/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3729 by micah, Sat Apr 1 22:59:42 2006 UTC revision 12498 by nion, Thu Aug 6 13:45:38 2009 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16    sort: static (linking statically against a lib)
17          embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19                thus might share parts of the source code)
20          old-version (the package is an older version of essentially
21                       the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30            - gpdf <removed>
31            [sarge] - gpdf <unfixed>
32            NOTE: has been replaced by evince in etch
33            - pdftohtml <unknown>
34            [sarge] - pdftohtml <unfixed>
35            [etch] - pdftohtml <unfixed>
36            NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38            - texlive-base 3.0-12 (embed)
39            - texlive-bin 2007-1 (embed)
40            NOTE: links to poppler
41            - koffice <unfixed> (embed; bug #436163)
42            - libextractor 0.5.12-1 (embed)
43            NOTE: libextractor is using its own pdf decoder now
44            - pdfkit.framework 0.8-4 (embed)
45            - ipe <unfixed> (embed)
46            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47            - ruby-gnome2 <unknown> (embed)
48            NOTE: copy only present in source but links to poppler
49            - pdfedit <unfixed> (embed; bug #510794)
50            - swftools <unfixed> (embed)
51    
52    ppmd
53            - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54    
55    libevent
56            - transmission <unfixed> (embed; bug #529372)
57    
58    lrmi
59            - read-edid 2.0.0-1 (embed; bug #495131)
60    
61    peercast
62            - gnome-peercast <unfixed> (embed)
63            NOTE: gnome-peercast may better be removed, see #466539
64    
65    silc-toolkit
66            - silc-client 1.1~beta6-1 (embed)
67    
68    icclib
69            - ghostscript <unfixed> (embed)
70            - argyll <unfixed> (embed)
71    
72    dietlibc
73            - ccontrol 0.9.1+20071204-1 (static)
74    
75    libmikmod
76            - sdl-mixer1.2 <unfixed> (embed)
77            TODO: report bug
78    
79    libiax
80            - iaxmodem <unfixed> (embed)
81    
82    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
83            - dpkg <unfixed> (embed)
84            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
85            - rsync <unfixed> (embed)
86            NOTE: somehow derived code base
87            - mono <unfixed> (embed)
88            TODO: check mozilla
89            - Linux kernels <unfixed> (embed)
90            - pvpgn 1.7.8-2 (embed)
91            - mrtg 2.12.2-1 (embed)
92            - rpm <unknown> (embed)
93            NOTE: pinged anibal since when rpm was fixed
94            - tuxcmd-modules <unfixed> (embed)
95            - zsync <unfixed>
96            - tra <unfixed>
97            - sash <unfixed>
98            - nsis <unfixed>
99            - mseide-msegui <unfixed>
100            NOTE: mseide
101            - mirrordir <unfixed>
102            - poco <unfixed>
103            - klibc <unfixed>
104            - ghostscript <unfixed>
105            - freeimage <unfixed>
106            - clamav <unfixed> (fork)
107            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
108            - tuxonice-userui <unfixed>
109            - plt-scheme <unfixed>
110            - perl <unfixed>
111            - paraview <unfixed>
112            - gcvs <unfixed>
113            - erlang <unfixed>
114            - dump <unfixed>
115            - aide <unfixed> (static)
116            - dar <unfixed> (static)
117            - avfs <unfixed>
118            - fpc <unfixed>
119            - winff <unfixed>
120            NOTE: inherited from fpc, see #472304
121            - lazarus <unfixed>
122            NOTE: inherited from fpc, see #472304
123    
124    libbz2
125            - dpkg <unfixed> (static)
126    
127    libgadu:
128            - centericq <unfixed> (embed)
129            - gaim <unfixed> (embed)
130            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
131            - kdenetwork 4:3.3.2-5 (embed)
132            NOTE: from kdenetwork: kopete
133            - gadu <unfixed> (embed)
134            - ekg 1:1.8~rc0-1 (embed)
135            - kadu 0.6.0.2-3 (embed; bug #504430)
136            NOTE: gadu not packaged in Debian yet
137    
138    xmlrpc (which package is the "origin" of this code?)
139            - drupal <unfixed> (embed)
140            - phpgroupware <unfixed> (embed)
141            - egroupware <unfixed> (embed)
142            - phpwiki <unfixed> (embed)
143            - php4 <unfixed> (embed)
144            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
145    
146    shtool (affects build-time only)
147            - mysql-ocaml <unfixed> (embed)
148            - php4 <unfixed> (embed)
149    
150    mozilla source code
151            - mozilla-firefox <unfixed> (embed)
152            - mozilla-thunderbird <unfixed>
153            - firefox <removed>
154            - thunderbird <removed>
155            - iceweasel <unfixed> (embed)
156            - iceape <unfixed> (embed)
157            - icedove <unfixed> (embed)
158            - xulrunner <unfixed> (embed)
159            - nvu <removed> (embed)
160            - kompozer <unfixed> (embed; bug #532168)
161    
162    xli
163            - xloadimage <unfixed> (embed)
164    
165    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
166            - openmotif <unfixed> (embed)
167            - libxpm <unfixed> (embed)
168    
169    kerberized apps with BSD origin
170            - krb4 <unfixed> (embed)
171            - krb5 <unfixed> (embed)
172            - heimdal <unfixed> (embed)
173    
174    grip (which pkg is the origin?)
175            - libcdaudio <unfixed>
176            - grip <unfixed>
177            - gnome-vfs <unfixed>
178            TODO: check vfs2 as well
179    
180    fudforum
181            [etch] - phpgroupware <unfixed> (embed)
182            NOTE: phpgroupware-fudforum
183            [sarge] - egroupware-fudforum <removed> (embed)
184    
185    libbsd
186            - rdate 1:1.2-3 (embed)
187    
188    cvs
189            - gcvs <unfixed> (embed)
190            NOTE: see cvsunix/src in tarball
191    
192    pcre
193            - python* <unfixed> (embed)
194            - php4 <unknown> (embed)
195            - analog 2:5.23-0woody1 (embed)
196            - goffice <unfixed> (embed)
197            NOTE: libgoffice-*
198            - vfu 4.06-4.1 (embed; bug #450754)
199            - tf5 5.0beta7-1 (embed)
200            - monotone 0.43-1 (embed)
201            NOTE: this only affects versions >= 0.37
202            - glib2.0 2.15.2-1 (embed)
203            - apache2 2.0.53-4 (embed)
204            - exim4 4.10-0.srh20.12 (embed)
205            - yacas <unfixed> (embed)
206            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
207            - gtamsanalyzer.app 0.42-5 (embed)
208            - tin <unknown> (embed)
209            - kazehakase 0.5.2-1
210            - webkit <unfixed> (embed)
211            - qt4-x11 <unfixed> (embed)
212            NOTE: embedded via webkit copy
213    
214    tiff
215            - wxwindows2.4 2.2.1 (embed)
216    
217    uudeview
218            - libconvert-uulib-perl <unfixed> (embed)
219            - pan <unfixed> (embed)
220    
221    sqlite (not affected by security vulnerabilities so far)
222            - amarok <unfixed> (embed)
223            - monotone 0.43-1 (embed)
224            - iceweasel <unfixed> (embed)
225    
226    util-linux/mount
227            - loop-aes-utils <unfixed> (embed)
228            NOTE: contains code from util-linux' mount in the mount-aes-udeb
229    
230    webmin
231            - usermin <unknown> (embed)
232            [sarge] - usermin <unfixed> (embed)
233    
234    sylpheed
235            - sylpheed-claws <unfixed> (fork)
236    
237    phpsysinfo
238            - egroupware <unfixed> (embed)
239            - phpgroupware <unfixed> (embed)
240    
241    phpldapadmin
242            [sarge] - egroupware <unfixed> (embed)
243            NOTE: removed from egroupware after sarge
244    
245    chmlib
246            - kchmviewer <unknown> (embed)
247    
248    libavcodec/libavformat (source: ffmpeg)
249            - mplayer 1.0~rc2-14 (embed; bug #395252)
250            - kino 1.0.0-1
251            - vlc <not-affected> (Links dynamically since initial release)
252            - smilutils 0.3.0-10
253            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
254            - motion 3.1.19-1
255            - gstreamer0.10-ffmpeg 0.10.3-2
256            - xmovie <unfixed>
257            TODO: gimp-gap (potentially using ffmpeg code as well)
258    
259    faad2
260            - mplayer 1.0~rc2-20 (embed)
261    
262    mad MPEG decoding lib
263            - mad <unfixed> (embed)
264            - xine-lib <unfixed> (embed)
265    
 xpdf code: (some use xpdf 2, some xpdf 3)  
 gpdf (will be replaced by evince in Gnome 2.12)  
 pdftohtml (current poppler source package has a ported version, pinged maintainer)  
 kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
 tetex-bin (links to poppler since 3.0-12)  
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
 poppler  
 koffice (upstream is working on using poppler, probably not in time for Etch)  
 libextractor  
 pdfkit.framework (links to poppler since 0.8-4)  
   
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
266  libdts  libdts
267  xine-lib          - xine-lib <unfixed> (embed)
268    
 flac:  
269  flac  flac
270  xine-lib          - xine-lib <unfixed> (embed)
271    
272  liba52:  liba52
273  a52dec          - a52dec <unfixed> (embed)
274  xine-lib          - xine-lib <unfixed> (embed)
275    
276    libmpeg2
277            - mpeg2dec <unfixed> (embed)
278            - xine-lib <unfixed> (embed)
279    
280    curl
281            - wget <unfixed> (embed)
282            NOTE: code for NTLM authentication
283    
284    uw-imap
285            - pine <unfixed> (embed)
286            - alpine <unfixed> (embed)
287    
288    imagemagick
289            - graphicsmagick <unfixed> (fork)
290    
291    halibut
292            - nsis <unfixed> (fork)
293    
294    libghttp
295            - hotway <unfixed> (embed)
296    
297    libsndfile
298            - ardour 1:2.7.1-1 (embed)
299    
300    glibmm2.4
301            - ardour 1:2.7.1-1 (embed)
302    
303    libgnomecanvasmm2.6
304            - ardour 1:2.7.1-1 (embed)
305    
306    libsigc++-2.0
307            - ardour 1:2.7.1-1 (embed)
308    
309    soundtouch
310            - ardour 1:2.7.1-1 (embed)
311    
312    libmms
313            - xine-lib <unfixed> (embed)
314            - mimms <unfixed> (embed)
315    
316    fckeditor
317            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
318            - moin 1.8.2-2 (embed; bug #452599)
319            - karrigell <removed> (embed; bug #452598)
320            - gforge 4.6.99+svn6225-1 (embed)
321            - request-tracker3.8 <unfixed> (embed)
322    
323    ipatlas (not packaged in Debian)
324            - moodle <unfixed> (embed; bug #507185)
325    
326    libphp-phpmailer
327            - moodle <unfixed> (embed; bug #507185)
328            - mahara <unfixed> (embed)
329            - symfony <unfixed> (embed)
330            [etch] - phpgroupware <unfixed> (embed)
331            NOTE: phpgroupware-felamimail is only in etch
332            - egroupware <unfixed> (embed; bug #504283)
333            - glpi <unfixed>
334    
335    htmlArea (not packaged in Debian)
336            - moodle <unfixed> (embed)
337    
338    giflib:
339            - wine <unfixed> (embed; bug #466181)
340    
341    bennu (not packaged in Debian, http://bennu.sourceforge.net)
342            - moodle <unfixed> (embed)
343    
344    smarty:
345            - moodle 1.8.2-2 (embed; bug #471158)
346            - gallery2 2.2.5-2 (embed; bug #471160)
347            - mahara 0.9.2-2 (embed; bug #471201)
348            - gosa 2.4beta1-1 (embed; bug #471200)
349    
350    TinyMCE
351            - wordpress 2.5.1-3 (embed; bug #478257)
352            - moodle <unfixed> (embed; bug #507185)
353            - knowledgeroot <unfixed> (embed)
354            - joomla <itp> (bug #326398)
355    
356    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
357            - scite <unfixed> (embed)
358            - qscintilla <unfixed> (embed)
359            - qscintilla2 <unfixed> (embed)
360            - geany <unfixed> (fork)
361            - anjuta <unfixed> (embed)
362    
363    libphp-adodb
364            - moodle <unfixed> (embed; bug #507185)
365            NOTE: also AdoDB-XML Schema
366            - gallery2 <unfixed> (embed)
367            - phppgadmin <unfixed> (embed)
368            - egroupware <unfixed> (embed)
369            - phpwiki <unfixed> (embed)
370            - torrentflux 2.0beta1-2 (embed)
371            - ipplan <unfixed> (embed)
372            - typo3-src <unfixed> (embed)
373            - cacti <unknown> (embed)
374            [sarge] - cacti <unfixed> (embed)
375            NOTE: dependency exists, but internal version is used
376            - gforge 4.7~rc2-6 (embed)
377            - mahara <unfixed> (embed)
378    
379    gzip
380            - linux-kernel <unfixed> (embed)
381            NOTE: lib/inflate.c
382            - klibc <unfixed> (embed)
383            NOTE: based on linux-kernel gzip code
384            - busybox <unfixed> (embed)
385    
386    neon
387            - cadaver <unfixed> (embed; bug #188381)
388            - gnome-vfs2 <unfixed> (embed; bug #395874)
389            - litmus <unfixed> (embed; #395875)
390            [sarge] - screem <unfixed> (embed)
391            - sitecopy <unfixed> (embed; bug #395876)
392            [etch] - tla <unfixed> (embed; bug #395877)
393            [sarge] - tla <unfixed> (embed; bug #395877)
394    
395    libmodplug
396            - gst-plugins-bad0.10 <unfixed> (embed)
397    
398    libvncserver
399            - vino <unfixed> (embed)
400    
401    putty
402            - filezilla <unfixed> (embed)
403    
404    tinyxml (not packaged in Debian)
405            - filezilla <unfixed>
406    
407    gv
408            - evince <unfixed> (embed)
409            NOTE: ps/ tree from gv 3.5.8
410            - evince-gtk <unfixed> (embed)
411            NOTE: not packaged in Debian
412    
413    libXbae
414            [etch] - libpawlib2-lesstif <unfixed> (embed)
415            NOTE: from Cernlib
416    
417    libgtkhtml
418            - claws-mail-html2-viewer <unfixed> (fork)
419    
420    libXaw
421            [etch] - libpawlib2-lesstif <unfixed>
422            NOTE: from Cernlib
423            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
424    
425    libgd2
426            - graphviz <unfixed> (embed)
427            NOTE: lib/gd seems to be 2.0.33
428            - wml <unfixed> (embed)
429            - libwmf <unfixed> (embed)
430            NOTE: derived from gd 1.6.3
431    
432    rar
433            - unrar-nonfree <unfixed> (embed)
434    
435    unrar-free (maybe this code is derived from the original rar, too?)
436            - clamav <unfixed> (embed)
437            NOTE: seems to be disabled in default config
438    
439    mplayer (DirectMedia Object loader)
440            - xine-lib <unfixed> (embed)
441            NOTE: src/libw32dll/
442            - vlc <unfixed> (embed)
443            NOTE: modules/codec/dmo/
444            - mplayer 1.0~rc2-20 (embed)
445    
446    libwpd (WordPerfect converter)
447            - openoffice.org <unfixed> (embed)
448    
449    fsplib (http://sourceforge.net/projects/fsp/)
450            - gftp <unfixed> (embed)
451            NOTE: lib/fsplib version 0.3
452    
453    sprng
454            - tree-puzzle <unfixed> (embed)
455    
456    librpcsecgss
457            - krb5 <unfixed> (embed)
458    
459    jasper
460            - ghostscript <unfixed> (embed)
461            - gs-gpl <unfixed> (embed)
462    
463    libiris
464            - psi <unfixed> (embed)
465            - kdenetwork <unfixed> (embed)
466            NOTE: kopete embeds libiris but links dynamically to libidn
467            - kdegames <unfixed> (embed)
468            NOTE: ksirk/kde4
469    
470    libidn
471            - monotone 0.43-1 (embed)
472            - psi <unfixed> (embed)
473            NOTE: psi embeds libiris which embeds libidn
474            - kdegames <unfixed> (embed)
475            NOTE: kdegames/kde4 embeds libiris which embeds libidn
476    
477    liblua
478            - monotone 0.43-1 (embed)
479            - nmap <unfixed> (embed; bug #527997)
480            NOTE: fixed upstream as of nmap svn rev13336.
481    
482    libbotan
483            - monotone 0.43-1 (embed)
484    
485    NetXX
486            - monotone 0.43-1 (embed)
487    
488    libgc
489            - mono <unfixed> (embed)
490    
491    lzma
492            - p7zip <unfixed> (embed)
493    
494    lzo
495            - grub2 <unfixed> (embed)
496    
497    yassl
498            - mysql-dfsg-5.0 <unfixed> (embed)
499    
500    pax code
501            - tar <unfixed> (embed)
502            - cpio <unfixed> (embed)
503    
504    t1lib
505            - tetex-bin 2.0.2-1 (embed)
506            - texlive-bin <unknown> (embed)
507    
508    guichan
509            - boswars <unfixed> (embed)
510            NOTE: maintainer notified us, working on it
511    
512    tolua
513            - boswars <unfixed> (embed)
514            NOTE: maintainer notified us, working on it
515    
516    asio-dev
517            - luxrender <unfixed> (embed)
518            NOTE: maintainer notified us, working on it
519            NOTE: may be merged with boost "soon"
520    
 libmpeg2:  
 mpeg2dec  
521  xine-lib  xine-lib
522            - vlc <unfixed> (embed)
523            NOTE: only parts included in modules/access/rtsp
524    
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
   
 etl-dev (will be renamed to libetl-dev soon):  
 synfig  
   
 libphp-adodb:  
 moodle  
525    netpbm
526            - tcl8.3 <unfixed> (embed)
527            - tcl8.4 <unfixed> (embed)
528            - tcl8.5 <unfixed> (embed)
529            NOTE: generic/tkImgGIF.c
530    
531    tk8.5
532            - tk8.0 <removed> (old-version)
533            - tk8.3 <unfixed> (old-version)
534            - tk8.4 <unfixed> (old-version)
535            - perl-tk <unfixable> (fork)
536    
537    samba
538            - mc 2:4.6.2~git20080311-1 (embed)
539            NOTE: maintainer is aware of this, currently searching a solution
540    
541    plib1.8.4c2
542            - boson <unfixed> (fork)
543            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
544    
545    fribidi
546            - quesoglc <unfixed> (embed)
547            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
548    
549    glew
550            - quesoglc <unfixed> (embed; bug #489341)
551            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
552    
553    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
554            - transcend <unfixed> (embed)
555            - cultivation <unfixed> (embed)
556            - passage <unfixed> (embed)
557            - gravitation <unfixed> (embed)
558    
559    tar
560            - libarchive <unfixed> (embed)
561            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
562    
563    cpio
564            - libarchive <unfixed> (embed)
565            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
566    
567    webkit
568            - qt4-x11 <unfixed> (embed)
569    
570    ftgl
571            - blender 2.46+dfsg-1 (embed)
572    
573    wv
574            - abiword <unfixed>
575    
576    qemu
577            - kvm <unfixed> (embed)
578            - xen-3 <unfixed> (embed)
579            - xen-unstable <unfixed> (embed)
580    
581    vgabios
582            - kvm <unfixed> (embed; bug #489442)
583    
584    bochs
585            - kvm <unfixed> (embed; bug #489442)
586    
587    speex
588            - vorbis-tools <unfixed> (embed)
589            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
590            - gst-plugins-good0.10 <unfixed> (embed)
591            - xine-lib <unfixed> (embed)
592            - libfishsound <unfixed> (embed)
593            - libannodex <unfixed> (embed)
594            - vlc <unfixed> (embed)
595            - xmms-speex <unfixed> (embed)
596            - libsdl-sound1.2 <unfixed> (embed)
597            - sweep <unfixed> (embed)
598    
599    libreadline
600            - magic <unfixed> (old-version)
601            NOTE: magic is currently an RFS
602    
603    opcode
604            - ode <unfixed> (embed)
605            NOTE: opcode is not a package in debian, it is just embedded
606            NOTE: http://www.codercorner.com/Opcode.htm
607    
608    gimpact
609            - ode <unfixed> (embed)
610            NOTE: gimpact is not a package in debian, it is just embedded
611            NOTE: http://gimpact.sf.net
612    
613    mochikit
614            - mahara <unfixed> (embed)
615            NOTE: they require extra patches, still unmerged upstream
616            - ntop <unfixed> (embed)
617            - coherence <unfixed> (embed)
618            NOTE: python-coherence
619            - paste <unfixed> (embed)
620            NOTE: python-paste
621            - turbogears <unfixed> (embed)
622            NOTE: python-turbogears
623            - plone3 <unfixed> (embed)
624            NOTE: zope-plone3
625    
626    prototype
627            - netbeans-ide <unfixed> (embed)
628            - auth2db-frontend <unfixed> (embed)
629            - webcit <unfixed> (embed)
630            NOTE: citadel-webcit
631            - asterisk <unfixed> (embed)
632            - doc-iana <unfixed> (embed)
633            - libaws <unfixed> (embed)
634            NOTE: libaws-doc
635            - libgettext-ruby <unfixed> (embed)
636            NOTE: libgettext-ruby-data
637            - libjson-ruby <unfixed> (embed)
638            NOTE: libjson-ruby-doc
639            - lucene2 <unfixed> (embed)
640            NOTE: liblucene2-java-doc
641            - libopenid-ruby <unfixed> (embed)
642            - solr <unfixed> (embed)
643            NOTE: solr-common
644            - glpi <unfixed> (embed)
645            - hobbix <unfixed> (embed)
646            - mnemo2 <unfixed> (embed)
647            - nag2 <unfixed> (embed)
648            - knowledgeroot <unfixed> (embed)
649            - mediatomb <unfixed> (embed)
650            NOTE: mediatomb-common
651            - mt-daapd <unfixed> (embed)
652            - op-panel <unfixed> (embed)
653            - ebug-http <unfixed> (embed)
654            - phpgedview <removed> (embed)
655            - poker-network <unfixed> (embed)
656            NOTE: poker-web
657            - webhelpers <unfixed> (embed)
658            NOTE: python-webhelpers
659            - qwik <unfixed> (embed)
660            - rails <unfixed> (embed)
661            - typo3-src <unfixed> (embed)
662            - wordpress <unfixed> (embed)
663            - zope <unfixed> (embed)
664            NOTE: zope-plone3
665            - smokeping <unfixed> (embed)
666            - ampache 3.4.1-2 (embed)
667            - exaile <unfixed> (embed)
668            - hobix <unfixed> (embed)
669            - pixelpost <unfixed> (embed)
670            - symfony <unfixed> (embed)
671            NOTE: it's been said that there are custom changes
672            - zabbix <unfixed> (embed)
673            NOTE: zabbix-frontend-php
674            - turba2 <unfixed> (embed)
675    
676    gdb
677            - insight <unfixed> (embed)
678    
679    e2fsprogs
680            - ldiskfsprogs <unfixable> (fork)
681    
682    quazip (not packaged in Debian)
683            - qcake <unfixed> (embed)
684            NOTE: starting with upstream version 0.6.4
685    
686    exo
687            - pcmanfm <unfixed> (embed; bug #499677)
688            NOTE: slightly modified source code
689    
690    java
691            - openjdk-6 <unfixed>
692            - sun-java5 <unfixed>
693            - sun-java6 <unfixed>
694    
695    libphp-snoopy
696            - ampache 3.4.1-2 (embed; bug #504169)
697            - mahara 1.0.5-2 (embed; bug #504170)
698            - pixelpost <unfixed> (embed; bug #504171)
699            - mediamate 0.9.3.6-5 (embed; bug #504172)
700            - opendb <unfixed> (embed; bug #504173)
701            - wordpress 2.5.1-9 (embed; bug #443948)
702            - moodle <unfixed> (embed; bug #507185)
703            [etch] - phpgroupware <unfixed> (embed)
704            NOTE: phpgroupware-felamimail
705            - magpierss 0.72-3 (embed; bug #431089)
706    
707    jquery
708            - zekr <unfixed> (embed)
709            - wordpress <unfixed> (embed)
710            - yocto-reader <unfixed> (embed)
711            - textpattern <unfixed> (embed)
712            - genshi 0.5.1-1 (embed)
713            NOTE: compressed file under examples/ dir
714            - prewikka <unfixed> (embed)
715            - libramaze-ruby <unfixed> (embed)
716            - drupal5 <unfixed> (embed)
717            - b2evolution <unfixed> (embed)
718            - wesnoth <unfixed> (embed)
719    
720    tablesorter (jquery plugin, not packaged yet)
721            - wesnoth <unfixed> (embed)
722    
723    kses
724            - wordpress <unfixed> (embed; bug #504242)
725            NOTE: their copy has all methods renamed to wp_<foo>
726            - moodle <unfixed> (embed; bug #507185)
727            - egroupware <unfixed> (embed)
728    
729    magpierss
730            - wordpress <unfixed> (embed; bug #504242)
731            - moodle <unfixed>
732    
733    php-gettext
734            - wordpress <unfixed> (embed; bug #504242)
735    
736    libphp-ixr (name may change, it is the Incutio XML-RPC)
737            - wordpress <unfixed> (embed; bug #504242)
738            - dokuwiki <unfixed> (embed)
739            - textpattern <unfixed> (embed)
740    
741    libphp-cas
742            - glpi <unfixed> (embed)
743            - moodle <unfixed> (embed; bug #496069)
744    
745    scriptaculous
746            - glpi <unfixed> (embed)
747            - libaws <unfixed> (embed)
748            NOTE: libaws-doc
749            - op-panel <unfixed> (embed)
750            - symfony <unfixed> (embed)
751            NOTE: maintainer says there are extra incompatible changes required
752            - pixelpost <unfixed> (embed)
753            - webhelpers <unfixed> (embed)
754            NOTE: python-webhelpers
755            - qwik <unfixed> (embed)
756            - smokeping <unfixed> (embed)
757            - turba2 <unfixed> (embed)
758            - typo3-src 4.2.3-1 (embed)
759    
760    libmarkdown-php
761            - moodle <unfixed> (embed; bug #507185)
762            - pixelpost <unfixed> (embed)
763    
764    php-openid
765            - wordpress-openid <itp> (embed)
766    
767    geshi
768            - dokuwiki 0.0.20080505-3.1 (embed)
769            - pgfouine 1.0-1.1 (embed)
770            - websvn 2.1.0-1 (embed)
771    
772    webcalendar
773            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
774    
775    libical
776            - kdepim <unfixed> (fork)
777            - kdepimlibs <unfixed> (fork)
778            NOTE: fixed in KDE4 post 4.1.x series
779            - claws-mail-vcalendar-plugin <unfixed> (fork)
780    
781    libltdl3
782            - kdelibs <unfixed> (embed)
783            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
784            - synfig <unfixed> (embed)
785    
786    harfbuzz
787            - qt4-x11 <unfixed> (embed)
788    
789    libzip
790            - php5 <unfixed> (fork)
791            - odt2txt <unfixed> (embed; bug #523808)
792    
793    json.php (not packaged; should be replaced with php's built-in functions)
794            - moodle <unfixed>
795            - yui <unfixed>
796            - gallery2 <unfixed>
797            - dokuwiki <unfixed>
798            - typo3-src <unfixed>
799    
800    php-fpdf
801            - tcpdf <itp> (fork)
802            - moodle <unfixed>
803            - phpwiki <unfixed>
804            - egroupware <unfixed>
805            - ldap-account-manager <unfixed> (fork)
806    
807    tcpdf (itp: #495985)
808            - moodle <unfixed>
809            - phpmyadmin <unfixed>
810    
811    typo3
812            - moodle <unfixed>
813    
814    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
815            - moodle <unfixed>
816            - gosa <unfixed>
817    
818    php-ole (itp: #487558)
819            - moodle <unfixed>
820    
821    pieforms (http://www.catalyst.net.nz)
822            - mahara <unfixed>
823    
824    savant2 (http://phpsavant.com)
825            - egroupware <unfixed>
826    
827    rssparser (http://nwow.org)
828            - egroupware <unfixed>
829            - phpgroupware <unfixed>
830    
831    lcms
832            - openjdk-6 <unfixed> (fork)
833    
834    libphp-phplayersmenu
835            - diogenes <unfixed>
836            - phpldapadmin <unfixed>
837    
838    libphp-pclzip
839            - docvert <unfixed>
840            - moodle <unfixed>
841            - egroupware <unfixed>
842    
843    libphp-simplepie
844            - dokuwiki <unfixed>
845    
846    libphp-jpgraph
847            - egroupware <unfixed>
848    
849    php-simpletest
850            - moodle <unfixed>
851    
852    libpng
853            - iceweasel <unfixed> (embed)
854            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
855            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
856            - iceape 1.0.13~pre080614i-0etch1 (embed)
857            - xulrunner <unfixed> (embed)
858            NOTE: Debian 1.9.0.6 uses embedded copy
859            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
860            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
861            NOTE: Ubuntu only
862            - firefox-3.0 <unfixed> (embed)
863            NOTE: Ubuntu only
864            - firefox-3.1 <unfixed> (embed)
865            NOTE: Ubuntu only
866            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
867            NOTE: Ubuntu only
868            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
869            NOTE: Ubuntu only
870            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
871            NOTE: Ubuntu only
872    
873    irssi
874            - silc-client <unfixed> (embed)
875            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
876    
877    extc
878            - mtasc <unfixed> (embed)
879            - haxe <unfixed> (embed)
880    
881    swflib
882            - mtasc <unfixed> (embed)
883            - haxe <unfixed> (embed)
884    
885    libitext-java
886            - bouncycastle 2.1.4-1 (embed)
887    
888    python-ply
889            - pyke <unfixed> (embed)
890    
891    libdumbnet (libdnet upstream)
892            - nmap <unfixed> (fork)
893    
894    gcc-4.4
895            - gcc-mingw32 <unfixed> (embed)
896    
897    camlimages
898            - advi <unfixed> (embed)
899    
900    memcached
901            - memcachedb <unfixed> (embed)
902    
903    yajl (ITP: #537199)
904            - argyll <unfixed> (embed)
905            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html

Legend:
Removed from v.3729  
changed lines
  Added in v.12498

  ViewVC Help
Powered by ViewVC 1.1.5