/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3093 by jmm-guest, Mon Dec 19 00:11:32 2005 UTC revision 12663 by pabs, Sun Aug 23 04:02:17 2009 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16    sort: static (linking statically against a lib)
17          embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19                thus might share parts of the source code)
20          old-version (the package is an older version of essentially
21                       the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30            - gpdf <removed>
31            [sarge] - gpdf <unfixed>
32            NOTE: has been replaced by evince in etch
33            - pdftohtml <unknown>
34            [sarge] - pdftohtml <unfixed>
35            [etch] - pdftohtml <unfixed>
36            NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38            - texlive-base 3.0-12 (embed)
39            - texlive-bin 2007-1 (embed)
40            NOTE: links to poppler
41            - koffice <unfixed> (embed; bug #436163)
42            - libextractor 0.5.12-1 (embed)
43            NOTE: libextractor is using its own pdf decoder now
44            - pdfkit.framework 0.8-4 (embed)
45            - ipe <unfixed> (embed)
46            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47            - ruby-gnome2 <unknown> (embed)
48            NOTE: copy only present in source but links to poppler
49            - pdfedit <unfixed> (embed; bug #510794)
50            - swftools <unfixed> (embed)
51    
52    ppmd
53            - libcomplearn-mod-ppmd <unfixed> (fork)
54            NOTE: discussion in #458152
55    
56    libevent
57            - transmission 1.71-1 (embed; bug #529372)
58    
59    lrmi
60            - read-edid 2.0.0-1 (embed; bug #495131)
61    
62    peercast
63            - gnome-peercast <unfixed> (embed)
64            NOTE: gnome-peercast may better be removed, see #466539
65    
66    silc-toolkit
67            - silc-client 1.1~beta6-1 (embed)
68    
69    icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    dietlibc
74            - ccontrol 0.9.1+20071204-1 (static)
75    
76    libmikmod
77            - sdl-mixer1.2 <unfixed> (embed)
78            TODO: report bug
79    
80    libiax
81            - iaxmodem <unfixed> (embed)
82    
83    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
84            - dpkg <unfixed> (embed)
85            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
86            - rsync <unfixed> (embed)
87            NOTE: somehow derived code base
88            - mono <unfixed> (embed)
89            TODO: check mozilla
90            - Linux kernels <unfixed> (embed)
91            - pvpgn 1.7.8-2 (embed)
92            - mrtg 2.12.2-1 (embed)
93            - rpm <unknown> (embed)
94            NOTE: pinged anibal since when rpm was fixed
95            - tuxcmd-modules <unfixed> (embed)
96            - zsync <unfixed>
97            - tra <unfixed>
98            - sash <unfixed>
99            - nsis <unfixed>
100            - mseide-msegui <unfixed>
101            NOTE: mseide
102            - mirrordir <unfixed>
103            - poco <unfixed>
104            - klibc <unfixed>
105            - ghostscript <unfixed>
106            - freeimage <unfixed>
107            - clamav <unfixed> (fork)
108            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
109            - tuxonice-userui <unfixed>
110            - plt-scheme <unfixed>
111            - perl <unfixed>
112            - paraview <unfixed>
113            - gcvs <unfixed>
114            - erlang <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124    
125    dulwich
126            - hg-git <unfixed> (embed; bug #541996)
127    
128    libvigraimpex
129            - hugin <unfixed> (embed)
130            - enblend-fuse <unfixed> (embed)
131    
132    libbz2
133            - dpkg <unfixed> (static)
134    
135    libgadu:
136            - centericq <unfixed> (embed)
137            - gaim <unfixed> (embed)
138            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
139            - kdenetwork 4:3.3.2-5 (embed)
140            NOTE: from kdenetwork: kopete
141            - gadu <unfixed> (embed)
142            - ekg 1:1.8~rc0-1 (embed)
143            - kadu 0.6.0.2-3 (embed; bug #504430)
144            NOTE: gadu not packaged in Debian yet
145    
146    xmlrpc (which package is the "origin" of this code?)
147            - drupal <unfixed> (embed)
148            - phpgroupware <unfixed> (embed)
149            - egroupware <unfixed> (embed)
150            - phpwiki <unfixed> (embed)
151            - php4 <unfixed> (embed)
152            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
153    
154    shtool (affects build-time only)
155            - mysql-ocaml <unfixed> (embed)
156            - php4 <unfixed> (embed)
157    
158    mozilla source code
159            - mozilla-firefox <unfixed> (embed)
160            - mozilla-thunderbird <unfixed>
161            - firefox <removed>
162            - thunderbird <removed>
163            - iceweasel <unfixed> (embed)
164            - iceape <unfixed> (embed)
165            - icedove <unfixed> (embed)
166            - xulrunner <unfixed> (embed)
167            - nvu <removed> (embed)
168            - kompozer <unfixed> (embed; bug #532168)
169    
170    xli
171            - xloadimage <unfixed> (embed)
172    
173    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
174            - openmotif <unfixed> (embed)
175            - libxpm <unfixed> (embed)
176    
177    kerberized apps with BSD origin
178            - krb4 <unfixed> (embed)
179            - krb5 <unfixed> (embed)
180            - heimdal <unfixed> (embed)
181    
182    grip (which pkg is the origin?)
183            - libcdaudio <unfixed>
184            - grip <unfixed>
185            - gnome-vfs <unfixed>
186            TODO: check vfs2 as well
187    
188    fudforum
189            [etch] - phpgroupware <unfixed> (embed)
190            NOTE: phpgroupware-fudforum
191            [sarge] - egroupware-fudforum <removed> (embed)
192    
193    libbsd
194            - rdate 1:1.2-3 (embed)
195            - atheme-services
196            - libbsd-arc4random-perl
197            - isakmpd
198    
199    cvs
200            - gcvs <unfixed> (embed)
201            NOTE: see cvsunix/src in tarball
202    
203    pcre
204            - python* <unfixed> (embed)
205            - php4 <unknown> (embed)
206            - analog 2:5.23-0woody1 (embed)
207            - goffice <unfixed> (embed)
208            NOTE: libgoffice-*
209            - vfu 4.06-4.1 (embed; bug #450754)
210            - tf5 5.0beta7-1 (embed)
211            - monotone 0.43-1 (embed)
212            NOTE: this only affects versions >= 0.37
213            - glib2.0 2.15.2-1 (embed)
214            - apache2 2.0.53-4 (embed)
215            - exim4 4.10-0.srh20.12 (embed)
216            - yacas <unfixed> (embed)
217            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
218            - gtamsanalyzer.app 0.42-5 (embed)
219            - tin <unknown> (embed)
220            - kazehakase 0.5.2-1
221            - webkit <unfixed> (embed)
222            - qt4-x11 <unfixed> (embed)
223            NOTE: embedded via webkit copy
224    
225    tiff
226            - wxwindows2.4 2.2.1 (embed)
227    
228    uudeview
229            - libconvert-uulib-perl <unfixed> (embed)
230            - pan <unfixed> (embed)
231    
232    sqlite (not affected by security vulnerabilities so far)
233            - amarok <unfixed> (embed)
234            - monotone 0.43-1 (embed)
235            - iceweasel <unfixed> (embed)
236    
237    util-linux/mount
238            - loop-aes-utils <unfixed> (embed)
239            NOTE: contains code from util-linux' mount in the mount-aes-udeb
240    
241    webmin
242            - usermin <unknown> (embed)
243            [sarge] - usermin <unfixed> (embed)
244    
245    sylpheed
246            - sylpheed-claws <unfixed> (fork)
247    
248    phpsysinfo
249            - egroupware <unfixed> (embed)
250            - phpgroupware <unfixed> (embed)
251    
252    phpldapadmin
253            [sarge] - egroupware <unfixed> (embed)
254            NOTE: removed from egroupware after sarge
255    
256    chmlib
257            - kchmviewer <unknown> (embed)
258    
259    libavcodec/libavformat (source: ffmpeg)
260            - mplayer 1.0~rc2-14 (embed; bug #395252)
261            - kino 1.0.0-1
262            - vlc <not-affected> (Links dynamically since initial release)
263            - smilutils 0.3.0-10
264            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
265            - motion 3.1.19-1
266            - gstreamer0.10-ffmpeg 0.10.3-2
267            - xmovie <unfixed>
268            NOTE: xmovie removed, only present in Etch
269            TODO: gimp-gap (potentially using ffmpeg code as well)
270            - avifile <unfixed> (embed; bug #538750)
271    
272    faad2
273            - mplayer 1.0~rc2-20 (embed)
274            - avifile <unfixed> (embed; bug #538750)
275    
276    mad MPEG decoding lib
277            - mad <unfixed> (embed)
278            - xine-lib <unfixed> (embed)
279    
 xpdf code: (some use xpdf 2, some xpdf 3)  
 gpdf  
 pdftohtml  
 kdegraphics/kpdf  
 tetex-bin (the very latest tetex-bin started to use poppler)  
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
 poppler  
 koffice  
 libextractor  
   
   
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
   
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
280  libdts  libdts
281  xine-lib          - xine-lib <unfixed> (embed)
282    
 flac:  
283  flac  flac
284  xine-lib          - xine-lib <unfixed> (embed)
285    
286  liba52:  liba52
287  a52dec          - a52dec <unfixed> (embed)
288  xine-lib          - xine-lib <unfixed> (embed)
289    
290    libmpeg2
291            - mpeg2dec <unfixed> (embed)
292            - xine-lib <unfixed> (embed)
293    
294    curl
295            - wget <unfixed> (embed)
296            NOTE: code for NTLM authentication
297    
298    uw-imap
299            - pine <unfixed> (embed)
300            - alpine <unfixed> (embed)
301    
302    imagemagick
303            - graphicsmagick <unfixed> (fork)
304    
305    python-urlgrabber
306            - mercurial <unfixed> (embed; bug #531062)
307    
308    python-mechanize
309            - python-beautifulsoup <unfixed> (embed)
310    
311    halibut
312            - nsis <unfixed> (fork)
313    
314    libghttp
315            - hotway <unfixed> (embed)
316    
317    libsndfile
318            - ardour 1:2.7.1-1 (embed)
319    
320    glibmm2.4
321            - ardour 1:2.7.1-1 (embed)
322    
323    libgnomecanvasmm2.6
324            - ardour 1:2.7.1-1 (embed)
325    
326    libsigc++-2.0
327            - ardour 1:2.7.1-1 (embed)
328    
329    soundtouch
330            - ardour 1:2.7.1-1 (embed)
331    
332    libmms
333            - xine-lib <unfixed> (embed)
334            - mimms <unfixed> (embed)
335    
336    fckeditor
337            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
338            - moin 1.8.2-2 (embed; bug #452599)
339            - karrigell <removed> (embed; bug #452598)
340            - gforge 4.6.99+svn6225-1 (embed)
341            - request-tracker3.8 <unfixed> (embed)
342    
343    ipatlas (not packaged in Debian)
344            - moodle <unfixed> (embed; bug #507185)
345    
346    libphp-phpmailer
347            - moodle <unfixed> (embed; bug #507185)
348            - mahara <unfixed> (embed)
349            - symfony <unfixed> (embed)
350            [etch] - phpgroupware <unfixed> (embed)
351            NOTE: phpgroupware-felamimail is only in etch
352            - egroupware <unfixed> (embed; bug #504283)
353            - glpi <unfixed>
354    
355    htmlArea (not packaged in Debian)
356            - moodle <unfixed> (embed)
357    
358    giflib:
359            - wine <unfixed> (embed; bug #466181)
360    
361    bennu (not packaged in Debian, http://bennu.sourceforge.net)
362            - moodle <unfixed> (embed)
363    
364    smarty:
365            - moodle 1.8.2-2 (embed; bug #471158)
366            - gallery2 2.2.5-2 (embed; bug #471160)
367            - mahara 0.9.2-2 (embed; bug #471201)
368            - gosa 2.4beta1-1 (embed; bug #471200)
369    
370    TinyMCE
371            - wordpress 2.5.1-3 (embed; bug #478257)
372            - moodle <unfixed> (embed; bug #507185)
373            - knowledgeroot <unfixed> (embed)
374            - joomla <itp> (bug #326398)
375    
376    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
377            - scite <unfixed> (embed)
378            - qscintilla <unfixed> (embed)
379            - qscintilla2 <unfixed> (embed)
380            - geany <unfixed> (fork)
381            - anjuta <unfixed> (embed)
382    
383    libphp-adodb
384            - moodle <unfixed> (embed; bug #507185)
385            NOTE: also AdoDB-XML Schema
386            - gallery2 <unfixed> (embed)
387            - phppgadmin <unfixed> (embed)
388            - egroupware <unfixed> (embed)
389            - phpwiki <unfixed> (embed)
390            - torrentflux 2.0beta1-2 (embed)
391            - ipplan <unfixed> (embed)
392            - typo3-src <unfixed> (embed)
393            - cacti <unknown> (embed)
394            [sarge] - cacti <unfixed> (embed)
395            NOTE: dependency exists, but internal version is used
396            - gforge 4.7~rc2-6 (embed)
397            - mahara <unfixed> (embed)
398    
399    gzip
400            - linux-kernel <unfixed> (embed)
401            NOTE: lib/inflate.c
402            - klibc <unfixed> (embed)
403            NOTE: based on linux-kernel gzip code
404            - busybox <unfixed> (embed)
405    
406    neon
407            - cadaver 0.22.3+debian-1 (embed; bug #188381)
408            - gnome-vfs2 <unfixed> (embed; bug #395874)
409            [etch] - litmus <unfixed> (embed; #395875)
410            - litmus <removed> (embed; #395875)
411            [sarge] - screem <unfixed> (embed)
412            - sitecopy 1:0.16.3-5 (embed; bug #395876)
413            [etch] - tla <unfixed> (embed; bug #395877)
414            [sarge] - tla <unfixed> (embed; bug #395877)
415    
416    libmodplug
417            - gst-plugins-bad0.10 <unfixed> (embed)
418    
419    libvncserver
420            - vino <unfixed> (embed)
421    
422    putty
423            - filezilla <unfixed> (embed)
424    
425    tinyxml (not packaged in Debian)
426            - filezilla <unfixed>
427    
428    gv
429            - evince <unfixed> (embed)
430            NOTE: ps/ tree from gv 3.5.8
431            - evince-gtk <unfixed> (embed)
432            NOTE: not packaged in Debian
433    
434    libXbae
435            [etch] - libpawlib2-lesstif <unfixed> (embed)
436            NOTE: from Cernlib
437    
438    libgtkhtml
439            - claws-mail-html2-viewer <unfixed> (fork)
440    
441    libXaw
442            [etch] - libpawlib2-lesstif <unfixed>
443            NOTE: from Cernlib
444            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
445    
446    libgd2
447            - graphviz <unfixed> (embed)
448            NOTE: lib/gd seems to be 2.0.33
449            - wml <unfixed> (embed)
450            - libwmf <unfixed> (embed)
451            NOTE: derived from gd 1.6.3
452    
453    rar
454            - unrar-nonfree <unfixed> (embed)
455    
456    unrar-free (maybe this code is derived from the original rar, too?)
457            - clamav <unfixed> (embed)
458            NOTE: seems to be disabled in default config
459    
460    mplayer (DirectMedia Object loader)
461            - xine-lib <unfixed> (embed)
462            NOTE: src/libw32dll/
463            - vlc <unfixed> (embed)
464            NOTE: modules/codec/dmo/
465            - mplayer 1.0~rc2-20 (embed)
466    
467    libwpd (WordPerfect converter)
468            - openoffice.org <unfixed> (embed)
469    
470    fsplib (http://sourceforge.net/projects/fsp/)
471            - gftp <unfixed> (embed)
472            NOTE: lib/fsplib version 0.3
473    
474    sprng
475            - tree-puzzle <unfixed> (embed)
476    
477    librpcsecgss
478            - krb5 <unfixed> (embed)
479    
480    jasper
481            - ghostscript <unfixed> (embed)
482            - gs-gpl <unfixed> (embed)
483    
484    libiris
485            - psi <unfixed> (embed)
486            - kdenetwork <unfixed> (embed)
487            NOTE: kopete embeds libiris but links dynamically to libidn
488            - kdegames <unfixed> (embed)
489            NOTE: ksirk/kde4
490    
491    libidn
492            - monotone 0.43-1 (embed)
493            - psi <unfixed> (embed)
494            NOTE: psi embeds libiris which embeds libidn
495            - kdegames <unfixed> (embed)
496            NOTE: kdegames/kde4 embeds libiris which embeds libidn
497    
498    liblua
499            - monotone 0.43-1 (embed)
500            - nmap <unfixed> (embed; bug #527997)
501            NOTE: fixed upstream as of nmap svn rev13336.
502    
503    libbotan
504            - monotone 0.43-1 (embed)
505    
506    NetXX
507            - monotone 0.43-1 (embed)
508    
509    libgc
510            - mono <unfixed> (embed)
511    
512    lzma
513            - p7zip <unfixed> (embed)
514            - xz-utils <unfixed> (fork)
515    
516    lzo
517            - grub2 <unfixed> (embed)
518    
519    yassl
520            - mysql-dfsg-5.0 <unfixed> (embed)
521    
522    pax code
523            - tar <unfixed> (embed)
524            - cpio <unfixed> (embed)
525    
526    t1lib
527            - tetex-bin 2.0.2-1 (embed)
528            - texlive-bin <unknown> (embed)
529    
530    guichan
531            - boswars <unfixed> (embed)
532            NOTE: maintainer notified us, working on it
533    
534    tolua
535            - boswars <unfixed> (embed)
536            NOTE: maintainer notified us, working on it
537    
538    asio-dev
539            - luxrender <unfixed> (embed)
540            NOTE: maintainer notified us, working on it
541            NOTE: may be merged with boost "soon"
542    
 libmpeg2:  
 mpeg2dec  
543  xine-lib  xine-lib
544            - vlc <unfixed> (embed)
545            NOTE: only parts included in modules/access/rtsp
546    
 curl:  
 wget (code for NTLM authentication)  
   
   
 TODO evaluate:  
 gimp-gap  
547    netpbm
548            - tcl8.3 <unfixed> (embed)
549            - tcl8.4 <unfixed> (embed)
550            - tcl8.5 <unfixed> (embed)
551            NOTE: generic/tkImgGIF.c
552    
553    tk8.5
554            - tk8.0 <removed> (old-version)
555            - tk8.3 <unfixed> (old-version)
556            - tk8.4 <unfixed> (old-version)
557            - perl-tk <unfixable> (fork)
558    
559    samba
560            - mc 2:4.6.2~git20080311-1 (embed)
561            NOTE: maintainer is aware of this, currently searching a solution
562    
563    plib1.8.4c2
564            - boson <unfixed> (fork)
565            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
566    
567    fribidi
568            - quesoglc <unfixed> (embed)
569            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
570    
571    glew
572            - quesoglc <unfixed> (embed; bug #489341)
573            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
574    
575    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
576            - transcend <unfixed> (embed)
577            - cultivation <unfixed> (embed)
578            - passage <unfixed> (embed)
579            - gravitation <unfixed> (embed)
580    
581    tar
582            - libarchive <unfixed> (embed)
583            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
584    
585    cpio
586            - libarchive <unfixed> (embed)
587            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
588    
589    webkit
590            - qt4-x11 <unfixed> (embed)
591    
592    ftgl
593            - blender 2.46+dfsg-1 (embed)
594    
595    wv
596            - abiword <unfixed>
597    
598    qemu
599            - kvm <unfixed> (embed)
600            - xen-3 <unfixed> (embed)
601            - xen-unstable <unfixed> (embed)
602    
603    vgabios
604            - kvm <unfixed> (embed; bug #489442)
605    
606    bochs
607            - kvm <unfixed> (embed; bug #489442)
608    
609    speex
610            - vorbis-tools <unfixed> (embed)
611            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
612            - gst-plugins-good0.10 <unfixed> (embed)
613            - xine-lib <unfixed> (embed)
614            - libfishsound <unfixed> (embed)
615            - libannodex <unfixed> (embed)
616            - vlc <unfixed> (embed)
617            - xmms-speex <unfixed> (embed)
618            - libsdl-sound1.2 <unfixed> (embed)
619            - sweep <unfixed> (embed)
620    
621    libreadline
622            - magic <unfixed> (old-version)
623            NOTE: magic is currently an RFS
624    
625    opcode
626            - ode <unfixed> (embed)
627            NOTE: opcode is not a package in debian, it is just embedded
628            NOTE: http://www.codercorner.com/Opcode.htm
629    
630    gimpact
631            - ode <unfixed> (embed)
632            NOTE: gimpact is not a package in debian, it is just embedded
633            NOTE: http://gimpact.sf.net
634    
635    mochikit
636            - mahara <unfixed> (embed)
637            NOTE: they require extra patches, still unmerged upstream
638            - ntop <unfixed> (embed)
639            - coherence <unfixed> (embed)
640            NOTE: python-coherence
641            - paste <unfixed> (embed)
642            NOTE: python-paste
643            - turbogears <unfixed> (embed)
644            NOTE: python-turbogears
645            - plone3 <unfixed> (embed)
646            NOTE: zope-plone3
647    
648    prototype
649            - netbeans-ide <unfixed> (embed)
650            - auth2db-frontend <unfixed> (embed)
651            - webcit <unfixed> (embed)
652            NOTE: citadel-webcit
653            - asterisk <unfixed> (embed)
654            - doc-iana <unfixed> (embed)
655            - libaws <unfixed> (embed)
656            NOTE: libaws-doc
657            - libgettext-ruby <unfixed> (embed)
658            NOTE: libgettext-ruby-data
659            - libjson-ruby <unfixed> (embed)
660            NOTE: libjson-ruby-doc
661            - lucene2 <unfixed> (embed)
662            NOTE: liblucene2-java-doc
663            - libopenid-ruby <unfixed> (embed)
664            - solr <unfixed> (embed)
665            NOTE: solr-common
666            - glpi <unfixed> (embed)
667            - hobbix <unfixed> (embed)
668            - mnemo2 <unfixed> (embed)
669            - nag2 <unfixed> (embed)
670            - knowledgeroot <unfixed> (embed)
671            - mediatomb <unfixed> (embed)
672            NOTE: mediatomb-common
673            - mt-daapd <unfixed> (embed)
674            - op-panel <unfixed> (embed)
675            - ebug-http <unfixed> (embed)
676            - phpgedview <removed> (embed)
677            - poker-network <unfixed> (embed)
678            NOTE: poker-web
679            - webhelpers <unfixed> (embed)
680            NOTE: python-webhelpers
681            - qwik <unfixed> (embed)
682            - rails <unfixed> (embed)
683            - typo3-src <unfixed> (embed)
684            - wordpress 2.5.0-2 (embed)
685            - zope <unfixed> (embed)
686            NOTE: zope-plone3
687            - smokeping <unfixed> (embed)
688            - ampache 3.4.1-2 (embed)
689            - exaile <unfixed> (embed)
690            - hobix <unfixed> (embed)
691            - pixelpost <unfixed> (embed)
692            - symfony <unfixed> (embed)
693            NOTE: it's been said that there are custom changes
694            - zabbix <unfixed> (embed)
695            NOTE: zabbix-frontend-php
696            - turba2 <unfixed> (embed)
697    
698    gdb
699            - insight <unfixed> (embed)
700    
701    e2fsprogs
702            - ldiskfsprogs <unfixable> (fork)
703    
704    quazip (not packaged in Debian)
705            - qcake <unfixed> (embed)
706            NOTE: starting with upstream version 0.6.4
707    
708    exo
709            - pcmanfm <unfixed> (embed; bug #499677)
710            NOTE: slightly modified source code
711    
712    java
713            - openjdk-6 <unfixed>
714            - sun-java5 <unfixed>
715            - sun-java6 <unfixed>
716    
717    libphp-snoopy
718            - ampache 3.4.1-2 (embed; bug #504169)
719            - mahara 1.0.5-2 (embed; bug #504170)
720            - pixelpost 1.7.1-5 (embed; bug #504171)
721            - mediamate 0.9.3.6-5 (embed; bug #504172)
722            - opendb <removed> (embed; bug #504173)
723            [etch] - opendb <unfixed> (embed; bug #504173)
724            - wordpress 2.5.1-9 (embed; bug #443948)
725            - moodle <unfixed> (embed; bug #507185)
726            [etch] - phpgroupware <unfixed> (embed)
727            NOTE: phpgroupware-felamimail
728            - magpierss 0.72-3 (embed; bug #431089)
729    
730    jquery
731            - zekr <unfixed> (embed)
732            - wordpress <unknown> (embed)
733            - yocto-reader <unfixed> (embed)
734            - textpattern <unfixed> (embed)
735            - genshi 0.5.1-1 (embed)
736            NOTE: compressed file under examples/ dir
737            - prewikka <unfixed> (embed)
738            - libramaze-ruby <unfixed> (embed)
739            - drupal5 <unfixed> (embed)
740            - b2evolution <unfixed> (embed)
741            - wesnoth <unfixed> (embed)
742    
743    tablesorter (jquery plugin, not packaged yet)
744            - wesnoth <unfixed> (embed)
745    
746    kses
747            - wordpress <unfixed> (embed; bug #504242)
748            NOTE: their copy has all methods renamed to wp_<foo>
749            NOTE: kses isn't in Debian, RFP: #504240
750            - moodle <unfixed> (embed; bug #507185)
751            - egroupware <unfixed> (embed)
752    
753    magpierss
754            - wordpress <unfixed> (embed; bug #504242)
755            - moodle <unfixed>
756    
757    php-gettext
758            - wordpress 2.8.4-1 (embed; bug #504242)
759    
760    libphp-ixr (name may change, it is the Incutio XML-RPC)
761            - wordpress <unfixed> (embed; bug #504242)
762            NOTE: libphp-ixr isn't in Debian, RFP: #504236
763            - dokuwiki <unfixed> (embed)
764            - textpattern <unfixed> (embed)
765    
766    libphp-cas
767            - glpi <unfixed> (embed)
768            - moodle <unfixed> (embed; bug #505984)
769    
770    scriptaculous
771            - glpi <unfixed> (embed)
772            - libaws <unfixed> (embed)
773            NOTE: libaws-doc
774            - op-panel <unfixed> (embed)
775            - symfony <unfixed> (embed)
776            NOTE: maintainer says there are extra incompatible changes required
777            - pixelpost <unfixed> (embed)
778            - webhelpers <unfixed> (embed)
779            NOTE: python-webhelpers
780            - qwik <unfixed> (embed)
781            - smokeping <unfixed> (embed)
782            - turba2 <unfixed> (embed)
783            - typo3-src 4.2.3-1 (embed)
784    
785    libmarkdown-php
786            - moodle <unfixed> (embed; bug #507185)
787            - pixelpost <unfixed> (embed)
788    
789    php-openid
790            - wordpress-openid <itp> (embed)
791    
792    geshi
793            - dokuwiki 0.0.20080505-3.1 (embed)
794            - pgfouine 1.0-1.1 (embed)
795            - websvn 2.1.0-1 (embed)
796    
797    webcalendar
798            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
799    
800    libical
801            - kdepim <unfixed> (fork)
802            - kdepimlibs <unfixed> (fork)
803            NOTE: fixed in KDE4 post 4.1.x series
804            - claws-mail-vcalendar-plugin <unfixed> (fork)
805    
806    libltdl3
807            - kdelibs <unfixed> (embed)
808            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
809            - synfig <unfixed> (embed)
810    
811    harfbuzz
812            - qt4-x11 <unfixed> (embed)
813    
814    libzip
815            - php5 <unfixed> (fork)
816            - odt2txt <unfixed> (embed; bug #523808)
817    
818    json.php (not packaged; should be replaced with php's built-in functions)
819            - moodle <unfixed>
820            - yui <unfixed>
821            - gallery2 <unfixed>
822            - dokuwiki <unfixed>
823            - typo3-src <unfixed>
824    
825    php-fpdf
826            - tcpdf <itp> (fork)
827            - moodle <unfixed>
828            - phpwiki <unfixed>
829            - egroupware <unfixed>
830            - ldap-account-manager <unfixed> (fork)
831    
832    tcpdf (itp: #495985)
833            - moodle <unfixed>
834            - phpmyadmin <unfixed>
835    
836    typo3
837            - moodle <unfixed>
838    
839    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
840            - moodle <unfixed>
841            - gosa <unfixed>
842    
843    php-ole (itp: #487558)
844            - moodle <unfixed>
845    
846    pieforms (http://www.catalyst.net.nz)
847            - mahara <unfixed>
848    
849    savant2 (http://phpsavant.com)
850            - egroupware <unfixed>
851    
852    rssparser (http://nwow.org)
853            - egroupware <unfixed>
854            - phpgroupware <unfixed>
855    
856    lcms
857            - openjdk-6 <unfixed> (fork)
858    
859    libphp-phplayersmenu
860            - diogenes <unfixed>
861            - phpldapadmin <unfixed>
862    
863    libphp-pclzip
864            - docvert <unfixed>
865            - moodle <unfixed>
866            - egroupware <unfixed>
867    
868    libphp-simplepie
869            - dokuwiki <unfixed>
870    
871    libphp-jpgraph
872            - egroupware <unfixed>
873    
874    php-simpletest
875            - moodle <unfixed>
876    
877    libpng
878            - iceweasel <unfixed> (embed)
879            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
880            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
881            - iceape 1.0.13~pre080614i-0etch1 (embed)
882            - xulrunner <unfixed> (embed)
883            NOTE: Debian 1.9.0.6 uses embedded copy
884            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
885            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
886            NOTE: Ubuntu only
887            - firefox-3.0 <unfixed> (embed)
888            NOTE: Ubuntu only
889            - firefox-3.1 <unfixed> (embed)
890            NOTE: Ubuntu only
891            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
892            NOTE: Ubuntu only
893            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
894            NOTE: Ubuntu only
895            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
896            NOTE: Ubuntu only
897    
898    irssi
899            - silc-client <unfixed> (embed)
900            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
901    
902    extc
903            - mtasc <unfixed> (embed)
904            - haxe <unfixed> (embed)
905    
906    swflib
907            - mtasc <unfixed> (embed)
908            - haxe <unfixed> (embed)
909    
910    libitext-java
911            - bouncycastle 2.1.4-1 (embed)
912    
913    python-ply
914            - pyke <unfixed> (embed)
915    
916    libdumbnet (libdnet upstream)
917            - nmap <unfixed> (fork)
918    
919    gcc-4.4
920            - gcc-mingw32 <unfixed> (embed)
921    
922    camlimages
923            - advi <unfixed> (embed)
924    
925    memcached
926            - memcachedb <unfixed> (embed)
927    
928    yajl (ITP: #537199)
929            - argyll <unfixed> (embed)
930            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
931    
932    libept:
933            - adept <unfixed> (embed; bug #540649)
934    
935    libvorbis:
936            - xulrunner <unfixed> (embed; bug #540959)
937    
938    php-net-dnsbl:
939            - serendipity <unfixed> (embed)
940    
941    php-onyx-rss:
942            - serendipity <unfixed> (embed)
943    
944    php-text-wiki:
945            - serendipity <unfixed> (embed)
946    
947    php-xml-rpc:
948            - serendipity <unfixed> (embed)
949    
950    xyssl (does not have a shared library)
951            - polarssl <unfixed> (fork)
952    
953    polarssl (does not have a shared library)
954            - pdkim <itp> (embed)
955            NOTE: pdkim ITP #543150

Legend:
Removed from v.3093  
changed lines
  Added in v.12663

  ViewVC Help
Powered by ViewVC 1.1.5