/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 8142 - (hide annotations) (download)
Tue Feb 12 20:19:50 2008 UTC (5 years, 4 months ago) by fw
File size: 10570 byte(s)
embedded-code-copies: Dcoument syntax additions
1 nion 7695 Embedded code copies
2     ====================
3    
4 thijs 8078 This file collects source packages that embed code from other projects.
5     This is considered bad for fixing security flaws because the fix needs
6     to be applied in multiple source packages.
7 jmm-guest 1586
8 nion 7695 Format:
9     <srcpkg> (<optional comment about srcpkg>)
10     - <embedding srcpkg> <status> (<sort>; bug #<number>)
11     NOTE: optional comments about the linkage of the embedding srcpkg
12    
13 thijs 8078 status: version number fixing the embedded copy, <unfixed>, <removed>,
14     <itp> or <unknown> if the version number can not be determined
15 fw 8142 <unfixable> for unavoidable cases (e.g., forks that add real value)
16 nion 7828 sort: static (linking statically against a lib)
17     embed (embedding a copy of the library into another source package)
18 thijs 8078 fork (the package is not just embedding code but it is a fork and
19     thus might share parts of the source code)
20 fw 8142 old-version (the package is an older version of essentially
21     the same code)
22 nion 7828
23 thijs 8078 The srcpkg might be some string to identify the code if there is no
24     specific source package.
25 jmm-guest 1586
26 thijs 8078 Everything up to the next line is ignored.
27 stef-guest 7923 ---BEGIN
28 nion 7696 xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29 jmm-guest 7743 NOTE: Fixed packages link to poppler library unless otherwise noted
30 nion 7697 - gpdf <removed>
31     [sarge] - gpdf <unfixed>
32     NOTE: has been replaced by evince in etch
33     - pdftohtml <unknown>
34     [sarge] - pdftohtml <unfixed>
35     [etch] - pdftohtml <unfixed>
36     NOTE: has been replaced by poppler-utils
37 nion 7739 - kdegraphics <unfixed> (embed; bug #436164)
38 nion 7696 NOTE: the kpdf replacement in KDE 4 is using poppler
39 nion 7739 - tetex-bin 3.0-12 (embed)
40 jmm-guest 7743 - texlive-bin 2007-1 (embed)
41 nion 7696 NOTE: links to poppler
42 nion 7739 - koffice <unfixed> (embed; bug #436163)
43     - libextractor 0.5.12-1 (embed)
44 jmm-guest 7743 NOTE: libextractor is using its own pdf decoder now
45 nion 7739 - libextractor 0.5.12-1 (embed)
46     - pdfkit.framework 0.8-4 (embed)
47     - ipe <unfixed> (embed)
48 nion 7696 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
49 nion 7739 - ruby-gnome2 <unknown> (embed)
50 nion 7696 NOTE: copy only present in source but links to poppler
51    
52 nion 7791 ppmd
53 nion 7755 - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54    
55 nion 7791 silc-toolkit
56 nion 7740 - silc-client 1.1~beta6-1 (embed)
57 nion 6965
58 nion 7791 dietlibc
59 nion 7740 - ccontrol 0.9.1+20071204-1 (static)
60 nion 6967
61 nion 7791 libiax
62 nion 7740 - iaxmodem <unfixed> (embed)
63 nion 6969
64 nion 7787 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
65     - dpkg <unfixed> (embed)
66     NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
67     - rsync <unfixed> (embed)
68     NOTE: somehow derived code base
69     - mono <unfixed> (embed)
70     TODO: check mozilla
71     - Linux kernels <unfixed> (embed)
72     - pvpgn 1.7.8-2 (embed)
73     - mrtg 2.12.2-1 (embed)
74     - rpm <unknown> (embed)
75 nion 7841 NOTE: pinged anibal since when rpm was fixed
76 jmm-guest 1586
77 nion 7788 libbz2
78     - dpkg <unfixed> (static)
79 stef-guest 5320
80 nion 7788 ekg
81     - centericq <unfixed> (embed)
82     - gaim <unfixed> (embed)
83     - pigdin <unfixed> (embed)(links dynamically against libgadu)
84     - kopete 4:3.3.2-5 (embed)
85     - kadu <unfixed> (embed)
86     - gadu <unfixed> (embed)
87     NOTE: g/kadu not packaged in Debian yet
88 jmm-guest 1586
89 nion 7791 xmlrpc (which package is the "origin" of this code?)
90 nion 7788 - drupal <unfixed> (embed)
91     - phpgroupware <unfixed> (embed)
92     - egroupware <unfixed> (embed)
93     - phpwiki (embed)
94     - php4 <unfixed> (embed)
95     TODO: check, php-pear, IIRC this was reorganized some weeks ago?
96 jmm-guest 1586
97 nion 7791 shtool (affects build-time only)
98     - mysql-ocaml <unfixed> (embed)
99     - php4 <unfixed> (embed)
100 jmm-guest 1588
101 nion 7791 mozilla source code
102     - mozilla-firefox <unfixed> (embed)
103     - mozilla-thunderbird
104     - firefox <removed>
105     [etch] - firefox <unfixed> (embed)
106     - thunderbird <removed>
107     [etch] - thunderbird <unfixed> (embed)
108     - iceweasel <unfixed> (embed)
109     - iceape <unfixed> (embed)
110     - icedove <unfixed> (embed)
111     - xulrunner <unfixed> (embed)
112     - nvu <removed> (embed)
113 jmm-guest 1588
114 nion 7791 xli
115     - xloadimage <unfixed> (embed)
116 jmm-guest 1588
117 nion 7827 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
118     - openmotif <unfixed> (embed)
119     - xfree86/xorg <unfixed> (embed)
120     NOTE: in libxpm
121 jmm-guest 1588
122 nion 7827 kerberized apps with BSD origin
123     - krb4 <unfixed> (embed)
124     - krb5 <unfixed> (embed)
125     - heimdal <unfixed> (embed)
126 jmm-guest 1588
127 nion 7827 grip (which pkg is the origin?)
128     - libcdaudio
129     - grip
130     - gnome-vfs
131     TODO: check vfs2 as well
132 stef-guest 1608
133 nion 7827 fudforum
134     - phpgroupware-fudforum <unfixed> (embed)
135     - egroupware-fudforum <removed>
136     [sarge] - egroupware-fudforum <unfixed> (embed)
137 jmm-guest 1670
138 nion 7827 cvs
139     - gcvs <unfixed> (embed)
140     NOTE: see cvsunix/src in tarball
141 jmm-guest 1684
142 nion 7827 pcre
143     - python* <unfixed> (embed)
144     - php4 <unknown> (embed)
145     - analog 2:5.23-0woody1 (embed)
146     - libgoffice-1 <unfixed> (embed)
147     - vfu 4.06-4.1 (embed; bug #450754)
148     - tf5 5.0beta7-1 (embed)
149     - monotone <unfixed> (embed)
150     NOTE: this only affects versions >= 0.37
151     - glib <unfixed> (embed)
152     NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic
153     - apache2 2.0.53-4 (embed)
154     - exim4 4.10-0.srh20.12 (embed)
155     - yacas <unfixed> (embed)
156     NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
157     - gtamsanalyzer.app 0.42-5 (embed)
158 jmm-guest 1758
159 nion 7827 tiff
160     - wxpythongtk <unfixed> (embed)
161     TODO: check, which debian pkg this is in
162 joeyh 1802
163 nion 7827 uudeview
164     - libconvert-uulib-perl <unfixed> (embed)
165 jmm-guest 1824
166 nion 7827 sqlite (not affected by security vulnerabilities so far)
167     - amarok <unfixed> (embed)
168     - monotone <unfixed> (embed)
169     - iceweasel <unfixed> (embed)
170 jmm-guest 1828
171 nion 7827 util-linux/mount
172     - loop-aes-utils <unfixed> (embed)
173     NOTE: contains code from util-linux' mount in the mount-aes-udeb
174 jmm-guest 2104
175 nion 7827 webmin
176     - usermin <unknown> (embed)
177     [sarge] - usermin <unfixed> (embed)
178 jmm-guest 2714
179 nion 7827 sylpheed
180 nion 7828 - sylpheed-claws <unfixed> (fork)
181 jmm-guest 2751
182 nion 7827 phpsysinfo
183     - egroupware <unfixed> (embed)
184     - phpgroupware <unfixed> (embed)
185 jmm-guest 2800
186 nion 7830 phpldapadmin
187 stef-guest 7923 [sarge] - egroupware <unfixed> (embed)
188 nion 7830 NOTE: removed from egroupware after sarge
189 jmm-guest 2800
190 nion 7830 chmlib
191     - kchmviewer <unknown> (embed)
192 jmm-guest 2800
193 nion 7830 libavcodec/libavformat (source: ffmpeg)
194     - mplayer <unfixed> (embed; bug #395252)
195     - xvidcap <unfixed> (embed)
196     - kino <unfixed> (static)
197     - vlc <unfixed> (static)
198     - smilutils <unfixed> (static)
199     - motion <unfixed> (static)
200     - gst-ffmpeg <unfixed> (embed)
201     - gstreamer0.10-ffmpeg <unfixed> (embed)
202     - xmovie <unfixed>
203 nion 7841 TODO: gimp-gap (potentially using ffmpeg code as well)
204 jmm-guest 2948
205 nion 7830 mad MPEG decoding lib
206     - mad <unfixed> (embed)
207     - xine-lib <unfixed> (embed)
208 jmm-guest 2948
209     libdts
210 nion 7840 - xine-lib <unfixed> (embed)
211 jmm-guest 2948
212     flac
213 nion 7840 - xine-lib <unfixed> (embed)
214 jmm-guest 2948
215 nion 7840 liba52
216     - a52dec <unfixed> (embed)
217     - xine-lib <unfixed> (embed)
218 jmm-guest 2948
219 nion 7840 libmpeg2
220     - mpeg2dec <unfixed> (embed)
221     - xine-lib <unfixed> (embed)
222 jmm-guest 2948
223 nion 7840 curl
224     - wget <unfixed> (embed)
225     NOTE: code for NTLM authentication
226 jmm-guest 3093
227 nion 7840 uw-imap
228     - pine <unfixed> (embed)
229     - alpine <unfixed> (embed)
230 jmm-guest 3320
231 nion 7840 imagemagick
232     - graphicsmagick <unfixed> (fork)
233 jmm-guest 3402
234 nion 7840 halibut
235     - nsis <unfixed> (embed)
236 micah 3537
237 nion 7840 libghttp
238     - hotway <unfixed> (embed)
239 micah 3537
240 nion 7840 libsndfile
241     - ardour <unfixed> (embed)
242 micah 3537
243 nion 7840 glibmm2.4
244     - ardour <unfixed> (embed)
245 nion 6869
246 nion 7840 libgnomecanvasmm2.6
247     - ardour <unfixed> (embed)
248 nion 6869
249 nion 7840 libsigc++-2.0
250     - ardour <unfixed> (embed)
251 nion 6869
252 nion 7840 soundtouch
253     - ardour <unfixed> (embed)
254 nion 6869
255 nion 7840 libmms
256     - xine-lib <unfixed> (embed)
257     - mimms <unfixed> (embed)
258 nion 6869
259 nion 7840 fckeditor
260 nion 8085 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
261 nion 7840 - moin <unfixed> (embed; bug #452599)
262     - karrigell <unfixed> (embed; bug #452598)
263     - gforge-plugins-extra 4.6.99+svn6225-1 (embed)
264 stef-guest 4517
265 nion 7841 ipatlas (not packaged in Debian)
266     - moodle <unfixed> (embed)
267 jmm-guest 7383
268 nion 7841 libphp-phpmailer
269     - moodle <unfixed> (embed)
270 neilm 4838
271 nion 7841 htmlArea (not packaged in Debian)
272     - moodle <unfixed> (embed)
273    
274     bennu (not packaged in Debian)
275     - moodle <unfixed> (embed)
276    
277     smarty:
278     - moodle <unfixed> (embed)
279    
280 nion 7840 TinyMCE
281     - wordpress <unfixed> (embed)
282     - moodle <unfixed> (embed)
283     - knowledgeroot <unfixed> (embed)
284     - joomla <itp> (bug #326398)
285 stef-guest 4517
286 nion 7840 scintilla
287     - scite <unfixed> (embed)
288     - qscintilla <unfixed> (embed)
289     - qscintilla2 <unfixed> (embed)
290     - geany <unfixed> (embed)
291 stef-guest 4706
292 nion 7840 libphp-adodb
293 stef-guest 7923 - moodle <unfixed> (embed)
294     NOTE: also AdoDB-XML Schema
295 nion 7840 - gallery2 <unfixed> (embed)
296     - phppgadmin <unfixed> (embed)
297     - egroupware <unfixed> (embed)
298     - phpwiki <unfixed> (embed)
299     - ipplan <unfixed> (embed)
300     - typo3 <unfixed> (embed)
301     - moodle <unfixed> (embed)
302     - cacti <unknown> (embed)
303     [sarge] - cacti <unfixed> (embed)
304     NOTE: dependency exists, but internal version is used
305 stef-guest 4706
306 nion 7840 gzip
307 nion 7841 - linux-kernel <unfixed> (embed)
308     NOTE: lib/inflate.c
309     - klibc <unfixed> (embed)
310     NOTE: based on linux-kernel gzip code
311     - busybox <unfixed> (embed)
312 micah 4767
313 nion 7841 neon
314     - cadaver <unfixed> (embed; bug #188381)
315     - gnome-vfs2 <unfixed> (embed; bug #395874)
316     - litmus <unfixed> (embed; #395875)
317     [sarge] - screem <unfixed> (embed)
318     - sitecopy <unfixed> (embed; bug #395876)
319 stef-guest 7923 [etch] - tla <unfixed> (embed; bug #395877)
320     [sarge] - tla <unfixed> (embed; bug #395877)
321 stef-guest 5319
322 nion 7841 libmodplug
323     - gst-plugins-bad0.10 <unfixed> (embed)
324 stef-guest 5320
325 nion 7841 libvncserver
326     - vino <unfixed> (embed)
327 stef-guest 5320
328 nion 7841 putty
329     - filezilla <unfixed> (embed)
330 stef-guest 5320
331 nion 7841 tinyxml (not packaged in Debian)
332     - filezilla <unfixed>
333 stef-guest 5320
334 nion 7841 gv
335     - evince <unfixed> (embed)
336     NOTE: ps/ tree from gv 3.5.8
337     - evince-gtk <unfixed> (embed)
338     NOTE: not packaged in Debian
339 stef-guest 5321
340 nion 7841 libXbae
341     [etch] - libpawlib2-lesstif <unfixed> (embed)
342     NOTE: from Cernlib
343 stef-guest 5321
344 nion 7841 libXaw
345 stef-guest 7924 [etch] - libpawlib2-lesstif
346 nion 7841 NOTE: from Cernlib
347     NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
348 stef-guest 5321
349 nion 7841 libgd2
350     - graphviz <unfixed> (embed)
351     NOTE: lib/gd seems to be 2.0.33
352 nion 8098 - wml <unfixed> (embed)
353     NOTE: derived from gd 1.6.3
354 stef-guest 5321
355 nion 7841 rar
356     - unrar-nonfree <unfixed> (embed)
357 stef-guest 5440
358 nion 7841 unrar-free (maybe this code is derived from the original rar, too?)
359     - clamav <unfixed> (embed)
360     NOTE: seems to be disabled in default config
361 stef-guest 5440
362 nion 7841 mplayer (DirectMedia Object loader)
363     - xine-lib <unfixed> (embed)
364     NOTE: src/libw32dll/
365     - vlc <unfixed> (embed)
366     NOTE: modules/codec/dmo/
367 stef-guest 5440
368 nion 7841 libwpd (WordPerfect converter)
369     - openoffice.org <unfixed> (embed)
370 alec-guest 5564
371 nion 7841 fsplib (http://sourceforge.net/projects/fsp/)
372     - gftp <unfixed> (embed)
373     NOTE: lib/fsplib version 0.3
374 keescook-guest 6298
375 nion 7841 librpcsecgss
376     - krb5 <unfixed> (embed)
377 keescook-guest 6498
378 nion 7841 jasper
379     - ghostscript <unfixed> (embed)
380     - gs-gpl <unfixed> (embed)
381 stef-guest 6985
382 nion 7841 libidn
383     - monotone <unfixed> (embed)
384 keescook-guest 7007
385 nion 7841 liblua
386     - monotone <unfixed> (embed)
387 micah 7134
388 nion 7841 libbotan
389     - montone <unfixed> (embed)
390 nion 7136
391 nion 7841 NetXX
392     - monotone <unfixed> (embed)
393 nion 7136
394 nion 7841 libgc
395     - mono <unfixed> (embed)
396 nion 7136
397 nion 7841 lzma
398     - p7zip <unfixed> (embed)
399 white 7203
400 nion 7841 lzo
401     - grub2 <unfixed> (embed)
402 jmm-guest 7212
403 nion 7927 yassl
404     - mysql-dfsg-5.0 <unfixed> (embed)
405    
406 nion 7841 pax code
407     - tar <unfixed> (embed)
408     - cpio <unfixed> (embed)
409 jmm-guest 7212
410 nion 7841 t1lib
411     - tetex-bin 2.0.2-1 (embed)
412     - texlive-bin <unknown> (embed)
413 thijs 7985
414     guichan
415     - boswars <unfixed> (embed)
416     NOTE: maintainer notified us, working on it
417    
418     tolua
419     - boswars <unfixed> (embed)
420     NOTE: maintainer notified us, working on it
421    
422     asio-dev
423     - luxrender <unfixed> (embed)
424     NOTE: maintainer notified us, working on it
425     NOTE: may be merged with boost "soon"
426    
427 nion 7995 xine-lib
428     - vlc <unfixed> (embed)
429     NOTE: only parts included in modules/access/rtsp
430 stef-guest 8075
431     netpbm
432     - tcl8.3 <unfixed> (embed)
433     - tcl8.4 <unfixed> (embed)
434     - tcl8.5 <unfixed> (embed)
435     NOTE: generic/tkImgGIF.c

  ViewVC Help
Powered by ViewVC 1.1.5