/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7616 by nion, Fri Dec 14 13:22:02 2007 UTC revision 10771 by fw, Mon Dec 22 05:50:52 2008 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  texlive-bin (links to poppler)  <srcpkg> (<optional comment about srcpkg>)
10  cupsys (uses xpdf-utils, it's still present in the src, though)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  poppler          NOTE: optional comments about the linkage of the embedding srcpkg
12  koffice/kword (upstream is working on using poppler, #436163)  
13  libextractor (uses internal pdf decoder since 0.5.12-1)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  pdfkit.framework (links to poppler since 0.8-4)          <itp> or <unknown> if the version number can not be determined
15  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <unfixable> for unavoidable cases (e.g., forks that add real value)
16  ruby-gnome2 (has a copy of poppler but links against the shared lib)  sort: static (linking statically against a lib)
17          embed (embedding a copy of the library into another source package)
18  silc-toolkit:        fork (the package is not just embedding code but it is a fork and
19  silc-client (uses libsilc and libsilcclient)              thus might share parts of the source code)
20          old-version (the package is an older version of essentially
21  dietlibc:                     the same code)
22  ccontrol (links statically)  
23    The srcpkg might be some string to identify the code if there is no
24  libiax:  specific source package.
25  iaxmodem  
26    Everything up to the next line is ignored.
27  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  ---BEGIN
28  dpkg  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  rsync (somehow derived code base)          NOTE: Fixed packages link to poppler library unless otherwise noted
30  mono          - gpdf <removed>
31  mozilla(?)          [sarge] - gpdf <unfixed>
32  Linux kernels          NOTE: has been replaced by evince in etch
33  pvpgn (links dynamically since 1.7.8-2)          - pdftohtml <unknown>
34  mrtg (links dynamically since 2.12.2-1)          [sarge] - pdftohtml <unfixed>
35  rpm          [etch] - pdftohtml <unfixed>
36            NOTE: has been replaced by poppler-utils
37  libbz2:          - kdegraphics <unfixed> (embed; bug #436164)
38  dpkg (statically linked)          NOTE: the kpdf replacement in KDE 4 is using poppler
39            - texlive-base 3.0-12 (embed)
40  libgadu/ekg:          - texlive-bin 2007-1 (embed)
41  centericq          NOTE: links to poppler
42  gaim          - koffice <unfixed> (embed; bug #436163)
43  pigdin (links dynamically against libgadu)          - libextractor 0.5.12-1 (embed)
44  kopete (ships the code, but links dynamically in the Debian package)          NOTE: libextractor is using its own pdf decoder now
45  kadu (not packaged in Debian)          - libextractor 0.5.12-1 (embed)
46  GNU gadu (not yet packaged in Debian)          - pdfkit.framework 0.8-4 (embed)
47            - ipe <unfixed> (embed)
48  xmlrpc: (which package is the "origin" of this code?)          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
49  drupal          - ruby-gnome2 <unknown> (embed)
50  phpgroupware          NOTE: copy only present in source but links to poppler
51  egroupware  
52  phpwiki  ppmd
53  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54    
55  shtool: (affects build-time only)  peercast
56  mysql-ocaml          - gnome-peercast <unfixed> (embed)
57  php4          NOTE: gnome-peercast may better be removed, see #466539
58    
59  mozilla:  silc-toolkit
60  mozilla-firefox          - silc-client 1.1~beta6-1 (embed)
61  mozilla-thunderbird  
62  firefox (to be removed)  dietlibc
63  thunderbird (to be removed)          - ccontrol 0.9.1+20071204-1 (static)
64  iceweasel  
65  iceape  libiax
66  icedove          - iaxmodem <unfixed> (embed)
67  xulrunner  
68  nvu (no longer in Debian)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
69            - dpkg <unfixed> (embed)
70  xli:          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
71  xloadimage          - rsync <unfixed> (embed)
72            NOTE: somehow derived code base
73  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          - mono <unfixed> (embed)
74  openmotif          TODO: check mozilla
75  xfree86/xorg (in libxpm)          - Linux kernels <unfixed> (embed)
76            - pvpgn 1.7.8-2 (embed)
77  kerberized apps with BSD origin:          - mrtg 2.12.2-1 (embed)
78  krb4          - rpm <unknown> (embed)
79  krb5          NOTE: pinged anibal since when rpm was fixed
80  heimdal          - tuxcmd-modules <itp> (embed; bug #508082)
81    
82  grip: (which pkg is the origin?)  libbz2
83  libcdaudio          - dpkg <unfixed> (static)
84  grip  
85  gnome-vfs (vfs2 as well?)  libgadu:
86            - centericq <unfixed> (embed)
87  fudforum:          - gaim <unfixed> (embed)
88  phpgroupware-fudforum          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
89  egroupware-fudforum (removed from egroupware after sarge)          - kopete 4:3.3.2-5 (embed)
90            - kadu 0.6.0.2-3 (embed)
91  cvs:          - gadu <unfixed> (embed)
92  gcvs (at least an additional script is included, check if there's more)          - ekg 1:1.8~rc0-1 (embed)
93            - kadu 0.6.0.2-3 (embed; bug #504430)
94  pcre:          NOTE: gadu not packaged in Debian yet
95  all pythons  
96  php4 (src included, but Debian package links dynamically)  xmlrpc (which package is the "origin" of this code?)
97  analog (src included, but Debian package links dynamically)          - drupal <unfixed> (embed)
98  libgoffice-1          - phpgroupware <unfixed> (embed)
99  vfu (#450754)          - egroupware <unfixed> (embed)
100  tf5 (since 5.0beta7 the Debian package links dynamically)          - phpwiki (embed)
101  monotone (including this starting from 0.37)          - php4 <unfixed> (embed)
102  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
103  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)  
104  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)  shtool (affects build-time only)
105  yacas (<= 1.0.x)          - mysql-ocaml <unfixed> (embed)
106            - php4 <unfixed> (embed)
107  tiff:  
108  wxpythongtk (check, which debian pkg this is in)  mozilla source code
109  older kdegraphics/kpdf releases < 3.3 embedded a copy          - mozilla-firefox <unfixed> (embed)
110            - mozilla-thunderbird
111  uudeview:          - firefox <removed>
112  libconvert-uulib-perl          [etch] - firefox <unfixed> (embed)
113            - thunderbird <removed>
114  sqlite: (not affected by security vulnerabilities so far)          [etch] - thunderbird <unfixed> (embed)
115  amarok          - iceweasel <unfixed> (embed)
116  monotone          - iceape <unfixed> (embed)
117  iceweasel          - icedove <unfixed> (embed)
118            - xulrunner <unfixed> (embed)
119  util-linux/mount:          - nvu <removed> (embed)
120  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
121    xli
122  webmin:          - xloadimage <unfixed> (embed)
123  usermin (only in sarge)  
124    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
125  sylpheed:          - openmotif <unfixed> (embed)
126  sylpheed-claws          - xfree86/xorg <unfixed> (embed)
127            NOTE: in libxpm
128  phpsysinfo:  
129  egroupware  kerberized apps with BSD origin
130  phpgroupware          - krb4 <unfixed> (embed)
131            - krb5 <unfixed> (embed)
132  phpldapadmin:          - heimdal <unfixed> (embed)
133  egroupware (removed from egroupware after sarge)  
134    grip (which pkg is the origin?)
135  chmlib:          - libcdaudio
136  kchmviewer (ships the code but links dynamically)          - grip
137            - gnome-vfs
138  libavcodec/libavformat (source: ffmpeg):          TODO: check vfs2 as well
139  mplayer (#395252)  
140  xvidcap  fudforum
141  kino (links statically, does not include code)          - phpgroupware-fudforum <unfixed> (embed)
142  vlc (links statically, does not include code)          - egroupware-fudforum <removed>
143  smilutils (links statically, does not include code)          [sarge] - egroupware-fudforum <unfixed> (embed)
144  motion (links statically, does not include code)  
145  gst-ffmpeg  cvs
146  gstreamer0.10-ffmpeg          - gcvs <unfixed> (embed)
147  xmovie          NOTE: see cvsunix/src in tarball
148    
149    pcre
150            - python* <unfixed> (embed)
151            - php4 <unknown> (embed)
152            - analog 2:5.23-0woody1 (embed)
153            - libgoffice-1 <unfixed> (embed)
154            - vfu 4.06-4.1 (embed; bug #450754)
155            - tf5 5.0beta7-1 (embed)
156            - monotone <unfixed> (embed)
157            NOTE: this only affects versions >= 0.37
158            - glib2.0 2.15.2-1 (embed)
159            - apache2 2.0.53-4 (embed)
160            - exim4 4.10-0.srh20.12 (embed)
161            - yacas <unfixed> (embed)
162            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
163            - gtamsanalyzer.app 0.42-5 (embed)
164            - tin <unknown> (embed)
165            - kazehakase 0.5.2-1
166            - webkit <unfixed> (embed)
167            - qt4-x11 <unfixed> (embed)
168            NOTE: embedded via webkit copy
169    
170    tiff
171            - wxwindows2.4 2.2.1 (embed)
172    
173    uudeview
174            - libconvert-uulib-perl <unfixed> (embed)
175            - pan <unfixed> (embed)
176    
177    sqlite (not affected by security vulnerabilities so far)
178            - amarok <unfixed> (embed)
179            - monotone <unfixed> (embed)
180            - iceweasel <unfixed> (embed)
181    
182    util-linux/mount
183            - loop-aes-utils <unfixed> (embed)
184            NOTE: contains code from util-linux' mount in the mount-aes-udeb
185    
186    webmin
187            - usermin <unknown> (embed)
188            [sarge] - usermin <unfixed> (embed)
189    
190    sylpheed
191            - sylpheed-claws <unfixed> (fork)
192    
193    phpsysinfo
194            - egroupware <unfixed> (embed)
195            - phpgroupware <unfixed> (embed)
196    
197    phpldapadmin
198            [sarge] - egroupware <unfixed> (embed)
199            NOTE: removed from egroupware after sarge
200    
201    chmlib
202            - kchmviewer <unknown> (embed)
203    
204    libavcodec/libavformat (source: ffmpeg)
205            - mplayer 1.0~rc2-14 (embed; bug #395252)
206            - kino 1.0.0-1
207            - vlc <not-affected> (Links dynamically since initial release)
208            - smilutils 0.3.0-10
209            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
210            - motion 3.1.19-1
211            - gstreamer0.10-ffmpeg 0.10.3-2
212            - xmovie <unfixed>
213            TODO: gimp-gap (potentially using ffmpeg code as well)
214    
215    faad2
216            - mplayer 1.0~rc2-20 (embed)
217    
218    mad MPEG decoding lib
219            - mad <unfixed> (embed)
220            - xine-lib <unfixed> (embed)
221    
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
222  libdts  libdts
223  xine-lib          - xine-lib <unfixed> (embed)
224    
 flac:  
225  flac  flac
226  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
227    
228  libghttp:  liba52
229  hotway          - a52dec <unfixed> (embed)
230            - xine-lib <unfixed> (embed)
231    
232  libsndfile:  libmpeg2
233  ardour          - mpeg2dec <unfixed> (embed)
234            - xine-lib <unfixed> (embed)
235    
236  glibmm2.4:  curl
237  ardour          - wget <unfixed> (embed)
238            NOTE: code for NTLM authentication
239    
240  libgnomecanvasmm2.6:  uw-imap
241  ardour          - pine <unfixed> (embed)
242            - alpine <unfixed> (embed)
243    
244  libsigc++-2.0:  imagemagick
245  ardour          - graphicsmagick <unfixed> (fork)
246    
 soundtouch:  
 ardour  
247    
248  libmms:  halibut
249  xine-lib          - nsis <unfixed> (embed)
 mimms  
   
 FCKeditor: (packaged as fckeditor)  
 knowledgeroot  
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
250    
251    libghttp
252            - hotway <unfixed> (embed)
253    
254    libsndfile
255            - ardour 1:2.7.1-1 (embed)
256    
257  Moodle contains lots of things:  glibmm2.4
258  AdoDB          - ardour 1:2.7.1-1 (embed)
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
259    
260  TinyMCE:  libgnomecanvasmm2.6
261  wordpress          - ardour 1:2.7.1-1 (embed)
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
262    
263  gzip:  libsigc++-2.0
264  linux-kernel (lib/inflate.c)          - ardour 1:2.7.1-1 (embed)
 klibc (based on linux-kernel gzip code)  
 busybox  
265    
266  neon:  soundtouch
267  cadaver (all, but being worked on: #188381)          - ardour 1:2.7.1-1 (embed)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
268    
269  libmodplug:  libmms
270  gst-plugins-bad0.10          - xine-lib <unfixed> (embed)
271            - mimms <unfixed> (embed)
272    
273  libvncserver:  fckeditor
274  vino          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
275            - moin <unfixed> (embed; bug #452599)
276            - karrigell <removed> (embed; bug #452598)
277            - gforge 4.6.99+svn6225-1 (embed)
278    
279  putty:  ipatlas (not packaged in Debian)
280  filezilla          - moodle <unfixed> (embed; bug #507185)
281    
282  tinyxml (not packaged in Debian):  libphp-phpmailer
283  filezilla          - moodle <unfixed> (embed; bug #507185)
284            - mahara <unfixed> (embed)
285            - symfony <unfixed> (embed)
286            - phpgroupware-felamimail <unfixed> (embed)
287            NOTE: phpgroupware-felamimail is only in etch
288            - egroupware <unfixed> (embed; bug #504283)
289    
290  gv:  htmlArea (not packaged in Debian)
291  evince (ps/ tree from gv 3.5.8)          - moodle <unfixed> (embed)
 evince-gtk (not packaged in Debian)  
292    
293  libXbae:  giflib:
294  libpawlib2-lesstif package (from Cernlib)          - wine <unfixed> (embed; bug #466181)
295    
296  libXaw:  bennu (not packaged in Debian)
297  libpawlib2-lesstif package (from Cernlib)          - moodle <unfixed> (embed)
298    
299  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  smarty:
300            - moodle 1.8.2-2 (embed; bug #471158)
301            - gallery2 2.2.5-2 (embed; bug #471160)
302            - mahara 0.9.2-2 (embed; bug #471201)
303            - gosa 2.4beta1-1 (embed; bug #471200)
304    
305  libgd2:  TinyMCE
306  graphviz (lib/gd seems to be 2.0.33)          - wordpress 2.5.1-3 (embed; bug #478257)
307            - moodle <unfixed> (embed; bug #507185)
308  rar:          - knowledgeroot <unfixed> (embed)
309  unrar-nonfree          - joomla <itp> (bug #326398)
310    
311  unrar-free: (maybe this code is derived from the original rar, too?)  scintilla
312  clamav (seems to be disabled in default config)          - scite <unfixed> (embed)
313            - qscintilla <unfixed> (embed)
314            - qscintilla2 <unfixed> (embed)
315            - geany <unfixed> (embed)
316    
317    libphp-adodb
318            - moodle <unfixed> (embed; bug #507185)
319            NOTE: also AdoDB-XML Schema
320            - gallery2 <unfixed> (embed)
321            - phppgadmin <unfixed> (embed)
322            - egroupware <unfixed> (embed)
323            - phpwiki <unfixed> (embed)
324            - ipplan <unfixed> (embed)
325            - typo3 <unfixed> (embed)
326            - cacti <unknown> (embed)
327            [sarge] - cacti <unfixed> (embed)
328            NOTE: dependency exists, but internal version is used
329            - gforge 4.7~rc2-6 (embed)
330            - mahara <unfixed> (embed)
331    
332    gzip
333            - linux-kernel <unfixed> (embed)
334            NOTE: lib/inflate.c
335            - klibc <unfixed> (embed)
336            NOTE: based on linux-kernel gzip code
337            - busybox <unfixed> (embed)
338    
339    neon
340            - cadaver <unfixed> (embed; bug #188381)
341            - gnome-vfs2 <unfixed> (embed; bug #395874)
342            - litmus <unfixed> (embed; #395875)
343            [sarge] - screem <unfixed> (embed)
344            - sitecopy <unfixed> (embed; bug #395876)
345            [etch] - tla <unfixed> (embed; bug #395877)
346            [sarge] - tla <unfixed> (embed; bug #395877)
347    
348    libmodplug
349            - gst-plugins-bad0.10 <unfixed> (embed)
350    
351    libvncserver
352            - vino <unfixed> (embed)
353    
354    putty
355            - filezilla <unfixed> (embed)
356    
357    tinyxml (not packaged in Debian)
358            - filezilla <unfixed>
359    
360    gv
361            - evince <unfixed> (embed)
362            NOTE: ps/ tree from gv 3.5.8
363            - evince-gtk <unfixed> (embed)
364            NOTE: not packaged in Debian
365    
366    libXbae
367            [etch] - libpawlib2-lesstif <unfixed> (embed)
368            NOTE: from Cernlib
369    
370    libXaw
371            [etch] - libpawlib2-lesstif
372            NOTE: from Cernlib
373            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
374    
375    libgd2
376            - graphviz <unfixed> (embed)
377            NOTE: lib/gd seems to be 2.0.33
378            - wml <unfixed> (embed)
379            NOTE: derived from gd 1.6.3
380    
381    rar
382            - unrar-nonfree <unfixed> (embed)
383    
384    unrar-free (maybe this code is derived from the original rar, too?)
385            - clamav <unfixed> (embed)
386            NOTE: seems to be disabled in default config
387    
388    mplayer (DirectMedia Object loader)
389            - xine-lib <unfixed> (embed)
390            NOTE: src/libw32dll/
391            - vlc <unfixed> (embed)
392            NOTE: modules/codec/dmo/
393            - mplayer 1.0~rc2-20 (embed)
394    
395    libwpd (WordPerfect converter)
396            - openoffice.org <unfixed> (embed)
397    
398    fsplib (http://sourceforge.net/projects/fsp/)
399            - gftp <unfixed> (embed)
400            NOTE: lib/fsplib version 0.3
401    
402    sprng
403            - tree-puzzle <unfixed> (embed)
404    
405    librpcsecgss
406            - krb5 <unfixed> (embed)
407    
408    jasper
409            - ghostscript <unfixed> (embed)
410            - gs-gpl <unfixed> (embed)
411    
412    libidn
413            - monotone <unfixed> (embed)
414    
415    liblua
416            - monotone <unfixed> (embed)
417    
418    libbotan
419            - montone <unfixed> (embed)
420    
421    NetXX
422            - monotone <unfixed> (embed)
423    
424    libgc
425            - mono <unfixed> (embed)
426    
427    lzma
428            - p7zip <unfixed> (embed)
429    
430    lzo
431            - grub2 <unfixed> (embed)
432    
433    yassl
434            - mysql-dfsg-5.0 <unfixed> (embed)
435    
436    pax code
437            - tar <unfixed> (embed)
438            - cpio <unfixed> (embed)
439    
440    t1lib
441            - tetex-bin 2.0.2-1 (embed)
442            - texlive-bin <unknown> (embed)
443    
444    guichan
445            - boswars <unfixed> (embed)
446            NOTE: maintainer notified us, working on it
447    
448    tolua
449            - boswars <unfixed> (embed)
450            NOTE: maintainer notified us, working on it
451    
452    asio-dev
453            - luxrender <unfixed> (embed)
454            NOTE: maintainer notified us, working on it
455            NOTE: may be merged with boost "soon"
456    
457  mplayer (DirectMedia Object loader):  xine-lib
458  xine-lib (src/libw32dll/)          - vlc <unfixed> (embed)
459  vlc (modules/codec/dmo/)          NOTE: only parts included in modules/access/rtsp
460    
461  libwpd (WordPerfect converter):  netpbm
462  openoffice.org          - tcl8.3 <unfixed> (embed)
463            - tcl8.4 <unfixed> (embed)
464            - tcl8.5 <unfixed> (embed)
465            NOTE: generic/tkImgGIF.c
466    
467    tk8.5
468            - tk8.0 <removed> (old-version)
469            - tk8.3 <unfixed> (old-version)
470            - tk8.4 <unfixed> (old-version)
471            - perl-tk <unfixable> (fork)
472    
473    samba
474            - mc <unfixed> (embed)
475            NOTE: maintainer is aware of this, currently searching a solution
476    
477    plib1.8.4c2
478            - boson <unfixed> (fork)
479            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
480    
481    fribidi
482            - quesoglc <unfixed> (embed)
483    
484    glew
485            - quesoglc <unfixed> (embed)
486    
487    minorGems
488            - transcend <unfixed> (embed)
489            - cultivation <unfixed> (embed)
490    
491  fsplib (http://sourceforge.net/projects/fsp/):  tar
492  gftp (lib/fsplib version 0.3)          - libarchive <unfixed> (embed)
493            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
494    
495  librpcsecgss:  cpio
496  krb5          - libarchive <unfixed> (embed)
497            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
498    
499  jasper:  webkit
500  ghostscript          - qt4-x11 <unfixed> (embed)
 gs-gpl  
501    
502  libidn:  ftgl
503  monotone          - blender 2.46+dfsg-1 (embed)
504    
505  liblua:  wv
506  monotone          - abiword <unfixed>
507    
508    qemu
509            - kvm <unfixed> (embed)
510            - xen-3 <unfixed> (embed)
511            - xen-unstable <unfixed> (embed)
512    
513    bochs
514            - kvm <unfixed> (embed; bug #489442)
515    
516    speex
517            - vorbis-tools <unfixed> (embed)
518            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
519            - gst-plugins-good0.10 <unfixed> (embed)
520            - xine-lib <unfixed> (embed)
521            - libfishsound <unfixed> (embed)
522            - libannodex <unfixed> (embed)
523            - vlc <unfixed> (embed)
524            - xmms-speex <unfixed> (embed)
525            - libsdl-sound1.2 <unfixed> (embed)
526            - sweep <unfixed> (embed)
527    
528    libreadline
529            - magic <unfixed> (old-version)
530            NOTE: magic is currently an RFS
531    
532    opcode
533            - ode <unfixed> (embed)
534            NOTE: opcode is not a package in debian, it is just embedded
535            NOTE: http://www.codercorner.com/Opcode.htm
536    
537    gimpact
538            - ode <unfixed> (embed)
539            NOTE: gimpact is not a package in debian, it is just embedded
540            NOTE: http://gimpact.sf.net
541    
542    mochikit
543            - mahara <unfixed> (embed)
544            NOTE: they require extra patches, still unmerged upstream
545            - ntop <unfixed> (embed)
546            - python-oherence <unfixed> (embed)
547            - python-paste <unfixed> (embed)
548            - python-turbogears <unfixed> (embed)
549            - zope-plone3 <unfixed> (embed)
550    
551    prototype
552            - netbeans-ide <unfixed> (embed)
553            - auth2db-frontend <unfixed> (embed)
554            - citadel-webcit <unfixed> (embed)
555            - asterisk <unfixed> (embed)
556            - doc-iana <unfixed> (embed)
557            - libaws-doc <unfixed> (embed)
558            - libgettext-ruby-data <unfixed> (embed)
559            - libjson-ruby-doc <unfixed> (embed)
560            - liblucene2-java-doc <unfixed> (embed)
561            - libopenid-ruby <unfixed> (embed)
562            - solr-common <unfixed> (embed)
563            - glpi <unfixed> (embed)
564            - hobbix <unfixed> (embed)
565            - mnemo2 <unfixed> (embed)
566            - nag2 <unfixed> (embed)
567            - knowledgeroot <unfixed> (embed)
568            - mediatomb-common <unfixed> (embed)
569            - mt-daapd <unfixed> (embed)
570            - op-panel <unfixed> (embed)
571            - ebug-http <unfixed> (embed)
572            - phpgedview <removed> (embed)
573            - poker-web <unfixed> (embed)
574            - python-webhelpers <unfixed> (embed)
575            - qwik <unfixed> (embed)
576            - rails <unfixed> (embed)
577            - typo3-src-4.1 <unfixed> (embed)
578            - wordpress <unfixed> (embed)
579            - zope-plone3 <unfixed> (embed)
580            - smokeping <unfixed> (embed)
581            - ampache 3.4.1-2 (embed)
582            - exaile <unfixed> (embed)
583            - hobix <unfixed> (embed)
584            - pixelpost <unfixed> (embed)
585            - symfony <unfixed> (embed)
586            NOTE: it's been said that there are custom changes
587            - zabbix-frontend-php <unfixed> (embed)
588            - turba2 <unfixed> (embed)
589    
590    gdb
591            - insight <unfixed> (embed)
592    
593    e2fsprogs
594            - ldiskfsprogs <unfixable> (fork)
595    
596    quazip (not packaged in Debian)
597            - qcake <unfixed> (embed)
598            NOTE: starting with upstream version 0.6.4
599    
600    exo
601            - pcmanfm <unfixed> (embed; bug #499677)
602            NOTE: slightly modified source code
603    
604    java
605            - openjdk-6 <unfixed>
606            - sun-java5 <unfixed>
607            - sun-java6 <unfixed>
608    
609    libphp-snoopy
610            - ampache 3.4.1-2 (embed; bug #504169)
611            - mahara 1.0.5-2 (embed; bug #504170)
612            - pixelpost <unfixed> (embed; bug #504171)
613            - mediamate 0.9.3.6-5 (embed; bug #504172)
614            - opendb <unfixed> (embed; bug #504173)
615            - wordpress 2.5.1-9 (embed; bug #443948)
616            - moodle <unfixed> (embed; bug #507185)
617            - phpgroupware-felamimail <unfixed> (embed)
618            NOTE: phpgroupware-felamimail is only in etch
619            - magpierss 0.72-3 (embed; bug #431089)
620    
621    jquery
622            - zekr <unfixed> (embed)
623            - wordpress <unfixed> (embed)
624            - yocto-reader <unfixed> (embed)
625            - textpattern <unfixed> (embed)
626            - genshi 0.5.1-1 (embed)
627            NOTE: compressed file under examples/ dir
628            - prewikka <unfixed> (embed)
629            - libramaze-ruby <unfixed> (embed)
630            - drupal5 <unfixed> (embed)
631            - b2evolution <unfixed> (embed)
632    
633    kses
634            - wordpress <unfixed> (embed; bug #504242)
635            NOTE: their copy has all methods renamed to wp_<foo>
636            - moodle <unfixed> (embed; bug #507185)
637            - egroupware <unfixed> (embed)
638    
639    magpierss
640            - wordpress <unfixed> (embed; bug #504242)
641    
642    php-gettext
643            - wordpress <unfixed> (embed; bug #504242)
644    
645    libphp-ixr (name may change, it is the Incutio XML-RPC)
646            - wordpress <unfixed> (embed; bug #504242)
647            - dokuwiki <unfixed> (embed)
648            - textpattern <unfixed> (embed)
649    
650    libphp-cas
651            - glpi <unfixed> (embed)
652            - moodle <unfixed> (embed; bug #496069)
653    
654    scriptaculous
655            - glpi <unfixed> (embed)
656            - libaws-doc <unfixed> (embed)
657            - op-panel <unfixed> (embed)
658            - symfony <unfixed> (embed)
659            NOTE: maintainer says there are extra incompatible changes required
660            - pixelpost <unfixed> (embed)
661            - python-webhelpers <unfixed> (embed)
662            - qwik <unfixed> (embed)
663            - smokeping <unfixed> (embed)
664            - turba2 <unfixed> (embed)
665            - typo3-src 4.2.3-1 (embed)
666    
667    libmarkdown-php
668            - moodle <unfixed> (embed; bug #507185)
669            - pixelpost <unfixed> (embed)
670    
671    php-openid
672            - wordpress-openid <itp> (embed)
673    
674    geshi
675            - dokuwiki 0.0.20080505-3.1 (embed)
676            - pgfouine 1.0-1.1 (embed)
677    
678    webcalendar
679            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
680    
681    libical
682            - kdepim <unfixed> (fork)
683            - kdepimlibs <unfixed> (fork)
684            NOTE: fixed in KDE4 post 4.1.x series
685    
686    libltdl3
687            - kdelibs <unfixed> (embed)
688            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
689    
690    harfbuzz
691            - qt4-x11 <unfixed> (embed)
692    
693    libzip
694            - php5 <unfixed> (fork)
695    
696    json.php (not packaged; should be replaced with php's built-in functions)
697            - moodle <unfixed>
698            - yui <unfixed>
699            - gallery2 <unfixed>
700            - dokuwiki <unfixed>
701            - typo3-src-4.2 <unfixed>
702    
703    php-fpdf
704            - tcpdf <itp> (fork)
705            - moodle <unfixed>
706            - phpwiki <unfixed>
707            - egroupware <unfixed>
708            - ldap-account-manager <unfixed> (fork)
709    
710    tcpdf (itp: #495985)
711            - moodle <unfixed>
712            - phpmyadmin <unfixed>
713    
714  libbotan:  typo3
715  montone          - moodle <unfixed>
716    
717  NetXX:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
718  monotone          - moodle <unfixed>
719            - gosa <unfixed>
720    
721  libgc:  php-ole (itp: #487558)
722  mono          - moodle <unfixed>
723    
724  lzma:  bennu (http://bennu.sourceforge.net)
725  p7zip          - moodle <unfixed>
726    
727  lzo:  pieforms (http://www.catalyst.net.nz)
728  grub2          - mahara <unfixed>
729    
730  pax code:  savant2 (http://phpsavant.com)
731  tar          - egroupware <unfixed>
 cpio  
732    
733  t1lib:  rssparser (http://nwow.org)
734  tetex-bin (links to system t1lib since 2.0.2)          - egroupware <unfixed>
735  texlive-bin (links to system t1lib)          - phpgroupware <unfixed>
736    
737    lcms
738            - openjdk-6 <unfixed> (fork)

Legend:
Removed from v.7616  
changed lines
  Added in v.10771

  ViewVC Help
Powered by ViewVC 1.1.5