Embedded code copies ==================== https://wiki.debian.org/EmbeddedCodeCopies This file collects source packages that embed code from other projects. This is considered bad for fixing security flaws because the fix needs to be applied in multiple source packages. Format: () - (; bug #) NOTE: optional comments about the linkage of the embedding srcpkg status: version number fixing the embedded copy if the issue is not yet fixed if the package was removed from the archive if the package is in the process of being packaged if the package does not use the embedded copy if the version number can not be determined for unavoidable cases (e.g., forks that add real value) sort: static (linking statically against a lib) embed (embeds a copy of the library into another source package) modified-embed (embeds a code copy that differs from upstream code) fork (a full-blown fork of another source package) old-version (an older version of essentially the same code) The srcpkg might be some string to identify the code if there is no specific source package. Everything up to the next line is ignored. ---BEGIN poppler - pdftohtml [sarge] - pdftohtml [etch] - pdftohtml NOTE: has been replaced by poppler-utils - kdegraphics 4:4.2.2-1 (embed; bug #436164) - texlive-base 3.0-12 (embed) - texlive-bin 2007-1 (embed) - koffice 1:2.0.0-1 (embed; bug #436163) - libextractor 0.5.12-1 (embed) NOTE: libextractor is using its own pdf decoder now - ipe (embed) NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp - ruby-gnome2 (embed) - pdfedit (embed; bug #510794) - swftools (embed; bug #551293) - xpdf 3.02-9 (fork) - luatex NOTE: detected by lintian, needs to be checked/confirmed pdksh (no longer developed since 1999) - mksh (fork) - posh (fork) ppmd - libcomplearn-mod-ppmd (fork) NOTE: discussion in #458152 libevent - transmission 1.71-1 (embed; bug #529372) - chromium-browser 5.0.375.29~r46008-1 - dnsproxy (embed) - iceweasel (embed) - icedove (embed) lrmi - read-edid 2.0.0-1 (embed; bug #495131) - s3switch (embed) - xresprobe (embed) - zhcon (embed) php-htmlpurifier - mahara 1.2.5-1 (embed) - knowledgeroot 0.9.9.5-5 (embed) - moodle 2.5.1-1 (embed) - collabtive 2.0+dfsg-6 (embed; bug #781414) fuse - mergerfs (embed) NOTE: Used and maintained by mergerfs upstream - ntfs-3g (embed) NOTE: Since 1:2013.1.13AR.3-2 builds with internal fuse copy peercast - gnome-peercast (embed) [etch] - gnome-peercast (embed) silc-toolkit - silc-client 1.1~beta6-1 (embed) icclib - ghostscript 9.06~dfsg-1 (embed; bug #531624) - argyll (embed) libusb - argyll (embed) - ia32-libs (embed) dietlibc - ccontrol 0.9.1+20071204-1 (static) - mksh (static) NOTE: /bin/mksh-static only, and only on some arches (others use eglibc) libmikmod - pysol-sound-server (modified-embed) - sdl-mixer1.2 (embed) TODO: report bug - uqm 0.6.2.dfsg-8 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - black-box 1.4.6-2.2 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - timidity (modified-embed; bug #649344) libiax - iaxmodem (embed; bug #548885) spandsp - iaxmodem (embed; bug #548885) - flightgear (embed) python-paramiko - fabric 0.9.0-2 (embed; bug #561398) zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions) - dpkg 1.15.6 (static) NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion - rsync (modified-embed) - cherokee (embed) NOTE: somehow derived code base - mono (embed) TODO: check mozilla - linux-2.6 (embed) - pvpgn 1.7.8-2 (embed) - mrtg 2.12.2-1 (embed) - rpm (embed) NOTE: pinged anibal since when rpm was fixed - tuxcmd-modules (embed) - zsync - tra - sash - nsis (embed) - pyfits 1:2.3.1-1 - mseide-msegui NOTE: mseide - mirrordir - poco - klibc - emboss 6.3.1-1 (embed) - ghostscript 8.64~dfsg-2 (embed) - freeimage - clamav (fork) NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that" - tuxonice-userui (static) - plt-scheme - perl - paraview - velvet 0.7.56~nozlibcopy-1 - gcvs - dump - aide (static) - dar (static) - avfs - fpc - winff NOTE: inherited from fpc, see #472304 - lazarus NOTE: inherited from fpc, see #472304 - erlang (embed) - gamera 3.2.3-1 (embed) - python2.4 (embed; bug #553403) - python2.5 (embed; bug #553403) - texlive-bin 2013.20130522.30620-1 (embed) - sudo (embed) NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway - node-pako (embed) dulwich - hg-git 0.1.0-1 (embed; bug #541996) libvigraimpex - hugin (embed; bug #542259) - enblend-enfuse (embed; bug #542258) - gamera 3.2.3-1 (embed) libbz2 - dpkg 1.15.6 (static) - amd64-libs (static) NOTE: let's call it "static" - dar (static) - dump (static) - unalz 0.64-1 (embed) NOTE: has code, by the maint, to use the system version but links against the internal copy - clamav (embed) NOTE: libclamav/nsis/bzlib* - nsis (modified-embed) - pristine-tar (modified-embed) NOTE: compression code only, not uncompression - r-base-core-ra 1.2.8 (static) - r-base-core 2.11.1 (static) NOTE: links dynamically in squeeze, statically in lenny - rpm (static) NOTE: lsb-rpm package is statically linked, normal rpm links dynamically libyahoo2 - centerim (embed; bug #559783) libmsn - centerim (embed; bug #559783) libgadu - centerim (embed; bug #559783) - pidgin (links dynamically since initial release; fixed in gaim) - gaim 1:2.0.0+beta3-3 (embed; bug #360280) - kdenetwork 4:3.3.2-5 (embed) NOTE: from kdenetwork: kopete - ekg 1:1.8~rc0-1 (embed) - kadu 0.6.0.2-3 (embed; bug #504430) - gadu (embed) xmlrpc (which package is the "origin" of this code?) - drupal (embed) - phpgroupware (embed) - egroupware (embed) - phpwiki (embed) - php4 (embed) TODO: check, php-pear, IIRC this was reorganized some weeks ago? shtool (affects build-time only) - mysql-ocaml (embed) - php4 (embed) - php5 (embed) xulrunner - iceape (embed; bug #561749) - iceweasel 2.0.0.19 (embed) - icedove (embed; bug #561750) - kompozer (embed; bug #532168) - galeon 2.0.2-4 (embed) - epiphany-browser 2.14.3-8 (embed) - conkeror 0.9~git080629-2 (embed) - kazehakase 0.4.2-1 (embed) - wine-gecko-unstable (embed; bug #669672) xli - xloadimage (embed) lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream) - openmotif (embed) libxpm - lesstif2 (embed; bug #575750) - ia32-libs (embed) kerberized apps with BSD origin - krb4 (embed) - krb5 (embed) - heimdal (embed) - netatalk (fork) grip (which pkg is the origin?) - libcdaudio - grip - gnome-vfs TODO: check vfs2 as well fudforum [etch] - phpgroupware (embed) NOTE: phpgroupware-fudforum [sarge] - egroupware-fudforum (embed) libbsd - rdate 1:1.2-3 (embed) - atheme-services - libbsd-arc4random-perl (modified-embed) NOTE: code not used, it links dynamically against libbsd instead - isakmpd - bsdgames (embed) - bsd-mailx (embed) - netcat-openbsd (embed; bug #550611) - openssh (embed) - unworkable (embed) - mksh (modified-embed) NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches NOTE: FIXME, we should only have one entry: - mksh (modified-embed) NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused - ia32-libs (embed) cvs - gcvs (embed) NOTE: see cvsunix/src in tarball pcre3 - php4 (embed) - analog 2:5.23-0woody1 (embed) - chicken 3.2.7-2 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - goffice (embed) NOTE: libgoffice-* - hypermail 2.2.0.dfsg-2 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - privoxy 3.0.9-1 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - vfu 4.06-4.1 (embed; bug #450754) - tf5 5.0beta7-1 (embed) - monotone 0.43-1 (embed) NOTE: this only affects versions >= 0.37 - glib2.0 2.15.2-1 (embed) - apache2 2.0.53-4 (embed) - exim4 4.10-0.srh20.12 (embed) - yacas (embed) NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway - gtamsanalyzer.app 0.42-5 (embed) - tin 980117-1 (embed) - kazehakase 0.5.2-1 - webkit 1.0.1-1 (embed) - qt4-x11 (embed) NOTE: embedded via webkit copy - erlang (embed) - ssed (embed) - ircd-hybrid (static) - emboss (fork) - cherokee (embed) - oftc-hybrid 1.6.9.dfsg-1 (embed) - ratbox-services (embed) - squeak-vm (embed) - tinymux (embed) - mp4h (embed) tiff - wxwindows2.4 2.2.1 (embed) - gamera 3.2.3-1 (embed) - freeimage (embed) - libtk-img (embed; bug #732147) NOTE: there are two copies, one under tiff/ other under libtiff/ - gdal - ia32-libs (embed) - ghostscript 8.71~dfsg-1 (embed) - povray (embed) - insighttoolkit4 (embed) - sfftobmp (embed) uudeview - libconvert-uulib-perl (embed) - pan (embed) sqlite - amarok (embed) - monotone 0.43-1 (embed) - iceweasel (embed) - heimdal (embed; bug #559616) util-linux - loop-aes-utils (embed) NOTE: contains code from util-linux' mount in the mount-aes-udeb - ia32-libs (embed) sylpheed - sylpheed-claws (fork) phpsysinfo - egroupware (embed) - phpgroupware (embed) phpldapadmin [sarge] - egroupware (embed) NOTE: removed from egroupware after sarge - ldap-account-manager (embed; bug #781419) chmlib - kchmviewer (embed) ffmpeg (libavcodec/libavformat) - mplayer 1.0~rc2-14 (embed; bug #395252) - kino 1.0.0-1 - vlc 3.0.0~rc1~20171206-1 (embed; since 2.2.2-6 vlc uses ffmpeg 2.8.6, explanation in #803868) - smilutils 0.3.0-10 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed - motion 3.1.19-1 - gstreamer0.10-ffmpeg 0.10.3-2 - xmovie (static) TODO: gimp-gap (potentially using ffmpeg code as well) - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750) - audacity 1.3.7-2 (embed; bug #512278) - chromium-browser 44.0.2403.157-1 (fork; bug #763632) - libav faad2 - mplayer 1.0~rc2-20 (embed) - avifile (embed; bug #538750) - ffmpeg-debian (embed) libmad (MPEG decoding lib) - xine-lib (embed) - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*] TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2 - praat (embed) libdts - xine-lib (embed) flac - xine-lib (embed) - ia32-libs (embed) - mame (embed) - praat (unknown> (embed) liba52 - a52dec (embed) - xine-lib (embed) mpeg2dec (libmpeg2) - xine-lib (embed) libmpeg3 - squeak-vm (embed) libntlm - wget (fork; bug #550436) - curl (fork; bug #550437) - cntlm (fork; bug #550438) uw-imap - pine (embed) - alpine (embed) imagemagick - graphicsmagick (fork) python-urlgrabber - mercurial (embed; bug #531062) - w3af (embed; bug #555372) [experimental] - harvestman (embed; bug #555373) beautifulsoup - python-mechanize (embed; bug #555349) - zope2.11 (embed; bug #555350) - twill (embed) halibut - nsis (fork) libghttp - hotway (embed) libsndfile - ardour 1:2.7.1-1 (embed) - ia32-libs (embed) glibmm2.4 - ardour 1:2.7.1-1 (embed) libgnomecanvasmm2.6 - ardour 1:2.7.1-1 (embed) libsigc++-2.0 - ardour 1:2.7.1-1 (embed) - ia32-libs (embed) soundtouch - ardour 1:2.7.1-1 (embed) libmms - xine-lib (embed) - mimms (embed) ckeditor - request-tracker4 (embed) fckeditor - knowledgeroot 0.9.8.5-3 (embed; bug #461555) - moin 1.8.2-2 (embed; bug #452599) - karrigell (embed; bug #452598) - gforge 4.6.99+svn6225-1 (embed) - request-tracker3.8 (embed) - otrs2 (embed) libphp-phpmailer - moodle 2.5.1-1 (embed; bug #507185) - symfony (embed; bug #566778) - glpi 0.80.7-2 giflib - wine (fork; bug #466181) NOTE: the embedded code is a fork of ungif, which is an older version of giflib bennu (not packaged in Debian, http://bennu.sourceforge.net) - moodle (embed) smarty - gallery2 2.2.5-2 (embed; bug #471160) - mahara 0.9.2-2 (embed; bug #471201) - gosa 2.4beta1-1 (embed; bug #471200) TinyMCE - wordpress 2.5.1-3 (embed; bug #478257) - moodle (embed; bug #507185) - knowledgeroot (embed) - joomla (bug #326398) - mahara 1.2.6-1 (embed; #597752) - glpi 0.80.7-2 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121) - scite (embed) - qscintilla (embed) - qscintilla2 (embed) - geany (fork) - anjuta (embed) - sdlbasic (embed) libphp-adodb - moodle 2.5.1-1 (embed; bug #507185) NOTE: also AdoDB-XML Schema - gallery2 (embed) - phppgadmin (embed) - egroupware (embed) - phpwiki (embed) - torrentflux 2.0beta1-2 (embed) - ipplan (embed) - typo3-src (embed) - cacti 0.8.6d-1 (embed) [sarge] - cacti (embed) NOTE: dependency exists, but internal version is used - gforge 4.7~rc2-6 (embed) - mahara (embed) gzip - linux-2.6 (embed) [lib/inflate.c] - klibc (embed) NOTE: based on linux-kernel gzip code - busybox (embed) - pristine-tar (modified-embed) NOTE: compression code only, not uncompression - ncompress (old-version) neon - cadaver 0.22.3+debian-1 (embed; bug #188381) - gnome-vfs2 (embed; bug #395874) - litmus 0.13-1 (embed; #395875) [sarge] - screem (embed) - sitecopy 1:0.16.0-1 (embed; bug #395876) [etch] - tla (embed; bug #395877) [sarge] - tla (embed; bug #395877) libmodplug - gst-plugins-bad0.10 0.10.10.2-1 (embed) libvncserver - krfb 4:14.12.2-1 (embed) [libvncserver/rfbserver.c] - italc (embed) [ica/x11/libvnc*] - ssvnc (modified-embed) [vnc_unixsrc/*] NOTE: client code only - tigervnc (fork) - tightvnc (fork) - vncsnapshot (embed) NOTE: client code only, small files subset - veyon (embed) [3rdparty/libvncserver/libvncclient/*] NOTE: uses system-wide libvncserver, but still bundles libvncclient - vino (embed) [server/libvncserver/*] NOTE: server code only putty - filezilla (embed) tinyxml - filezilla - crystalspace (embed) - libwfut (embed) - rarian (embed) - bulletml (embed) - pokerth (embed) - qutecom (embed) - sofa-framework (embed) - yate (embed) - antigrav (embed) - balder2d (embed) - cal3d (embed) - criticalmass (embed) - ember (embed) - epiphany (embed) - gambit (embed) - noiz2sa (embed) - ogre (embed) - opencity (embed) - openmovieeditor (embed) - pouetchess (embed) - tecnoballz (embed) - trigger-rally (embed) - xmoto (embed) - mapnik (embed) NOTE: uses a different XML parser by default - rrootage 0.23a-6 (embed) NOTE: links to libbulltetml - boson (embed) NOTE: the embedded code is unused - cppcheck (embed) NOTE: introduced in 1.47, will use system's version in 1.48 [squeeze] - cppcheck - xye (embed; bug #758429) NOTE: https://sourceforge.net/p/xye/bugs/7/ gv - evince (embed) NOTE: ps/ tree from gv 3.5.8 NOTE: evince-gtk is affected (a component of evince source package) libXbae - paw (embed) libgtkhtml - claws-mail-extra-plugins (fork) libXaw - paw (embed) NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty - ia32-libs (embed) libgd2 - graphviz 2.16-1 (embed) NOTE: lib/gd seems to be 2.0.33 - wml 2.0.11ds2-1 (embed) - libwmf (embed) NOTE: derived from gd 1.6.3, but only used to write images - plt-scheme (embed; bug #601525) - hhvm (embed) NOTE: hhvm's internal copy is forked to include additional memory handling (so that memory limits and memory stats are effective) - texlive-bin (embed) [wheezy] - texlive-bin 2013.20130522.30620-1 (embed) [squeeze] - texlive-bin 2013.20130522.30620-1 (embed) rar - unrar-nonfree (embed) unrar-free (maybe this code is derived from the original rar, too?) - clamav (embed) NOTE: seems to be disabled in default config mplayer (DirectMedia Object loader) - xine-lib (embed) NOTE: src/libw32dll/ - vlc (embed) NOTE: modules/codec/dmo/ - mplayer 1.0~rc2-20 (embed) libwpd (WordPerfect converter) - openoffice.org (embed) fsplib (http://sourceforge.net/projects/fsp/) - gftp (embed) NOTE: lib/fsplib version 0.3 sprng - tree-puzzle (embed) librpcsecgss - krb5 (embed) jasper - ghostscript 8.64~dfsg-2 (embed) libiris - psi (embed) - kdenetwork (embed) NOTE: kopete embeds libiris but links dynamically to libidn - kdegames (embed) NOTE: ksirk/kde4 libidn - monotone 0.43-1 (embed) - psi (embed) NOTE: psi embeds libiris which embeds libidn - kdegames (embed) NOTE: kdegames/kde4 embeds libiris which embeds libidn NOTE: this is probably what later became ksirk - ia32-libs (embed) - glibc (embed) NOTE: old copy - ksirk (embed) lua5.1 - monotone 0.43-1 (embed) - nmap 5.00-1 (embed; bug #527997) [lenny] - nmap (embed; bug #527997) - ocropus (embed) - enigma (embed) NOTE: requires lua built with C++ - freeciv 2.4.1-1 (embed) NOTE: from 2.4.1-1 on freeciv uses system library instead - spring (embed) - redis (modified-embed; bug #901669) NOTE: deps/README.md states that "[/deps/lua/] is Lua 5.1 with minor changes for security and additional libraries" libbotan - monotone 0.43-1 (embed) NetXX - monotone 0.43-1 (embed) libgc - mono (embed) lzma - p7zip (embed) - xz-utils (fork) - r-base (embed) NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8 - mame (embed) - nsis (embed) lzo2 - ia32-libs (embed) - busybox (embed) - grub2 (embed) - syslinux (modified-embed) - valgrind (modified-embed) - xen (embed) - remmina (embed) - blender (embed) - x11vnc (embed) - italc (embed) - dump (embed) - krfb (embed) - nfdump (embed) - kino (embed) - samhain (embed) - u-boot (modified-embed) - icecc (embed) - bb (embed) - mednafen 0.8.D.3-4 (embed) - ht (embed) - n2n (embed) NOTE: still not sure if all those embedded copies are actually used NOTE: some packages actually use minilzo, which is not built by src:lzo2 and is only available as source in liblzo2-dev lz4 - eet (embed) - efl (embed) - grub2 (embed) - gtkwave (embed) - iceweasel (embed) - kfreebsd-9 (embed) - kfreebsd-10 (embed) - php-horde-lz4 (embed) - pytables (embed) - zfsutils (embed) yassl - mysql-5.1 (embed) - mysql-5.5 (embed; bug #627207) pax code - tar (embed) - cpio (embed) t1lib - tetex-bin 2.0.2-1 (embed) - texlive-bin 2013.20130522.30620-1 (embed; bug #667912) NOTE: used only in xdivk (a dvi file viewer that the maintainer refuses to drop) - grace 5.1.14-2 (embed) - evince (embed) NOTE: at least parseafm code, maybe more? - vftool (embed) NOTE: just parseafm code it seems guichan - boswars (embed) NOTE: maintainer notified us, working on it tolua - boswars (embed) NOTE: maintainer notified us, working on it NOTE: actually tolua++ - ocropus (embed) NOTE: actually tolua++ - freeciv (embed) NOTE: actually tolua++ - enigma (embed) asio-dev - luxrender (embed) - mame (embed) xine-lib - vlc (embed) NOTE: only parts included in modules/access/rtsp netpbm - tcl8.3 (embed) - tcl8.4 (embed) - tcl8.5 (embed) NOTE: generic/tkImgGIF.c tk8.5 - tk8.0 (old-version) - tk8.3 (old-version) - tk8.4 (old-version) - perl-tk (fork) samba - mc 2:4.6.2~git20080311-1 (embed) NOTE: maintainer is aware of this, currently searching a solution plib1.8.4c2 - boson (fork) NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar fribidi - quesoglc 0.7.2-2 (embed) glew - quesoglc 0.7.2-2 (embed; bug #489341) NOTE: waiting on GLEW_MX version of glew (see bug #474488) - trigger 0.5.2.1-2 (embed) NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html - trigger-rally 0.5.2.1-2 (embed) NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html - chromium-browser 5.0.375.70~r48679-2 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use) - transcend (embed) - cultivation (embed) - passage (embed) - gravitation (embed) tar - libarchive (embed) NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable cpio - libarchive (embed) NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package) kde4libs - kdelibs (old-version) webkit - qt4-x11 (embed; bug #479851) [etch] - qt4-x11 (webkit support introduced in version 4.4) - kde4libs (fork) NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs) - chromium-browser (fork) ftgl - blender 2.46+dfsg-1 (embed) - vtk (embed) - paraview (embed) NOTE: as part of its copy of vtk - tulip (embed) NOTE: depends on -dev but string found on binary - root-system (embed) NOTE: depends on -dev package; not confirmed at source - rgl (embed) NOTE: not sure if it is built - mysql-gui-tools (embed) NOTE: not sure if it is built - k3d (embed) - extremetuxracer (embed) NOTE: not sure if it is built - critterding (embed) - lightspeed NOTE: depends on -dev but string found on binary wv - abiword wv2 - koffice - calligra qemu - kvm (embed; bug #543159) - qemu-kvm (embed; bug #560853) NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules) - xen-3 3.4.2-2 (embed; bug #560856) - xen-unstable (embed; bug #560856) - slirp4netns (embed) libslirp - qemu 1:4.1-2 (embed) - slirp4netns 1.0.1-1 (embed) vgabios - kvm (embed; bug #489442) - qemu-kvm (embed) bochs - kvm (embed; bug #489442) - qemu-kvm (embed) speex - vorbis-tools (embed) NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c - gst-plugins-good0.10 (embed) - xine-lib (embed) - libfishsound (embed) - libannodex (embed) - opal 3.4.2~dfsg-2 (embed) - mumble 1.2.0~beta1-1 (embed) - vlc (embed) - xmms-speex (embed) - libsdl-sound1.2 (embed) - sweep (embed) - flightgear (embed) readline6 - magic (old-version) - gdb 5.2.cvs20020401-1 opcode - ode (embed) NOTE: opcode is not a package in debian, it is just embedded NOTE: http://www.codercorner.com/Opcode.htm gimpact - ode (embed) NOTE: gimpact is not a package in debian, it is just embedded NOTE: http://gimpact.sf.net mochikit - mahara (embed) NOTE: they require extra patches, still unmerged upstream - ntop (embed) - coherence 0.6.2-1 (embed) - paste (embed) - turbogears (embed) - plone3 (embed) - xulrunner (embed) - libjifty-plugin-chart-perl (embed) - sabnzbdplus (embed) - tgmochikit (embed) prototypejs - netbeans-ide 6.0.1+dfsg-2 (embed) - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218) - webcit (embed; bug #555219) - asterisk 1:1.6.2.0~rc3-1 (embed) - libjson-ruby 1.1.4-1 (embed; bug #555224) - lucene2 2.9.1+ds1-2 (embed; bug #555226) - horde3 (embed) - knowledgeroot 0.9.8.5-4 (embed; bug #555230) - mediatomb 0.12.0~svn2018-5 (embed; bug #555233) - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed) - ebug-http (embed; bug #555236) - libaws 2.7-1 (embed; bug #555222) - phpgedview (embed) - poker-network 1.7.6-1 (embed; bug #555238) - rails 2.1.0-6 (embed) - wordpress 2.5.0-2 (embed; bug #555243) - zope (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3) TODO: search through all of the other zope packages - ampache 3.4.1-2 (embed) - exaile 0.2.14+debian-2.1 (embed; bug #555245) - hobix 0.5~svn20070319-4 (embed; bug #555247) - zabbix 1.6.6-4 (embed; bug #555250) - chora2 2.1.1+debian0-1 (embed; bug #555253) - gollem 1.1.1+debian0-1 (embed; bug # 555254) - jscropperui 1.2.1-1 (embed; bug #555257) - scriptaculous (uses system prototype.js since initial upload; bug #555260) - ingo1 1.2.3+debian0-1 (embed; bug #555261) - kronolith2 2.3.3+debian0-1 (embed; bug #555262) - activeldap 1.2.1-1 (embed) - libv8 (contains a google-specific implementation of prototype.js) - mantis 1.1.2+dfsg-1 (embed; bug #555265) - otrs2 2.3.4-6 (embed; bug #555267) - webcalendar 1.2~b1-2 (embed; bug #555269) - redmine 0.9.0~svn2907-1 (embed; bug #555270) - jifty 0.90519-1 (embed; bug #555271) - jquery 1.4-1 (embed; bug #555272) - passenger 2.2.5debian1-1 (embed; bug #555273) - plone3 (embed; bug #555275) - wesnoth (prototype.js not included in any of the binary packages; bug #555277) - libhtml-prototype-perl 1.48-3 (embed; bug #538920) - xulrunner (embed) NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant - jclicmoodle (embed) - git-cola (embed) gdb - insight (embed) e2fsprogs - ldiskfsprogs (fork) - ia32-libs (embed) quazip (not packaged in Debian) - qcake (embed) NOTE: starting with upstream version 0.6.4 exo - pcmanfm (embed; bug #499677) NOTE: slightly modified source code xfce4-taskmanager - lxtask (embed) NOTE: old fork, maybe outdated isync - postler (embed; bug #628798) java - openjdk-6 - sun-java5 - sun-java6 libphp-snoopy - ampache 3.4.1-2 (embed; bug #504169) - gforge 4.6.99+svn6094-2 (embed) - mahara 1.0.5-2 (embed; bug #504170) - pixelpost 1.7.1-5 (embed; bug #504171) - mediamate 0.9.3.6-5 (embed; bug #504172) - opendb (embed; bug #504173) [etch] - opendb (embed; bug #504173) - wordpress 2.5.1-9 (embed; bug #443948) [etch] - phpgroupware (embed) NOTE: phpgroupware-felamimail - magpierss 0.72-3 (embed; bug #431089) jquery - jsonbot (embed; bug #625524) - zekr (embed) - wordpress (embed) - yocto-reader (embed) - textpattern (embed) - genshi 0.5.1-1 (embed) NOTE: compressed file under examples/ dir - prewikka (embed) - libramaze-ruby (embed) - drupal6 (embed) - b2evolution (embed) - wesnoth (embed) - gammu 1.28.95-1 (embed) - trac (embed; bug #645339) - request-tracker4 (embed; bug #693821) - otrs2 (embed) NOTE: Embeds jquery 1.10 - cacti 0.8.8f+ds1-4 (embed) - pasdoc (embed) NOTE: Embeds jquery 2.0.0 - ikiwiki (embed; bug #643338) - photofloat (embed; bug #721567) - taglib 1.11+dfsg.1-0.1 (embed) jquery-goodies - horizon (embed) NOTE: jquery.cookie.js, jquery.table-sorter.js, jquery-ui.min.js - request-tracker4 (embed; bug #693821) NOTE: libjs-jquery-tablesorter jqueryui - request-tracker4 (embed; bug #693821) - lemonldap-ng 1.4.6-3 (embed) tablesorter (jquery plugin, not packaged yet) - wesnoth (embed) kses - wordpress (embed; bug #504242) NOTE: their copy has all methods renamed to wp_ NOTE: kses isn't in Debian, RFP: #504240 - egroupware (embed) magpierss - wordpress (embed; bug #504242) php-gettext - wordpress 2.8.4-1 (embed; bug #504242) - docbookwiki (embed) - knowledgeroot 0.9.9.5-1 NOTE: non-free libphp-ixr (name may change, it is the Incutio XML-RPC) - wordpress (embed; bug #504242) NOTE: libphp-ixr isn't in Debian, RFP: #504236 - dokuwiki (embed) - textpattern (embed) libphp-cas - glpi 0.80.7-2 (embed) - moodle (embed; bug #505984) scriptaculous (prototype.js is among the embeds in the following) - glpi (embed) - libaws (embed; bug #555222) - op-panel (embed) - symfony (embed) NOTE: maintainer says there are extra incompatible changes required - pixelpost 1.7.1-6 (embed) - webhelpers (embed) - qwik (embed; bug #555241) - smokeping (embed) - turba2 (embed) - typo3-src 4.2.3-1 (embed) - request-tracker3.6 (embed) - request-tracker3.8 (embed) - rt-extension-emailcompletion (prototype.js not included in the binary package) - wordpress 2.5.0-2 (embed) - libhtml-prototype-perl 1.48-3 (embed) libmarkdown-php - pixelpost 1.7.1-6 (embed) NOTE: the markdown in Moodle is not the Markdown from this package php-openid - wordpress-openid 3.3.2-1 (embed) geshi - dokuwiki 0.0.20080505-3.1 (embed) - pgfouine 1.0-1.1 (embed) - websvn 2.1.0-1 (embed) webcalendar - gforge 4.7~rc2-6 (embed; bug #504758) libical - kdepim (fork) NOTE: fixed at some point during 4.0 - kdepimlibs 4.2.0-1 (fork) - claws-mail-extra-plugins (fork) harfbuzz - qt4-x11 (embed) - pango1.0 1.36.0-1 (embed) - fontmatrix (embed) libzip - php5 (modified-embed) - odt2txt (embed; bug #523808) json.php (not packaged; should be replaced with php's built-in functions) - yui - gallery2 - dokuwiki - typo3-src php-fpdf - tcpdf (fork) - phpwiki - egroupware - ldap-account-manager (fork) tcpdf (itp: #495985) - moodle - phpmyadmin - collabtive typo3 - moodle spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557) - moodle - gosa php-ole (itp: #487558) - moodle pieforms (http://www.catalyst.net.nz) - mahara savant2 (http://phpsavant.com) - egroupware rssparser (http://nwow.org) - egroupware - phpgroupware lcms - openjdk-6 (fork) - gimp 2.4.0~rc2-2 - ia32-libs (embed) - ghostscript 9.00~dfsg-1 (embed) libphp-phplayersmenu - diogenes - phpldapadmin libphp-pclzip - docvert - moodle 2.5.1-1 - egroupware libphp-simplepie - dokuwiki - wordpress libphp-jpgraph - egroupware libpng - doxygen 1.5.6-2 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - gdal 1.5.2-3 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - iceweasel NOTE: previous entry: - iceweasel (uses xulrunner) - icedove NOTE: previous entry: - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed) - iceape 1.0.13~pre080614i-0etch1 (embed) - libfltk1.1 1.1.9-6 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - libtk-img (embed; #732147) - htmldoc 1.8.27-3 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - xulrunner 1.9.0.13-1 (embed) [lenny] - xulrunner 1.9.0.11-0lenny1 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed) - gamera 3.2.3-1 (embed) - freeimage (embed) - syslinux-common (embed) - tuxonice-userui (static) - texlive-bin (embed) [wheezy] - texlive-bin 2007.dfsg.2-1~lenny2 (embed) [squeeze] - texlive-bin 2007.dfsg.2-1~lenny2 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - vice 1.22.dfsg1-0.1 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - visualboyadvance 1.8.0-4 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - ia32-libs (embed) - ghostscript 8.64~dfsg-2 (embed) irssi - silc-client (embed) NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc extc - mtasc (embed) - haxe (embed) swflib - mtasc (embed) - haxe (embed) libitext-java - bouncycastle 2.1.4-1 (embed) python-ply - pyke (embed; bug #555363) - pywbem 0.7.0-4 (embed; bug #555364) - sepolgen (embed; bug #555365) - zope-textindexng3 (embed) - iceweasel (uses xulrunner) - xulrunner (embed) - wireshark (python-ply modules are not installed into binary packages; see #554613) libdumbnet (libdnet upstream) - nmap (fork) gcc-4.4 - gcc-mingw32 (embed) camlimages - advi (static; bug #550441) memcached - memcachedb (embed) yajl - argyll (embed; bug #544223) NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html - lnav (embed; bug #724693) - ruby-yajl (embed; bug #881142) nusoap - gforge 4.8.2-1 (embed) - ampache (embed) - poker-network (embed) - phpwiki (embed) - gallery2 (embed) - typo3-src (embed) - phpgacl 3.3.7-7 (embed) - mantis 1.1.8+dfsg-1 (embed) libept - adept (embed; bug #540649) libvorbis - iceweasel (uses xulrunner) - xulrunner (embed; bug #540959) [etch] - xulrunner (introduced in firefox 3.5) [lenny] - xulrunner (introduced in firefox 3.5) - iceape (embed) [etch] - iceape (introduced in 2.0) [lenny] - iceape (introduced in 2.0) - ia32-libs (embed) - libvorbisidec (modified-embed) cairo - iceweasel (uses xulrunner) - xulrunner 1.8.0.15~pre080614i-0etch1 (embed) - texlive-bin (embed) liboggz - iceweasel (uses xulrunner) - xulrunner (embed; bug #540959) [etch] - xulrunner (introduced in firefox 3.5) [lenny] - xulrunner (introduced in firefox 3.5) - iceape (embed) [etch] - iceape (introduced in 2.0) [lenny] - iceape (introduced in 2.0) liboggplay - iceweasel (uses xulrunner) - xulrunner (embed; bug #540959) [etch] - xulrunner (introduced in firefox 3.5) [lenny] - xulrunner (introduced in firefox 3.5) - iceape (embed) [etch] - iceape (introduced in 2.0) [lenny] - iceape (introduced in 2.0) php-net-dnsbl - serendipity (embed; bug #541740; package in NEW) php-onyx-rss - serendipity (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian) php-text-wiki - serendipity (embed; bug #541740; package in NEW) php-xml-rpc - serendipity (embed; bug #541740; package in NEW) polarssl (does not have a shared library) - pdkim (embed; bug #543150) - xyssl (old-version) pidgin (libpurple) - gaim (old-version) - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785) - wengophone (embed; bug #601425) icu - webkit 1.0.1-1 (embed; bug #547214) - texlive-bin 2013.20130522.30620-1 (fork) NOTE: texlive upstream working with icu upstream to merge their changes - chromium-browser 5.0.375.29~r46008-3 cyrus-imapd-2.2 - kolab-cyrus-imapd (fork) - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*] python-cxx-dev - freecad 0.9.2646.3-1 (embed; bug #547936) zipios++ - freecad 0.9.2646.3-1 (embed; bug #547941) - enigma 0.92.3-3 (embed) NOTE: likely fixed earlier, marking etch's version as fixed - flightcrew (modified-embed) linux-2.6 - kvm (embed; bug #549973) [./kernel/*] - linux-kbuild-2.6 (embed; bug #550379) [./kbuild/*] - kernel-source-2.6.8 (old-version) - kernel-source-2.4.27 (old-version) - kernel-source-2.4.24 (old-version) - kernel-source-2.2.25 (old-version) - kernel-source-2.2.20 (old-version) linux - linux-grsec (fork) NOTE: based on the src:linux package, includes grsecurity patchset, not targeted to stable libfdt (not yet packaged separately for debian; http://www.jdl.com/software/) - kvm (embed) [./libfdt/*] - qemu-kvm (embed) [./libfdt/*] qweb (not packaged) - ajaxterm opensaml2 - opensaml (old-version) shibboleth-sp2 - shibboleth-sp (old-version) tuxonice-userui - suspend2-userui (old-version) expat - w3c-libwww (embed; bug #551941) [etch] - w3c-libwww (embed; bug #551941) [./modules/expat/*] - python-xml (embed; bug #551940) [./extensions/expat/*] - python2.5 (embed; bug #553403) [./Modules/expat/*] - python2.4 (embed; bug #553403) - python2.6 2.6.6-4 (embed) - python2.7 2.7-6 (embed) - mcabber 0.10.0-1 (low; bug #601053) - python-4suite (embed; bug #516935) - wxwindows2.4 (embed) - wxwidgets2.6 2.6.3.2.2-4 (embed) - wxwidgets2.8 2.8.10.1-2 (embed) - albert (embed; bug #600974) - celementtree 1.0.5-8 (embed) NOTE: Maybe that was fixed even earlier - centerim (embed; bug #559783) - audacity 1.3.2-1 (embed) - matanza (embed) - tdom 0.8.3~20080525-1 (embed) - udunits 2.1.8-4 (embed) - apr-util 1.2 (embed) - ayttm (embed; bug #561006) - cableswig (embed) - cadaver (embed) - cmake 2.6.0-6 (embed) - coin3 (embed) - cvsnt 2.5.03.2382-3.3+lenny1 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - dasher 4.7.3-1 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - emboss 6.3.1-1 (embed) - gdcm 2.0.14-2 (embed) - ghostscript 8.71~dfsg-2 (embed; bug #560930) - grmonitor (embed) - iceape (embed) - insighttoolkit 3.16.0-1 (embed) NOTE: insighttoolkit might've been fixed earlier - jabber 1.4.3-3.4 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - libparagui1.1 1.0.2-1 (embed) - libspiff1 0.8.3-1 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - paraview 3.6.2-1 (embed) - poco 1.3.6p1-1 (embed) - scorched3d 41.3dfsg-1+b1 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - simgear (embed) - sitecopy 1:0.16.0-1 - smart (embed) NOTE: smart embeds celementree, and it includes expat - swish-e (Linked against libxml, which is used instead) - tla 1.3.5+dfsg-15 (embed) - vtk 4.1.20030227-1 (embed) - wbxml2 (expat code is only used on Mac OS X, see #560941) - xmlrpc-c (embed) - iceweasel (embed) - kompozer (embed) - vxl 1.13.0-2 (embed) - xulrunner (embed) - xmame 0.106-2.1 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - apache2 2.2 (embed) - texlive-bin (Embedded code not compiled in) - vnc4 (embed) - xotcl 1.6.6-1 (embed) - chromium-browser 5.0.375.29~r46008-3 - ia32-libs (embed) - mame (embed) xerces-c - xerces-c2 (old-version) - xerces27 (old-version) md5 (RSA's version; not the gnu version provided by coreutils) - w3c-libwww (embed; bug #551942) [etch] - w3c-libwww (embed; bug #551942) [./modules/md5/*] libparagui1.1 - asc (fork) enet - sauerbraten (embed; #497194) eglibc - glibc (old-version) - mksh (static) NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc) galib - gamera 3.2.3-1 (embed) configobj - bzr (embed; bug #555336) - elisa (embed; bug #555337) - gaupol (embed; bug #555338) - ipython (embed; bug #555339) - pida (embed; bug #555340) - psychopy (embed; bug #555341) - rest2web (embed; bug #555342) - auth2db (embed) - dynagen (embed) - iceweasel (embed) - sabnzbdplus (embed) - xulrunner (embed) - nipy (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages) python-clientform - bibus (embed; bug #555332) - zope2.10 (embed; bug #555333) - zope2.11 (embed; bug #555334) - python-mechanize (embed) - twill (embed) python-magic (as in libmagic; itp: #877849) - kopanocore (embed, bug #889835) - sqlmap (embed, bug #889836) - peframe (embed, bug #889837) python-mechanize - zope2.10 (embed; bug #555357) - zope2.11 (embed; bug #555358) - twill (embed; bug #555339) pexpect - duplicity 0.6.06-1 (embed; bug #555359) - hplip (embed; bug #555361) - smart (embed; bug #555362) pyparsing - bauble (embed; bug #555366) - boa-constructor 0.6.1-8 (embed; bug #555367) - calibre (embed; bug #555368) - matplotlib 1.3.0-1 (embed; bug #531024; bug #555369) - zhpy 1.7.3.1-1 (embed; bug #555370) - polybori (embed) - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html - python-whoosh (embed) - twill (embed) - zope-textindexng3 (embed) python-pysqlite2 - python2.4 (embed; bug #553403) - python2.5 (embed; bug #553403) celementtree - python2.5 (embed) - smart (embed) elementtree - python2.5 (embed) - python2.6 (embed) - bzr (embed; bug #555343) - gedit 2.28.2-1 (embed; bug #555344) - smart (embed) - solfege (embed; bug #555345) - w3af (embed; bug #555346) - python-qt4 (embed) - sphinx (embed) - python-nltk (embed) python2.7 - python2.4 (old-version) - python2.5 (old-version) - python2.6 (old-version) - jython (embed) NOTE: embeds many stdlib modules - python-django (embed; bug #555419) NOTE: embeds stdlib modules: doctest, decimal - gamera 3.2.3-1 (embed) NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap - boa-constructor (embed; bug #555426) NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib - nicotine (embed; bug #555427) NOTE: embeds stdlib modules: ConfigParser - museek+ (embed; bug #555428) NOTE: embeds stdlib modules: ConfigParser - vegastrike-data (embed) NOTE: embeds many stdlib modules - codespeak-lib 1.1.1-1 (embed; bug #555420) NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap - config-manager (embed; bug #555423) NOTE: embeds stdlib modules: optparse - jhbuild 2.28.0-1 (embed; bug #555421) NOTE: embeds stdlib modules: optparse, subprocess - smart (embed; bug #555432) NOTE: embeds stdlib modules: optparse - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433) NOTE: embeds stdlib modules: doctest - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434) NOTE: embeds stdlib modules: doctest - distribute (embed) NOTE: embeds stdlib modules: doctest - python-setuptools (embed; bug #555435) NOTE: embeds stdlib modules: doctest - zope.testing (embed; bug #555436) NOTE: embeds stdlib modules: doctest - translate-toolkit (embed; bug #555422) NOTE: embeds stdlib modules: textwrap, contextlib - libtpclient-py (embed; bug #555424) NOTE: embeds stdlib modules: subprocess - grass (embed; bug #555425) NOTE: embeds stdlib modules: subprocess - coherence (embed; bug #555429) NOTE: embeds stdlib modules: uuid - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430) NOTE: embeds stdlib modules: uuid - setroubleshoot (embed; bug #555431) NOTE: embeds stdlib modules: uuid - linkchecker (embed; bug #555414) NOTE: embeds msgfmt.py script - imdbpy (embed) NOTE: embeds msgfmt.py script - kiwi (embed) NOTE: embeds msgfmt.py script - moin (embed) NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile - plone3 (embed) NOTE: embeds msgfmt.py script - roundup (embed) NOTE: embeds msgfmt.py script, stdlib modules: cgitb - rednotebook (embed; bug #555415) NOTE: embeds msgfmt.py script - turbogears (embed) NOTE: embeds msgfmt.py script - elisa (embed) NOTE: embeds msgfmt.py script, stdlib modules: uuid - calibre (embed) NOTE: embeds msgfmt.py script, stdlib modules: zipfile - mailman 1:2.1.13-1 (embed; #555416) NOTE: embeds msgfmt.py script - python-docutils (embed) NOTE: embeds stdlib modules: optparse, textwrap - python-imaging (embed) NOTE: embeds stdlib modules: doctest - python-mechanize (embed) NOTE: embeds stdlib modules: doctest - twill (embed) NOTE: embeds stdlib modules: subprocess - zeroc-ice (embed) NOTE: embeds stdlib modules: subprocess - wxwidgets2.8 (embed) NOTE: embeds stdlib modules: subprocess - cycle (embed) NOTE: embeds msgfmt.py script - deluge (embed) NOTE: embeds msgfmt.py script - opendict (embed) NOTE: embeds msgfmt.py script - openerp-client (embed) NOTE: embeds msgfmt.py script - rapidsvn (embed) NOTE: embeds msgfmt.py script - wammu (embed) NOTE: embeds msgfmt.py script - gaphor (embed) NOTE: embeds msgfmt.py script - pida (embed) NOTE: embeds msgfmt.py script - python-formencode (embed) NOTE: embeds msgfmt.py script - duplicity (embed) NOTE: embeds stdlib module: urlparse, tarfile - pygopherd (embed) NOTE: embeds stdlib module: zipfile - sphinx (embed; bug #609485) NOTE: embeds only lib2to3.pgen2 in sphinx.pycode.pygen2 - vegastrike-data (embed; bug #555630) - icdiff (fork) NOTE: core functionality based on Python difflib code with changed output format - zodbpickle (fork) NOTE: embeds outdated stdlib modules: pickle, cpickle - pypy (fork) NOTE: embeds stdlib python3.6 - zodbpickle (fork) NOTE: embeds outdated stdlib modules: pickle, cpickle python3.7 - pypy3 (fork) NOTE: embeds stdlib argparse - twill (embed; bug #555347) - ipython (embed; bug #555348) coherence - elisa (embed; bug #555335) simpletal - plastex (embed; bug #555371) flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/) - postr (embed) - elisa (embed) simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric) - apertium-tolk (embed) - ipython (embed) - virtaal (embed) distribute - setuptools (old-version) rails - jruby1.2 (embed) [./bench/rails/*] NOTE: jruby is in non-free, it probably includes rails too - libgettext-ruby (embed) [./samples/rails/*] - libopenid-ruby (embed) [./examples/rails_openid/*] - thin (embed) [./spec/rails_app/*] NOTE: this is a subdirectory of examples, which in general is a non-issue, but may NOTE: be dangerous if developers are naively basing their code off of the examples NOTE: prototype.js is among the example files lucene2 (prototype.js is among the embeds in the following) - lucene (old-version) - pylucene (embed) - libpdfbox-java (embed) - libfontbox-java (embed) - libjempbox-java (embed) - solr (embed) unicode-data - syslinux (embed) - camomile (embed) - chromium-browser (embed) - cyrus-imapd-2.4 (embed) - dovecot (embed) - emacs24 (embed) - fribidi (embed) - m17n-db (embed) - sbcl (embed) - grub2 (embed) - haskell-hxt-charproperties (embed) - heimdal (embed) - icu (embed) - icu4j-4.4 (embed) - icu4j (embed) - icedove (embed) - iceweasel (embed) - ikarus (embed) - jython (embed) - krb5 (embed) - moodle (embed) - mozc (embed) - mozjs17 (embed) - mozjs24 (embed) - openldap (embed) - openocd (embed) - perl (embed) - pike7.6 (embed) - pike7.8 (embed) - qtbase-opensource-src (embed) - samba (embed) - samba4 (embed) - cmucl (embed) - typo3-src (embed) - mauve (embed) - texlive-bin (embed) - ypsilon (embed) - jeuclid (embed) - charmap.app (embed) - clisp (embed) - gnulib (embed) - opensrs-client (embed) - saxonb (embed) - rails (embed) - scheme48 (embed) - slang2 (embed) - sqlcipher (embed) - sqlite3 (embed) - unorm.js (embed) - wine-gecko-2.21 (embed) - wine-gecko-2.24 (embed) - xapian-core (embed) - boost1.49 (embed) - boost1.54 (embed; bug #751880) - boost1.55 (embed; bug #751881) - boost1.58 (embed; bug #823582) - boost1.60 (embed; bug #823585) - boost1.61 (embed; bug #834560) - boost1.62 (embed; bug #852764) - boost1.63 (embed; bug #852763) - boost1.67 (embed; bug #920319) - boost1.71 (embed; bug #963587) - glibc (modified-embed) NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=21533 NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=14095 feedparser - rawdog 2.19-1 (embed; bug #383422) [wheezy] - rawdog (modified-embed) - miro (embed; bug #555351) - calibre (embed; bug #555352) - freevo (embed; bug #555353) - pida (embed; bug #555354) - planet-venus (embed; bug #555355) - plone3 (embed; bug #555356) - exaile 0.2.14+debian-1 (embed) - screenlets 0.1.2-3 (embed) NOTE: included twice agg: - matplotlib (embed: bug #377271) - contextfree (embed) NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy - exactimage (embed) - python-enable (embed) - mapnik 0.5.1-3 (embed) NOTE: links statically to agg, but shared library is not available (bug #377271) vtk - paraview (embed; bug #495426) - libmesh NOTE: embeds exodus; not sure if there's a version external to vtk txt2tags - rednotebook (embed) htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py) - gajim (embed) - emesene (embed) - convirt (embed) - pida (embed) - rednotebook (embed) horde3 (prototype.js is among the embeds in the following) - mnemo2 (embed) - nag2 (embed) - wordpress (embed) NOTE: Text_Diff (wp-includes/Text/Diff*) cimg - gmic (embed) mootools - kdenetwork (embed) - gallery (embed) - jspwiki (embed) - vdr-plugin-live (embed) - perl-doc-html (embed) openldap - openldap2.3 (old-version) - ia32-libs (embed) grub2 - grub (old-version) gnupginterface - duplicity (embed) python-dateutil - awn-extras-applets (embed) - matplotlib (embed) cups - cupsys (old-version) - ia32-libs (embed) yui - bcfg2 (present in source but not included in any binary files) - serendipity 1.5.3-1 (embed; bug #557746) - moodle (embed) - jifty 0.91117-1 (embed; bug #557748) - webgui 7.7.26-1 (embed) - loggerhead 1.17-1 (embed) - otrs2 2.4.7+dfsg1-1 (embed; bug #592146) quake3 (vanilla source not packaged in debian) - ioquake3 (fork) - iortcw (fork) - openarena (partial fork) - openjk (fork) quake2 (vanilla source not packaged in debian) - alien-arena (fork) - warsow (fork) - yquake2 (fork) quake (vanilla source not packaged in debian) - darkplaces (fork) - ezquake (fork) - quakespasm (fork) - nexuiz 2.5.2+dp-1 (old-version) NOTE: before 2.5.2+dp this was an outdated version of darkplaces libtheora - iceweasel (uses xulrunner) - xulrunner (embed; bug #540959) [etch] - xulrunner (introduced in firefox 3.5) [lenny] - xulrunner (introduced in firefox 3.5) - iceape (embed; bug #559276) [etch] - iceape (introduced in iceape 2.0) [lenny] - iceape (introduced in iceape 2.0) dtoa - bfilter (embed) - cacao (embed) - cdrdao (embed) - classpath (embed) - freej (embed) - iceape (embed) - iceweasel (embed) - jscoverage (embed) - kde4libs (embed) - kdelibs (embed) - kompozer (embed) - libv8 (embed) - mono (embed) - newlib (embed) - nspr (embed) - php5 (embed) - polyml (embed) - qt4-x11 (embed) - rhino (embed) NOTE: code translated to Java - ruby1.8 (embed) - ruby1.9 (embed) - ruby1.9.1 (embed) - sdd (embed) - sfind (embed) - star (embed) - tinymux (embed) - virtualbox-ose (embed) - webkit (embed) - xulrunner (embed) ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html) - firegpg (embed) - enigmail (embed) ptmalloc (not packaged in Debian) - crystalspace (embed) - qt4-x11 (embed) svgalib - usplash (embed) - ia32-libs (embed) bogl - usplash (embed) taglist - usplash (embed) portaudio - audacity (embed; bug #323711) - flightgear (embed) - puredata (embed) - sfront (embed) - psychtoolbox-3 (embed) - mame (embed) - praat (embed) nyquist - audacity (embed) NOTE: embeds a forked nyquist with support for a shared library vamp-plugin-sdk - audacity (embed) wordpress - libwordpress-xmlrpc-perl (embed) [./xmlrpc.php] - wordpress-mu (fork) php5 - php4 (old-version) classpath - libgnucrypto-java (embed; bug #559788) libtool - apr (static; bug #489625) NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3 - arts (embed) - bochs 2.4.2-1 (embed; bug #560884) - camserv (embed) - collectd 4.8.2-1 (embed) - courier-authlib 0.58-4 (embed) NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier - cvsnt 2.5.04.3236-1.2 (embed) - dico (Uses the system copy of ltdl) - freeradius 0.1+20010527-1 (embed) NOTE: Earliest reference I could find from the changelog is from 27 May 2001 - ggobi 2.1.9~20091212-1 (embed) - glame 2.0.1-4 (embed) NOTE: The etch version of glame was the earliest version checked, might be fixed earlier - gnash 0.8.7-2 (embed) - gnu-smalltalk (embed; bug #566777) - google-gadgets 0.10.5-0.3 (embed) NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier - graphicsmagick 1.3.5-6 (embed) - graphviz 2.8-3 (embed) NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier - guile-1.6 1.6.8-7 (embed) - hamlib 1.2.11-1 (embed) - hercules 3.06-1.2 (embed) - jags 1.0.4-3 (embed; bug #560864) - kdelibs (embed) - libannodex (embed) - libextractor 0.5.23+dfsg-4 (embed) - libmcrypt (libtool source present but not included in any of the binary packages) - libtunepimp 0.5.3-7.3 (embed) - mp4h 1.3.1-4.1 (Contains source code, but is compiled with --without-included-ltdl) - naim (embed) - parser-mysql (embed) - pinball 0.3.1-11 (embed) - redland (embed) - siproxd 1:0.8.1-2 (embed; bug #657070) - ski (embed) - synfig 0.62.00-1 (embed) - unixodbc 2.2.4-5 (embed) - xmlsec1 (Doesn't enable dynamic loading of crypto modules) - clamav 0.95+dfsg-1 (embed) - imagemagick 6:6.2.3.1-1 (embed) - hypre 2.4.0b-5 (embed) - lam (embed) - openmpi (embed; bug #559386) - parser (embed) - pdsh 2.18-5 (embed; bug #560892) - sbnc 1.2-8 (embed) - sdcc (embed) - wml 2.0.11ds2-1 (The embedded ltdl isn't used, instead mp4h is used, see 559841) - proftpd-dfsg (embed; bug #561748) - babel 1.4.0.dfsg-5 (embed) - libprelude 0.9.14-2 (embed) - heartbeat 2.1.4-7 (embed) NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze, NOTE: might've been fixed earlier - gcc-* (embed) - ia32-libs (embed) ocamlgsl - orpie 1.5.1-7.1 (embed; bug #550058) xdotool - keynav (embed; bug #560103) bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/) - supertuxkart (embed) - blender (embed) - critterding (embed) NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com ghostscript - gs-gpl (old-version) icedove - thunderbird (old-version) sizzlejs (not packaged in Debian, http://sizzlejs.com/) - jquery (embed) sed - ssed (fork) phpatomlib (http://code.google.com/p/phpatomlib) - wordpress (embed) Services_JSON (http://pear.php.net/package/Services_JSON) - wordpress (embed) phpass (http://www.openwall.com/phpass/) - gallery2 (embed) - wordpress (embed) - typo3-src (modified-embed) NOTE: file refers to drupal, maybe there's a copy somewhere there NOTE: a copyright owner search didn't match anything - libauthen-passphrase-perl (fork) NOTE: perl implementation of phpass - phpbb3 NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it squirrelmail - wordpress (embed) NOTE: class-pop3.php ezSQL (http://www.woyano.com/jv/ezsql) - wordpress (fork) NOTE: wp-db.php Diff.php (Clay Loveless' version/killersoft.com) - php-versioncontrol-svn libm (provided by libc) - spring (embed) NOTE: embedded by embedded copy of streflop - megaglest (embed) NOTE: embedded by embedded copy of streflop - aide (static) - busybox (static) - mindi-busybox (static) - qemu (static) NOTE: qemu-user-static - tuxonice-userui (static) - zsh (static) NOTE: zsh-static - tripwire streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/) - spring (modified-embed) NOTE: old, modified version of streflop - megaglest (modified-embed) NOTE: megaglest uses the same streflop code as spring minizip - spring (embed) - libkml (modified-embed; bug #753069) - samba (embed) NOTE: didn't check whether it's used - zlib (embed; bug #753070) NOTE: only used to build minizip and miniunzip in zlib-bin package - virtuoso-opensource (embed) NOTE: didn't check whether it's used - luatex (embed) NOTE: didn't check whether it's used - tcl8.6 (embed) NOTE: didn't check whether it's used - chromium-browser (embed) - perl-tk (embed) NOTE: didn't check whether it's used - icedove (modified-embed) NOTE: didn't check whether it's used - ace (embed) NOTE: didn't check whether it's used - smplayer (embed) NOTE: didn't check whether it's used - povray (embed) NOTE: didn't check whether it's used - cegui-mk2 (embed) NOTE: didn't check whether it's used - freemat (embed) NOTE: didn't check whether it's used - funtools (embed) NOTE: didn't check whether it's used - tntnet (embed) NOTE: didn't check whether it's used - orthanc (embed) NOTE: didn't check whether it's used - instead (embed) NOTE: didn't check whether it's used - mupen64plus-core (embed) NOTE: didn't check whether it's used - sks-ecc (embed) NOTE: didn't check whether it's used - psi (embed) NOTE: didn't check whether it's used - fossil (embed) NOTE: didn't check whether it's used - wordgrinder (embed) NOTE: didn't check whether it's used - critcl (embed) NOTE: didn't check whether it's used - fceux (embed) NOTE: didn't check whether it's used oscpack - spring 96.0+dfsg-1 (embed) hpiutil2 - spring (embed) p7zip - spring (embed) pythonqt (doesn't seem to be python-qtN, unknown source) - fontmatrix (embed) - elmerfem (embed) iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/) - docvert (embed) - jifty (embed) - kdenetwork (embed) - mediatomb (embed) - plastex (embed) - plone3 (embed) - python-chaco (embed) - python-docutils (embed) - s5 (embed) - zope2.10 (embed) - zope2.11 (embed) - cython (embed) NOTE: part of documentation, which is not installed into the binary package python-docutils - zope2.10 (embed) - zope2.11 (embed) tesseract - ocropus (static) antlr - kdevelop (embed) libxerces2 - openjdk-6 (embed) kfreebsd-8 - kfreebsd-7 (old-version) - kfreebsd-6 (old-version) ruby1.9.1 - ruby1.9 (old-version) - ruby1.8 (old-version) maildrop - courier (embed) [./maildrop] glee - warzone2100 (embed) - love 0.8.0-2 (embed; bug #690492) phing - symfony (embed) pake - symfony (embed) propel - symfony (embed) creole - symfony (embed) hfsutils - cdrkit (embed; bug #570187) NOTE: embeds hfsutils code in genisoimage cdrkit - grub2 (embed; bug #570156) NOTE: genisoimage imported into grub-mkisofs kdebase-workspace - kdebase (old-version) file - php5 (modified-embed) [lenny] - php5 - hhvm (embed) - radare2 (embed) TODO: check if embed, modfied-embed or old-version - sleuthkit (embed) TODO: check if used - apt-offline (embed; bug #804069) cdb - php5 (embed) libmbfl (itp: #570708) - php5 (embed) NOTE: PHP is actually the current upstream, ITP is of that code libonig - php5 5.3.2-1 (embed) - php7.0 (embed; bug #945525) - php7.3 (embed; bug #945526) xmlrpc-epi - php5 (embed) swt-gtk - eclipse (embed; bug #538808) txt2html - wml 2.0.11ds2-1 (embed) ca-certificates - nss (certificates are in source, but not included in any of the binary packages) - websocket-client (embed; bug #810123) NOTE: Mozilla CA bundle only: /usr/lib/python3/dist-packages/websocket/cacert.pem - rust-webpki-roots (embed; bug #972802) openexr - freeimage 3.17.0+ds1-1 (embed) libmng - freeimage (embed) openjpeg - freeimage (embed) - ghostscript 9.05~dfsg-1 (embed) libjpeg6b - freeimage (embed) - ia32-libs (embed) libjpeg (don't know what exact version) - dcmtk - gdcm - insighttoolkit - openarena 0.8.5-5+exp1 (bug #495966) - outguess - squeak-vm (embed) - tremulous - tuxonice-userui (static) - fpc (static) - lazarus (static) NOTE: inherited from fpc, see #472304 - mseide-msegui (static) NOTE: inherited from fpc, see #472304 - easymp3gain (static) NOTE: inherited from fpc, see #472304 - winff (static) NOTE: inherited from fpc, see #472304 - texlive-bin (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages) - ghostscript 8.64~dfsg-2 (embed) - mame (embed) lxr - lxr-cvs (embed) libfile-copy-recursive-perl - r-base (embed; bug #577427) - r-base-core-ra (embed; bug #577429) delimmatch - r-base (embed; bug #577433) - r-base-core-ra (embed; bug #577434) libsmf (ITP: #572558) - denemo (embed) NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html libselinux - dpkg 1.15.6 (static) - ia32-libs (embed) - android-platform-external-libselinux (fork) libunwind - android-platform-external-libunwind (fork) libutils (not in Debian) - android-platform-system-core (embed) - firefox (embed) - firefox-esr (embed) - icedove (embed) - thunderbird (embed) skia (ITP: #818180) - firefox-esr (embed) - firefox (embed) - qtwebengine-opensource-src (embed) - icedove (embed) - thunderbird (embed) jsilver (removed from stretch and later): - android-platform-external-jsilver (fork) doclava (not in Debian) - android-platform-external-doclava (fork) xinha (ITP: #479708) - horde3 - serendipity - openacs - dotlrn dvipng - texlive-bin (code present in source but not included in the binary packages) dvipdfmx - texlive-bin (embed) NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze lcdf-typetools - texlive-bin 2009-1 (embed) tex4ht - texlive-bin 2009-1 (embed) freetype - texlive-bin 2009-1 (embed) - ia32-libs (embed) freetype2 - texlive-bin (embed) [wheezy] - texlive-bin 2009-1 (embed) [squeeze] - texlive-bin 2009-1 (embed) - tuxonice-userui (static) - instantbird - qt4-x11 (embed) - vtk (embed) - paraview (embed) NOTE: from embedded copy of vtk - ghostscript 9.00~dfsg-1 (embed) silgraphite - texlive-bin (embed) unzip - texlive-bin 2009-1 (embed) jbig2dec - ghostscript 8.64~dfsg-2 (embed) libxml2 - chromium-browser 5.0.375.29~r46008-1 - ia32-libs (embed) protobuf - chromium-browser 5.0.375.70~r48679-2 libv8 - chromium-browser 5.0.375.38~r46659-1 - mongodb NOTE: builds against system copy nspr - chromium-browser 5.0.375.29~r46008-3 - ia32-libs (embed) - virtualbox (modified-embed) - icedove (embed) [jessie] - icedove [wheezy] - icedove NOTE: most likely builds against system copy in stretch and newer - wine-gecko-2.21 (embed) yasm - chromium-browser 5.0.375.29~r46008-2 libxslt - chromium-browser 5.0.375.29~r46008-1 - ia32-libs (embed) miniupnpc - warzone2100 2.3.7-2 NOTE: code still present in tarball but removed during build and unused - vino 3.2.2-1 NOTE: code still present in tarball but removed during build and unused - vidalia 0.2.21-2 (old-version) NOTE: embedded old version might be modified - vidalia 0.2.21-3 (old-version) NOTE: code still present in tarball but unused during build iniparser - warzone2100 (modified-embed) pyglet - sympy (embed; bug #459716) mpmath - sympy (embed; bug #541746) openssh - libpam-ssh (embed; bug #598522) curl - cmake 2.6.0-6 (embed) NOTE: Might be fixed earlier. Lenny version recorded. - criticalmass (static; bug #599061) - wengophone 2.1.0~beta1-svn9983-1 (embed) - ia32-libs (embed) lib3ds - boson (embed; bug #600900) - openscenegraph (embed; bug #601181) xcftools - gnome-xcf-thumbnailer (embed) simplejson - exaile (embed; bug #604547) libasycns - loudmouth (embed; bug #566143) plplot - emboss (fork) acl - ia32-libs (embed) arts - ia32-libs (embed) attr - ia32-libs (embed) audiofile - ia32-libs (embed) avahi - ia32-libs (embed) celt - ia32-libs (embed) coreutils - ia32-libs (embed) cyrus-sasl2 - ia32-libs (embed) db4.8 - ia32-libs (embed) dbus - ia32-libs (embed) directfb - ia32-libs (embed) esound - ia32-libs (embed) fltk1.1 - ia32-libs (embed) fontconfig - ia32-libs (embed) freeglut - ia32-libs (embed) gcc-3.3 - ia32-libs (embed) gdbm - ia32-libs (embed) gnutls26 - ia32-libs (embed) hal - ia32-libs (embed) isdnutils - ia32-libs (embed) jack-audio-connection-kit - ia32-libs (embed) keyutils - ia32-libs (embed) krb5 - ia32-libs (embed) lesstif2 - ia32-libs (embed) libaio - ia32-libs (embed) libasyncns - ia32-libs (embed) libcap2 - ia32-libs (embed) libdrm - ia32-libs (embed) libedit - ia32-libs (embed) libexif - ia32-libs (embed) libgcrypt11 - ia32-libs (embed) libgpg-error - ia32-libs (embed) libgphoto2 - ia32-libs (embed) libice - ia32-libs (embed) libieee1284 - ia32-libs (embed) libjpeg8 - ia32-libs (embed) libnss-ldap - ia32-libs (embed) libogg - ia32-libs (embed) libpam-ldap - ia32-libs (embed) libsamplerate - ia32-libs (embed) libsdl1.2 - ia32-libs (embed) libsm - ia32-libs (embed) libssh2 - ia32-libs (embed) libtasn1-3 - ia32-libs (embed) libx11 - ia32-libs (embed) libx86 - ia32-libs (embed) libxau - ia32-libs (embed) libxcb - ia32-libs (embed) libxcomposite - ia32-libs (embed) libxcursor - ia32-libs (embed) libxdamage - ia32-libs (embed) libxdmcp - ia32-libs (embed) libxext - ia32-libs (embed) libxfixes - ia32-libs (embed) libxi - ia32-libs (embed) libxinerama - ia32-libs (embed) libxmu - ia32-libs (embed) libxp - ia32-libs (embed) libxrandr - ia32-libs (embed) libxrender - ia32-libs (embed) libxss - ia32-libs (embed) libxt - ia32-libs (embed) libxtst - ia32-libs (embed) libxv - ia32-libs (embed) libxxf86vm - ia32-libs (embed) mesa - ia32-libs (embed) mpg123 - ia32-libs (embed) nas - ia32-libs (embed) nss - ia32-libs (embed) openal-soft - ia32-libs (embed) openssl - ia32-libs (embed) - edk2 (modified-embed) pam - ia32-libs (embed) popt - ia32-libs (embed) pulseaudio - ia32-libs (embed) sane-backends - ia32-libs (embed) sqlite3 - ia32-libs (embed) - chromium-browser (embed) - mame (embed) sysfsutils - ia32-libs (embed) tcp-wrappers - ia32-libs (embed) tdb - thunar 1.2.1-3 (old-version) - ia32-libs (embed) tslib - ia32-libs (embed) unixodbc - ia32-libs (embed) xaw3d - ia32-libs (embed) xbitmaps - ia32-libs (embed) xcb-util - ia32-libs (embed) xcursor-themes - ia32-libs (embed) xft - ia32-libs (embed) dicomparser - vtk - paraview NOTE: as part of its copy of vtk - insighttoolkit proj - vtk - paraview NOTE: as part of its copy of vtk - therion - python-pyproj 1.8.6-1 netcdf - vtk - paraview NOTE: as part of its copy of vtk insighttoolkit - vtk (embed) NOTE: embeds at least MetaIO - paraview (embed) NOTE: embeds at least MetaIO gl2ps - vtk - paraview NOTE: as part of its copy of vtk - avogadro - gabedit (embed) NOTE: not sure if it is built - drawxtl (embed) - rgl (embed) - gmsh - mcrl2 (embed) - mysql-gui-tools (embed) NOTE: not sure if it is built - opencascade (embed) - orsa (embed) - qtiplot (embed) - qwtplot3d (embed) - root-system (embed) NOTE: not sure if it is built - scilab (embed) - snd (embed) NOTE: not sure if it is built - xmakemol (embed) qwtplot3d - qtiplot parseafm (from Adobe) - vftool - gnustep-back NOTE: looks like it isn't built - evince bugzilla - perl - libcgi-pm-perl isc-dhcp - dhcp3 (old-version) - dhcp (old-version) chipmunk (ITP: #623274) - xmoto (embed; bug #623299) - libtuxcap (embed; bug #623300) libsigsegv - gawk 3.1.8+dfsg-0.1 pdfrw - rst2pdf (embed; bug #638607) bind9 - isc-dhcp (embed; bug #643569) NOTE: introduced in upstream 4.2 series qof - gnucash (embed; bug #556245) feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/) - megaglest (modified-embed) acsccid - ccid 1.3.11 (fork) - openct (modified-embed) - towitoko (modified-embed) ccid - openct (modified-embed) - towitoko (modified-embed) msmtp - mpop (embed) iCalcreator - collabtive NOTE: class.ical.php - glpi plupload - wordpress feedcreator (php lib) - collabtive NOTE: class.rss.php - piwigo - dokuwiki (modified-embed) NOTE: dokuwiki uses an "enhanced" version emacs - le NOTE: it uses an almost-pristine 2008 version of emacs' regex.{c,h} libjsoncpp - eiskaltdcpp (embed) - drizzle (embed) mongoose - phantomjs (modified-embed) rapidxml (not packaged in Debian, http://rapidxml.sourceforge.net) - boost1.49 (embed) - boost1.50 (embed) - deal.ii (embed) - fife (embed) - witty (embed) make - remake (fork) metacity - mutter (fork) mutter - muffin (fork) libjson-spirit-dev - bitcoin (modified-embed) - litecoin (modified-embed; bug #693492) bitcoin - litecoin (fork; bug #693492) json-spirit - bitcoin (modified-embed) - litecoin (modified-embed; bug #693492) libupnp - mediatomb (fork) - djmount (embed; bug #699561) flowplayer-core (not packaged in Debian) - mahara (modified-embed) rawspeed - darktable dcraw - ufraw - libraw - kdcraw NOTE: in embedded copy of libraw - xbmc - exactimage - rawtherapee - rawstudio libraw - libkdcraw 4:4.12.3-1 - darktable (modified-embed; bug #1002876) - shotwell NOTE: possibly fixed in wheezy and greater mednafen - libvorbisidec 0.9.17.1-1 [squeeze] - libvorbisidec [wheezy] - libvorbisidec NOTE: not-affected since 0.9.17.1-1 (as above) NOTE: mednafen 0.8.D.3-4 and 0.8.D.3-5 attempted to use the packaged libvorbisidec, NOTE: but this breaks CD playback when using .ogg files (see #699143), so it's NOTE: likely that future packages in the 0.8 series will build using the embedded code. - libmpcdec 0.9.21-1 NOTE: not-affected since 0.9.21-1 (as above) xmoto - chipmunk (bug #623299) irrlicht - supertuxkart (modified-embed) snappy - chromium-browser 35.0.1916.86-1 NOTE: not sure if it's build - mongodb NOTE: needs further checks - couchdb - libsereal-decoder-perl NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html - libsereal-encoder-perl NOTE: https://lists.debian.org/debian-perl/2013/02/msg00030.html automysqlbackup - autopostgresqlbackup NOTE: fork scrypt - python-scrypt (embed; wontfix; package in NEW) NOTE: upstream scrypt does not provide a shared library/API srtp - chromium-browser (embed) NOTE: http://crbug.com/501318 - qutecom - asterisk (embed) - gst-plugins-bad1.0 (embed) - kopete (embed) - opal (embed) - pjproject (embed) - resiprocate (embed) - icedove (embed) - iceweasel (embed) - wine-gecko-2.21 (embed) - wine-gecko-2.24 (embed) - sflphone (embed) fonttools - python-enable (embed; bug #715145) uglifyjs - ruby-uglifier 2.7.2+dfsg-1 (modified-embed; bug #718367) openacs - dotlrn (modified-embed; bug #718487) jsgantt - rt4-extension-jsgantt (embed; bug #724287) - trac-jsgantt (embed; bug #724287) NOTE: jsgantt is not packaged seperately so far libjs-pdf - iceweasel (fork) jmapviewer - josm (embed; bug #731029) qt4-x11 - phantomjs (embed) NOTE: phantomjs embeds parts of src/ eigen3 - r-cran-rcppeigen (modified-embed; bug #729716) libyaml - libyaml-libyaml-perl 0.69+repack-1 (embed; bug #664224) liblivemedia - vlc (static) - mplayer (static) python-gnupg - gajim (modified-embed) xchat: - hexchat (fork) libjs-jquery-filetree (not packaged in Debian; RFP bug #741581; http://www.abeautifulsite.net/blog/2008/03/jquery-file-tree/ https://github.com/daverogers/jQueryFileTree) - controlaula (embed) - dolibarr (embed) libjs-jquery-bbq (not packaged in Debian; RFP bug #741586; http://benalman.com/projects/jquery-bbq-plugin/ http://github.com/cowboy/jquery-bbq) - drupal7 (embed) - ganglia-web (embed) - jqapi (embed) zopfli - pigz (embed) - advancecomp (embed) libquazip - pencil2d (modified-embed) syslogd - rsyslog (fork) libebur128 - mlt 6.4.1-3 (modified-embed; bug #762341) wpa - moonshot-gss-eap (embed) NOTE: Functionality not available in stable library form liblmdb - openldap (embed; bug #750023) gnome-screensaver - mate-screensaver - cinnamon-screensaver - light-locker aglfn - cups-filters (embed; bug #709584) - qtbase-opensource-src (embed; bug #709586) - gnuplot 4.6.3-2 (embed; bug #709583) - latex-cjk-chinese-arphic 1.23 (embed; bug #709585) texlive-bin - texstudio 2.8.0+debian-1 (embed; bug #753806) NOTE: embeds synctex parser - texmaker 4.2-2 (embed; bug #753812) NOTE: embeds synctex parser - texworks 0.5~svn1363-5 (embed; bug #753818) NOTE: embeds synctex parser - gummi (embed; bug #753827) NOTE: embeds synctex parser - evince (embed; bug #754136) NOTE: embeds synctex parser - okular (embed; bug #754137) NOTE: embeds synctex parser - qpdfview (embed; bug #754138) NOTE: embeds synctex parser libmspack - cabextract 1.4-5 (embed; bug #675560) - msn-pecan (embed; bug #675555) - evolution-ews (embed; bug #675556) - convlit (embed; bug #675557) - clamav 0.98.5~beta1+dfsg-1 (modified-embed; bug #675558) - wine (bug #675559) NOTE: wine: has a lot of source files that share the same names as the files NOTE: in libmspack, but they are entirely different implementations. - wine-development (bug #675561) NOTE: wine: has a lot of source files that share the same names as the files NOTE: in libmspack, but they are entirely different implementations. - calibre (embed; bug #675562; bug #872595) tzdata - postgresql-9.1 (modified-embed) NOTE: unused (./configure --with-system-tzdata) - postgresql-9.4 (modified-embed) NOTE: unused (./configure --with-system-tzdata) - pike7.8 (embed) - libdatetime-timezone-perl (modified-embed; bug #416206) phpseclib - collabtive 2.0+dfsg-6 (embed; bug #781414) - spotweb (embed; bug #781420) - ldap-account-manager (embed; bug #781419) - icinga-web (embed; bug #781415) doctrine - icinga-web (embed; bug #781415) duktape - calibre (embed) - osgearth (embed) tidy - sigil (modified-embed) NOTE: only libtidy, see debian/README.source tlslite - chromium-browser pugixml - passwordsafe (embed; bug #801727) NOTE: Maintainer requested change in #801727 so that embedded copy can be dropped - mame (embed) jsmn (not packaged in Debian: http://zserge.com/jsmn.html) - mod-authz-securepass (embed) - glyr (embed) - owfs (embed) - pcp (embed) - libnss-securepass (embed) - ntp (embed) NOTE: Build logs don't mention it libnsgif - netsurf (embed) libnsbmp - netsurf (embed) assimp - qt3d-opensource-src (embed) - spring (embed) tomsfastmath - wolfssl (modified-embed) - sks-ecc (embed) NOTE: there are probably more libgzstream - k3d (embed) - freecad (embed) - lyx (embed) - texlive-bin (embed) - iqtree (embed) - paraview (embed) - sga (embed) - vtk6 (embed) - filo (embed) - bedtools (embed) - freefoam (embed) - tulip (embed) - xdmf (embed) - ticcutils (embed) - spades (embed) - ossim (embed) - gnudatalanguage (embed) lua5.3 - freedroidrpg (embed) - widelands (fork) NOTE: widelands embeds the Eris fork of lua5.3 - mame (embed) - scite 4.1.0-1 (embed) NOTE: Starting from 4.1.0-1 scite is using the system copy NOTE: https://salsa.debian.org/debian/scite/commit/cc5f764af3418ffac9a948548303092c2e0da4c0 android-platform-system-core - android-tools (old-version) libhtp - suricata (embed) NOTE: See #772551 bubblewrap - flatpak (embed; bug #824647) git - cgit (embed) libev - audit (modified-embed; bug #828903) libextutils-parsexs-perl - libmemcached-libmemcached-perl (fork; bug #829298) NOTE: embedded in t/lib liblemon (ITP: #833548) - cufflinks (embed) libsquish - 0ad (embed; bug #838055) - kodi 17.0~beta5+dfsg1-1 (modified-embed; bug #838051) - mame (modified-embed; bug #838052) - nvidia-texture-tools (modified-embed; bug #838056) - openimageio (modified-embed; bug #838053) - spring 105.0.1+dfsg-1 (embed; bug #838054) - xbmc (modified-embed) node-ms - node-debug 3.1.0-1 (embed; bug #836205) IJS - ghostscript 9.00~dfsg-1 (embed) Trio - ghostscript 9.15~dfsg-1 (embed) bootstrap-switch (not packaged, no ITP as per 2016-09-09) - ruby-bootstrap-switch-rails (embed; bug #836439) jquery-iframe-transport (not packaged, no ITP as per 2016-09-09) - ruby-remotipart (embed; bug #835512) Leaflet - ruby-leaflet-rails (embed; bug #835508) Select2 - ruby-select2-rails (embed; bug #835510) jquery-Magnetic-Popup (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) Big Integer Library (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) Cryptojs (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) EventEmitter (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) Salsa20 (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) otr.js (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) jquery-hashchange (not packaged, no ITP as per 2016-09-09) - photofloat (embed; bug #721567) jquery-mousewheel - photofloat (embed; bug #721567) jquery-fullscreen - photofloat (embed; bug #721567) codemirror-js - sieve-extension (embed; bug #738748) Strophejs - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) Strophejs.Disco - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) strophe.caps (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) strophe.jinglejs (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) strophe.vcard (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) strophe.muc (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) slimScroll (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) jsxc (not packaged, no ITP as per 2016-09-09) - ruby-rails-assets-diaspora-jsxc (embed; bug #835519) babel (not packaged, no ITP as per 2016-09-09) - ruby-babel-source (embed; bug 837056) core-js (not packaged, no ITP as per 2016-09-09) - ruby-babel-source (embed; bug 837056) Libb64 - libsass (embed) UTF8-CPP (not packaged, no ITP as per 2016-09-09) - libsass (embed) libgetopt++ - libsass (embed) tcsh - gridengine (embed) Autoprefixer (not packaged, no ITP as per 2016-09-11) - ruby-autoprefixer-rails (embed; bug #837463) libjs-json - ruby-execjs (embed; bug #837466) split.js (not packaged, no ITP as per 2016-09-11) - ruby-uglifier (embed; bug #837470) convertUTF (not packaged, dead and claimed buggy upstream, violates DFSG - see bug#823100) - alljoyn-core-1504 (embed) - alljoyn-core-1509 (embed) - alljoyn-core-1604 (embed) - apertium (embed) - aseprite (embed) - assimp (embed) - bro (embed) - chromium-browser (embed) - dasher (embed) - desmume (embed) - fceux (embed) - firefox (embed) - firefox-esr (embed) - freerdp (embed) - funguloids (embed) - ghostscript (embed; bug #823100) - gosmore (embed) - gpac (embed) - icedove (embed) - libantlr3c (embed) - libdbd-odbc-perl (embed) - libtorrent-rasterbar (embed) - llvm-toolchain-3.5 (embed) - llvm-toolchain-3.6 (embed) - llvm-toolchain-3.7 (embed) - llvm-toolchain-3.8 (embed) - llvm-toolchain-3.9 (embed) - llvm-toolchain-snapshot (embed) - mednafen (embed) - mrpt (embed) - mysql-workbench (embed) - netcdf (embed) - openalpr (embed) - opencollada (embed) - open-vm-tools (embed) - scummvm (embed) - spring (embed) - taglib (embed) - texlive-bin (embed) - tla (embed) - transmission (embed) - unshield (embed) - zeroc-ice (embed) - zeroc-icee (embed) - zeroc-icee-translators (embed) glm - warzone2100 (embed) chromium-browser - qtwebengine-opensource-src zendframework - icingaweb2 (embed) NOTE: Cf. #814143 gitsome - xonsh (old-version; bug #855544; bug #855545) youtube-dl - encuentro (bug #859589) libwebm (not packaged, no ITP) - libopenglrecorder (modified-embed) NOTE: not yet in Debian NOTE: modifications are that it is stripped down - sludge (modified-embed) NOTE: modifications are that it is stripped down - libvpx (embed) - chromium-browser (embed) NOTE: 2 copies, one via a libvpx embed - qtwebengine-opensource-src (embed) NOTE: via chromium embed: 2 copies, one via a libvpx embed libgit2 - cargo 0.20.0-1 (embed) NOTE: Cf. https://bugs.debian.org/860116#25 libbpg (not packaged in Debian; no ITP) - ffmpeg (embed) heimdal - samba (embed; bug #897269) taglib - silverjuke (modified-embed) libresample - oggvideotools (bug #876470) iaxclient (no longer packaged, RC buggy and unmaintained - see bug#570827) - flightgear (embed) flite - flightgear (embed) NOTE: seems to declare linking with system shared library, but build logs suspiciously still build embedded copy. sox - flightgear (fork) libgsm - flightgear (embed) sdl2 - mame (embed) espeak - praat (embed) libxls (not packaged in Debian, http://libxls.sourceforge.net/) - r-cran-readxl (embed) woff2 (ITP: #883828) - webkit2gtk 2.20-1 (embed) - chromium-browser (embed) - firefox (embed) - firefox-esr (embed) - icedove (embed) - thunderbird (embed) - qtwebengine-opensource-src (embed) - qtwebkit-opensource-src (embed) - texlive-bin (embed) brotli - webkit2gtk (embed) - chromium-browser (embed) - firefox (embed) - firefox-esr (embed) - icedove (embed) - thunderbird (embed) - qtwebengine-opensource-src (embed) - qtwebkit-opensource-src (embed) - texlive-bin (embed) - rr (embed) - h2o (embed) - hhvm (embed) - apitrace (embed) rust-base64 - firefox (embed) discount - libtext-markdown-discount-perl (old-version) NOTE: code present in tarball but unused during build bibledit - mbedtls (embed; bug #890289) libqxt (no longer developed since 2013) - qstardict (embed) - copyq (embed) NOTE: embed small parts of source files libsimpleini - mrpt (modified-embed; bug #902488; bug #958260) - openalpr (embed; bug #902489) - funguloids (embed; bug #902490; bug #958261) csrf-magic - cacti (embed) - zoneminder (mbed) twitter-bootstrap3 - ruby-rails-assets-bootstrap (embed; bug #838728) ruby-bootstrap-sass - ruby-rails-assets-bootstrap (embed; bug #838729) jsonld.js (not packaged in Debian; no ITP) - r-cran-jsonld (embed; bug #908548) casperjs (RFP: #738827) - r-cran-webshot (embed; bug #906039) bootstrap-markdown.js (not packaged in Debian; no ITP) - ruby-rails-assets-bootstrap-markdown (embed; bug #838730) libjs-chartkick.js - python-chartkick (embed; bug #836577) libbson - mongo-c-driver (embed) NOTE: src:mongo-c-driver builds as well libbson binary package and superseeds src:libbson spdlog - rapmap (embed; bug #909766) nbis (not packaged, https://www.nist.gov/services-resources/software/nist-biometric-image-software-nbis) - libfprint (modified-embed) igraph - r-cran-igraph (embed) make-dfsg - kbuild (modified-embed; bug #919295) gsoap - r-other-x4r (embed; bug #922607) libzstd - mercurial (embed) NOTE: mercurial vendors python-zstandard which vendors libzstd ttmath (not packaged, https://www.ttmath.org/) - mapsembler2 (embed) - freebayes (embed) - geos (modified-embed) ezxml (not packaged in Debian; no ITP) - netcdf (embed; bug #989360) - netcdf-parallel (embed; bug #989361) - navit (embed; bug #989362) - mapcache (embed; bug #989363) - scilab (embed; bug #989364) libstb - goxel 0.10.6-2 (embed; bug #949552) - renderdoc 1.7+dfsg-1 (embed; bug #949633) - love 11.3-1 (embed; bug #949634) - libsixel (embed; bug #949707) - retroarch (embed; bug #949708) - libsfml (embed; bug #949709) - sumo (embed; bug #950251) - yquake2 (embed; bug #950252) - dart (modified-embed) http-parser - nodejs (embed) qr-code-generator - faust (embed; bug #958267) - network-manager-applet (embed; bug #958265; bug #958266) - radare2 (embed; bug #958268) - smplayer (embed; bug #958264) axtls - argyll (embed; bug #958262) - gauche (embed; bug #958263) libminini - drc (embed; bug #958258) - libnss-securepass (embed; bug #958259) libjsonparser - bitlbee (embed; bug #958251) - cctools (embed; bug #958254) - pgpool2 (embed; bug #958253) - remind (embed; bug #958256) - shadowsocks-libev (embed; bug #958255) - simple-obfs (embed; bug #958252) - teeworlds (embed; bug #958249) - vlc (embed; bug #958250) libwhereami - yabasic (embed; bug #956309) - ycmd 0+20200403+git9021e97+ds-1 (embed; bug #956310) libinih - fs-uae (embed; bug #958245) - gnutls28 (embed; bug #958243) - hinge (embed; bug #958244) - knxd (embed; bug #958248) - mgba (embed; bug #958247) - mpdas (embed; bug #958246) - ocserv (embed; bug #958242) - pcp (embed; bug #958241) ndpi - ntop (modified-embed) libdvdread - kodi (modified-embed) libdvdnav - kodi (modified-embed) libsass - node-node-sass (embed; bug #963764) photoswipe (itp: #891978) - darktable (embed; bug #969159) libbpf - bpfcc 0.17.0+ds-1 (embed) - dwarves-dfsg 1.18-1 (embed; bug #979105) - v4l-utils (embed; bug #979610) python-py - pypy (embed) - pypy3 (embed) pytest - pypy (modified-embed) - pypy3 (modified-embed) python-cffi - pypy (embed) - pypy3 (embed) python-cryptography: - pypy (embed) - pypy3 (embed) chezscheme - racket (fork) ccextractor - gpac 0.93+ds2-1 (modified-embed; bug #994754) xorg-server - xwayland (fork) python-cachecontrol - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-certifi - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html chardet - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-colorama - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html distlib - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-distro - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html html5lib - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-idna - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-msgpack - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-packaging - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html pep517 - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html setuptools - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html platformdirs - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-progress - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html requests - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-resolvelib - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html six - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-tenacity - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-tomli - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-urllib3 - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html python-webencodings - python-pip (embed) NOTE: https://lists.debian.org/debian-python/2021/09/msg00031.html