/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7136 by nion, Mon Oct 29 08:12:38 2007 UTC revision 12718 by gilbert-guest, Mon Aug 31 00:49:59 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16  silc-toolkit:          that add real value)
17  silc-client (uses libsilc and libsilcclient)  sort: static (linking statically against a lib)
18          embed (embedding a copy of the library into another source package)
19  dietlibc:        fork (the package is not just embedding code but it is a fork and
20  ccontrol (links statically)              thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22  libiax:                     the same code)
23  iaxmodem  
24    The srcpkg might be some string to identify the code if there is no
25  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  specific source package.
26  dpkg  
27  rsync (somehow derived code base)  Everything up to the next line is ignored.
28  mono  ---BEGIN
29  mozilla(?)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30  Linux kernels          NOTE: Fixed packages link to poppler library unless otherwise noted
31  pvpgn (links dynamically since 1.7.8-2)          NOTE: has been replaced by evince in etch
32  mrtg (links dynamically since 2.12.2-1)          - pdftohtml <unknown>
33  rpm          [sarge] - pdftohtml <unfixed>
34            [etch] - pdftohtml <unfixed>
35  libbz2:          NOTE: has been replaced by poppler-utils
36  dpkg (statically linked)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37            - texlive-base 3.0-12 (embed)
38  libgadu/ekg:          - texlive-bin 2007-1 (embed)
39  centericq          NOTE: links to poppler
40  gaim          - koffice <unfixed> (embed; bug #436163)
41  kopete (ships the code, but links dynamically in the Debian package)          - libextractor 0.5.12-1 (embed)
42  kadu (not packaged in Debian)          NOTE: libextractor is using its own pdf decoder now
43  GNU gadu (not yet packaged in Debian)          - ipe <unfixed> (embed)
44            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45  xmlrpc: (which package is the "origin" of this code?)          - ruby-gnome2 <unknown> (embed)
46  drupal          NOTE: copy only present in source but links to poppler
47  phpgroupware          - pdfedit <unfixed> (embed; bug #510794)
48  egroupware          - swftools <unfixed> (embed)
49  phpwiki  
50  php4 (php-pear, IIRC this was reorganized some weeks ago?)  ppmd
51  tikiwiki          - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53  shtool: (affects build-time only)  
54  mysql-ocaml  libevent
55  php4          - transmission 1.71-1 (embed; bug #529372)
56    
57  mozilla:  lrmi
58  mozilla-firefox          - read-edid 2.0.0-1 (embed; bug #495131)
59  mozilla-thunderbird  
60  firefox (to be removed)  peercast
61  thunderbird (to be removed)          - gnome-peercast <unfixed> (embed)
62  iceweasel          NOTE: gnome-peercast may better be removed, see #466539
63  iceape  
64  icedove  silc-toolkit
65  xulrunner          - silc-client 1.1~beta6-1 (embed)
66  nvu (no longer in Debian)  
67    icclib
68  xli:          - ghostscript <unfixed> (embed)
69  xloadimage          - argyll <unfixed> (embed)
70    
71  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  dietlibc
72  openmotif          - ccontrol 0.9.1+20071204-1 (static)
73  xfree86/xorg (in libxpm)  
74    libmikmod
75  kerberized apps with BSD origin:          - sdl-mixer1.2 <unfixed> (embed)
76  krb4          TODO: report bug
77  krb5  
78  heimdal  libiax
79            - iaxmodem <unfixed> (embed)
80  grip: (which pkg is the origin?)  
81  libcdaudio  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
82  grip          - dpkg <unfixed> (embed)
83  gnome-vfs (vfs2 as well?)          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
84            - rsync <unfixed> (embed)
85  fudforum:          NOTE: somehow derived code base
86  phpgroupware-fudforum          - mono <unfixed> (embed)
87  egroupware-fudforum (removed from egroupware after sarge)          TODO: check mozilla
88            - Linux kernels <unfixed> (embed)
89  cvs:          - pvpgn 1.7.8-2 (embed)
90  gcvs (at least an additional script is included, check if there's more)          - mrtg 2.12.2-1 (embed)
91            - rpm <unknown> (embed)
92  pcre:          NOTE: pinged anibal since when rpm was fixed
93  all pythons          - tuxcmd-modules <unfixed> (embed)
94  php4 (src included, but Debian package links dynamically)          - zsync <unfixed>
95  analog (src included, but Debian package links dynamically)          - tra <unfixed>
96  libgoffice-1          - sash <unfixed>
97  vfu          - nsis <unfixed>
98  tf5 (since 5.0beta7 the Debian package links dynamically)          - mseide-msegui <unfixed>
99  monotone (including this starting from 0.37)          NOTE: mseide
100            - mirrordir <unfixed>
101  tiff:          - poco <unfixed>
102  wxpythongtk (check, which debian pkg this is in)          - klibc <unfixed>
103  older kdegraphics/kpdf releases < 3.3 embedded a copy          - ghostscript <unfixed>
104            - freeimage <unfixed>
105  uudeview:          - clamav <unfixed> (fork)
106  libconvert-uulib-perl          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
107            - tuxonice-userui <unfixed>
108  sqlite: (not affected by security vulnerabilities so far)          - plt-scheme <unfixed>
109  amarok          - perl <unfixed>
110  monotone          - paraview <unfixed>
111            - gcvs <unfixed>
112  util-linux/mount:          - erlang <unfixed>
113  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - dump <unfixed>
114            - aide <unfixed> (static)
115  webmin:          - dar <unfixed> (static)
116  usermin (only in sarge)          - avfs <unfixed>
117            - fpc <unfixed>
118  sylpheed:          - winff <unfixed>
119  sylpheed-claws          NOTE: inherited from fpc, see #472304
120            - lazarus <unfixed>
121  phpsysinfo:          NOTE: inherited from fpc, see #472304
122  egroupware          - erlang <unfixed> (embed)
123  phpgroupware  
124    dulwich
125            - hg-git <unfixed> (embed; bug #541996)
126    
127    libvigraimpex
128            - hugin <unfixed> (embed)
129    
130    libbz2
131            - dpkg <unfixed> (static)
132    
133    libgadu
134            - centericq <unfixed> (embed)
135            - gaim <unfixed> (embed)
136            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
137            - kdenetwork 4:3.3.2-5 (embed)
138            NOTE: from kdenetwork: kopete
139            - ekg 1:1.8~rc0-1 (embed)
140            - kadu 0.6.0.2-3 (embed; bug #504430)
141            - gadu <itp> (embed)
142    
143    xmlrpc (which package is the "origin" of this code?)
144            - drupal <unfixed> (embed)
145            - phpgroupware <unfixed> (embed)
146            - egroupware <unfixed> (embed)
147            - phpwiki <unfixed> (embed)
148            - php4 <unfixed> (embed)
149            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
150    
151    shtool (affects build-time only)
152            - mysql-ocaml <unfixed> (embed)
153            - php4 <unfixed> (embed)
154    
155    mozilla source code
156            - mozilla-firefox <removed> (embed)
157            - mozilla-thunderbird <removed>
158            - firefox <removed>
159            - thunderbird <removed>
160            - iceweasel <unfixed> (embed)
161            - iceape <unfixed> (embed)
162            - icedove <unfixed> (embed)
163            - xulrunner <unfixed> (embed)
164            - nvu <removed> (embed)
165            - kompozer <unfixed> (embed; bug #532168)
166    
167    xli
168            - xloadimage <unfixed> (embed)
169    
170    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
171            - openmotif <unfixed> (embed)
172            - libxpm <unfixed> (embed)
173    
174    kerberized apps with BSD origin
175            - krb4 <removed> (embed)
176            - krb5 <unfixed> (embed)
177            - heimdal <unfixed> (embed)
178    
179    grip (which pkg is the origin?)
180            - libcdaudio <unfixed>
181            - grip <unfixed>
182            - gnome-vfs <unfixed>
183            TODO: check vfs2 as well
184    
185    fudforum
186            [etch] - phpgroupware <unfixed> (embed)
187            NOTE: phpgroupware-fudforum
188            [sarge] - egroupware-fudforum <removed> (embed)
189    
190    libbsd
191            - rdate 1:1.2-3 (embed)
192            - atheme-services <unfixed>
193            - libbsd-arc4random-perl <unfixed>
194            - isakmpd <unfixed>
195    
196    cvs
197            - gcvs <unfixed> (embed)
198            NOTE: see cvsunix/src in tarball
199    
200    pcre
201            - python* <unfixed> (embed)
202            - php4 <unknown> (embed)
203            - analog 2:5.23-0woody1 (embed)
204            - goffice <unfixed> (embed)
205            NOTE: libgoffice-*
206            - vfu 4.06-4.1 (embed; bug #450754)
207            - tf5 5.0beta7-1 (embed)
208            - monotone 0.43-1 (embed)
209            NOTE: this only affects versions >= 0.37
210            - glib2.0 2.15.2-1 (embed)
211            - apache2 2.0.53-4 (embed)
212            - exim4 4.10-0.srh20.12 (embed)
213            - yacas <unfixed> (embed)
214            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
215            - gtamsanalyzer.app 0.42-5 (embed)
216            - tin <unknown> (embed)
217            - kazehakase 0.5.2-1
218            - webkit <unfixed> (embed)
219            - qt4-x11 <unfixed> (embed)
220            NOTE: embedded via webkit copy
221            - erlang <unfixed> (embed)
222    
223    tiff
224            - wxwindows2.4 2.2.1 (embed)
225    
226    uudeview
227            - libconvert-uulib-perl <unfixed> (embed)
228            - pan <unfixed> (embed)
229    
230    sqlite (not affected by security vulnerabilities so far)
231            - amarok <unfixed> (embed)
232            - monotone 0.43-1 (embed)
233            - iceweasel <unfixed> (embed)
234    
235    util-linux/mount
236            - loop-aes-utils <unfixed> (embed)
237            NOTE: contains code from util-linux' mount in the mount-aes-udeb
238    
239    sylpheed
240            - sylpheed-claws <unfixed> (fork)
241    
242    phpsysinfo
243            - egroupware <unfixed> (embed)
244            - phpgroupware <unfixed> (embed)
245    
246    phpldapadmin
247            [sarge] - egroupware <unfixed> (embed)
248            NOTE: removed from egroupware after sarge
249    
250    chmlib
251            - kchmviewer <unknown> (embed)
252    
253    ffmpeg (libavcodec/libavformat)
254            - mplayer 1.0~rc2-14 (embed; bug #395252)
255            - kino 1.0.0-1
256            - vlc <not-affected> (Links dynamically since initial release)
257            - smilutils 0.3.0-10
258            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
259            - motion 3.1.19-1
260            - gstreamer0.10-ffmpeg 0.10.3-2
261            - xmovie <unfixed>
262            NOTE: xmovie removed, only present in Etch
263            TODO: gimp-gap (potentially using ffmpeg code as well)
264            - avifile <unfixed> (embed; bug #538750)
265    
266    faad2
267            - mplayer 1.0~rc2-20 (embed)
268            - avifile <unfixed> (embed; bug #538750)
269    
270    libmad (MPEG decoding lib)
271            - xine-lib <unfixed> (embed)
272            - avifile <unfixed> (embed) [./plugins/libmad/*]
273            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
274    
 phpldapadmin:  
 egroupware (removed from egroupware after sarge)  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
275  libdts  libdts
276  xine-lib          - xine-lib <unfixed> (embed)
277    
 flac:  
278  flac  flac
279  xine-lib          - xine-lib <unfixed> (embed)
280    
281  liba52:  liba52
282  a52dec          - a52dec <unfixed> (embed)
283  xine-lib          - xine-lib <unfixed> (embed)
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
284    
285  TODO evaluate:  libmpeg2
286  gimp-gap (potentially using ffmpeg code as well)          - mpeg2dec <unfixed> (embed)
287            - xine-lib <unfixed> (embed)
288    
289  uw-imap:  curl
290  pine          - wget <unfixed> (embed)
291  alpine          NOTE: code for NTLM authentication
292    
293  imagemagick:  uw-imap
294  graphicsmagick          - pine <unfixed> (embed)
295            - alpine <unfixed> (embed)
296    
297  halibut:  imagemagick
298  nsis          - graphicsmagick <unfixed> (fork)
299    
300  libghttp:  python-urlgrabber
301  hotway          - mercurial <unfixed> (embed; bug #531062)
302    
303  libsndfile:  python-mechanize
304  ardour          - beautifulsoup <unfixed> (embed)
305    
306  glibmm2.4:  halibut
307  ardour          - nsis <unfixed> (fork)
308    
309  libgnomecanvasmm2.6:  libghttp
310  ardour          - hotway <unfixed> (embed)
311    
312  libsigc++-2.0:  libsndfile
313  ardour          - ardour 1:2.7.1-1 (embed)
314    
315  soundtouch:  glibmm2.4
316  ardour          - ardour 1:2.7.1-1 (embed)
   
 libmms:  
 xine-lib  
 mimms  
   
 FCKeditor:  
 knowledgeroot  
 moin  
 karrigell  
 gforge-plugins-extra  
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
317    
318  TinyMCE:  libgnomecanvasmm2.6
319  wordpress          - ardour 1:2.7.1-1 (embed)
 moodle  
 knowledgeroot  
 joomla (ITP)  
320    
321  scintilla:  libsigc++-2.0
322  scite          - ardour 1:2.7.1-1 (embed)
 qscintilla  
 qscintilla2  
 geany  
323    
324  libphp-adodb:  soundtouch
325  gallery2          - ardour 1:2.7.1-1 (embed)
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
326    
327  gzip:  libmms
328  linux-kernel (lib/inflate.c)          - xine-lib <unfixed> (embed)
329  klibc (based on linux-kernel gzip code)          - mimms <unfixed> (embed)
 busybox  
330    
331  ffmpeg:  fckeditor
332  mplayer (#395252)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
333            - moin 1.8.2-2 (embed; bug #452599)
334            - karrigell <removed> (embed; bug #452598)
335            - gforge 4.6.99+svn6225-1 (embed)
336            - request-tracker3.8 <unfixed> (embed)
337    
338  neon:  ipatlas (not packaged in Debian)
339  cadaver (all, but being worked on: #188381)          - moodle <unfixed> (embed; bug #507185)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
340    
341  libmodplug:  libphp-phpmailer
342  gst-plugins-bad0.10          - moodle <unfixed> (embed; bug #507185)
343            - mahara <unfixed> (embed)
344            - symfony <unfixed> (embed)
345            [etch] - phpgroupware <unfixed> (embed)
346            NOTE: phpgroupware-felamimail is only in etch
347            - egroupware <unfixed> (embed; bug #504283)
348            - glpi <unfixed>
349    
350  libvncserver:  htmlArea (not packaged in Debian)
351  vino          - moodle <unfixed> (embed)
352    
353  putty:  giflib:
354  filezilla          - wine <unfixed> (embed; bug #466181)
355    
356  tinyxml (not packaged in Debian):  bennu (not packaged in Debian, http://bennu.sourceforge.net)
357  filezilla          - moodle <unfixed> (embed)
358    
359  gv:  smarty:
360  evince (ps/ tree from gv 3.5.8)          - moodle 1.8.2-2 (embed; bug #471158)
361  evince-gtk (not packaged in Debian)          - gallery2 2.2.5-2 (embed; bug #471160)
362            - mahara 0.9.2-2 (embed; bug #471201)
363            - gosa 2.4beta1-1 (embed; bug #471200)
364    
365  libXbae:  TinyMCE
366  libpawlib2-lesstif package (from Cernlib)          - wordpress 2.5.1-3 (embed; bug #478257)
367            - moodle <unfixed> (embed; bug #507185)
368  libXaw:          - knowledgeroot <unfixed> (embed)
369  libpawlib2-lesstif package (from Cernlib)          - joomla <itp> (bug #326398)
370    
371  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
372            - scite <unfixed> (embed)
373  libgd2:          - qscintilla <unfixed> (embed)
374  graphviz (lib/gd seems to be 2.0.33)          - qscintilla2 <unfixed> (embed)
375            - geany <unfixed> (fork)
376  rar:          - anjuta <unfixed> (embed)
377  unrar-nonfree  
378    libphp-adodb
379  unrar-free: (maybe this code is derived from the original rar, too?)          - moodle <unfixed> (embed; bug #507185)
380  clamav (seems to be disabled in default config)          NOTE: also AdoDB-XML Schema
381            - gallery2 <unfixed> (embed)
382  mplayer (DirectMedia Object loader):          - phppgadmin <unfixed> (embed)
383  xine-lib (src/libw32dll/)          - egroupware <unfixed> (embed)
384  vlc (modules/codec/dmo/)          - phpwiki <unfixed> (embed)
385            - torrentflux 2.0beta1-2 (embed)
386  libwpd (WordPerfect converter):          - ipplan <unfixed> (embed)
387  openoffice.org          - typo3-src <unfixed> (embed)
388            - cacti <unknown> (embed)
389  fsplib (http://sourceforge.net/projects/fsp/):          [sarge] - cacti <unfixed> (embed)
390  gftp (lib/fsplib version 0.3)          NOTE: dependency exists, but internal version is used
391            - gforge 4.7~rc2-6 (embed)
392  librpcsecgss:          - mahara <unfixed> (embed)
393  krb5  
394    gzip
395  jasper:          - linux-kernel <unfixed> (embed)
396  ghostscript          NOTE: lib/inflate.c
397  gs-gpl          - klibc <unfixed> (embed)
398            NOTE: based on linux-kernel gzip code
399  libidn:          - busybox <unfixed> (embed)
400  monotone  
401    neon
402  liblua:          - cadaver 0.22.3+debian-1 (embed; bug #188381)
403  monotone          - gnome-vfs2 <unfixed> (embed; bug #395874)
404            [etch] - litmus <unfixed> (embed; #395875)
405  libbotan:          - litmus <removed> (embed; #395875)
406  montone          [sarge] - screem <unfixed> (embed)
407            - sitecopy 1:0.16.3-5 (embed; bug #395876)
408            [etch] - tla <unfixed> (embed; bug #395877)
409            [sarge] - tla <unfixed> (embed; bug #395877)
410    
411    libmodplug
412            - gst-plugins-bad0.10 <unfixed> (embed)
413    
414    libvncserver
415            - vino <unfixed> (embed)
416    
417    putty
418            - filezilla <unfixed> (embed)
419    
420    tinyxml (not packaged in Debian)
421            - filezilla <unfixed>
422    
423    gv
424            - evince <unfixed> (embed)
425            NOTE: ps/ tree from gv 3.5.8
426            NOTE: evince-gtk is affected (a component of evince source package)
427    
428    libXbae
429            - paw <removed> (embed)
430            [etch] - paw <unfixed> (embed)
431    
432    libgtkhtml
433            - claws-mail-extra-plugins <unfixed> (fork)
434    
435    libXaw
436            - paw <removed> (embed)
437            [etch] - paw <unfixed> (embed)
438            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
439    
440    libgd2
441            - graphviz <unfixed> (embed)
442            NOTE: lib/gd seems to be 2.0.33
443            - wml <unfixed> (embed)
444            - libwmf <unfixed> (embed)
445            NOTE: derived from gd 1.6.3
446    
447    rar
448            - unrar-nonfree <unfixed> (embed)
449    
450    unrar-free (maybe this code is derived from the original rar, too?)
451            - clamav <unfixed> (embed)
452            NOTE: seems to be disabled in default config
453    
454    mplayer (DirectMedia Object loader)
455            - xine-lib <unfixed> (embed)
456            NOTE: src/libw32dll/
457            - vlc <unfixed> (embed)
458            NOTE: modules/codec/dmo/
459            - mplayer 1.0~rc2-20 (embed)
460    
461    libwpd (WordPerfect converter)
462            - openoffice.org <unfixed> (embed)
463    
464    fsplib (http://sourceforge.net/projects/fsp/)
465            - gftp <unfixed> (embed)
466            NOTE: lib/fsplib version 0.3
467    
468    sprng
469            - tree-puzzle <unfixed> (embed)
470    
471    librpcsecgss
472            - krb5 <unfixed> (embed)
473    
474    jasper
475            - ghostscript <unfixed> (embed)
476            - gs-gpl <unfixed> (embed)
477    
478    libiris
479            - psi <unfixed> (embed)
480            - kdenetwork <unfixed> (embed)
481            NOTE: kopete embeds libiris but links dynamically to libidn
482            - kdegames <unfixed> (embed)
483            NOTE: ksirk/kde4
484    
485    libidn
486            - monotone 0.43-1 (embed)
487            - psi <unfixed> (embed)
488            NOTE: psi embeds libiris which embeds libidn
489            - kdegames <unfixed> (embed)
490            NOTE: kdegames/kde4 embeds libiris which embeds libidn
491    
492    liblua
493            - monotone 0.43-1 (embed)
494            - nmap <unfixed> (embed; bug #527997)
495            NOTE: fixed upstream as of nmap svn rev13336.
496    
497    libbotan
498            - monotone 0.43-1 (embed)
499    
500    NetXX
501            - monotone 0.43-1 (embed)
502    
503    libgc
504            - mono <unfixed> (embed)
505    
506    lzma
507            - p7zip <unfixed> (embed)
508            - xz-utils <unfixed> (fork)
509    
510    lzo
511            - grub2 <unfixed> (embed)
512    
513    yassl
514            - mysql-dfsg-5.0 <unfixed> (embed)
515    
516    pax code
517            - tar <unfixed> (embed)
518            - cpio <unfixed> (embed)
519    
520    t1lib
521            - tetex-bin 2.0.2-1 (embed)
522            - texlive-bin <unknown> (embed)
523    
524    guichan
525            - boswars <unfixed> (embed)
526            NOTE: maintainer notified us, working on it
527    
528    tolua
529            - boswars <unfixed> (embed)
530            NOTE: maintainer notified us, working on it
531    
532    asio-dev
533            - luxrender <unfixed> (embed)
534            NOTE: maintainer notified us, working on it
535            NOTE: may be merged with boost "soon"
536    
537  NetXX:  xine-lib
538  monotone          - vlc <unfixed> (embed)
539            NOTE: only parts included in modules/access/rtsp
540    
541  libgc:  netpbm
542  mono          - tcl8.3 <unfixed> (embed)
543            - tcl8.4 <unfixed> (embed)
544            - tcl8.5 <unfixed> (embed)
545            NOTE: generic/tkImgGIF.c
546    
547    tk8.5
548            - tk8.0 <removed> (old-version)
549            - tk8.3 <unfixed> (old-version)
550            - tk8.4 <unfixed> (old-version)
551            - perl-tk <unfixable> (fork)
552    
553    samba
554            - mc 2:4.6.2~git20080311-1 (embed)
555            NOTE: maintainer is aware of this, currently searching a solution
556    
557    plib1.8.4c2
558            - boson <unfixed> (fork)
559            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
560    
561    fribidi
562            - quesoglc <unfixed> (embed)
563            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
564    
565    glew
566            - quesoglc <unfixed> (embed; bug #489341)
567            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
568    
569    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
570            - transcend <unfixed> (embed)
571            - cultivation <unfixed> (embed)
572            - passage <unfixed> (embed)
573            - gravitation <unfixed> (embed)
574    
575    tar
576            - libarchive <unfixed> (embed)
577            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
578    
579    cpio
580            - libarchive <unfixed> (embed)
581            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
582    
583    webkit
584            - qt4-x11 <unfixed> (embed)
585    
586    ftgl
587            - blender 2.46+dfsg-1 (embed)
588    
589    wv
590            - abiword <unfixed>
591    
592    qemu
593            - kvm <unfixed> (embed; bug #543159)
594            - xen-3 <unfixed> (embed)
595            - xen-unstable <unfixed> (embed)
596    
597    vgabios
598            - kvm <unfixed> (embed; bug #489442)
599    
600    bochs
601            - kvm <unfixed> (embed; bug #489442)
602    
603    speex
604            - vorbis-tools <unfixed> (embed)
605            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
606            - gst-plugins-good0.10 <unfixed> (embed)
607            - xine-lib <unfixed> (embed)
608            - libfishsound <unfixed> (embed)
609            - libannodex <unfixed> (embed)
610            - vlc <unfixed> (embed)
611            - xmms-speex <unfixed> (embed)
612            - libsdl-sound1.2 <unfixed> (embed)
613            - sweep <unfixed> (embed)
614    
615    libreadline
616            - magic <itp> (old-version)
617    
618    opcode
619            - ode <unfixed> (embed)
620            NOTE: opcode is not a package in debian, it is just embedded
621            NOTE: http://www.codercorner.com/Opcode.htm
622    
623    gimpact
624            - ode <unfixed> (embed)
625            NOTE: gimpact is not a package in debian, it is just embedded
626            NOTE: http://gimpact.sf.net
627    
628    mochikit
629            - mahara <unfixed> (embed)
630            NOTE: they require extra patches, still unmerged upstream
631            - ntop <unfixed> (embed)
632            - coherence <unfixed> (embed)
633            NOTE: python-coherence
634            - paste <unfixed> (embed)
635            NOTE: python-paste
636            - turbogears <unfixed> (embed)
637            NOTE: python-turbogears
638            - plone3 <unfixed> (embed)
639            NOTE: zope-plone3
640    
641    prototypejs
642            - netbeans-ide <unfixed> (embed)
643            - auth2db <unfixed> (embed)
644            - webcit <unfixed> (embed)
645            NOTE: citadel-webcit
646            - asterisk <unfixed> (embed)
647            - doc-iana <unfixed> (embed)
648            - libaws <unfixed> (embed)
649            NOTE: libaws-doc
650            - libgettext-ruby <unfixed> (embed)
651            NOTE: libgettext-ruby-data
652            - libjson-ruby <unfixed> (embed)
653            NOTE: libjson-ruby-doc
654            - lucene2 <unfixed> (embed)
655            NOTE: liblucene2-java-doc
656            - libopenid-ruby <unfixed> (embed)
657            - solr <unfixed> (embed)
658            NOTE: solr-common
659            - glpi <unfixed> (embed)
660            - mnemo2 <unfixed> (embed)
661            - nag2 <unfixed> (embed)
662            - knowledgeroot <unfixed> (embed)
663            - mediatomb <unfixed> (embed)
664            NOTE: mediatomb-common
665            - mt-daapd <unfixed> (embed)
666            - op-panel <unfixed> (embed)
667            - ebug-http <unfixed> (embed)
668            - phpgedview <removed> (embed)
669            - poker-network <unfixed> (embed)
670            NOTE: poker-web
671            - webhelpers <unfixed> (embed)
672            NOTE: python-webhelpers
673            - qwik <unfixed> (embed)
674            - rails <unfixed> (embed)
675            - typo3-src <unfixed> (embed)
676            - wordpress 2.5.0-2 (embed)
677            - zope <unfixed> (embed)
678            NOTE: zope-plone3
679            - smokeping <unfixed> (embed)
680            - ampache 3.4.1-2 (embed)
681            - exaile <unfixed> (embed)
682            - hobix <unfixed> (embed)
683            - pixelpost <unfixed> (embed)
684            - symfony <unfixed> (embed)
685            NOTE: it's been said that there are custom changes
686            - zabbix <unfixed> (embed)
687            NOTE: zabbix-frontend-php
688            - turba2 <unfixed> (embed)
689    
690    gdb
691            - insight <unfixed> (embed)
692    
693    e2fsprogs
694            - ldiskfsprogs <unfixable> (fork)
695    
696    quazip (not packaged in Debian)
697            - qcake <unfixed> (embed)
698            NOTE: starting with upstream version 0.6.4
699    
700    exo
701            - pcmanfm <unfixed> (embed; bug #499677)
702            NOTE: slightly modified source code
703    
704    java
705            - openjdk-6 <unfixed>
706            - sun-java5 <unfixed>
707            - sun-java6 <unfixed>
708    
709    libphp-snoopy
710            - ampache 3.4.1-2 (embed; bug #504169)
711            - mahara 1.0.5-2 (embed; bug #504170)
712            - pixelpost 1.7.1-5 (embed; bug #504171)
713            - mediamate 0.9.3.6-5 (embed; bug #504172)
714            - opendb <removed> (embed; bug #504173)
715            [etch] - opendb <unfixed> (embed; bug #504173)
716            - wordpress 2.5.1-9 (embed; bug #443948)
717            - moodle <unfixed> (embed; bug #507185)
718            [etch] - phpgroupware <unfixed> (embed)
719            NOTE: phpgroupware-felamimail
720            - magpierss 0.72-3 (embed; bug #431089)
721    
722    jquery
723            - zekr <unfixed> (embed)
724            - wordpress <unknown> (embed)
725            - yocto-reader <unfixed> (embed)
726            - textpattern <unfixed> (embed)
727            - genshi 0.5.1-1 (embed)
728            NOTE: compressed file under examples/ dir
729            - prewikka <unfixed> (embed)
730            - libramaze-ruby <unfixed> (embed)
731            - drupal5 <unfixed> (embed)
732            - b2evolution <unfixed> (embed)
733            - wesnoth <unfixed> (embed)
734    
735    tablesorter (jquery plugin, not packaged yet)
736            - wesnoth <unfixed> (embed)
737    
738    kses
739            - wordpress <unfixed> (embed; bug #504242)
740            NOTE: their copy has all methods renamed to wp_<foo>
741            NOTE: kses isn't in Debian, RFP: #504240
742            - moodle <unfixed> (embed; bug #507185)
743            - egroupware <unfixed> (embed)
744    
745    magpierss
746            - wordpress <unfixed> (embed; bug #504242)
747            - moodle <unfixed>
748    
749    php-gettext
750            - wordpress 2.8.4-1 (embed; bug #504242)
751    
752    libphp-ixr (name may change, it is the Incutio XML-RPC)
753            - wordpress <unfixed> (embed; bug #504242)
754            NOTE: libphp-ixr isn't in Debian, RFP: #504236
755            - dokuwiki <unfixed> (embed)
756            - textpattern <unfixed> (embed)
757    
758    libphp-cas
759            - glpi <unfixed> (embed)
760            - moodle <unfixed> (embed; bug #505984)
761    
762    scriptaculous
763            - glpi <unfixed> (embed)
764            - libaws <unfixed> (embed)
765            NOTE: libaws-doc
766            - op-panel <unfixed> (embed)
767            - symfony <unfixed> (embed)
768            NOTE: maintainer says there are extra incompatible changes required
769            - pixelpost <unfixed> (embed)
770            - webhelpers <unfixed> (embed)
771            NOTE: python-webhelpers
772            - qwik <unfixed> (embed)
773            - smokeping <unfixed> (embed)
774            - turba2 <unfixed> (embed)
775            - typo3-src 4.2.3-1 (embed)
776    
777    libmarkdown-php
778            - moodle <unfixed> (embed; bug #507185)
779            - pixelpost <unfixed> (embed)
780    
781    php-openid
782            - wordpress-openid <itp> (embed)
783    
784    geshi
785            - dokuwiki 0.0.20080505-3.1 (embed)
786            - pgfouine 1.0-1.1 (embed)
787            - websvn 2.1.0-1 (embed)
788    
789    webcalendar
790            - gforge 4.7~rc2-6 (embed; bug #504758)
791    
792    libical
793            - kdepim <unfixed> (fork)
794            - kdepimlibs <unfixed> (fork)
795            NOTE: fixed in KDE4 post 4.1.x series
796            - claws-mail-extra-plugins <unfixed> (fork)
797    
798    libltdl3
799            - kdelibs <unfixed> (embed)
800            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
801            - synfig <unfixed> (embed)
802    
803    harfbuzz
804            - qt4-x11 <unfixed> (embed)
805    
806    libzip
807            - php5 <unfixed> (fork)
808            - odt2txt <unfixed> (embed; bug #523808)
809    
810    json.php (not packaged; should be replaced with php's built-in functions)
811            - moodle <unfixed>
812            - yui <unfixed>
813            - gallery2 <unfixed>
814            - dokuwiki <unfixed>
815            - typo3-src <unfixed>
816    
817    php-fpdf
818            - tcpdf <itp> (fork)
819            - moodle <unfixed>
820            - phpwiki <unfixed>
821            - egroupware <unfixed>
822            - ldap-account-manager <unfixed> (fork)
823    
824    tcpdf (itp: #495985)
825            - moodle <unfixed>
826            - phpmyadmin <unfixed>
827    
828    typo3
829            - moodle <unfixed>
830    
831    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
832            - moodle <unfixed>
833            - gosa <unfixed>
834    
835    php-ole (itp: #487558)
836            - moodle <unfixed>
837    
838    pieforms (http://www.catalyst.net.nz)
839            - mahara <unfixed>
840    
841    savant2 (http://phpsavant.com)
842            - egroupware <unfixed>
843    
844    rssparser (http://nwow.org)
845            - egroupware <unfixed>
846            - phpgroupware <unfixed>
847    
848    lcms
849            - openjdk-6 <unfixed> (fork)
850    
851    libphp-phplayersmenu
852            - diogenes <unfixed>
853            - phpldapadmin <unfixed>
854    
855    libphp-pclzip
856            - docvert <unfixed>
857            - moodle <unfixed>
858            - egroupware <unfixed>
859    
860    libphp-simplepie
861            - dokuwiki <unfixed>
862    
863    libphp-jpgraph
864            - egroupware <unfixed>
865    
866    php-simpletest
867            - moodle <unfixed>
868    
869    libpng
870            - iceweasel <not-affected> (uses xulrunner)
871            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
872            - iceape 1.0.13~pre080614i-0etch1 (embed)
873            - xulrunner 1.9.0.13-1 (embed)
874            [lenny] - xulrunner 1.9.0.11-0lenny1
875            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
876    
877    irssi
878            - silc-client <unfixed> (embed)
879            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
880    
881    extc
882            - mtasc <unfixed> (embed)
883            - haxe <unfixed> (embed)
884    
885    swflib
886            - mtasc <unfixed> (embed)
887            - haxe <unfixed> (embed)
888    
889    libitext-java
890            - bouncycastle 2.1.4-1 (embed)
891    
892    python-ply
893            - pyke <unfixed> (embed)
894    
895    libdumbnet (libdnet upstream)
896            - nmap <unfixed> (fork)
897    
898    gcc-4.4
899            - gcc-mingw32 <unfixed> (embed)
900    
901    camlimages
902            - advi <unfixed> (embed)
903    
904    memcached
905            - memcachedb <unfixed> (embed)
906    
907    yajl
908            - argyll <unfixed> (embed; bug #544223)
909            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
910    
911    libept:
912            - adept <unfixed> (embed; bug #540649)
913    
914    libvorbis:
915            - iceweasel <not-affected> (uses xulrunner)
916            - xulrunner <not-affected> (introduced in 1.9.1)
917            TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]
918    
919    cairo:
920            - iceweasel <not-affected> (uses xulrunner)
921            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
922    
923    php-net-dnsbl:
924            - serendipity <unfixed> (embed)
925    
926    php-onyx-rss:
927            - serendipity <unfixed> (embed)
928    
929    php-text-wiki:
930            - serendipity <unfixed> (embed)
931    
932    php-xml-rpc:
933            - serendipity <unfixed> (embed)
934    
935    xyssl (does not have a shared library)
936            - polarssl <unfixed> (fork)
937    
938    polarssl (does not have a shared library)
939            - pdkim <itp> (embed)
940            NOTE: pdkim ITP #543150

Legend:
Removed from v.7136  
changed lines
  Added in v.12718

  ViewVC Help
Powered by ViewVC 1.1.5