/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 29603 - (show annotations) (download)
Thu Oct 23 16:56:00 2014 UTC (2 days, 14 hours ago) by thijs
File size: 76182 byte(s)
missing negation
1 Embedded code copies
2 ====================
3
4 https://wiki.debian.org/EmbeddedCodeCopies
5 This file collects source packages that embed code from other projects.
6 This is considered bad for fixing security flaws because the fix needs
7 to be applied in multiple source packages.
8
9 Format:
10 <srcpkg> (<optional comment about srcpkg>)
11 - <embedding srcpkg> <status> (<sort>; bug #<number>)
12 NOTE: optional comments about the linkage of the embedding srcpkg
13
14 status: version number fixing the embedded copy
15 <unfixed> if the issue is not yet fixed
16 <removed> if the package was removed from the archive
17 <itp> if the package is in the process of being packaged
18 <not-affected> if the package does not use the embedded copy
19 <unknown> if the version number can not be determined
20 <unfixable> for unavoidable cases (e.g., forks that add real value)
21 sort: static (linking statically against a lib)
22 embed (embeds a copy of the library into another source package)
23 modified-embed (embeds a code copy that differs from upstream code)
24 fork (a full-blown fork of another source package)
25 old-version (an older version of essentially the same code)
26
27 The srcpkg might be some string to identify the code if there is no
28 specific source package.
29
30 Everything up to the next line is ignored.
31 ---BEGIN
32 poppler
33 - pdftohtml <unknown>
34 [sarge] - pdftohtml <unfixed>
35 [etch] - pdftohtml <unfixed>
36 NOTE: has been replaced by poppler-utils
37 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38 - texlive-base 3.0-12 (embed)
39 - texlive-bin 2007-1 (embed)
40 - koffice 1:2.0.0-1 (embed; bug #436163)
41 - libextractor 0.5.12-1 (embed)
42 NOTE: libextractor is using its own pdf decoder now
43 - ipe <unfixed> (embed)
44 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45 - ruby-gnome2 <unknown> (embed)
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <removed> (embed; bug #551293)
48 - xpdf 3.02-9 (fork)
49 - luatex <unfixed>
50 NOTE: detected by lintian, needs to be checked/confirmed
51
52 pdksh (no longer developed since 1999)
53 - mksh <unfixable> (fork)
54 - posh <unfixable> (fork)
55
56 ppmd
57 - libcomplearn-mod-ppmd <unfixed> (fork)
58 NOTE: discussion in #458152
59
60 libevent
61 - transmission 1.71-1 (embed; bug #529372)
62 - chromium-browser 5.0.375.29~r46008-1
63 - dnsproxy <unknown> (embed)
64 - iceweasel <unknown> (embed)
65 - icedove <unknown> (embed)
66
67 lrmi
68 - read-edid 2.0.0-1 (embed; bug #495131)
69 - s3switch <unfixed> (embed)
70 - xresprobe <unfixed> (embed)
71 - zhcon <unfixed> (embed)
72
73 php-htmlpurifier
74 - mahara 1.2.5-1 (embed)
75 - knowledgeroot 0.9.9.5-5 (embed)
76 - moodle 2.5.1-1 (embed)
77
78 peercast
79 - gnome-peercast <removed> (embed)
80 [etch] - gnome-peercast <unfixed> (embed)
81
82 silc-toolkit
83 - silc-client 1.1~beta6-1 (embed)
84
85 icclib
86 - ghostscript <unfixed> (embed)
87 - argyll <unfixed> (embed)
88
89 libusb
90 - argyll <unfixed> (embed)
91 - ia32-libs <removed> (embed)
92
93 dietlibc
94 - ccontrol 0.9.1+20071204-1 (static)
95 - mksh <unfixable> (static)
96 NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
97
98 libmikmod
99 - pysol-sound-server <unfixed> (modified-embed)
100 - sdl-mixer1.2 <unfixed> (embed)
101 TODO: report bug
102 - uqm 0.6.2.dfsg-8 (embed)
103 NOTE: Might be fixed earlier. Lenny version recorded.
104 - black-box 1.4.6-2.2 (embed)
105 NOTE: Might be fixed earlier. Lenny version recorded.
106
107 libiax
108 - iaxmodem <unfixable> (embed; bug #548885)
109
110 spandsp
111 - iaxmodem <unfixable> (embed; bug #548885)
112
113 python-paramiko
114 - fabric 0.9.0-2 (embed; bug #561398)
115
116 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
117 - dpkg 1.15.6 (static)
118 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
119 - rsync <unfixed> (embed)
120 - cherokee <unfixed> (embed)
121 NOTE: somehow derived code base
122 - mono <unfixed> (embed)
123 TODO: check mozilla
124 - linux-2.6 <unfixed> (embed)
125 - pvpgn 1.7.8-2 (embed)
126 - mrtg 2.12.2-1 (embed)
127 - rpm <unknown> (embed)
128 NOTE: pinged anibal since when rpm was fixed
129 - tuxcmd-modules <unfixed> (embed)
130 - zsync <unfixed>
131 - tra <unfixed>
132 - sash <unfixed>
133 - nsis <unfixed>
134 - pyfits 1:2.3.1-1
135 - mseide-msegui <unfixed>
136 NOTE: mseide
137 - mirrordir <unfixed>
138 - poco <unfixed>
139 - klibc <unfixed>
140 - emboss 6.3.1-1 (embed)
141 - ghostscript 8.71~dfsg2-6 (embed)
142 NOTE: ghostscript fixed sometime before this, but this is the version i checked
143 - freeimage <unfixed>
144 - clamav <unfixed> (fork)
145 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
146 - tuxonice-userui <unfixed> (static)
147 - plt-scheme <unfixed>
148 - perl <unfixed>
149 - paraview <unfixed>
150 - velvet 0.7.56~nozlibcopy-1
151 - gcvs <unfixed>
152 - dump <unfixed>
153 - aide <unfixed> (static)
154 - dar <unfixed> (static)
155 - avfs <unfixed>
156 - fpc <unfixed>
157 - winff <unfixed>
158 NOTE: inherited from fpc, see #472304
159 - lazarus <unfixed>
160 NOTE: inherited from fpc, see #472304
161 - erlang <unfixed> (embed)
162 - gamera 3.2.3-1 (embed)
163 - python2.4 <unfixed> (embed; bug #553403)
164 - python2.5 <unfixed> (embed; bug #553403)
165 - texlive-bin 2013.20130522.30620-1 (embed)
166 - sudo <unknown> (embed)
167 NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
168
169 dulwich
170 - hg-git 0.1.0-1 (embed; bug #541996)
171
172 libvigraimpex
173 - hugin <unfixed> (embed; bug #542259)
174 - enblend-enfuse <unfixed> (embed; bug #542258)
175 - gamera 3.2.3-1 (embed)
176
177 libbz2
178 - dpkg 1.15.6 (static)
179 - amd64-libs <unfixed> (static)
180 NOTE: let's call it "static"
181 - dar <unfixed> (static)
182 - dump <unfixed> (static)
183 - unalz 0.64-1 (embed)
184 NOTE: has code, by the maint, to use the system version but links against the internal copy
185 - clamav <unfixed> (embed)
186 NOTE: libclamav/nsis/bzlib*
187 - pristine-tar <unfixable> (modified-embed)
188 NOTE: compression code only, not uncompression
189 - r-base-core-ra 1.2.8 (static)
190 - r-base-core 2.11.1 (static)
191 NOTE: links dynamically in squeeze, statically in lenny
192 - rpm <unfixed> (static)
193 NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
194
195 libyahoo2
196 - centerim <unfixed> (embed; bug #559783)
197
198 libmsn
199 - centerim <unfixed> (embed; bug #559783)
200
201 libgadu
202 - centerim <unfixed> (embed; bug #559783)
203 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
204 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
205 - kdenetwork 4:3.3.2-5 (embed)
206 NOTE: from kdenetwork: kopete
207 - ekg 1:1.8~rc0-1 (embed)
208 - kadu 0.6.0.2-3 (embed; bug #504430)
209 - gadu <itp> (embed)
210
211 xmlrpc (which package is the "origin" of this code?)
212 - drupal <unfixed> (embed)
213 - phpgroupware <unfixed> (embed)
214 - egroupware <unfixed> (embed)
215 - phpwiki <unfixed> (embed)
216 - php4 <removed> (embed)
217 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
218
219 shtool (affects build-time only)
220 - mysql-ocaml <unfixed> (embed)
221 - php4 <removed> (embed)
222 - php5 <unfixed> (embed)
223
224 xulrunner
225 - iceape <unfixed> (embed; bug #561749)
226 - iceweasel 2.0.0.19 (embed)
227 - icedove <unfixed> (embed; bug #561750)
228 - kompozer <unfixed> (embed; bug #532168)
229 - galeon 2.0.2-4 (embed)
230 - epiphany-browser 2.14.3-8 (embed)
231 - conkeror 0.9~git080629-2 (embed)
232 - kazehakase 0.4.2-1 (embed)
233 - wine-gecko-unstable <unfixed> (embed; bug #669672)
234
235 xli
236 - xloadimage <unfixed> (embed)
237
238 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
239 - openmotif <unfixed> (embed)
240
241 libxpm
242 - lesstif2 <unfixed> (embed; bug #575750)
243 - ia32-libs <removed> (embed)
244
245 kerberized apps with BSD origin
246 - krb4 <removed> (embed)
247 - krb5 <unfixed> (embed)
248 - heimdal <unfixed> (embed)
249
250 grip (which pkg is the origin?)
251 - libcdaudio <unfixed>
252 - grip <unfixed>
253 - gnome-vfs <unfixed>
254 TODO: check vfs2 as well
255
256 fudforum
257 [etch] - phpgroupware <unfixed> (embed)
258 NOTE: phpgroupware-fudforum
259 [sarge] - egroupware-fudforum <removed> (embed)
260
261 libbsd
262 - rdate 1:1.2-3 (embed)
263 - atheme-services <unfixed>
264 - libbsd-arc4random-perl <not-affected> (modified-embed)
265 NOTE: code not used, it links dynamically against libbsd instead
266 - isakmpd <unfixed>
267 - bsdgames <unfixed> (embed)
268 - bsd-mailx <unfixed> (embed)
269 - netcat-openbsd <unfixed> (embed; bug #550611)
270 - openssh <unfixed> (embed)
271 - unworkable <unfixed> (embed)
272 - mksh <unfixed> (modified-embed)
273 NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
274 NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
275 NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
276 - ia32-libs <removed> (embed)
277
278 cvs
279 - gcvs <unfixed> (embed)
280 NOTE: see cvsunix/src in tarball
281
282 pcre3
283 - php4 <removed> (embed)
284 - analog 2:5.23-0woody1 (embed)
285 - chicken 3.2.7-2 (embed)
286 NOTE: Might be fixed earlier. Lenny version recorded.
287 - goffice <unfixed> (embed)
288 NOTE: libgoffice-*
289 - hypermail 2.2.0.dfsg-2 (embed)
290 NOTE: Might be fixed earlier. Lenny version recorded.
291 - privoxy 3.0.9-1 (embed)
292 NOTE: Might be fixed earlier. Lenny version recorded.
293 - vfu 4.06-4.1 (embed; bug #450754)
294 - tf5 5.0beta7-1 (embed)
295 - monotone 0.43-1 (embed)
296 NOTE: this only affects versions >= 0.37
297 - glib2.0 2.15.2-1 (embed)
298 - apache2 2.0.53-4 (embed)
299 - exim4 4.10-0.srh20.12 (embed)
300 - yacas <unfixed> (embed)
301 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
302 - gtamsanalyzer.app 0.42-5 (embed)
303 - tin 980117-1 (embed)
304 - kazehakase 0.5.2-1
305 - webkit 1.0.1-1 (embed)
306 - qt4-x11 <unfixed> (embed)
307 NOTE: embedded via webkit copy
308 - erlang <unfixed> (embed)
309 - ssed <unfixed> (embed)
310 - ircd-hybrid <unfixed> (static)
311 - emboss <unfixed> (fork)
312 - cherokee <unfixed> (embed)
313 - oftc-hybrid 1.6.9.dfsg-1 (embed)
314 - ratbox-services <unfixed> (embed)
315 - squeak-vm <unfixed> (embed)
316 - tinymux <unfixed> (embed)
317 - mp4h <unfixed> (embed)
318
319 tiff
320 - wxwindows2.4 2.2.1 (embed)
321 - gamera 3.2.3-1 (embed)
322 - freeimage <unfixed> (embed)
323 - libtk-img <unfixed> (embed; bug #732147)
324 NOTE: there are two copies, one under tiff/ other under libtiff/
325 - gdal <unfixed>
326 - ia32-libs <removed> (embed)
327 - tiff3 <unfixable> (old-version)
328
329 uudeview
330 - libconvert-uulib-perl <unfixed> (embed)
331 - pan <unfixed> (embed)
332
333 sqlite
334 - amarok <unfixed> (embed)
335 - monotone 0.43-1 (embed)
336 - iceweasel <unfixed> (embed)
337 - heimdal <unfixed> (embed; bug #559616)
338
339 util-linux
340 - loop-aes-utils <unfixed> (embed)
341 NOTE: contains code from util-linux' mount in the mount-aes-udeb
342 - ia32-libs <removed> (embed)
343
344 sylpheed
345 - sylpheed-claws <unfixed> (fork)
346
347 phpsysinfo
348 - egroupware <unfixed> (embed)
349 - phpgroupware <unfixed> (embed)
350
351 phpldapadmin
352 [sarge] - egroupware <unfixed> (embed)
353 NOTE: removed from egroupware after sarge
354
355 chmlib
356 - kchmviewer <unknown> (embed)
357
358 ffmpeg (libavcodec/libavformat)
359 - mplayer 1.0~rc2-14 (embed; bug #395252)
360 - kino 1.0.0-1
361 - vlc <not-affected> (Links dynamically since initial release)
362 - smilutils 0.3.0-10
363 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
364 - motion 3.1.19-1
365 - gstreamer0.10-ffmpeg 0.10.3-2
366 - xmovie <removed> (static)
367 TODO: gimp-gap (potentially using ffmpeg code as well)
368 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
369 - audacity 1.3.7-2 (embed; bug #512278)
370 - chromium-browser <unfixed> (fork; bug #763632)
371 - libav <unfixed>
372
373 faad2
374 - mplayer 1.0~rc2-20 (embed)
375 - avifile <unfixed> (embed; bug #538750)
376 - ffmpeg-debian <removed> (embed)
377
378 libmad (MPEG decoding lib)
379 - xine-lib <unfixed> (embed)
380 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
381 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
382
383 libdts
384 - xine-lib <unfixed> (embed)
385
386 flac
387 - xine-lib <unfixed> (embed)
388 - ia32-libs <removed> (embed)
389
390 liba52
391 - a52dec <unfixed> (embed)
392 - xine-lib <unfixed> (embed)
393
394 mpeg2dec (libmpeg2)
395 - xine-lib <unfixed> (embed)
396
397 libmpeg3
398 - squeak-vm <unfixed> (embed)
399
400 libntlm
401 - wget <unfixed> (fork; bug #550436)
402 - curl <unfixed> (fork; bug #550437)
403 - cntlm <unfixed> (fork; bug #550438)
404
405 uw-imap
406 - pine <unfixed> (embed)
407 - alpine <unfixed> (embed)
408
409 imagemagick
410 - graphicsmagick <unfixed> (fork)
411
412 python-urlgrabber
413 - mercurial <unfixed> (embed; bug #531062)
414 - w3af <unfixed> (embed; bug #555372)
415 [experimental] - harvestman <unfixed> (embed; bug #555373)
416
417 beautifulsoup
418 - python-mechanize <unfixed> (embed; bug #555349)
419 - zope2.11 <removed> (embed; bug #555350)
420 - twill <unknown> (embed)
421
422 halibut
423 - nsis <unfixed> (fork)
424
425 libghttp
426 - hotway <unfixed> (embed)
427
428 libsndfile
429 - ardour 1:2.7.1-1 (embed)
430 - ia32-libs <removed> (embed)
431
432 glibmm2.4
433 - ardour 1:2.7.1-1 (embed)
434
435 libgnomecanvasmm2.6
436 - ardour 1:2.7.1-1 (embed)
437
438 libsigc++-2.0
439 - ardour 1:2.7.1-1 (embed)
440 - ia32-libs <removed> (embed)
441
442 soundtouch
443 - ardour 1:2.7.1-1 (embed)
444
445 libmms
446 - xine-lib <unfixed> (embed)
447 - mimms <unfixed> (embed)
448
449 ckeditor
450 - request-tracker4 <unfixed> (embed)
451
452 fckeditor
453 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
454 - moin 1.8.2-2 (embed; bug #452599)
455 - karrigell <removed> (embed; bug #452598)
456 - gforge 4.6.99+svn6225-1 (embed)
457 - request-tracker3.8 <unfixed> (embed)
458 - otrs2 <unfixed> (embed)
459
460 libphp-phpmailer
461 - moodle 2.5.1-1 (embed; bug #507185)
462 - mahara <unfixed> (embed)
463 - symfony <unfixed> (embed; bug #566778)
464 [etch] - phpgroupware <unfixed> (embed)
465 NOTE: phpgroupware-felamimail is only in etch
466 - egroupware <unfixed> (embed; bug #504283)
467 - glpi 0.80.7-2
468
469 giflib
470 - wine <unfixed> (fork; bug #466181)
471 NOTE: the embedded code is a fork of ungif, which is an older version of giflib
472
473 bennu (not packaged in Debian, http://bennu.sourceforge.net)
474 - moodle <unfixed> (embed)
475
476 smarty
477 - gallery2 2.2.5-2 (embed; bug #471160)
478 - mahara 0.9.2-2 (embed; bug #471201)
479 - gosa 2.4beta1-1 (embed; bug #471200)
480
481 TinyMCE
482 - wordpress 2.5.1-3 (embed; bug #478257)
483 - moodle <unfixed> (embed; bug #507185)
484 - knowledgeroot <unfixed> (embed)
485 - joomla <itp> (bug #326398)
486 - mahara 1.2.6-1 (embed; #597752)
487 - glpi 0.80.7-2
488
489 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
490 - scite <unfixed> (embed)
491 - qscintilla <unfixed> (embed)
492 - qscintilla2 <unfixed> (embed)
493 - geany <unfixed> (fork)
494 - anjuta <unfixed> (embed)
495 - sdlbasic <unfixed> (embed)
496
497 libphp-adodb
498 - moodle 2.5.1-1 (embed; bug #507185)
499 NOTE: also AdoDB-XML Schema
500 - gallery2 <unfixed> (embed)
501 - phppgadmin <unfixed> (embed)
502 - egroupware <unfixed> (embed)
503 - phpwiki <unfixed> (embed)
504 - torrentflux 2.0beta1-2 (embed)
505 - ipplan <unfixed> (embed)
506 - typo3-src <unfixed> (embed)
507 - cacti 0.8.6d-1 (embed)
508 [sarge] - cacti <unfixed> (embed)
509 NOTE: dependency exists, but internal version is used
510 - gforge 4.7~rc2-6 (embed)
511 - mahara <unfixed> (embed)
512
513 gzip
514 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
515 - klibc <unfixed> (embed)
516 NOTE: based on linux-kernel gzip code
517 - busybox <unfixed> (embed)
518 - pristine-tar <unfixed> (modified-embed)
519 NOTE: compression code only, not uncompression
520 - ncompress <unfixed> (old-version)
521
522 neon
523 - cadaver 0.22.3+debian-1 (embed; bug #188381)
524 - gnome-vfs2 <unfixed> (embed; bug #395874)
525 [etch] - litmus <unfixed> (embed; #395875)
526 - litmus <removed> (embed; #395875)
527 [sarge] - screem <unfixed> (embed)
528 - sitecopy 1:0.16.0-1 (embed; bug #395876)
529 [etch] - tla <unfixed> (embed; bug #395877)
530 [sarge] - tla <unfixed> (embed; bug #395877)
531
532 libmodplug
533 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
534
535 libvncserver
536 - vino <unfixed> (embed)
537 - krfb <unfixed> (embed)
538
539 putty
540 - filezilla <unfixed> (embed)
541
542 tinyxml
543 - filezilla <unfixed>
544 - crystalspace <unfixed> (embed)
545 - libwfut <unfixed> (embed)
546 - rarian <unfixed> (embed)
547 - bulletml <unfixed> (embed)
548 - pokerth <unfixed> (embed)
549 - qutecom <unfixed> (embed)
550 - sofa-framework <unfixed> (embed)
551 - yate <unfixed> (embed)
552 - antigrav <unfixed> (embed)
553 - balder2d <unfixed> (embed)
554 - cal3d <unfixed> (embed)
555 - criticalmass <unfixed> (embed)
556 - ember <unfixed> (embed)
557 - epiphany <unfixed> (embed)
558 - gambit <unfixed> (embed)
559 - noiz2sa <unfixed> (embed)
560 - ogre <unfixed> (embed)
561 - opencity <unfixed> (embed)
562 - openmovieeditor <unfixed> (embed)
563 - pouetchess <unfixed> (embed)
564 - tecnoballz <unfixed> (embed)
565 - trigger-rally <unfixed> (embed)
566 - xmoto <unfixed> (embed)
567 - mapnik <unknown> (embed)
568 NOTE: uses a different XML parser by default
569 - rrootage 0.23a-6 <embed>
570 NOTE: links to libbulltetml
571 - boson <unknown> (embed)
572 NOTE: the embedded code is unused
573 - cppcheck <unfixed> (embed)
574 NOTE: introduced in 1.47, will use system's version in 1.48
575 [squeeze] - cppcheck <not-affected>
576 - xye <unfixed> (embed; bug #758429)
577 NOTE: https://sourceforge.net/p/xye/bugs/7/
578
579 gv
580 - evince <unfixed> (embed)
581 NOTE: ps/ tree from gv 3.5.8
582 NOTE: evince-gtk is affected (a component of evince source package)
583
584 libXbae
585 - paw <unfixed> (embed)
586
587 libgtkhtml
588 - claws-mail-extra-plugins <unfixed> (fork)
589
590 libXaw
591 - paw <unfixed> (embed)
592 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
593 - ia32-libs <removed> (embed)
594
595 libgd2
596 - graphviz 2.16-1 (embed)
597 NOTE: lib/gd seems to be 2.0.33
598 - wml 2.0.11ds2-1 (embed)
599 - libwmf <unfixed> (embed)
600 NOTE: derived from gd 1.6.3, but only used to write images
601 - plt-scheme <unfixed> (embed; bug #601525)
602 - texlive-bin 2013.20130522.30620-1 (embed)
603
604 rar
605 - unrar-nonfree <unfixed> (embed)
606
607 unrar-free (maybe this code is derived from the original rar, too?)
608 - clamav <unfixed> (embed)
609 NOTE: seems to be disabled in default config
610
611 mplayer (DirectMedia Object loader)
612 - xine-lib <unfixed> (embed)
613 NOTE: src/libw32dll/
614 - vlc <unfixed> (embed)
615 NOTE: modules/codec/dmo/
616 - mplayer 1.0~rc2-20 (embed)
617
618 libwpd (WordPerfect converter)
619 - openoffice.org <unfixed> (embed)
620
621 fsplib (http://sourceforge.net/projects/fsp/)
622 - gftp <unfixed> (embed)
623 NOTE: lib/fsplib version 0.3
624
625 sprng
626 - tree-puzzle <unfixed> (embed)
627
628 librpcsecgss
629 - krb5 <unfixed> (embed)
630
631 jasper
632 - ghostscript 8.64~dfsg-2 (embed)
633
634 libiris
635 - psi <unfixed> (embed)
636 - kdenetwork <unfixed> (embed)
637 NOTE: kopete embeds libiris but links dynamically to libidn
638 - kdegames <unfixed> (embed)
639 NOTE: ksirk/kde4
640
641 libidn
642 - monotone 0.43-1 (embed)
643 - psi <unfixed> (embed)
644 NOTE: psi embeds libiris which embeds libidn
645 - kdegames <unfixed> (embed)
646 NOTE: kdegames/kde4 embeds libiris which embeds libidn
647 - ia32-libs <removed> (embed)
648
649 lua5.1
650 - monotone 0.43-1 (embed)
651 - nmap 5.00-1 (embed; bug #527997)
652 [lenny] - nmap <unfixed> (embed; bug #527997)
653 - ocropus <unfixed> (embed)
654 - enigma <unfixed> (embed)
655 NOTE: requires lua built with C++
656 - freeciv 2.4.1-1 (embed)
657 NOTE: from 2.4.1-1 on freeciv uses system library instead
658 - spring <unfixed> (embed)
659
660 libbotan
661 - monotone 0.43-1 (embed)
662
663 NetXX
664 - monotone 0.43-1 (embed)
665
666 libgc
667 - mono <unfixed> (embed)
668
669 lzma
670 - p7zip <unfixed> (embed)
671 - xz-utils <unfixed> (fork)
672 - r-base <unfixed> (embed)
673 NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
674
675 lzo2
676 - ia32-libs <removed> (embed)
677 - busybox <unfixed> (embed)
678 - grub2 <unfixed> (embed)
679 - syslinux <unfixed> (modified-embed)
680 - valgrind <unfixed> (modified-embed)
681 - xen <unfixed> (embed)
682 - remmina <unfixed> (embed)
683 - blender <unfixed> (embed)
684 - x11vnc <unfixed> (embed)
685 - italc <unfixed> (embed)
686 - dump <unfixed> (embed)
687 - krfb <unfixed> (embed)
688 - nfdump <unfixed> (embed)
689 - kino <unfixed> (embed)
690 - samhain <unfixed> (embed)
691 - u-boot (modified-embed)
692 - icecc <unfixed> (embed)
693 - bb <unfixed> (embed)
694 - mednafen 0.8.D.3-4 (embed)
695 - ht <unfixed> (embed)
696 - n2n <unfixed> (embed)
697 NOTE: still not sure if all those embedded copies are actually used
698 NOTE: some packages actually use minilzo, which is not built by src:lzo2 and is only available as source in liblzo2-dev
699
700 lz4
701 - eet <unfixed> (embed)
702 - efl <unfixed> (embed)
703 - grub2 <unfixed> (embed)
704 - gtkwave <unfixed> (embed)
705 - iceweasel <unfixed> (embed)
706 - kfreebsd-9 <unfixed> (embed)
707 - kfreebsd-10 <unfixed> (embed)
708 - php-horde-lz4 <unfixed> (embed)
709 - pytables <unfixed> (embed)
710 - zfsutils <unfixed> (embed)
711
712 yassl
713 - mysql-5.1 <unfixed> (embed)
714 - mysql-5.5 <unfixed> (embed; bug #627207)
715
716 pax code
717 - tar <unfixed> (embed)
718 - cpio <unfixed> (embed)
719
720 t1lib
721 - tetex-bin 2.0.2-1 (embed)
722 - texlive-bin 2013.20130522.30620-1 (embed; bug #667912)
723 NOTE: used only in xdivk (a dvi file viewer that the maintainer refuses to drop)
724 - grace 5.1.14-2 (embed)
725 - evince <unfixed> (embed)
726 NOTE: at least parseafm code, maybe more?
727 - vftool <unfixed> (embed)
728 NOTE: just parseafm code it seems
729
730 guichan
731 - boswars <unfixed> (embed)
732 NOTE: maintainer notified us, working on it
733
734 tolua
735 - boswars <unfixed> (embed)
736 NOTE: maintainer notified us, working on it
737 NOTE: actually tolua++
738 - ocropus <unfixed> (embed)
739 NOTE: actually tolua++
740 - freeciv <unfixed> (embed)
741 NOTE: actually tolua++
742 - enigma <unfixed> (embed)
743
744 asio-dev
745 - luxrender <removed> (embed)
746
747 xine-lib
748 - vlc <unfixed> (embed)
749 NOTE: only parts included in modules/access/rtsp
750
751 netpbm
752 - tcl8.3 <unfixed> (embed)
753 - tcl8.4 <unfixed> (embed)
754 - tcl8.5 <unfixed> (embed)
755 NOTE: generic/tkImgGIF.c
756
757 tk8.5
758 - tk8.0 <removed> (old-version)
759 - tk8.3 <unfixed> (old-version)
760 - tk8.4 <unfixed> (old-version)
761 - perl-tk <unfixable> (fork)
762
763 samba
764 - mc 2:4.6.2~git20080311-1 (embed)
765 NOTE: maintainer is aware of this, currently searching a solution
766
767 plib1.8.4c2
768 - boson <unfixed> (fork)
769 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
770
771 fribidi
772 - quesoglc 0.7.2-2 (embed)
773
774 glew
775 - quesoglc <unfixed> (embed; bug #489341)
776 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
777 - trigger 0.5.2.1-2 (embed)
778 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
779 - trigger-rally 0.5.2.1-2 (embed)
780 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
781 - chromium-browser 5.0.375.70~r48679-2
782
783 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
784 - transcend <unfixed> (embed)
785 - cultivation <unfixed> (embed)
786 - passage <unfixed> (embed)
787 - gravitation <unfixed> (embed)
788
789 tar
790 - libarchive <unfixed> (embed)
791 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
792
793 cpio
794 - libarchive <unfixed> (embed)
795 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
796
797 kde4libs
798 - kdelibs <unfixable> (old-version)
799
800 webkit
801 - qt4-x11 <unfixed> (embed; bug #479851)
802 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
803 - kde4libs <unfixable> (fork)
804 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
805 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
806 - chromium-browser <unfixed> (fork)
807
808 ftgl
809 - blender 2.46+dfsg-1 (embed)
810 - vtk <unfixed> (embed)
811 - paraview <unfixed> (embed)
812 NOTE: as part of its copy of vtk
813 - tulip <unfixed> (embed)
814 NOTE: depends on -dev but string found on binary
815 - root-system <unknown> (embed)
816 NOTE: depends on -dev package; not confirmed at source
817 - rgl <unknown> (embed)
818 NOTE: not sure if it is built
819 - mysql-gui-tools <unknown> (embed)
820 NOTE: not sure if it is built
821 - k3d <unfixed> (embed)
822 - extremetuxracer <unknown> (embed)
823 NOTE: not sure if it is built
824 - critterding <unknown> (embed)
825 - lightspeed <unfixed>
826 NOTE: depends on -dev but string found on binary
827
828 wv
829 - abiword <unfixed>
830
831 wv2
832 - koffice <unfixed>
833 - calligra <unfixed>
834
835 qemu
836 - kvm <removed> (embed; bug #543159)
837 - qemu-kvm <unfixed> (embed; bug #560853)
838 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
839 - xen-3 3.4.2-2 (embed; bug #560856)
840 - xen-unstable <unfixed> (embed; bug #560856)
841
842 vgabios
843 - kvm <removed> (embed; bug #489442)
844 - qemu-kvm <unfixed> (embed)
845
846 bochs
847 - kvm <removed> (embed; bug #489442)
848 - qemu-kvm <unfixed> (embed)
849
850 speex
851 - vorbis-tools <unfixed> (embed)
852 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
853 - gst-plugins-good0.10 <unfixed> (embed)
854 - xine-lib <unfixed> (embed)
855 - libfishsound <unfixed> (embed)
856 - libannodex <removed> (embed)
857 - opal 3.4.2~dfsg-2 (embed)
858 - mumble 1.2.0~beta1-1 (embed)
859 - vlc <unfixed> (embed)
860 - xmms-speex <unfixed> (embed)
861 - libsdl-sound1.2 <unfixed> (embed)
862 - sweep <unfixed> (embed)
863
864 readline6
865 - magic <itp> (old-version)
866 - gdb 5.2.cvs20020401-1
867
868 opcode
869 - ode <unfixed> (embed)
870 NOTE: opcode is not a package in debian, it is just embedded
871 NOTE: http://www.codercorner.com/Opcode.htm
872
873 gimpact
874 - ode <unfixed> (embed)
875 NOTE: gimpact is not a package in debian, it is just embedded
876 NOTE: http://gimpact.sf.net
877
878 mochikit
879 - mahara <unfixed> (embed)
880 NOTE: they require extra patches, still unmerged upstream
881 - ntop <unfixed> (embed)
882 - coherence 0.6.2-1 (embed)
883 - paste <unfixed> (embed)
884 - turbogears <unfixed> (embed)
885 - plone3 <removed> (embed)
886 - xulrunner <unfixed> (embed)
887 - libjifty-plugin-chart-perl <unfixed> (embed)
888 - sabnzbdplus <unfixed> (embed)
889 - tgmochikit <unfixed> (embed)
890
891 prototypejs
892 - netbeans-ide 6.0.1+dfsg-2 (embed)
893 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
894 - webcit <unfixed> (embed; bug #555219)
895 - asterisk 1:1.6.2.0~rc3-1 (embed)
896 - libjson-ruby 1.1.4-1 (embed; bug #555224)
897 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
898 - horde3 <unfixed> (embed)
899 - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
900 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
901 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
902 - ebug-http <unfixed> (embed; bug #555236)
903 - libaws 2.7-1 (embed; bug #555222)
904 - phpgedview <removed> (embed)
905 - poker-network 1.7.6-1 (embed; bug #555238)
906 - rails 2.1.0-6 (embed)
907 - wordpress 2.5.0-2 (embed; bug #555243)
908 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
909 TODO: search through all of the other zope packages
910 - ampache 3.4.1-2 (embed)
911 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
912 - hobix 0.5~svn20070319-4 (embed; bug #555247)
913 - zabbix 1.6.6-4 (embed; bug #555250)
914 - chora2 2.1.1+debian0-1 (embed; bug #555253)
915 - gollem 1.1.1+debian0-1 (embed; bug # 555254)
916 - jscropperui 1.2.1-1 (embed; bug #555257)
917 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
918 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
919 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
920 - activeldap 1.2.1-1 (embed)
921 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
922 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
923 - otrs2 2.3.4-6 (embed; bug #555267)
924 - webcalendar 1.2~b1-2 (embed; bug #555269)
925 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
926 - jifty 0.90519-1 (embed; bug #555271)
927 - jquery 1.4-1 (embed; bug #555272)
928 - passenger 2.2.5debian1-1 (embed; bug #555273)
929 - plone3 <removed> (embed; bug #555275)
930 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
931 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
932 - xulrunner <unfixed> (embed)
933 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
934 - jclicmoodle <unfixed> (embed)
935 - git-cola <unfixed> (embed)
936
937 gdb
938 - insight <unfixed> (embed)
939
940 e2fsprogs
941 - ldiskfsprogs <unfixable> (fork)
942 - ia32-libs <removed> (embed)
943
944 quazip (not packaged in Debian)
945 - qcake <unfixed> (embed)
946 NOTE: starting with upstream version 0.6.4
947
948 exo
949 - pcmanfm <unfixed> (embed; bug #499677)
950 NOTE: slightly modified source code
951
952 xfce4-taskmanager
953 - lxtask <unfixed> (embed)
954 NOTE: old fork, maybe outdated
955
956 isync
957 - postler <unfixed> (embed; bug #628798)
958
959 java
960 - openjdk-6 <unfixed>
961 - sun-java5 <unfixed>
962 - sun-java6 <unfixed>
963
964 libphp-snoopy
965 - ampache 3.4.1-2 (embed; bug #504169)
966 - gforge 4.6.99+svn6094-2 (embed)
967 - mahara 1.0.5-2 (embed; bug #504170)
968 - pixelpost 1.7.1-5 (embed; bug #504171)
969 - mediamate 0.9.3.6-5 (embed; bug #504172)
970 - opendb <removed> (embed; bug #504173)
971 [etch] - opendb <unfixed> (embed; bug #504173)
972 - wordpress 2.5.1-9 (embed; bug #443948)
973 [etch] - phpgroupware <unfixed> (embed)
974 NOTE: phpgroupware-felamimail
975 - magpierss 0.72-3 (embed; bug #431089)
976
977 jquery
978 - jsonbot <unfixed> (embed; bug #625524)
979 - zekr <unfixed> (embed)
980 - wordpress <unknown> (embed)
981 - yocto-reader <unfixed> (embed)
982 - textpattern <unfixed> (embed)
983 - genshi 0.5.1-1 (embed)
984 NOTE: compressed file under examples/ dir
985 - prewikka <unfixed> (embed)
986 - libramaze-ruby <unfixed> (embed)
987 - drupal6 <unfixed> (embed)
988 - b2evolution <unfixed> (embed)
989 - wesnoth <unfixed> (embed)
990 - gammu 1.28.95-1 (embed)
991 - trac <unfixed> (embed; bug #645339)
992 - request-tracker4 <unfixed> (embed; bug #693821)
993
994 jquery-goodies
995 - horizon <unfixed> (embed)
996 NOTE: jquery.cookie.js, jquery.table-sorter.js, jquery-ui.min.js
997 - request-tracker4 <unfixed> (embed; bug #693821)
998 NOTE: libjs-jquery-tablesorter
999
1000 jqueryui
1001 - request-tracker4 <unfixed> (embed; bug #693821)
1002
1003 tablesorter (jquery plugin, not packaged yet)
1004 - wesnoth <unfixed> (embed)
1005
1006 kses
1007 - wordpress <unfixed> (embed; bug #504242)
1008 NOTE: their copy has all methods renamed to wp_<foo>
1009 NOTE: kses isn't in Debian, RFP: #504240
1010 - egroupware <unfixed> (embed)
1011
1012 magpierss
1013 - wordpress <unfixed> (embed; bug #504242)
1014
1015 php-gettext
1016 - wordpress 2.8.4-1 (embed; bug #504242)
1017 - docbookwiki <unfixed> (embed)
1018 - knowledgeroot 0.9.9.5-1
1019 NOTE: non-free
1020
1021 libphp-ixr (name may change, it is the Incutio XML-RPC)
1022 - wordpress <unfixed> (embed; bug #504242)
1023 NOTE: libphp-ixr isn't in Debian, RFP: #504236
1024 - dokuwiki <unfixed> (embed)
1025 - textpattern <unfixed> (embed)
1026
1027 libphp-cas
1028 - glpi 0.80.7-2 (embed)
1029 - moodle <unfixed> (embed; bug #505984)
1030
1031 scriptaculous (prototype.js is among the embeds in the following)
1032 - glpi <unfixed> (embed)
1033 - libaws <unfixed> (embed; bug #555222)
1034 - op-panel <unfixed> (embed)
1035 - symfony <unfixed> (embed)
1036 NOTE: maintainer says there are extra incompatible changes required
1037 - pixelpost 1.7.1-6 (embed)
1038 - webhelpers <unfixed> (embed)
1039 - qwik <removed> (embed; bug #555241)
1040 - smokeping <unfixed> (embed)
1041 - turba2 <unfixed> (embed)
1042 - typo3-src 4.2.3-1 (embed)
1043 - request-tracker3.6 <unfixed> (embed)
1044 - request-tracker3.8 <unfixed> (embed)
1045 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
1046 - wordpress 2.5.0-2 (embed)
1047 - libhtml-prototype-perl 1.48-3 (embed)
1048
1049 libmarkdown-php
1050 - pixelpost 1.7.1-6 (embed)
1051 NOTE: the markdown in Moodle is not the Markdown from this package
1052
1053 php-openid
1054 - wordpress-openid 3.3.2-1 (embed)
1055
1056 geshi
1057 - dokuwiki 0.0.20080505-3.1 (embed)
1058 - pgfouine 1.0-1.1 (embed)
1059 - websvn 2.1.0-1 (embed)
1060
1061 webcalendar
1062 - gforge 4.7~rc2-6 (embed; bug #504758)
1063
1064 libical
1065 - kdepim <unknown> (fork)
1066 NOTE: fixed at some point during 4.0
1067 - kdepimlibs 4.2.0-1 (fork)
1068 - claws-mail-extra-plugins <unfixed> (fork)
1069
1070 harfbuzz
1071 - qt4-x11 <unfixed> (embed)
1072 - pango1.0 1.36.0-1 (embed)
1073 - fontmatrix <unfixed> (embed)
1074
1075 libzip
1076 - php5 <unfixable> (modified-embed)
1077 - odt2txt <unfixed> (embed; bug #523808)
1078
1079 json.php (not packaged; should be replaced with php's built-in functions)
1080 - yui <unfixed>
1081 - gallery2 <unfixed>
1082 - dokuwiki <unfixed>
1083 - typo3-src <unfixed>
1084
1085 php-fpdf
1086 - tcpdf <itp> (fork)
1087 - phpwiki <unfixed>
1088 - egroupware <unfixed>
1089 - ldap-account-manager <unfixed> (fork)
1090
1091 tcpdf (itp: #495985)
1092 - moodle <unfixed>
1093 - phpmyadmin <unfixed>
1094 - collabtive <unfixed>
1095
1096 typo3
1097 - moodle <unfixed>
1098
1099 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
1100 - moodle <unfixed>
1101 - gosa <unfixed>
1102
1103 php-ole (itp: #487558)
1104 - moodle <unfixed>
1105
1106 pieforms (http://www.catalyst.net.nz)
1107 - mahara <unfixed>
1108
1109 savant2 (http://phpsavant.com)
1110 - egroupware <unfixed>
1111
1112 rssparser (http://nwow.org)
1113 - egroupware <unfixed>
1114 - phpgroupware <unfixed>
1115
1116 lcms
1117 - openjdk-6 <unfixed> (fork)
1118 - gimp 2.4.0~rc2-2
1119 - ia32-libs <removed> (embed)
1120
1121 libphp-phplayersmenu
1122 - diogenes <unfixed>
1123 - phpldapadmin <unfixed>
1124
1125 libphp-pclzip
1126 - docvert <unfixed>
1127 - moodle 2.5.1-1
1128 - egroupware <unfixed>
1129
1130 libphp-simplepie
1131 - dokuwiki <unfixed>
1132 - wordpress <unfixed>
1133
1134 libphp-jpgraph
1135 - egroupware <unfixed>
1136
1137 libpng
1138 - doxygen 1.5.6-2 (embed)
1139 NOTE: Might be fixed earlier. Lenny version recorded.
1140 - gdal 1.5.2-3 (embed)
1141 NOTE: Might be fixed earlier. Lenny version recorded.
1142 - iceweasel <not-affected> (uses xulrunner)
1143 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
1144 - iceape 1.0.13~pre080614i-0etch1 (embed)
1145 - libfltk1.1 1.1.9-6 (embed)
1146 NOTE: Might be fixed earlier. Lenny version recorded.
1147 - libtk-img <unfixed> (embed; #732147)
1148 - htmldoc 1.8.27-3 (embed)
1149 NOTE: Might be fixed earlier. Lenny version recorded.
1150 - xulrunner 1.9.0.13-1 (embed)
1151 [lenny] - xulrunner 1.9.0.11-0lenny1
1152 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1153 - gamera 3.2.3-1 (embed)
1154 - freeimage <unfixed> (embed)
1155 - syslinux-common <unfixable> (embed)
1156 - tuxonice-userui <unfixed> (static)
1157 - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
1158 NOTE: Might be fixed earlier. Lenny version recorded.
1159 - vice 1.22.dfsg1-0.1 (embed)
1160 NOTE: Might be fixed earlier. Lenny version recorded.
1161 - visualboyadvance 1.8.0-4 (embed)
1162 NOTE: Might be fixed earlier. Lenny version recorded.
1163 - ia32-libs <removed> (embed)
1164
1165 irssi
1166 - silc-client <unfixed> (embed)
1167 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
1168
1169 extc
1170 - mtasc <unfixed> (embed)
1171 - haxe <unfixed> (embed)
1172
1173 swflib
1174 - mtasc <unfixed> (embed)
1175 - haxe <unfixed> (embed)
1176
1177 libitext-java
1178 - bouncycastle 2.1.4-1 (embed)
1179
1180 python-ply
1181 - pyke <unfixed> (embed; bug #555363)
1182 - pywbem 0.7.0-4 (embed; bug #555364)
1183 - sepolgen <unfixed> (embed; bug #555365)
1184 - zope-textindexng3 <unknown> (embed)
1185 - iceweasel <not-affected> (uses xulrunner)
1186 - xulrunner <unknown> (embed)
1187 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1188
1189 libdumbnet (libdnet upstream)
1190 - nmap <unfixed> (fork)
1191
1192 gcc-4.4
1193 - gcc-mingw32 <unfixed> (embed)
1194
1195 camlimages
1196 - advi <unfixed> (static; bug #550441)
1197
1198 memcached
1199 - memcachedb <unfixed> (embed)
1200
1201 yajl
1202 - argyll <unfixed> (embed; bug #544223)
1203 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1204 - lnav <unfixed> (embed; bug #724693)
1205
1206 nusoap
1207 - gforge 4.8.2-1 (embed)
1208 - ampache <unfixed> (embed)
1209 - poker-network <unfixed> (embed)
1210 - phpwiki <unfixed> (embed)
1211 - gallery2 <unfixed> (embed)
1212 - typo3-src <unfixed> (embed)
1213 - phpgacl 3.3.7-7 (embed)
1214 - mantis 1.1.8+dfsg-1 (embed)
1215
1216 libept
1217 - adept <unfixed> (embed; bug #540649)
1218
1219 libvorbis
1220 - iceweasel <not-affected> (uses xulrunner)
1221 - xulrunner <unfixed> (embed; bug #540959)
1222 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1223 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1224 - iceape <unfixed> (embed)
1225 [etch] - iceape <not-affected> (introduced in 2.0)
1226 [lenny] - iceape <not-affected> (introduced in 2.0)
1227 - ia32-libs <removed> (embed)
1228 - libvorbisidec <unfixed> (modified-embed)
1229
1230 cairo
1231 - iceweasel <not-affected> (uses xulrunner)
1232 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1233
1234 liboggz
1235 - iceweasel <not-affected> (uses xulrunner)
1236 - xulrunner <unfixed> (embed; bug #540959)
1237 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1238 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1239 - iceape <unfixed> (embed)
1240 [etch] - iceape <not-affected> (introduced in 2.0)
1241 [lenny] - iceape <not-affected> (introduced in 2.0)
1242
1243 liboggplay
1244 - iceweasel <not-affected> (uses xulrunner)
1245 - xulrunner <unfixed> (embed; bug #540959)
1246 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1247 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1248 - iceape <unfixed> (embed)
1249 [etch] - iceape <not-affected> (introduced in 2.0)
1250 [lenny] - iceape <not-affected> (introduced in 2.0)
1251
1252 php-net-dnsbl
1253 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1254
1255 php-onyx-rss
1256 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1257
1258 php-text-wiki
1259 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1260
1261 php-xml-rpc
1262 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1263
1264 polarssl (does not have a shared library)
1265 - pdkim <itp> (embed; bug #543150)
1266 - xyssl <unfixed> (old-version)
1267
1268 pidgin (libpurple)
1269 - gaim <removed> (old-version)
1270 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1271 - wengophone <unfixed> (embed; bug #601425)
1272
1273 icu
1274 - webkit 1.0.1-1 (embed; bug #547214)
1275 - texlive-bin 2013.20130522.30620-1 (fork)
1276 NOTE: texlive upstream working with icu upstream to merge their changes
1277 - chromium-browser 5.0.375.29~r46008-3
1278
1279 cyrus-imapd-2.2
1280 - kolab-cyrus-imapd <unfixed> (fork)
1281 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1282
1283 python-cxx-dev
1284 - freecad 0.9.2646.3-1 (embed; bug #547936)
1285
1286 zipios++
1287 - freecad 0.9.2646.3-1 (embed; bug #547941)
1288 - enigma 0.92.3-3 (embed)
1289 NOTE: likely fixed earlier, marking etch's version as fixed
1290
1291 linux-2.6
1292 - kvm <removed> (embed; bug #549973) [./kernel/*]
1293 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1294 - kernel-source-2.6.8 <removed> (old-version)
1295 - kernel-source-2.4.27 <removed> (old-version)
1296 - kernel-source-2.4.24 <removed> (old-version)
1297 - kernel-source-2.2.25 <removed> (old-version)
1298 - kernel-source-2.2.20 <removed> (old-version)
1299
1300 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1301 - kvm <removed> (embed) [./libfdt/*]
1302 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1303
1304 qweb (not packaged)
1305 - ajaxterm <unfixed>
1306
1307 opensaml2
1308 - opensaml <removed> (old-version)
1309
1310 shibboleth-sp2
1311 - shibboleth-sp <removed> (old-version)
1312
1313 tuxonice-userui
1314 - suspend2-userui <removed> (old-version)
1315
1316 expat
1317 - w3c-libwww <removed> (embed; bug #551941)
1318 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1319 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1320 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1321 - python2.4 <unfixable> (embed; bug #553403)
1322 - python2.6 2.6.6-4 (embed)
1323 - python2.7 2.7-6 (embed)
1324 - mcabber 0.10.0-1 (low; bug #601053)
1325 - python-4suite <unfixed> (embed; bug #516935)
1326 - wxwindows2.4 <removed> (embed)
1327 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1328 - wxwidgets2.8 2.8.10.1-2 (embed)
1329 - albert <unfixed> (embed; bug #600974)
1330 - celementtree 1.0.5-8 (embed)
1331 NOTE: Maybe that was fixed even earlier
1332 - centerim <unfixed> (embed; bug #559783)
1333 - audacity 1.3.2-1 (embed)
1334 - matanza <unfixed> (embed)
1335 - tdom 0.8.3~20080525-1 (embed)
1336 - udunits 2.1.8-4 (embed)
1337 - apr-util 1.2 (embed)
1338 - ayttm <unfxed> (embed; bug #561006)
1339 - cableswig <unfixed> (embed)
1340 - cadaver <unfixed> (embed)
1341 - cmake 2.6.0-6 (embed)
1342 - coin3 <unfixed> (embed)
1343 - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
1344 NOTE: Might be fixed earlier. Lenny version recorded.
1345 - dasher 4.7.3-1 (embed)
1346 NOTE: Might be fixed earlier. Lenny version recorded.
1347 - emboss 6.3.1-1 (embed)
1348 - gdcm 2.0.14-2 (embed)
1349 - ghostscript 8.71~dfsg-2 (embed)
1350 - grmonitor <removed> (embed)
1351 - iceape <unfixed> (embed)
1352 - insighttoolkit 3.16.0-1 (embed)
1353 NOTE: insighttoolkit might've been fixed earlier
1354 - jabber 1.4.3-3.4 (embed)
1355 NOTE: Might be fixed earlier. Lenny version recorded.
1356 - libparagui1.1 1.0.2-1 (embed)
1357 - libspiff1 0.8.3-1 (embed)
1358 NOTE: Might be fixed earlier. Lenny version recorded.
1359 - paraview 3.6.2-1 (embed)
1360 - poco 1.3.6p1-1 (embed)
1361 - scorched3d 41.3dfsg-1+b1 (embed)
1362 NOTE: Might be fixed earlier. Lenny version recorded.
1363 - simgear <unfixed> (embed)
1364 - sitecopy 1:0.16.0-1
1365 - smart <unfixed> (embed)
1366 NOTE: smart embeds celementree, and it includes expat
1367 - swish-e <not-affected> (Linked against libxml, which is used instead)
1368 - tla 1.3.5+dfsg-15 (embed)
1369 - vtk 4.1.20030227-1 (embed)
1370 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1371 - xmlrpc-c <unfixed> (embed)
1372 - iceweasel <unfixed> (embed)
1373 - kompozer <unfixed> (embed)
1374 - vxl 1.13.0-2 (embed)
1375 - xulrunner <unfixed> (embed)
1376 - xmame 0.106-2.1 (embed)
1377 NOTE: Might be fixed earlier. Lenny version recorded.
1378 - apache2 2.2 (embed)
1379 - texlive-bin <not-affected> (Embedded code not compiled in)
1380 - vnc4 <unfixed> (embed)
1381 - xotcl 1.6.6-1 (embed)
1382 - chromium-browser 5.0.375.29~r46008-3
1383 - ia32-libs <removed> (embed)
1384
1385 xerces-c
1386 - xerces-c2 <unfixed> (old-version)
1387 - xerces27 <removed> (old-version)
1388
1389 md5 (RSA's version; not the gnu version provided by coreutils)
1390 - w3c-libwww <removed> (embed; bug #551942)
1391 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1392
1393 libparagui1.1
1394 - asc <unfixable> (fork)
1395
1396 enet
1397 - sauerbraten <unfixed> (embed; #497194)
1398
1399 eglibc
1400 - glibc <removed> (old-version)
1401 - mksh <unfixable> (static)
1402 NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
1403
1404 galib
1405 - gamera 3.2.3-1 (embed)
1406
1407 configobj
1408 - bzr <unfixed> (embed; bug #555336)
1409 - elisa <unfixed> (embed; bug #555337)
1410 - gaupol <unfixed> (embed; bug #555338)
1411 - ipython <unfixed> (embed; bug #555339)
1412 - pida <unfixed> (embed; bug #555340)
1413 - psychopy <unfixed> (embed; bug #555341)
1414 - rest2web <unfixed> (embed; bug #555342)
1415 - auth2db <unknown> (embed)
1416 - dynagen <unknown> (embed)
1417 - iceweasel <unknown> (embed)
1418 - sabnzbdplus <unknown> (embed)
1419 - xulrunner <unknown> (embed)
1420 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1421
1422 python-clientform
1423 - bibus <unfixed> (embed; bug #555332)
1424 - zope2.10 <unfixed> (embed; bug #555333)
1425 - zope2.11 <removed> (embed; bug #555334)
1426 - python-mechanize <unknown> (embed)
1427 - twill <unknown> (embed)
1428
1429 python-mechanize
1430 - zope2.10 <unfixed> (embed; bug #555337)
1431 - zope2.11 <removed> (embed; bug #555338)
1432 - twill <unknown> (embed; bug #555339)
1433
1434 pexpect
1435 - duplicity 0.6.06-1 (embed; bug #555361)
1436 - hplip <unfixed> (embed; bug #555362)
1437 - smart <unfixed> (embed; bug #555363)
1438
1439 pyparsing
1440 - bauble <unfixed> (embed; bug #555366)
1441 - boa-constructor 0.6.1-8 (embed; bug #555367)
1442 - calibre <unfixed> (embed; bug #555368)
1443 - matplotlib <unfixed> (embed; bug #531024)
1444 - zhpy 1.7.3.1-1 (embed; bug #555370)
1445 - polybori <unknown> (embed)
1446 - python-whoosh <unknown> (embed)
1447 - twill <unknown> (embed)
1448 - zope-textindexng3 <unknown> (embed)
1449
1450 python-pysqlite2
1451 - python2.4 <unfixed> (embed; bug #553403)
1452 - python2.5 <unfixed> (embed; bug #553403)
1453
1454 celementtree
1455 - python2.5 <unfixed> (embed)
1456 - smart <unfixed> (embed)
1457
1458 elementtree
1459 - python2.5 <unfixed> (embed)
1460 - python2.6 <unfixed> (embed)
1461 - bzr <unfixed> (embed; bug #555343)
1462 - gedit 2.28.2-1 (embed; bug #555344)
1463 - smart <unfixed> (embed)
1464 - solfege <unfixed> (embed; bug #555345)
1465 - w3af <unfixed> (embed; bug #555346)
1466 - python-qt4 <unknown> (embed)
1467 - sphinx <unknown> (embed)
1468 - python-nltk <itp> (embed)
1469
1470 python2.5
1471 - python2.4 <unfixed> (old-version)
1472 - jython <unfixed> (embed)
1473 NOTE: embeds many stdlib modules
1474 - python-django <unfixed> (embed; bug #555419)
1475 NOTE: embeds stdlib modules: doctest, decimal
1476 - gamera 3.2.3-1 (embed)
1477 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1478 - boa-constructor <unfixed> (embed; bug #555426)
1479 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1480 - nicotine <unfixed> (embed; bug #555427)
1481 NOTE: embeds stdlib modules: ConfigParser
1482 - museek+ <unfixed> (embed; bug #555428)
1483 NOTE: embeds stdlib modules: ConfigParser
1484 - vegastrike-data <removed> (embed)
1485 NOTE: embeds many stdlib modules
1486 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1487 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1488 - config-manager <unfixed> (embed; bug #555423)
1489 NOTE: embeds stdlib modules: optparse
1490 - jhbuild 2.28.0-1 (embed; bug #555421)
1491 NOTE: embeds stdlib modules: optparse, subprocess
1492 - smart <unfixed> (embed; bug #555432)
1493 NOTE: embeds stdlib modules: optparse
1494 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1495 NOTE: embeds stdlib modules: doctest
1496 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1497 NOTE: embeds stdlib modules: doctest
1498 - distribute <unfixed> (embed)
1499 NOTE: embeds stdlib modules: doctest
1500 - python-setuptools <unfixed> (embed; bug #555435)
1501 NOTE: embeds stdlib modules: doctest
1502 - zope.testing <unfixed> (embed; bug #555436)
1503 NOTE: embeds stdlib modules: doctest
1504 - translate-toolkit <unfixed> (embed; bug #555422)
1505 NOTE: embeds stdlib modules: textwrap, contextlib
1506 - libtpclient-py <unfixed> (embed; bug #555424)
1507 NOTE: embeds stdlib modules: subprocess
1508 - grass <unfixed> (embed; bug #555425)
1509 NOTE: embeds stdlib modules: subprocess
1510 - coherence <unfixed> (embed; bug #555429)
1511 NOTE: embeds stdlib modules: uuid
1512 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1513 NOTE: embeds stdlib modules: uuid
1514 - setroubleshoot <removed> (embed; bug #555431)
1515 NOTE: embeds stdlib modules: uuid
1516 - linkchecker <unfixed> (embed; bug #555414)
1517 NOTE: embeds msgfmt.py script
1518 - imdbpy <unfixed> (embed)
1519 NOTE: embeds msgfmt.py script
1520 - kiwi <unfixed> (embed)
1521 NOTE: embeds msgfmt.py script
1522 - moin <unfixed> (embed)
1523 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1524 - plone3 <removed> (embed)
1525 NOTE: embeds msgfmt.py script
1526 - roundup <unfixed> (embed)
1527 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1528 - rednotebook <unfixed> (embed; bug #555415)
1529 NOTE: embeds msgfmt.py script
1530 - turbogears <unfixed> (embed)
1531 NOTE: embeds msgfmt.py script
1532 - elisa <unfixed> (embed)
1533 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1534 - calibre <unfixed> (embed)
1535 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1536 - mailman 1:2.1.13-1 (embed; #555416)
1537 NOTE: embeds msgfmt.py script
1538 - python-docutils <unknown> (embed)
1539 NOTE: embeds stdlib modules: optparse, textwrap
1540 - python-imaging <unknown> (embed)
1541 NOTE: embeds stdlib modules: doctest
1542 - python-mechanize <unknown> (embed)
1543 NOTE: embeds stdlib modules: doctest
1544 - twill <unknown> (embed)
1545 NOTE: embeds stdlib modules: subprocess
1546 - zeroc-ice <unknown> (embed)
1547 NOTE: embeds stdlib modules: subprocess
1548 - wxwidgets2.8 <unknown> (embed)
1549 NOTE: embeds stdlib modules: subprocess
1550 - cycle <unknown> (embed)
1551 NOTE: embeds msgfmt.py script
1552 - deluge <unknown> (embed)
1553 NOTE: embeds msgfmt.py script
1554 - opendict <unknown> (embed)
1555 NOTE: embeds msgfmt.py script
1556 - openerp-client <unknown> (embed)
1557 NOTE: embeds msgfmt.py script
1558 - rapidsvn <unknown> (embed)
1559 NOTE: embeds msgfmt.py script
1560 - wammu <unknown> (embed)
1561 NOTE: embeds msgfmt.py script
1562 - gaphor <unknown> (embed)
1563 NOTE: embeds msgfmt.py script
1564 - pida <unknown> (embed)
1565 NOTE: embeds msgfmt.py script
1566 - python-formencode <unknown> (embed)
1567 NOTE: embeds msgfmt.py script
1568 - duplicity <unfixed> (embed)
1569 NOTE: embeds stdlib module: urlparse, tarfile
1570 - pygopherd <unfixed> (embed)
1571 NOTE: embeds stdlib module: zipfile
1572
1573 argparse
1574 - twill <unfixed> (embed; bug #555347)
1575 - ipython <unfixed> (embed; bug #555348)
1576
1577 coherence
1578 - elisa <unfixed> (embed; bug #555335)
1579
1580 simpletal
1581 - plastex <unfixed> (embed; bug #555371)
1582
1583 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1584 - postr <unfixed> (embed)
1585 - elisa <unfixed> (embed)
1586
1587 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1588 - apertium-tolk <unfixed> (embed)
1589 - ipython <unfixed> (embed)
1590 - virtaal <unfixed> (embed)
1591
1592 distribute
1593 - setuptools <removed> (old-version)
1594
1595 rails
1596 - jruby1.2 <removed> (embed) [./bench/rails/*]
1597 NOTE: jruby is in non-free, it probably includes rails too
1598 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1599 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1600 - thin <unfixed> (embed) [./spec/rails_app/*]
1601 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1602 NOTE: be dangerous if developers are naively basing their code off of the examples
1603 NOTE: prototype.js is among the example files
1604
1605 lucene2 (prototype.js is among the embeds in the following)
1606 - lucene <unfixed> (old-version)
1607 - pylucene <unfixed> (embed)
1608 - libpdfbox-java <unfixed> (embed)
1609 - libfontbox-java <unfixed> (embed)
1610 - libjempbox-java <unfixed> (embed)
1611 - solr <unfixed> (embed)
1612
1613 unicode-data
1614 - syslinux <unfixed> (embed)
1615 - camomile <unfixed> (embed)
1616 - fribidi <unfixed> (embed)
1617 - m17n-db <unfixed> (embed)
1618 - sbcl <unfixed> (embed)
1619 - heimdal <unfixed> (embed)
1620 - icu <unfixed> (embed)
1621 - icu4j <unfixed> (embed)
1622 - krb5 <unfixed> (embed)
1623 - openldap <unfixed> (embed)
1624 - pike7.6 <unfixed> (embed)
1625 - samba <unfixed> (embed)
1626 - samba4 <unfixed> (embed)
1627 - cmucl <unfixed> (embed)
1628 - typo3-src <unfixed> (embed)
1629 - mauve <unfixed> (embed)
1630 - texlive-bin <unfixed> (embed)
1631 - ypsilon <unfixed> (embed)
1632 - jeuclid <unfixed> (embed)
1633 - charmap.app <unfixed> (embed)
1634 - clisp <unfixed> (embed)
1635 - gnulib <unfixed> (embed)
1636 - opensrs-client <unfixed> (embed)
1637 - saxonb <unfixed> (embed)
1638 - rails <unfixed> (embed)
1639 - boost1.49 <unfixed> (embed)
1640 - boost1.54 <unfixed> (embed; bug #751880)
1641 - boost1.55 <unfixed> (embed; bug #751881)
1642
1643 feedparser
1644 - rawdog 2.19-1 (embed; bug #383422)
1645 [wheezy] - rawdog <unfixed> (modified-embed)
1646 - miro <unfixed> (embed; bug #555351)
1647 - calibre <unfixed> (embed; bug #555352)
1648 - freevo <unfixed> (embed; bug #555353)
1649 - pida <unfixed> (embed; bug #555354)
1650 - planet-venus <unfixed> (embed; bug #555355)
1651 - plone3 <removed> (embed; bug #555356)
1652 - exaile 0.2.14+debian-1 (embed)
1653 - screenlets 0.1.2-3 (embed)
1654 NOTE: included twice
1655
1656 agg:
1657 - matplotlib <unfixed> (embed: bug #377271)
1658 - contextfree <unfixed> (embed)
1659 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1660 - exactimage <unfixed> (embed)
1661 - python-enable <unfixed> (embed)
1662 - mapnik 0.5.1-3 (embed)
1663 NOTE: links statically to agg, but shared library is not available (bug #377271)
1664
1665 vtk
1666 - paraview <unfixable> (embed; bug #495426)
1667 - libmesh <unfixed>
1668 NOTE: embeds exodus; not sure if there's a version external to vtk
1669
1670 txt2tags
1671 - rednotebook <unfixed> (embed)
1672
1673 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1674 - gajim <unfixed> (embed)
1675 - emesene <unfixed> (embed)
1676 - convirt <unfixed> (embed)
1677 - pida <unfixed> (embed)
1678 - rednotebook <unfixed> (embed)
1679
1680 horde3 (prototype.js is among the embeds in the following)
1681 - mnemo2 <unfixed> (embed)
1682 - nag2 <unfixed> (embed)
1683 - wordpress <unfixed> (embed)
1684 NOTE: Text_Diff (wp-includes/Text/Diff*)
1685
1686 cimg
1687 - gmic <unfixed> (embed)
1688
1689 mootools
1690 - kdenetwork <unfixed> (embed)
1691 - gallery <unfixed> (embed)
1692 - jspwiki <unfixed> (embed)
1693 - vdr-plugin-live <unfixed> (embed)
1694 - perl-doc-html <unfixed> (embed)
1695
1696 openldap
1697 - openldap2.3 <removed> (old-version)
1698 - ia32-libs <removed> (embed)
1699
1700 grub2
1701 - grub <unfixed> (old-version)
1702
1703 gnupginterface
1704 - duplicity <unfixed> (embed)
1705
1706 python-dateutil
1707 - awn-extras-applets <unfixed> (embed)
1708 - matplotlib <unknown> (embed)
1709
1710 cups
1711 - cupsys <removed> (old-version)
1712 - ia32-libs <removed> (embed)
1713
1714 yui
1715 - bcfg2 <not-affected> (present in source but not included in any binary files)
1716 - serendipity 1.5.3-1 (embed; bug #557746)
1717 - moodle <unfixed> (embed)
1718 - jifty 0.91117-1 (embed; bug #557748)
1719 - webgui 7.7.26-1 (embed)
1720 - loggerhead 1.17-1 (embed)
1721 - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
1722
1723 quake3 (vanilla source not packaged in debian)
1724 - openarena <unfixable> (fork)
1725
1726 quake2 (vanilla source not packaged in debian)
1727 - alien-arena <unfixable> (fork)
1728 - warsow <unfixable> (fork)
1729
1730 quake (vanilla source not packaged in debian)
1731 - darkplaces <unfixable> (fork)
1732 - quakespasm <unfixable> (fork)
1733 - nexuiz 2.5.2+dp-1 (old-version)
1734 NOTE: before 2.5.2+dp this was an outdated version of darkplaces
1735
1736 libtheora
1737 - iceweasel <not-affected> (uses xulrunner)
1738 - xulrunner <unfixed> (embed; bug #540959)
1739 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1740 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1741 - iceape <unfixed> (embed; bug #559276)
1742 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1743 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1744
1745 dtoa
1746 - bfilter <unfixed> (embed)
1747 - cacao <removed> (embed)
1748 - cdrdao <unfixed> (embed)
1749 - classpath <unfixed> (embed)
1750 - freej <unfixed> (embed)
1751 - iceape <unfixed> (embed)
1752 - iceweasel <unfixed> (embed)
1753 - jscoverage <unfixed> (embed)
1754 - kde4libs <unfixed> (embed)
1755 - kdelibs <unfixed> (embed)
1756 - kompozer <unfixed> (embed)
1757 - libv8 <unfixed> (embed)
1758 - mono <unfixed> (embed)
1759 - newlib <unfixed> (embed)
1760 - nspr <unfixed> (embed)
1761 - php5 <unfixed> (embed)
1762 - polyml <unfixed> (embed)
1763 - qt4-x11 <unfixed> (embed)
1764 - rhino <unfixed> (embed)
1765 NOTE: code translated to Java
1766 - ruby1.8 <removed> (embed)
1767 - ruby1.9 <unfixed> (embed)
1768 - ruby1.9.1 <removed> (embed)
1769 - sdd <unfixed> (embed)
1770 - sfind <unfixed> (embed)
1771 - star <unfixed> (embed)
1772 - tinymux <unfixed> (embed)
1773 - virtualbox-ose <unfixed> (embed)
1774 - webkit <unfixed> (embed)
1775 - xulrunner <unfixed> (embed)
1776
1777 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1778 - firegpg <unfixed> (embed)
1779 - enigmail <unfixed> (embed)
1780
1781 ptmalloc (not packaged in Debian)
1782 - crystalspace <unfixed> (embed)
1783 - qt4-x11 <unfixed> (embed)
1784
1785 svgalib
1786 - usplash <unfixed> (embed)
1787 - ia32-libs <removed> (embed)
1788
1789 bogl
1790 - usplash <unfixed> (embed)
1791
1792 taglist
1793 - usplash <unfixed> (embed)
1794
1795 portaudio
1796 - audacity <unfixed> (embed; bug #323711)
1797
1798 nyquist
1799 - audacity <unfixed> (embed)
1800 NOTE: embeds a forked nyquist with support for a shared library
1801
1802 vamp-plugin-sdk
1803 - audacity <unfixed> (embed)
1804
1805 wordpress
1806 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1807 - wordpress-mu <removed> (fork)
1808
1809 php5
1810 - php4 <removed> (old-version)
1811
1812 classpath
1813 - libgnucrypto-java <removed> (embed; bug #559788)
1814
1815 libtool
1816 - apr <unfixed> (static; bug #489625)
1817 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1818 - arts <unfixed> (embed)
1819 - bochs 2.4.2-1 (embed; bug #560884)
1820 - camserv <unfixed> (embed)
1821 - collectd 4.8.2-1 (embed)
1822 - courier-authlib 0.58-4 (embed)
1823 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1824 - cvsnt 2.5.04.3236-1.2 (embed)
1825 - dico <not-affected> (Uses the system copy of ltdl)
1826 - freeradius 0.1+20010527-1 (embed)
1827 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1828 - ggobi 2.1.9~20091212-1 (embed)
1829 - glame 2.0.1-4 (embed)
1830 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1831 - gnash 0.8.7-2 (embed)
1832 - gnu-smalltalk <unfixed> (embed; bug #566777)
1833 - google-gadgets 0.10.5-0.3 (embed)
1834 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1835 - graphicsmagick 1.3.5-6 (embed)
1836 - graphviz 2.8-3 (embed)
1837 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1838 - guile-1.6 1.6.8-7 (embed)
1839 - hamlib 1.2.11-1 (embed)
1840 - hercules 3.06-1.2 (embed)
1841 - jags 1.0.4-3 (embed; bug #560864)
1842 - kdelibs <unfixed> (embed)
1843 - libannodex <removed> (embed)
1844 - libextractor 0.5.23+dfsg-4 (embed)
1845 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1846 - libtunepimp 0.5.3-7.3 (embed)
1847 - mp4h 1.3.1-4.1 (Contains source code, but is compiled with --without-included-ltdl)
1848 - naim <removed> (embed)
1849 - parser-mysql <unfixed> (embed)
1850 - pinball 0.3.1-11 (embed)
1851 - redland <unfixed> (embed)
1852 - siproxd 1:0.8.1-2 (embed; bug #657070)
1853 - ski <unfixed> (embed)
1854 - synfig 0.62.00-1 (embed)
1855 - unixodbc 2.2.4-5 (embed)
1856 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1857 - clamav 0.95+dfsg-1 (embed)
1858 - imagemagick 6:6.2.3.1-1 (embed)
1859 - hypre 2.4.0b-5 (embed)
1860 - lam <unfixed> (embed)
1861 - openmpi <unfixable> (embed; bug #559386)
1862 - parser <unfixed> (embed)
1863 - pdsh 2.18-5 (embed; bug #560892)
1864 - sbnc 1.2-8 (embed)
1865 - sdcc <unfixed> (embed)
1866 - wml 2.0.11ds2-1 (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1867 - proftpd-dfsg <unfixed> (embed; bug #561748)
1868 - babel 1.4.0.dfsg-5 (embed)
1869 - libprelude 0.9.14-2 (embed)
1870 - heartbeat 2.1.4-7 (embed)
1871 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1872 NOTE: might've been fixed earlier
1873 - gcc-* <unknown> (embed)
1874 - ia32-libs <removed> (embed)
1875
1876 ocamlgsl
1877 - orpie 1.5.1-7.1 (embed; bug #550058)
1878
1879 xdotool
1880 - keynav <unfixed> (embed; bug #560103)
1881
1882 bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
1883 - supertuxkart <unfixed> (embed)
1884 - blender <unfixed> (embed)
1885 - critterding <unfixed> (embed)
1886 NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
1887
1888 ghostscript
1889 - gs-gpl <removed> (old-version)
1890
1891 icedove
1892 - thunderbird <removed> (old-version)
1893
1894 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1895 - jquery <unfixed> (embed)
1896
1897 sed
1898 - ssed <unfixed> (fork)
1899
1900 phpatomlib (http://code.google.com/p/phpatomlib)
1901 - wordpress <unfixed> (embed)
1902
1903 Services_JSON (http://pear.php.net/package/Services_JSON)
1904 - wordpress <unfixed> (embed)
1905
1906 phpass (http://www.openwall.com/phpass/)
1907 - gallery2 <unfixed> (embed)
1908 - wordpress <unfixed> (embed)
1909 - typo3-src <unfixed> (modified-embed)
1910 NOTE: file refers to drupal, maybe there's a copy somewhere there
1911 NOTE: a copyright owner search didn't match anything
1912 - libauthen-passphrase-perl <unfixable> (fork)
1913 NOTE: perl implementation of phpass
1914 - phpbb3 <unfixed>
1915 NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
1916
1917 squirrelmail
1918 - wordpress <unfixed> (embed)
1919 NOTE: class-pop3.php
1920
1921 ezSQL (http://www.woyano.com/jv/ezsql)
1922 - wordpress <unfixable> (fork)
1923 NOTE: wp-db.php
1924
1925 Diff.php (Clay Loveless' version/killersoft.com)
1926 - php-versioncontrol-svn <unfixed>
1927
1928 libm (provided by libc)
1929 - spring <unfixed> (embed)
1930 NOTE: embedded by embedded copy of streflop
1931 - megaglest <unfixed> (embed)
1932 NOTE: embedded by embedded copy of streflop
1933 - aide <unfixed> (static)
1934 - busybox <unfixed> (static)
1935 - mindi-busybox <unfixed> (static)
1936 - qemu <unfixed> (static)
1937 NOTE: qemu-user-static
1938 - tuxonice-userui <unfixed> (static)
1939 - zsh <unfixed> (static)
1940 NOTE: zsh-static
1941 - tripwire <unfixed>
1942
1943 streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
1944 - spring <unfixed> (modified-embed)
1945 NOTE: old, modified version of streflop
1946 - megaglest <unfixed> (modified-embed)
1947 NOTE: megaglest uses the same streflop code as spring
1948
1949 minizip
1950 - spring <unfixed> (embed)
1951 - libkml <unfixed> (modified-embed; bug #753069)
1952 - samba <unfixed> (embed)
1953 NOTE: didn't check whether it's used
1954 - zlib <unfixed> (embed; bug #753070)
1955 NOTE: only used to build minizip and miniunzip in zlib-bin package
1956 - virtuoso-opensource <unfixed> (embed)
1957 NOTE: didn't check whether it's used
1958 - luatex <unfixed> (embed)
1959 NOTE: didn't check whether it's used
1960 - tcl8.6 <unfixed> (embed)
1961 NOTE: didn't check whether it's used
1962 - chromium-browser <unfixed> (embed)
1963 - perl-tk <unfixed> (embed)
1964 NOTE: didn't check whether it's used
1965 - icedove <unfixed> (modified-embed)
1966 NOTE: didn't check whether it's used
1967 - ace <unfixed> (embed)
1968 NOTE: didn't check whether it's used
1969 - smplayer <unfixed> (embed)
1970 NOTE: didn't check whether it's used
1971 - povray <unfixed> (embed)
1972 NOTE: didn't check whether it's used
1973 - cegui-mk2 <unfixed> (embed)
1974 NOTE: didn't check whether it's used
1975 - freemat <unfixed> (embed)
1976 NOTE: didn't check whether it's used
1977 - funtools <unfixed> (embed)
1978 NOTE: didn't check whether it's used
1979 - tntnet <unfixed> (embed)
1980 NOTE: didn't check whether it's used
1981 - orthanc <unfixed> (embed)
1982 NOTE: didn't check whether it's used
1983 - instead <unfixed> (embed)
1984 NOTE: didn't check whether it's used
1985 - mupen64plus-core <unfixed> (embed)
1986 NOTE: didn't check whether it's used
1987 - sks-ecc <unfixed> (embed)
1988 NOTE: didn't check whether it's used
1989 - psi <unfixed> (embed)
1990 NOTE: didn't check whether it's used
1991 - fossil <unfixed> (embed)
1992 NOTE: didn't check whether it's used
1993 - wordgrinder <unfixed> (embed)
1994 NOTE: didn't check whether it's used
1995 - critcl <unfixed> (embed)
1996 NOTE: didn't check whether it's used
1997 - fceux <unfixed> (embed)
1998 NOTE: didn't check whether it's used
1999
2000 oscpack
2001 - spring <unfixed> (embed)
2002
2003 hpiutil2
2004 - spring <unfixed> (embed)
2005
2006 p7zip
2007 - spring <unfixed> (embed)
2008
2009 pythonqt (doesn't seem to be python-qtN, unknown source)
2010 - fontmatrix <unfixed> (embed)
2011 - elmerfem <unfixed> (embed)
2012
2013 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
2014 - docvert <unfixed> (embed)
2015 - jifty <unfixed> (embed)
2016 - kdenetwork <unfixed> (embed)
2017 - mediatomb <unfixed> (embed)
2018 - plastex <unfixed> (embed)
2019 - plone3 <removed> (embed)
2020 - python-chaco <unfixed> (embed)
2021 - python-docutils <unfixed> (embed)
2022 - s5 <unfixed> (embed)
2023 - zope2.10 <unfixed> (embed)
2024 - zope2.11 <removed> (embed)
2025 - cython <not-affcted> (embed)
2026 NOTE: part of documentation, which is not installed into the binary package
2027
2028 python-docutils
2029 - zope2.10 <unfixed> (embed)
2030 - zope2.11 <removed> (embed)
2031
2032 tesseract
2033 - ocropus <unfixed> (static)
2034
2035 antlr
2036 - kdevelop <unfixed> (embed)
2037
2038 libxerces2
2039 - openjdk-6 <unfixed> (embed)
2040
2041 kfreebsd-8
2042 - kfreebsd-7 <unfixed> (old-version)
2043 - kfreebsd-6 <removed> (old-version)
2044
2045 ruby1.9.1
2046 - ruby1.9 <unfixed> (old-version)
2047 - ruby1.8 <removed> (old-version)
2048
2049 maildrop
2050 - courier <unfixed> (embed) [./maildrop]
2051
2052 glee
2053 - warzone2100 <not-affected> (embed)
2054 - love 0.8.0-2 (embed; bug #690492)
2055
2056 phing
2057 - symfony <unfixed> (embed)
2058
2059 pake
2060 - symfony <unfixed> (embed)
2061
2062 propel
2063 - symfony <unfixed> (embed)
2064
2065 creole
2066 - symfony <unfixed> (embed)
2067
2068 hfsutils
2069 - cdrkit <unfixed> (embed; bug #570187)
2070 NOTE: embeds hfsutils code in genisoimage
2071
2072 cdrkit
2073 - grub2 <unfixed> (embed; bug #570156)
2074 NOTE: genisoimage imported into grub-mkisofs
2075
2076 kdebase-workspace
2077 - kdebase <unfixed> (old-version)
2078
2079 file
2080 - php5 <unfixable> (modified-embed)
2081 [lenny] - php5 <not-affected>
2082 - radare2 <unfixed> (embed)
2083 TODO: check if embed, modfied-embed or old-version
2084 - sleuthkit <unfixed> (embed)
2085 TODO: check if used
2086
2087 cdb
2088 - php5 <unfixed> (embed)
2089
2090 libmbfl (itp: #570708)
2091 - php5 <unfixed> (embed)
2092 NOTE: PHP is actually the current upstream, ITP is of that code
2093
2094 libonig
2095 - php5 5.3.2-1 (embed)
2096
2097 xmlrpc-epi
2098 - php5 <unfixed> (embed)
2099
2100 swt-gtk
2101 - eclipse <unfixed> (embed; bug #538808)
2102
2103 txt2html
2104 - wml 2.0.11ds2-1 (embed)
2105
2106 ca-certificates
2107 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
2108
2109 openexr
2110 - freeimage <unfixed> (embed)
2111
2112 libmng
2113 - freeimage <unfixed> (embed)
2114
2115 openjpeg
2116 - freeimage <unfixed> (embed)
2117
2118 libjpeg6b
2119 - freeimage <unfixed> (embed)
2120 - ia32-libs <removed> (embed)
2121
2122 libjpeg (don't know what exact version)
2123 - dcmtk <unfixed>
2124 - gdcm <unfixed>
2125 - insighttoolkit <unfixed>
2126 - openarena 0.8.5-5+exp1 (bug #495966)
2127 - outguess <unfixed>
2128 - squeak-vm <unfixed> (embed)
2129 - tremulous <unfixed>
2130 - tuxonice-userui <unfixed> (static)
2131 - fpc <unfixed> (static)
2132 - lazarus <unfixed> (static)
2133 NOTE: inherited from fpc, see #472304
2134 - mseide-msegui <unfixed> (static)
2135 NOTE: inherited from fpc, see #472304
2136 - easymp3gain <unfixed> (static)
2137 NOTE: inherited from fpc, see #472304
2138 - winff <unfixed> (static)
2139 NOTE: inherited from fpc, see #472304
2140 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
2141 - ghostscript 8.64~dfsg-2 (embed)
2142
2143 lxr
2144 - lxr-cvs <unfixed> (embed)
2145
2146 libfile-copy-recursive-perl
2147 - r-base <unfixed> (embed; bug #577427)
2148 - r-base-core-ra <unfixed> (embed; bug #577429)
2149
2150 delimmatch
2151 - r-base <unfixed> (embed; bug #577433)
2152 - r-base-core-ra <unfixed> (embed; bug #577434)
2153
2154 libsmf (ITP: #572558)
2155 - denemo <unfixed> (embed)
2156 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
2157
2158 libselinux
2159 - dpkg 1.15.6 (static)
2160 - ia32-libs <removed> (embed)
2161
2162 xinha (ITP: #479708)
2163 - horde3 <unfixed>
2164 - serendipity <unfixed>
2165 - openacs <unfixed>
2166 - dotlrn <unfixed>
2167
2168 dvipng
2169 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
2170
2171 dvipdfmx
2172 - texlive-bin <unfixed> (embed)
2173 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
2174
2175 lcdf-typetools
2176 - texlive-bin 2009-1 (embed)
2177
2178 tex4ht
2179 - texlive-bin 2009-1 (embed)
2180
2181 freetype
2182 - texlive-bin 2009-1 (embed)
2183 - ia32-libs <removed> (embed)
2184
2185 freetype2
2186 - texlive-bin 2009-1 (embed)
2187 - tuxonice-userui <unknown> (static)
2188 - instantbird <removed>
2189 - qt4-x11 <unknown> (embed)
2190 - vtk <unknown> (embed)
2191 - paraview <unknown> (embed)
2192 NOTE: from embedded copy of vtk
2193
2194 silgraphite
2195 - texlive-bin <unfixed> (embed)
2196
2197 unzip
2198 - texlive-bin 2009-1 (embed)
2199
2200 jbig2dec
2201 - ghostscript 8.71~dfsg2-1 (embed)
2202
2203 libxml2
2204 - chromium-browser 5.0.375.29~r46008-1
2205 - ia32-libs <removed> (embed)
2206
2207 protobuf
2208 - chromium-browser 5.0.375.70~r48679-2
2209
2210 libv8
2211 - chromium-browser 5.0.375.38~r46659-1
2212
2213 nspr
2214 - chromium-browser 5.0.375.29~r46008-3
2215 - ia32-libs <removed> (embed)
2216 - virtualbox <unfixed> (modified-embed)
2217
2218 yasm
2219 - chromium-browser 5.0.375.29~r46008-2
2220
2221 libxslt
2222 - chromium-browser 5.0.375.29~r46008-1
2223 - ia32-libs <removed> (embed)
2224
2225 miniupnpc
2226 - warzone2100 2.3.7-2
2227 NOTE: code still present in tarball but removed during build and unused
2228 - vino 3.2.2-1
2229 NOTE: code still present in tarball but removed during build and unused
2230 - vidalia 0.2.21-2 <unfixed> (old-version)
2231 NOTE: embedded old version might be modified
2232 - vidalia 0.2.21-3 <not-affected> (old-version)
2233 NOTE: code still present in tarball but unused during build
2234
2235 iniparser (not packaged in Debian; RFP bug #582657)
2236 - warzone2100 <unfixed> (modified-embed)
2237
2238 pyglet
2239 - sympy <unfixed> (embed; bug #459716)
2240
2241 mpmath
2242 - sympy <unfixed> (embed; bug #541746)
2243
2244 openssh
2245 - libpam-ssh <unfixed> (embed; bug #598522)
2246
2247 curl
2248 - cmake 2.6.0-6 (embed)
2249 NOTE: Might be fixed earlier. Lenny version recorded.
2250 - criticalmass <unfixed> (static; bug #599061)
2251 - wengophone 2.1.0~beta1-svn9983-1 (embed)
2252 - ia32-libs <removed> (embed)
2253
2254 lib3ds
2255 - boson <unfixed> (embed; bug #600900)
2256 - openscenegraph <unfixed> (embed; bug #601181)
2257
2258 xcftools
2259 - gnome-xcf-thumbnailer <unfixed> (embed)
2260
2261 simplejson
2262 - exaile <unfixed> (embed; bug #604547)
2263
2264 libasycns
2265 - loudmouth <unfixed> (embed; bug #566143)
2266
2267 plplot
2268 - emboss <unfixed> (fork)
2269
2270 acl
2271 - ia32-libs <removed> (embed)
2272
2273 arts
2274 - ia32-libs <removed> (embed)
2275
2276 attr
2277 - ia32-libs <removed> (embed)
2278
2279 audiofile
2280 - ia32-libs <removed> (embed)
2281
2282 avahi
2283 - ia32-libs <removed> (embed)
2284
2285 celt
2286 - ia32-libs <removed> (embed)
2287
2288 coreutils
2289 - ia32-libs <removed> (embed)
2290
2291 cyrus-sasl2
2292 - ia32-libs <removed> (embed)
2293
2294 db4.8
2295 - ia32-libs <removed> (embed)
2296
2297 dbus
2298 - ia32-libs <removed> (embed)
2299
2300 directfb
2301 - ia32-libs <removed> (embed)
2302
2303 esound
2304 - ia32-libs <removed> (embed)
2305
2306 fltk1.1
2307 - ia32-libs <removed> (embed)
2308
2309 fontconfig
2310 - ia32-libs <removed> (embed)
2311
2312 freeglut
2313 - ia32-libs <removed> (embed)
2314
2315 gcc-3.3
2316 - ia32-libs <removed> (embed)
2317
2318 gdbm
2319 - ia32-libs <removed> (embed)
2320
2321 gnutls26
2322 - ia32-libs <removed> (embed)
2323
2324 hal
2325 - ia32-libs <removed> (embed)
2326
2327 isdnutils
2328 - ia32-libs <removed> (embed)
2329
2330 jack-audio-connection-kit
2331 - ia32-libs <removed> (embed)
2332
2333 keyutils
2334 - ia32-libs <removed> (embed)
2335
2336 krb5
2337 - ia32-libs <removed> (embed)
2338
2339 lesstif2
2340 - ia32-libs <removed> (embed)
2341
2342 libaio
2343 - ia32-libs <removed> (embed)
2344
2345 libasyncns
2346 - ia32-libs <removed> (embed)
2347
2348 libcap2
2349 - ia32-libs <removed> (embed)
2350
2351 libdrm
2352 - ia32-libs <removed> (embed)
2353
2354 libedit
2355 - ia32-libs <removed> (embed)
2356
2357 libexif
2358 - ia32-libs <removed> (embed)
2359
2360 libgcrypt11
2361 - ia32-libs <removed> (embed)
2362
2363 libgpg-error
2364 - ia32-libs <removed> (embed)
2365
2366 libgphoto2
2367 - ia32-libs <removed> (embed)
2368
2369 libice
2370 - ia32-libs <removed> (embed)
2371
2372 libieee1284
2373 - ia32-libs <removed> (embed)
2374
2375 libjpeg8
2376 - ia32-libs <removed> (embed)
2377
2378 libnss-ldap
2379 - ia32-libs <removed> (embed)
2380
2381 libogg
2382 - ia32-libs <removed> (embed)
2383
2384 libpam-ldap
2385 - ia32-libs <removed> (embed)
2386
2387 libsamplerate
2388 - ia32-libs <removed> (embed)
2389
2390 libsdl1.2
2391 - ia32-libs <removed> (embed)
2392
2393 libsm
2394 - ia32-libs <removed> (embed)
2395
2396 libssh2
2397 - ia32-libs <removed> (embed)
2398
2399 libtasn1-3
2400 - ia32-libs <removed> (embed)
2401
2402 libx11
2403 - ia32-libs <removed> (embed)
2404
2405 libx86
2406 - ia32-libs <removed> (embed)
2407
2408 libxau
2409 - ia32-libs <removed> (embed)
2410
2411 libxcb
2412 - ia32-libs <removed> (embed)
2413
2414 libxcomposite
2415 - ia32-libs <removed> (embed)
2416
2417 libxcursor
2418 - ia32-libs <removed> (embed)
2419
2420 libxdamage
2421 - ia32-libs <removed> (embed)
2422
2423 libxdmcp
2424 - ia32-libs <removed> (embed)
2425
2426 libxext
2427 - ia32-libs <removed> (embed)
2428
2429 libxfixes
2430 - ia32-libs <removed> (embed)
2431
2432 libxi
2433 - ia32-libs <removed> (embed)
2434
2435 libxinerama
2436 - ia32-libs <removed> (embed)
2437
2438 libxmu
2439 - ia32-libs <removed> (embed)
2440
2441 libxp
2442 - ia32-libs <removed> (embed)
2443
2444 libxrandr
2445 - ia32-libs <removed> (embed)
2446
2447 libxrender
2448 - ia32-libs <removed> (embed)
2449
2450 libxss
2451 - ia32-libs <removed> (embed)
2452
2453 libxt
2454 - ia32-libs <removed> (embed)
2455
2456 libxtst
2457 - ia32-libs <removed> (embed)
2458
2459 libxv
2460 - ia32-libs <removed> (embed)
2461
2462 libxxf86vm
2463 - ia32-libs <removed> (embed)
2464
2465 mesa
2466 - ia32-libs <removed> (embed)
2467
2468 mpg123
2469 - ia32-libs <removed> (embed)
2470
2471 nas
2472 - ia32-libs <removed> (embed)
2473
2474 nss
2475 - ia32-libs <removed> (embed)
2476
2477 openal-soft
2478 - ia32-libs <removed> (embed)
2479
2480 openssl
2481 - ia32-libs <removed> (embed)
2482
2483 pam
2484 - ia32-libs <removed> (embed)
2485
2486 popt
2487 - ia32-libs <removed> (embed)
2488
2489 pulseaudio
2490 - ia32-libs <removed> (embed)
2491
2492 sane-backends
2493 - ia32-libs <removed> (embed)
2494
2495 sqlite3
2496 - ia32-libs <removed> (embed)
2497 - chromium-browser <unfixed> (embed)
2498
2499 sysfsutils
2500 - ia32-libs <removed> (embed)
2501
2502 tcp-wrappers
2503 - ia32-libs <removed> (embed)
2504
2505 tdb
2506 - thunar 1.2.1-3 (old-version)
2507 - ia32-libs <removed> (embed)
2508
2509 tslib
2510 - ia32-libs <removed> (embed)
2511
2512 unixodbc
2513 - ia32-libs <removed> (embed)
2514
2515 xaw3d
2516 - ia32-libs <removed> (embed)
2517
2518 xbitmaps
2519 - ia32-libs <removed> (embed)
2520
2521 xcb-util
2522 - ia32-libs <removed> (embed)
2523
2524 xcursor-themes
2525 - ia32-libs <removed> (embed)
2526
2527 xft
2528 - ia32-libs <removed> (embed)
2529
2530 dicomparser
2531 - vtk <unfixed>
2532 - paraview <unfixed>
2533 NOTE: as part of its copy of vtk
2534 - insighttoolkit <unfixed>
2535
2536 proj
2537 - vtk <unfixed>
2538 - paraview <unfixed>
2539 NOTE: as part of its copy of vtk
2540 - therion <unfixed>
2541 - python-pyproj 1.8.6-1
2542
2543 netcdf
2544 - vtk <unfixed>
2545 - paraview <unfixed>
2546 NOTE: as part of its copy of vtk
2547
2548 insighttoolkit
2549 - vtk <unfixed> (embed)
2550 NOTE: embeds at least MetaIO
2551 - paraview <unfixed> (embed)
2552 NOTE: embeds at least MetaIO
2553
2554 gl2ps
2555 - vtk <unfixed>
2556 - paraview <unfixed>
2557 NOTE: as part of its copy of vtk
2558 - avogadro <unfixed>
2559 - gabedit <unknown> (embed)
2560 NOTE: not sure if it is built
2561 - drawxtl <unfixed> (embed)
2562 - rgl <unfixed> (embed)
2563 - gmsh <unfixed>
2564 - mcrl2 <unfixed> (embed)
2565 - mysql-gui-tools <unknown> (embed)
2566 NOTE: not sure if it is built
2567 - opencascade <unfixed> (embed)
2568 - orsa <unfixed> (embed)
2569 - qtiplot <unfixed> (embed)
2570 - qwtplot3d <unfixed> (embed)
2571 - root-system <unknown> (embed)
2572 NOTE: not sure if it is built
2573 - scilab <unfixed> (embed)
2574 - snd <unknown> (embed)
2575 NOTE: not sure if it is built
2576 - xmakemol <unfixed> (embed)
2577
2578 qwtplot3d
2579 - qtiplot <unfixed>
2580
2581 parseafm (from Adobe)
2582 - vftool <unfixed>
2583 - gnustep-back <unknown>
2584 NOTE: looks like it isn't built
2585 - evince <unfixed>
2586
2587 bugzilla
2588 - perl <unknown>
2589 - libcgi-pm-perl <unknown>
2590
2591 isc-dhcp
2592 - dhcp3 <unfixable> (old-version)
2593 - dhcp <unfixable> (old-version)
2594
2595 chipmunk (ITP: #623274)
2596 - xmoto <unfixed> (embed; bug #623299)
2597 - libtuxcap <unfixed> (embed; bug #623300)
2598
2599 libsigsegv
2600 - gawk 3.1.8+dfsg-0.1
2601
2602 pdfrw
2603 - rst2pdf <unfixed> (embed; bug #638607)
2604
2605 bind9
2606 - isc-dhcp <unfixed> (embed; bug #643569)
2607 NOTE: introduced in upstream 4.2 series
2608
2609 qof
2610 - gnucash <unfixed> (embed; bug #556245)
2611
2612 feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
2613 - megaglest <unfixed> (modified-embed)
2614
2615 acsccid
2616 - ccid 1.3.11 <unfixed> (fork)
2617 - openct <unfixed> (modified-embed)
2618 - towitoko <unfixed> (modified-embed)
2619
2620 ccid
2621 - openct <unfixed> (modified-embed)
2622 - towitoko <unfixed> (modified-embed)
2623
2624 msmtp
2625 - mpop <unfixed> (embed)
2626
2627 iCalcreator
2628 - collabtive <unfixed>
2629 NOTE: class.ical.php
2630 - glpi <unfixed>
2631
2632 plupload
2633 - wordpress <unfixed>
2634
2635 feedcreator (php lib)
2636 - collabtive <unfixed>
2637 NOTE: class.rss.php
2638 - piwigo <unfixed>
2639 - dokuwiki <unfixed> (modified-embed)
2640 NOTE: dokuwiki uses an "enhanced" version
2641
2642 emacs
2643 - le <unfixed>
2644 NOTE: it uses an almost-pristine 2008 version of emacs' regex.{c,h}
2645
2646 libjsoncpp
2647 - eiskaltdcpp <unfixed> (embed)
2648 - drizzle <unfixed> (embed)
2649
2650 mongoose
2651 - phantomjs <unfixed> (modified-embed)
2652
2653 rapidxml (not packaged in Debian, http://rapidxml.sourceforge.net)
2654 - boost1.49 <unfixed> (embed)
2655 - boost1.50 <unfixed> (embed)
2656 - deal.ii <unfixed> (embed)
2657 - fife <unfixed> (embed)
2658 - witty <unfixed> (embed)
2659
2660 make
2661 - remake <unfixed> (fork)
2662
2663 metacity
2664 - mutter <unfixed> (fork)
2665
2666 mutter
2667 - muffin <unfixed> (fork)
2668
2669 libjson-spirit-dev
2670 - bitcoin <unfixed> (modified-embed)
2671 - litecoin <itp> (modified-embed; bug #693492)
2672
2673 bitcoin
2674 - litecoin <itp> (fork; bug #693492)
2675
2676 json-spirit
2677 - bitcoin <unfixed> (modified-embed)
2678 - litecoin <itp> (modified-embed; bug #693492)
2679
2680 libupnp
2681 - mediatomb <unfixable> (fork)
2682 - djmount <unfixed> (embed; bug #699562)
2683
2684 flowplayer-core (not packaged in Debian)
2685 - mahara <unfixed> (modified-embed)
2686
2687 dcraw
2688 - ufraw <unfixed>
2689 - libraw <unfixed>
2690 - kdcraw <unfixed>
2691 NOTE: in embedded copy of libraw
2692 - xbmc <unfixed>
2693 - exactimage <unfixed>
2694 - rawtherapee <unfixed>
2695 - rawstudio <unfixed>
2696
2697 libraw
2698 - libkdcraw 4:4.12.3-1
2699 - darktable <unfixed> (modified-embed; bug #682980)
2700 - shotwell <unfixed>
2701 NOTE: possibly fixed in wheezy and greater
2702
2703 mednafen
2704 - libvorbisidec 0.9.17.1-1
2705 [squeeze] - libvorbisidec <unfixed>
2706 [wheezy] - libvorbisidec <unfixed>
2707 NOTE: not-affected since 0.9.17.1-1 (as above)
2708 NOTE: mednafen 0.8.D.3-4 and 0.8.D.3-5 attempted to use the packaged libvorbisidec,
2709 NOTE: but this breaks CD playback when using .ogg files (see #699143), so it's
2710 NOTE: likely that future packages in the 0.8 series will build using the embedded code.
2711 - libmpcdec 0.9.21-1
2712 NOTE: not-affected since 0.9.21-1 (as above)
2713
2714 xmoto
2715 - chipmunk <unfixed> (bug #623299)
2716
2717 irrlicht
2718 - supertuxkart <unfixed> (modified-embed)
2719
2720 snappy
2721 - chromium-browser 35.0.1916.86-1
2722 NOTE: not sure if it's build
2723 - mongodb <unfixed>
2724 NOTE: needs further checks
2725 - couchdb <unfixed>
2726 - libsereal-decoder-perl <unfixed>
2727 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2728 - libsereal-encoder-perl <unfixed>
2729 NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html
2730
2731 automysqlbackup
2732 - autopostgresqlbackup <unfixed>
2733 NOTE: fork
2734
2735 python-pip
2736 - python-virtualenv <unfixed>
2737
2738 scrypt
2739 - python-scrypt <unfixed> (embed; wontfix; package in NEW)
2740 NOTE: upstream scrypt does not provide a shared library/API
2741
2742 srtp
2743 - chromium <unfixed>
2744 - qutecom <unfixed>
2745
2746 fonttools
2747 - python-enable <unfixed> (embed; bug #715145)
2748
2749 uglifyjs
2750 - ruby-uglifier <unfixed> (modified-embed; bug #718367)
2751
2752 openacs
2753 - dotlrn <unfixed> (modified-embed; bug #718487)
2754
2755 jsgantt
2756 - rt4-extension-jsgantt <unfixed> (embed; bug #724287)
2757 - trac-jsgantt <unfixed> (embed; bug #724287)
2758 NOTE: jsgantt is not packaged seperately so far
2759
2760 libjs-pdf
2761 - iceweasel <unfixed> (fork)
2762
2763 jmapviewer
2764 - josm <unfixed> (embed; bug #731029)
2765
2766 qt4-x11
2767 - phantomjs <unfixed> (embed)
2768 NOTE: phantomjs embeds parts of src/
2769
2770 eigen3
2771 - r-cran-rcppeigen <unfixed> (modified-embed; bug #729716)
2772
2773 libyaml
2774 - libyaml-libyaml-perl <unfixed> (embed; bug #664224)
2775
2776 liblivemedia
2777 - vlc <unfixed> (static)
2778 - mplayer <removed> (static)
2779
2780 python-gnupg
2781 - gajim <unfixed> (modified-embed)
2782
2783 xchat:
2784 - hexchat <unfixed> (fork)
2785
2786 libjs-jquery-filetree (not packaged in Debian; RFP bug #741581; http://www.abeautifulsite.net/blog/2008/03/jquery-file-tree/ https://github.com/daverogers/jQueryFileTree)
2787 - controlaula <unfixed> (embed)
2788 - dolibarr <unfixed> (embed)
2789
2790 libjs-jquery-bbq (not packaged in Debian; RFP bug #741586; http://benalman.com/projects/jquery-bbq-plugin/ http://github.com/cowboy/jquery-bbq)
2791 - drupal7 <unfixed> (embed)
2792 - ganglia-web <unfixed> (embed)
2793 - jqapi <unfixed> (embed)
2794
2795 lame
2796 - mp3gain <unfixed> (modified-embed)
2797 NOTE: ancient copy, part of mpglib which was probably part of mpg123 at some point
2798
2799 zopfli
2800 - pigz <unfixed> (embed)
2801 - advancecomp <unfixed> (embed)
2802
2803 libquazip
2804 - pencil2d (modified-embed)
2805
2806 syslogd
2807 - rsyslog (fork)
2808
2809 libebur128
2810 - mlt (modified-embed; bug #762341)
2811
2812 wpa
2813 - moonshot-gss-eap <unfixed> (embed)
2814 NOTE: Functionality not available in stable library form

  ViewVC Help
Powered by ViewVC 1.1.5