmt.py script
1578 - pida <unknown> (embed)
1579 NOTE: embeds msgfmt.py script
1580 - python-formencode <unknown> (embed)
1581 NOTE: embeds msgfmt.py script
1582 - duplicity <unfixed> (embed)
1583 NOTE: embeds stdlib module: urlparse, tarfile
1584 - pygopherd <unfixed> (embed)
1585 NOTE: embeds stdlib module: zipfile
1586 - sphinx <unfixed> (embed; bug #609485)
1587 NOTE: embeds only lib2to3.pgen2 in sphinx.pycode.pygen2
1588 - vegastrike-data <removed> (embed; bug #555630)
1589
1590 argparse
1591 - twill <unfixed> (embed; bug #555347)
1592 - ipython <unfixed> (embed; bug #555348)
1593
1594 coherence
1595 - elisa <unfixed> (embed; bug #555335)
1596
1597 simpletal
1598 - plastex <unfixed> (embed; bug #555371)
1599
1600 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1601 - postr <unfixed> (embed)
1602 - elisa <unfixed> (embed)
1603
1604 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1605 - apertium-tolk <unfixed> (embed)
1606 - ipython <unfixed> (embed)
1607 - virtaal <unfixed> (embed)
1608
1609 distribute
1610 - setuptools <removed> (old-version)
1611
1612 rails
1613 - jruby1.2 <removed> (embed) [./bench/rails/*]
1614 NOTE: jruby is in non-free, it probably includes rails too
1615 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1616 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1617 - thin <unfixed> (embed) [./spec/rails_app/*]
1618 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1619 NOTE: be dangerous if developers are naively basing their code off of the examples
1620 NOTE: prototype.js is among the example files
1621
1622 lucene2 (prototype.js is among the embeds in the following)
1623 - lucene <unfixed> (old-version)
1624 - pylucene <unfixed> (embed)
1625 - libpdfbox-java <unfixed> (embed)
1626 - libfontbox-java <unfixed> (embed)
1627 - libjempbox-java <unfixed> (embed)
1628 - solr <unfixed> (embed)
1629
1630 unicode-data
1631 - syslinux <unfixed> (embed)
1632 - camomile <unfixed> (embed)
1633 - chromium-browser <unfixed> (embed)
1634 - cyrus-imapd-2.4 <unfixed> (embed)
1635 - dovecot <unfixed> (embed)
1636 - emacs24 <unfixed> (embed)
1637 - fribidi <unfixed> (embed)
1638 - m17n-db <unfixed> (embed)
1639 - sbcl <unfixed> (embed)
1640 - grub2 <unfixed> (embed)
1641 - haskell-hxt-charproperties <unfixed> (embed)
1642 - heimdal <unfixed> (embed)
1643 - icu <unfixed> (embed)
1644 - icu4j-4.4 <unfixed> (embed)
1645 - icu4j <unfixed> (embed)
1646 - icedove <unfixed> (embed)
1647 - iceweasel <unfixed> (embed)
1648 - ikarus <unfixed> (embed)
1649 - jython <unfixed> (embed)
1650 - krb5 <unfixed> (embed)
1651 - moodle <unfixed> (embed)
1652 - mozc <unfixed> (embed)
1653 - mozjs17 <unfixed> (embed)
1654 - mozjs24 <unfixed> (embed)
1655 - openldap <unfixed> (embed)
1656 - openocd <unfixed> (embed)
1657 - perl <unfixed> (embed)
1658 - pike7.6 <removed> (embed)
1659 - pike7.8 <unfixed> (embed)
1660 - qtbase-opensource-src <unfixed> (embed)
1661 - samba <unfixed> (embed)
1662 - samba4 <unfixed> (embed)
1663 - cmucl <unfixed> (embed)
1664 - typo3-src <unfixed> (embed)
1665 - mauve <unfixed> (embed)
1666 - texlive-bin <unfixed> (embed)
1667 - ypsilon <removed> (embed)
1668 - jeuclid <unfixed> (embed)
1669 - charmap.app <unfixed> (embed)
1670 - clisp <unfixed> (embed)
1671 - gnulib <unfixed> (embed)
1672 - opensrs-client <unfixed> (embed)
1673 - saxonb <unfixed> (embed)
1674 - rails <unfixed> (embed)
1675 - scheme48 <unfixed> (embed)
1676 - slang2 <unfixed> (embed)
1677 - sqlcipher <unfixed> (embed)
1678 - sqlite3 <unfixed> (embed)
1679 - unorm.js <unfixed> (embed)
1680 - wine-gecko-2.21 <unfixed> (embed)
1681 - wine-gecko-2.24 <unfixed> (embed)
1682 - xapian-core <unfixed> (embed)
1683 - boost1.49 <unfixed> (embed)
1684 - boost1.54 <unfixed> (embed; bug #751880)
1685 - boost1.55 <unfixed> (embed; bug #751881)
1686
1687 feedparser
1688 - rawdog 2.19-1 (embed; bug #383422)
1689 [wheezy] - rawdog <unfixed> (modified-embed)
1690 - miro <unfixed> (embed; bug #555351)
1691 - calibre <unfixed> (embed; bug #555352)
1692 - freevo <unfixed> (embed; bug #555353)
1693 - pida <unfixed> (embed; bug #555354)
1694 - planet-venus <unfixed> (embed; bug #555355)
1695 - plone3 <removed> (embed; bug #555356)
1696 - exaile 0.2.14+debian-1 (embed)
1697 - screenlets 0.1.2-3 (embed)
1698 NOTE: included twice
1699
1700 agg:
1701 - matplotlib <unfixed> (embed: bug #377271)
1702 - contextfree <unfixed> (embed)
1703 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1704 - exactimage <unfixed> (embed)
1705 - python-enable <unfixed> (embed)
1706 - mapnik 0.5.1-3 (embed)
1707 NOTE: links statically to agg, but shared library is not available (bug #377271)
1708
1709 vtk
1710 - paraview <unfixable> (embed; bug #495426)
1711 - libmesh <unfixed>
1712 NOTE: embeds exodus; not sure if there's a version external to vtk
1713
1714 txt2tags
1715 - rednotebook <unfixed> (embed)
1716
1717 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1718 - gajim <unfixed> (embed)
1719 - emesene <unfixed> (embed)
1720 - convirt <unfixed> (embed)
1721 - pida <unfixed> (embed)
1722 - rednotebook <unfixed> (embed)
1723
1724 horde3 (prototype.js is among the embeds in the following)
1725 - mnemo2 <unfixed> (embed)
1726 - nag2 <unfixed> (embed)
1727 - wordpress <unfixed> (embed)
1728 NOTE: Text_Diff (wp-includes/Text/Diff*)
1729
1730 cimg
1731 - gmic <unfixed> (embed)
1732
1733 mootools
1734 - kdenetwork <unfixed> (embed)
1735 - gallery <unfixed> (embed)
1736 - jspwiki <unfixed> (embed)
1737 - vdr-plugin-live <unfixed> (embed)
1738 - perl-doc-html <unfixed> (embed)
1739
1740 openldap
1741 - openldap2.3 <removed> (old-version)
1742 - ia32-libs <removed> (embed)
1743
1744 grub2
1745 - grub <unfixed> (old-version)
1746
1747 gnupginterface
1748 - duplicity <unfixed> (embed)
1749
1750 python-dateutil
1751 - awn-extras-applets <unfixed> (embed)
1752 - matplotlib <unknown> (embed)
1753
1754 cups
1755 - cupsys <removed> (old-version)
1756 - ia32-libs <removed> (embed)
1757
1758 yui
1759 - bcfg2 <not-affected> (present in source but not included in any binary files)
1760 - serendipity 1.5.3-1 (embed; bug #557746)
1761 - moodle <unfixed> (embed)
1762 - jifty 0.91117-1 (embed; bug #557748)
1763 - webgui 7.7.26-1 (embed)
1764 - loggerhead 1.17-1 (embed)
1765 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1766
1767 quake3 (vanilla source not packaged in debian)
1768 - openarena <unfixable> (fork)
1769
1770 quake2 (vanilla source not packaged in debian)
1771 - alien-arena <unfixable> (fork)
1772 - warsow <unfixable> (fork)
1773
1774 quake (vanilla source not packaged in debian)
1775 - darkplaces <unfixable> (fork)
1776 - quakespasm <unfixable> (fork)
1777 - nexuiz 2.5.2+dp-1 (old-version)
1778 NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1779
1780 libtheora
1781 - iceweasel <not-affected> (uses xulrunner)
1782 - xulrunner <unfixed> (embed; bug #540959)
1783 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1784 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1785 - iceape <unfixed> (embed; bug #559276)
1786 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1787 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1788
1789 dtoa
1790 - bfilter <unfixed> (embed)
1791 - cacao <removed> (embed)
1792 - cdrdao <unfixed> (embed)
1793 - classpath <unfixed> (embed)
1794 - freej <unfixed> (embed)
1795 - iceape <unfixed> (embed)
1796 - iceweasel <unfixed> (embed)
1797 - jscoverage <unfixed> (embed)
1798 - kde4libs <unfixed> (embed)
1799 - kdelibs <unfixed> (embed)
1800 - kompozer <unfixed> (embed)
1801 - libv8 <unfixed> (embed)
1802 - mono <unfixed> (embed)
1803 - newlib <unfixed> (embed)
1804 - nspr <unfixed> (embed)
1805 - php5 <unfixed> (embed)
1806 - polyml <unfixed> (embed)
1807 - qt4-x11 <unfixed> (embed)
1808 - rhino <unfixed> (embed)
1809 NOTE: code translated to Java
1810 - ruby1.8 <removed> (embed)
1811 - ruby1.9 <unfixed> (embed)
1812 - ruby1.9.1 <removed> (embed)
1813 - sdd <unfixed> (embed)
1814 - sfind <unfixed> (embed)
1815 - star <unfixed> (embed)
1816 - tinymux <unfixed> (embed)
1817 - virtualbox-ose <unfixed> (embed)
1818 - webkit <unfixed> (embed)
1819 - xulrunner <unfixed> (embed)
1820
1821 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1822 - firegpg <unfixed> (embed)
1823 - enigmail <unfixed> (embed)
1824
1825 ptmalloc (not packaged in Debian)
1826 - crystalspace <unfixed> (embed)
1827 - qt4-x11 <unfixed> (embed)
1828
1829 svgalib
1830 - usplash <unfixed> (embed)
1831 - ia32-libs <removed> (embed)
1832
1833 bogl
1834 - usplash <unfixed> (embed)
1835
1836 taglist
1837 - usplash <unfixed> (embed)
1838
1839 portaudio
1840 - audacity <unfixed> (embed; bug #323711)
1841
1842 nyquist
1843 - audacity <unfixed> (embed)
1844 NOTE: embeds a forked nyquist with support for a shared library
1845
1846 vamp-plugin-sdk
1847 - audacity <unfixed> (embed)
1848
1849 wordpress
1850 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1851 - wordpress-mu <removed> (fork)
1852
1853 php5
1854 - php4 <removed> (old-version)
1855
1856 classpath
1857 - libgnucrypto-java <removed> (embed; bug #559788)
1858
1859 libtool
1860 - apr <unfixed> (static; bug #489625)
1861 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1862 - arts <unfixed> (embed)
1863 - bochs 2.4.2-1 (embed; bug #560884)
1864 - camserv <unfixed> (embed)
1865 - collectd 4.8.2-1 (embed)
1866 - courier-authlib 0.58-4 (embed)
1867 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1868 - cvsnt 2.5.04.3236-1.2 (embed)
1869 - dico <not-affected> (Uses the system copy of ltdl)
1870 - freeradius 0.1+20010527-1 (embed)
1871 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1872 - ggobi 2.1.9~20091212-1 (embed)
1873 - glame 2.0.1-4 (embed)
1874 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1875 - gnash 0.8.7-2 (embed)
1876 - gnu-smalltalk <unfixed> (embed; bug #566777)
1877 - google-gadgets 0.10.5-0.3 (embed)
1878 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1879 - graphicsmagick 1.3.5-6 (embed)
1880 - graphviz 2.8-3 (embed)
1881 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1882 - guile-1.6 1.6.8-7 (embed)
1883 - hamlib 1.2.11-1 (embed)
1884 - hercules 3.06-1.2 (embed)
1885 - jags 1.0.4-3 (embed; bug #560864)
1886 - kdelibs <unfixed> (embed)
1887 - libannodex <removed> (embed)
1888 - libextractor 0.5.23+dfsg-4 (embed)
1889 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1890 - libtunepimp 0.5.3-7.3 (embed)
1891 - mp4h 1.3.1-4.1 (Contains source code, but is compiled with --without-included-ltdl)
1892 - naim <removed> (embed)
1893 - parser-mysql <unfixed> (embed)
1894 - pinball 0.3.1-11 (embed)
1895 - redland <unfixed> (embed)
1896 - siproxd 1:0.8.1-2 (embed; bug #657070)
1897 - ski <unfixed> (embed)
1898 - synfig 0.62.00-1 (embed)
1899 - unixodbc 2.2.4-5 (embed)
1900 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1901 - clamav 0.95+dfsg-1 (embed)
1902 - imagemagick 6:6.2.3.1-1 (embed)
1903 - hypre 2.4.0b-5 (embed)
1904 - lam <unfixed> (embed)
1905 - openmpi <unfixable> (embed; bug #559386)
1906 - parser <unfixed> (embed)
1907 - pdsh 2.18-5 (embed; bug #560892)
1908 - sbnc 1.2-8 (embed)
1909 - sdcc <unfixed> (embed)
1910 - wml 2.0.11ds2-1 (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1911 - proftpd-dfsg <unfixed> (embed; bug #561748)
1912 - babel 1.4.0.dfsg-5 (embed)
1913 - libprelude 0.9.14-2 (embed)
1914 - heartbeat 2.1.4-7 (embed)
1915 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1916 NOTE: might've been fixed earlier
1917 - gcc-* <unknown> (embed)
1918 - ia32-libs <removed> (embed)
1919
1920 ocamlgsl
1921 - orpie 1.5.1-7.1 (embed; bug #550058)
1922
1923 xdotool
1924 - keynav <unfixed> (embed; bug #560103)
1925
1926 bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1927 - supertuxkart <unfixed> (embed)
1928 - blender <unfixed> (embed)
1929 - critterding <unfixed> (embed)
1930 NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1931
1932 ghostscript
1933 - gs-gpl <removed> (old-version)
1934
1935 icedove
1936 - thunderbird <removed> (old-version)
1937
1938 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1939 - jquery <unfixed> (embed)
1940
1941 sed
1942 - ssed <unfixed> (fork)
1943
1944 phpatomlib (http://code.google.com/p/phpatomlib)
1945 - wordpress <unfixed> (embed)
1946
1947 Services_JSON (http://pear.php.net/package/Services_JSON)
1948 - wordpress <unfixed> (embed)
1949
1950 phpass (http://www.openwall.com/phpass/)
1951 - gallery2 <unfixed> (embed)
1952 - wordpress <unfixed> (embed)
1953 - typo3-src <unfixed> (modified-embed)
1954 NOTE: file refers to drupal, maybe there's a copy somewhere there
1955 NOTE: a copyright owner search didn't match anything
1956 - libauthen-passphrase-perl <unfixable> (fork)
1957 NOTE: perl implementation of phpass
1958 - phpbb3 <unfixed>
1959 NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1960
1961 squirrelmail
1962 - wordpress <unfixed> (embed)
1963 NOTE: class-pop3.php
1964
1965 ezSQL (http://www.woyano.com/jv/ezsql)
1966 - wordpress <unfixable> (fork)
1967 NOTE: wp-db.php
1968
1969 Diff.php (Clay Loveless' version/killersoft.com)
1970 - php-versioncontrol-svn <unfixed>
1971
1972 libm (provided by libc)
1973 - spring <unfixed> (embed)
1974 NOTE: embedded by embedded copy of streflop
1975 - megaglest <unfixed> (embed)
1976 NOTE: embedded by embedded copy of streflop
1977 - aide <unfixed> (static)
1978 - busybox <unfixed> (static)
1979 - mindi-busybox <unfixed> (static)
1980 - qemu <unfixed> (static)
1981 NOTE: qemu-user-static
1982 - tuxonice-userui <unfixed> (static)
1983 - zsh <unfixed> (static)
1984 NOTE: zsh-static
1985 - tripwire <unfixed>
1986
1987 streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1988 - spring <unfixed> (modified-embed)
1989 NOTE: old, modified version of streflop
1990 - megaglest <unfixed> (modified-embed)
1991 NOTE: megaglest uses the same streflop code as spring
1992
1993 minizip
1994 - spring <unfixed> (embed)
1995 - libkml <unfixed> (modified-embed; bug #753069)
1996 - samba <unfixed> (embed)
1997 NOTE: didn't check whether it's used
1998 - zlib <unfixed> (embed; bug #753070)
1999 NOTE: only used to build minizip and miniunzip in zlib-bin package
2000 - virtuoso-opensource <unfixed> (embed)
2001 NOTE: didn't check whether it's used
2002 - luatex <unfixed> (embed)
2003 NOTE: didn't check whether it's used
2004 - tcl8.6 <unfixed> (embed)
2005 NOTE: didn't check whether it's used
2006 - chromium-browser <unfixed> (embed)
2007 - perl-tk <unfixed> (embed)
2008 NOTE: didn't check whether it's used
2009 - icedove <unfixed> (modified-embed)
2010 NOTE: didn't check whether it's used
2011 - ace <unfixed> (embed)
2012 NOTE: didn't check whether it's used
2013 - smplayer <unfixed> (embed)
2014 NOTE: didn't check whether it's used
2015 - povray <unfixed> (embed)
2016 NOTE: didn't check whether it's used
2017 - cegui-mk2 <unfixed> (embed)
2018 NOTE: didn't check whether it's used
2019 - freemat <unfixed> (embed)
2020 NOTE: didn't check whether it's used
2021 - funtools <unfixed> (embed)
2022 NOTE: didn't check whether it's used
2023 - tntnet <unfixed> (embed)
2024 NOTE: didn't check whether it's used
2025 - orthanc <unfixed> (embed)
2026 NOTE: didn't check whether it's used
2027 - instead <unfixed> (embed)
2028 NOTE: didn't check whether it's used
2029 - mupen64plus-core <unfixed> (embed)
2030 NOTE: didn't check whether it's used
2031 - sks-ecc <unfixed> (embed)
2032 NOTE: didn't check whether it's used
2033 - psi <unfixed> (embed)
2034 NOTE: didn't check whether it's used
2035 - fossil <unfixed> (embed)
2036 NOTE: didn't check whether it's used
2037 - wordgrinder <unfixed> (embed)
2038 NOTE: didn't check whether it's used
2039 - critcl <unfixed> (embed)
2040 NOTE: didn't check whether it's used
2041 - fceux <unfixed> (embed)
2042 NOTE: didn't check whether it's used
2043
2044 oscpack
2045 - spring <unfixed> (embed)
2046
2047 hpiutil2
2048 - spring <unfixed> (embed)
2049
2050 p7zip
2051 - spring <unfixed> (embed)
2052
2053 pythonqt (doesn't seem to be python-qtN, unknown source)
2054 - fontmatrix <unfixed> (embed)
2055 - elmerfem <unfixed> (embed)
2056
2057 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
2058 - docvert <unfixed> (embed)
2059 - jifty <unfixed> (embed)
2060 - kdenetwork <unfixed> (embed)
2061 - mediatomb <unfixed> (embed)
2062 - plastex <unfixed> (embed)
2063 - plone3 <removed> (embed)
2064 - python-chaco <unfixed> (embed)
2065 - python-docutils <unfixed> (embed)
2066 - s5 <unfixed> (embed)
2067 - zope2.10 <unfixed> (embed)
2068 - zope2.11 <removed> (embed)
2069 - cython <not-affcted> (embed)
2070 NOTE: part of documentation, which is not installed into the binary package
2071
2072 python-docutils
2073 - zope2.10 <unfixed> (embed)
2074 - zope2.11 <removed> (embed)
2075
2076 tesseract
2077 - ocropus <unfixed> (static)
2078
2079 antlr
2080 - kdevelop <unfixed> (embed)
2081
2082 libxerces2
2083 - openjdk-6 <unfixed> (embed)
2084
2085 kfreebsd-8
2086 - kfreebsd-7 <unfixed> (old-version)
2087 - kfreebsd-6 <removed> (old-version)
2088
2089 ruby1.9.1
2090 - ruby1.9 <unfixed> (old-version)
2091 - ruby1.8 <removed> (old-version)
2092
2093 maildrop
2094 - courier <unfixed> (embed) [./maildrop]
2095
2096 glee
2097 - warzone2100 <not-affected> (embed)
2098 - love 0.8.0-2 (embed; bug #690492)
2099
2100 phing
2101 - symfony <unfixed> (embed)
2102
2103 pake
2104 - symfony <unfixed> (embed)
2105
2106 propel
2107 - symfony <unfixed> (embed)
2108
2109 creole
2110 - symfony <unfixed> (embed)
2111
2112 hfsutils
2113 - cdrkit <unfixed> (embed; bug #570187)
2114 NOTE: embeds hfsutils code in genisoimage
2115
2116 cdrkit
2117 - grub2 <unfixed> (embed; bug #570156)
2118 NOTE: genisoimage imported into grub-mkisofs
2119
2120 kdebase-workspace
2121 - kdebase <unfixed> (old-version)
2122
2123 file
2124 - php5 <unfixable> (modified-embed)
2125 [lenny] - php5 <not-affected>
2126 - radare2 <unfixed> (embed)
2127 TODO: check if embed, modfied-embed or old-version
2128 - sleuthkit <unfixed> (embed)
2129 TODO: check if used
2130
2131 cdb
2132 - php5 <unfixed> (embed)
2133
2134 libmbfl (itp: #570708)
2135 - php5 <unfixed> (embed)
2136 NOTE: PHP is actually the current upstream, ITP is of that code
2137
2138 libonig
2139 - php5 5.3.2-1 (embed)
2140
2141 xmlrpc-epi
2142 - php5 <unfixed> (embed)
2143
2144 swt-gtk
2145 - eclipse <unfixed> (embed; bug #538808)
2146
2147 txt2html
2148 - wml 2.0.11ds2-1 (embed)
2149
2150 ca-certificates
2151 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
2152
2153 openexr
2154 - freeimage <unfixed> (embed)
2155
2156 libmng
2157 - freeimage <unfixed> (embed)
2158
2159 openjpeg
2160 - freeimage <unfixed> (embed)
2161
2162 libjpeg6b
2163 - freeimage <unfixed> (embed)
2164 - ia32-libs <removed> (embed)
2165
2166 libjpeg (don't know what exact version)
2167 - dcmtk <unfixed>
2168 - gdcm <unfixed>
2169 - insighttoolkit <unfixed>
2170 - openarena 0.8.5-5+exp1 (bug #495966)
2171 - outguess <unfixed>
2172 - squeak-vm <unfixed> (embed)
2173 - tremulous <unfixed>
2174 - tuxonice-userui <unfixed> (static)
2175 - fpc <unfixed> (static)
2176 - lazarus <unfixed> (static)
2177 NOTE: inherited from fpc, see #472304
2178 - mseide-msegui <unfixed> (static)
2179 NOTE: inherited from fpc, see #472304
2180 - easymp3gain <unfixed> (static)
2181 NOTE: inherited from fpc, see #472304
2182 - winff <unfixed> (static)
2183 NOTE: inherited from fpc, see #472304
2184 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2185 - ghostscript 8.64~dfsg-2 (embed)
2186
2187 lxr
2188 - lxr-cvs <unfixed> (embed)
2189
2190 libfile-copy-recursive-perl
2191 - r-base <unfixed> (embed; bug #577427)
2192 - r-base-core-ra <unfixed> (embed; bug #577429)
2193
2194 delimmatch
2195 - r-base <unfixed> (embed; bug #577433)
2196 - r-base-core-ra <unfixed> (embed; bug #577434)
2197
2198 libsmf (ITP: #572558)
2199 - denemo <unfixed> (embed)
2200 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2201
2202 libselinux
2203 - dpkg 1.15.6 (static)
2204 - ia32-libs <removed> (embed)
2205
2206 xinha (ITP: #479708)
2207 - horde3 <unfixed>
2208 - serendipity <unfixed>
2209 - openacs <unfixed>
2210 - dotlrn <unfixed>
2211
2212 dvipng
2213 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2214
2215 dvipdfmx
2216 - texlive-bin <unfixed> (embed)
2217 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2218
2219 lcdf-typetools
2220 - texlive-bin 2009-1 (embed)
2221
2222 tex4ht
2223 - texlive-bin 2009-1 (embed)
2224
2225 freetype
2226 - texlive-bin 2009-1 (embed)
2227 - ia32-libs <removed> (embed)
2228
2229 freetype2
2230 - texlive-bin <unfixed> (embed)
2231 [wheezy] - texlive-bin 2009-1 (embed)
2232 [squeeze] - texlive-bin 2009-1 (embed)
2233 - tuxonice-userui <unknown> (static)
2234 - instantbird <removed>
2235 - qt4-x11 <unknown> (embed)
2236 - vtk <unknown> (embed)
2237 - paraview <unknown> (embed)
2238 NOTE: from embedded copy of vtk
2239
2240 silgraphite
2241 - texlive-bin <unfixed> (embed)
2242
2243 unzip
2244 - texlive-bin 2009-1 (embed)
2245
2246 jbig2dec
2247 - ghostscript 8.71~dfsg2-1 (embed)
2248
2249 libxml2
2250 - chromium-browser 5.0.375.29~r46008-1
2251 - ia32-libs <removed> (embed)
2252
2253 protobuf
2254 - chromium-browser 5.0.375.70~r48679-2
2255
2256 libv8
2257 - chromium-browser 5.0.375.38~r46659-1
2258 - mongodb <not-affected>
2259 NOTE: builds against system copy
2260
2261 nspr
2262 - chromium-browser 5.0.375.29~r46008-3
2263 - ia32-libs <removed> (embed)
2264 - virtualbox <unfixed> (modified-embed)
2265
2266 yasm
2267 - chromium-browser 5.0.375.29~r46008-2
2268
2269 libxslt
2270 - chromium-browser 5.0.375.29~r46008-1
2271 - ia32-libs <removed> (embed)
2272
2273 miniupnpc
2274 - warzone2100 2.3.7-2
2275 NOTE: code still present in tarball but removed during build and unused
2276 - vino 3.2.2-1
2277 NOTE: code still present in tarball but removed during build and unused
2278 - vidalia 0.2.21-2 <unfixed> (old-version)
2279 NOTE: embedded old version might be modified
2280 - vidalia 0.2.21-3 <not-affected> (old-version)
2281 NOTE: code still present in tarball but unused during build
2282
2283 iniparser (not packaged in Debian; RFP bug #582657)
2284 - warzone2100 <unfixed> (modified-embed)
2285
2286 pyglet
2287 - sympy <unfixed> (embed; bug #459716)
2288
2289 mpmath
2290 - sympy <unfixed> (embed; bug #541746)
2291
2292 openssh
2293 - libpam-ssh <unfixed> (embed; bug #598522)
2294
2295 curl
2296 - cmake 2.6.0-6 (embed)
2297 NOTE: Might be fixed earlier. Lenny version recorded.
2298 - criticalmass <unfixed> (static; bug #599061)
2299 - wengophone 2.1.0~beta1-svn9983-1 (embed)
2300 - ia32-libs <removed> (embed)
2301
2302 lib3ds
2303 - boson <unfixed> (embed; bug #600900)
2304 - openscenegraph <unfixed> (embed; bug #601181)
2305
2306 xcftools
2307 - gnome-xcf-thumbnailer <unfixed> (embed)
2308
2309 simplejson
2310 - exaile <unfixed> (embed; bug #604547)
2311
2312 libasycns
2313 - loudmouth <unfixed> (embed; bug #566143)
2314
2315 plplot
2316 - emboss <unfixed> (fork)
2317
2318 acl
2319 - ia32-libs <removed> (embed)
2320
2321 arts
2322 - ia32-libs <removed> (embed)
2323
2324 attr
2325 - ia32-libs <removed> (embed)
2326
2327 audiofile
2328 - ia32-libs <removed> (embed)
2329
2330 avahi
2331 - ia32-libs <removed> (embed)
2332
2333 celt
2334 - ia32-libs <removed> (embed)
2335
2336 coreutils
2337 - ia32-libs <removed> (embed)
2338
2339 cyrus-sasl2
2340 - ia32-libs <removed> (embed)
2341
2342 db4.8
2343 - ia32-libs <removed> (embed)
2344
2345 dbus
2346 - ia32-libs <removed> (embed)
2347
2348 directfb
2349 - ia32-libs <removed> (embed)
2350
2351 esound
2352 - ia32-libs <removed> (embed)
2353
2354 fltk1.1
2355 - ia32-libs <removed> (embed)
2356
2357 fontconfig
2358 - ia32-libs <removed> (embed)
2359
2360 freeglut
2361 - ia32-libs <removed> (embed)
2362
2363 gcc-3.3
2364 - ia32-libs <removed> (embed)
2365
2366 gdbm
2367 - ia32-libs <removed> (embed)
2368
2369 gnutls26
2370 - ia32-libs <removed> (embed)
2371
2372 hal
2373 - ia32-libs <removed> (embed)
2374
2375 isdnutils
2376 - ia32-libs <removed> (embed)
2377
2378 jack-audio-connection-kit
2379 - ia32-libs <removed> (embed)
2380
2381 keyutils
2382 - ia32-libs <removed> (embed)
2383
2384 krb5
2385 - ia32-libs <removed> (embed)
2386
2387 lesstif2
2388 - ia32-libs <removed> (embed)
2389
2390 libaio
2391 - ia32-libs <removed> (embed)
2392
2393 libasyncns
2394 - ia32-libs <removed> (embed)
2395
2396 libcap2
2397 - ia32-libs <removed> (embed)
2398
2399 libdrm
2400 - ia32-libs <removed> (embed)
2401
2402 libedit
2403 - ia32-libs <removed> (embed)
2404
2405 libexif
2406 - ia32-libs <removed> (embed)
2407
2408 libgcrypt11
2409 - ia32-libs <removed> (embed)
2410
2411 libgpg-error
2412 - ia32-libs <removed> (embed)
2413
2414 libgphoto2
2415 - ia32-libs <removed> (embed)
2416
2417 libice
2418 - ia32-libs <removed> (embed)
2419
2420 libieee1284
2421 - ia32-libs <removed> (embed)
2422
2423 libjpeg8
2424 - ia32-libs <removed> (embed)
2425
2426 libnss-ldap
2427 - ia32-libs <removed> (embed)
2428
2429 libogg
2430 - ia32-libs <removed> (embed)
2431
2432 libpam-ldap
2433 - ia32-libs <removed> (embed)
2434
2435 libsamplerate
2436 - ia32-libs <removed> (embed)
2437
2438 libsdl1.2
2439 - ia32-libs <removed> (embed)
2440
2441 libsm
2442 - ia32-libs <removed> (embed)
2443
2444 libssh2
2445 - ia32-libs <removed> (embed)
2446
2447 libtasn1-3
2448 - ia32-libs <removed> (embed)
2449
2450 libx11
2451 - ia32-libs <removed> (embed)
2452
2453 libx86
2454 - ia32-libs <removed> (embed)
2455
2456 libxau
2457 - ia32-libs <removed> (embed)
2458
2459 libxcb
2460 - ia32-libs <removed> (embed)
2461
2462 libxcomposite
2463 - ia32-libs <removed> (embed)
2464
2465 libxcursor
2466 - ia32-libs <removed> (embed)
2467
2468 libxdamage
2469 - ia32-libs <removed> (embed)
2470
2471 libxdmcp
2472 - ia32-libs <removed> (embed)
2473
2474 libxext
2475 - ia32-libs <removed> (embed)
2476
2477 libxfixes
2478 - ia32-libs <removed> (embed)
2479
2480 libxi
2481 - ia32-libs <removed> (embed)
2482
2483 libxinerama
2484 - ia32-libs <removed> (embed)
2485
2486 libxmu
2487 - ia32-libs <removed> (embed)
2488
2489 libxp
2490 - ia32-libs <removed> (embed)
2491
2492 libxrandr
2493 - ia32-libs <removed> (embed)
2494
2495 libxrender
2496 - ia32-libs <removed> (embed)
2497
2498 libxss
2499 - ia32-libs <removed> (embed)
2500
2501 libxt
2502 - ia32-libs <removed> (embed)
2503
2504 libxtst
2505 - ia32-libs <removed> (embed)
2506
2507 libxv
2508 - ia32-libs <removed> (embed)
2509
2510 libxxf86vm
2511 - ia32-libs <removed> (embed)
2512
2513 mesa
2514 - ia32-libs <removed> (embed)
2515
2516 mpg123
2517 - ia32-libs <removed> (embed)
2518
2519 nas
2520 - ia32-libs <removed> (embed)
2521
2522 nss
2523 - ia32-libs <removed> (embed)
2524
2525 openal-soft
2526 - ia32-libs <removed> (embed)
2527
2528 openssl
2529 - ia32-libs <removed> (embed)
2530
2531 pam
2532 - ia32-libs <removed> (embed)
2533
2534 popt
2535 - ia32-libs <removed> (embed)
2536
2537 pulseaudio
2538 - ia32-libs <removed> (embed)
2539
2540 sane-backends
2541 - ia32-libs <removed> (embed)
2542
2543 sqlite3
2544 - ia32-libs <removed> (embed)
2545 - chromium-browser <unfixed> (embed)
2546
2547 sysfsutils
2548 - ia32-libs <removed> (embed)
2549
2550 tcp-wrappers
2551 - ia32-libs <removed> (embed)
2552
2553 tdb
2554 - thunar 1.2.1-3 (old-version)
2555 - ia32-libs <removed> (embed)
2556
2557 tslib
2558 - ia32-libs <removed> (embed)
2559
2560 unixodbc
2561 - ia32-libs <removed> (embed)
2562
2563 xaw3d
2564 - ia32-libs <removed> (embed)
2565
2566 xbitmaps
2567 - ia32-libs <removed> (embed)
2568
2569 xcb-util
2570 - ia32-libs <removed> (embed)
2571
2572 xcursor-themes
2573 - ia32-libs <removed> (embed)
2574
2575 xft
2576 - ia32-libs <removed> (embed)
2577
2578 dicomparser
2579 - vtk <unfixed>
2580 - paraview <unfixed>
2581 NOTE: as part of its copy of vtk
2582 - insighttoolkit <unfixed>
2583
2584 proj
2585 - vtk <unfixed>
2586 - paraview <unfixed>
2587 NOTE: as part of its copy of vtk
2588 - therion <unfixed>
2589 - python-pyproj 1.8.6-1
2590
2591 netcdf
2592 - vtk <unfixed>
2593 - paraview <unfixed>
2594 NOTE: as part of its copy of vtk
2595
2596 insighttoolkit
2597 - vtk <unfixed> (embed)
2598 NOTE: embeds at least MetaIO
2599 - paraview <unfixed> (embed)
2600 NOTE: embeds at least MetaIO
2601
2602 gl2ps
2603 - vtk <unfixed>
2604 - paraview <unfixed>
2605 NOTE: as part of its copy of vtk
2606 - avogadro <unfixed>
2607 - gabedit <unknown> (embed)
2608 NOTE: not sure if it is built
2609 - drawxtl <unfixed> (embed)
2610 - rgl <unfixed> (embed)
2611 - gmsh <unfixed>
2612 - mcrl2 <unfixed> (embed)
2613 - mysql-gui-tools <unknown> (embed)
2614 NOTE: not sure if it is built
2615 - opencascade <unfixed> (embed)
2616 - orsa <unfixed> (embed)
2617 - qtiplot <unfixed> (embed)
2618 - qwtplot3d <unfixed> (embed)
2619 - root-system <unknown> (embed)
2620 NOTE: not sure if it is built
2621 - scilab <unfixed> (embed)
2622 - snd <unknown> (embed)
2623 NOTE: not sure if it is built
2624 - xmakemol <unfixed> (embed)
2625
2626 qwtplot3d
2627 - qtiplot <unfixed>
2628
2629 parseafm (from Adobe)
2630 - vftool <unfixed>
2631 - gnustep-back <unknown>
2632 NOTE: looks like it isn't built
2633 - evince <unfixed>
2634
2635 bugzilla
2636 - perl <unknown>
2637 - libcgi-pm-perl <unknown>
2638
2639 isc-dhcp
2640 - dhcp3 <unfixable> (old-version)
2641 - dhcp <unfixable> (old-version)
2642
2643 chipmunk (ITP: #623274)
2644 - xmoto <unfixed> (embed; bug #623299)
2645 - libtuxcap <unfixed> (embed; bug #623300)
2646
2647 libsigsegv
2648 - gawk 3.1.8+dfsg-0.1
2649
2650 pdfrw
2651 - rst2pdf <unfixed> (embed; bug #638607)
2652
2653 bind9
2654 - isc-dhcp <unfixed> (embed; bug #643569)
2655 NOTE: introduced in upstream 4.2 series
2656
2657 qof
2658 - gnucash <unfixed> (embed; bug #556245)
2659
2660 feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2661 - megaglest <unfixed> (modified-embed)
2662
2663 acsccid
2664 - ccid 1.3.11 <unfixed> (fork)
2665 - openct <unfixed> (modified-embed)
2666 - towitoko <unfixed> (modified-embed)
2667
2668 ccid
2669 - openct <unfixed> (modified-embed)
2670 - towitoko <unfixed> (modified-embed)
2671
2672 msmtp
2673 - mpop <unfixed> (embed)
2674
2675 iCalcreator
2676 - collabtive <unfixed>
2677 NOTE: class.ical.php
2678 - glpi <unfixed>
2679
2680 plupload
2681 - wordpress <unfixed>
2682
2683 feedcreator (php lib)
2684 - collabtive <unfixed>
2685 NOTE: class.rss.php
2686 - piwigo <unfixed>
2687 - dokuwiki <unfixed> (modified-embed)
2688 NOTE: dokuwiki uses an "enhanced" version
2689
2690 emacs
2691 - le <unfixed>
2692 NOTE: it uses an almost-pristine 2008 version of emacs' regex.{c,h}
2693
2694 libjsoncpp
2695 - eiskaltdcpp <unfixed> (embed)
2696 - drizzle <unfixed> (embed)
2697
2698 mongoose
2699 - phantomjs <unfixed> (modified-embed)
2700
2701 rapidxml (not packaged in Debian, http://rapidxml.sourceforge.net)
2702 - boost1.49 <unfixed> (embed)
2703 - boost1.50 <unfixed> (embed)
2704 - deal.ii <unfixed> (embed)
2705 - fife <unfixed> (embed)
2706 - witty <unfixed> (embed)
2707
2708 make
2709 - remake <unfixed> (fork)
2710
2711 metacity
2712 - mutter <unfixed> (fork)
2713
2714 mutter
2715 - muffin <unfixed> (fork)
2716
2717 libjson-spirit-dev
2718 - bitcoin <unfixed> (modified-embed)
2719 - litecoin <itp> (modified-embed; bug #693492)
2720
2721 bitcoin
2722 - litecoin <itp> (fork; bug #693492)
2723
2724 json-spirit
2725 - bitcoin <unfixed> (modified-embed)
2726 - litecoin <itp> (modified-embed; bug #693492)
2727
2728 libupnp
2729 - mediatomb <unfixable> (fork)
2730 - djmount <unfixed> (embed; bug #699562)
2731
2732 flowplayer-core (not packaged in Debian)
2733 - mahara <unfixed> (modified-embed)
2734
2735 dcraw
2736 - ufraw <unfixed>
2737 - libraw <unfixed>
2738 - kdcraw <unfixed>
2739 NOTE: in embedded copy of libraw
2740 - xbmc <unfixed>
2741 - exactimage <unfixed>
2742 - rawtherapee <unfixed>
2743 - rawstudio <unfixed>
2744
2745 libraw
2746 - libkdcraw 4:4.12.3-1
2747 - darktable <unfixed> (modified-embed; bug #682980)
2748 - shotwell <unfixed>
2749 NOTE: possibly fixed in wheezy and greater
2750
2751 mednafen
2752 - libvorbisidec 0.9.17.1-1
2753 [squeeze] - libvorbisidec <unfixed>
2754 [wheezy] - libvorbisidec <unfixed>
2755 NOTE: not-affected since 0.9.17.1-1 (as above)
2756 NOTE: mednafen 0.8.D.3-4 and 0.8.D.3-5 attempted to use the packaged libvorbisidec,
2757 NOTE: but this breaks CD playback when using .ogg files (see #699143), so it's
2758 NOTE: likely that future packages in the 0.8 series will build using the embedded code.
2759 - libmpcdec 0.9.21-1
2760 NOTE: not-affected since 0.9.21-1 (as above)
2761
2762 xmoto
2763 - chipmunk <unfixed> (bug #623299)
2764
2765 irrlicht
2766 - supertuxkart <unfixed> (modified-embed)
2767
2768 snappy
2769 - chromium-browser 35.0.1916.86-1
2770 NOTE: not sure if it's build
2771 - mongodb <unfixed>
2772 NOTE: needs further checks
2773 - couchdb <unfixed>
2774 - libsereal-decoder-perl <unfixed>
2775 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2776 - libsereal-encoder-perl <unfixed>
2777 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2778
2779 automysqlbackup
2780 - autopostgresqlbackup <unfixed>
2781 NOTE: fork
2782
2783 python-pip
2784 - python-virtualenv <unfixed>
2785
2786 scrypt
2787 - python-scrypt <unfixed> (embed; wontfix; package in NEW)
2788 NOTE: upstream scrypt does not provide a shared library/API
2789
2790 srtp
2791 - chromium <unfixed>
2792 - qutecom <unfixed>
2793
2794 fonttools
2795 - python-enable <unfixed> (embed; bug #715145)
2796
2797 uglifyjs
2798 - ruby-uglifier <unfixed> (modified-embed; bug #718367)
2799
2800 openacs
2801 - dotlrn <unfixed> (modified-embed; bug #718487)
2802
2803 jsgantt
2804 - rt4-extension-jsgantt <unfixed> (embed; bug #724287)
2805 - trac-jsgantt <unfixed> (embed; bug #724287)
2806 NOTE: jsgantt is not packaged seperately so far
2807
2808 libjs-pdf
2809 - iceweasel <unfixed> (fork)
2810
2811 jmapviewer
2812 - josm <unfixed> (embed; bug #731029)
2813
2814 qt4-x11
2815 - phantomjs <unfixed> (embed)
2816 NOTE: phantomjs embeds parts of src/
2817
2818 eigen3
2819 - r-cran-rcppeigen <unfixed> (modified-embed; bug #729716)
2820
2821 libyaml
2822 - libyaml-libyaml-perl <unfixed> (embed; bug #664224)
2823
2824 liblivemedia
2825 - vlc <unfixed> (static)
2826 - mplayer <removed> (static)
2827
2828 python-gnupg
2829 - gajim <unfixed> (modified-embed)
2830
2831 xchat:
2832 - hexchat <unfixed> (fork)
2833
2834 libjs-jquery-filetree (not packaged in Debian; RFP bug #741581; http://www.abeautifulsite.net/blog/2008/03/jquery-file-tree/ https://github.com/daverogers/jQueryFileTree)
2835 - controlaula <unfixed> (embed)
2836 - dolibarr <unfixed> (embed)
2837
2838 libjs-jquery-bbq (not packaged in Debian; RFP bug #741586; http://benalman.com/projects/jquery-bbq-plugin/ http://github.com/cowboy/jquery-bbq)
2839 - drupal7 <unfixed> (embed)
2840 - ganglia-web <unfixed> (embed)
2841 - jqapi <unfixed> (embed)
2842
2843 lame
2844 - mp3gain <unfixed> (modified-embed)
2845 NOTE: ancient copy, part of mpglib which was probably part of mpg123 at some point
2846
2847 zopfli
2848 - pigz <unfixed> (embed)
2849 - advancecomp <unfixed> (embed)
2850
2851 libquazip
2852 - pencil2d <unfixed> (modified-embed)
2853
2854 syslogd
2855 - rsyslog <unfixed> (fork)
2856
2857 libebur128
2858 - mlt <unfixed> (modified-embed; bug #762341)
2859
2860 wpa
2861 - moonshot-gss-eap <unfixed> (embed)
2862 NOTE: Functionality not available in stable library form
2863
2864 liblmdb
2865 - openldap <unfixed> (embed; bug #750023)
2866
2867 gnome-screensaver
2868 - mate-screensaver <unfixed>
2869 - cinnamon-screensaver <unfixed>
2870 - light-locker <unfixed>
2871
2872 aglfn
2873 - cups-filters <unfixed> (embed; bug #709584)
2874 - qtbase-opensource-src <unfixed> (embed; bug #709586)
2875 - gnuplot 4.6.3-2 (embed; bug #709583)
2876 - latex-cjk-chinese-arphic 1.23 (embed; bug #709585)
2877
2878 texlive-bin
2879 - texstudio 2.8.0+debian-1 (embed; bug #753806)
2880 NOTE: embeds synctex parser
2881 - texmaker 4.2-2 (embed; bug #753812)
2882 NOTE: embeds synctex parser
2883 - texworks 0.5~svn1363-5 (embed; bug #753818)
2884 NOTE: embeds synctex parser
2885 - gummi <unfixed> (embed; bug #753827)
2886 NOTE: embeds synctex parser
2887 - evince <unfixed> (embed; bug #754136)
2888 NOTE: embeds synctex parser
2889 - okular <unfixed> (embed; bug #754137)
2890 NOTE: embeds synctex parser
2891 - qpdfview <unfixed> (embed; bug #754138)
2892 NOTE: embeds synctex parser
2893
2894 libmspack
2895 - cabextract 1.4-5 (embed; bug #675560)
2896 - msn-pecan <unfixed> (embed; bug #675555)
2897 - evolution-ews <unfixed> (embed; bug #675556)
2898 - convlit <unfixed> (embed; bug #675557)
2899 - clamav 0.98.5~beta1+dfsg-1 (modified-embed; bug #675558)
2900 - wine <not-affected> (bug #675559)
2901 NOTE: wine: has a lot of source files that share the same names as the files
2902 NOTE: in libmspack, but they are entirely different implementations.
2903 - wine-development <not-affected> (bug #675561)
2904 NOTE: wine: has a lot of source files that share the same names as the files
2905 NOTE: in libmspack, but they are entirely different implementations.
2906 - calibre <unfixed> (embed; bug #675562)
2907
2908 tzdata
2909 - postgresql-9.1 <unfixed> (modified-embed)
2910 NOTE: unused (./configure --with-system-tzdata)
2911 - postgresql-9.4 <unfixed> (modified-embed)
2912 NOTE: unused (./configure --with-system-tzdata)
2913 - pike7.8 <unfixed> (embed)
2914 - libdatetime-timezone-perl <unfixed> (modified-embed; bug #416206)
2915
2916 phpseclib
2917 - collabtive 2.0+dfsg-6 (embed; bug #781414)
2918 - spotweb <unfixed> (embed; bug #781420)
2919 - ldap-account-manager <unfixed> (embed; bug #781419)
2920 - icinga-web <unfixed> (embed; bug #781415)
2921
2922 doctrine
2923 - icinga-web <unfixed> (embed; bug #781415)

  ViewVC Help
Powered by ViewVC 1.1.5