/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3064 by jmm-guest, Thu Dec 15 23:01:23 2005 UTC revision 13120 by kees, Wed Oct 28 19:52:08 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
7  kdegraphics/kpdf  
8  tetex-bin (the very latest tetex-bin started to use poppler)  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor  
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embedding a copy of the library into another source package)
19          fork (the package is not just embedding code but it is a fork and
20                thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24    The srcpkg might be some string to identify the code if there is no
25    specific source package.
26    
27    Everything up to the next line is ignored.
28    ---BEGIN
29    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30            NOTE: Fixed packages link to poppler library unless otherwise noted
31            - pdftohtml <unknown>
32            [sarge] - pdftohtml <unfixed>
33            [etch] - pdftohtml <unfixed>
34            NOTE: has been replaced by poppler-utils
35            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36            - texlive-base 3.0-12 (embed)
37            - texlive-bin 2007-1 (embed)
38            NOTE: links to poppler
39            - koffice <unfixed> (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50    ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59    
60    peercast
61            - gnome-peercast <unfixed> (embed)
62            NOTE: gnome-peercast may better be removed, see #466539
63    
64    silc-toolkit
65            - silc-client 1.1~beta6-1 (embed)
66    
67    icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71    dietlibc
72            - ccontrol 0.9.1+20071204-1 (static)
73    
74    libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78    libiax
79            - iaxmodem <unfixable> (embed; bug #548885)
80    
81    spandsp
82            - iaxmodem <unfixable> (embed; bug #548885)
83    
84    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85            - dpkg <unfixed> (embed)
86            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87            - rsync <unfixed> (embed)
88            NOTE: somehow derived code base
89            - mono <unfixed> (embed)
90            TODO: check mozilla
91            - Linux kernels <unfixed> (embed)
92            - pvpgn 1.7.8-2 (embed)
93            - mrtg 2.12.2-1 (embed)
94            - rpm <unknown> (embed)
95            NOTE: pinged anibal since when rpm was fixed
96            - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98            - tra <unfixed>
99            - sash <unfixed>
100            - nsis <unfixed>
101            - mseide-msegui <unfixed>
102            NOTE: mseide
103            - mirrordir <unfixed>
104            - poco <unfixed>
105            - klibc <unfixed>
106            - ghostscript <unfixed>
107            - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112            - perl <unfixed>
113            - paraview <unfixed>
114            - gcvs <unfixed>
115            - erlang <unfixed>
116            - dump <unfixed>
117            - aide <unfixed> (static)
118            - dar <unfixed> (static)
119            - avfs <unfixed>
120            - fpc <unfixed>
121            - winff <unfixed>
122            NOTE: inherited from fpc, see #472304
123            - lazarus <unfixed>
124            NOTE: inherited from fpc, see #472304
125            - erlang <unfixed> (embed)
126            - gamera 3.2.3-1 (embed)
127    
128    dulwich
129            - hg-git 0.1.0-1 (embed; bug #541996)
130    
131    libvigraimpex
132            - hugin <unfixed> (embed; bug #542259)
133            - enblend-enfuse <unfixed> (embed; bug #542258)
134            - gamera 3.2.3-1 (embed)
135    
136    libbz2
137            - dpkg <unfixed> (static)
138    
139    libgadu
140            - centericq <unfixed> (embed)
141            - pidgin <unfixed> (embed)
142            NOTE: pidgin links dynamically against libgadu; that should be fixed, then???
143            - kdenetwork 4:3.3.2-5 (embed)
144            NOTE: from kdenetwork: kopete
145            - ekg 1:1.8~rc0-1 (embed)
146            - kadu 0.6.0.2-3 (embed; bug #504430)
147            - gadu <itp> (embed)
148    
149    xmlrpc (which package is the "origin" of this code?)
150            - drupal <unfixed> (embed)
151            - phpgroupware <unfixed> (embed)
152            - egroupware <unfixed> (embed)
153            - phpwiki <unfixed> (embed)
154            - php4 <unfixed> (embed)
155            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
156    
157    shtool (affects build-time only)
158            - mysql-ocaml <unfixed> (embed)
159            - php4 <unfixed> (embed)
160    
161    iceape
162            - iceweasel <unfixed> (fork)
163            - icedove <unfixed> (fork)
164            - xulrunner <unfixed> (fork)
165            - kompozer <unfixed> (embed; bug #532168)
166    
167    xli
168            - xloadimage <unfixed> (embed)
169    
170    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
171            - openmotif <unfixed> (embed)
172            - libxpm <unfixed> (embed)
173    
174    kerberized apps with BSD origin
175            - krb4 <removed> (embed)
176            - krb5 <unfixed> (embed)
177            - heimdal <unfixed> (embed)
178    
179    grip (which pkg is the origin?)
180            - libcdaudio <unfixed>
181            - grip <unfixed>
182            - gnome-vfs <unfixed>
183            TODO: check vfs2 as well
184    
185    fudforum
186            [etch] - phpgroupware <unfixed> (embed)
187            NOTE: phpgroupware-fudforum
188            [sarge] - egroupware-fudforum <removed> (embed)
189    
190    libbsd
191            - rdate 1:1.2-3 (embed)
192            - atheme-services <unfixed>
193            - libbsd-arc4random-perl <unfixed>
194            - isakmpd <unfixed>
195    
196    cvs
197            - gcvs <unfixed> (embed)
198            NOTE: see cvsunix/src in tarball
199    
200    pcre
201            - python* <unfixed> (embed)
202            - php4 <unknown> (embed)
203            - analog 2:5.23-0woody1 (embed)
204            - goffice <unfixed> (embed)
205            NOTE: libgoffice-*
206            - vfu 4.06-4.1 (embed; bug #450754)
207            - tf5 5.0beta7-1 (embed)
208            - monotone 0.43-1 (embed)
209            NOTE: this only affects versions >= 0.37
210            - glib2.0 2.15.2-1 (embed)
211            - apache2 2.0.53-4 (embed)
212            - exim4 4.10-0.srh20.12 (embed)
213            - yacas <unfixed> (embed)
214            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
215            - gtamsanalyzer.app 0.42-5 (embed)
216            - tin <unknown> (embed)
217            - kazehakase 0.5.2-1
218            - webkit 1.0.1-1 (embed)
219            - qt4-x11 <unfixed> (embed)
220            NOTE: embedded via webkit copy
221            - erlang <unfixed> (embed)
222    
223    tiff
224            - wxwindows2.4 2.2.1 (embed)
225            - gamera 3.2.3-1 (embed)
226    
227    uudeview
228            - libconvert-uulib-perl <unfixed> (embed)
229            - pan <unfixed> (embed)
230    
231    sqlite (not affected by security vulnerabilities so far)
232            - amarok <unfixed> (embed)
233            - monotone 0.43-1 (embed)
234            - iceweasel <unfixed> (embed)
235    
236    util-linux/mount
237            - loop-aes-utils <unfixed> (embed)
238            NOTE: contains code from util-linux' mount in the mount-aes-udeb
239    
240    sylpheed
241            - sylpheed-claws <unfixed> (fork)
242    
243    phpsysinfo
244            - egroupware <unfixed> (embed)
245            - phpgroupware <unfixed> (embed)
246    
247    phpldapadmin
248            [sarge] - egroupware <unfixed> (embed)
249            NOTE: removed from egroupware after sarge
250    
251    chmlib
252            - kchmviewer <unknown> (embed)
253    
254    ffmpeg (libavcodec/libavformat)
255            - mplayer 1.0~rc2-14 (embed; bug #395252)
256            - kino 1.0.0-1
257            - vlc <not-affected> (Links dynamically since initial release)
258            - smilutils 0.3.0-10
259            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
260            - motion 3.1.19-1
261            - gstreamer0.10-ffmpeg 0.10.3-2
262            - xmovie <removed> (static)
263            TODO: gimp-gap (potentially using ffmpeg code as well)
264            - avifile <unfixed> (embed; bug #538750)
265    
266    faad2
267            - mplayer 1.0~rc2-20 (embed)
268            - avifile <unfixed> (embed; bug #538750)
269    
270    libmad (MPEG decoding lib)
271            - xine-lib <unfixed> (embed)
272            - avifile <unfixed> (embed) [./plugins/libmad/*]
273            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
274    
275    libdts
276            - xine-lib <unfixed> (embed)
277    
278  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  flac
279  dpkg          - xine-lib <unfixed> (embed)
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
   
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino(?)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
280    
281  mad MPEG decoding lib:  liba52
282  mad          - a52dec <unfixed> (embed)
283  xine-lib          - xine-lib <unfixed> (embed)
284    
285    libmpeg2
286            - mpeg2dec <unfixed> (embed)
287            - xine-lib <unfixed> (embed)
288    
289    libntlm
290            - wget <unfixed> (fork; bug #550436)
291            - curl <unfixed> (fork; bug #550437)
292            - cntlm <unfixed> (fork; bug #550438)
293    
294    uw-imap
295            - pine <unfixed> (embed)
296            - alpine <unfixed> (embed)
297    
298    imagemagick
299            - graphicsmagick <unfixed> (fork)
300    
301    python-urlgrabber
302            - mercurial <unfixed> (embed; bug #531062)
303    
304    python-mechanize
305            - beautifulsoup <unfixed> (embed)
306    
307    halibut
308            - nsis <unfixed> (fork)
309    
310    libghttp
311            - hotway <unfixed> (embed)
312    
313    libsndfile
314            - ardour 1:2.7.1-1 (embed)
315    
316    glibmm2.4
317            - ardour 1:2.7.1-1 (embed)
318    
319    libgnomecanvasmm2.6
320            - ardour 1:2.7.1-1 (embed)
321    
322    libsigc++-2.0
323            - ardour 1:2.7.1-1 (embed)
324    
325    soundtouch
326            - ardour 1:2.7.1-1 (embed)
327    
328    libmms
329            - xine-lib <unfixed> (embed)
330            - mimms <unfixed> (embed)
331    
332    fckeditor
333            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
334            - moin 1.8.2-2 (embed; bug #452599)
335            - karrigell <removed> (embed; bug #452598)
336            - gforge 4.6.99+svn6225-1 (embed)
337            - request-tracker3.8 <unfixed> (embed)
338    
339    ipatlas (not packaged in Debian)
340            - moodle <unfixed> (embed; bug #507185)
341    
342    libphp-phpmailer
343            - moodle <unfixed> (embed; bug #507185)
344            - mahara <unfixed> (embed)
345            - symfony <unfixed> (embed)
346            [etch] - phpgroupware <unfixed> (embed)
347            NOTE: phpgroupware-felamimail is only in etch
348            - egroupware <unfixed> (embed; bug #504283)
349            - glpi <unfixed>
350    
351    htmlArea (not packaged in Debian)
352            - moodle <unfixed> (embed)
353    
354    giflib:
355            - wine <unfixed> (embed; bug #466181)
356    
357    bennu (not packaged in Debian, http://bennu.sourceforge.net)
358            - moodle <unfixed> (embed)
359    
360    smarty:
361            - moodle 1.8.2-2 (embed; bug #471158)
362            - gallery2 2.2.5-2 (embed; bug #471160)
363            - mahara 0.9.2-2 (embed; bug #471201)
364            - gosa 2.4beta1-1 (embed; bug #471200)
365    
366    TinyMCE
367            - wordpress 2.5.1-3 (embed; bug #478257)
368            - moodle <unfixed> (embed; bug #507185)
369            - knowledgeroot <unfixed> (embed)
370            - joomla <itp> (bug #326398)
371    
372    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
373            - scite <unfixed> (embed)
374            - qscintilla <unfixed> (embed)
375            - qscintilla2 <unfixed> (embed)
376            - geany <unfixed> (fork)
377            - anjuta <unfixed> (embed)
378    
379    libphp-adodb
380            - moodle <unfixed> (embed; bug #507185)
381            NOTE: also AdoDB-XML Schema
382            - gallery2 <unfixed> (embed)
383            - phppgadmin <unfixed> (embed)
384            - egroupware <unfixed> (embed)
385            - phpwiki <unfixed> (embed)
386            - torrentflux 2.0beta1-2 (embed)
387            - ipplan <unfixed> (embed)
388            - typo3-src <unfixed> (embed)
389            - cacti <unknown> (embed)
390            [sarge] - cacti <unfixed> (embed)
391            NOTE: dependency exists, but internal version is used
392            - gforge 4.7~rc2-6 (embed)
393            - mahara <unfixed> (embed)
394    
395    gzip
396            - linux-kernel <unfixed> (embed)
397            NOTE: lib/inflate.c
398            - klibc <unfixed> (embed)
399            NOTE: based on linux-kernel gzip code
400            - busybox <unfixed> (embed)
401    
402    neon
403            - cadaver 0.22.3+debian-1 (embed; bug #188381)
404            - gnome-vfs2 <unfixed> (embed; bug #395874)
405            [etch] - litmus <unfixed> (embed; #395875)
406            - litmus <removed> (embed; #395875)
407            [sarge] - screem <unfixed> (embed)
408            - sitecopy 1:0.16.3-5 (embed; bug #395876)
409            [etch] - tla <unfixed> (embed; bug #395877)
410            [sarge] - tla <unfixed> (embed; bug #395877)
411    
412    libmodplug
413            - gst-plugins-bad0.10 <unfixed> (embed)
414    
415    libvncserver
416            - vino <unfixed> (embed)
417    
418    putty
419            - filezilla <unfixed> (embed)
420    
421    tinyxml (not packaged in Debian)
422            - filezilla <unfixed>
423    
424    gv
425            - evince <unfixed> (embed)
426            NOTE: ps/ tree from gv 3.5.8
427            NOTE: evince-gtk is affected (a component of evince source package)
428    
429    libXbae
430            - paw <removed> (embed)
431            [etch] - paw <unfixed> (embed)
432    
433    libgtkhtml
434            - claws-mail-extra-plugins <unfixed> (fork)
435    
436    libXaw
437            - paw <removed> (embed)
438            [etch] - paw <unfixed> (embed)
439            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
440    
441    libgd2
442            - graphviz <unfixed> (embed)
443            NOTE: lib/gd seems to be 2.0.33
444            - wml <unfixed> (embed)
445            - libwmf <unfixed> (embed)
446            NOTE: derived from gd 1.6.3
447    
448    rar
449            - unrar-nonfree <unfixed> (embed)
450    
451    unrar-free (maybe this code is derived from the original rar, too?)
452            - clamav <unfixed> (embed)
453            NOTE: seems to be disabled in default config
454    
455    mplayer (DirectMedia Object loader)
456            - xine-lib <unfixed> (embed)
457            NOTE: src/libw32dll/
458            - vlc <unfixed> (embed)
459            NOTE: modules/codec/dmo/
460            - mplayer 1.0~rc2-20 (embed)
461    
462    libwpd (WordPerfect converter)
463            - openoffice.org <unfixed> (embed)
464    
465    fsplib (http://sourceforge.net/projects/fsp/)
466            - gftp <unfixed> (embed)
467            NOTE: lib/fsplib version 0.3
468    
469    sprng
470            - tree-puzzle <unfixed> (embed)
471    
472    librpcsecgss
473            - krb5 <unfixed> (embed)
474    
475    jasper
476            - ghostscript <unfixed> (embed)
477            - gs-gpl <unfixed> (embed)
478    
479    libiris
480            - psi <unfixed> (embed)
481            - kdenetwork <unfixed> (embed)
482            NOTE: kopete embeds libiris but links dynamically to libidn
483            - kdegames <unfixed> (embed)
484            NOTE: ksirk/kde4
485    
486    libidn
487            - monotone 0.43-1 (embed)
488            - psi <unfixed> (embed)
489            NOTE: psi embeds libiris which embeds libidn
490            - kdegames <unfixed> (embed)
491            NOTE: kdegames/kde4 embeds libiris which embeds libidn
492    
493    liblua
494            - monotone 0.43-1 (embed)
495            - nmap <unfixed> (embed; bug #527997)
496            NOTE: fixed upstream as of nmap svn rev13336.
497    
498    libbotan
499            - monotone 0.43-1 (embed)
500    
501    NetXX
502            - monotone 0.43-1 (embed)
503    
504    libgc
505            - mono <unfixed> (embed)
506    
507    lzma
508            - p7zip <unfixed> (embed)
509            - xz-utils <unfixed> (fork)
510    
511    lzo
512            - grub2 <unfixed> (embed)
513    
514    yassl
515            - mysql-dfsg-5.0 <unfixed> (embed)
516    
517    pax code
518            - tar <unfixed> (embed)
519            - cpio <unfixed> (embed)
520    
521    t1lib
522            - tetex-bin 2.0.2-1 (embed)
523            - texlive-bin <unknown> (embed)
524    
525    guichan
526            - boswars <unfixed> (embed)
527            NOTE: maintainer notified us, working on it
528    
529    tolua
530            - boswars <unfixed> (embed)
531            NOTE: maintainer notified us, working on it
532    
533    asio-dev
534            - luxrender <unfixed> (embed)
535            NOTE: maintainer notified us, working on it
536            NOTE: may be merged with boost "soon"
537    
 libdts:  
 libdts  
538  xine-lib  xine-lib
539            - vlc <unfixed> (embed)
540            NOTE: only parts included in modules/access/rtsp
541    
542  flac:  netpbm
543  flac          - tcl8.3 <unfixed> (embed)
544  xine-lib          - tcl8.4 <unfixed> (embed)
545            - tcl8.5 <unfixed> (embed)
546            NOTE: generic/tkImgGIF.c
547    
548    tk8.5
549            - tk8.0 <removed> (old-version)
550            - tk8.3 <unfixed> (old-version)
551            - tk8.4 <unfixed> (old-version)
552            - perl-tk <unfixable> (fork)
553    
554    samba
555            - mc 2:4.6.2~git20080311-1 (embed)
556            NOTE: maintainer is aware of this, currently searching a solution
557    
558    plib1.8.4c2
559            - boson <unfixed> (fork)
560            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
561    
562    fribidi
563            - quesoglc <unfixed> (embed)
564            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
565    
566    glew
567            - quesoglc <unfixed> (embed; bug #489341)
568            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
569    
570    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
571            - transcend <unfixed> (embed)
572            - cultivation <unfixed> (embed)
573            - passage <unfixed> (embed)
574            - gravitation <unfixed> (embed)
575    
576    tar
577            - libarchive <unfixed> (embed)
578            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
579    
580    cpio
581            - libarchive <unfixed> (embed)
582            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
583    
584    webkit
585            - qt4-x11 <unfixed> (embed)
586    
587    ftgl
588            - blender 2.46+dfsg-1 (embed)
589    
590    wv
591            - abiword <unfixed>
592    
593    qemu
594            - kvm <unfixed> (embed; bug #543159)
595            - xen-3 <unfixed> (embed)
596            - xen-unstable <unfixed> (embed)
597    
598    vgabios
599            - kvm <unfixed> (embed; bug #489442)
600    
601    bochs
602            - kvm <unfixed> (embed; bug #489442)
603    
604    speex
605            - vorbis-tools <unfixed> (embed)
606            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
607            - gst-plugins-good0.10 <unfixed> (embed)
608            - xine-lib <unfixed> (embed)
609            - libfishsound <unfixed> (embed)
610            - libannodex <unfixed> (embed)
611            - vlc <unfixed> (embed)
612            - xmms-speex <unfixed> (embed)
613            - libsdl-sound1.2 <unfixed> (embed)
614            - sweep <unfixed> (embed)
615    
616    libreadline
617            - magic <itp> (old-version)
618    
619    opcode
620            - ode <unfixed> (embed)
621            NOTE: opcode is not a package in debian, it is just embedded
622            NOTE: http://www.codercorner.com/Opcode.htm
623    
624    gimpact
625            - ode <unfixed> (embed)
626            NOTE: gimpact is not a package in debian, it is just embedded
627            NOTE: http://gimpact.sf.net
628    
629    mochikit
630            - mahara <unfixed> (embed)
631            NOTE: they require extra patches, still unmerged upstream
632            - ntop <unfixed> (embed)
633            - coherence <unfixed> (embed)
634            NOTE: python-coherence
635            - paste <unfixed> (embed)
636            NOTE: python-paste
637            - turbogears <unfixed> (embed)
638            NOTE: python-turbogears
639            - plone3 <unfixed> (embed)
640            NOTE: zope-plone3
641    
642    prototypejs
643            - netbeans-ide 6.0.1+dfsg-2 (embed)
644            - auth2db <unfixed> (embed)
645            - webcit <unfixed> (embed)
646            NOTE: citadel-webcit
647            - asterisk <unfixed> (embed)
648            - doc-iana <unfixed> (embed)
649            - libaws <unfixed> (embed)
650            NOTE: libaws-doc
651            - libgettext-ruby <unfixed> (embed)
652            NOTE: libgettext-ruby-data
653            - libjson-ruby <unfixed> (embed)
654            NOTE: libjson-ruby-doc
655            - lucene2 <unfixed> (embed)
656            NOTE: liblucene2-java-doc
657            - libopenid-ruby <unfixed> (embed)
658            - solr <unfixed> (embed)
659            NOTE: solr-common
660            - glpi <unfixed> (embed)
661            - mnemo2 <unfixed> (embed)
662            - nag2 <unfixed> (embed)
663            - knowledgeroot <unfixed> (embed)
664            - mediatomb <unfixed> (embed)
665            NOTE: mediatomb-common
666            - mt-daapd <unfixed> (embed)
667            - op-panel <unfixed> (embed)
668            - ebug-http <unfixed> (embed)
669            - phpgedview <removed> (embed)
670            - poker-network <unfixed> (embed)
671            NOTE: poker-web
672            - webhelpers <unfixed> (embed)
673            NOTE: python-webhelpers
674            - qwik <unfixed> (embed)
675            - rails <unfixed> (embed)
676            - typo3-src <unfixed> (embed)
677            - wordpress 2.5.0-2 (embed)
678            - zope <unfixed> (embed)
679            NOTE: zope-plone3
680            - smokeping <unfixed> (embed)
681            - ampache 3.4.1-2 (embed)
682            - exaile <unfixed> (embed)
683            - hobix <unfixed> (embed)
684            - pixelpost <unfixed> (embed)
685            - symfony <unfixed> (embed)
686            NOTE: it's been said that there are custom changes
687            - zabbix <unfixed> (embed)
688            NOTE: zabbix-frontend-php
689            - turba2 <unfixed> (embed)
690    
691    gdb
692            - insight <unfixed> (embed)
693    
694    e2fsprogs
695            - ldiskfsprogs <unfixable> (fork)
696    
697    quazip (not packaged in Debian)
698            - qcake <unfixed> (embed)
699            NOTE: starting with upstream version 0.6.4
700    
701    exo
702            - pcmanfm <unfixed> (embed; bug #499677)
703            NOTE: slightly modified source code
704    
705    java
706            - openjdk-6 <unfixed>
707            - sun-java5 <unfixed>
708            - sun-java6 <unfixed>
709    
710    libphp-snoopy
711            - ampache 3.4.1-2 (embed; bug #504169)
712            - mahara 1.0.5-2 (embed; bug #504170)
713            - pixelpost 1.7.1-5 (embed; bug #504171)
714            - mediamate 0.9.3.6-5 (embed; bug #504172)
715            - opendb <removed> (embed; bug #504173)
716            [etch] - opendb <unfixed> (embed; bug #504173)
717            - wordpress 2.5.1-9 (embed; bug #443948)
718            - moodle <unfixed> (embed; bug #507185)
719            [etch] - phpgroupware <unfixed> (embed)
720            NOTE: phpgroupware-felamimail
721            - magpierss 0.72-3 (embed; bug #431089)
722    
723    jquery
724            - zekr <unfixed> (embed)
725            - wordpress <unknown> (embed)
726            - yocto-reader <unfixed> (embed)
727            - textpattern <unfixed> (embed)
728            - genshi 0.5.1-1 (embed)
729            NOTE: compressed file under examples/ dir
730            - prewikka <unfixed> (embed)
731            - libramaze-ruby <unfixed> (embed)
732            - drupal5 <unfixed> (embed)
733            - b2evolution <unfixed> (embed)
734            - wesnoth <unfixed> (embed)
735    
736    tablesorter (jquery plugin, not packaged yet)
737            - wesnoth <unfixed> (embed)
738    
739    kses
740            - wordpress <unfixed> (embed; bug #504242)
741            NOTE: their copy has all methods renamed to wp_<foo>
742            NOTE: kses isn't in Debian, RFP: #504240
743            - moodle <unfixed> (embed; bug #507185)
744            - egroupware <unfixed> (embed)
745    
746    magpierss
747            - wordpress <unfixed> (embed; bug #504242)
748            - moodle <unfixed>
749    
750    php-gettext
751            - wordpress 2.8.4-1 (embed; bug #504242)
752    
753    libphp-ixr (name may change, it is the Incutio XML-RPC)
754            - wordpress <unfixed> (embed; bug #504242)
755            NOTE: libphp-ixr isn't in Debian, RFP: #504236
756            - dokuwiki <unfixed> (embed)
757            - textpattern <unfixed> (embed)
758    
759    libphp-cas
760            - glpi <unfixed> (embed)
761            - moodle <unfixed> (embed; bug #505984)
762    
763    scriptaculous
764            - glpi <unfixed> (embed)
765            - libaws <unfixed> (embed)
766            NOTE: libaws-doc
767            - op-panel <unfixed> (embed)
768            - symfony <unfixed> (embed)
769            NOTE: maintainer says there are extra incompatible changes required
770            - pixelpost <unfixed> (embed)
771            - webhelpers <unfixed> (embed)
772            NOTE: python-webhelpers
773            - qwik <unfixed> (embed)
774            - smokeping <unfixed> (embed)
775            - turba2 <unfixed> (embed)
776            - typo3-src 4.2.3-1 (embed)
777    
778    libmarkdown-php
779            - moodle <unfixed> (embed; bug #507185)
780            - pixelpost <unfixed> (embed)
781    
782    php-openid
783            - wordpress-openid <itp> (embed)
784    
785    geshi
786            - dokuwiki 0.0.20080505-3.1 (embed)
787            - pgfouine 1.0-1.1 (embed)
788            - websvn 2.1.0-1 (embed)
789    
790    webcalendar
791            - gforge 4.7~rc2-6 (embed; bug #504758)
792    
793    libical
794            - kdepim <unfixed> (fork)
795            - kdepimlibs <unfixed> (fork)
796            NOTE: fixed in KDE4 post 4.1.x series
797            - claws-mail-extra-plugins <unfixed> (fork)
798    
799    libltdl3
800            - kdelibs <unfixed> (embed)
801            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
802            - synfig <unfixed> (embed)
803    
804    harfbuzz
805            - qt4-x11 <unfixed> (embed)
806    
807    libzip
808            - php5 <unfixed> (fork)
809            - odt2txt <unfixed> (embed; bug #523808)
810    
811    json.php (not packaged; should be replaced with php's built-in functions)
812            - moodle <unfixed>
813            - yui <unfixed>
814            - gallery2 <unfixed>
815            - dokuwiki <unfixed>
816            - typo3-src <unfixed>
817    
818    php-fpdf
819            - tcpdf <itp> (fork)
820            - moodle <unfixed>
821            - phpwiki <unfixed>
822            - egroupware <unfixed>
823            - ldap-account-manager <unfixed> (fork)
824    
825    tcpdf (itp: #495985)
826            - moodle <unfixed>
827            - phpmyadmin <unfixed>
828    
829    typo3
830            - moodle <unfixed>
831    
832    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
833            - moodle <unfixed>
834            - gosa <unfixed>
835    
836    php-ole (itp: #487558)
837            - moodle <unfixed>
838    
839    pieforms (http://www.catalyst.net.nz)
840            - mahara <unfixed>
841    
842    savant2 (http://phpsavant.com)
843            - egroupware <unfixed>
844    
845    rssparser (http://nwow.org)
846            - egroupware <unfixed>
847            - phpgroupware <unfixed>
848    
849    lcms
850            - openjdk-6 <unfixed> (fork)
851    
852    libphp-phplayersmenu
853            - diogenes <unfixed>
854            - phpldapadmin <unfixed>
855    
856    libphp-pclzip
857            - docvert <unfixed>
858            - moodle <unfixed>
859            - egroupware <unfixed>
860    
861    libphp-simplepie
862            - dokuwiki <unfixed>
863    
864    libphp-jpgraph
865            - egroupware <unfixed>
866    
867    php-simpletest
868            - moodle <unfixed>
869    
870    libpng
871            - iceweasel <not-affected> (uses xulrunner)
872            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
873            - iceape 1.0.13~pre080614i-0etch1 (embed)
874            - xulrunner 1.9.0.13-1 (embed)
875            [lenny] - xulrunner 1.9.0.11-0lenny1
876            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
877            - gamera 3.2.3-1 (embed)
878    
879    irssi
880            - silc-client <unfixed> (embed)
881            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
882    
883    extc
884            - mtasc <unfixed> (embed)
885            - haxe <unfixed> (embed)
886    
887    swflib
888            - mtasc <unfixed> (embed)
889            - haxe <unfixed> (embed)
890    
891    libitext-java
892            - bouncycastle 2.1.4-1 (embed)
893    
894    python-ply
895            - pyke <unfixed> (embed)
896    
897    libdumbnet (libdnet upstream)
898            - nmap <unfixed> (fork)
899    
900    gcc-4.4
901            - gcc-mingw32 <unfixed> (embed)
902    
903    camlimages
904            - advi <unfixed> (static; bug #550441)
905    
906    memcached
907            - memcachedb <unfixed> (embed)
908    
909    yajl
910            - argyll <unfixed> (embed; bug #544223)
911            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
912    
913    libept
914            - adept <unfixed> (embed; bug #540649)
915    
916    libvorbis
917            - iceweasel <not-affected> (uses xulrunner)
918            - xulrunner <not-affected> (introduced in 1.9.1)
919            TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]
920    
921    cairo
922            - iceweasel <not-affected> (uses xulrunner)
923            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
924    
925    php-net-dnsbl
926            - serendipity <unfixed> (embed)
927    
928    php-onyx-rss
929            - serendipity <unfixed> (embed)
930    
931    php-text-wiki
932            - serendipity <unfixed> (embed)
933    
934    php-xml-rpc
935            - serendipity <unfixed> (embed)
936    
937    polarssl (does not have a shared library)
938            - pdkim <itp> (embed; bug #543150)
939            - xyssl <unfixed> (old-version)
940    
941    pidgin
942            - gaim <removed> (old-version)
943    
944    icu
945            - webkit 1.0.1-1 (embed; bug #547214)
946            - texlive-bin <unfixed> (fork)
947            NOTE: texlive upstream working with icu upstream to merge their changes
948    
949    cyrus-imapd-2.2
950            - kolab-cyrus-imapd <unfixed> (fork)
951            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
952    
953    python-cxx-dev
954            - freecad <unfixed> (embed; bug #547936)
955    
956    libzipios++-dev
957            - freecad <unfixed> (embed; bug #547941)
958    
959    linux-2.6
960            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
961            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
962            - kernel-source-2.6.8 <removed> (old-version)
963            - kernel-source-2.4.27 <removed> (old-version)
964            - kernel-source-2.4.24 <removed> (old-version)
965            - kernel-source-2.2.25 <removed> (old-version)
966            - kernel-source-2.2.20 <removed> (old-version)
967    
968    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
969            - kvm <unfixed> (embed) [./libfdt/*]
970    
971    qweb (not packaged)
972            - ajaxterm <unfixed>
973    
974    opensaml2
975            - opensaml <removed> (old-version)
976    
977    shibboleth-sp2
978            - shibboleth-sp <removed> (old-version)
979    
980    tuxonice-userui
981            - suspend2-userui <removed> (old-version)
982    
983    expat
984            - w3c-www <unfixed> (embed; bug #551941) [./modules/expat/*]
985            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
986    
987    xerces-c
988            - xerces-c2 <unfixed> (old-version)
989            - xerces27 <removed> (old-version)
990    
991    md5 (RSA's version; not the gnu version provided by coreutils)
992            - w3c-www <unfixed> (embed; bug #551942) [./modules/md5/*]
993    
994  liba52:  enet
995  a52dec          - sauerbraten <unfixed> (embed; #497194)
 xine-lib  
996    
997  libmpeg2:  eglibc
998  mpeg2dec          - glibc <removed> (old-version)
 xine-lib  
999    
1000  curl:  galib
1001  wget (code for NTLM authentication)          - gamera 3.2.3-1 (embed)

Legend:
Removed from v.3064  
changed lines
  Added in v.13120

  ViewVC Help
Powered by ViewVC 1.1.5