/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7840 by nion, Sun Jan 6 00:17:39 2008 UTC revision 12816 by gilbert-guest, Tue Sep 15 03:22:50 2009 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>, <itp> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embedding a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and thus might share parts of the source code)        fork (the package is not just embedding code but it is a fork and
20                thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24  The srcpkg might be some string to identify the code if there is no specific source package.  The srcpkg might be some string to identify the code if there is no
25    specific source package.
26    
27    Everything up to the next line is ignored.
28    ---BEGIN
29  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
31          NOTE: has been replaced by evince in etch          NOTE: has been replaced by evince in etch
32          - pdftohtml <unknown>          - pdftohtml <unknown>
33          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
34          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
35          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
36          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
38          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
39          NOTE: links to poppler          NOTE: links to poppler
40          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
41          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
42          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
43          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
44          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
46          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
47            - pdfedit <unfixed> (embed; bug #510794)
48            - swftools <unfixed> (embed)
49    
50  ppmd  ppmd
51          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59    
60    peercast
61            - gnome-peercast <unfixed> (embed)
62            NOTE: gnome-peercast may better be removed, see #466539
63    
64  silc-toolkit  silc-toolkit
65          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
66    
67    icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71  dietlibc  dietlibc
72          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
73    
74    libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78  libiax  libiax
79          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixed> (embed)
80    
# Line 64  zlib (lots of apps embed a copy, but lin Line 89  zlib (lots of apps embed a copy, but lin
89          - pvpgn 1.7.8-2 (embed)          - pvpgn 1.7.8-2 (embed)
90          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
91          - rpm <unknown> (embed)          - rpm <unknown> (embed)
92          NOTE: pinged joeyh since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
93            - tuxcmd-modules <unfixed> (embed)
94            - zsync <unfixed>
95            - tra <unfixed>
96            - sash <unfixed>
97            - nsis <unfixed>
98            - mseide-msegui <unfixed>
99            NOTE: mseide
100            - mirrordir <unfixed>
101            - poco <unfixed>
102            - klibc <unfixed>
103            - ghostscript <unfixed>
104            - freeimage <unfixed>
105            - clamav <unfixed> (fork)
106            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
107            - tuxonice-userui <unfixed>
108            - plt-scheme <unfixed>
109            - perl <unfixed>
110            - paraview <unfixed>
111            - gcvs <unfixed>
112            - erlang <unfixed>
113            - dump <unfixed>
114            - aide <unfixed> (static)
115            - dar <unfixed> (static)
116            - avfs <unfixed>
117            - fpc <unfixed>
118            - winff <unfixed>
119            NOTE: inherited from fpc, see #472304
120            - lazarus <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - erlang <unfixed> (embed)
123    
124    dulwich
125            - hg-git <unfixed> (embed; bug #541996)
126    
127    libvigraimpex
128            - hugin <unfixed> (embed; bug #542259)
129            - enblend-enfuse <unfixed> (embed; bug #542258)
130    
131  libbz2  libbz2
132          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
133    
134  ekg  libgadu
135          - centericq <unfixed> (embed)          - centericq <unfixed> (embed)
136          - gaim <unfixed> (embed)          - pidgin <unfixed> (embed)
137          - pigdin <unfixed> (embed)(links dynamically against libgadu)          NOTE: pidgin links dynamically against libgadu; that should be fixed, then???
138          - kopete 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
139          - kadu <unfixed> (embed)          NOTE: from kdenetwork: kopete
140          - gadu <unfixed> (embed)          - ekg 1:1.8~rc0-1 (embed)
141          NOTE: g/kadu not packaged in Debian yet          - kadu 0.6.0.2-3 (embed; bug #504430)
142            - gadu <itp> (embed)
143    
144  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
145          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
146          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
147          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
148          - phpwiki (embed)          - phpwiki <unfixed> (embed)
149          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
150          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
151    
# Line 90  shtool (affects build-time only) Line 153  shtool (affects build-time only)
153          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
154          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
155    
156  mozilla source code  iceape
157          - mozilla-firefox <unfixed> (embed)          - iceweasel <unfixed> (fork)
158          - mozilla-thunderbird          - icedove <unfixed> (fork)
159          - firefox <removed>          - xulrunner <unfixed> (fork)
160          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
         - thunderbird <removed>  
         [etch] - thunderbird <unfixed> (embed)  
         - iceweasel <unfixed> (embed)  
         - iceape <unfixed> (embed)  
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
161    
162  xli  xli
163          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
164    
165  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
166          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
167          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed)
         NOTE: in libxpm  
168    
169  kerberized apps with BSD origin  kerberized apps with BSD origin
170          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
171          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
172          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
173    
174  grip (which pkg is the origin?)  grip (which pkg is the origin?)
175          - libcdaudio          - libcdaudio <unfixed>
176          - grip          - grip <unfixed>
177          - gnome-vfs          - gnome-vfs <unfixed>
178          TODO: check vfs2 as well          TODO: check vfs2 as well
179    
180  fudforum  fudforum
181          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
182          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
183          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
184    
185    libbsd
186            - rdate 1:1.2-3 (embed)
187            - atheme-services <unfixed>
188            - libbsd-arc4random-perl <unfixed>
189            - isakmpd <unfixed>
190    
191  cvs  cvs
192          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
# Line 135  pcre Line 196  pcre
196          - python* <unfixed> (embed)          - python* <unfixed> (embed)
197          - php4 <unknown> (embed)          - php4 <unknown> (embed)
198          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
199          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
200            NOTE: libgoffice-*
201          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
202          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
203          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
204          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
205          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
206          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
207          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
208          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
209          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
210          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
211            - tin <unknown> (embed)
212            - kazehakase 0.5.2-1
213            - webkit <unfixed> (embed)
214            - qt4-x11 <unfixed> (embed)
215            NOTE: embedded via webkit copy
216            - erlang <unfixed> (embed)
217    
218  tiff  tiff
219          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
         TODO: check, which debian pkg this is in  
220    
221  uudeview  uudeview
222          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
223            - pan <unfixed> (embed)
224    
225  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
226          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
227          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
228          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
229    
230  util-linux/mount  util-linux/mount
231          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
232          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
233    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
234  sylpheed  sylpheed
235          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
236    
# Line 176  phpsysinfo Line 239  phpsysinfo
239          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
240    
241  phpldapadmin  phpldapadmin
242          - [sarge] egroupware <unfixed> (embed)          [sarge] - egroupware <unfixed> (embed)
243          NOTE: removed from egroupware after sarge          NOTE: removed from egroupware after sarge
244    
245  chmlib  chmlib
246          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
247    
248  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
249          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
250          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
251          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
252          - vlc <unfixed> (static)          - smilutils 0.3.0-10
253          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
254          - motion <unfixed> (static)          - motion 3.1.19-1
255          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
256          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed>
257          - xmovie <unfixed>          TODO: gimp-gap (potentially using ffmpeg code as well)
258            - avifile <unfixed> (embed; bug #538750)
259    
260    faad2
261            - mplayer 1.0~rc2-20 (embed)
262            - avifile <unfixed> (embed; bug #538750)
263    
264  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
265          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
266            - avifile <unfixed> (embed) [./plugins/libmad/*]
267            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
268    
269  libdts  libdts
270          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 222  uw-imap Line 291  uw-imap
291  imagemagick  imagemagick
292          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
293    
294    python-urlgrabber
295            - mercurial <unfixed> (embed; bug #531062)
296    
297    python-mechanize
298            - beautifulsoup <unfixed> (embed)
299    
300  halibut  halibut
301          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
302    
303  libghttp  libghttp
304          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
305    
306  libsndfile  libsndfile
307          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
308    
309  glibmm2.4  glibmm2.4
310          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
311    
312  libgnomecanvasmm2.6  libgnomecanvasmm2.6
313          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
314    
315  libsigc++-2.0  libsigc++-2.0
316          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
317    
318  soundtouch  soundtouch
319          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
320    
321  libmms  libmms
322          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
323          - mimms <unfixed> (embed)          - mimms <unfixed> (embed)
324    
325  fckeditor  fckeditor
326          - knowledgeroot <unfixed> (embed)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
327          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
328          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
329          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
330            - request-tracker3.8 <unfixed> (embed)
331    
332    ipatlas (not packaged in Debian)
333            - moodle <unfixed> (embed; bug #507185)
334    
335    libphp-phpmailer
336            - moodle <unfixed> (embed; bug #507185)
337            - mahara <unfixed> (embed)
338            - symfony <unfixed> (embed)
339            [etch] - phpgroupware <unfixed> (embed)
340            NOTE: phpgroupware-felamimail is only in etch
341            - egroupware <unfixed> (embed; bug #504283)
342            - glpi <unfixed>
343    
344    htmlArea (not packaged in Debian)
345            - moodle <unfixed> (embed)
346    
347    giflib:
348            - wine <unfixed> (embed; bug #466181)
349    
350  Moodle contains lots of things:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
351  AdoDB          - moodle <unfixed> (embed)
352  AdoDB-XML Schema  
353  ipatlas  smarty:
354  PHPMailer          - moodle 1.8.2-2 (embed; bug #471158)
355  Smarty          - gallery2 2.2.5-2 (embed; bug #471160)
356  htmlArea          - mahara 0.9.2-2 (embed; bug #471201)
357  TinyMCE          - gosa 2.4beta1-1 (embed; bug #471200)
 bennu  
358    
359  TinyMCE  TinyMCE
360          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
361          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
362          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
363          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
364    
365  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
366          - scite <unfixed> (embed)          - scite <unfixed> (embed)
367          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
368          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
369          - geany <unfixed> (embed)          - geany <unfixed> (fork)
370            - anjuta <unfixed> (embed)
371    
372  libphp-adodb  libphp-adodb
373            - moodle <unfixed> (embed; bug #507185)
374            NOTE: also AdoDB-XML Schema
375          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
376          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
377          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
378          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
379            - torrentflux 2.0beta1-2 (embed)
380          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
381          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
382          - cacti <unknown> (embed)          - cacti <unknown> (embed)
383          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
384          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
385            - gforge 4.7~rc2-6 (embed)
386            - mahara <unfixed> (embed)
387    
388  gzip  gzip
389  linux-kernel (lib/inflate.c)          - linux-kernel <unfixed> (embed)
390  klibc (based on linux-kernel gzip code)          NOTE: lib/inflate.c
391  busybox          - klibc <unfixed> (embed)
392            NOTE: based on linux-kernel gzip code
393  neon:          - busybox <unfixed> (embed)
394  cadaver (all, but being worked on: #188381)  
395  gnome-vfs2 (#395874)  neon
396  litmus (#395875)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
397  screem (sarge only)          - gnome-vfs2 <unfixed> (embed; bug #395874)
398  sitecopy (#395876)          [etch] - litmus <unfixed> (embed; #395875)
399  tla (etch/sid only: #395877)          - litmus <removed> (embed; #395875)
400            [sarge] - screem <unfixed> (embed)
401            - sitecopy 1:0.16.3-5 (embed; bug #395876)
402            [etch] - tla <unfixed> (embed; bug #395877)
403            [sarge] - tla <unfixed> (embed; bug #395877)
404    
405    libmodplug
406            - gst-plugins-bad0.10 <unfixed> (embed)
407    
408    libvncserver
409            - vino <unfixed> (embed)
410    
411    putty
412            - filezilla <unfixed> (embed)
413    
414    tinyxml (not packaged in Debian)
415            - filezilla <unfixed>
416    
417    gv
418            - evince <unfixed> (embed)
419            NOTE: ps/ tree from gv 3.5.8
420            NOTE: evince-gtk is affected (a component of evince source package)
421    
422    libXbae
423            - paw <removed> (embed)
424            [etch] - paw <unfixed> (embed)
425    
426    libgtkhtml
427            - claws-mail-extra-plugins <unfixed> (fork)
428    
429    libXaw
430            - paw <removed> (embed)
431            [etch] - paw <unfixed> (embed)
432            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
433    
434    libgd2
435            - graphviz <unfixed> (embed)
436            NOTE: lib/gd seems to be 2.0.33
437            - wml <unfixed> (embed)
438            - libwmf <unfixed> (embed)
439            NOTE: derived from gd 1.6.3
440    
441    rar
442            - unrar-nonfree <unfixed> (embed)
443    
444    unrar-free (maybe this code is derived from the original rar, too?)
445            - clamav <unfixed> (embed)
446            NOTE: seems to be disabled in default config
447    
448  libmodplug:  mplayer (DirectMedia Object loader)
449  gst-plugins-bad0.10          - xine-lib <unfixed> (embed)
450            NOTE: src/libw32dll/
451  libvncserver:          - vlc <unfixed> (embed)
452  vino          NOTE: modules/codec/dmo/
453            - mplayer 1.0~rc2-20 (embed)
454  putty:  
455  filezilla  libwpd (WordPerfect converter)
456            - openoffice.org <unfixed> (embed)
457  tinyxml (not packaged in Debian):  
458  filezilla  fsplib (http://sourceforge.net/projects/fsp/)
459            - gftp <unfixed> (embed)
460  gv:          NOTE: lib/fsplib version 0.3
 evince (ps/ tree from gv 3.5.8)  
 evince-gtk (not packaged in Debian)  
   
 libXbae:  
 libpawlib2-lesstif package (from Cernlib)  
   
 libXaw:  
 libpawlib2-lesstif package (from Cernlib)  
   
 (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  
   
 libgd2:  
 graphviz (lib/gd seems to be 2.0.33)  
   
 rar:  
 unrar-nonfree  
461    
462  unrar-free: (maybe this code is derived from the original rar, too?)  sprng
463  clamav (seems to be disabled in default config)          - tree-puzzle <unfixed> (embed)
464    
465  mplayer (DirectMedia Object loader):  librpcsecgss
466  xine-lib (src/libw32dll/)          - krb5 <unfixed> (embed)
 vlc (modules/codec/dmo/)  
467    
468  libwpd (WordPerfect converter):  jasper
469  openoffice.org          - ghostscript <unfixed> (embed)
470            - gs-gpl <unfixed> (embed)
471    
472    libiris
473            - psi <unfixed> (embed)
474            - kdenetwork <unfixed> (embed)
475            NOTE: kopete embeds libiris but links dynamically to libidn
476            - kdegames <unfixed> (embed)
477            NOTE: ksirk/kde4
478    
479    libidn
480            - monotone 0.43-1 (embed)
481            - psi <unfixed> (embed)
482            NOTE: psi embeds libiris which embeds libidn
483            - kdegames <unfixed> (embed)
484            NOTE: kdegames/kde4 embeds libiris which embeds libidn
485    
486    liblua
487            - monotone 0.43-1 (embed)
488            - nmap <unfixed> (embed; bug #527997)
489            NOTE: fixed upstream as of nmap svn rev13336.
490    
491  fsplib (http://sourceforge.net/projects/fsp/):  libbotan
492  gftp (lib/fsplib version 0.3)          - monotone 0.43-1 (embed)
493    
494  librpcsecgss:  NetXX
495  krb5          - monotone 0.43-1 (embed)
496    
497  jasper:  libgc
498  ghostscript          - mono <unfixed> (embed)
 gs-gpl  
499    
500  libidn:  lzma
501  monotone          - p7zip <unfixed> (embed)
502            - xz-utils <unfixed> (fork)
503    
504    lzo
505            - grub2 <unfixed> (embed)
506    
507    yassl
508            - mysql-dfsg-5.0 <unfixed> (embed)
509    
510    pax code
511            - tar <unfixed> (embed)
512            - cpio <unfixed> (embed)
513    
514    t1lib
515            - tetex-bin 2.0.2-1 (embed)
516            - texlive-bin <unknown> (embed)
517    
518    guichan
519            - boswars <unfixed> (embed)
520            NOTE: maintainer notified us, working on it
521    
522    tolua
523            - boswars <unfixed> (embed)
524            NOTE: maintainer notified us, working on it
525    
526    asio-dev
527            - luxrender <unfixed> (embed)
528            NOTE: maintainer notified us, working on it
529            NOTE: may be merged with boost "soon"
530    
531    xine-lib
532            - vlc <unfixed> (embed)
533            NOTE: only parts included in modules/access/rtsp
534    
535    netpbm
536            - tcl8.3 <unfixed> (embed)
537            - tcl8.4 <unfixed> (embed)
538            - tcl8.5 <unfixed> (embed)
539            NOTE: generic/tkImgGIF.c
540    
541    tk8.5
542            - tk8.0 <removed> (old-version)
543            - tk8.3 <unfixed> (old-version)
544            - tk8.4 <unfixed> (old-version)
545            - perl-tk <unfixable> (fork)
546    
547    samba
548            - mc 2:4.6.2~git20080311-1 (embed)
549            NOTE: maintainer is aware of this, currently searching a solution
550    
551    plib1.8.4c2
552            - boson <unfixed> (fork)
553            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
554    
555    fribidi
556            - quesoglc <unfixed> (embed)
557            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
558    
559    glew
560            - quesoglc <unfixed> (embed; bug #489341)
561            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
562    
563    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
564            - transcend <unfixed> (embed)
565            - cultivation <unfixed> (embed)
566            - passage <unfixed> (embed)
567            - gravitation <unfixed> (embed)
568    
569  liblua:  tar
570  monotone          - libarchive <unfixed> (embed)
571            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
572    
573  libbotan:  cpio
574  montone          - libarchive <unfixed> (embed)
575            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
576    
577  NetXX:  webkit
578  monotone          - qt4-x11 <unfixed> (embed)
579    
580  libgc:  ftgl
581  mono          - blender 2.46+dfsg-1 (embed)
582    
583  lzma:  wv
584  p7zip          - abiword <unfixed>
585    
586  lzo:  qemu
587  grub2          - kvm <unfixed> (embed; bug #543159)
588            - xen-3 <unfixed> (embed)
589            - xen-unstable <unfixed> (embed)
590    
591  pax code:  vgabios
592  tar          - kvm <unfixed> (embed; bug #489442)
 cpio  
593    
594  t1lib:  bochs
595  tetex-bin (links to system t1lib since 2.0.2)          - kvm <unfixed> (embed; bug #489442)
 texlive-bin (links to system t1lib)  
596    
597  TODO evaluate:  speex
598  gimp-gap (potentially using ffmpeg code as well)          - vorbis-tools <unfixed> (embed)
599            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
600            - gst-plugins-good0.10 <unfixed> (embed)
601            - xine-lib <unfixed> (embed)
602            - libfishsound <unfixed> (embed)
603            - libannodex <unfixed> (embed)
604            - vlc <unfixed> (embed)
605            - xmms-speex <unfixed> (embed)
606            - libsdl-sound1.2 <unfixed> (embed)
607            - sweep <unfixed> (embed)
608    
609    libreadline
610            - magic <itp> (old-version)
611    
612    opcode
613            - ode <unfixed> (embed)
614            NOTE: opcode is not a package in debian, it is just embedded
615            NOTE: http://www.codercorner.com/Opcode.htm
616    
617    gimpact
618            - ode <unfixed> (embed)
619            NOTE: gimpact is not a package in debian, it is just embedded
620            NOTE: http://gimpact.sf.net
621    
622    mochikit
623            - mahara <unfixed> (embed)
624            NOTE: they require extra patches, still unmerged upstream
625            - ntop <unfixed> (embed)
626            - coherence <unfixed> (embed)
627            NOTE: python-coherence
628            - paste <unfixed> (embed)
629            NOTE: python-paste
630            - turbogears <unfixed> (embed)
631            NOTE: python-turbogears
632            - plone3 <unfixed> (embed)
633            NOTE: zope-plone3
634    
635    prototypejs
636            - netbeans-ide <unfixed> (embed)
637            - auth2db <unfixed> (embed)
638            - webcit <unfixed> (embed)
639            NOTE: citadel-webcit
640            - asterisk <unfixed> (embed)
641            - doc-iana <unfixed> (embed)
642            - libaws <unfixed> (embed)
643            NOTE: libaws-doc
644            - libgettext-ruby <unfixed> (embed)
645            NOTE: libgettext-ruby-data
646            - libjson-ruby <unfixed> (embed)
647            NOTE: libjson-ruby-doc
648            - lucene2 <unfixed> (embed)
649            NOTE: liblucene2-java-doc
650            - libopenid-ruby <unfixed> (embed)
651            - solr <unfixed> (embed)
652            NOTE: solr-common
653            - glpi <unfixed> (embed)
654            - mnemo2 <unfixed> (embed)
655            - nag2 <unfixed> (embed)
656            - knowledgeroot <unfixed> (embed)
657            - mediatomb <unfixed> (embed)
658            NOTE: mediatomb-common
659            - mt-daapd <unfixed> (embed)
660            - op-panel <unfixed> (embed)
661            - ebug-http <unfixed> (embed)
662            - phpgedview <removed> (embed)
663            - poker-network <unfixed> (embed)
664            NOTE: poker-web
665            - webhelpers <unfixed> (embed)
666            NOTE: python-webhelpers
667            - qwik <unfixed> (embed)
668            - rails <unfixed> (embed)
669            - typo3-src <unfixed> (embed)
670            - wordpress 2.5.0-2 (embed)
671            - zope <unfixed> (embed)
672            NOTE: zope-plone3
673            - smokeping <unfixed> (embed)
674            - ampache 3.4.1-2 (embed)
675            - exaile <unfixed> (embed)
676            - hobix <unfixed> (embed)
677            - pixelpost <unfixed> (embed)
678            - symfony <unfixed> (embed)
679            NOTE: it's been said that there are custom changes
680            - zabbix <unfixed> (embed)
681            NOTE: zabbix-frontend-php
682            - turba2 <unfixed> (embed)
683    
684    gdb
685            - insight <unfixed> (embed)
686    
687    e2fsprogs
688            - ldiskfsprogs <unfixable> (fork)
689    
690    quazip (not packaged in Debian)
691            - qcake <unfixed> (embed)
692            NOTE: starting with upstream version 0.6.4
693    
694    exo
695            - pcmanfm <unfixed> (embed; bug #499677)
696            NOTE: slightly modified source code
697    
698    java
699            - openjdk-6 <unfixed>
700            - sun-java5 <unfixed>
701            - sun-java6 <unfixed>
702    
703    libphp-snoopy
704            - ampache 3.4.1-2 (embed; bug #504169)
705            - mahara 1.0.5-2 (embed; bug #504170)
706            - pixelpost 1.7.1-5 (embed; bug #504171)
707            - mediamate 0.9.3.6-5 (embed; bug #504172)
708            - opendb <removed> (embed; bug #504173)
709            [etch] - opendb <unfixed> (embed; bug #504173)
710            - wordpress 2.5.1-9 (embed; bug #443948)
711            - moodle <unfixed> (embed; bug #507185)
712            [etch] - phpgroupware <unfixed> (embed)
713            NOTE: phpgroupware-felamimail
714            - magpierss 0.72-3 (embed; bug #431089)
715    
716    jquery
717            - zekr <unfixed> (embed)
718            - wordpress <unknown> (embed)
719            - yocto-reader <unfixed> (embed)
720            - textpattern <unfixed> (embed)
721            - genshi 0.5.1-1 (embed)
722            NOTE: compressed file under examples/ dir
723            - prewikka <unfixed> (embed)
724            - libramaze-ruby <unfixed> (embed)
725            - drupal5 <unfixed> (embed)
726            - b2evolution <unfixed> (embed)
727            - wesnoth <unfixed> (embed)
728    
729    tablesorter (jquery plugin, not packaged yet)
730            - wesnoth <unfixed> (embed)
731    
732    kses
733            - wordpress <unfixed> (embed; bug #504242)
734            NOTE: their copy has all methods renamed to wp_<foo>
735            NOTE: kses isn't in Debian, RFP: #504240
736            - moodle <unfixed> (embed; bug #507185)
737            - egroupware <unfixed> (embed)
738    
739    magpierss
740            - wordpress <unfixed> (embed; bug #504242)
741            - moodle <unfixed>
742    
743    php-gettext
744            - wordpress 2.8.4-1 (embed; bug #504242)
745    
746    libphp-ixr (name may change, it is the Incutio XML-RPC)
747            - wordpress <unfixed> (embed; bug #504242)
748            NOTE: libphp-ixr isn't in Debian, RFP: #504236
749            - dokuwiki <unfixed> (embed)
750            - textpattern <unfixed> (embed)
751    
752    libphp-cas
753            - glpi <unfixed> (embed)
754            - moodle <unfixed> (embed; bug #505984)
755    
756    scriptaculous
757            - glpi <unfixed> (embed)
758            - libaws <unfixed> (embed)
759            NOTE: libaws-doc
760            - op-panel <unfixed> (embed)
761            - symfony <unfixed> (embed)
762            NOTE: maintainer says there are extra incompatible changes required
763            - pixelpost <unfixed> (embed)
764            - webhelpers <unfixed> (embed)
765            NOTE: python-webhelpers
766            - qwik <unfixed> (embed)
767            - smokeping <unfixed> (embed)
768            - turba2 <unfixed> (embed)
769            - typo3-src 4.2.3-1 (embed)
770    
771    libmarkdown-php
772            - moodle <unfixed> (embed; bug #507185)
773            - pixelpost <unfixed> (embed)
774    
775    php-openid
776            - wordpress-openid <itp> (embed)
777    
778    geshi
779            - dokuwiki 0.0.20080505-3.1 (embed)
780            - pgfouine 1.0-1.1 (embed)
781            - websvn 2.1.0-1 (embed)
782    
783    webcalendar
784            - gforge 4.7~rc2-6 (embed; bug #504758)
785    
786    libical
787            - kdepim <unfixed> (fork)
788            - kdepimlibs <unfixed> (fork)
789            NOTE: fixed in KDE4 post 4.1.x series
790            - claws-mail-extra-plugins <unfixed> (fork)
791    
792    libltdl3
793            - kdelibs <unfixed> (embed)
794            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
795            - synfig <unfixed> (embed)
796    
797    harfbuzz
798            - qt4-x11 <unfixed> (embed)
799    
800    libzip
801            - php5 <unfixed> (fork)
802            - odt2txt <unfixed> (embed; bug #523808)
803    
804    json.php (not packaged; should be replaced with php's built-in functions)
805            - moodle <unfixed>
806            - yui <unfixed>
807            - gallery2 <unfixed>
808            - dokuwiki <unfixed>
809            - typo3-src <unfixed>
810    
811    php-fpdf
812            - tcpdf <itp> (fork)
813            - moodle <unfixed>
814            - phpwiki <unfixed>
815            - egroupware <unfixed>
816            - ldap-account-manager <unfixed> (fork)
817    
818    tcpdf (itp: #495985)
819            - moodle <unfixed>
820            - phpmyadmin <unfixed>
821    
822    typo3
823            - moodle <unfixed>
824    
825    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
826            - moodle <unfixed>
827            - gosa <unfixed>
828    
829    php-ole (itp: #487558)
830            - moodle <unfixed>
831    
832    pieforms (http://www.catalyst.net.nz)
833            - mahara <unfixed>
834    
835    savant2 (http://phpsavant.com)
836            - egroupware <unfixed>
837    
838    rssparser (http://nwow.org)
839            - egroupware <unfixed>
840            - phpgroupware <unfixed>
841    
842    lcms
843            - openjdk-6 <unfixed> (fork)
844    
845    libphp-phplayersmenu
846            - diogenes <unfixed>
847            - phpldapadmin <unfixed>
848    
849    libphp-pclzip
850            - docvert <unfixed>
851            - moodle <unfixed>
852            - egroupware <unfixed>
853    
854    libphp-simplepie
855            - dokuwiki <unfixed>
856    
857    libphp-jpgraph
858            - egroupware <unfixed>
859    
860    php-simpletest
861            - moodle <unfixed>
862    
863    libpng
864            - iceweasel <not-affected> (uses xulrunner)
865            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
866            - iceape 1.0.13~pre080614i-0etch1 (embed)
867            - xulrunner 1.9.0.13-1 (embed)
868            [lenny] - xulrunner 1.9.0.11-0lenny1
869            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
870    
871    irssi
872            - silc-client <unfixed> (embed)
873            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
874    
875    extc
876            - mtasc <unfixed> (embed)
877            - haxe <unfixed> (embed)
878    
879    swflib
880            - mtasc <unfixed> (embed)
881            - haxe <unfixed> (embed)
882    
883    libitext-java
884            - bouncycastle 2.1.4-1 (embed)
885    
886    python-ply
887            - pyke <unfixed> (embed)
888    
889    libdumbnet (libdnet upstream)
890            - nmap <unfixed> (fork)
891    
892    gcc-4.4
893            - gcc-mingw32 <unfixed> (embed)
894    
895    camlimages
896            - advi <unfixed> (embed)
897    
898    memcached
899            - memcachedb <unfixed> (embed)
900    
901    yajl
902            - argyll <unfixed> (embed; bug #544223)
903            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
904    
905    libept
906            - adept <unfixed> (embed; bug #540649)
907    
908    libvorbis
909            - iceweasel <not-affected> (uses xulrunner)
910            - xulrunner <not-affected> (introduced in 1.9.1)
911            TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]
912    
913    cairo
914            - iceweasel <not-affected> (uses xulrunner)
915            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
916    
917    php-net-dnsbl
918            - serendipity <unfixed> (embed)
919    
920    php-onyx-rss
921            - serendipity <unfixed> (embed)
922    
923    php-text-wiki
924            - serendipity <unfixed> (embed)
925    
926    php-xml-rpc
927            - serendipity <unfixed> (embed)
928    
929    polarssl (does not have a shared library)
930            - pdkim <itp> (embed; bug #543150)
931            - xyssl <old-version>
932    
933    pidgin
934            - gaim <old-version>

Legend:
Removed from v.7840  
changed lines
  Added in v.12816

  ViewVC Help
Powered by ViewVC 1.1.5