/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7695 by nion, Sat Dec 22 16:01:32 2007 UTC revision 12961 by geissert, Fri Oct 9 17:24:44 2009 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  xpdf code: (some use xpdf 2, some xpdf 3)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  gpdf (has been replaced by evince - which uses poppler - in Etch)          <itp>, <not-affected>, <unknown> if the version number can not
15  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)          be determined, or <unfixable> for unavoidable cases (e.g., forks
16  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)          that add real value)
17  tetex-bin (links to poppler since 3.0-12)  sort: static (linking statically against a lib)
18  texlive-bin (links to poppler)        embed (embedding a copy of the library into another source package)
19  cupsys (uses xpdf-utils, it's still present in the src, though)        fork (the package is not just embedding code but it is a fork and
20  poppler              thus might share parts of the source code)
21  koffice/kword (upstream is working on using poppler, #436163)        old-version (the package is an older version of essentially
22  libextractor (uses internal pdf decoder since 0.5.12-1)                     the same code)
23  pdfkit.framework (links to poppler since 0.8-4)  
24  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)  The srcpkg might be some string to identify the code if there is no
25  ruby-gnome2 (has a copy of poppler but links against the shared lib)  specific source package.
26    
27  silc-toolkit:  Everything up to the next line is ignored.
28  silc-client (uses libsilc and libsilcclient)  ---BEGIN
29    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30  dietlibc:          NOTE: Fixed packages link to poppler library unless otherwise noted
31  ccontrol (links statically)          NOTE: has been replaced by evince in etch
32            - pdftohtml <unknown>
33  libiax:          [sarge] - pdftohtml <unfixed>
34  iaxmodem          [etch] - pdftohtml <unfixed>
35            NOTE: has been replaced by poppler-utils
36  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37  dpkg          - texlive-base 3.0-12 (embed)
38  rsync (somehow derived code base)          - texlive-bin 2007-1 (embed)
39  mono          NOTE: links to poppler
40  mozilla(?)          - koffice <unfixed> (embed; bug #436163)
41  Linux kernels          - libextractor 0.5.12-1 (embed)
42  pvpgn (links dynamically since 1.7.8-2)          NOTE: libextractor is using its own pdf decoder now
43  mrtg (links dynamically since 2.12.2-1)          - ipe <unfixed> (embed)
44  rpm          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45            - ruby-gnome2 <unknown> (embed)
46  libbz2:          NOTE: copy only present in source but links to poppler
47  dpkg (statically linked)          - pdfedit <unfixed> (embed; bug #510794)
48            - swftools <unfixed> (embed)
49  libgadu/ekg:  
50  centericq  ppmd
51  gaim          - libcomplearn-mod-ppmd <unfixed> (fork)
52  pigdin (links dynamically against libgadu)          NOTE: discussion in #458152
53  kopete (ships the code, but links dynamically in the Debian package)  
54  kadu (not packaged in Debian)  libevent
55  GNU gadu (not yet packaged in Debian)          - transmission 1.71-1 (embed; bug #529372)
56    
57  xmlrpc: (which package is the "origin" of this code?)  lrmi
58  drupal          - read-edid 2.0.0-1 (embed; bug #495131)
59  phpgroupware  
60  egroupware  peercast
61  phpwiki          - gnome-peercast <unfixed> (embed)
62  php4 (php-pear, IIRC this was reorganized some weeks ago?)          NOTE: gnome-peercast may better be removed, see #466539
63    
64  shtool: (affects build-time only)  silc-toolkit
65  mysql-ocaml          - silc-client 1.1~beta6-1 (embed)
66  php4  
67    icclib
68  mozilla:          - ghostscript <unfixed> (embed)
69  mozilla-firefox          - argyll <unfixed> (embed)
70  mozilla-thunderbird  
71  firefox (to be removed)  dietlibc
72  thunderbird (to be removed)          - ccontrol 0.9.1+20071204-1 (static)
73  iceweasel  
74  iceape  libmikmod
75  icedove          - sdl-mixer1.2 <unfixed> (embed)
76  xulrunner          TODO: report bug
77  nvu (no longer in Debian)  
78    libiax
79  xli:          - iaxmodem <unfixed> (embed)
80  xloadimage  
81    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
82  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          - dpkg <unfixed> (embed)
83  openmotif          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
84  xfree86/xorg (in libxpm)          - rsync <unfixed> (embed)
85            NOTE: somehow derived code base
86  kerberized apps with BSD origin:          - mono <unfixed> (embed)
87  krb4          TODO: check mozilla
88  krb5          - Linux kernels <unfixed> (embed)
89  heimdal          - pvpgn 1.7.8-2 (embed)
90            - mrtg 2.12.2-1 (embed)
91  grip: (which pkg is the origin?)          - rpm <unknown> (embed)
92  libcdaudio          NOTE: pinged anibal since when rpm was fixed
93  grip          - tuxcmd-modules <unfixed> (embed)
94  gnome-vfs (vfs2 as well?)          - zsync <unfixed>
95            - tra <unfixed>
96  fudforum:          - sash <unfixed>
97  phpgroupware-fudforum          - nsis <unfixed>
98  egroupware-fudforum (removed from egroupware after sarge)          - mseide-msegui <unfixed>
99            NOTE: mseide
100  cvs:          - mirrordir <unfixed>
101  gcvs (at least an additional script is included, check if there's more)          - poco <unfixed>
102            - klibc <unfixed>
103  pcre:          - ghostscript <unfixed>
104  all pythons          - freeimage <unfixed>
105  php4 (src included, but Debian package links dynamically)          - clamav <unfixed> (fork)
106  analog (src included, but Debian package links dynamically)          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
107  libgoffice-1          - tuxonice-userui <unfixed>
108  vfu (removed linking against embedded copy in 4.06-4.1; #450754)          - plt-scheme <unfixed>
109  tf5 (since 5.0beta7 the Debian package links dynamically)          - perl <unfixed>
110  monotone (including this starting from 0.37)          - paraview <unfixed>
111  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          - gcvs <unfixed>
112  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)          - erlang <unfixed>
113  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)          - dump <unfixed>
114  yacas (<= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway)          - aide <unfixed> (static)
115  gtamsanalyzer.app (links dynamically since 0.42-5)          - dar <unfixed> (static)
116            - avfs <unfixed>
117  tiff:          - fpc <unfixed>
118  wxpythongtk (check, which debian pkg this is in)          - winff <unfixed>
119  older kdegraphics/kpdf releases < 3.3 embedded a copy          NOTE: inherited from fpc, see #472304
120            - lazarus <unfixed>
121  uudeview:          NOTE: inherited from fpc, see #472304
122  libconvert-uulib-perl          - erlang <unfixed> (embed)
123    
124  sqlite: (not affected by security vulnerabilities so far)  dulwich
125  amarok          - hg-git <unfixed> (embed; bug #541996)
126  monotone  
127  iceweasel  libvigraimpex
128            - hugin <unfixed> (embed; bug #542259)
129  util-linux/mount:          - enblend-enfuse <unfixed> (embed; bug #542258)
130  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
131    libbz2
132  webmin:          - dpkg <unfixed> (static)
133  usermin (only in sarge)  
134    libgadu
135  sylpheed:          - centericq <unfixed> (embed)
136  sylpheed-claws          - pidgin <unfixed> (embed)
137            NOTE: pidgin links dynamically against libgadu; that should be fixed, then???
138  phpsysinfo:          - kdenetwork 4:3.3.2-5 (embed)
139  egroupware          NOTE: from kdenetwork: kopete
140  phpgroupware          - ekg 1:1.8~rc0-1 (embed)
141            - kadu 0.6.0.2-3 (embed; bug #504430)
142  phpldapadmin:          - gadu <itp> (embed)
143  egroupware (removed from egroupware after sarge)  
144    xmlrpc (which package is the "origin" of this code?)
145  chmlib:          - drupal <unfixed> (embed)
146  kchmviewer (ships the code but links dynamically)          - phpgroupware <unfixed> (embed)
147            - egroupware <unfixed> (embed)
148  libavcodec/libavformat (source: ffmpeg):          - phpwiki <unfixed> (embed)
149  mplayer (#395252)          - php4 <unfixed> (embed)
150  xvidcap          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
151  kino (links statically, does not include code)  
152  vlc (links statically, does not include code)  shtool (affects build-time only)
153  smilutils (links statically, does not include code)          - mysql-ocaml <unfixed> (embed)
154  motion (links statically, does not include code)          - php4 <unfixed> (embed)
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
155    
156  mad MPEG decoding lib:  iceape
157  mad          - iceweasel <unfixed> (fork)
158  xine-lib          - icedove <unfixed> (fork)
159            - xulrunner <unfixed> (fork)
160            - kompozer <unfixed> (embed; bug #532168)
161    
162    xli
163            - xloadimage <unfixed> (embed)
164    
165    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
166            - openmotif <unfixed> (embed)
167            - libxpm <unfixed> (embed)
168    
169    kerberized apps with BSD origin
170            - krb4 <removed> (embed)
171            - krb5 <unfixed> (embed)
172            - heimdal <unfixed> (embed)
173    
174    grip (which pkg is the origin?)
175            - libcdaudio <unfixed>
176            - grip <unfixed>
177            - gnome-vfs <unfixed>
178            TODO: check vfs2 as well
179    
180    fudforum
181            [etch] - phpgroupware <unfixed> (embed)
182            NOTE: phpgroupware-fudforum
183            [sarge] - egroupware-fudforum <removed> (embed)
184    
185    libbsd
186            - rdate 1:1.2-3 (embed)
187            - atheme-services <unfixed>
188            - libbsd-arc4random-perl <unfixed>
189            - isakmpd <unfixed>
190    
191    cvs
192            - gcvs <unfixed> (embed)
193            NOTE: see cvsunix/src in tarball
194    
195    pcre
196            - python* <unfixed> (embed)
197            - php4 <unknown> (embed)
198            - analog 2:5.23-0woody1 (embed)
199            - goffice <unfixed> (embed)
200            NOTE: libgoffice-*
201            - vfu 4.06-4.1 (embed; bug #450754)
202            - tf5 5.0beta7-1 (embed)
203            - monotone 0.43-1 (embed)
204            NOTE: this only affects versions >= 0.37
205            - glib2.0 2.15.2-1 (embed)
206            - apache2 2.0.53-4 (embed)
207            - exim4 4.10-0.srh20.12 (embed)
208            - yacas <unfixed> (embed)
209            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
210            - gtamsanalyzer.app 0.42-5 (embed)
211            - tin <unknown> (embed)
212            - kazehakase 0.5.2-1
213            - webkit 1.0.1-1 (embed)
214            - qt4-x11 <unfixed> (embed)
215            NOTE: embedded via webkit copy
216            - erlang <unfixed> (embed)
217    
218    tiff
219            - wxwindows2.4 2.2.1 (embed)
220    
221    uudeview
222            - libconvert-uulib-perl <unfixed> (embed)
223            - pan <unfixed> (embed)
224    
225    sqlite (not affected by security vulnerabilities so far)
226            - amarok <unfixed> (embed)
227            - monotone 0.43-1 (embed)
228            - iceweasel <unfixed> (embed)
229    
230    util-linux/mount
231            - loop-aes-utils <unfixed> (embed)
232            NOTE: contains code from util-linux' mount in the mount-aes-udeb
233    
234    sylpheed
235            - sylpheed-claws <unfixed> (fork)
236    
237    phpsysinfo
238            - egroupware <unfixed> (embed)
239            - phpgroupware <unfixed> (embed)
240    
241    phpldapadmin
242            [sarge] - egroupware <unfixed> (embed)
243            NOTE: removed from egroupware after sarge
244    
245    chmlib
246            - kchmviewer <unknown> (embed)
247    
248    ffmpeg (libavcodec/libavformat)
249            - mplayer 1.0~rc2-14 (embed; bug #395252)
250            - kino 1.0.0-1
251            - vlc <not-affected> (Links dynamically since initial release)
252            - smilutils 0.3.0-10
253            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
254            - motion 3.1.19-1
255            - gstreamer0.10-ffmpeg 0.10.3-2
256            - xmovie <removed>
257            TODO: gimp-gap (potentially using ffmpeg code as well)
258            - avifile <unfixed> (embed; bug #538750)
259    
260    faad2
261            - mplayer 1.0~rc2-20 (embed)
262            - avifile <unfixed> (embed; bug #538750)
263    
264    libmad (MPEG decoding lib)
265            - xine-lib <unfixed> (embed)
266            - avifile <unfixed> (embed) [./plugins/libmad/*]
267            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
268    
 libdts:  
269  libdts  libdts
270  xine-lib          - xine-lib <unfixed> (embed)
271    
 flac:  
272  flac  flac
273  xine-lib          - xine-lib <unfixed> (embed)
274    
275  liba52:  liba52
276  a52dec          - a52dec <unfixed> (embed)
277  xine-lib          - xine-lib <unfixed> (embed)
278    
279  libmpeg2:  libmpeg2
280  mpeg2dec          - mpeg2dec <unfixed> (embed)
281  xine-lib          - xine-lib <unfixed> (embed)
282    
283  curl:  curl
284  wget (code for NTLM authentication)          - wget <unfixed> (embed)
285            NOTE: code for NTLM authentication
286    
287  TODO evaluate:  uw-imap
288  gimp-gap (potentially using ffmpeg code as well)          - pine <unfixed> (embed)
289            - alpine <unfixed> (embed)
290    
291  uw-imap:  imagemagick
292  pine          - graphicsmagick <unfixed> (fork)
 alpine  
293    
294  imagemagick:  python-urlgrabber
295  graphicsmagick          - mercurial <unfixed> (embed; bug #531062)
296    
297  halibut:  python-mechanize
298  nsis          - beautifulsoup <unfixed> (embed)
299    
300  libghttp:  halibut
301  hotway          - nsis <unfixed> (fork)
302    
303  libsndfile:  libghttp
304  ardour          - hotway <unfixed> (embed)
305    
306  glibmm2.4:  libsndfile
307  ardour          - ardour 1:2.7.1-1 (embed)
308    
309  libgnomecanvasmm2.6:  glibmm2.4
310  ardour          - ardour 1:2.7.1-1 (embed)
311    
312  libsigc++-2.0:  libgnomecanvasmm2.6
313  ardour          - ardour 1:2.7.1-1 (embed)
314    
315  soundtouch:  libsigc++-2.0
316  ardour          - ardour 1:2.7.1-1 (embed)
317    
318  libmms:  soundtouch
319  xine-lib          - ardour 1:2.7.1-1 (embed)
320  mimms  
321    libmms
322            - xine-lib <unfixed> (embed)
323            - mimms <unfixed> (embed)
324    
325  FCKeditor: (packaged as fckeditor)  fckeditor
326  knowledgeroot          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
327  moin (452599)          - moin 1.8.2-2 (embed; bug #452599)
328  karrigell (452598)          - karrigell <removed> (embed; bug #452598)
329  gforge-plugins-extra (fixed since 4.6.99+svn6225-1)          - gforge 4.6.99+svn6225-1 (embed)
330            - request-tracker3.8 <unfixed> (embed)
331    
332    ipatlas (not packaged in Debian)
333            - moodle <unfixed> (embed; bug #507185)
334    
335    libphp-phpmailer
336            - moodle <unfixed> (embed; bug #507185)
337            - mahara <unfixed> (embed)
338            - symfony <unfixed> (embed)
339            [etch] - phpgroupware <unfixed> (embed)
340            NOTE: phpgroupware-felamimail is only in etch
341            - egroupware <unfixed> (embed; bug #504283)
342            - glpi <unfixed>
343    
344    htmlArea (not packaged in Debian)
345            - moodle <unfixed> (embed)
346    
347    giflib:
348            - wine <unfixed> (embed; bug #466181)
349    
350    bennu (not packaged in Debian, http://bennu.sourceforge.net)
351            - moodle <unfixed> (embed)
352    
353    smarty:
354            - moodle 1.8.2-2 (embed; bug #471158)
355            - gallery2 2.2.5-2 (embed; bug #471160)
356            - mahara 0.9.2-2 (embed; bug #471201)
357            - gosa 2.4beta1-1 (embed; bug #471200)
358    
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
359  TinyMCE  TinyMCE
360  bennu          - wordpress 2.5.1-3 (embed; bug #478257)
361            - moodle <unfixed> (embed; bug #507185)
362            - knowledgeroot <unfixed> (embed)
363            - joomla <itp> (bug #326398)
364    
365    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
366            - scite <unfixed> (embed)
367            - qscintilla <unfixed> (embed)
368            - qscintilla2 <unfixed> (embed)
369            - geany <unfixed> (fork)
370            - anjuta <unfixed> (embed)
371    
372    libphp-adodb
373            - moodle <unfixed> (embed; bug #507185)
374            NOTE: also AdoDB-XML Schema
375            - gallery2 <unfixed> (embed)
376            - phppgadmin <unfixed> (embed)
377            - egroupware <unfixed> (embed)
378            - phpwiki <unfixed> (embed)
379            - torrentflux 2.0beta1-2 (embed)
380            - ipplan <unfixed> (embed)
381            - typo3-src <unfixed> (embed)
382            - cacti <unknown> (embed)
383            [sarge] - cacti <unfixed> (embed)
384            NOTE: dependency exists, but internal version is used
385            - gforge 4.7~rc2-6 (embed)
386            - mahara <unfixed> (embed)
387    
388    gzip
389            - linux-kernel <unfixed> (embed)
390            NOTE: lib/inflate.c
391            - klibc <unfixed> (embed)
392            NOTE: based on linux-kernel gzip code
393            - busybox <unfixed> (embed)
394    
395    neon
396            - cadaver 0.22.3+debian-1 (embed; bug #188381)
397            - gnome-vfs2 <unfixed> (embed; bug #395874)
398            [etch] - litmus <unfixed> (embed; #395875)
399            - litmus <removed> (embed; #395875)
400            [sarge] - screem <unfixed> (embed)
401            - sitecopy 1:0.16.3-5 (embed; bug #395876)
402            [etch] - tla <unfixed> (embed; bug #395877)
403            [sarge] - tla <unfixed> (embed; bug #395877)
404    
405    libmodplug
406            - gst-plugins-bad0.10 <unfixed> (embed)
407    
408    libvncserver
409            - vino <unfixed> (embed)
410    
411    putty
412            - filezilla <unfixed> (embed)
413    
414    tinyxml (not packaged in Debian)
415            - filezilla <unfixed>
416    
417    gv
418            - evince <unfixed> (embed)
419            NOTE: ps/ tree from gv 3.5.8
420            NOTE: evince-gtk is affected (a component of evince source package)
421    
422    libXbae
423            - paw <removed> (embed)
424            [etch] - paw <unfixed> (embed)
425    
426    libgtkhtml
427            - claws-mail-extra-plugins <unfixed> (fork)
428    
429    libXaw
430            - paw <removed> (embed)
431            [etch] - paw <unfixed> (embed)
432            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
433    
434    libgd2
435            - graphviz <unfixed> (embed)
436            NOTE: lib/gd seems to be 2.0.33
437            - wml <unfixed> (embed)
438            - libwmf <unfixed> (embed)
439            NOTE: derived from gd 1.6.3
440    
441    rar
442            - unrar-nonfree <unfixed> (embed)
443    
444    unrar-free (maybe this code is derived from the original rar, too?)
445            - clamav <unfixed> (embed)
446            NOTE: seems to be disabled in default config
447    
448    mplayer (DirectMedia Object loader)
449            - xine-lib <unfixed> (embed)
450            NOTE: src/libw32dll/
451            - vlc <unfixed> (embed)
452            NOTE: modules/codec/dmo/
453            - mplayer 1.0~rc2-20 (embed)
454    
455    libwpd (WordPerfect converter)
456            - openoffice.org <unfixed> (embed)
457    
458    fsplib (http://sourceforge.net/projects/fsp/)
459            - gftp <unfixed> (embed)
460            NOTE: lib/fsplib version 0.3
461    
462    sprng
463            - tree-puzzle <unfixed> (embed)
464    
465    librpcsecgss
466            - krb5 <unfixed> (embed)
467    
468    jasper
469            - ghostscript <unfixed> (embed)
470            - gs-gpl <unfixed> (embed)
471    
472    libiris
473            - psi <unfixed> (embed)
474            - kdenetwork <unfixed> (embed)
475            NOTE: kopete embeds libiris but links dynamically to libidn
476            - kdegames <unfixed> (embed)
477            NOTE: ksirk/kde4
478    
479    libidn
480            - monotone 0.43-1 (embed)
481            - psi <unfixed> (embed)
482            NOTE: psi embeds libiris which embeds libidn
483            - kdegames <unfixed> (embed)
484            NOTE: kdegames/kde4 embeds libiris which embeds libidn
485    
486    liblua
487            - monotone 0.43-1 (embed)
488            - nmap <unfixed> (embed; bug #527997)
489            NOTE: fixed upstream as of nmap svn rev13336.
490    
491    libbotan
492            - monotone 0.43-1 (embed)
493    
494    NetXX
495            - monotone 0.43-1 (embed)
496    
497    libgc
498            - mono <unfixed> (embed)
499    
500    lzma
501            - p7zip <unfixed> (embed)
502            - xz-utils <unfixed> (fork)
503    
504    lzo
505            - grub2 <unfixed> (embed)
506    
507    yassl
508            - mysql-dfsg-5.0 <unfixed> (embed)
509    
510    pax code
511            - tar <unfixed> (embed)
512            - cpio <unfixed> (embed)
513    
514    t1lib
515            - tetex-bin 2.0.2-1 (embed)
516            - texlive-bin <unknown> (embed)
517    
518    guichan
519            - boswars <unfixed> (embed)
520            NOTE: maintainer notified us, working on it
521    
522    tolua
523            - boswars <unfixed> (embed)
524            NOTE: maintainer notified us, working on it
525    
526    asio-dev
527            - luxrender <unfixed> (embed)
528            NOTE: maintainer notified us, working on it
529            NOTE: may be merged with boost "soon"
530    
531    xine-lib
532            - vlc <unfixed> (embed)
533            NOTE: only parts included in modules/access/rtsp
534    
535    netpbm
536            - tcl8.3 <unfixed> (embed)
537            - tcl8.4 <unfixed> (embed)
538            - tcl8.5 <unfixed> (embed)
539            NOTE: generic/tkImgGIF.c
540    
541    tk8.5
542            - tk8.0 <removed> (old-version)
543            - tk8.3 <unfixed> (old-version)
544            - tk8.4 <unfixed> (old-version)
545            - perl-tk <unfixable> (fork)
546    
547    samba
548            - mc 2:4.6.2~git20080311-1 (embed)
549            NOTE: maintainer is aware of this, currently searching a solution
550    
551    plib1.8.4c2
552            - boson <unfixed> (fork)
553            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
554    
555    fribidi
556            - quesoglc <unfixed> (embed)
557            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
558    
559    glew
560            - quesoglc <unfixed> (embed; bug #489341)
561            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
562    
563    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
564            - transcend <unfixed> (embed)
565            - cultivation <unfixed> (embed)
566            - passage <unfixed> (embed)
567            - gravitation <unfixed> (embed)
568    
569    tar
570            - libarchive <unfixed> (embed)
571            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
572    
573    cpio
574            - libarchive <unfixed> (embed)
575            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
576    
577    webkit
578            - qt4-x11 <unfixed> (embed)
579    
580    ftgl
581            - blender 2.46+dfsg-1 (embed)
582    
583    wv
584            - abiword <unfixed>
585    
586    qemu
587            - kvm <unfixed> (embed; bug #543159)
588            - xen-3 <unfixed> (embed)
589            - xen-unstable <unfixed> (embed)
590    
591    vgabios
592            - kvm <unfixed> (embed; bug #489442)
593    
594    bochs
595            - kvm <unfixed> (embed; bug #489442)
596    
597    speex
598            - vorbis-tools <unfixed> (embed)
599            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
600            - gst-plugins-good0.10 <unfixed> (embed)
601            - xine-lib <unfixed> (embed)
602            - libfishsound <unfixed> (embed)
603            - libannodex <unfixed> (embed)
604            - vlc <unfixed> (embed)
605            - xmms-speex <unfixed> (embed)
606            - libsdl-sound1.2 <unfixed> (embed)
607            - sweep <unfixed> (embed)
608    
609    libreadline
610            - magic <itp> (old-version)
611    
612    opcode
613            - ode <unfixed> (embed)
614            NOTE: opcode is not a package in debian, it is just embedded
615            NOTE: http://www.codercorner.com/Opcode.htm
616    
617    gimpact
618            - ode <unfixed> (embed)
619            NOTE: gimpact is not a package in debian, it is just embedded
620            NOTE: http://gimpact.sf.net
621    
622    mochikit
623            - mahara <unfixed> (embed)
624            NOTE: they require extra patches, still unmerged upstream
625            - ntop <unfixed> (embed)
626            - coherence <unfixed> (embed)
627            NOTE: python-coherence
628            - paste <unfixed> (embed)
629            NOTE: python-paste
630            - turbogears <unfixed> (embed)
631            NOTE: python-turbogears
632            - plone3 <unfixed> (embed)
633            NOTE: zope-plone3
634    
635    prototypejs
636            - netbeans-ide <unfixed> (embed)
637            - auth2db <unfixed> (embed)
638            - webcit <unfixed> (embed)
639            NOTE: citadel-webcit
640            - asterisk <unfixed> (embed)
641            - doc-iana <unfixed> (embed)
642            - libaws <unfixed> (embed)
643            NOTE: libaws-doc
644            - libgettext-ruby <unfixed> (embed)
645            NOTE: libgettext-ruby-data
646            - libjson-ruby <unfixed> (embed)
647            NOTE: libjson-ruby-doc
648            - lucene2 <unfixed> (embed)
649            NOTE: liblucene2-java-doc
650            - libopenid-ruby <unfixed> (embed)
651            - solr <unfixed> (embed)
652            NOTE: solr-common
653            - glpi <unfixed> (embed)
654            - mnemo2 <unfixed> (embed)
655            - nag2 <unfixed> (embed)
656            - knowledgeroot <unfixed> (embed)
657            - mediatomb <unfixed> (embed)
658            NOTE: mediatomb-common
659            - mt-daapd <unfixed> (embed)
660            - op-panel <unfixed> (embed)
661            - ebug-http <unfixed> (embed)
662            - phpgedview <removed> (embed)
663            - poker-network <unfixed> (embed)
664            NOTE: poker-web
665            - webhelpers <unfixed> (embed)
666            NOTE: python-webhelpers
667            - qwik <unfixed> (embed)
668            - rails <unfixed> (embed)
669            - typo3-src <unfixed> (embed)
670            - wordpress 2.5.0-2 (embed)
671            - zope <unfixed> (embed)
672            NOTE: zope-plone3
673            - smokeping <unfixed> (embed)
674            - ampache 3.4.1-2 (embed)
675            - exaile <unfixed> (embed)
676            - hobix <unfixed> (embed)
677            - pixelpost <unfixed> (embed)
678            - symfony <unfixed> (embed)
679            NOTE: it's been said that there are custom changes
680            - zabbix <unfixed> (embed)
681            NOTE: zabbix-frontend-php
682            - turba2 <unfixed> (embed)
683    
684    gdb
685            - insight <unfixed> (embed)
686    
687    e2fsprogs
688            - ldiskfsprogs <unfixable> (fork)
689    
690    quazip (not packaged in Debian)
691            - qcake <unfixed> (embed)
692            NOTE: starting with upstream version 0.6.4
693    
694    exo
695            - pcmanfm <unfixed> (embed; bug #499677)
696            NOTE: slightly modified source code
697    
698    java
699            - openjdk-6 <unfixed>
700            - sun-java5 <unfixed>
701            - sun-java6 <unfixed>
702    
703    libphp-snoopy
704            - ampache 3.4.1-2 (embed; bug #504169)
705            - mahara 1.0.5-2 (embed; bug #504170)
706            - pixelpost 1.7.1-5 (embed; bug #504171)
707            - mediamate 0.9.3.6-5 (embed; bug #504172)
708            - opendb <removed> (embed; bug #504173)
709            [etch] - opendb <unfixed> (embed; bug #504173)
710            - wordpress 2.5.1-9 (embed; bug #443948)
711            - moodle <unfixed> (embed; bug #507185)
712            [etch] - phpgroupware <unfixed> (embed)
713            NOTE: phpgroupware-felamimail
714            - magpierss 0.72-3 (embed; bug #431089)
715    
716    jquery
717            - zekr <unfixed> (embed)
718            - wordpress <unknown> (embed)
719            - yocto-reader <unfixed> (embed)
720            - textpattern <unfixed> (embed)
721            - genshi 0.5.1-1 (embed)
722            NOTE: compressed file under examples/ dir
723            - prewikka <unfixed> (embed)
724            - libramaze-ruby <unfixed> (embed)
725            - drupal5 <unfixed> (embed)
726            - b2evolution <unfixed> (embed)
727            - wesnoth <unfixed> (embed)
728    
729    tablesorter (jquery plugin, not packaged yet)
730            - wesnoth <unfixed> (embed)
731    
732    kses
733            - wordpress <unfixed> (embed; bug #504242)
734            NOTE: their copy has all methods renamed to wp_<foo>
735            NOTE: kses isn't in Debian, RFP: #504240
736            - moodle <unfixed> (embed; bug #507185)
737            - egroupware <unfixed> (embed)
738    
739    magpierss
740            - wordpress <unfixed> (embed; bug #504242)
741            - moodle <unfixed>
742    
743    php-gettext
744            - wordpress 2.8.4-1 (embed; bug #504242)
745    
746    libphp-ixr (name may change, it is the Incutio XML-RPC)
747            - wordpress <unfixed> (embed; bug #504242)
748            NOTE: libphp-ixr isn't in Debian, RFP: #504236
749            - dokuwiki <unfixed> (embed)
750            - textpattern <unfixed> (embed)
751    
752    libphp-cas
753            - glpi <unfixed> (embed)
754            - moodle <unfixed> (embed; bug #505984)
755    
756    scriptaculous
757            - glpi <unfixed> (embed)
758            - libaws <unfixed> (embed)
759            NOTE: libaws-doc
760            - op-panel <unfixed> (embed)
761            - symfony <unfixed> (embed)
762            NOTE: maintainer says there are extra incompatible changes required
763            - pixelpost <unfixed> (embed)
764            - webhelpers <unfixed> (embed)
765            NOTE: python-webhelpers
766            - qwik <unfixed> (embed)
767            - smokeping <unfixed> (embed)
768            - turba2 <unfixed> (embed)
769            - typo3-src 4.2.3-1 (embed)
770    
771    libmarkdown-php
772            - moodle <unfixed> (embed; bug #507185)
773            - pixelpost <unfixed> (embed)
774    
775    php-openid
776            - wordpress-openid <itp> (embed)
777    
778    geshi
779            - dokuwiki 0.0.20080505-3.1 (embed)
780            - pgfouine 1.0-1.1 (embed)
781            - websvn 2.1.0-1 (embed)
782    
783    webcalendar
784            - gforge 4.7~rc2-6 (embed; bug #504758)
785    
786    libical
787            - kdepim <unfixed> (fork)
788            - kdepimlibs <unfixed> (fork)
789            NOTE: fixed in KDE4 post 4.1.x series
790            - claws-mail-extra-plugins <unfixed> (fork)
791    
792    libltdl3
793            - kdelibs <unfixed> (embed)
794            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
795            - synfig <unfixed> (embed)
796    
797    harfbuzz
798            - qt4-x11 <unfixed> (embed)
799    
800    libzip
801            - php5 <unfixed> (fork)
802            - odt2txt <unfixed> (embed; bug #523808)
803    
804    json.php (not packaged; should be replaced with php's built-in functions)
805            - moodle <unfixed>
806            - yui <unfixed>
807            - gallery2 <unfixed>
808            - dokuwiki <unfixed>
809            - typo3-src <unfixed>
810    
811    php-fpdf
812            - tcpdf <itp> (fork)
813            - moodle <unfixed>
814            - phpwiki <unfixed>
815            - egroupware <unfixed>
816            - ldap-account-manager <unfixed> (fork)
817    
818    tcpdf (itp: #495985)
819            - moodle <unfixed>
820            - phpmyadmin <unfixed>
821    
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
822  typo3  typo3
823  moodle          - moodle <unfixed>
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
824    
825  gzip:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
826  linux-kernel (lib/inflate.c)          - moodle <unfixed>
827  klibc (based on linux-kernel gzip code)          - gosa <unfixed>
 busybox  
828    
829  neon:  php-ole (itp: #487558)
830  cadaver (all, but being worked on: #188381)          - moodle <unfixed>
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
831    
832  libmodplug:  pieforms (http://www.catalyst.net.nz)
833  gst-plugins-bad0.10          - mahara <unfixed>
834    
835  libvncserver:  savant2 (http://phpsavant.com)
836  vino          - egroupware <unfixed>
837    
838  putty:  rssparser (http://nwow.org)
839  filezilla          - egroupware <unfixed>
840            - phpgroupware <unfixed>
841    
842  tinyxml (not packaged in Debian):  lcms
843  filezilla          - openjdk-6 <unfixed> (fork)
844    
845  gv:  libphp-phplayersmenu
846  evince (ps/ tree from gv 3.5.8)          - diogenes <unfixed>
847  evince-gtk (not packaged in Debian)          - phpldapadmin <unfixed>
848    
849  libXbae:  libphp-pclzip
850  libpawlib2-lesstif package (from Cernlib)          - docvert <unfixed>
851            - moodle <unfixed>
852            - egroupware <unfixed>
853    
854  libXaw:  libphp-simplepie
855  libpawlib2-lesstif package (from Cernlib)          - dokuwiki <unfixed>
856    
857  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  libphp-jpgraph
858            - egroupware <unfixed>
859    
860  libgd2:  php-simpletest
861  graphviz (lib/gd seems to be 2.0.33)          - moodle <unfixed>
862    
863  rar:  libpng
864  unrar-nonfree          - iceweasel <not-affected> (uses xulrunner)
865            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
866            - iceape 1.0.13~pre080614i-0etch1 (embed)
867            - xulrunner 1.9.0.13-1 (embed)
868            [lenny] - xulrunner 1.9.0.11-0lenny1
869            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
870    
871  unrar-free: (maybe this code is derived from the original rar, too?)  irssi
872  clamav (seems to be disabled in default config)          - silc-client <unfixed> (embed)
873            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
874    
875  mplayer (DirectMedia Object loader):  extc
876  xine-lib (src/libw32dll/)          - mtasc <unfixed> (embed)
877  vlc (modules/codec/dmo/)          - haxe <unfixed> (embed)
878    
879  libwpd (WordPerfect converter):  swflib
880  openoffice.org          - mtasc <unfixed> (embed)
881            - haxe <unfixed> (embed)
882    
883  fsplib (http://sourceforge.net/projects/fsp/):  libitext-java
884  gftp (lib/fsplib version 0.3)          - bouncycastle 2.1.4-1 (embed)
885    
886  librpcsecgss:  python-ply
887  krb5          - pyke <unfixed> (embed)
888    
889  jasper:  libdumbnet (libdnet upstream)
890  ghostscript          - nmap <unfixed> (fork)
 gs-gpl  
891    
892  libidn:  gcc-4.4
893  monotone          - gcc-mingw32 <unfixed> (embed)
894    
895  liblua:  camlimages
896  monotone          - advi <unfixed> (embed)
897    
898  libbotan:  memcached
899  montone          - memcachedb <unfixed> (embed)
900    
901  NetXX:  yajl
902  monotone          - argyll <unfixed> (embed; bug #544223)
903            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
904    
905  libgc:  libept
906  mono          - adept <unfixed> (embed; bug #540649)
907    
908  lzma:  libvorbis
909  p7zip          - iceweasel <not-affected> (uses xulrunner)
910            - xulrunner <not-affected> (introduced in 1.9.1)
911            TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]
912    
913  lzo:  cairo
914  grub2          - iceweasel <not-affected> (uses xulrunner)
915            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
916    
917  pax code:  php-net-dnsbl
918  tar          - serendipity <unfixed> (embed)
919  cpio  
920    php-onyx-rss
921            - serendipity <unfixed> (embed)
922    
923    php-text-wiki
924            - serendipity <unfixed> (embed)
925    
926    php-xml-rpc
927            - serendipity <unfixed> (embed)
928    
929    polarssl (does not have a shared library)
930            - pdkim <itp> (embed; bug #543150)
931            - xyssl <old-version>
932    
933    pidgin
934            - gaim <old-version>
935    
936    icu
937            - webkit 1.0.1-1 (embed; bug #547214)
938            - texlive-bin <unfixed> (fork)
939            NOTE: texlive upstream working with icu upstream to merge their changes
940    
941    cyrus-imapd-2.2
942            - kolab-cyrus-imapd <unfixed> (fork)
943            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
944    
945    python-cxx-dev
946            - freecad <unfixed> (embed; bug #547936)
947    
948    libzipios++-dev
949            - freecad <unfixed> (embed; bug #547941)
950    
951    linux-2.6
952            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
953    
954  t1lib:  libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
955  tetex-bin (links to system t1lib since 2.0.2)          - kvm <unfixed> (embed) [./libfdt/*]
 texlive-bin (links to system t1lib)  
956    
957    qweb (not packaged)
958            - ajaxterm <unfixed>

Legend:
Removed from v.7695  
changed lines
  Added in v.12961

  ViewVC Help
Powered by ViewVC 1.1.5