/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1758 by jmm-guest, Thu Sep 1 14:36:12 2005 UTC revision 13150 by jwilk-guest, Thu Oct 29 20:44:13 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
7  kdegraphics/kpdf  
8  tetex-bin  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12  zlib code: (separate between 1.2 and 1.1)  
13  dpkg  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  rsync          <itp>, <not-affected>, <unknown> if the version number can not
15  mozilla-firefox          be determined, or <unfixable> for unavoidable cases (e.g., forks
16  mozilla(?)          that add real value)
17  Linux kernels  sort: static (linking statically against a lib)
18          embed (embedding a copy of the library into another source package)
19          fork (the package is not just embedding code but it is a fork and
20  libgadu/ekg:              thus might share parts of the source code)
21  centericq        old-version (the package is an older version of essentially
22  gaim                     the same code)
23  kopete (ships the code, but links dynamically in the Debian package)  
24  kadu (not packaged in Debian)  The srcpkg might be some string to identify the code if there is no
25  GNU gadu (not packaged in Debian)  specific source package.
26    
27    Everything up to the next line is ignored.
28  xmlrpc: (which package is the "origin" of this code?)  ---BEGIN
29  drupal  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30  phpgroupware          NOTE: Fixed packages link to poppler library unless otherwise noted
31  egroupware          - pdftohtml <unknown>
32  phpwiki          [sarge] - pdftohtml <unfixed>
33  php4 (php-pear, IIRC this was reorganized some weeks ago?)          [etch] - pdftohtml <unfixed>
34  tikiwiki (not packaged in Debian)          NOTE: has been replaced by poppler-utils
35            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36            - texlive-base 3.0-12 (embed)
37  shtool: (affects build-time only)          - texlive-bin 2007-1 (embed)
38  mysql-ocaml          NOTE: links to poppler
39  php4          - koffice <unfixed> (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42  mozilla:          - ipe <unfixed> (embed)
43  mozilla-firefox          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44  mozilla-thunderbird          - ruby-gnome2 <unknown> (embed)
45  nvu          NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48  xli:          - poppler <unfixable> (fork)
49  xloadimage  
50    ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52  lesstif: (beware: two different lesstif APIs supported in one package, 1.2 discarded upstream)          NOTE: discussion in #458152
53  openmotif  
54  xfree86/xorg (in libxpm, still the case with x.org?  libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57  kerberized apps with BSD origin:  lrmi
58  krb4          - read-edid 2.0.0-1 (embed; bug #495131)
59  krb5  
60  heimdal  peercast
61            - gnome-peercast <removed> (embed)
62            [etch] - gnome-peercast <unfixed> (embed)
63  grip: (which pkg is the origin?)  
64  libcdaudio  silc-toolkit
65  grip          - silc-client 1.1~beta6-1 (embed)
66  gnome-vfs (vfs2 as well?)  
67    icclib
68            - ghostscript <unfixed> (embed)
69  fudforum:          - argyll <unfixed> (embed)
70  phpgroupware-fudforum  
71  egroupware-fudforum  dietlibc
72            - ccontrol 0.9.1+20071204-1 (static)
73    
74  cvs:  libmikmod
75  gcvs (at least an additional script is included, check if there's more)          - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77  pcre:  
78  gnumeric(?)  libiax
79  python          - iaxmodem <unfixable> (embed; bug #548885)
80  php4 (src included, but Debian package links dynamically)  
81    spandsp
82            - iaxmodem <unfixable> (embed; bug #548885)
83  tiff:  
84  wxpythongtk (check, which debian pkg this is in)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85  older kdegraphics/kpdf releases < 3.3 embedded a copy          - dpkg <unfixed> (embed)
86            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87            - rsync <unfixed> (embed)
88            NOTE: somehow derived code base
89            - mono <unfixed> (embed)
90            TODO: check mozilla
91            - Linux kernels <unfixed> (embed)
92            - pvpgn 1.7.8-2 (embed)
93            - mrtg 2.12.2-1 (embed)
94            - rpm <unknown> (embed)
95            NOTE: pinged anibal since when rpm was fixed
96            - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98            - tra <unfixed>
99            - sash <unfixed>
100            - nsis <unfixed>
101            - mseide-msegui <unfixed>
102            NOTE: mseide
103            - mirrordir <unfixed>
104            - poco <unfixed>
105            - klibc <unfixed>
106            - ghostscript <unfixed>
107            - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112            - perl <unfixed>
113            - paraview <unfixed>
114            - gcvs <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125            - gamera 3.2.3-1 (embed)
126    
127    dulwich
128            - hg-git 0.1.0-1 (embed; bug #541996)
129    
130    libvigraimpex
131            - hugin <unfixed> (embed; bug #542259)
132            - enblend-enfuse <unfixed> (embed; bug #542258)
133            - gamera 3.2.3-1 (embed)
134    
135    libbz2
136            - dpkg <unfixed> (static)
137    
138    libgadu
139            - centericq <unfixed> (embed)
140            - pidgin <unfixed> (embed)
141            NOTE: pidgin links dynamically against libgadu; that should be fixed, then???
142            - kdenetwork 4:3.3.2-5 (embed)
143            NOTE: from kdenetwork: kopete
144            - ekg 1:1.8~rc0-1 (embed)
145            - kadu 0.6.0.2-3 (embed; bug #504430)
146            - gadu <itp> (embed)
147    
148    xmlrpc (which package is the "origin" of this code?)
149            - drupal <unfixed> (embed)
150            - phpgroupware <unfixed> (embed)
151            - egroupware <unfixed> (embed)
152            - phpwiki <unfixed> (embed)
153            - php4 <unfixed> (embed)
154            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
155    
156    shtool (affects build-time only)
157            - mysql-ocaml <unfixed> (embed)
158            - php4 <unfixed> (embed)
159    
160    iceape
161            - iceweasel <unfixed> (fork)
162            - icedove <unfixed> (fork)
163            - xulrunner <unfixed> (fork)
164            - kompozer <unfixed> (embed; bug #532168)
165    
166    xli
167            - xloadimage <unfixed> (embed)
168    
169    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
170            - openmotif <unfixed> (embed)
171            - libxpm <unfixed> (embed)
172    
173    kerberized apps with BSD origin
174            - krb4 <removed> (embed)
175            - krb5 <unfixed> (embed)
176            - heimdal <unfixed> (embed)
177    
178    grip (which pkg is the origin?)
179            - libcdaudio <unfixed>
180            - grip <unfixed>
181            - gnome-vfs <unfixed>
182            TODO: check vfs2 as well
183    
184    fudforum
185            [etch] - phpgroupware <unfixed> (embed)
186            NOTE: phpgroupware-fudforum
187            [sarge] - egroupware-fudforum <removed> (embed)
188    
189    libbsd
190            - rdate 1:1.2-3 (embed)
191            - atheme-services <unfixed>
192            - libbsd-arc4random-perl <unfixed>
193            - isakmpd <unfixed>
194    
195    cvs
196            - gcvs <unfixed> (embed)
197            NOTE: see cvsunix/src in tarball
198    
199    pcre
200            - python* <unfixed> (embed)
201            - php4 <unknown> (embed)
202            - analog 2:5.23-0woody1 (embed)
203            - goffice <unfixed> (embed)
204            NOTE: libgoffice-*
205            - vfu 4.06-4.1 (embed; bug #450754)
206            - tf5 5.0beta7-1 (embed)
207            - monotone 0.43-1 (embed)
208            NOTE: this only affects versions >= 0.37
209            - glib2.0 2.15.2-1 (embed)
210            - apache2 2.0.53-4 (embed)
211            - exim4 4.10-0.srh20.12 (embed)
212            - yacas <unfixed> (embed)
213            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
214            - gtamsanalyzer.app 0.42-5 (embed)
215            - tin <unknown> (embed)
216            - kazehakase 0.5.2-1
217            - webkit 1.0.1-1 (embed)
218            - qt4-x11 <unfixed> (embed)
219            NOTE: embedded via webkit copy
220            - erlang <unfixed> (embed)
221    
222    tiff
223            - wxwindows2.4 2.2.1 (embed)
224            - gamera 3.2.3-1 (embed)
225    
226    uudeview
227            - libconvert-uulib-perl <unfixed> (embed)
228            - pan <unfixed> (embed)
229    
230    sqlite (not affected by security vulnerabilities so far)
231            - amarok <unfixed> (embed)
232            - monotone 0.43-1 (embed)
233            - iceweasel <unfixed> (embed)
234    
235    util-linux/mount
236            - loop-aes-utils <unfixed> (embed)
237            NOTE: contains code from util-linux' mount in the mount-aes-udeb
238    
239    sylpheed
240            - sylpheed-claws <unfixed> (fork)
241    
242    phpsysinfo
243            - egroupware <unfixed> (embed)
244            - phpgroupware <unfixed> (embed)
245    
246    phpldapadmin
247            [sarge] - egroupware <unfixed> (embed)
248            NOTE: removed from egroupware after sarge
249    
250    chmlib
251            - kchmviewer <unknown> (embed)
252    
253    ffmpeg (libavcodec/libavformat)
254            - mplayer 1.0~rc2-14 (embed; bug #395252)
255            - kino 1.0.0-1
256            - vlc <not-affected> (Links dynamically since initial release)
257            - smilutils 0.3.0-10
258            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
259            - motion 3.1.19-1
260            - gstreamer0.10-ffmpeg 0.10.3-2
261            - xmovie <removed> (static)
262            TODO: gimp-gap (potentially using ffmpeg code as well)
263            - avifile <unfixed> (embed; bug #538750)
264    
265    faad2
266            - mplayer 1.0~rc2-20 (embed)
267            - avifile <unfixed> (embed; bug #538750)
268    
269    libmad (MPEG decoding lib)
270            - xine-lib <unfixed> (embed)
271            - avifile <unfixed> (embed) [./plugins/libmad/*]
272            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
273    
274    libdts
275            - xine-lib <unfixed> (embed)
276    
277    flac
278            - xine-lib <unfixed> (embed)
279    
280    liba52
281            - a52dec <unfixed> (embed)
282            - xine-lib <unfixed> (embed)
283    
284    libmpeg2
285            - mpeg2dec <unfixed> (embed)
286            - xine-lib <unfixed> (embed)
287    
288    libntlm
289            - wget <unfixed> (fork; bug #550436)
290            - curl <unfixed> (fork; bug #550437)
291            - cntlm <unfixed> (fork; bug #550438)
292    
293    uw-imap
294            - pine <unfixed> (embed)
295            - alpine <unfixed> (embed)
296    
297    imagemagick
298            - graphicsmagick <unfixed> (fork)
299    
300    python-urlgrabber
301            - mercurial <unfixed> (embed; bug #531062)
302            - w3af <unfixed> (embed)
303            [experimental] - harvestman <unfixed> (embed)
304    
305    beautifulsoup
306            - python-mechanize <unfixed> (embed)
307            - zope2.11 <unfixed> (embed)
308            - twill <unknown> (embed)
309    
310    halibut
311            - nsis <unfixed> (fork)
312    
313    libghttp
314            - hotway <unfixed> (embed)
315    
316    libsndfile
317            - ardour 1:2.7.1-1 (embed)
318    
319    glibmm2.4
320            - ardour 1:2.7.1-1 (embed)
321    
322    libgnomecanvasmm2.6
323            - ardour 1:2.7.1-1 (embed)
324    
325    libsigc++-2.0
326            - ardour 1:2.7.1-1 (embed)
327    
328    soundtouch
329            - ardour 1:2.7.1-1 (embed)
330    
331    libmms
332            - xine-lib <unfixed> (embed)
333            - mimms <unfixed> (embed)
334    
335    fckeditor
336            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
337            - moin 1.8.2-2 (embed; bug #452599)
338            - karrigell <removed> (embed; bug #452598)
339            - gforge 4.6.99+svn6225-1 (embed)
340            - request-tracker3.8 <unfixed> (embed)
341    
342    ipatlas (not packaged in Debian)
343            - moodle <unfixed> (embed; bug #507185)
344    
345    libphp-phpmailer
346            - moodle <unfixed> (embed; bug #507185)
347            - mahara <unfixed> (embed)
348            - symfony <unfixed> (embed)
349            [etch] - phpgroupware <unfixed> (embed)
350            NOTE: phpgroupware-felamimail is only in etch
351            - egroupware <unfixed> (embed; bug #504283)
352            - glpi <unfixed>
353    
354    htmlArea (not packaged in Debian)
355            - moodle <unfixed> (embed)
356    
357    giflib
358            - wine <unfixed> (embed; bug #466181)
359    
360    bennu (not packaged in Debian, http://bennu.sourceforge.net)
361            - moodle <unfixed> (embed)
362    
363    smarty
364            - moodle 1.8.2-2 (embed; bug #471158)
365            - gallery2 2.2.5-2 (embed; bug #471160)
366            - mahara 0.9.2-2 (embed; bug #471201)
367            - gosa 2.4beta1-1 (embed; bug #471200)
368    
369    TinyMCE
370            - wordpress 2.5.1-3 (embed; bug #478257)
371            - moodle <unfixed> (embed; bug #507185)
372            - knowledgeroot <unfixed> (embed)
373            - joomla <itp> (bug #326398)
374    
375    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
376            - scite <unfixed> (embed)
377            - qscintilla <unfixed> (embed)
378            - qscintilla2 <unfixed> (embed)
379            - geany <unfixed> (fork)
380            - anjuta <unfixed> (embed)
381    
382    libphp-adodb
383            - moodle <unfixed> (embed; bug #507185)
384            NOTE: also AdoDB-XML Schema
385            - gallery2 <unfixed> (embed)
386            - phppgadmin <unfixed> (embed)
387            - egroupware <unfixed> (embed)
388            - phpwiki <unfixed> (embed)
389            - torrentflux 2.0beta1-2 (embed)
390            - ipplan <unfixed> (embed)
391            - typo3-src <unfixed> (embed)
392            - cacti <unknown> (embed)
393            [sarge] - cacti <unfixed> (embed)
394            NOTE: dependency exists, but internal version is used
395            - gforge 4.7~rc2-6 (embed)
396            - mahara <unfixed> (embed)
397    
398    gzip
399            - linux-kernel <unfixed> (embed)
400            NOTE: lib/inflate.c
401            - klibc <unfixed> (embed)
402            NOTE: based on linux-kernel gzip code
403            - busybox <unfixed> (embed)
404    
405    neon
406            - cadaver 0.22.3+debian-1 (embed; bug #188381)
407            - gnome-vfs2 <unfixed> (embed; bug #395874)
408            [etch] - litmus <unfixed> (embed; #395875)
409            - litmus <removed> (embed; #395875)
410            [sarge] - screem <unfixed> (embed)
411            - sitecopy 1:0.16.3-5 (embed; bug #395876)
412            [etch] - tla <unfixed> (embed; bug #395877)
413            [sarge] - tla <unfixed> (embed; bug #395877)
414    
415    libmodplug
416            - gst-plugins-bad0.10 <unfixed> (embed)
417    
418    libvncserver
419            - vino <unfixed> (embed)
420    
421    putty
422            - filezilla <unfixed> (embed)
423    
424    tinyxml (not packaged in Debian)
425            - filezilla <unfixed>
426    
427    gv
428            - evince <unfixed> (embed)
429            NOTE: ps/ tree from gv 3.5.8
430            NOTE: evince-gtk is affected (a component of evince source package)
431    
432    libXbae
433            - paw <removed> (embed)
434            [etch] - paw <unfixed> (embed)
435    
436    libgtkhtml
437            - claws-mail-extra-plugins <unfixed> (fork)
438    
439    libXaw
440            - paw <removed> (embed)
441            [etch] - paw <unfixed> (embed)
442            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
443    
444    libgd2
445            - graphviz <unfixed> (embed)
446            NOTE: lib/gd seems to be 2.0.33
447            - wml <unfixed> (embed)
448            - libwmf <unfixed> (embed)
449            NOTE: derived from gd 1.6.3
450    
451    rar
452            - unrar-nonfree <unfixed> (embed)
453    
454    unrar-free (maybe this code is derived from the original rar, too?)
455            - clamav <unfixed> (embed)
456            NOTE: seems to be disabled in default config
457    
458    mplayer (DirectMedia Object loader)
459            - xine-lib <unfixed> (embed)
460            NOTE: src/libw32dll/
461            - vlc <unfixed> (embed)
462            NOTE: modules/codec/dmo/
463            - mplayer 1.0~rc2-20 (embed)
464    
465    libwpd (WordPerfect converter)
466            - openoffice.org <unfixed> (embed)
467    
468    fsplib (http://sourceforge.net/projects/fsp/)
469            - gftp <unfixed> (embed)
470            NOTE: lib/fsplib version 0.3
471    
472    sprng
473            - tree-puzzle <unfixed> (embed)
474    
475    librpcsecgss
476            - krb5 <unfixed> (embed)
477    
478    jasper
479            - ghostscript <unfixed> (embed)
480            - gs-gpl <unfixed> (embed)
481    
482    libiris
483            - psi <unfixed> (embed)
484            - kdenetwork <unfixed> (embed)
485            NOTE: kopete embeds libiris but links dynamically to libidn
486            - kdegames <unfixed> (embed)
487            NOTE: ksirk/kde4
488    
489    libidn
490            - monotone 0.43-1 (embed)
491            - psi <unfixed> (embed)
492            NOTE: psi embeds libiris which embeds libidn
493            - kdegames <unfixed> (embed)
494            NOTE: kdegames/kde4 embeds libiris which embeds libidn
495    
496    liblua
497            - monotone 0.43-1 (embed)
498            - nmap 5.00-1 (embed; bug #527997)
499            [lenny] - nmap <unfixed> (embed; bug #527997)
500    
501    libbotan
502            - monotone 0.43-1 (embed)
503    
504    NetXX
505            - monotone 0.43-1 (embed)
506    
507    libgc
508            - mono <unfixed> (embed)
509    
510    lzma
511            - p7zip <unfixed> (embed)
512            - xz-utils <unfixed> (fork)
513    
514    lzo
515            - grub2 <unfixed> (embed)
516    
517    yassl
518            - mysql-dfsg-5.0 <unfixed> (embed)
519    
520    pax code
521            - tar <unfixed> (embed)
522            - cpio <unfixed> (embed)
523    
524    t1lib
525            - tetex-bin 2.0.2-1 (embed)
526            - texlive-bin <unknown> (embed)
527    
528    guichan
529            - boswars <unfixed> (embed)
530            NOTE: maintainer notified us, working on it
531    
532    tolua
533            - boswars <unfixed> (embed)
534            NOTE: maintainer notified us, working on it
535    
536    asio-dev
537            - luxrender <removed> (embed)
538    
539    xine-lib
540            - vlc <unfixed> (embed)
541            NOTE: only parts included in modules/access/rtsp
542    
543    netpbm
544            - tcl8.3 <unfixed> (embed)
545            - tcl8.4 <unfixed> (embed)
546            - tcl8.5 <unfixed> (embed)
547            NOTE: generic/tkImgGIF.c
548    
549    tk8.5
550            - tk8.0 <removed> (old-version)
551            - tk8.3 <unfixed> (old-version)
552            - tk8.4 <unfixed> (old-version)
553            - perl-tk <unfixable> (fork)
554    
555    samba
556            - mc 2:4.6.2~git20080311-1 (embed)
557            NOTE: maintainer is aware of this, currently searching a solution
558    
559    plib1.8.4c2
560            - boson <unfixed> (fork)
561            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
562    
563    fribidi
564            - quesoglc <unfixed> (embed)
565            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
566    
567    glew
568            - quesoglc <unfixed> (embed; bug #489341)
569            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
570    
571    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
572            - transcend <unfixed> (embed)
573            - cultivation <unfixed> (embed)
574            - passage <unfixed> (embed)
575            - gravitation <unfixed> (embed)
576    
577    tar
578            - libarchive <unfixed> (embed)
579            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
580    
581    cpio
582            - libarchive <unfixed> (embed)
583            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
584    
585    webkit
586            - qt4-x11 <unfixed> (embed)
587    
588    ftgl
589            - blender 2.46+dfsg-1 (embed)
590    
591    wv
592            - abiword <unfixed>
593    
594    qemu
595            - kvm <unfixed> (embed; bug #543159)
596            - xen-3 <unfixed> (embed)
597            - xen-unstable <unfixed> (embed)
598    
599    vgabios
600            - kvm <unfixed> (embed; bug #489442)
601    
602    bochs
603            - kvm <unfixed> (embed; bug #489442)
604    
605    speex
606            - vorbis-tools <unfixed> (embed)
607            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
608            - gst-plugins-good0.10 <unfixed> (embed)
609            - xine-lib <unfixed> (embed)
610            - libfishsound <unfixed> (embed)
611            - libannodex <unfixed> (embed)
612            - vlc <unfixed> (embed)
613            - xmms-speex <unfixed> (embed)
614            - libsdl-sound1.2 <unfixed> (embed)
615            - sweep <unfixed> (embed)
616    
617    libreadline
618            - magic <itp> (old-version)
619    
620    opcode
621            - ode <unfixed> (embed)
622            NOTE: opcode is not a package in debian, it is just embedded
623            NOTE: http://www.codercorner.com/Opcode.htm
624    
625    gimpact
626            - ode <unfixed> (embed)
627            NOTE: gimpact is not a package in debian, it is just embedded
628            NOTE: http://gimpact.sf.net
629    
630    mochikit
631            - mahara <unfixed> (embed)
632            NOTE: they require extra patches, still unmerged upstream
633            - ntop <unfixed> (embed)
634            - coherence <unfixed> (embed)
635            NOTE: python-coherence
636            - paste <unfixed> (embed)
637            NOTE: python-paste
638            - turbogears <unfixed> (embed)
639            NOTE: python-turbogears
640            - plone3 <unfixed> (embed)
641            NOTE: zope-plone3
642    
643    prototypejs
644            - netbeans-ide 6.0.1+dfsg-2 (embed)
645            - auth2db <unfixed> (embed)
646            - webcit <unfixed> (embed)
647            NOTE: citadel-webcit
648            - asterisk <unfixed> (embed)
649            - doc-iana <unfixed> (embed)
650            - libaws <unfixed> (embed)
651            NOTE: libaws-doc
652            - libgettext-ruby <unfixed> (embed)
653            NOTE: libgettext-ruby-data
654            - libjson-ruby <unfixed> (embed)
655            NOTE: libjson-ruby-doc
656            - lucene2 <unfixed> (embed)
657            NOTE: liblucene2-java-doc
658            - libopenid-ruby <unfixed> (embed)
659            - solr <unfixed> (embed)
660            NOTE: solr-common
661            - glpi <unfixed> (embed)
662            - mnemo2 <unfixed> (embed)
663            - nag2 <unfixed> (embed)
664            - knowledgeroot <unfixed> (embed)
665            - mediatomb <unfixed> (embed)
666            NOTE: mediatomb-common
667            - mt-daapd <unfixed> (embed)
668            - op-panel <unfixed> (embed)
669            - ebug-http <unfixed> (embed)
670            - phpgedview <removed> (embed)
671            - poker-network <unfixed> (embed)
672            NOTE: poker-web
673            - webhelpers <unfixed> (embed)
674            NOTE: python-webhelpers
675            - qwik <unfixed> (embed)
676            - rails <unfixed> (embed)
677            - typo3-src <unfixed> (embed)
678            - wordpress 2.5.0-2 (embed)
679            - zope <unfixed> (embed)
680            NOTE: zope-plone3
681            - smokeping <unfixed> (embed)
682            - ampache 3.4.1-2 (embed)
683            - exaile <unfixed> (embed)
684            - hobix <unfixed> (embed)
685            - pixelpost <unfixed> (embed)
686            - symfony <unfixed> (embed)
687            NOTE: it's been said that there are custom changes
688            - zabbix <unfixed> (embed)
689            NOTE: zabbix-frontend-php
690            - turba2 <unfixed> (embed)
691    
692    gdb
693            - insight <unfixed> (embed)
694    
695    e2fsprogs
696            - ldiskfsprogs <unfixable> (fork)
697    
698    quazip (not packaged in Debian)
699            - qcake <unfixed> (embed)
700            NOTE: starting with upstream version 0.6.4
701    
702    exo
703            - pcmanfm <unfixed> (embed; bug #499677)
704            NOTE: slightly modified source code
705    
706    java
707            - openjdk-6 <unfixed>
708            - sun-java5 <unfixed>
709            - sun-java6 <unfixed>
710    
711    libphp-snoopy
712            - ampache 3.4.1-2 (embed; bug #504169)
713            - mahara 1.0.5-2 (embed; bug #504170)
714            - pixelpost 1.7.1-5 (embed; bug #504171)
715            - mediamate 0.9.3.6-5 (embed; bug #504172)
716            - opendb <removed> (embed; bug #504173)
717            [etch] - opendb <unfixed> (embed; bug #504173)
718            - wordpress 2.5.1-9 (embed; bug #443948)
719            - moodle <unfixed> (embed; bug #507185)
720            [etch] - phpgroupware <unfixed> (embed)
721            NOTE: phpgroupware-felamimail
722            - magpierss 0.72-3 (embed; bug #431089)
723    
724    jquery
725            - zekr <unfixed> (embed)
726            - wordpress <unknown> (embed)
727            - yocto-reader <unfixed> (embed)
728            - textpattern <unfixed> (embed)
729            - genshi 0.5.1-1 (embed)
730            NOTE: compressed file under examples/ dir
731            - prewikka <unfixed> (embed)
732            - libramaze-ruby <unfixed> (embed)
733            - drupal5 <unfixed> (embed)
734            - b2evolution <unfixed> (embed)
735            - wesnoth <unfixed> (embed)
736    
737    tablesorter (jquery plugin, not packaged yet)
738            - wesnoth <unfixed> (embed)
739    
740    kses
741            - wordpress <unfixed> (embed; bug #504242)
742            NOTE: their copy has all methods renamed to wp_<foo>
743            NOTE: kses isn't in Debian, RFP: #504240
744            - moodle <unfixed> (embed; bug #507185)
745            - egroupware <unfixed> (embed)
746    
747    magpierss
748            - wordpress <unfixed> (embed; bug #504242)
749            - moodle <unfixed>
750    
751    php-gettext
752            - wordpress 2.8.4-1 (embed; bug #504242)
753    
754    libphp-ixr (name may change, it is the Incutio XML-RPC)
755            - wordpress <unfixed> (embed; bug #504242)
756            NOTE: libphp-ixr isn't in Debian, RFP: #504236
757            - dokuwiki <unfixed> (embed)
758            - textpattern <unfixed> (embed)
759    
760    libphp-cas
761            - glpi <unfixed> (embed)
762            - moodle <unfixed> (embed; bug #505984)
763    
764    scriptaculous
765            - glpi <unfixed> (embed)
766            - libaws <unfixed> (embed)
767            NOTE: libaws-doc
768            - op-panel <unfixed> (embed)
769            - symfony <unfixed> (embed)
770            NOTE: maintainer says there are extra incompatible changes required
771            - pixelpost <unfixed> (embed)
772            - webhelpers <unfixed> (embed)
773            NOTE: python-webhelpers
774            - qwik <unfixed> (embed)
775            - smokeping <unfixed> (embed)
776            - turba2 <unfixed> (embed)
777            - typo3-src 4.2.3-1 (embed)
778    
779    libmarkdown-php
780            - moodle <unfixed> (embed; bug #507185)
781            - pixelpost <unfixed> (embed)
782    
783    php-openid
784            - wordpress-openid <itp> (embed)
785    
786    geshi
787            - dokuwiki 0.0.20080505-3.1 (embed)
788            - pgfouine 1.0-1.1 (embed)
789            - websvn 2.1.0-1 (embed)
790    
791    webcalendar
792            - gforge 4.7~rc2-6 (embed; bug #504758)
793    
794    libical
795            - kdepim <unfixed> (fork)
796            - kdepimlibs <unfixed> (fork)
797            NOTE: fixed in KDE4 post 4.1.x series
798            - claws-mail-extra-plugins <unfixed> (fork)
799    
800    libltdl3
801            - kdelibs <unfixed> (embed)
802            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
803            - synfig <unfixed> (embed)
804    
805    harfbuzz
806            - qt4-x11 <unfixed> (embed)
807    
808    libzip
809            - php5 <unfixed> (fork)
810            - odt2txt <unfixed> (embed; bug #523808)
811    
812    json.php (not packaged; should be replaced with php's built-in functions)
813            - moodle <unfixed>
814            - yui <unfixed>
815            - gallery2 <unfixed>
816            - dokuwiki <unfixed>
817            - typo3-src <unfixed>
818    
819    php-fpdf
820            - tcpdf <itp> (fork)
821            - moodle <unfixed>
822            - phpwiki <unfixed>
823            - egroupware <unfixed>
824            - ldap-account-manager <unfixed> (fork)
825    
826    tcpdf (itp: #495985)
827            - moodle <unfixed>
828            - phpmyadmin <unfixed>
829    
830    typo3
831            - moodle <unfixed>
832    
833    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
834            - moodle <unfixed>
835            - gosa <unfixed>
836    
837    php-ole (itp: #487558)
838            - moodle <unfixed>
839    
840    pieforms (http://www.catalyst.net.nz)
841            - mahara <unfixed>
842    
843    savant2 (http://phpsavant.com)
844            - egroupware <unfixed>
845    
846    rssparser (http://nwow.org)
847            - egroupware <unfixed>
848            - phpgroupware <unfixed>
849    
850    lcms
851            - openjdk-6 <unfixed> (fork)
852    
853    libphp-phplayersmenu
854            - diogenes <unfixed>
855            - phpldapadmin <unfixed>
856    
857    libphp-pclzip
858            - docvert <unfixed>
859            - moodle <unfixed>
860            - egroupware <unfixed>
861    
862    libphp-simplepie
863            - dokuwiki <unfixed>
864    
865    libphp-jpgraph
866            - egroupware <unfixed>
867    
868    php-simpletest
869            - moodle <unfixed>
870    
871    libpng
872            - iceweasel <not-affected> (uses xulrunner)
873            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
874            - iceape 1.0.13~pre080614i-0etch1 (embed)
875            - xulrunner 1.9.0.13-1 (embed)
876            [lenny] - xulrunner 1.9.0.11-0lenny1
877            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
878            - gamera 3.2.3-1 (embed)
879    
880    irssi
881            - silc-client <unfixed> (embed)
882            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
883    
884    extc
885            - mtasc <unfixed> (embed)
886            - haxe <unfixed> (embed)
887    
888    swflib
889            - mtasc <unfixed> (embed)
890            - haxe <unfixed> (embed)
891    
892    libitext-java
893            - bouncycastle 2.1.4-1 (embed)
894    
895    python-ply
896            - pyke <unfixed> (embed)
897    
898    libdumbnet (libdnet upstream)
899            - nmap <unfixed> (fork)
900    
901    gcc-4.4
902            - gcc-mingw32 <unfixed> (embed)
903    
904    camlimages
905            - advi <unfixed> (static; bug #550441)
906    
907    memcached
908            - memcachedb <unfixed> (embed)
909    
910    yajl
911            - argyll <unfixed> (embed; bug #544223)
912            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
913    
914    libept
915            - adept <unfixed> (embed; bug #540649)
916    
917    libvorbis
918            - iceweasel <not-affected> (uses xulrunner)
919            - xulrunner <not-affected> (introduced in 1.9.1)
920            TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]
921    
922    cairo
923            - iceweasel <not-affected> (uses xulrunner)
924            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
925    
926    php-net-dnsbl
927            - serendipity <unfixed> (embed)
928    
929    php-onyx-rss
930            - serendipity <unfixed> (embed)
931    
932    php-text-wiki
933            - serendipity <unfixed> (embed)
934    
935    php-xml-rpc
936            - serendipity <unfixed> (embed)
937    
938    polarssl (does not have a shared library)
939            - pdkim <itp> (embed; bug #543150)
940            - xyssl <unfixed> (old-version)
941    
942    pidgin
943            - gaim <removed> (old-version)
944    
945    icu
946            - webkit 1.0.1-1 (embed; bug #547214)
947            - texlive-bin <unfixed> (fork)
948            NOTE: texlive upstream working with icu upstream to merge their changes
949    
950    cyrus-imapd-2.2
951            - kolab-cyrus-imapd <unfixed> (fork)
952            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
953    
954    python-cxx-dev
955            - freecad <unfixed> (embed; bug #547936)
956    
957    libzipios++-dev
958            - freecad <unfixed> (embed; bug #547941)
959    
960    linux-2.6
961            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
962            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
963            - kernel-source-2.6.8 <removed> (old-version)
964            - kernel-source-2.4.27 <removed> (old-version)
965            - kernel-source-2.4.24 <removed> (old-version)
966            - kernel-source-2.2.25 <removed> (old-version)
967            - kernel-source-2.2.20 <removed> (old-version)
968    
969    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
970            - kvm <unfixed> (embed) [./libfdt/*]
971    
972    qweb (not packaged)
973            - ajaxterm <unfixed>
974    
975    opensaml2
976            - opensaml <removed> (old-version)
977    
978    shibboleth-sp2
979            - shibboleth-sp <removed> (old-version)
980    
981    tuxonice-userui
982            - suspend2-userui <removed> (old-version)
983    
984    expat
985            - w3c-libwww <removed> (embed; bug #551941)
986            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
987            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
988    
989    xerces-c
990            - xerces-c2 <unfixed> (old-version)
991            - xerces27 <removed> (old-version)
992    
993    md5 (RSA's version; not the gnu version provided by coreutils)
994            - w3c-libwww <removed> (embed; bug #551942)
995            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
996    
997    enet
998            - sauerbraten <unfixed> (embed; #497194)
999    
1000    eglibc
1001            - glibc <removed> (old-version)
1002    
1003    galib
1004            - gamera 3.2.3-1 (embed)
1005    
1006    configobj
1007            - bzr <unfixed> (embed)
1008            - elisa <unfixed> (embed)
1009            - gaupol <unfixed> (embed)
1010            - ipython <unfixed> (embed)
1011            - pida <unfixed> (embed)
1012            - psychopy <unfixed> (embed)
1013            - rest2web <unfixed> (embed)
1014            - auth2db <unknown> (embed)
1015            - dynagen <unknown> (embed)
1016            - iceweasel <unknown> (embed)
1017            - sabnzbdplus <unknown> (embed)
1018            - xulrunner <unknown> (embed)
1019            - nipy <not-affected> (embed) [./examples/neurospin/neurospy/configobj.py]
1020    
1021    python-clientform
1022            - bibus <unfixed> (embed)
1023            - zope2.10 <unfixed> (embed)
1024            - zope2.11 <unfixed> (embed)
1025            - python-mechanize <unknown> (embed)
1026            - twill <unknown> (embed)
1027    
1028    python-mechanize
1029            - zope2.10 <unfixed> (embed)
1030            - zope2.11 <unfixed> (embed)
1031            - twill <unknown> (embed)
1032    
1033    pexpect
1034            - duplicity <unfixed> (embed)
1035            - hplip <unfixed> (embed)
1036            - smart <unfixed> (embed)
1037    
1038    pyparsing
1039            - bauble <unfixed> (embed)
1040            - boa-constructor <unfixed> (embed)
1041            - calibre <unfixed> (embed)
1042            - matplotlib <unfixed> (embed)
1043            - zhpy <unfixed> (embed)
1044            - polybori <unknown> (embed)
1045            - python-whoosh <unknown> (embed)
1046            - twill <unknown> (embed)
1047            - zope-textindexng3 <unknown> (embed)

Legend:
Removed from v.1758  
changed lines
  Added in v.13150

  ViewVC Help
Powered by ViewVC 1.1.5