/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7384 by jmm-guest, Sat Nov 24 10:07:20 2007 UTC revision 11790 by nion, Tue May 5 13:14:46 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16  silc-toolkit:  sort: static (linking statically against a lib)
17  silc-client (uses libsilc and libsilcclient)        embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19  dietlibc:              thus might share parts of the source code)
20  ccontrol (links statically)        old-version (the package is an older version of essentially
21                       the same code)
22  libiax:  
23  iaxmodem  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
26  dpkg  Everything up to the next line is ignored.
27  rsync (somehow derived code base)  ---BEGIN
28  mono  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  mozilla(?)          NOTE: Fixed packages link to poppler library unless otherwise noted
30  Linux kernels          - gpdf <removed>
31  pvpgn (links dynamically since 1.7.8-2)          [sarge] - gpdf <unfixed>
32  mrtg (links dynamically since 2.12.2-1)          NOTE: has been replaced by evince in etch
33  rpm          - pdftohtml <unknown>
34            [sarge] - pdftohtml <unfixed>
35  libbz2:          [etch] - pdftohtml <unfixed>
36  dpkg (statically linked)          NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38  libgadu/ekg:          - texlive-base 3.0-12 (embed)
39  centericq          - texlive-bin 2007-1 (embed)
40  gaim          NOTE: links to poppler
41  kopete (ships the code, but links dynamically in the Debian package)          - koffice <unfixed> (embed; bug #436163)
42  kadu (not packaged in Debian)          - libextractor 0.5.12-1 (embed)
43  GNU gadu (not yet packaged in Debian)          NOTE: libextractor is using its own pdf decoder now
44            - libextractor 0.5.12-1 (embed)
45  xmlrpc: (which package is the "origin" of this code?)          - pdfkit.framework 0.8-4 (embed)
46  drupal          - ipe <unfixed> (embed)
47  phpgroupware          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
48  egroupware          - ruby-gnome2 <unknown> (embed)
49  phpwiki          NOTE: copy only present in source but links to poppler
50  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - pdfedit <unfixed> (embed; bug #510794)
51  tikiwiki  
52    ppmd
53  shtool: (affects build-time only)          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54  mysql-ocaml  
55  php4  peercast
56            - gnome-peercast <unfixed> (embed)
57  mozilla:          NOTE: gnome-peercast may better be removed, see #466539
58  mozilla-firefox  
59  mozilla-thunderbird  silc-toolkit
60  firefox (to be removed)          - silc-client 1.1~beta6-1 (embed)
61  thunderbird (to be removed)  
62  iceweasel  icclib
63  iceape          - ghostscript (embed)
64  icedove          - argyll (embed)
65  xulrunner  
66  nvu (no longer in Debian)  dietlibc
67            - ccontrol 0.9.1+20071204-1 (static)
68  xli:  
69  xloadimage  libmikmod
70            - sdl-mixer1.2 <unfixed> (embed)
71  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          TODO: report bug
72  openmotif  
73  xfree86/xorg (in libxpm)  libiax
74            - iaxmodem <unfixed> (embed)
75  kerberized apps with BSD origin:  
76  krb4  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
77  krb5          - dpkg <unfixed> (embed)
78  heimdal          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
79            - rsync <unfixed> (embed)
80  grip: (which pkg is the origin?)          NOTE: somehow derived code base
81  libcdaudio          - mono <unfixed> (embed)
82  grip          TODO: check mozilla
83  gnome-vfs (vfs2 as well?)          - Linux kernels <unfixed> (embed)
84            - pvpgn 1.7.8-2 (embed)
85  fudforum:          - mrtg 2.12.2-1 (embed)
86  phpgroupware-fudforum          - rpm <unknown> (embed)
87  egroupware-fudforum (removed from egroupware after sarge)          NOTE: pinged anibal since when rpm was fixed
88            - tuxcmd-modules <unfixed> (embed)
89  cvs:          - zsync <unfixed>
90  gcvs (at least an additional script is included, check if there's more)          - tra <unfixed>
91            - sash <unfixed>
92  pcre:          - nsis <unfixed>
93  all pythons          - mseide <unfixed>
94  php4 (src included, but Debian package links dynamically)          - mirrordir <unfixed>
95  analog (src included, but Debian package links dynamically)          - lsb-rpm <unfixed>
96  libgoffice-1          - poco <unfixed>
97  vfu (#450754)          - klibc <unfixed>
98  tf5 (since 5.0beta7 the Debian package links dynamically)          - ghostscript <unfixed>
99  monotone (including this starting from 0.37)          - freeimage <unfixed>
100  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          - clamav <unfixed> (fork)
101  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
102  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)          - tuxonice-userui <unfixed>
103            - plt-scheme <unfixed>
104  tiff:          - perl <unfixed>
105  wxpythongtk (check, which debian pkg this is in)          - paraview <unfixed>
106  older kdegraphics/kpdf releases < 3.3 embedded a copy          - gcvs <unfixed>
107            - erlang <unfixed>
108  uudeview:          - dump <unfixed>
109  libconvert-uulib-perl          - aide <unfixed> (static)
110            - dar <unfixed> (static)
111  sqlite: (not affected by security vulnerabilities so far)          - avfsd <unfixed>
112  amarok          - fpc <unfixed>
113  monotone          - winff <unfixed>
114  iceweasel          NOTE: inherited from fpc, see #472304
115            - lazarus <unfixed>
116  util-linux/mount:          NOTE: inherited from fpc, see #472304
117  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
118    libbz2
119  webmin:          - dpkg <unfixed> (static)
120  usermin (only in sarge)  
121    libgadu:
122  sylpheed:          - centericq <unfixed> (embed)
123  sylpheed-claws          - gaim <unfixed> (embed)
124            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
125  phpsysinfo:          - kopete 4:3.3.2-5 (embed)
126  egroupware          - kadu 0.6.0.2-3 (embed)
127  phpgroupware          - gadu <unfixed> (embed)
128            - ekg 1:1.8~rc0-1 (embed)
129  phpldapadmin:          - kadu 0.6.0.2-3 (embed; bug #504430)
130  egroupware (removed from egroupware after sarge)          NOTE: gadu not packaged in Debian yet
131    
132  chmlib:  xmlrpc (which package is the "origin" of this code?)
133  kchmviewer (not packaged in Debian)          - drupal <unfixed> (embed)
134            - phpgroupware <unfixed> (embed)
135  libavcodec/libavformat (source: ffmpeg):          - egroupware <unfixed> (embed)
136  mplayer (#395252)          - phpwiki (embed)
137  xvidcap          - php4 <unfixed> (embed)
138  kino (links statically, does not include code)          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
139  vlc (links statically, does not include code)  
140  smilutils (links statically, does not include code)  shtool (affects build-time only)
141  motion (links statically, does not include code)          - mysql-ocaml <unfixed> (embed)
142  gst-ffmpeg          - php4 <unfixed> (embed)
143  gstreamer0.10-ffmpeg  
144  xmovie  mozilla source code
145            - mozilla-firefox <unfixed> (embed)
146            - mozilla-thunderbird
147            - firefox <removed>
148            [etch] - firefox <unfixed> (embed)
149            - thunderbird <removed>
150            [etch] - thunderbird <unfixed> (embed)
151            - iceweasel <unfixed> (embed)
152            - iceape <unfixed> (embed)
153            - icedove <unfixed> (embed)
154            - xulrunner <unfixed> (embed)
155            - nvu <removed> (embed)
156    
157    xli
158            - xloadimage <unfixed> (embed)
159    
160    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
161            - openmotif <unfixed> (embed)
162            - xfree86/xorg <unfixed> (embed)
163            NOTE: in libxpm
164    
165    kerberized apps with BSD origin
166            - krb4 <unfixed> (embed)
167            - krb5 <unfixed> (embed)
168            - heimdal <unfixed> (embed)
169    
170    grip (which pkg is the origin?)
171            - libcdaudio
172            - grip
173            - gnome-vfs
174            TODO: check vfs2 as well
175    
176    fudforum
177            - phpgroupware-fudforum <unfixed> (embed)
178            - egroupware-fudforum <removed>
179            [sarge] - egroupware-fudforum <unfixed> (embed)
180    
181    cvs
182            - gcvs <unfixed> (embed)
183            NOTE: see cvsunix/src in tarball
184    
185    pcre
186            - python* <unfixed> (embed)
187            - php4 <unknown> (embed)
188            - analog 2:5.23-0woody1 (embed)
189            - libgoffice-1 <unfixed> (embed)
190            - vfu 4.06-4.1 (embed; bug #450754)
191            - tf5 5.0beta7-1 (embed)
192            - monotone 0.43-1 (embed)
193            NOTE: this only affects versions >= 0.37
194            - glib2.0 2.15.2-1 (embed)
195            - apache2 2.0.53-4 (embed)
196            - exim4 4.10-0.srh20.12 (embed)
197            - yacas <unfixed> (embed)
198            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
199            - gtamsanalyzer.app 0.42-5 (embed)
200            - tin <unknown> (embed)
201            - kazehakase 0.5.2-1
202            - webkit <unfixed> (embed)
203            - qt4-x11 <unfixed> (embed)
204            NOTE: embedded via webkit copy
205    
206    tiff
207            - wxwindows2.4 2.2.1 (embed)
208    
209    uudeview
210            - libconvert-uulib-perl <unfixed> (embed)
211            - pan <unfixed> (embed)
212    
213    sqlite (not affected by security vulnerabilities so far)
214            - amarok <unfixed> (embed)
215            - monotone 0.43-1 (embed)
216            - iceweasel <unfixed> (embed)
217    
218    util-linux/mount
219            - loop-aes-utils <unfixed> (embed)
220            NOTE: contains code from util-linux' mount in the mount-aes-udeb
221    
222    webmin
223            - usermin <unknown> (embed)
224            [sarge] - usermin <unfixed> (embed)
225    
226    sylpheed
227            - sylpheed-claws <unfixed> (fork)
228    
229    phpsysinfo
230            - egroupware <unfixed> (embed)
231            - phpgroupware <unfixed> (embed)
232    
233    phpldapadmin
234            [sarge] - egroupware <unfixed> (embed)
235            NOTE: removed from egroupware after sarge
236    
237    chmlib
238            - kchmviewer <unknown> (embed)
239    
240    libavcodec/libavformat (source: ffmpeg)
241            - mplayer 1.0~rc2-14 (embed; bug #395252)
242            - kino 1.0.0-1
243            - vlc <not-affected> (Links dynamically since initial release)
244            - smilutils 0.3.0-10
245            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
246            - motion 3.1.19-1
247            - gstreamer0.10-ffmpeg 0.10.3-2
248            - xmovie <unfixed>
249            TODO: gimp-gap (potentially using ffmpeg code as well)
250    
251    faad2
252            - mplayer 1.0~rc2-20 (embed)
253    
254    mad MPEG decoding lib
255            - mad <unfixed> (embed)
256            - xine-lib <unfixed> (embed)
257    
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
258  libdts  libdts
259  xine-lib          - xine-lib <unfixed> (embed)
260    
 flac:  
261  flac  flac
262  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
   
 libsndfile:  
 ardour  
263    
264  glibmm2.4:  liba52
265  ardour          - a52dec <unfixed> (embed)
266            - xine-lib <unfixed> (embed)
267    
268  libgnomecanvasmm2.6:  libmpeg2
269  ardour          - mpeg2dec <unfixed> (embed)
270            - xine-lib <unfixed> (embed)
271    
272  libsigc++-2.0:  curl
273  ardour          - wget <unfixed> (embed)
274            NOTE: code for NTLM authentication
275    
276  soundtouch:  uw-imap
277  ardour          - pine <unfixed> (embed)
278            - alpine <unfixed> (embed)
279    
280  libmms:  imagemagick
281  xine-lib          - graphicsmagick <unfixed> (fork)
 mimms  
   
 FCKeditor: (packaged as fckeditor)  
 knowledgeroot  
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
   
   
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
282    
283  gzip:  halibut
284  linux-kernel (lib/inflate.c)          - nsis <unfixed> (fork)
 klibc (based on linux-kernel gzip code)  
 busybox  
285    
286  neon:  libghttp
287  cadaver (all, but being worked on: #188381)          - hotway <unfixed> (embed)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
288    
289  libmodplug:  libsndfile
290  gst-plugins-bad0.10          - ardour 1:2.7.1-1 (embed)
291    
292  libvncserver:  glibmm2.4
293  vino          - ardour 1:2.7.1-1 (embed)
294    
295  putty:  libgnomecanvasmm2.6
296  filezilla          - ardour 1:2.7.1-1 (embed)
297    
298  tinyxml (not packaged in Debian):  libsigc++-2.0
299  filezilla          - ardour 1:2.7.1-1 (embed)
300    
301  gv:  soundtouch
302  evince (ps/ tree from gv 3.5.8)          - ardour 1:2.7.1-1 (embed)
 evince-gtk (not packaged in Debian)  
303    
304  libXbae:  libmms
305  libpawlib2-lesstif package (from Cernlib)          - xine-lib <unfixed> (embed)
306            - mimms <unfixed> (embed)
307    
308  libXaw:  fckeditor
309  libpawlib2-lesstif package (from Cernlib)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
310            - moin 1.8.2-2 (embed; bug #452599)
311            - karrigell <removed> (embed; bug #452598)
312            - gforge 4.6.99+svn6225-1 (embed)
313    
314  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  ipatlas (not packaged in Debian)
315            - moodle <unfixed> (embed; bug #507185)
316    
317  libgd2:  libphp-phpmailer
318  graphviz (lib/gd seems to be 2.0.33)          - moodle <unfixed> (embed; bug #507185)
319            - mahara <unfixed> (embed)
320            - symfony <unfixed> (embed)
321            - phpgroupware-felamimail <unfixed> (embed)
322            NOTE: phpgroupware-felamimail is only in etch
323            - egroupware <unfixed> (embed; bug #504283)
324            - glpi <unfixed>
325    
326  rar:  htmlArea (not packaged in Debian)
327  unrar-nonfree          - moodle <unfixed> (embed)
328    
329  unrar-free: (maybe this code is derived from the original rar, too?)  giflib:
330  clamav (seems to be disabled in default config)          - wine <unfixed> (embed; bug #466181)
331    
332  mplayer (DirectMedia Object loader):  bennu (not packaged in Debian, http://bennu.sourceforge.net)
333  xine-lib (src/libw32dll/)          - moodle <unfixed> (embed)
 vlc (modules/codec/dmo/)  
334    
335  libwpd (WordPerfect converter):  smarty:
336  openoffice.org          - moodle 1.8.2-2 (embed; bug #471158)
337            - gallery2 2.2.5-2 (embed; bug #471160)
338            - mahara 0.9.2-2 (embed; bug #471201)
339            - gosa 2.4beta1-1 (embed; bug #471200)
340    
341  fsplib (http://sourceforge.net/projects/fsp/):  TinyMCE
342  gftp (lib/fsplib version 0.3)          - wordpress 2.5.1-3 (embed; bug #478257)
343            - moodle <unfixed> (embed; bug #507185)
344            - knowledgeroot <unfixed> (embed)
345            - joomla <itp> (bug #326398)
346    
347    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
348            - scite <unfixed> (embed)
349            - qscintilla <unfixed> (embed)
350            - qscintilla2 <unfixed> (embed)
351            - geany <unfixed> (fork)
352            - anjuta <unfixed> (embed)
353    
354    libphp-adodb
355            - moodle <unfixed> (embed; bug #507185)
356            NOTE: also AdoDB-XML Schema
357            - gallery2 <unfixed> (embed)
358            - phppgadmin <unfixed> (embed)
359            - egroupware <unfixed> (embed)
360            - phpwiki <unfixed> (embed)
361            - ipplan <unfixed> (embed)
362            - typo3 <unfixed> (embed)
363            - cacti <unknown> (embed)
364            [sarge] - cacti <unfixed> (embed)
365            NOTE: dependency exists, but internal version is used
366            - gforge 4.7~rc2-6 (embed)
367            - mahara <unfixed> (embed)
368    
369    gzip
370            - linux-kernel <unfixed> (embed)
371            NOTE: lib/inflate.c
372            - klibc <unfixed> (embed)
373            NOTE: based on linux-kernel gzip code
374            - busybox <unfixed> (embed)
375    
376    neon
377            - cadaver <unfixed> (embed; bug #188381)
378            - gnome-vfs2 <unfixed> (embed; bug #395874)
379            - litmus <unfixed> (embed; #395875)
380            [sarge] - screem <unfixed> (embed)
381            - sitecopy <unfixed> (embed; bug #395876)
382            [etch] - tla <unfixed> (embed; bug #395877)
383            [sarge] - tla <unfixed> (embed; bug #395877)
384    
385    libmodplug
386            - gst-plugins-bad0.10 <unfixed> (embed)
387    
388    libvncserver
389            - vino <unfixed> (embed)
390    
391    putty
392            - filezilla <unfixed> (embed)
393    
394    tinyxml (not packaged in Debian)
395            - filezilla <unfixed>
396    
397    gv
398            - evince <unfixed> (embed)
399            NOTE: ps/ tree from gv 3.5.8
400            - evince-gtk <unfixed> (embed)
401            NOTE: not packaged in Debian
402    
403    libXbae
404            [etch] - libpawlib2-lesstif <unfixed> (embed)
405            NOTE: from Cernlib
406    
407    libXaw
408            [etch] - libpawlib2-lesstif
409            NOTE: from Cernlib
410            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
411    
412    libgd2
413            - graphviz <unfixed> (embed)
414            NOTE: lib/gd seems to be 2.0.33
415            - wml <unfixed> (embed)
416            - libwmf <unfixed> (embed)
417            NOTE: derived from gd 1.6.3
418    
419    rar
420            - unrar-nonfree <unfixed> (embed)
421    
422    unrar-free (maybe this code is derived from the original rar, too?)
423            - clamav <unfixed> (embed)
424            NOTE: seems to be disabled in default config
425    
426    mplayer (DirectMedia Object loader)
427            - xine-lib <unfixed> (embed)
428            NOTE: src/libw32dll/
429            - vlc <unfixed> (embed)
430            NOTE: modules/codec/dmo/
431            - mplayer 1.0~rc2-20 (embed)
432    
433    libwpd (WordPerfect converter)
434            - openoffice.org <unfixed> (embed)
435    
436    fsplib (http://sourceforge.net/projects/fsp/)
437            - gftp <unfixed> (embed)
438            NOTE: lib/fsplib version 0.3
439    
440    sprng
441            - tree-puzzle <unfixed> (embed)
442    
443    librpcsecgss
444            - krb5 <unfixed> (embed)
445    
446    jasper
447            - ghostscript <unfixed> (embed)
448            - gs-gpl <unfixed> (embed)
449    
450    libiris
451            - psi <unfixed> (embed)
452            - kdenetwork <unfixed> (embed)
453            NOTE: kopete embeds libiris but links dynamically to libidn
454            - kdegames <unfixed> (embed)
455            NOTE: ksirk/kde4
456    
457    libidn
458            - monotone 0.43-1 (embed)
459            - psi <unfixed> (embed)
460            NOTE: psi embeds libiris which embeds libidn
461            - kdegames <unfixed> (embed)
462            NOTE: kdegames/kde4 embeds libiris which embeds libidn
463    
464    liblua
465            - monotone 0.43-1 (embed)
466    
467    libbotan
468            - montone 0.43-1 (embed)
469    
470    NetXX
471            - monotone 0.43-1 (embed)
472    
473    libgc
474            - mono <unfixed> (embed)
475    
476    lzma
477            - p7zip <unfixed> (embed)
478    
479    lzo
480            - grub2 <unfixed> (embed)
481    
482    yassl
483            - mysql-dfsg-5.0 <unfixed> (embed)
484    
485    pax code
486            - tar <unfixed> (embed)
487            - cpio <unfixed> (embed)
488    
489    t1lib
490            - tetex-bin 2.0.2-1 (embed)
491            - texlive-bin <unknown> (embed)
492    
493    guichan
494            - boswars <unfixed> (embed)
495            NOTE: maintainer notified us, working on it
496    
497    tolua
498            - boswars <unfixed> (embed)
499            NOTE: maintainer notified us, working on it
500    
501    asio-dev
502            - luxrender <unfixed> (embed)
503            NOTE: maintainer notified us, working on it
504            NOTE: may be merged with boost "soon"
505    
506  librpcsecgss:  xine-lib
507  krb5          - vlc <unfixed> (embed)
508            NOTE: only parts included in modules/access/rtsp
509    
510  jasper:  netpbm
511  ghostscript          - tcl8.3 <unfixed> (embed)
512  gs-gpl          - tcl8.4 <unfixed> (embed)
513            - tcl8.5 <unfixed> (embed)
514            NOTE: generic/tkImgGIF.c
515    
516    tk8.5
517            - tk8.0 <removed> (old-version)
518            - tk8.3 <unfixed> (old-version)
519            - tk8.4 <unfixed> (old-version)
520            - perl-tk <unfixable> (fork)
521    
522    samba
523            - mc 2:4.6.2~git20080311-1 (embed)
524            NOTE: maintainer is aware of this, currently searching a solution
525    
526    plib1.8.4c2
527            - boson <unfixed> (fork)
528            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
529    
530    fribidi
531            - quesoglc <unfixed> (embed)
532            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
533    
534    glew
535            - quesoglc <unfixed> (embed; bug #489341)
536            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
537    
538    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
539            - transcend <unfixed> (embed)
540            - cultivation <unfixed> (embed)
541            - passage <unfixed> (embed)
542            - gravitation <unfixed> (embed)
543    
544  libidn:  tar
545  monotone          - libarchive <unfixed> (embed)
546            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
547    
548  liblua:  cpio
549  monotone          - libarchive <unfixed> (embed)
550            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
551    
552  libbotan:  webkit
553  montone          - qt4-x11 <unfixed> (embed)
554    
555  NetXX:  ftgl
556  monotone          - blender 2.46+dfsg-1 (embed)
557    
558  libgc:  wv
559  mono          - abiword <unfixed>
560    
561    qemu
562            - kvm <unfixed> (embed)
563            - xen-3 <unfixed> (embed)
564            - xen-unstable <unfixed> (embed)
565    
566    bochs
567            - kvm <unfixed> (embed; bug #489442)
568    
569    speex
570            - vorbis-tools <unfixed> (embed)
571            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
572            - gst-plugins-good0.10 <unfixed> (embed)
573            - xine-lib <unfixed> (embed)
574            - libfishsound <unfixed> (embed)
575            - libannodex <unfixed> (embed)
576            - vlc <unfixed> (embed)
577            - xmms-speex <unfixed> (embed)
578            - libsdl-sound1.2 <unfixed> (embed)
579            - sweep <unfixed> (embed)
580    
581    libreadline
582            - magic <unfixed> (old-version)
583            NOTE: magic is currently an RFS
584    
585    opcode
586            - ode <unfixed> (embed)
587            NOTE: opcode is not a package in debian, it is just embedded
588            NOTE: http://www.codercorner.com/Opcode.htm
589    
590    gimpact
591            - ode <unfixed> (embed)
592            NOTE: gimpact is not a package in debian, it is just embedded
593            NOTE: http://gimpact.sf.net
594    
595    mochikit
596            - mahara <unfixed> (embed)
597            NOTE: they require extra patches, still unmerged upstream
598            - ntop <unfixed> (embed)
599            - python-oherence <unfixed> (embed)
600            - python-paste <unfixed> (embed)
601            - python-turbogears <unfixed> (embed)
602            - zope-plone3 <unfixed> (embed)
603    
604    prototype
605            - netbeans-ide <unfixed> (embed)
606            - auth2db-frontend <unfixed> (embed)
607            - citadel-webcit <unfixed> (embed)
608            - asterisk <unfixed> (embed)
609            - doc-iana <unfixed> (embed)
610            - libaws-doc <unfixed> (embed)
611            - libgettext-ruby-data <unfixed> (embed)
612            - libjson-ruby-doc <unfixed> (embed)
613            - liblucene2-java-doc <unfixed> (embed)
614            - libopenid-ruby <unfixed> (embed)
615            - solr-common <unfixed> (embed)
616            - glpi <unfixed> (embed)
617            - hobbix <unfixed> (embed)
618            - mnemo2 <unfixed> (embed)
619            - nag2 <unfixed> (embed)
620            - knowledgeroot <unfixed> (embed)
621            - mediatomb-common <unfixed> (embed)
622            - mt-daapd <unfixed> (embed)
623            - op-panel <unfixed> (embed)
624            - ebug-http <unfixed> (embed)
625            - phpgedview <removed> (embed)
626            - poker-web <unfixed> (embed)
627            - python-webhelpers <unfixed> (embed)
628            - qwik <unfixed> (embed)
629            - rails <unfixed> (embed)
630            - typo3-src-4.1 <unfixed> (embed)
631            - wordpress <unfixed> (embed)
632            - zope-plone3 <unfixed> (embed)
633            - smokeping <unfixed> (embed)
634            - ampache 3.4.1-2 (embed)
635            - exaile <unfixed> (embed)
636            - hobix <unfixed> (embed)
637            - pixelpost <unfixed> (embed)
638            - symfony <unfixed> (embed)
639            NOTE: it's been said that there are custom changes
640            - zabbix-frontend-php <unfixed> (embed)
641            - turba2 <unfixed> (embed)
642    
643    gdb
644            - insight <unfixed> (embed)
645    
646    e2fsprogs
647            - ldiskfsprogs <unfixable> (fork)
648    
649    quazip (not packaged in Debian)
650            - qcake <unfixed> (embed)
651            NOTE: starting with upstream version 0.6.4
652    
653    exo
654            - pcmanfm <unfixed> (embed; bug #499677)
655            NOTE: slightly modified source code
656    
657    java
658            - openjdk-6 <unfixed>
659            - sun-java5 <unfixed>
660            - sun-java6 <unfixed>
661    
662    libphp-snoopy
663            - ampache 3.4.1-2 (embed; bug #504169)
664            - mahara 1.0.5-2 (embed; bug #504170)
665            - pixelpost <unfixed> (embed; bug #504171)
666            - mediamate 0.9.3.6-5 (embed; bug #504172)
667            - opendb <unfixed> (embed; bug #504173)
668            - wordpress 2.5.1-9 (embed; bug #443948)
669            - moodle <unfixed> (embed; bug #507185)
670            - phpgroupware-felamimail <unfixed> (embed)
671            NOTE: phpgroupware-felamimail is only in etch
672            - magpierss 0.72-3 (embed; bug #431089)
673    
674    jquery
675            - zekr <unfixed> (embed)
676            - wordpress <unfixed> (embed)
677            - yocto-reader <unfixed> (embed)
678            - textpattern <unfixed> (embed)
679            - genshi 0.5.1-1 (embed)
680            NOTE: compressed file under examples/ dir
681            - prewikka <unfixed> (embed)
682            - libramaze-ruby <unfixed> (embed)
683            - drupal5 <unfixed> (embed)
684            - b2evolution <unfixed> (embed)
685            - wesnoth <unfixed> (embed)
686    
687    tablesorter (jquery plugin, not packaged yet)
688            - wesnoth <unfixed> (embed)
689    
690    kses
691            - wordpress <unfixed> (embed; bug #504242)
692            NOTE: their copy has all methods renamed to wp_<foo>
693            - moodle <unfixed> (embed; bug #507185)
694            - egroupware <unfixed> (embed)
695    
696    magpierss
697            - wordpress <unfixed> (embed; bug #504242)
698            - moodle <unfixed>
699    
700    php-gettext
701            - wordpress <unfixed> (embed; bug #504242)
702    
703    libphp-ixr (name may change, it is the Incutio XML-RPC)
704            - wordpress <unfixed> (embed; bug #504242)
705            - dokuwiki <unfixed> (embed)
706            - textpattern <unfixed> (embed)
707    
708    libphp-cas
709            - glpi <unfixed> (embed)
710            - moodle <unfixed> (embed; bug #496069)
711    
712    scriptaculous
713            - glpi <unfixed> (embed)
714            - libaws-doc <unfixed> (embed)
715            - op-panel <unfixed> (embed)
716            - symfony <unfixed> (embed)
717            NOTE: maintainer says there are extra incompatible changes required
718            - pixelpost <unfixed> (embed)
719            - python-webhelpers <unfixed> (embed)
720            - qwik <unfixed> (embed)
721            - smokeping <unfixed> (embed)
722            - turba2 <unfixed> (embed)
723            - typo3-src 4.2.3-1 (embed)
724    
725    libmarkdown-php
726            - moodle <unfixed> (embed; bug #507185)
727            - pixelpost <unfixed> (embed)
728    
729    php-openid
730            - wordpress-openid <itp> (embed)
731    
732    geshi
733            - dokuwiki 0.0.20080505-3.1 (embed)
734            - pgfouine 1.0-1.1 (embed)
735            - websvn 2.1.0-1 (embed)
736    
737    webcalendar
738            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
739    
740    libical
741            - kdepim <unfixed> (fork)
742            - kdepimlibs <unfixed> (fork)
743            NOTE: fixed in KDE4 post 4.1.x series
744    
745    libltdl3
746            - kdelibs <unfixed> (embed)
747            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
748            - synfig <unfixed> (embed)
749    
750    harfbuzz
751            - qt4-x11 <unfixed> (embed)
752    
753    libzip
754            - php5 <unfixed> (fork)
755    
756    json.php (not packaged; should be replaced with php's built-in functions)
757            - moodle <unfixed>
758            - yui <unfixed>
759            - gallery2 <unfixed>
760            - dokuwiki <unfixed>
761            - typo3-src-4.2 <unfixed>
762    
763    php-fpdf
764            - tcpdf <itp> (fork)
765            - moodle <unfixed>
766            - phpwiki <unfixed>
767            - egroupware <unfixed>
768            - ldap-account-manager <unfixed> (fork)
769    
770    tcpdf (itp: #495985)
771            - moodle <unfixed>
772            - phpmyadmin <unfixed>
773    
774  lzma:  typo3
775  p7zip          - moodle <unfixed>
776    
777  lzo:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
778  grub2          - moodle <unfixed>
779            - gosa <unfixed>
780    
781    php-ole (itp: #487558)
782            - moodle <unfixed>
783    
784    pieforms (http://www.catalyst.net.nz)
785            - mahara <unfixed>
786    
787    savant2 (http://phpsavant.com)
788            - egroupware <unfixed>
789    
790    rssparser (http://nwow.org)
791            - egroupware <unfixed>
792            - phpgroupware <unfixed>
793    
794    lcms
795            - openjdk-6 <unfixed> (fork)
796    
797    libphp-phplayersmenu
798            - diogenes <unfixed>
799            - phpldapadmin <unfixed>
800    
801    libphp-pclzip
802            - docvert <unfixed>
803            - moodle <unfixed>
804            - egroupware <unfixed>
805    
806    libphp-simplepie
807            - dokuwiki <unfixed>
808    
809    libphp-jpgraph
810            - egroupware <unfixed>
811    
812    php-simpletest
813            - moodle <unfixed>
814    
815    libpng
816            - iceweasel <unfixed> (embed)
817            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
818            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
819            - iceape 1.0.13~pre080614i-0etch1 (embed)
820            - xulrunner <unfixed> (embed)
821            NOTE: Debian 1.9.0.6 uses embedded copy
822            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
823            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
824            NOTE: Ubuntu only
825            - firefox-3.0 <unfixed> (embed)
826            NOTE: Ubuntu only
827            - firefox-3.1 <unfixed> (embed)
828            NOTE: Ubuntu only
829            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
830            NOTE: Ubuntu only
831            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
832            NOTE: Ubuntu only
833            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
834            NOTE: Ubuntu only
835    
836    irssi
837            - irssi-plugin-silc <unfixed> (embed)
838            NOTE: Seems to be a pre-0.8.12 version that is used
839    
840    extc
841            - mtasc <unfixed> (embed)
842            - haxe <unfixed> (embed)
843    
844    swflib
845            - mtasc <unfixed> (embed)
846            - haxe <unfixed> (embed)
847    
848  pax code:  libitext-java
849  tar          - bouncycastle 2.1.4-1 (embed)
 cpio  

Legend:
Removed from v.7384  
changed lines
  Added in v.11790

  ViewVC Help
Powered by ViewVC 1.1.5