/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3064 by jmm-guest, Thu Dec 15 23:01:23 2005 UTC revision 11920 by hesso-guest, Mon May 18 23:10:14 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
7  kdegraphics/kpdf  
8  tetex-bin (the very latest tetex-bin started to use poppler)  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor  
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16    sort: static (linking statically against a lib)
17          embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19                thus might share parts of the source code)
20          old-version (the package is an older version of essentially
21                       the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30            - gpdf <removed>
31            [sarge] - gpdf <unfixed>
32            NOTE: has been replaced by evince in etch
33            - pdftohtml <unknown>
34            [sarge] - pdftohtml <unfixed>
35            [etch] - pdftohtml <unfixed>
36            NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38            - texlive-base 3.0-12 (embed)
39            - texlive-bin 2007-1 (embed)
40            NOTE: links to poppler
41            - koffice <unfixed> (embed; bug #436163)
42            - libextractor 0.5.12-1 (embed)
43            NOTE: libextractor is using its own pdf decoder now
44            - pdfkit.framework 0.8-4 (embed)
45            - ipe <unfixed> (embed)
46            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47            - ruby-gnome2 <unknown> (embed)
48            NOTE: copy only present in source but links to poppler
49            - pdfedit <unfixed> (embed; bug #510794)
50            - swftools <unfixed> (embed)
51    
52    ppmd
53            - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54    
55    peercast
56            - gnome-peercast <unfixed> (embed)
57            NOTE: gnome-peercast may better be removed, see #466539
58    
59    silc-toolkit
60            - silc-client 1.1~beta6-1 (embed)
61    
62    icclib
63            - ghostscript <unfixed> (embed)
64            - argyll <unfixed> (embed)
65    
66    dietlibc
67            - ccontrol 0.9.1+20071204-1 (static)
68    
69    libmikmod
70            - sdl-mixer1.2 <unfixed> (embed)
71            TODO: report bug
72    
73    libiax
74            - iaxmodem <unfixed> (embed)
75    
76    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
77            - dpkg <unfixed> (embed)
78            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
79            - rsync <unfixed> (embed)
80            NOTE: somehow derived code base
81            - mono <unfixed> (embed)
82            TODO: check mozilla
83            - Linux kernels <unfixed> (embed)
84            - pvpgn 1.7.8-2 (embed)
85            - mrtg 2.12.2-1 (embed)
86            - rpm <unknown> (embed)
87            NOTE: pinged anibal since when rpm was fixed
88            - tuxcmd-modules <unfixed> (embed)
89            - zsync <unfixed>
90            - tra <unfixed>
91            - sash <unfixed>
92            - nsis <unfixed>
93            - mseide-msegui <unfixed>
94            NOTE: mseide
95            - mirrordir <unfixed>
96            - poco <unfixed>
97            - klibc <unfixed>
98            - ghostscript <unfixed>
99            - freeimage <unfixed>
100            - clamav <unfixed> (fork)
101            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
102            - tuxonice-userui <unfixed>
103            - plt-scheme <unfixed>
104            - perl <unfixed>
105            - paraview <unfixed>
106            - gcvs <unfixed>
107            - erlang <unfixed>
108            - dump <unfixed>
109            - aide <unfixed> (static)
110            - dar <unfixed> (static)
111            - avfs <unfixed>
112            - fpc <unfixed>
113            - winff <unfixed>
114            NOTE: inherited from fpc, see #472304
115            - lazarus <unfixed>
116            NOTE: inherited from fpc, see #472304
117    
118    libbz2
119            - dpkg <unfixed> (static)
120    
121    libgadu:
122            - centericq <unfixed> (embed)
123            - gaim <unfixed> (embed)
124            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
125            - kdenetwork 4:3.3.2-5 (embed)
126            NOTE: from kdenetwork: kopete
127            - gadu <unfixed> (embed)
128            - ekg 1:1.8~rc0-1 (embed)
129            - kadu 0.6.0.2-3 (embed; bug #504430)
130            NOTE: gadu not packaged in Debian yet
131    
132    xmlrpc (which package is the "origin" of this code?)
133            - drupal <unfixed> (embed)
134            - phpgroupware <unfixed> (embed)
135            - egroupware <unfixed> (embed)
136            - phpwiki <unfixed> (embed)
137            - php4 <unfixed> (embed)
138            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
139    
140    shtool (affects build-time only)
141            - mysql-ocaml <unfixed> (embed)
142            - php4 <unfixed> (embed)
143    
144    mozilla source code
145            - mozilla-firefox <unfixed> (embed)
146            - mozilla-thunderbird <unfixed>
147            - firefox <removed>
148            - thunderbird <removed>
149            - iceweasel <unfixed> (embed)
150            - iceape <unfixed> (embed)
151            - icedove <unfixed> (embed)
152            - xulrunner <unfixed> (embed)
153            - nvu <removed> (embed)
154    
155    xli
156            - xloadimage <unfixed> (embed)
157    
158    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
159            - openmotif <unfixed> (embed)
160            - libxpm <unfixed> (embed)
161    
162    kerberized apps with BSD origin
163            - krb4 <unfixed> (embed)
164            - krb5 <unfixed> (embed)
165            - heimdal <unfixed> (embed)
166    
167    grip (which pkg is the origin?)
168            - libcdaudio <unfixed>
169            - grip <unfixed>
170            - gnome-vfs <unfixed>
171            TODO: check vfs2 as well
172    
173    fudforum
174            [etch] - phpgroupware <unfixed> (embed)
175            NOTE: phpgroupware-fudforum
176            [sarge] - egroupware-fudforum <removed> (embed)
177    
178    cvs
179            - gcvs <unfixed> (embed)
180            NOTE: see cvsunix/src in tarball
181    
182    pcre
183            - python* <unfixed> (embed)
184            - php4 <unknown> (embed)
185            - analog 2:5.23-0woody1 (embed)
186            - goffice <unfixed> (embed)
187            NOTE: libgoffice-*
188            - vfu 4.06-4.1 (embed; bug #450754)
189            - tf5 5.0beta7-1 (embed)
190            - monotone 0.43-1 (embed)
191            NOTE: this only affects versions >= 0.37
192            - glib2.0 2.15.2-1 (embed)
193            - apache2 2.0.53-4 (embed)
194            - exim4 4.10-0.srh20.12 (embed)
195            - yacas <unfixed> (embed)
196            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
197            - gtamsanalyzer.app 0.42-5 (embed)
198            - tin <unknown> (embed)
199            - kazehakase 0.5.2-1
200            - webkit <unfixed> (embed)
201            - qt4-x11 <unfixed> (embed)
202            NOTE: embedded via webkit copy
203    
204    tiff
205            - wxwindows2.4 2.2.1 (embed)
206    
207    uudeview
208            - libconvert-uulib-perl <unfixed> (embed)
209            - pan <unfixed> (embed)
210    
211    sqlite (not affected by security vulnerabilities so far)
212            - amarok <unfixed> (embed)
213            - monotone 0.43-1 (embed)
214            - iceweasel <unfixed> (embed)
215    
216    util-linux/mount
217            - loop-aes-utils <unfixed> (embed)
218            NOTE: contains code from util-linux' mount in the mount-aes-udeb
219    
220    webmin
221            - usermin <unknown> (embed)
222            [sarge] - usermin <unfixed> (embed)
223    
224    sylpheed
225            - sylpheed-claws <unfixed> (fork)
226    
227    phpsysinfo
228            - egroupware <unfixed> (embed)
229            - phpgroupware <unfixed> (embed)
230    
231    phpldapadmin
232            [sarge] - egroupware <unfixed> (embed)
233            NOTE: removed from egroupware after sarge
234    
235    chmlib
236            - kchmviewer <unknown> (embed)
237    
238    libavcodec/libavformat (source: ffmpeg)
239            - mplayer 1.0~rc2-14 (embed; bug #395252)
240            - kino 1.0.0-1
241            - vlc <not-affected> (Links dynamically since initial release)
242            - smilutils 0.3.0-10
243            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
244            - motion 3.1.19-1
245            - gstreamer0.10-ffmpeg 0.10.3-2
246            - xmovie <unfixed>
247            TODO: gimp-gap (potentially using ffmpeg code as well)
248    
249    faad2
250            - mplayer 1.0~rc2-20 (embed)
251    
252    mad MPEG decoding lib
253            - mad <unfixed> (embed)
254            - xine-lib <unfixed> (embed)
255    
256    libdts
257            - xine-lib <unfixed> (embed)
258    
259  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  flac
260  dpkg          - xine-lib <unfixed> (embed)
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
   
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino(?)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
261    
262  mad MPEG decoding lib:  liba52
263  mad          - a52dec <unfixed> (embed)
264  xine-lib          - xine-lib <unfixed> (embed)
265    
266    libmpeg2
267            - mpeg2dec <unfixed> (embed)
268            - xine-lib <unfixed> (embed)
269    
270    curl
271            - wget <unfixed> (embed)
272            NOTE: code for NTLM authentication
273    
274    uw-imap
275            - pine <unfixed> (embed)
276            - alpine <unfixed> (embed)
277    
278    imagemagick
279            - graphicsmagick <unfixed> (fork)
280    
281    halibut
282            - nsis <unfixed> (fork)
283    
284    libghttp
285            - hotway <unfixed> (embed)
286    
287    libsndfile
288            - ardour 1:2.7.1-1 (embed)
289    
290    glibmm2.4
291            - ardour 1:2.7.1-1 (embed)
292    
293    libgnomecanvasmm2.6
294            - ardour 1:2.7.1-1 (embed)
295    
296    libsigc++-2.0
297            - ardour 1:2.7.1-1 (embed)
298    
299    soundtouch
300            - ardour 1:2.7.1-1 (embed)
301    
302    libmms
303            - xine-lib <unfixed> (embed)
304            - mimms <unfixed> (embed)
305    
306    fckeditor
307            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
308            - moin 1.8.2-2 (embed; bug #452599)
309            - karrigell <removed> (embed; bug #452598)
310            - gforge 4.6.99+svn6225-1 (embed)
311    
312    ipatlas (not packaged in Debian)
313            - moodle <unfixed> (embed; bug #507185)
314    
315    libphp-phpmailer
316            - moodle <unfixed> (embed; bug #507185)
317            - mahara <unfixed> (embed)
318            - symfony <unfixed> (embed)
319            [etch] - phpgroupware <unfixed> (embed)
320            NOTE: phpgroupware-felamimail is only in etch
321            - egroupware <unfixed> (embed; bug #504283)
322            - glpi <unfixed>
323    
324    htmlArea (not packaged in Debian)
325            - moodle <unfixed> (embed)
326    
327    giflib:
328            - wine <unfixed> (embed; bug #466181)
329    
330    bennu (not packaged in Debian, http://bennu.sourceforge.net)
331            - moodle <unfixed> (embed)
332    
333    smarty:
334            - moodle 1.8.2-2 (embed; bug #471158)
335            - gallery2 2.2.5-2 (embed; bug #471160)
336            - mahara 0.9.2-2 (embed; bug #471201)
337            - gosa 2.4beta1-1 (embed; bug #471200)
338    
339    TinyMCE
340            - wordpress 2.5.1-3 (embed; bug #478257)
341            - moodle <unfixed> (embed; bug #507185)
342            - knowledgeroot <unfixed> (embed)
343            - joomla <itp> (bug #326398)
344    
345    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
346            - scite <unfixed> (embed)
347            - qscintilla <unfixed> (embed)
348            - qscintilla2 <unfixed> (embed)
349            - geany <unfixed> (fork)
350            - anjuta <unfixed> (embed)
351    
352    libphp-adodb
353            - moodle <unfixed> (embed; bug #507185)
354            NOTE: also AdoDB-XML Schema
355            - gallery2 <unfixed> (embed)
356            - phppgadmin <unfixed> (embed)
357            - egroupware <unfixed> (embed)
358            - phpwiki <unfixed> (embed)
359            - ipplan <unfixed> (embed)
360            - typo3-src <unfixed> (embed)
361            - cacti <unknown> (embed)
362            [sarge] - cacti <unfixed> (embed)
363            NOTE: dependency exists, but internal version is used
364            - gforge 4.7~rc2-6 (embed)
365            - mahara <unfixed> (embed)
366    
367    gzip
368            - linux-kernel <unfixed> (embed)
369            NOTE: lib/inflate.c
370            - klibc <unfixed> (embed)
371            NOTE: based on linux-kernel gzip code
372            - busybox <unfixed> (embed)
373    
374    neon
375            - cadaver <unfixed> (embed; bug #188381)
376            - gnome-vfs2 <unfixed> (embed; bug #395874)
377            - litmus <unfixed> (embed; #395875)
378            [sarge] - screem <unfixed> (embed)
379            - sitecopy <unfixed> (embed; bug #395876)
380            [etch] - tla <unfixed> (embed; bug #395877)
381            [sarge] - tla <unfixed> (embed; bug #395877)
382    
383    libmodplug
384            - gst-plugins-bad0.10 <unfixed> (embed)
385    
386    libvncserver
387            - vino <unfixed> (embed)
388    
389    putty
390            - filezilla <unfixed> (embed)
391    
392    tinyxml (not packaged in Debian)
393            - filezilla <unfixed>
394    
395    gv
396            - evince <unfixed> (embed)
397            NOTE: ps/ tree from gv 3.5.8
398            - evince-gtk <unfixed> (embed)
399            NOTE: not packaged in Debian
400    
401    libXbae
402            [etch] - libpawlib2-lesstif <unfixed> (embed)
403            NOTE: from Cernlib
404    
405    libXaw
406            [etch] - libpawlib2-lesstif <unfixed>
407            NOTE: from Cernlib
408            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
409    
410    libgd2
411            - graphviz <unfixed> (embed)
412            NOTE: lib/gd seems to be 2.0.33
413            - wml <unfixed> (embed)
414            - libwmf <unfixed> (embed)
415            NOTE: derived from gd 1.6.3
416    
417    rar
418            - unrar-nonfree <unfixed> (embed)
419    
420    unrar-free (maybe this code is derived from the original rar, too?)
421            - clamav <unfixed> (embed)
422            NOTE: seems to be disabled in default config
423    
424    mplayer (DirectMedia Object loader)
425            - xine-lib <unfixed> (embed)
426            NOTE: src/libw32dll/
427            - vlc <unfixed> (embed)
428            NOTE: modules/codec/dmo/
429            - mplayer 1.0~rc2-20 (embed)
430    
431    libwpd (WordPerfect converter)
432            - openoffice.org <unfixed> (embed)
433    
434    fsplib (http://sourceforge.net/projects/fsp/)
435            - gftp <unfixed> (embed)
436            NOTE: lib/fsplib version 0.3
437    
438    sprng
439            - tree-puzzle <unfixed> (embed)
440    
441    librpcsecgss
442            - krb5 <unfixed> (embed)
443    
444    jasper
445            - ghostscript <unfixed> (embed)
446            - gs-gpl <unfixed> (embed)
447    
448    libiris
449            - psi <unfixed> (embed)
450            - kdenetwork <unfixed> (embed)
451            NOTE: kopete embeds libiris but links dynamically to libidn
452            - kdegames <unfixed> (embed)
453            NOTE: ksirk/kde4
454    
455    libidn
456            - monotone 0.43-1 (embed)
457            - psi <unfixed> (embed)
458            NOTE: psi embeds libiris which embeds libidn
459            - kdegames <unfixed> (embed)
460            NOTE: kdegames/kde4 embeds libiris which embeds libidn
461    
462    liblua
463            - monotone 0.43-1 (embed)
464            - nmap <unfixed> (embed; bug #527997)
465            NOTE: fixed upstream as of nmap svn rev13336.
466    
467    libbotan
468            - monotone 0.43-1 (embed)
469    
470    NetXX
471            - monotone 0.43-1 (embed)
472    
473    libgc
474            - mono <unfixed> (embed)
475    
476    lzma
477            - p7zip <unfixed> (embed)
478    
479    lzo
480            - grub2 <unfixed> (embed)
481    
482    yassl
483            - mysql-dfsg-5.0 <unfixed> (embed)
484    
485    pax code
486            - tar <unfixed> (embed)
487            - cpio <unfixed> (embed)
488    
489    t1lib
490            - tetex-bin 2.0.2-1 (embed)
491            - texlive-bin <unknown> (embed)
492    
493    guichan
494            - boswars <unfixed> (embed)
495            NOTE: maintainer notified us, working on it
496    
497    tolua
498            - boswars <unfixed> (embed)
499            NOTE: maintainer notified us, working on it
500    
501    asio-dev
502            - luxrender <unfixed> (embed)
503            NOTE: maintainer notified us, working on it
504            NOTE: may be merged with boost "soon"
505    
 libdts:  
 libdts  
506  xine-lib  xine-lib
507            - vlc <unfixed> (embed)
508            NOTE: only parts included in modules/access/rtsp
509    
510  flac:  netpbm
511  flac          - tcl8.3 <unfixed> (embed)
512  xine-lib          - tcl8.4 <unfixed> (embed)
513            - tcl8.5 <unfixed> (embed)
514            NOTE: generic/tkImgGIF.c
515    
516    tk8.5
517            - tk8.0 <removed> (old-version)
518            - tk8.3 <unfixed> (old-version)
519            - tk8.4 <unfixed> (old-version)
520            - perl-tk <unfixable> (fork)
521    
522    samba
523            - mc 2:4.6.2~git20080311-1 (embed)
524            NOTE: maintainer is aware of this, currently searching a solution
525    
526    plib1.8.4c2
527            - boson <unfixed> (fork)
528            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
529    
530    fribidi
531            - quesoglc <unfixed> (embed)
532            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
533    
534    glew
535            - quesoglc <unfixed> (embed; bug #489341)
536            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
537    
538    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
539            - transcend <unfixed> (embed)
540            - cultivation <unfixed> (embed)
541            - passage <unfixed> (embed)
542            - gravitation <unfixed> (embed)
543    
544    tar
545            - libarchive <unfixed> (embed)
546            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
547    
548    cpio
549            - libarchive <unfixed> (embed)
550            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
551    
552    webkit
553            - qt4-x11 <unfixed> (embed)
554    
555    ftgl
556            - blender 2.46+dfsg-1 (embed)
557    
558    wv
559            - abiword <unfixed>
560    
561    qemu
562            - kvm <unfixed> (embed)
563            - xen-3 <unfixed> (embed)
564            - xen-unstable <unfixed> (embed)
565    
566    bochs
567            - kvm <unfixed> (embed; bug #489442)
568    
569    speex
570            - vorbis-tools <unfixed> (embed)
571            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
572            - gst-plugins-good0.10 <unfixed> (embed)
573            - xine-lib <unfixed> (embed)
574            - libfishsound <unfixed> (embed)
575            - libannodex <unfixed> (embed)
576            - vlc <unfixed> (embed)
577            - xmms-speex <unfixed> (embed)
578            - libsdl-sound1.2 <unfixed> (embed)
579            - sweep <unfixed> (embed)
580    
581    libreadline
582            - magic <unfixed> (old-version)
583            NOTE: magic is currently an RFS
584    
585    opcode
586            - ode <unfixed> (embed)
587            NOTE: opcode is not a package in debian, it is just embedded
588            NOTE: http://www.codercorner.com/Opcode.htm
589    
590    gimpact
591            - ode <unfixed> (embed)
592            NOTE: gimpact is not a package in debian, it is just embedded
593            NOTE: http://gimpact.sf.net
594    
595    mochikit
596            - mahara <unfixed> (embed)
597            NOTE: they require extra patches, still unmerged upstream
598            - ntop <unfixed> (embed)
599            - coherence <unfixed> (embed)
600            NOTE: python-coherence
601            - paste <unfixed> (embed)
602            NOTE: python-paste
603            - turbogears <unfixed> (embed)
604            NOTE: python-turbogears
605            - plone3 <unfixed> (embed)
606            NOTE: zope-plone3
607    
608    prototype
609            - netbeans-ide <unfixed> (embed)
610            - auth2db-frontend <unfixed> (embed)
611            - webcit <unfixed> (embed)
612            NOTE: citadel-webcit
613            - asterisk <unfixed> (embed)
614            - doc-iana <unfixed> (embed)
615            - libaws <unfixed> (embed)
616            NOTE: libaws-doc
617            - libgettext-ruby <unfixed> (embed)
618            NOTE: libgettext-ruby-data
619            - libjson-ruby <unfixed> (embed)
620            NOTE: libjson-ruby-doc
621            - lucene2 <unfixed> (embed)
622            NOTE: liblucene2-java-doc
623            - libopenid-ruby <unfixed> (embed)
624            - solr <unfixed> (embed)
625            NOTE: solr-common
626            - glpi <unfixed> (embed)
627            - hobbix <unfixed> (embed)
628            - mnemo2 <unfixed> (embed)
629            - nag2 <unfixed> (embed)
630            - knowledgeroot <unfixed> (embed)
631            - mediatomb <unfixed> (embed)
632            NOTE: mediatomb-common
633            - mt-daapd <unfixed> (embed)
634            - op-panel <unfixed> (embed)
635            - ebug-http <unfixed> (embed)
636            - phpgedview <removed> (embed)
637            - poker-network <unfixed> (embed)
638            NOTE: poker-web
639            - webhelpers <unfixed> (embed)
640            NOTE: python-webhelpers
641            - qwik <unfixed> (embed)
642            - rails <unfixed> (embed)
643            - typo3-src <unfixed> (embed)
644            - wordpress <unfixed> (embed)
645            - zope <unfixed> (embed)
646            NOTE: zope-plone3
647            - smokeping <unfixed> (embed)
648            - ampache 3.4.1-2 (embed)
649            - exaile <unfixed> (embed)
650            - hobix <unfixed> (embed)
651            - pixelpost <unfixed> (embed)
652            - symfony <unfixed> (embed)
653            NOTE: it's been said that there are custom changes
654            - zabbix <unfixed> (embed)
655            NOTE: zabbix-frontend-php
656            - turba2 <unfixed> (embed)
657    
658    gdb
659            - insight <unfixed> (embed)
660    
661    e2fsprogs
662            - ldiskfsprogs <unfixable> (fork)
663    
664    quazip (not packaged in Debian)
665            - qcake <unfixed> (embed)
666            NOTE: starting with upstream version 0.6.4
667    
668    exo
669            - pcmanfm <unfixed> (embed; bug #499677)
670            NOTE: slightly modified source code
671    
672    java
673            - openjdk-6 <unfixed>
674            - sun-java5 <unfixed>
675            - sun-java6 <unfixed>
676    
677    libphp-snoopy
678            - ampache 3.4.1-2 (embed; bug #504169)
679            - mahara 1.0.5-2 (embed; bug #504170)
680            - pixelpost <unfixed> (embed; bug #504171)
681            - mediamate 0.9.3.6-5 (embed; bug #504172)
682            - opendb <unfixed> (embed; bug #504173)
683            - wordpress 2.5.1-9 (embed; bug #443948)
684            - moodle <unfixed> (embed; bug #507185)
685            [etch] - phpgroupware <unfixed> (embed)
686            NOTE: phpgroupware-felamimail
687            - magpierss 0.72-3 (embed; bug #431089)
688    
689    jquery
690            - zekr <unfixed> (embed)
691            - wordpress <unfixed> (embed)
692            - yocto-reader <unfixed> (embed)
693            - textpattern <unfixed> (embed)
694            - genshi 0.5.1-1 (embed)
695            NOTE: compressed file under examples/ dir
696            - prewikka <unfixed> (embed)
697            - libramaze-ruby <unfixed> (embed)
698            - drupal5 <unfixed> (embed)
699            - b2evolution <unfixed> (embed)
700            - wesnoth <unfixed> (embed)
701    
702    tablesorter (jquery plugin, not packaged yet)
703            - wesnoth <unfixed> (embed)
704    
705    kses
706            - wordpress <unfixed> (embed; bug #504242)
707            NOTE: their copy has all methods renamed to wp_<foo>
708            - moodle <unfixed> (embed; bug #507185)
709            - egroupware <unfixed> (embed)
710    
711    magpierss
712            - wordpress <unfixed> (embed; bug #504242)
713            - moodle <unfixed>
714    
715    php-gettext
716            - wordpress <unfixed> (embed; bug #504242)
717    
718    libphp-ixr (name may change, it is the Incutio XML-RPC)
719            - wordpress <unfixed> (embed; bug #504242)
720            - dokuwiki <unfixed> (embed)
721            - textpattern <unfixed> (embed)
722    
723    libphp-cas
724            - glpi <unfixed> (embed)
725            - moodle <unfixed> (embed; bug #496069)
726    
727    scriptaculous
728            - glpi <unfixed> (embed)
729            - libaws <unfixed> (embed)
730            NOTE: libaws-doc
731            - op-panel <unfixed> (embed)
732            - symfony <unfixed> (embed)
733            NOTE: maintainer says there are extra incompatible changes required
734            - pixelpost <unfixed> (embed)
735            - webhelpers <unfixed> (embed)
736            NOTE: python-webhelpers
737            - qwik <unfixed> (embed)
738            - smokeping <unfixed> (embed)
739            - turba2 <unfixed> (embed)
740            - typo3-src 4.2.3-1 (embed)
741    
742    libmarkdown-php
743            - moodle <unfixed> (embed; bug #507185)
744            - pixelpost <unfixed> (embed)
745    
746    php-openid
747            - wordpress-openid <itp> (embed)
748    
749    geshi
750            - dokuwiki 0.0.20080505-3.1 (embed)
751            - pgfouine 1.0-1.1 (embed)
752            - websvn 2.1.0-1 (embed)
753    
754    webcalendar
755            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
756    
757    libical
758            - kdepim <unfixed> (fork)
759            - kdepimlibs <unfixed> (fork)
760            NOTE: fixed in KDE4 post 4.1.x series
761    
762    libltdl3
763            - kdelibs <unfixed> (embed)
764            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
765            - synfig <unfixed> (embed)
766    
767    harfbuzz
768            - qt4-x11 <unfixed> (embed)
769    
770    libzip
771            - php5 <unfixed> (fork)
772    
773    json.php (not packaged; should be replaced with php's built-in functions)
774            - moodle <unfixed>
775            - yui <unfixed>
776            - gallery2 <unfixed>
777            - dokuwiki <unfixed>
778            - typo3-src <unfixed>
779    
780    php-fpdf
781            - tcpdf <itp> (fork)
782            - moodle <unfixed>
783            - phpwiki <unfixed>
784            - egroupware <unfixed>
785            - ldap-account-manager <unfixed> (fork)
786    
787    tcpdf (itp: #495985)
788            - moodle <unfixed>
789            - phpmyadmin <unfixed>
790    
791    typo3
792            - moodle <unfixed>
793    
794    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
795            - moodle <unfixed>
796            - gosa <unfixed>
797    
798    php-ole (itp: #487558)
799            - moodle <unfixed>
800    
801    pieforms (http://www.catalyst.net.nz)
802            - mahara <unfixed>
803    
804    savant2 (http://phpsavant.com)
805            - egroupware <unfixed>
806    
807    rssparser (http://nwow.org)
808            - egroupware <unfixed>
809            - phpgroupware <unfixed>
810    
811    lcms
812            - openjdk-6 <unfixed> (fork)
813    
814    libphp-phplayersmenu
815            - diogenes <unfixed>
816            - phpldapadmin <unfixed>
817    
818    libphp-pclzip
819            - docvert <unfixed>
820            - moodle <unfixed>
821            - egroupware <unfixed>
822    
823    libphp-simplepie
824            - dokuwiki <unfixed>
825    
826    libphp-jpgraph
827            - egroupware <unfixed>
828    
829    php-simpletest
830            - moodle <unfixed>
831    
832    libpng
833            - iceweasel <unfixed> (embed)
834            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
835            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
836            - iceape 1.0.13~pre080614i-0etch1 (embed)
837            - xulrunner <unfixed> (embed)
838            NOTE: Debian 1.9.0.6 uses embedded copy
839            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
840            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
841            NOTE: Ubuntu only
842            - firefox-3.0 <unfixed> (embed)
843            NOTE: Ubuntu only
844            - firefox-3.1 <unfixed> (embed)
845            NOTE: Ubuntu only
846            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
847            NOTE: Ubuntu only
848            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
849            NOTE: Ubuntu only
850            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
851            NOTE: Ubuntu only
852    
853    irssi
854            - silc-client <unfixed> (embed)
855            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
856    
857    extc
858            - mtasc <unfixed> (embed)
859            - haxe <unfixed> (embed)
860    
861    swflib
862            - mtasc <unfixed> (embed)
863            - haxe <unfixed> (embed)
864    
865  liba52:  libitext-java
866  a52dec          - bouncycastle 2.1.4-1 (embed)
 xine-lib  
867    
868  libmpeg2:  python-ply
869  mpeg2dec          - pyke <unfixed> (embed)
 xine-lib  
870    
871  curl:  libdumbnet (libdnet upstream)
872  wget (code for NTLM authentication)          - nmap <unfixed> (fork)

Legend:
Removed from v.3064  
changed lines
  Added in v.11920

  ViewVC Help
Powered by ViewVC 1.1.5