/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7740 by nion, Fri Dec 28 14:34:51 2007 UTC revision 11600 by kees, Thu Apr 9 17:58:52 2009 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  sort: static (linking statically against a lib), embed (embedding a copy of the library into another source package)          <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16    sort: static (linking statically against a lib)
17          embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19                thus might share parts of the source code)
20          old-version (the package is an older version of essentially
21                       the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30          - gpdf <removed>          - gpdf <removed>
31          [sarge] - gpdf <unfixed>          [sarge] - gpdf <unfixed>
32          NOTE: has been replaced by evince in etch          NOTE: has been replaced by evince in etch
# Line 21  xpdf (some srcpkgs use xpdf2 code, some Line 34  xpdf (some srcpkgs use xpdf2 code, some
34          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
35          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
36          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
37          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
39          - tetex-bin 3.0-12 (embed)          - texlive-bin 2007-1 (embed)
         NOTE: links to poppler  
         - texlive-bin <unknown> (embed)  
40          NOTE: links to poppler          NOTE: links to poppler
41          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
42          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
43          NOTE: libextractor is using its own pdf decoder          NOTE: libextractor is using its own pdf decoder now
44          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
         NOTE: links to poppler  
45          - pdfkit.framework 0.8-4 (embed)          - pdfkit.framework 0.8-4 (embed)
         NOTE: links to poppler  
46          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
47          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
48          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
49          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
50            - pdfedit <unfixed> (embed; bug #510794)
51    
52  silc-toolkit:  ppmd
53            - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54    
55    peercast
56            - gnome-peercast <unfixed> (embed)
57            NOTE: gnome-peercast may better be removed, see #466539
58    
59    silc-toolkit
60          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
61    
62  dietlibc:  icclib
63            - ghostscript (embed)
64            - argyll (embed)
65    
66    dietlibc
67          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
68    
69  libiax:  libmikmod
70          - iaxmodem <unfixed> (embed)          - sdl-mixer1.2 <unfixed> (embed)
71            TODO: report bug
72    
73  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  libiax
74  dpkg          - iaxmodem <unfixed> (embed)
 rsync (somehow derived code base)  
 mono  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
 rpm  
   
 libbz2:  
 dpkg (statically linked)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 pigdin (links dynamically against libgadu)  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 firefox (to be removed)  
 thunderbird (to be removed)  
 iceweasel  
 iceape  
 icedove  
 xulrunner  
 nvu (no longer in Debian)  
   
 xli:  
 xloadimage  
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum (removed from egroupware after sarge)  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 vfu (removed linking against embedded copy in 4.06-4.1; #450754)  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
 monotone (including this starting from 0.37)  
 glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)  
 apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)  
 exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)  
 yacas (<= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway)  
 gtamsanalyzer.app (links dynamically since 0.42-5)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
 monotone  
 iceweasel  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin (only in sarge)  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware (removed from egroupware after sarge)  
   
 chmlib:  
 kchmviewer (ships the code but links dynamically)  
   
 libavcodec/libavformat (source: ffmpeg):  
 mplayer (#395252)  
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
75    
76  mad MPEG decoding lib:  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
77  mad          - dpkg <unfixed> (embed)
78  xine-lib          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
79            - rsync <unfixed> (embed)
80            NOTE: somehow derived code base
81            - mono <unfixed> (embed)
82            TODO: check mozilla
83            - Linux kernels <unfixed> (embed)
84            - pvpgn 1.7.8-2 (embed)
85            - mrtg 2.12.2-1 (embed)
86            - rpm <unknown> (embed)
87            NOTE: pinged anibal since when rpm was fixed
88            - tuxcmd-modules <itp> (embed; bug #508082)
89    
90    libbz2
91            - dpkg <unfixed> (static)
92    
93    libgadu:
94            - centericq <unfixed> (embed)
95            - gaim <unfixed> (embed)
96            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
97            - kopete 4:3.3.2-5 (embed)
98            - kadu 0.6.0.2-3 (embed)
99            - gadu <unfixed> (embed)
100            - ekg 1:1.8~rc0-1 (embed)
101            - kadu 0.6.0.2-3 (embed; bug #504430)
102            NOTE: gadu not packaged in Debian yet
103    
104    xmlrpc (which package is the "origin" of this code?)
105            - drupal <unfixed> (embed)
106            - phpgroupware <unfixed> (embed)
107            - egroupware <unfixed> (embed)
108            - phpwiki (embed)
109            - php4 <unfixed> (embed)
110            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
111    
112    shtool (affects build-time only)
113            - mysql-ocaml <unfixed> (embed)
114            - php4 <unfixed> (embed)
115    
116    mozilla source code
117            - mozilla-firefox <unfixed> (embed)
118            - mozilla-thunderbird
119            - firefox <removed>
120            [etch] - firefox <unfixed> (embed)
121            - thunderbird <removed>
122            [etch] - thunderbird <unfixed> (embed)
123            - iceweasel <unfixed> (embed)
124            - iceape <unfixed> (embed)
125            - icedove <unfixed> (embed)
126            - xulrunner <unfixed> (embed)
127            - nvu <removed> (embed)
128    
129    xli
130            - xloadimage <unfixed> (embed)
131    
132    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
133            - openmotif <unfixed> (embed)
134            - xfree86/xorg <unfixed> (embed)
135            NOTE: in libxpm
136    
137    kerberized apps with BSD origin
138            - krb4 <unfixed> (embed)
139            - krb5 <unfixed> (embed)
140            - heimdal <unfixed> (embed)
141    
142    grip (which pkg is the origin?)
143            - libcdaudio
144            - grip
145            - gnome-vfs
146            TODO: check vfs2 as well
147    
148    fudforum
149            - phpgroupware-fudforum <unfixed> (embed)
150            - egroupware-fudforum <removed>
151            [sarge] - egroupware-fudforum <unfixed> (embed)
152    
153    cvs
154            - gcvs <unfixed> (embed)
155            NOTE: see cvsunix/src in tarball
156    
157    pcre
158            - python* <unfixed> (embed)
159            - php4 <unknown> (embed)
160            - analog 2:5.23-0woody1 (embed)
161            - libgoffice-1 <unfixed> (embed)
162            - vfu 4.06-4.1 (embed; bug #450754)
163            - tf5 5.0beta7-1 (embed)
164            - monotone 0.43-1 (embed)
165            NOTE: this only affects versions >= 0.37
166            - glib2.0 2.15.2-1 (embed)
167            - apache2 2.0.53-4 (embed)
168            - exim4 4.10-0.srh20.12 (embed)
169            - yacas <unfixed> (embed)
170            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
171            - gtamsanalyzer.app 0.42-5 (embed)
172            - tin <unknown> (embed)
173            - kazehakase 0.5.2-1
174            - webkit <unfixed> (embed)
175            - qt4-x11 <unfixed> (embed)
176            NOTE: embedded via webkit copy
177    
178    tiff
179            - wxwindows2.4 2.2.1 (embed)
180    
181    uudeview
182            - libconvert-uulib-perl <unfixed> (embed)
183            - pan <unfixed> (embed)
184    
185    sqlite (not affected by security vulnerabilities so far)
186            - amarok <unfixed> (embed)
187            - monotone 0.43-1 (embed)
188            - iceweasel <unfixed> (embed)
189    
190    util-linux/mount
191            - loop-aes-utils <unfixed> (embed)
192            NOTE: contains code from util-linux' mount in the mount-aes-udeb
193    
194    webmin
195            - usermin <unknown> (embed)
196            [sarge] - usermin <unfixed> (embed)
197    
198    sylpheed
199            - sylpheed-claws <unfixed> (fork)
200    
201    phpsysinfo
202            - egroupware <unfixed> (embed)
203            - phpgroupware <unfixed> (embed)
204    
205    phpldapadmin
206            [sarge] - egroupware <unfixed> (embed)
207            NOTE: removed from egroupware after sarge
208    
209    chmlib
210            - kchmviewer <unknown> (embed)
211    
212    libavcodec/libavformat (source: ffmpeg)
213            - mplayer 1.0~rc2-14 (embed; bug #395252)
214            - kino 1.0.0-1
215            - vlc <not-affected> (Links dynamically since initial release)
216            - smilutils 0.3.0-10
217            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
218            - motion 3.1.19-1
219            - gstreamer0.10-ffmpeg 0.10.3-2
220            - xmovie <unfixed>
221            TODO: gimp-gap (potentially using ffmpeg code as well)
222    
223    faad2
224            - mplayer 1.0~rc2-20 (embed)
225    
226    mad MPEG decoding lib
227            - mad <unfixed> (embed)
228            - xine-lib <unfixed> (embed)
229    
 libdts:  
230  libdts  libdts
231  xine-lib          - xine-lib <unfixed> (embed)
232    
 flac:  
233  flac  flac
234  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
235    
236  imagemagick:  liba52
237  graphicsmagick          - a52dec <unfixed> (embed)
238            - xine-lib <unfixed> (embed)
239    
240  halibut:  libmpeg2
241  nsis          - mpeg2dec <unfixed> (embed)
242            - xine-lib <unfixed> (embed)
243    
244  libghttp:  curl
245  hotway          - wget <unfixed> (embed)
246            NOTE: code for NTLM authentication
247    
248  libsndfile:  uw-imap
249  ardour          - pine <unfixed> (embed)
250            - alpine <unfixed> (embed)
251    
252  glibmm2.4:  imagemagick
253  ardour          - graphicsmagick <unfixed> (fork)
254    
255  libgnomecanvasmm2.6:  halibut
256  ardour          - nsis <unfixed> (fork)
257    
258  libsigc++-2.0:  libghttp
259  ardour          - hotway <unfixed> (embed)
260    
261  soundtouch:  libsndfile
262  ardour          - ardour 1:2.7.1-1 (embed)
263    
264  libmms:  glibmm2.4
265  xine-lib          - ardour 1:2.7.1-1 (embed)
 mimms  
   
 FCKeditor: (packaged as fckeditor)  
 knowledgeroot  
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
   
   
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
 busybox  
   
 neon:  
 cadaver (all, but being worked on: #188381)  
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
266    
267  libmodplug:  libgnomecanvasmm2.6
268  gst-plugins-bad0.10          - ardour 1:2.7.1-1 (embed)
269    
270  libvncserver:  libsigc++-2.0
271  vino          - ardour 1:2.7.1-1 (embed)
272    
273  putty:  soundtouch
274  filezilla          - ardour 1:2.7.1-1 (embed)
275    
276  tinyxml (not packaged in Debian):  libmms
277  filezilla          - xine-lib <unfixed> (embed)
278            - mimms <unfixed> (embed)
279    
280  gv:  fckeditor
281  evince (ps/ tree from gv 3.5.8)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
282  evince-gtk (not packaged in Debian)          - moin 1.8.2-2 (embed; bug #452599)
283            - karrigell <removed> (embed; bug #452598)
284            - gforge 4.6.99+svn6225-1 (embed)
285    
286  libXbae:  ipatlas (not packaged in Debian)
287  libpawlib2-lesstif package (from Cernlib)          - moodle <unfixed> (embed; bug #507185)
288    
289  libXaw:  libphp-phpmailer
290  libpawlib2-lesstif package (from Cernlib)          - moodle <unfixed> (embed; bug #507185)
291            - mahara <unfixed> (embed)
292            - symfony <unfixed> (embed)
293            - phpgroupware-felamimail <unfixed> (embed)
294            NOTE: phpgroupware-felamimail is only in etch
295            - egroupware <unfixed> (embed; bug #504283)
296            - glpi <unfixed>
297    
298  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  htmlArea (not packaged in Debian)
299            - moodle <unfixed> (embed)
300    
301  libgd2:  giflib:
302  graphviz (lib/gd seems to be 2.0.33)          - wine <unfixed> (embed; bug #466181)
303    
304  rar:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
305  unrar-nonfree          - moodle <unfixed> (embed)
306    
307  unrar-free: (maybe this code is derived from the original rar, too?)  smarty:
308  clamav (seems to be disabled in default config)          - moodle 1.8.2-2 (embed; bug #471158)
309            - gallery2 2.2.5-2 (embed; bug #471160)
310            - mahara 0.9.2-2 (embed; bug #471201)
311            - gosa 2.4beta1-1 (embed; bug #471200)
312    
313  mplayer (DirectMedia Object loader):  TinyMCE
314  xine-lib (src/libw32dll/)          - wordpress 2.5.1-3 (embed; bug #478257)
315  vlc (modules/codec/dmo/)          - moodle <unfixed> (embed; bug #507185)
316            - knowledgeroot <unfixed> (embed)
317  libwpd (WordPerfect converter):          - joomla <itp> (bug #326398)
318  openoffice.org  
319    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
320  fsplib (http://sourceforge.net/projects/fsp/):          - scite <unfixed> (embed)
321  gftp (lib/fsplib version 0.3)          - qscintilla <unfixed> (embed)
322            - qscintilla2 <unfixed> (embed)
323            - geany <unfixed> (fork)
324            - anjuta <unfixed> (embed)
325    
326    libphp-adodb
327            - moodle <unfixed> (embed; bug #507185)
328            NOTE: also AdoDB-XML Schema
329            - gallery2 <unfixed> (embed)
330            - phppgadmin <unfixed> (embed)
331            - egroupware <unfixed> (embed)
332            - phpwiki <unfixed> (embed)
333            - ipplan <unfixed> (embed)
334            - typo3 <unfixed> (embed)
335            - cacti <unknown> (embed)
336            [sarge] - cacti <unfixed> (embed)
337            NOTE: dependency exists, but internal version is used
338            - gforge 4.7~rc2-6 (embed)
339            - mahara <unfixed> (embed)
340    
341    gzip
342            - linux-kernel <unfixed> (embed)
343            NOTE: lib/inflate.c
344            - klibc <unfixed> (embed)
345            NOTE: based on linux-kernel gzip code
346            - busybox <unfixed> (embed)
347    
348    neon
349            - cadaver <unfixed> (embed; bug #188381)
350            - gnome-vfs2 <unfixed> (embed; bug #395874)
351            - litmus <unfixed> (embed; #395875)
352            [sarge] - screem <unfixed> (embed)
353            - sitecopy <unfixed> (embed; bug #395876)
354            [etch] - tla <unfixed> (embed; bug #395877)
355            [sarge] - tla <unfixed> (embed; bug #395877)
356    
357    libmodplug
358            - gst-plugins-bad0.10 <unfixed> (embed)
359    
360    libvncserver
361            - vino <unfixed> (embed)
362    
363    putty
364            - filezilla <unfixed> (embed)
365    
366    tinyxml (not packaged in Debian)
367            - filezilla <unfixed>
368    
369    gv
370            - evince <unfixed> (embed)
371            NOTE: ps/ tree from gv 3.5.8
372            - evince-gtk <unfixed> (embed)
373            NOTE: not packaged in Debian
374    
375    libXbae
376            [etch] - libpawlib2-lesstif <unfixed> (embed)
377            NOTE: from Cernlib
378    
379    libXaw
380            [etch] - libpawlib2-lesstif
381            NOTE: from Cernlib
382            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
383    
384    libgd2
385            - graphviz <unfixed> (embed)
386            NOTE: lib/gd seems to be 2.0.33
387            - wml <unfixed> (embed)
388            NOTE: derived from gd 1.6.3
389    
390    rar
391            - unrar-nonfree <unfixed> (embed)
392    
393    unrar-free (maybe this code is derived from the original rar, too?)
394            - clamav <unfixed> (embed)
395            NOTE: seems to be disabled in default config
396    
397    mplayer (DirectMedia Object loader)
398            - xine-lib <unfixed> (embed)
399            NOTE: src/libw32dll/
400            - vlc <unfixed> (embed)
401            NOTE: modules/codec/dmo/
402            - mplayer 1.0~rc2-20 (embed)
403    
404    libwpd (WordPerfect converter)
405            - openoffice.org <unfixed> (embed)
406    
407    fsplib (http://sourceforge.net/projects/fsp/)
408            - gftp <unfixed> (embed)
409            NOTE: lib/fsplib version 0.3
410    
411    sprng
412            - tree-puzzle <unfixed> (embed)
413    
414    librpcsecgss
415            - krb5 <unfixed> (embed)
416    
417    jasper
418            - ghostscript <unfixed> (embed)
419            - gs-gpl <unfixed> (embed)
420    
421    libiris
422            - psi <unfixed> (embed)
423            - kdenetwork <unfixed> (embed)
424            NOTE: kopete embeds libiris but links dynamically to libidn
425            - kdegames <unfixed> (embed)
426            NOTE: ksirk/kde4
427    
428    libidn
429            - monotone 0.43-1 (embed)
430            - psi <unfixed> (embed)
431            NOTE: psi embeds libiris which embeds libidn
432            - kdegames <unfixed> (embed)
433            NOTE: kdegames/kde4 embeds libiris which embeds libidn
434    
435    liblua
436            - monotone 0.43-1 (embed)
437    
438    libbotan
439            - montone 0.43-1 (embed)
440    
441    NetXX
442            - monotone 0.43-1 (embed)
443    
444    libgc
445            - mono <unfixed> (embed)
446    
447    lzma
448            - p7zip <unfixed> (embed)
449    
450    lzo
451            - grub2 <unfixed> (embed)
452    
453    yassl
454            - mysql-dfsg-5.0 <unfixed> (embed)
455    
456    pax code
457            - tar <unfixed> (embed)
458            - cpio <unfixed> (embed)
459    
460  librpcsecgss:  t1lib
461  krb5          - tetex-bin 2.0.2-1 (embed)
462            - texlive-bin <unknown> (embed)
463    
464  jasper:  guichan
465  ghostscript          - boswars <unfixed> (embed)
466  gs-gpl          NOTE: maintainer notified us, working on it
467    
468    tolua
469            - boswars <unfixed> (embed)
470            NOTE: maintainer notified us, working on it
471    
472    asio-dev
473            - luxrender <unfixed> (embed)
474            NOTE: maintainer notified us, working on it
475            NOTE: may be merged with boost "soon"
476    
477  libidn:  xine-lib
478  monotone          - vlc <unfixed> (embed)
479            NOTE: only parts included in modules/access/rtsp
480    
481  liblua:  netpbm
482  monotone          - tcl8.3 <unfixed> (embed)
483            - tcl8.4 <unfixed> (embed)
484            - tcl8.5 <unfixed> (embed)
485            NOTE: generic/tkImgGIF.c
486    
487    tk8.5
488            - tk8.0 <removed> (old-version)
489            - tk8.3 <unfixed> (old-version)
490            - tk8.4 <unfixed> (old-version)
491            - perl-tk <unfixable> (fork)
492    
493    samba
494            - mc 2:4.6.2~git20080311-1 (embed)
495            NOTE: maintainer is aware of this, currently searching a solution
496    
497    plib1.8.4c2
498            - boson <unfixed> (fork)
499            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
500    
501    fribidi
502            - quesoglc <unfixed> (embed)
503            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
504    
505    glew
506            - quesoglc <unfixed> (embed; bug #489341)
507            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
508    
509    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
510            - transcend <unfixed> (embed)
511            - cultivation <unfixed> (embed)
512            - passage <unfixed> (embed)
513            - gravitation <unfixed> (embed)
514    
515  libbotan:  tar
516  montone          - libarchive <unfixed> (embed)
517            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
518    
519  NetXX:  cpio
520  monotone          - libarchive <unfixed> (embed)
521            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
522    
523  libgc:  webkit
524  mono          - qt4-x11 <unfixed> (embed)
525    
526  lzma:  ftgl
527  p7zip          - blender 2.46+dfsg-1 (embed)
528    
529  lzo:  wv
530  grub2          - abiword <unfixed>
531    
532    qemu
533            - kvm <unfixed> (embed)
534            - xen-3 <unfixed> (embed)
535            - xen-unstable <unfixed> (embed)
536    
537    bochs
538            - kvm <unfixed> (embed; bug #489442)
539    
540    speex
541            - vorbis-tools <unfixed> (embed)
542            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
543            - gst-plugins-good0.10 <unfixed> (embed)
544            - xine-lib <unfixed> (embed)
545            - libfishsound <unfixed> (embed)
546            - libannodex <unfixed> (embed)
547            - vlc <unfixed> (embed)
548            - xmms-speex <unfixed> (embed)
549            - libsdl-sound1.2 <unfixed> (embed)
550            - sweep <unfixed> (embed)
551    
552    libreadline
553            - magic <unfixed> (old-version)
554            NOTE: magic is currently an RFS
555    
556    opcode
557            - ode <unfixed> (embed)
558            NOTE: opcode is not a package in debian, it is just embedded
559            NOTE: http://www.codercorner.com/Opcode.htm
560    
561    gimpact
562            - ode <unfixed> (embed)
563            NOTE: gimpact is not a package in debian, it is just embedded
564            NOTE: http://gimpact.sf.net
565    
566    mochikit
567            - mahara <unfixed> (embed)
568            NOTE: they require extra patches, still unmerged upstream
569            - ntop <unfixed> (embed)
570            - python-oherence <unfixed> (embed)
571            - python-paste <unfixed> (embed)
572            - python-turbogears <unfixed> (embed)
573            - zope-plone3 <unfixed> (embed)
574    
575    prototype
576            - netbeans-ide <unfixed> (embed)
577            - auth2db-frontend <unfixed> (embed)
578            - citadel-webcit <unfixed> (embed)
579            - asterisk <unfixed> (embed)
580            - doc-iana <unfixed> (embed)
581            - libaws-doc <unfixed> (embed)
582            - libgettext-ruby-data <unfixed> (embed)
583            - libjson-ruby-doc <unfixed> (embed)
584            - liblucene2-java-doc <unfixed> (embed)
585            - libopenid-ruby <unfixed> (embed)
586            - solr-common <unfixed> (embed)
587            - glpi <unfixed> (embed)
588            - hobbix <unfixed> (embed)
589            - mnemo2 <unfixed> (embed)
590            - nag2 <unfixed> (embed)
591            - knowledgeroot <unfixed> (embed)
592            - mediatomb-common <unfixed> (embed)
593            - mt-daapd <unfixed> (embed)
594            - op-panel <unfixed> (embed)
595            - ebug-http <unfixed> (embed)
596            - phpgedview <removed> (embed)
597            - poker-web <unfixed> (embed)
598            - python-webhelpers <unfixed> (embed)
599            - qwik <unfixed> (embed)
600            - rails <unfixed> (embed)
601            - typo3-src-4.1 <unfixed> (embed)
602            - wordpress <unfixed> (embed)
603            - zope-plone3 <unfixed> (embed)
604            - smokeping <unfixed> (embed)
605            - ampache 3.4.1-2 (embed)
606            - exaile <unfixed> (embed)
607            - hobix <unfixed> (embed)
608            - pixelpost <unfixed> (embed)
609            - symfony <unfixed> (embed)
610            NOTE: it's been said that there are custom changes
611            - zabbix-frontend-php <unfixed> (embed)
612            - turba2 <unfixed> (embed)
613    
614    gdb
615            - insight <unfixed> (embed)
616    
617    e2fsprogs
618            - ldiskfsprogs <unfixable> (fork)
619    
620    quazip (not packaged in Debian)
621            - qcake <unfixed> (embed)
622            NOTE: starting with upstream version 0.6.4
623    
624    exo
625            - pcmanfm <unfixed> (embed; bug #499677)
626            NOTE: slightly modified source code
627    
628    java
629            - openjdk-6 <unfixed>
630            - sun-java5 <unfixed>
631            - sun-java6 <unfixed>
632    
633    libphp-snoopy
634            - ampache 3.4.1-2 (embed; bug #504169)
635            - mahara 1.0.5-2 (embed; bug #504170)
636            - pixelpost <unfixed> (embed; bug #504171)
637            - mediamate 0.9.3.6-5 (embed; bug #504172)
638            - opendb <unfixed> (embed; bug #504173)
639            - wordpress 2.5.1-9 (embed; bug #443948)
640            - moodle <unfixed> (embed; bug #507185)
641            - phpgroupware-felamimail <unfixed> (embed)
642            NOTE: phpgroupware-felamimail is only in etch
643            - magpierss 0.72-3 (embed; bug #431089)
644    
645    jquery
646            - zekr <unfixed> (embed)
647            - wordpress <unfixed> (embed)
648            - yocto-reader <unfixed> (embed)
649            - textpattern <unfixed> (embed)
650            - genshi 0.5.1-1 (embed)
651            NOTE: compressed file under examples/ dir
652            - prewikka <unfixed> (embed)
653            - libramaze-ruby <unfixed> (embed)
654            - drupal5 <unfixed> (embed)
655            - b2evolution <unfixed> (embed)
656            - wesnoth <unfixed> (embed)
657    
658    tablesorter (jquery plugin, not packaged yet)
659            - wesnoth <unfixed> (embed)
660    
661    kses
662            - wordpress <unfixed> (embed; bug #504242)
663            NOTE: their copy has all methods renamed to wp_<foo>
664            - moodle <unfixed> (embed; bug #507185)
665            - egroupware <unfixed> (embed)
666    
667    magpierss
668            - wordpress <unfixed> (embed; bug #504242)
669            - moodle <unfixed>
670    
671    php-gettext
672            - wordpress <unfixed> (embed; bug #504242)
673    
674    libphp-ixr (name may change, it is the Incutio XML-RPC)
675            - wordpress <unfixed> (embed; bug #504242)
676            - dokuwiki <unfixed> (embed)
677            - textpattern <unfixed> (embed)
678    
679    libphp-cas
680            - glpi <unfixed> (embed)
681            - moodle <unfixed> (embed; bug #496069)
682    
683    scriptaculous
684            - glpi <unfixed> (embed)
685            - libaws-doc <unfixed> (embed)
686            - op-panel <unfixed> (embed)
687            - symfony <unfixed> (embed)
688            NOTE: maintainer says there are extra incompatible changes required
689            - pixelpost <unfixed> (embed)
690            - python-webhelpers <unfixed> (embed)
691            - qwik <unfixed> (embed)
692            - smokeping <unfixed> (embed)
693            - turba2 <unfixed> (embed)
694            - typo3-src 4.2.3-1 (embed)
695    
696    libmarkdown-php
697            - moodle <unfixed> (embed; bug #507185)
698            - pixelpost <unfixed> (embed)
699    
700    php-openid
701            - wordpress-openid <itp> (embed)
702    
703    geshi
704            - dokuwiki 0.0.20080505-3.1 (embed)
705            - pgfouine 1.0-1.1 (embed)
706            - websvn 2.1.0-1 (embed)
707    
708    webcalendar
709            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
710    
711    libical
712            - kdepim <unfixed> (fork)
713            - kdepimlibs <unfixed> (fork)
714            NOTE: fixed in KDE4 post 4.1.x series
715    
716    libltdl3
717            - kdelibs <unfixed> (embed)
718            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
719            - synfig <unfixed> (embed)
720    
721    harfbuzz
722            - qt4-x11 <unfixed> (embed)
723    
724    libzip
725            - php5 <unfixed> (fork)
726    
727    json.php (not packaged; should be replaced with php's built-in functions)
728            - moodle <unfixed>
729            - yui <unfixed>
730            - gallery2 <unfixed>
731            - dokuwiki <unfixed>
732            - typo3-src-4.2 <unfixed>
733    
734    php-fpdf
735            - tcpdf <itp> (fork)
736            - moodle <unfixed>
737            - phpwiki <unfixed>
738            - egroupware <unfixed>
739            - ldap-account-manager <unfixed> (fork)
740    
741    tcpdf (itp: #495985)
742            - moodle <unfixed>
743            - phpmyadmin <unfixed>
744    
745  pax code:  typo3
746  tar          - moodle <unfixed>
 cpio  
747    
748  t1lib:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
749  tetex-bin (links to system t1lib since 2.0.2)          - moodle <unfixed>
750  texlive-bin (links to system t1lib)          - gosa <unfixed>
751    
752    php-ole (itp: #487558)
753            - moodle <unfixed>
754    
755    pieforms (http://www.catalyst.net.nz)
756            - mahara <unfixed>
757    
758    savant2 (http://phpsavant.com)
759            - egroupware <unfixed>
760    
761    rssparser (http://nwow.org)
762            - egroupware <unfixed>
763            - phpgroupware <unfixed>
764    
765    lcms
766            - openjdk-6 <unfixed> (fork)
767    
768    libphp-phplayersmenu
769            - diogenes <unfixed>
770            - phpldapadmin <unfixed>
771    
772    libphp-pclzip
773            - docvert <unfixed>
774            - moodle <unfixed>
775            - egroupware <unfixed>
776    
777    libphp-simplepie
778            - dokuwiki <unfixed>
779    
780    libphp-jpgraph
781            - egroupware <unfixed>
782    
783    php-simpletest
784            - moodle <unfixed>
785    
786    libpng
787            - iceweasel <unfixed> (embed)
788            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
789            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
790            - iceape 1.0.13~pre080614i-0etch1 (embed)
791            - xulrunner <unfixed> (embed)
792            NOTE: Debian 1.9.0.6 uses embedded copy
793            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
794            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
795            NOTE: Ubuntu only
796            - firefox-3.0 <unfixed> (embed)
797            NOTE: Ubuntu only
798            - firefox-3.1 <unfixed> (embed)
799            NOTE: Ubuntu only
800            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
801            NOTE: Ubuntu only
802            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
803            NOTE: Ubuntu only
804            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
805            NOTE: Ubuntu only
806    
807    irssi
808            - irssi-plugin-silc <unfixed> (embed)
809            NOTE: Seems to be a pre-0.8.12 version that is used
810    
811    extc
812            - mtasc <unfixed> (embed)
813            - haxe <unfixed> (embed)
814    
815    swflib
816            - mtasc <unfixed> (embed)
817            - haxe <unfixed> (embed)
818    
819    libitext-java
820            - bouncycastle 2.1.4-1 (embed)

Legend:
Removed from v.7740  
changed lines
  Added in v.11600

  ViewVC Help
Powered by ViewVC 1.1.5