/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 4889 by joeyh, Fri Oct 27 23:03:17 2006 UTC revision 12061 by jmm-guest, Sat Jun 6 20:30:55 2009 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7  xpdf code: (some use xpdf 2, some xpdf 3)  
8  gpdf (will be replaced by evince in Gnome 2.12)  Format:
9  pdftohtml (current poppler source package has a ported version, pinged maintainer)  <srcpkg> (<optional comment about srcpkg>)
10  kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  tetex-bin (links to poppler since 3.0-12)          NOTE: optional comments about the linkage of the embedding srcpkg
12  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
13  poppler  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  koffice (upstream is working on using poppler, probably not in time for Etch)          <itp> or <unknown> if the version number can not be determined
15  libextractor (uses internal pdf decoder since 0.5.12-1)          <unfixable> for unavoidable cases (e.g., forks that add real value)
16  pdfkit.framework (links to poppler since 0.8-4)  sort: static (linking statically against a lib)
17          embed (embedding a copy of the library into another source package)
18  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)        fork (the package is not just embedding code but it is a fork and
19  dpkg              thus might share parts of the source code)
20  rsync (somehow derived code base)        old-version (the package is an older version of essentially
21  mozilla(?)                     the same code)
22  Linux kernels  
23  pvpgn (links dynamically since 1.7.8-2)  The srcpkg might be some string to identify the code if there is no
24  mrtg (links dynamically since 2.12.2-1)  specific source package.
25    
26  libgadu/ekg:  Everything up to the next line is ignored.
27  centericq  ---BEGIN
28  gaim  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  kopete (ships the code, but links dynamically in the Debian package)          NOTE: Fixed packages link to poppler library unless otherwise noted
30  kadu (not packaged in Debian)          - gpdf <removed>
31  GNU gadu (not yet packaged in Debian)          [sarge] - gpdf <unfixed>
32            NOTE: has been replaced by evince in etch
33            - pdftohtml <unknown>
34  xmlrpc: (which package is the "origin" of this code?)          [sarge] - pdftohtml <unfixed>
35  drupal          [etch] - pdftohtml <unfixed>
36  phpgroupware          NOTE: has been replaced by poppler-utils
37  egroupware          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38  phpwiki          - texlive-base 3.0-12 (embed)
39  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - texlive-bin 2007-1 (embed)
40  tikiwiki (not packaged in Debian)          NOTE: links to poppler
41            - koffice <unfixed> (embed; bug #436163)
42            - libextractor 0.5.12-1 (embed)
43  shtool: (affects build-time only)          NOTE: libextractor is using its own pdf decoder now
44  mysql-ocaml          - pdfkit.framework 0.8-4 (embed)
45  php4          - ipe <unfixed> (embed)
46            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47            - ruby-gnome2 <unknown> (embed)
48  mozilla:          NOTE: copy only present in source but links to poppler
49  mozilla-firefox          - pdfedit <unfixed> (embed; bug #510794)
50  mozilla-thunderbird          - swftools <unfixed> (embed)
51  nvu  
52    ppmd
53            - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54  xli:  
55  xloadimage  peercast
56            - gnome-peercast <unfixed> (embed)
57            NOTE: gnome-peercast may better be removed, see #466539
58  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
59  openmotif  silc-toolkit
60  xfree86/xorg (in libxpm)          - silc-client 1.1~beta6-1 (embed)
61    
62    icclib
63  kerberized apps with BSD origin:          - ghostscript <unfixed> (embed)
64  krb4          - argyll <unfixed> (embed)
65  krb5  
66  heimdal  dietlibc
67            - ccontrol 0.9.1+20071204-1 (static)
68    
69  grip: (which pkg is the origin?)  libmikmod
70  libcdaudio          - sdl-mixer1.2 <unfixed> (embed)
71  grip          TODO: report bug
72  gnome-vfs (vfs2 as well?)  
73    libiax
74            - iaxmodem <unfixed> (embed)
75    
76    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
77            - dpkg <unfixed> (embed)
78            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
79            - rsync <unfixed> (embed)
80            NOTE: somehow derived code base
81            - mono <unfixed> (embed)
82            TODO: check mozilla
83            - Linux kernels <unfixed> (embed)
84            - pvpgn 1.7.8-2 (embed)
85            - mrtg 2.12.2-1 (embed)
86            - rpm <unknown> (embed)
87            NOTE: pinged anibal since when rpm was fixed
88            - tuxcmd-modules <unfixed> (embed)
89            - zsync <unfixed>
90            - tra <unfixed>
91            - sash <unfixed>
92            - nsis <unfixed>
93            - mseide-msegui <unfixed>
94            NOTE: mseide
95            - mirrordir <unfixed>
96            - poco <unfixed>
97            - klibc <unfixed>
98            - ghostscript <unfixed>
99            - freeimage <unfixed>
100            - clamav <unfixed> (fork)
101            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
102            - tuxonice-userui <unfixed>
103            - plt-scheme <unfixed>
104            - perl <unfixed>
105            - paraview <unfixed>
106            - gcvs <unfixed>
107            - erlang <unfixed>
108            - dump <unfixed>
109            - aide <unfixed> (static)
110            - dar <unfixed> (static)
111            - avfs <unfixed>
112            - fpc <unfixed>
113            - winff <unfixed>
114            NOTE: inherited from fpc, see #472304
115            - lazarus <unfixed>
116            NOTE: inherited from fpc, see #472304
117    
118    libbz2
119            - dpkg <unfixed> (static)
120    
121    libgadu:
122            - centericq <unfixed> (embed)
123            - gaim <unfixed> (embed)
124            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
125            - kdenetwork 4:3.3.2-5 (embed)
126            NOTE: from kdenetwork: kopete
127            - gadu <unfixed> (embed)
128            - ekg 1:1.8~rc0-1 (embed)
129            - kadu 0.6.0.2-3 (embed; bug #504430)
130            NOTE: gadu not packaged in Debian yet
131    
132    xmlrpc (which package is the "origin" of this code?)
133            - drupal <unfixed> (embed)
134            - phpgroupware <unfixed> (embed)
135            - egroupware <unfixed> (embed)
136            - phpwiki <unfixed> (embed)
137            - php4 <unfixed> (embed)
138            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
139    
140    shtool (affects build-time only)
141            - mysql-ocaml <unfixed> (embed)
142            - php4 <unfixed> (embed)
143    
144    mozilla source code
145            - mozilla-firefox <unfixed> (embed)
146            - mozilla-thunderbird <unfixed>
147            - firefox <removed>
148            - thunderbird <removed>
149            - iceweasel <unfixed> (embed)
150            - iceape <unfixed> (embed)
151            - icedove <unfixed> (embed)
152            - xulrunner <unfixed> (embed)
153            - nvu <removed> (embed)
154    
155    xli
156            - xloadimage <unfixed> (embed)
157    
158    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
159            - openmotif <unfixed> (embed)
160            - libxpm <unfixed> (embed)
161    
162    kerberized apps with BSD origin
163            - krb4 <unfixed> (embed)
164            - krb5 <unfixed> (embed)
165            - heimdal <unfixed> (embed)
166    
167    grip (which pkg is the origin?)
168            - libcdaudio <unfixed>
169            - grip <unfixed>
170            - gnome-vfs <unfixed>
171            TODO: check vfs2 as well
172    
173    fudforum
174            [etch] - phpgroupware <unfixed> (embed)
175            NOTE: phpgroupware-fudforum
176            [sarge] - egroupware-fudforum <removed> (embed)
177    
178    cvs
179            - gcvs <unfixed> (embed)
180            NOTE: see cvsunix/src in tarball
181    
182    pcre
183            - python* <unfixed> (embed)
184            - php4 <unknown> (embed)
185            - analog 2:5.23-0woody1 (embed)
186            - goffice <unfixed> (embed)
187            NOTE: libgoffice-*
188            - vfu 4.06-4.1 (embed; bug #450754)
189            - tf5 5.0beta7-1 (embed)
190            - monotone 0.43-1 (embed)
191            NOTE: this only affects versions >= 0.37
192            - glib2.0 2.15.2-1 (embed)
193            - apache2 2.0.53-4 (embed)
194            - exim4 4.10-0.srh20.12 (embed)
195            - yacas <unfixed> (embed)
196            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
197            - gtamsanalyzer.app 0.42-5 (embed)
198            - tin <unknown> (embed)
199            - kazehakase 0.5.2-1
200            - webkit <unfixed> (embed)
201            - qt4-x11 <unfixed> (embed)
202            NOTE: embedded via webkit copy
203    
204    tiff
205            - wxwindows2.4 2.2.1 (embed)
206    
207    uudeview
208            - libconvert-uulib-perl <unfixed> (embed)
209            - pan <unfixed> (embed)
210    
211    sqlite (not affected by security vulnerabilities so far)
212            - amarok <unfixed> (embed)
213            - monotone 0.43-1 (embed)
214            - iceweasel <unfixed> (embed)
215    
216    util-linux/mount
217            - loop-aes-utils <unfixed> (embed)
218            NOTE: contains code from util-linux' mount in the mount-aes-udeb
219    
220    webmin
221            - usermin <unknown> (embed)
222            [sarge] - usermin <unfixed> (embed)
223    
224    sylpheed
225            - sylpheed-claws <unfixed> (fork)
226    
227    phpsysinfo
228            - egroupware <unfixed> (embed)
229            - phpgroupware <unfixed> (embed)
230    
231    phpldapadmin
232            [sarge] - egroupware <unfixed> (embed)
233            NOTE: removed from egroupware after sarge
234    
235    chmlib
236            - kchmviewer <unknown> (embed)
237    
238    libavcodec/libavformat (source: ffmpeg)
239            - mplayer 1.0~rc2-14 (embed; bug #395252)
240            - kino 1.0.0-1
241            - vlc <not-affected> (Links dynamically since initial release)
242            - smilutils 0.3.0-10
243            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
244            - motion 3.1.19-1
245            - gstreamer0.10-ffmpeg 0.10.3-2
246            - xmovie <unfixed>
247            TODO: gimp-gap (potentially using ffmpeg code as well)
248    
249    faad2
250            - mplayer 1.0~rc2-20 (embed)
251    
252    mad MPEG decoding lib
253            - mad <unfixed> (embed)
254            - xine-lib <unfixed> (embed)
255    
256    libdts
257            - xine-lib <unfixed> (embed)
258    
259  fudforum:  flac
260  phpgroupware-fudforum          - xine-lib <unfixed> (embed)
 egroupware-fudforum  
261    
262  cvs:  liba52
263  gcvs (at least an additional script is included, check if there's more)          - a52dec <unfixed> (embed)
264            - xine-lib <unfixed> (embed)
265    
266  pcre:  libmpeg2
267  all pythons          - mpeg2dec <unfixed> (embed)
268  php4 (src included, but Debian package links dynamically)          - xine-lib <unfixed> (embed)
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
269    
270  tiff:  curl
271  wxpythongtk (check, which debian pkg this is in)          - wget <unfixed> (embed)
272  older kdegraphics/kpdf releases < 3.3 embedded a copy          NOTE: code for NTLM authentication
273    
274    uw-imap
275            - pine <unfixed> (embed)
276            - alpine <unfixed> (embed)
277    
278  uudeview:  imagemagick
279  libconvert-uulib-perl          - graphicsmagick <unfixed> (fork)
280    
281  sqlite: (not affected by security vulnerabilities so far)  halibut
282  amarok          - nsis <unfixed> (fork)
283    
284  util-linux/mount:  libghttp
285  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - hotway <unfixed> (embed)
286    
287  webmin:  libsndfile
288  usermin          - ardour 1:2.7.1-1 (embed)
289    
290  sylpheed:  glibmm2.4
291  sylpheed-claws          - ardour 1:2.7.1-1 (embed)
292    
293  phpsysinfo:  libgnomecanvasmm2.6
294  egroupware          - ardour 1:2.7.1-1 (embed)
 phpgroupware  
295    
296  phpldapadmin:  libsigc++-2.0
297  egroupware          - ardour 1:2.7.1-1 (embed)
298    
299  chmlib:  soundtouch
300  kchmviewer (not packaged in Debian)          - ardour 1:2.7.1-1 (embed)
301    
302  libavcodec/libavformat:  libmms
303  ffmpeg          - xine-lib <unfixed> (embed)
304  xine-lib          - mimms <unfixed> (embed)
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
305    
306  mad MPEG decoding lib:  fckeditor
307  mad          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
308  xine-lib          - moin 1.8.2-2 (embed; bug #452599)
309            - karrigell <removed> (embed; bug #452598)
310            - gforge 4.6.99+svn6225-1 (embed)
311    
312  libdts:  ipatlas (not packaged in Debian)
313  libdts          - moodle <unfixed> (embed; bug #507185)
 xine-lib  
314    
315  flac:  libphp-phpmailer
316  flac          - moodle <unfixed> (embed; bug #507185)
317  xine-lib          - mahara <unfixed> (embed)
318            - symfony <unfixed> (embed)
319            [etch] - phpgroupware <unfixed> (embed)
320            NOTE: phpgroupware-felamimail is only in etch
321            - egroupware <unfixed> (embed; bug #504283)
322            - glpi <unfixed>
323    
324  liba52:  htmlArea (not packaged in Debian)
325  a52dec          - moodle <unfixed> (embed)
 xine-lib  
326    
327  libmpeg2:  giflib:
328  mpeg2dec          - wine <unfixed> (embed; bug #466181)
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
329    
330  imagemagick:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
331  graphicsmagick          - moodle <unfixed> (embed)
332    
333  halibut:  smarty:
334  nsis          - moodle 1.8.2-2 (embed; bug #471158)
335            - gallery2 2.2.5-2 (embed; bug #471160)
336            - mahara 0.9.2-2 (embed; bug #471201)
337            - gosa 2.4beta1-1 (embed; bug #471200)
338    
339  libghttp:  TinyMCE
340  hotway          - wordpress 2.5.1-3 (embed; bug #478257)
341            - moodle <unfixed> (embed; bug #507185)
342  etl-dev (will be renamed to libetl-dev soon):          - knowledgeroot <unfixed> (embed)
343  synfig          - joomla <itp> (bug #326398)
344    
345    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
346            - scite <unfixed> (embed)
347            - qscintilla <unfixed> (embed)
348            - qscintilla2 <unfixed> (embed)
349            - geany <unfixed> (fork)
350            - anjuta <unfixed> (embed)
351    
352    libphp-adodb
353            - moodle <unfixed> (embed; bug #507185)
354            NOTE: also AdoDB-XML Schema
355            - gallery2 <unfixed> (embed)
356            - phppgadmin <unfixed> (embed)
357            - egroupware <unfixed> (embed)
358            - phpwiki <unfixed> (embed)
359            - torrentflux 2.0beta1-2 (embed)
360            - ipplan <unfixed> (embed)
361            - typo3-src <unfixed> (embed)
362            - cacti <unknown> (embed)
363            [sarge] - cacti <unfixed> (embed)
364            NOTE: dependency exists, but internal version is used
365            - gforge 4.7~rc2-6 (embed)
366            - mahara <unfixed> (embed)
367    
368    gzip
369            - linux-kernel <unfixed> (embed)
370            NOTE: lib/inflate.c
371            - klibc <unfixed> (embed)
372            NOTE: based on linux-kernel gzip code
373            - busybox <unfixed> (embed)
374    
375    neon
376            - cadaver <unfixed> (embed; bug #188381)
377            - gnome-vfs2 <unfixed> (embed; bug #395874)
378            - litmus <unfixed> (embed; #395875)
379            [sarge] - screem <unfixed> (embed)
380            - sitecopy <unfixed> (embed; bug #395876)
381            [etch] - tla <unfixed> (embed; bug #395877)
382            [sarge] - tla <unfixed> (embed; bug #395877)
383    
384    libmodplug
385            - gst-plugins-bad0.10 <unfixed> (embed)
386    
387    libvncserver
388            - vino <unfixed> (embed)
389    
390    putty
391            - filezilla <unfixed> (embed)
392    
393    tinyxml (not packaged in Debian)
394            - filezilla <unfixed>
395    
396    gv
397            - evince <unfixed> (embed)
398            NOTE: ps/ tree from gv 3.5.8
399            - evince-gtk <unfixed> (embed)
400            NOTE: not packaged in Debian
401    
402    libXbae
403            [etch] - libpawlib2-lesstif <unfixed> (embed)
404            NOTE: from Cernlib
405    
406    libXaw
407            [etch] - libpawlib2-lesstif <unfixed>
408            NOTE: from Cernlib
409            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
410    
411    libgd2
412            - graphviz <unfixed> (embed)
413            NOTE: lib/gd seems to be 2.0.33
414            - wml <unfixed> (embed)
415            - libwmf <unfixed> (embed)
416            NOTE: derived from gd 1.6.3
417    
418    rar
419            - unrar-nonfree <unfixed> (embed)
420    
421    unrar-free (maybe this code is derived from the original rar, too?)
422            - clamav <unfixed> (embed)
423            NOTE: seems to be disabled in default config
424    
425    mplayer (DirectMedia Object loader)
426            - xine-lib <unfixed> (embed)
427            NOTE: src/libw32dll/
428            - vlc <unfixed> (embed)
429            NOTE: modules/codec/dmo/
430            - mplayer 1.0~rc2-20 (embed)
431    
432    libwpd (WordPerfect converter)
433            - openoffice.org <unfixed> (embed)
434    
435    fsplib (http://sourceforge.net/projects/fsp/)
436            - gftp <unfixed> (embed)
437            NOTE: lib/fsplib version 0.3
438    
439    sprng
440            - tree-puzzle <unfixed> (embed)
441    
442    librpcsecgss
443            - krb5 <unfixed> (embed)
444    
445    jasper
446            - ghostscript <unfixed> (embed)
447            - gs-gpl <unfixed> (embed)
448    
449    libiris
450            - psi <unfixed> (embed)
451            - kdenetwork <unfixed> (embed)
452            NOTE: kopete embeds libiris but links dynamically to libidn
453            - kdegames <unfixed> (embed)
454            NOTE: ksirk/kde4
455    
456    libidn
457            - monotone 0.43-1 (embed)
458            - psi <unfixed> (embed)
459            NOTE: psi embeds libiris which embeds libidn
460            - kdegames <unfixed> (embed)
461            NOTE: kdegames/kde4 embeds libiris which embeds libidn
462    
463    liblua
464            - monotone 0.43-1 (embed)
465            - nmap <unfixed> (embed; bug #527997)
466            NOTE: fixed upstream as of nmap svn rev13336.
467    
468    libbotan
469            - monotone 0.43-1 (embed)
470    
471    NetXX
472            - monotone 0.43-1 (embed)
473    
474    libgc
475            - mono <unfixed> (embed)
476    
477    lzma
478            - p7zip <unfixed> (embed)
479    
480    lzo
481            - grub2 <unfixed> (embed)
482    
483    yassl
484            - mysql-dfsg-5.0 <unfixed> (embed)
485    
486    pax code
487            - tar <unfixed> (embed)
488            - cpio <unfixed> (embed)
489    
490    t1lib
491            - tetex-bin 2.0.2-1 (embed)
492            - texlive-bin <unknown> (embed)
493    
494    guichan
495            - boswars <unfixed> (embed)
496            NOTE: maintainer notified us, working on it
497    
498    tolua
499            - boswars <unfixed> (embed)
500            NOTE: maintainer notified us, working on it
501    
502    asio-dev
503            - luxrender <unfixed> (embed)
504            NOTE: maintainer notified us, working on it
505            NOTE: may be merged with boost "soon"
506    
 libmms:  
507  xine-lib  xine-lib
508  mimms          - vlc <unfixed> (embed)
509            NOTE: only parts included in modules/access/rtsp
510    
511  FCKeditor:  netpbm
512  knowledgeroot          - tcl8.3 <unfixed> (embed)
513            - tcl8.4 <unfixed> (embed)
514  Moodle contains lots of things:          - tcl8.5 <unfixed> (embed)
515  AdoDB          NOTE: generic/tkImgGIF.c
516  AdoDB-XML Schema  
517  ipatlas  tk8.5
518  PHPMailer          - tk8.0 <removed> (old-version)
519  Smarty          - tk8.3 <unfixed> (old-version)
520  htmlArea          - tk8.4 <unfixed> (old-version)
521  TinyMCE          - perl-tk <unfixable> (fork)
522  bennu  
523    samba
524            - mc 2:4.6.2~git20080311-1 (embed)
525            NOTE: maintainer is aware of this, currently searching a solution
526    
527    plib1.8.4c2
528            - boson <unfixed> (fork)
529            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
530    
531    fribidi
532            - quesoglc <unfixed> (embed)
533            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
534    
535    glew
536            - quesoglc <unfixed> (embed; bug #489341)
537            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
538    
539    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
540            - transcend <unfixed> (embed)
541            - cultivation <unfixed> (embed)
542            - passage <unfixed> (embed)
543            - gravitation <unfixed> (embed)
544    
545    tar
546            - libarchive <unfixed> (embed)
547            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
548    
549    cpio
550            - libarchive <unfixed> (embed)
551            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
552    
553    webkit
554            - qt4-x11 <unfixed> (embed)
555    
556    ftgl
557            - blender 2.46+dfsg-1 (embed)
558    
559    wv
560            - abiword <unfixed>
561    
562    qemu
563            - kvm <unfixed> (embed)
564            - xen-3 <unfixed> (embed)
565            - xen-unstable <unfixed> (embed)
566    
567    vgabios
568            - kvm <unfixed> (embed; bug #489442)
569    
570    bochs
571            - kvm <unfixed> (embed; bug #489442)
572    
573    speex
574            - vorbis-tools <unfixed> (embed)
575            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
576            - gst-plugins-good0.10 <unfixed> (embed)
577            - xine-lib <unfixed> (embed)
578            - libfishsound <unfixed> (embed)
579            - libannodex <unfixed> (embed)
580            - vlc <unfixed> (embed)
581            - xmms-speex <unfixed> (embed)
582            - libsdl-sound1.2 <unfixed> (embed)
583            - sweep <unfixed> (embed)
584    
585    libreadline
586            - magic <unfixed> (old-version)
587            NOTE: magic is currently an RFS
588    
589    opcode
590            - ode <unfixed> (embed)
591            NOTE: opcode is not a package in debian, it is just embedded
592            NOTE: http://www.codercorner.com/Opcode.htm
593    
594    gimpact
595            - ode <unfixed> (embed)
596            NOTE: gimpact is not a package in debian, it is just embedded
597            NOTE: http://gimpact.sf.net
598    
599    mochikit
600            - mahara <unfixed> (embed)
601            NOTE: they require extra patches, still unmerged upstream
602            - ntop <unfixed> (embed)
603            - coherence <unfixed> (embed)
604            NOTE: python-coherence
605            - paste <unfixed> (embed)
606            NOTE: python-paste
607            - turbogears <unfixed> (embed)
608            NOTE: python-turbogears
609            - plone3 <unfixed> (embed)
610            NOTE: zope-plone3
611    
612    prototype
613            - netbeans-ide <unfixed> (embed)
614            - auth2db-frontend <unfixed> (embed)
615            - webcit <unfixed> (embed)
616            NOTE: citadel-webcit
617            - asterisk <unfixed> (embed)
618            - doc-iana <unfixed> (embed)
619            - libaws <unfixed> (embed)
620            NOTE: libaws-doc
621            - libgettext-ruby <unfixed> (embed)
622            NOTE: libgettext-ruby-data
623            - libjson-ruby <unfixed> (embed)
624            NOTE: libjson-ruby-doc
625            - lucene2 <unfixed> (embed)
626            NOTE: liblucene2-java-doc
627            - libopenid-ruby <unfixed> (embed)
628            - solr <unfixed> (embed)
629            NOTE: solr-common
630            - glpi <unfixed> (embed)
631            - hobbix <unfixed> (embed)
632            - mnemo2 <unfixed> (embed)
633            - nag2 <unfixed> (embed)
634            - knowledgeroot <unfixed> (embed)
635            - mediatomb <unfixed> (embed)
636            NOTE: mediatomb-common
637            - mt-daapd <unfixed> (embed)
638            - op-panel <unfixed> (embed)
639            - ebug-http <unfixed> (embed)
640            - phpgedview <removed> (embed)
641            - poker-network <unfixed> (embed)
642            NOTE: poker-web
643            - webhelpers <unfixed> (embed)
644            NOTE: python-webhelpers
645            - qwik <unfixed> (embed)
646            - rails <unfixed> (embed)
647            - typo3-src <unfixed> (embed)
648            - wordpress <unfixed> (embed)
649            - zope <unfixed> (embed)
650            NOTE: zope-plone3
651            - smokeping <unfixed> (embed)
652            - ampache 3.4.1-2 (embed)
653            - exaile <unfixed> (embed)
654            - hobix <unfixed> (embed)
655            - pixelpost <unfixed> (embed)
656            - symfony <unfixed> (embed)
657            NOTE: it's been said that there are custom changes
658            - zabbix <unfixed> (embed)
659            NOTE: zabbix-frontend-php
660            - turba2 <unfixed> (embed)
661    
662    gdb
663            - insight <unfixed> (embed)
664    
665    e2fsprogs
666            - ldiskfsprogs <unfixable> (fork)
667    
668    quazip (not packaged in Debian)
669            - qcake <unfixed> (embed)
670            NOTE: starting with upstream version 0.6.4
671    
672    exo
673            - pcmanfm <unfixed> (embed; bug #499677)
674            NOTE: slightly modified source code
675    
676    java
677            - openjdk-6 <unfixed>
678            - sun-java5 <unfixed>
679            - sun-java6 <unfixed>
680    
681    libphp-snoopy
682            - ampache 3.4.1-2 (embed; bug #504169)
683            - mahara 1.0.5-2 (embed; bug #504170)
684            - pixelpost <unfixed> (embed; bug #504171)
685            - mediamate 0.9.3.6-5 (embed; bug #504172)
686            - opendb <unfixed> (embed; bug #504173)
687            - wordpress 2.5.1-9 (embed; bug #443948)
688            - moodle <unfixed> (embed; bug #507185)
689            [etch] - phpgroupware <unfixed> (embed)
690            NOTE: phpgroupware-felamimail
691            - magpierss 0.72-3 (embed; bug #431089)
692    
693    jquery
694            - zekr <unfixed> (embed)
695            - wordpress <unfixed> (embed)
696            - yocto-reader <unfixed> (embed)
697            - textpattern <unfixed> (embed)
698            - genshi 0.5.1-1 (embed)
699            NOTE: compressed file under examples/ dir
700            - prewikka <unfixed> (embed)
701            - libramaze-ruby <unfixed> (embed)
702            - drupal5 <unfixed> (embed)
703            - b2evolution <unfixed> (embed)
704            - wesnoth <unfixed> (embed)
705    
706    tablesorter (jquery plugin, not packaged yet)
707            - wesnoth <unfixed> (embed)
708    
709    kses
710            - wordpress <unfixed> (embed; bug #504242)
711            NOTE: their copy has all methods renamed to wp_<foo>
712            - moodle <unfixed> (embed; bug #507185)
713            - egroupware <unfixed> (embed)
714    
715    magpierss
716            - wordpress <unfixed> (embed; bug #504242)
717            - moodle <unfixed>
718    
719    php-gettext
720            - wordpress <unfixed> (embed; bug #504242)
721    
722    libphp-ixr (name may change, it is the Incutio XML-RPC)
723            - wordpress <unfixed> (embed; bug #504242)
724            - dokuwiki <unfixed> (embed)
725            - textpattern <unfixed> (embed)
726    
727    libphp-cas
728            - glpi <unfixed> (embed)
729            - moodle <unfixed> (embed; bug #496069)
730    
731    scriptaculous
732            - glpi <unfixed> (embed)
733            - libaws <unfixed> (embed)
734            NOTE: libaws-doc
735            - op-panel <unfixed> (embed)
736            - symfony <unfixed> (embed)
737            NOTE: maintainer says there are extra incompatible changes required
738            - pixelpost <unfixed> (embed)
739            - webhelpers <unfixed> (embed)
740            NOTE: python-webhelpers
741            - qwik <unfixed> (embed)
742            - smokeping <unfixed> (embed)
743            - turba2 <unfixed> (embed)
744            - typo3-src 4.2.3-1 (embed)
745    
746    libmarkdown-php
747            - moodle <unfixed> (embed; bug #507185)
748            - pixelpost <unfixed> (embed)
749    
750    php-openid
751            - wordpress-openid <itp> (embed)
752    
753    geshi
754            - dokuwiki 0.0.20080505-3.1 (embed)
755            - pgfouine 1.0-1.1 (embed)
756            - websvn 2.1.0-1 (embed)
757    
758    webcalendar
759            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
760    
761    libical
762            - kdepim <unfixed> (fork)
763            - kdepimlibs <unfixed> (fork)
764            NOTE: fixed in KDE4 post 4.1.x series
765    
766    libltdl3
767            - kdelibs <unfixed> (embed)
768            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
769            - synfig <unfixed> (embed)
770    
771    harfbuzz
772            - qt4-x11 <unfixed> (embed)
773    
774    libzip
775            - php5 <unfixed> (fork)
776            - odt2txt <unfixed> (embed; bug #523808)
777    
778    json.php (not packaged; should be replaced with php's built-in functions)
779            - moodle <unfixed>
780            - yui <unfixed>
781            - gallery2 <unfixed>
782            - dokuwiki <unfixed>
783            - typo3-src <unfixed>
784    
785    php-fpdf
786            - tcpdf <itp> (fork)
787            - moodle <unfixed>
788            - phpwiki <unfixed>
789            - egroupware <unfixed>
790            - ldap-account-manager <unfixed> (fork)
791    
792    tcpdf (itp: #495985)
793            - moodle <unfixed>
794            - phpmyadmin <unfixed>
795    
796    typo3
797            - moodle <unfixed>
798    
799    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
800            - moodle <unfixed>
801            - gosa <unfixed>
802    
803    php-ole (itp: #487558)
804            - moodle <unfixed>
805    
806    pieforms (http://www.catalyst.net.nz)
807            - mahara <unfixed>
808    
809    savant2 (http://phpsavant.com)
810            - egroupware <unfixed>
811    
812    rssparser (http://nwow.org)
813            - egroupware <unfixed>
814            - phpgroupware <unfixed>
815    
816    lcms
817            - openjdk-6 <unfixed> (fork)
818    
819    libphp-phplayersmenu
820            - diogenes <unfixed>
821            - phpldapadmin <unfixed>
822    
823    libphp-pclzip
824            - docvert <unfixed>
825            - moodle <unfixed>
826            - egroupware <unfixed>
827    
828    libphp-simplepie
829            - dokuwiki <unfixed>
830    
831    libphp-jpgraph
832            - egroupware <unfixed>
833    
834    php-simpletest
835            - moodle <unfixed>
836    
837    libpng
838            - iceweasel <unfixed> (embed)
839            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
840            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
841            - iceape 1.0.13~pre080614i-0etch1 (embed)
842            - xulrunner <unfixed> (embed)
843            NOTE: Debian 1.9.0.6 uses embedded copy
844            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
845            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
846            NOTE: Ubuntu only
847            - firefox-3.0 <unfixed> (embed)
848            NOTE: Ubuntu only
849            - firefox-3.1 <unfixed> (embed)
850            NOTE: Ubuntu only
851            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
852            NOTE: Ubuntu only
853            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
854            NOTE: Ubuntu only
855            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
856            NOTE: Ubuntu only
857    
858    irssi
859            - silc-client <unfixed> (embed)
860            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
861    
862    extc
863            - mtasc <unfixed> (embed)
864            - haxe <unfixed> (embed)
865    
866    swflib
867            - mtasc <unfixed> (embed)
868            - haxe <unfixed> (embed)
869    
870    libitext-java
871            - bouncycastle 2.1.4-1 (embed)
872    
873  TinyMCE:  python-ply
874  wordpress          - pyke <unfixed> (embed)
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
 busybox  
875    
876  ffmpeg:  libdumbnet (libdnet upstream)
877  mplayer (#395252)          - nmap <unfixed> (fork)

Legend:
Removed from v.4889  
changed lines
  Added in v.12061

  ViewVC Help
Powered by ViewVC 1.1.5