/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 7841 - (hide annotations) (download)
Sun Jan 6 16:13:03 2008 UTC (5 years, 4 months ago) by nion
File size: 9757 byte(s)
further conversions, mission accomplished
1 nion 7695 Embedded code copies
2     ====================
3    
4 jmm-guest 1586 This file collects cases, where a source package embeds code from
5 nion 7695 other projects which is considered bad for fixing security flaws
6     because the fix needs to be applied in multiple source packages.
7 jmm-guest 1586
8 nion 7695 Format:
9     <srcpkg> (<optional comment about srcpkg>)
10     - <embedding srcpkg> <status> (<sort>; bug #<number>)
11     NOTE: optional comments about the linkage of the embedding srcpkg
12    
13 nion 7840 status: version number fixing the embedded copy, <unfixed>, <removed>, <itp> or <unknown> if the version number can not be determined
14 nion 7828 sort: static (linking statically against a lib)
15     embed (embedding a copy of the library into another source package)
16     fork (the package is not just embedding code but it is a fork and thus might share parts of the source code)
17    
18 nion 7788 The srcpkg might be some string to identify the code if there is no specific source package.
19 jmm-guest 1586
20 nion 7696 xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
21 jmm-guest 7743 NOTE: Fixed packages link to poppler library unless otherwise noted
22 nion 7697 - gpdf <removed>
23     [sarge] - gpdf <unfixed>
24     NOTE: has been replaced by evince in etch
25     - pdftohtml <unknown>
26     [sarge] - pdftohtml <unfixed>
27     [etch] - pdftohtml <unfixed>
28     NOTE: has been replaced by poppler-utils
29 nion 7739 - kdegraphics <unfixed> (embed; bug #436164)
30 nion 7696 NOTE: the kpdf replacement in KDE 4 is using poppler
31 nion 7739 - tetex-bin 3.0-12 (embed)
32 jmm-guest 7743 - texlive-bin 2007-1 (embed)
33 nion 7696 NOTE: links to poppler
34 nion 7739 - koffice <unfixed> (embed; bug #436163)
35     - libextractor 0.5.12-1 (embed)
36 jmm-guest 7743 NOTE: libextractor is using its own pdf decoder now
37 nion 7739 - libextractor 0.5.12-1 (embed)
38     - pdfkit.framework 0.8-4 (embed)
39     - ipe <unfixed> (embed)
40 nion 7696 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
41 nion 7739 - ruby-gnome2 <unknown> (embed)
42 nion 7696 NOTE: copy only present in source but links to poppler
43    
44 nion 7791 ppmd
45 nion 7755 - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
46    
47 nion 7791 silc-toolkit
48 nion 7740 - silc-client 1.1~beta6-1 (embed)
49 nion 6965
50 nion 7791 dietlibc
51 nion 7740 - ccontrol 0.9.1+20071204-1 (static)
52 nion 6967
53 nion 7791 libiax
54 nion 7740 - iaxmodem <unfixed> (embed)
55 nion 6969
56 nion 7787 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
57     - dpkg <unfixed> (embed)
58     NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
59     - rsync <unfixed> (embed)
60     NOTE: somehow derived code base
61     - mono <unfixed> (embed)
62     TODO: check mozilla
63     - Linux kernels <unfixed> (embed)
64     - pvpgn 1.7.8-2 (embed)
65     - mrtg 2.12.2-1 (embed)
66     - rpm <unknown> (embed)
67 nion 7841 NOTE: pinged anibal since when rpm was fixed
68 jmm-guest 1586
69 nion 7788 libbz2
70     - dpkg <unfixed> (static)
71 stef-guest 5320
72 nion 7788 ekg
73     - centericq <unfixed> (embed)
74     - gaim <unfixed> (embed)
75     - pigdin <unfixed> (embed)(links dynamically against libgadu)
76     - kopete 4:3.3.2-5 (embed)
77     - kadu <unfixed> (embed)
78     - gadu <unfixed> (embed)
79     NOTE: g/kadu not packaged in Debian yet
80 jmm-guest 1586
81 nion 7791 xmlrpc (which package is the "origin" of this code?)
82 nion 7788 - drupal <unfixed> (embed)
83     - phpgroupware <unfixed> (embed)
84     - egroupware <unfixed> (embed)
85     - phpwiki (embed)
86     - php4 <unfixed> (embed)
87     TODO: check, php-pear, IIRC this was reorganized some weeks ago?
88 jmm-guest 1586
89 nion 7791 shtool (affects build-time only)
90     - mysql-ocaml <unfixed> (embed)
91     - php4 <unfixed> (embed)
92 jmm-guest 1588
93 nion 7791 mozilla source code
94     - mozilla-firefox <unfixed> (embed)
95     - mozilla-thunderbird
96     - firefox <removed>
97     [etch] - firefox <unfixed> (embed)
98     - thunderbird <removed>
99     [etch] - thunderbird <unfixed> (embed)
100     - iceweasel <unfixed> (embed)
101     - iceape <unfixed> (embed)
102     - icedove <unfixed> (embed)
103     - xulrunner <unfixed> (embed)
104     - nvu <removed> (embed)
105 jmm-guest 1588
106 nion 7791 xli
107     - xloadimage <unfixed> (embed)
108 jmm-guest 1588
109 nion 7827 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
110     - openmotif <unfixed> (embed)
111     - xfree86/xorg <unfixed> (embed)
112     NOTE: in libxpm
113 jmm-guest 1588
114 nion 7827 kerberized apps with BSD origin
115     - krb4 <unfixed> (embed)
116     - krb5 <unfixed> (embed)
117     - heimdal <unfixed> (embed)
118 jmm-guest 1588
119 nion 7827 grip (which pkg is the origin?)
120     - libcdaudio
121     - grip
122     - gnome-vfs
123     TODO: check vfs2 as well
124 stef-guest 1608
125 nion 7827 fudforum
126     - phpgroupware-fudforum <unfixed> (embed)
127     - egroupware-fudforum <removed>
128     [sarge] - egroupware-fudforum <unfixed> (embed)
129 jmm-guest 1670
130 nion 7827 cvs
131     - gcvs <unfixed> (embed)
132     NOTE: see cvsunix/src in tarball
133 jmm-guest 1684
134 nion 7827 pcre
135     - python* <unfixed> (embed)
136     - php4 <unknown> (embed)
137     - analog 2:5.23-0woody1 (embed)
138     - libgoffice-1 <unfixed> (embed)
139     - vfu 4.06-4.1 (embed; bug #450754)
140     - tf5 5.0beta7-1 (embed)
141     - monotone <unfixed> (embed)
142     NOTE: this only affects versions >= 0.37
143     - glib <unfixed> (embed)
144     NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic
145     - apache2 2.0.53-4 (embed)
146     - exim4 4.10-0.srh20.12 (embed)
147     - yacas <unfixed> (embed)
148     NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
149     - gtamsanalyzer.app 0.42-5 (embed)
150 jmm-guest 1758
151 nion 7827 tiff
152     - wxpythongtk <unfixed> (embed)
153     TODO: check, which debian pkg this is in
154 joeyh 1802
155 nion 7827 uudeview
156     - libconvert-uulib-perl <unfixed> (embed)
157 jmm-guest 1824
158 nion 7827 sqlite (not affected by security vulnerabilities so far)
159     - amarok <unfixed> (embed)
160     - monotone <unfixed> (embed)
161     - iceweasel <unfixed> (embed)
162 jmm-guest 1828
163 nion 7827 util-linux/mount
164     - loop-aes-utils <unfixed> (embed)
165     NOTE: contains code from util-linux' mount in the mount-aes-udeb
166 jmm-guest 2104
167 nion 7827 webmin
168     - usermin <unknown> (embed)
169     [sarge] - usermin <unfixed> (embed)
170 jmm-guest 2714
171 nion 7827 sylpheed
172 nion 7828 - sylpheed-claws <unfixed> (fork)
173 jmm-guest 2751
174 nion 7827 phpsysinfo
175     - egroupware <unfixed> (embed)
176     - phpgroupware <unfixed> (embed)
177 jmm-guest 2800
178 nion 7830 phpldapadmin
179     - [sarge] egroupware <unfixed> (embed)
180     NOTE: removed from egroupware after sarge
181 jmm-guest 2800
182 nion 7830 chmlib
183     - kchmviewer <unknown> (embed)
184 jmm-guest 2800
185 nion 7830 libavcodec/libavformat (source: ffmpeg)
186     - mplayer <unfixed> (embed; bug #395252)
187     - xvidcap <unfixed> (embed)
188     - kino <unfixed> (static)
189     - vlc <unfixed> (static)
190     - smilutils <unfixed> (static)
191     - motion <unfixed> (static)
192     - gst-ffmpeg <unfixed> (embed)
193     - gstreamer0.10-ffmpeg <unfixed> (embed)
194     - xmovie <unfixed>
195 nion 7841 TODO: gimp-gap (potentially using ffmpeg code as well)
196 jmm-guest 2948
197 nion 7830 mad MPEG decoding lib
198     - mad <unfixed> (embed)
199     - xine-lib <unfixed> (embed)
200 jmm-guest 2948
201     libdts
202 nion 7840 - xine-lib <unfixed> (embed)
203 jmm-guest 2948
204     flac
205 nion 7840 - xine-lib <unfixed> (embed)
206 jmm-guest 2948
207 nion 7840 liba52
208     - a52dec <unfixed> (embed)
209     - xine-lib <unfixed> (embed)
210 jmm-guest 2948
211 nion 7840 libmpeg2
212     - mpeg2dec <unfixed> (embed)
213     - xine-lib <unfixed> (embed)
214 jmm-guest 2948
215 nion 7840 curl
216     - wget <unfixed> (embed)
217     NOTE: code for NTLM authentication
218 jmm-guest 3093
219 nion 7840 uw-imap
220     - pine <unfixed> (embed)
221     - alpine <unfixed> (embed)
222 jmm-guest 3320
223 nion 7840 imagemagick
224     - graphicsmagick <unfixed> (fork)
225 jmm-guest 3402
226 nion 7840 halibut
227     - nsis <unfixed> (embed)
228 micah 3537
229 nion 7840 libghttp
230     - hotway <unfixed> (embed)
231 micah 3537
232 nion 7840 libsndfile
233     - ardour <unfixed> (embed)
234 micah 3537
235 nion 7840 glibmm2.4
236     - ardour <unfixed> (embed)
237 nion 6869
238 nion 7840 libgnomecanvasmm2.6
239     - ardour <unfixed> (embed)
240 nion 6869
241 nion 7840 libsigc++-2.0
242     - ardour <unfixed> (embed)
243 nion 6869
244 nion 7840 soundtouch
245     - ardour <unfixed> (embed)
246 nion 6869
247 nion 7840 libmms
248     - xine-lib <unfixed> (embed)
249     - mimms <unfixed> (embed)
250 nion 6869
251 nion 7840 fckeditor
252     - knowledgeroot <unfixed> (embed)
253     - moin <unfixed> (embed; bug #452599)
254     - karrigell <unfixed> (embed; bug #452598)
255     - gforge-plugins-extra 4.6.99+svn6225-1 (embed)
256 stef-guest 4517
257 nion 7841 libphp-adodb
258     - moodle <unfixed> (embed)
259     NOTE: also AdoDB-XML Schema
260 stef-guest 4517
261 nion 7841 ipatlas (not packaged in Debian)
262     - moodle <unfixed> (embed)
263 jmm-guest 7383
264 nion 7841 libphp-phpmailer
265     - moodle <unfixed> (embed)
266 neilm 4838
267 nion 7841 htmlArea (not packaged in Debian)
268     - moodle <unfixed> (embed)
269    
270     bennu (not packaged in Debian)
271     - moodle <unfixed> (embed)
272    
273     smarty:
274     - moodle <unfixed> (embed)
275    
276 nion 7840 TinyMCE
277     - wordpress <unfixed> (embed)
278     - moodle <unfixed> (embed)
279     - knowledgeroot <unfixed> (embed)
280     - joomla <itp> (bug #326398)
281 stef-guest 4517
282 nion 7840 scintilla
283     - scite <unfixed> (embed)
284     - qscintilla <unfixed> (embed)
285     - qscintilla2 <unfixed> (embed)
286     - geany <unfixed> (embed)
287 stef-guest 4706
288 nion 7840 libphp-adodb
289     - gallery2 <unfixed> (embed)
290     - phppgadmin <unfixed> (embed)
291     - egroupware <unfixed> (embed)
292     - phpwiki <unfixed> (embed)
293     - ipplan <unfixed> (embed)
294     - typo3 <unfixed> (embed)
295     - moodle <unfixed> (embed)
296     - cacti <unknown> (embed)
297     [sarge] - cacti <unfixed> (embed)
298     NOTE: dependency exists, but internal version is used
299 stef-guest 4706
300 nion 7840 gzip
301 nion 7841 - linux-kernel <unfixed> (embed)
302     NOTE: lib/inflate.c
303     - klibc <unfixed> (embed)
304     NOTE: based on linux-kernel gzip code
305     - busybox <unfixed> (embed)
306 micah 4767
307 nion 7841 neon
308     - cadaver <unfixed> (embed; bug #188381)
309     - gnome-vfs2 <unfixed> (embed; bug #395874)
310     - litmus <unfixed> (embed; #395875)
311     [sarge] - screem <unfixed> (embed)
312     - sitecopy <unfixed> (embed; bug #395876)
313     - [etch] tla <unfixed> (embed; bug #395877)
314     - [sarge] tla <unfixed> (embed; bug #395877)
315 stef-guest 5319
316 nion 7841 libmodplug
317     - gst-plugins-bad0.10 <unfixed> (embed)
318 stef-guest 5320
319 nion 7841 libvncserver
320     - vino <unfixed> (embed)
321 stef-guest 5320
322 nion 7841 putty
323     - filezilla <unfixed> (embed)
324 stef-guest 5320
325 nion 7841 tinyxml (not packaged in Debian)
326     - filezilla <unfixed>
327 stef-guest 5320
328 nion 7841 gv
329     - evince <unfixed> (embed)
330     NOTE: ps/ tree from gv 3.5.8
331     - evince-gtk <unfixed> (embed)
332     NOTE: not packaged in Debian
333 stef-guest 5321
334 nion 7841 libXbae
335     [etch] - libpawlib2-lesstif <unfixed> (embed)
336     NOTE: from Cernlib
337 stef-guest 5321
338 nion 7841 libXaw
339     [etc] - libpawlib2-lesstif
340     NOTE: from Cernlib
341     NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
342 stef-guest 5321
343 nion 7841 libgd2
344     - graphviz <unfixed> (embed)
345     NOTE: lib/gd seems to be 2.0.33
346 stef-guest 5321
347 nion 7841 rar
348     - unrar-nonfree <unfixed> (embed)
349 stef-guest 5440
350 nion 7841 unrar-free (maybe this code is derived from the original rar, too?)
351     - clamav <unfixed> (embed)
352     NOTE: seems to be disabled in default config
353 stef-guest 5440
354 nion 7841 mplayer (DirectMedia Object loader)
355     - xine-lib <unfixed> (embed)
356     NOTE: src/libw32dll/
357     - vlc <unfixed> (embed)
358     NOTE: modules/codec/dmo/
359 stef-guest 5440
360 nion 7841 libwpd (WordPerfect converter)
361     - openoffice.org <unfixed> (embed)
362 alec-guest 5564
363 nion 7841 fsplib (http://sourceforge.net/projects/fsp/)
364     - gftp <unfixed> (embed)
365     NOTE: lib/fsplib version 0.3
366 keescook-guest 6298
367 nion 7841 librpcsecgss
368     - krb5 <unfixed> (embed)
369 keescook-guest 6498
370 nion 7841 jasper
371     - ghostscript <unfixed> (embed)
372     - gs-gpl <unfixed> (embed)
373 stef-guest 6985
374 nion 7841 libidn
375     - monotone <unfixed> (embed)
376 keescook-guest 7007
377 nion 7841 liblua
378     - monotone <unfixed> (embed)
379 micah 7134
380 nion 7841 libbotan
381     - montone <unfixed> (embed)
382 nion 7136
383 nion 7841 NetXX
384     - monotone <unfixed> (embed)
385 nion 7136
386 nion 7841 libgc
387     - mono <unfixed> (embed)
388 nion 7136
389 nion 7841 lzma
390     - p7zip <unfixed> (embed)
391 white 7203
392 nion 7841 lzo
393     - grub2 <unfixed> (embed)
394 jmm-guest 7212
395 nion 7841 pax code
396     - tar <unfixed> (embed)
397     - cpio <unfixed> (embed)
398 jmm-guest 7212
399 nion 7841 t1lib
400     - tetex-bin 2.0.2-1 (embed)
401     - texlive-bin <unknown> (embed)

  ViewVC Help
Powered by ViewVC 1.1.5