/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 5321 by stef-guest, Mon Jan 22 17:54:13 2007 UTC revision 13147 by jwilk-guest, Thu Oct 29 16:32:42 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (will be replaced by evince in Gnome 2.12)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (current poppler source package has a ported version, pinged maintainer)  to be applied in multiple source packages.
7  kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, probably not in time for Etch)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)          be determined, or <unfixable> for unavoidable cases (e.g., forks
16  dpkg          that add real value)
17  rsync (somehow derived code base)  sort: static (linking statically against a lib)
18  mozilla(?)        embed (embedding a copy of the library into another source package)
19  Linux kernels        fork (the package is not just embedding code but it is a fork and
20  pvpgn (links dynamically since 1.7.8-2)              thus might share parts of the source code)
21  mrtg (links dynamically since 2.12.2-1)        old-version (the package is an older version of essentially
22  rpm                     the same code)
23    
24  libbz2:  The srcpkg might be some string to identify the code if there is no
25  dpkg (statically linked)  specific source package.
26    
27  libgadu/ekg:  Everything up to the next line is ignored.
28  centericq  ---BEGIN
29  gaim  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30  kopete (ships the code, but links dynamically in the Debian package)          NOTE: Fixed packages link to poppler library unless otherwise noted
31  kadu (not packaged in Debian)          - pdftohtml <unknown>
32  GNU gadu (not yet packaged in Debian)          [sarge] - pdftohtml <unfixed>
33            [etch] - pdftohtml <unfixed>
34  xmlrpc: (which package is the "origin" of this code?)          NOTE: has been replaced by poppler-utils
35  drupal          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36  phpgroupware          - texlive-base 3.0-12 (embed)
37  egroupware          - texlive-bin 2007-1 (embed)
38  phpwiki          NOTE: links to poppler
39  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - koffice <unfixed> (embed; bug #436163)
40  tikiwiki          - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42  shtool: (affects build-time only)          - ipe <unfixed> (embed)
43  mysql-ocaml          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44  php4          - ruby-gnome2 <unknown> (embed)
45            NOTE: copy only present in source but links to poppler
46  mozilla:          - pdfedit <unfixed> (embed; bug #510794)
47  mozilla-firefox          - swftools <unfixed> (embed; bug #551293)
48  mozilla-thunderbird          - poppler <unfixable> (fork)
49  firefox (to be removed)  
50  thunderbird (to be removed)  ppmd
51  iceweasel          - libcomplearn-mod-ppmd <unfixed> (fork)
52  iceape          NOTE: discussion in #458152
53  icedove  
54  xulrunner  libevent
55  nvu (no longer in Debian)          - transmission 1.71-1 (embed; bug #529372)
56    
57  xli:  lrmi
58  xloadimage          - read-edid 2.0.0-1 (embed; bug #495131)
59    
60  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  peercast
61  openmotif          - gnome-peercast <removed> (embed)
62  xfree86/xorg (in libxpm)          [etch] - gnome-peercast <unfixed> (embed)
63    
64  kerberized apps with BSD origin:  silc-toolkit
65  krb4          - silc-client 1.1~beta6-1 (embed)
66  krb5  
67  heimdal  icclib
68            - ghostscript <unfixed> (embed)
69  grip: (which pkg is the origin?)          - argyll <unfixed> (embed)
70  libcdaudio  
71  grip  dietlibc
72  gnome-vfs (vfs2 as well?)          - ccontrol 0.9.1+20071204-1 (static)
73    
74  fudforum:  libmikmod
75  phpgroupware-fudforum          - sdl-mixer1.2 <unfixed> (embed)
76  egroupware-fudforum (removed from egroupware after sarge)          TODO: report bug
77    
78  cvs:  libiax
79  gcvs (at least an additional script is included, check if there's more)          - iaxmodem <unfixable> (embed; bug #548885)
80    
81  pcre:  spandsp
82  all pythons          - iaxmodem <unfixable> (embed; bug #548885)
83  php4 (src included, but Debian package links dynamically)  
84  analog (src included, but Debian package links dynamically)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85  libgoffice-1          - dpkg <unfixed> (embed)
86  tf5 (since 5.0beta7 the Debian package links dynamically)          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87            - rsync <unfixed> (embed)
88  tiff:          NOTE: somehow derived code base
89  wxpythongtk (check, which debian pkg this is in)          - mono <unfixed> (embed)
90  older kdegraphics/kpdf releases < 3.3 embedded a copy          TODO: check mozilla
91            - Linux kernels <unfixed> (embed)
92  uudeview:          - pvpgn 1.7.8-2 (embed)
93  libconvert-uulib-perl          - mrtg 2.12.2-1 (embed)
94            - rpm <unknown> (embed)
95  sqlite: (not affected by security vulnerabilities so far)          NOTE: pinged anibal since when rpm was fixed
96  amarok          - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98  util-linux/mount:          - tra <unfixed>
99  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - sash <unfixed>
100            - nsis <unfixed>
101  webmin:          - mseide-msegui <unfixed>
102  usermin (only in sarge)          NOTE: mseide
103            - mirrordir <unfixed>
104  sylpheed:          - poco <unfixed>
105  sylpheed-claws          - klibc <unfixed>
106            - ghostscript <unfixed>
107  phpsysinfo:          - freeimage <unfixed>
108  egroupware          - clamav <unfixed> (fork)
109  phpgroupware          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111  phpldapadmin:          - plt-scheme <unfixed>
112  egroupware (removed from egroupware after sarge)          - perl <unfixed>
113            - paraview <unfixed>
114  chmlib:          - gcvs <unfixed>
115  kchmviewer (not packaged in Debian)          - dump <unfixed>
116            - aide <unfixed> (static)
117  libavcodec/libavformat:          - dar <unfixed> (static)
118  ffmpeg          - avfs <unfixed>
119  xine-lib          - fpc <unfixed>
120  xvidcap          - winff <unfixed>
121  kino (links statically, does not include code)          NOTE: inherited from fpc, see #472304
122  vlc (links statically, does not include code)          - lazarus <unfixed>
123  smilutils (links statically, does not include code)          NOTE: inherited from fpc, see #472304
124  motion (links statically, does not include code)          - erlang <unfixed> (embed)
125  gst-ffmpeg          - gamera 3.2.3-1 (embed)
126  gstreamer0.10-ffmpeg  
127  xmovie  dulwich
128            - hg-git 0.1.0-1 (embed; bug #541996)
129    
130    libvigraimpex
131            - hugin <unfixed> (embed; bug #542259)
132            - enblend-enfuse <unfixed> (embed; bug #542258)
133            - gamera 3.2.3-1 (embed)
134    
135    libbz2
136            - dpkg <unfixed> (static)
137    
138    libgadu
139            - centericq <unfixed> (embed)
140            - pidgin <unfixed> (embed)
141            NOTE: pidgin links dynamically against libgadu; that should be fixed, then???
142            - kdenetwork 4:3.3.2-5 (embed)
143            NOTE: from kdenetwork: kopete
144            - ekg 1:1.8~rc0-1 (embed)
145            - kadu 0.6.0.2-3 (embed; bug #504430)
146            - gadu <itp> (embed)
147    
148    xmlrpc (which package is the "origin" of this code?)
149            - drupal <unfixed> (embed)
150            - phpgroupware <unfixed> (embed)
151            - egroupware <unfixed> (embed)
152            - phpwiki <unfixed> (embed)
153            - php4 <unfixed> (embed)
154            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
155    
156    shtool (affects build-time only)
157            - mysql-ocaml <unfixed> (embed)
158            - php4 <unfixed> (embed)
159    
160  mad MPEG decoding lib:  iceape
161  mad          - iceweasel <unfixed> (fork)
162  xine-lib          - icedove <unfixed> (fork)
163            - xulrunner <unfixed> (fork)
164            - kompozer <unfixed> (embed; bug #532168)
165    
166    xli
167            - xloadimage <unfixed> (embed)
168    
169    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
170            - openmotif <unfixed> (embed)
171            - libxpm <unfixed> (embed)
172    
173    kerberized apps with BSD origin
174            - krb4 <removed> (embed)
175            - krb5 <unfixed> (embed)
176            - heimdal <unfixed> (embed)
177    
178    grip (which pkg is the origin?)
179            - libcdaudio <unfixed>
180            - grip <unfixed>
181            - gnome-vfs <unfixed>
182            TODO: check vfs2 as well
183    
184    fudforum
185            [etch] - phpgroupware <unfixed> (embed)
186            NOTE: phpgroupware-fudforum
187            [sarge] - egroupware-fudforum <removed> (embed)
188    
189    libbsd
190            - rdate 1:1.2-3 (embed)
191            - atheme-services <unfixed>
192            - libbsd-arc4random-perl <unfixed>
193            - isakmpd <unfixed>
194    
195    cvs
196            - gcvs <unfixed> (embed)
197            NOTE: see cvsunix/src in tarball
198    
199    pcre
200            - python* <unfixed> (embed)
201            - php4 <unknown> (embed)
202            - analog 2:5.23-0woody1 (embed)
203            - goffice <unfixed> (embed)
204            NOTE: libgoffice-*
205            - vfu 4.06-4.1 (embed; bug #450754)
206            - tf5 5.0beta7-1 (embed)
207            - monotone 0.43-1 (embed)
208            NOTE: this only affects versions >= 0.37
209            - glib2.0 2.15.2-1 (embed)
210            - apache2 2.0.53-4 (embed)
211            - exim4 4.10-0.srh20.12 (embed)
212            - yacas <unfixed> (embed)
213            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
214            - gtamsanalyzer.app 0.42-5 (embed)
215            - tin <unknown> (embed)
216            - kazehakase 0.5.2-1
217            - webkit 1.0.1-1 (embed)
218            - qt4-x11 <unfixed> (embed)
219            NOTE: embedded via webkit copy
220            - erlang <unfixed> (embed)
221    
222    tiff
223            - wxwindows2.4 2.2.1 (embed)
224            - gamera 3.2.3-1 (embed)
225    
226    uudeview
227            - libconvert-uulib-perl <unfixed> (embed)
228            - pan <unfixed> (embed)
229    
230    sqlite (not affected by security vulnerabilities so far)
231            - amarok <unfixed> (embed)
232            - monotone 0.43-1 (embed)
233            - iceweasel <unfixed> (embed)
234    
235    util-linux/mount
236            - loop-aes-utils <unfixed> (embed)
237            NOTE: contains code from util-linux' mount in the mount-aes-udeb
238    
239    sylpheed
240            - sylpheed-claws <unfixed> (fork)
241    
242    phpsysinfo
243            - egroupware <unfixed> (embed)
244            - phpgroupware <unfixed> (embed)
245    
246    phpldapadmin
247            [sarge] - egroupware <unfixed> (embed)
248            NOTE: removed from egroupware after sarge
249    
250    chmlib
251            - kchmviewer <unknown> (embed)
252    
253    ffmpeg (libavcodec/libavformat)
254            - mplayer 1.0~rc2-14 (embed; bug #395252)
255            - kino 1.0.0-1
256            - vlc <not-affected> (Links dynamically since initial release)
257            - smilutils 0.3.0-10
258            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
259            - motion 3.1.19-1
260            - gstreamer0.10-ffmpeg 0.10.3-2
261            - xmovie <removed> (static)
262            TODO: gimp-gap (potentially using ffmpeg code as well)
263            - avifile <unfixed> (embed; bug #538750)
264    
265    faad2
266            - mplayer 1.0~rc2-20 (embed)
267            - avifile <unfixed> (embed; bug #538750)
268    
269    libmad (MPEG decoding lib)
270            - xine-lib <unfixed> (embed)
271            - avifile <unfixed> (embed) [./plugins/libmad/*]
272            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
273    
 libdts:  
274  libdts  libdts
275  xine-lib          - xine-lib <unfixed> (embed)
276    
 flac:  
277  flac  flac
278  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
279    
280  uw-imap:  liba52
281  pine          - a52dec <unfixed> (embed)
282            - xine-lib <unfixed> (embed)
283    
284    libmpeg2
285            - mpeg2dec <unfixed> (embed)
286            - xine-lib <unfixed> (embed)
287    
288    libntlm
289            - wget <unfixed> (fork; bug #550436)
290            - curl <unfixed> (fork; bug #550437)
291            - cntlm <unfixed> (fork; bug #550438)
292    
293    uw-imap
294            - pine <unfixed> (embed)
295            - alpine <unfixed> (embed)
296    
297    imagemagick
298            - graphicsmagick <unfixed> (fork)
299    
300    python-urlgrabber
301            - mercurial <unfixed> (embed; bug #531062)
302    
303    beautifulsoup
304            - python-mechanize <unfixed> (embed)
305            - zope2.11 <unfixed> (embed)
306            - twill <unknown> (embed)
307    
308    halibut
309            - nsis <unfixed> (fork)
310    
311    libghttp
312            - hotway <unfixed> (embed)
313    
314    libsndfile
315            - ardour 1:2.7.1-1 (embed)
316    
317    glibmm2.4
318            - ardour 1:2.7.1-1 (embed)
319    
320    libgnomecanvasmm2.6
321            - ardour 1:2.7.1-1 (embed)
322    
323    libsigc++-2.0
324            - ardour 1:2.7.1-1 (embed)
325    
326    soundtouch
327            - ardour 1:2.7.1-1 (embed)
328    
329    libmms
330            - xine-lib <unfixed> (embed)
331            - mimms <unfixed> (embed)
332    
333    fckeditor
334            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
335            - moin 1.8.2-2 (embed; bug #452599)
336            - karrigell <removed> (embed; bug #452598)
337            - gforge 4.6.99+svn6225-1 (embed)
338            - request-tracker3.8 <unfixed> (embed)
339    
340    ipatlas (not packaged in Debian)
341            - moodle <unfixed> (embed; bug #507185)
342    
343    libphp-phpmailer
344            - moodle <unfixed> (embed; bug #507185)
345            - mahara <unfixed> (embed)
346            - symfony <unfixed> (embed)
347            [etch] - phpgroupware <unfixed> (embed)
348            NOTE: phpgroupware-felamimail is only in etch
349            - egroupware <unfixed> (embed; bug #504283)
350            - glpi <unfixed>
351    
352    htmlArea (not packaged in Debian)
353            - moodle <unfixed> (embed)
354    
355    giflib
356            - wine <unfixed> (embed; bug #466181)
357    
358    bennu (not packaged in Debian, http://bennu.sourceforge.net)
359            - moodle <unfixed> (embed)
360    
361    smarty
362            - moodle 1.8.2-2 (embed; bug #471158)
363            - gallery2 2.2.5-2 (embed; bug #471160)
364            - mahara 0.9.2-2 (embed; bug #471201)
365            - gosa 2.4beta1-1 (embed; bug #471200)
366    
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
   
 etl-dev (will be renamed to libetl-dev soon):  
 synfig  
   
 libmms:  
 xine-lib  
 mimms  
   
 FCKeditor:  
 knowledgeroot  
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
367  TinyMCE  TinyMCE
368  bennu          - wordpress 2.5.1-3 (embed; bug #478257)
369            - moodle <unfixed> (embed; bug #507185)
370            - knowledgeroot <unfixed> (embed)
371            - joomla <itp> (bug #326398)
372    
373    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
374            - scite <unfixed> (embed)
375            - qscintilla <unfixed> (embed)
376            - qscintilla2 <unfixed> (embed)
377            - geany <unfixed> (fork)
378            - anjuta <unfixed> (embed)
379    
380    libphp-adodb
381            - moodle <unfixed> (embed; bug #507185)
382            NOTE: also AdoDB-XML Schema
383            - gallery2 <unfixed> (embed)
384            - phppgadmin <unfixed> (embed)
385            - egroupware <unfixed> (embed)
386            - phpwiki <unfixed> (embed)
387            - torrentflux 2.0beta1-2 (embed)
388            - ipplan <unfixed> (embed)
389            - typo3-src <unfixed> (embed)
390            - cacti <unknown> (embed)
391            [sarge] - cacti <unfixed> (embed)
392            NOTE: dependency exists, but internal version is used
393            - gforge 4.7~rc2-6 (embed)
394            - mahara <unfixed> (embed)
395    
396    gzip
397            - linux-kernel <unfixed> (embed)
398            NOTE: lib/inflate.c
399            - klibc <unfixed> (embed)
400            NOTE: based on linux-kernel gzip code
401            - busybox <unfixed> (embed)
402    
403    neon
404            - cadaver 0.22.3+debian-1 (embed; bug #188381)
405            - gnome-vfs2 <unfixed> (embed; bug #395874)
406            [etch] - litmus <unfixed> (embed; #395875)
407            - litmus <removed> (embed; #395875)
408            [sarge] - screem <unfixed> (embed)
409            - sitecopy 1:0.16.3-5 (embed; bug #395876)
410            [etch] - tla <unfixed> (embed; bug #395877)
411            [sarge] - tla <unfixed> (embed; bug #395877)
412    
413    libmodplug
414            - gst-plugins-bad0.10 <unfixed> (embed)
415    
416    libvncserver
417            - vino <unfixed> (embed)
418    
419    putty
420            - filezilla <unfixed> (embed)
421    
422    tinyxml (not packaged in Debian)
423            - filezilla <unfixed>
424    
425    gv
426            - evince <unfixed> (embed)
427            NOTE: ps/ tree from gv 3.5.8
428            NOTE: evince-gtk is affected (a component of evince source package)
429    
430    libXbae
431            - paw <removed> (embed)
432            [etch] - paw <unfixed> (embed)
433    
434    libgtkhtml
435            - claws-mail-extra-plugins <unfixed> (fork)
436    
437    libXaw
438            - paw <removed> (embed)
439            [etch] - paw <unfixed> (embed)
440            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
441    
442    libgd2
443            - graphviz <unfixed> (embed)
444            NOTE: lib/gd seems to be 2.0.33
445            - wml <unfixed> (embed)
446            - libwmf <unfixed> (embed)
447            NOTE: derived from gd 1.6.3
448    
449    rar
450            - unrar-nonfree <unfixed> (embed)
451    
452    unrar-free (maybe this code is derived from the original rar, too?)
453            - clamav <unfixed> (embed)
454            NOTE: seems to be disabled in default config
455    
456    mplayer (DirectMedia Object loader)
457            - xine-lib <unfixed> (embed)
458            NOTE: src/libw32dll/
459            - vlc <unfixed> (embed)
460            NOTE: modules/codec/dmo/
461            - mplayer 1.0~rc2-20 (embed)
462    
463    libwpd (WordPerfect converter)
464            - openoffice.org <unfixed> (embed)
465    
466    fsplib (http://sourceforge.net/projects/fsp/)
467            - gftp <unfixed> (embed)
468            NOTE: lib/fsplib version 0.3
469    
470    sprng
471            - tree-puzzle <unfixed> (embed)
472    
473    librpcsecgss
474            - krb5 <unfixed> (embed)
475    
476    jasper
477            - ghostscript <unfixed> (embed)
478            - gs-gpl <unfixed> (embed)
479    
480    libiris
481            - psi <unfixed> (embed)
482            - kdenetwork <unfixed> (embed)
483            NOTE: kopete embeds libiris but links dynamically to libidn
484            - kdegames <unfixed> (embed)
485            NOTE: ksirk/kde4
486    
487    libidn
488            - monotone 0.43-1 (embed)
489            - psi <unfixed> (embed)
490            NOTE: psi embeds libiris which embeds libidn
491            - kdegames <unfixed> (embed)
492            NOTE: kdegames/kde4 embeds libiris which embeds libidn
493    
494    liblua
495            - monotone 0.43-1 (embed)
496            - nmap 5.00-1 (embed; bug #527997)
497            [lenny] - nmap <unfixed> (embed; bug #527997)
498    
499    libbotan
500            - monotone 0.43-1 (embed)
501    
502    NetXX
503            - monotone 0.43-1 (embed)
504    
505    libgc
506            - mono <unfixed> (embed)
507    
508    lzma
509            - p7zip <unfixed> (embed)
510            - xz-utils <unfixed> (fork)
511    
512    lzo
513            - grub2 <unfixed> (embed)
514    
515    yassl
516            - mysql-dfsg-5.0 <unfixed> (embed)
517    
518    pax code
519            - tar <unfixed> (embed)
520            - cpio <unfixed> (embed)
521    
522    t1lib
523            - tetex-bin 2.0.2-1 (embed)
524            - texlive-bin <unknown> (embed)
525    
526    guichan
527            - boswars <unfixed> (embed)
528            NOTE: maintainer notified us, working on it
529    
530    tolua
531            - boswars <unfixed> (embed)
532            NOTE: maintainer notified us, working on it
533    
534  TinyMCE:  asio-dev
535  wordpress          - luxrender <removed> (embed)
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
 busybox  
   
 ffmpeg:  
 mplayer (#395252)  
   
 neon:  
 cadaver (all, but being worked on: #188381)  
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
   
 libmodplug:  
 gst-plugins-bad0.10  
   
 libvncserver:  
 vino  
   
 putty:  
 filezilla  
   
 tinyxml (not packaged in Debian):  
 filezilla  
   
 gv:  
 evince (ps/ tree from gv 3.5.8)  
 evince-gtk (not packaged in Debian)  
   
 libXbae:  
 libpawlib2-lesstif package (from Cernlib)  
536    
537  libXaw:  xine-lib
538  libpawlib2-lesstif package (from Cernlib)          - vlc <unfixed> (embed)
539            NOTE: only parts included in modules/access/rtsp
 (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  
540    
541  libgd2:  netpbm
542  graphviz (lib/gd seems to be 2.0.33)          - tcl8.3 <unfixed> (embed)
543            - tcl8.4 <unfixed> (embed)
544            - tcl8.5 <unfixed> (embed)
545            NOTE: generic/tkImgGIF.c
546    
547    tk8.5
548            - tk8.0 <removed> (old-version)
549            - tk8.3 <unfixed> (old-version)
550            - tk8.4 <unfixed> (old-version)
551            - perl-tk <unfixable> (fork)
552    
553    samba
554            - mc 2:4.6.2~git20080311-1 (embed)
555            NOTE: maintainer is aware of this, currently searching a solution
556    
557    plib1.8.4c2
558            - boson <unfixed> (fork)
559            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
560    
561    fribidi
562            - quesoglc <unfixed> (embed)
563            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
564    
565    glew
566            - quesoglc <unfixed> (embed; bug #489341)
567            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
568    
569    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
570            - transcend <unfixed> (embed)
571            - cultivation <unfixed> (embed)
572            - passage <unfixed> (embed)
573            - gravitation <unfixed> (embed)
574    
575    tar
576            - libarchive <unfixed> (embed)
577            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
578    
579    cpio
580            - libarchive <unfixed> (embed)
581            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
582    
583    webkit
584            - qt4-x11 <unfixed> (embed)
585    
586    ftgl
587            - blender 2.46+dfsg-1 (embed)
588    
589    wv
590            - abiword <unfixed>
591    
592    qemu
593            - kvm <unfixed> (embed; bug #543159)
594            - xen-3 <unfixed> (embed)
595            - xen-unstable <unfixed> (embed)
596    
597    vgabios
598            - kvm <unfixed> (embed; bug #489442)
599    
600    bochs
601            - kvm <unfixed> (embed; bug #489442)
602    
603    speex
604            - vorbis-tools <unfixed> (embed)
605            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
606            - gst-plugins-good0.10 <unfixed> (embed)
607            - xine-lib <unfixed> (embed)
608            - libfishsound <unfixed> (embed)
609            - libannodex <unfixed> (embed)
610            - vlc <unfixed> (embed)
611            - xmms-speex <unfixed> (embed)
612            - libsdl-sound1.2 <unfixed> (embed)
613            - sweep <unfixed> (embed)
614    
615    libreadline
616            - magic <itp> (old-version)
617    
618    opcode
619            - ode <unfixed> (embed)
620            NOTE: opcode is not a package in debian, it is just embedded
621            NOTE: http://www.codercorner.com/Opcode.htm
622    
623    gimpact
624            - ode <unfixed> (embed)
625            NOTE: gimpact is not a package in debian, it is just embedded
626            NOTE: http://gimpact.sf.net
627    
628    mochikit
629            - mahara <unfixed> (embed)
630            NOTE: they require extra patches, still unmerged upstream
631            - ntop <unfixed> (embed)
632            - coherence <unfixed> (embed)
633            NOTE: python-coherence
634            - paste <unfixed> (embed)
635            NOTE: python-paste
636            - turbogears <unfixed> (embed)
637            NOTE: python-turbogears
638            - plone3 <unfixed> (embed)
639            NOTE: zope-plone3
640    
641    prototypejs
642            - netbeans-ide 6.0.1+dfsg-2 (embed)
643            - auth2db <unfixed> (embed)
644            - webcit <unfixed> (embed)
645            NOTE: citadel-webcit
646            - asterisk <unfixed> (embed)
647            - doc-iana <unfixed> (embed)
648            - libaws <unfixed> (embed)
649            NOTE: libaws-doc
650            - libgettext-ruby <unfixed> (embed)
651            NOTE: libgettext-ruby-data
652            - libjson-ruby <unfixed> (embed)
653            NOTE: libjson-ruby-doc
654            - lucene2 <unfixed> (embed)
655            NOTE: liblucene2-java-doc
656            - libopenid-ruby <unfixed> (embed)
657            - solr <unfixed> (embed)
658            NOTE: solr-common
659            - glpi <unfixed> (embed)
660            - mnemo2 <unfixed> (embed)
661            - nag2 <unfixed> (embed)
662            - knowledgeroot <unfixed> (embed)
663            - mediatomb <unfixed> (embed)
664            NOTE: mediatomb-common
665            - mt-daapd <unfixed> (embed)
666            - op-panel <unfixed> (embed)
667            - ebug-http <unfixed> (embed)
668            - phpgedview <removed> (embed)
669            - poker-network <unfixed> (embed)
670            NOTE: poker-web
671            - webhelpers <unfixed> (embed)
672            NOTE: python-webhelpers
673            - qwik <unfixed> (embed)
674            - rails <unfixed> (embed)
675            - typo3-src <unfixed> (embed)
676            - wordpress 2.5.0-2 (embed)
677            - zope <unfixed> (embed)
678            NOTE: zope-plone3
679            - smokeping <unfixed> (embed)
680            - ampache 3.4.1-2 (embed)
681            - exaile <unfixed> (embed)
682            - hobix <unfixed> (embed)
683            - pixelpost <unfixed> (embed)
684            - symfony <unfixed> (embed)
685            NOTE: it's been said that there are custom changes
686            - zabbix <unfixed> (embed)
687            NOTE: zabbix-frontend-php
688            - turba2 <unfixed> (embed)
689    
690    gdb
691            - insight <unfixed> (embed)
692    
693    e2fsprogs
694            - ldiskfsprogs <unfixable> (fork)
695    
696    quazip (not packaged in Debian)
697            - qcake <unfixed> (embed)
698            NOTE: starting with upstream version 0.6.4
699    
700    exo
701            - pcmanfm <unfixed> (embed; bug #499677)
702            NOTE: slightly modified source code
703    
704    java
705            - openjdk-6 <unfixed>
706            - sun-java5 <unfixed>
707            - sun-java6 <unfixed>
708    
709    libphp-snoopy
710            - ampache 3.4.1-2 (embed; bug #504169)
711            - mahara 1.0.5-2 (embed; bug #504170)
712            - pixelpost 1.7.1-5 (embed; bug #504171)
713            - mediamate 0.9.3.6-5 (embed; bug #504172)
714            - opendb <removed> (embed; bug #504173)
715            [etch] - opendb <unfixed> (embed; bug #504173)
716            - wordpress 2.5.1-9 (embed; bug #443948)
717            - moodle <unfixed> (embed; bug #507185)
718            [etch] - phpgroupware <unfixed> (embed)
719            NOTE: phpgroupware-felamimail
720            - magpierss 0.72-3 (embed; bug #431089)
721    
722    jquery
723            - zekr <unfixed> (embed)
724            - wordpress <unknown> (embed)
725            - yocto-reader <unfixed> (embed)
726            - textpattern <unfixed> (embed)
727            - genshi 0.5.1-1 (embed)
728            NOTE: compressed file under examples/ dir
729            - prewikka <unfixed> (embed)
730            - libramaze-ruby <unfixed> (embed)
731            - drupal5 <unfixed> (embed)
732            - b2evolution <unfixed> (embed)
733            - wesnoth <unfixed> (embed)
734    
735    tablesorter (jquery plugin, not packaged yet)
736            - wesnoth <unfixed> (embed)
737    
738    kses
739            - wordpress <unfixed> (embed; bug #504242)
740            NOTE: their copy has all methods renamed to wp_<foo>
741            NOTE: kses isn't in Debian, RFP: #504240
742            - moodle <unfixed> (embed; bug #507185)
743            - egroupware <unfixed> (embed)
744    
745    magpierss
746            - wordpress <unfixed> (embed; bug #504242)
747            - moodle <unfixed>
748    
749    php-gettext
750            - wordpress 2.8.4-1 (embed; bug #504242)
751    
752    libphp-ixr (name may change, it is the Incutio XML-RPC)
753            - wordpress <unfixed> (embed; bug #504242)
754            NOTE: libphp-ixr isn't in Debian, RFP: #504236
755            - dokuwiki <unfixed> (embed)
756            - textpattern <unfixed> (embed)
757    
758    libphp-cas
759            - glpi <unfixed> (embed)
760            - moodle <unfixed> (embed; bug #505984)
761    
762    scriptaculous
763            - glpi <unfixed> (embed)
764            - libaws <unfixed> (embed)
765            NOTE: libaws-doc
766            - op-panel <unfixed> (embed)
767            - symfony <unfixed> (embed)
768            NOTE: maintainer says there are extra incompatible changes required
769            - pixelpost <unfixed> (embed)
770            - webhelpers <unfixed> (embed)
771            NOTE: python-webhelpers
772            - qwik <unfixed> (embed)
773            - smokeping <unfixed> (embed)
774            - turba2 <unfixed> (embed)
775            - typo3-src 4.2.3-1 (embed)
776    
777    libmarkdown-php
778            - moodle <unfixed> (embed; bug #507185)
779            - pixelpost <unfixed> (embed)
780    
781    php-openid
782            - wordpress-openid <itp> (embed)
783    
784    geshi
785            - dokuwiki 0.0.20080505-3.1 (embed)
786            - pgfouine 1.0-1.1 (embed)
787            - websvn 2.1.0-1 (embed)
788    
789    webcalendar
790            - gforge 4.7~rc2-6 (embed; bug #504758)
791    
792    libical
793            - kdepim <unfixed> (fork)
794            - kdepimlibs <unfixed> (fork)
795            NOTE: fixed in KDE4 post 4.1.x series
796            - claws-mail-extra-plugins <unfixed> (fork)
797    
798    libltdl3
799            - kdelibs <unfixed> (embed)
800            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
801            - synfig <unfixed> (embed)
802    
803    harfbuzz
804            - qt4-x11 <unfixed> (embed)
805    
806    libzip
807            - php5 <unfixed> (fork)
808            - odt2txt <unfixed> (embed; bug #523808)
809    
810    json.php (not packaged; should be replaced with php's built-in functions)
811            - moodle <unfixed>
812            - yui <unfixed>
813            - gallery2 <unfixed>
814            - dokuwiki <unfixed>
815            - typo3-src <unfixed>
816    
817    php-fpdf
818            - tcpdf <itp> (fork)
819            - moodle <unfixed>
820            - phpwiki <unfixed>
821            - egroupware <unfixed>
822            - ldap-account-manager <unfixed> (fork)
823    
824    tcpdf (itp: #495985)
825            - moodle <unfixed>
826            - phpmyadmin <unfixed>
827    
828    typo3
829            - moodle <unfixed>
830    
831    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
832            - moodle <unfixed>
833            - gosa <unfixed>
834    
835    php-ole (itp: #487558)
836            - moodle <unfixed>
837    
838    pieforms (http://www.catalyst.net.nz)
839            - mahara <unfixed>
840    
841    savant2 (http://phpsavant.com)
842            - egroupware <unfixed>
843    
844    rssparser (http://nwow.org)
845            - egroupware <unfixed>
846            - phpgroupware <unfixed>
847    
848    lcms
849            - openjdk-6 <unfixed> (fork)
850    
851    libphp-phplayersmenu
852            - diogenes <unfixed>
853            - phpldapadmin <unfixed>
854    
855    libphp-pclzip
856            - docvert <unfixed>
857            - moodle <unfixed>
858            - egroupware <unfixed>
859    
860    libphp-simplepie
861            - dokuwiki <unfixed>
862    
863    libphp-jpgraph
864            - egroupware <unfixed>
865    
866    php-simpletest
867            - moodle <unfixed>
868    
869    libpng
870            - iceweasel <not-affected> (uses xulrunner)
871            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
872            - iceape 1.0.13~pre080614i-0etch1 (embed)
873            - xulrunner 1.9.0.13-1 (embed)
874            [lenny] - xulrunner 1.9.0.11-0lenny1
875            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
876            - gamera 3.2.3-1 (embed)
877    
878    irssi
879            - silc-client <unfixed> (embed)
880            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
881    
882    extc
883            - mtasc <unfixed> (embed)
884            - haxe <unfixed> (embed)
885    
886    swflib
887            - mtasc <unfixed> (embed)
888            - haxe <unfixed> (embed)
889    
890    libitext-java
891            - bouncycastle 2.1.4-1 (embed)
892    
893    python-ply
894            - pyke <unfixed> (embed)
895    
896    libdumbnet (libdnet upstream)
897            - nmap <unfixed> (fork)
898    
899    gcc-4.4
900            - gcc-mingw32 <unfixed> (embed)
901    
902    camlimages
903            - advi <unfixed> (static; bug #550441)
904    
905    memcached
906            - memcachedb <unfixed> (embed)
907    
908    yajl
909            - argyll <unfixed> (embed; bug #544223)
910            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
911    
912    libept
913            - adept <unfixed> (embed; bug #540649)
914    
915    libvorbis
916            - iceweasel <not-affected> (uses xulrunner)
917            - xulrunner <not-affected> (introduced in 1.9.1)
918            TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]
919    
920    cairo
921            - iceweasel <not-affected> (uses xulrunner)
922            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
923    
924    php-net-dnsbl
925            - serendipity <unfixed> (embed)
926    
927    php-onyx-rss
928            - serendipity <unfixed> (embed)
929    
930    php-text-wiki
931            - serendipity <unfixed> (embed)
932    
933    php-xml-rpc
934            - serendipity <unfixed> (embed)
935    
936    polarssl (does not have a shared library)
937            - pdkim <itp> (embed; bug #543150)
938            - xyssl <unfixed> (old-version)
939    
940    pidgin
941            - gaim <removed> (old-version)
942    
943    icu
944            - webkit 1.0.1-1 (embed; bug #547214)
945            - texlive-bin <unfixed> (fork)
946            NOTE: texlive upstream working with icu upstream to merge their changes
947    
948    cyrus-imapd-2.2
949            - kolab-cyrus-imapd <unfixed> (fork)
950            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
951    
952    python-cxx-dev
953            - freecad <unfixed> (embed; bug #547936)
954    
955    libzipios++-dev
956            - freecad <unfixed> (embed; bug #547941)
957    
958    linux-2.6
959            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
960            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
961            - kernel-source-2.6.8 <removed> (old-version)
962            - kernel-source-2.4.27 <removed> (old-version)
963            - kernel-source-2.4.24 <removed> (old-version)
964            - kernel-source-2.2.25 <removed> (old-version)
965            - kernel-source-2.2.20 <removed> (old-version)
966    
967    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
968            - kvm <unfixed> (embed) [./libfdt/*]
969    
970    qweb (not packaged)
971            - ajaxterm <unfixed>
972    
973    opensaml2
974            - opensaml <removed> (old-version)
975    
976    shibboleth-sp2
977            - shibboleth-sp <removed> (old-version)
978    
979    tuxonice-userui
980            - suspend2-userui <removed> (old-version)
981    
982    expat
983            - w3c-libwww <removed> (embed; bug #551941)
984            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
985            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
986    
987    xerces-c
988            - xerces-c2 <unfixed> (old-version)
989            - xerces27 <removed> (old-version)
990    
991    md5 (RSA's version; not the gnu version provided by coreutils)
992            - w3c-libwww <removed> (embed; bug #551942)
993            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
994    
995    enet
996            - sauerbraten <unfixed> (embed; #497194)
997    
998    eglibc
999            - glibc <removed> (old-version)
1000    
1001    galib
1002            - gamera 3.2.3-1 (embed)
1003    
1004    configobj
1005            - bzr <unfixed> (embed)
1006            - elisa <unfixed> (embed)
1007            - gaupol <unfixed> (embed)
1008            - ipython <unfixed> (embed)
1009            - pida <unfixed> (embed)
1010            - psychopy <unfixed> (embed)
1011            - rest2web <unfixed> (embed)
1012            - auth2db <unknown> (embed)
1013            - dynagen <unknown> (embed)
1014            - iceweasel <unknown> (embed)
1015            - sabnzbdplus <unknown> (embed)
1016            - xulrunner <unknown> (embed)
1017            - nipy <not-affected> (embed) [./examples/neurospin/neurospy/configobj.py]
1018    
1019    python-clientform
1020            - bibus <unfixed> (embed)
1021            - zope2.10 <unfixed> (embed)
1022            - zope2.11 <unfixed> (embed)
1023            - python-mechanize <unknown> (embed)
1024            - twill <unknown> (embed)
1025    
1026    python-mechanize
1027            - zope2.10 <unfixed> (embed)
1028            - zope2.11 <unfixed> (embed)
1029            - twill <unknown> (embed)
1030    
1031    pexpect
1032            - duplicity <unfixed> (embed)
1033            - hplip <unfixed> (embed)
1034            - smart <unfixed> (embed)
1035    
1036    pyparsing
1037            - bauble <unfixed> (embed)
1038            - boa-constructor <unfixed> (embed)
1039            - calibre <unfixed> (embed)
1040            - matplotlib <unfixed> (embed)
1041            - zhpy <unfixed> (embed)
1042            - polybori <unknown> (embed)
1043            - python-whoosh <unknown> (embed)
1044            - twill <unknown> (embed)
1045            - zope-textindexng3 <unknown> (embed)

Legend:
Removed from v.5321  
changed lines
  Added in v.13147

  ViewVC Help
Powered by ViewVC 1.1.5