/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7463 by jmm-guest, Sun Dec 2 13:11:25 2007 UTC revision 12625 by jmm-guest, Mon Aug 17 18:38:10 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp> or <unknown> if the version number can not be determined
15  ruby-gnome2 (has a copy of poppler but links against the shared lib)          <unfixable> for unavoidable cases (e.g., forks that add real value)
16    sort: static (linking statically against a lib)
17  silc-toolkit:        embed (embedding a copy of the library into another source package)
18  silc-client (uses libsilc and libsilcclient)        fork (the package is not just embedding code but it is a fork and
19                thus might share parts of the source code)
20  dietlibc:        old-version (the package is an older version of essentially
21  ccontrol (links statically)                     the same code)
22    
23  libiax:  The srcpkg might be some string to identify the code if there is no
24  iaxmodem  specific source package.
25    
26  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  Everything up to the next line is ignored.
27  dpkg  ---BEGIN
28  rsync (somehow derived code base)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  mono          NOTE: Fixed packages link to poppler library unless otherwise noted
30  mozilla(?)          - gpdf <removed>
31  Linux kernels          [sarge] - gpdf <unfixed>
32  pvpgn (links dynamically since 1.7.8-2)          NOTE: has been replaced by evince in etch
33  mrtg (links dynamically since 2.12.2-1)          - pdftohtml <unknown>
34  rpm          [sarge] - pdftohtml <unfixed>
35            [etch] - pdftohtml <unfixed>
36  libbz2:          NOTE: has been replaced by poppler-utils
37  dpkg (statically linked)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38            - texlive-base 3.0-12 (embed)
39  libgadu/ekg:          - texlive-bin 2007-1 (embed)
40  centericq          NOTE: links to poppler
41  gaim          - koffice <unfixed> (embed; bug #436163)
42  pigdin (links dynamically against libgadu)          - libextractor 0.5.12-1 (embed)
43  kopete (ships the code, but links dynamically in the Debian package)          NOTE: libextractor is using its own pdf decoder now
44  kadu (not packaged in Debian)          - pdfkit.framework 0.8-4 (embed)
45  GNU gadu (not yet packaged in Debian)          - ipe <unfixed> (embed)
46            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47  xmlrpc: (which package is the "origin" of this code?)          - ruby-gnome2 <unknown> (embed)
48  drupal          NOTE: copy only present in source but links to poppler
49  phpgroupware          - pdfedit <unfixed> (embed; bug #510794)
50  egroupware          - swftools <unfixed> (embed)
51  phpwiki  
52  php4 (php-pear, IIRC this was reorganized some weeks ago?)  ppmd
53            - libcomplearn-mod-ppmd <unfixed> (fork)
54  shtool: (affects build-time only)          NOTE: discussion in #458152
55  mysql-ocaml  
56  php4  libevent
57            - transmission 1.71-1 (embed; bug #529372)
58  mozilla:  
59  mozilla-firefox  lrmi
60  mozilla-thunderbird          - read-edid 2.0.0-1 (embed; bug #495131)
61  firefox (to be removed)  
62  thunderbird (to be removed)  peercast
63  iceweasel          - gnome-peercast <unfixed> (embed)
64  iceape          NOTE: gnome-peercast may better be removed, see #466539
65  icedove  
66  xulrunner  silc-toolkit
67  nvu (no longer in Debian)          - silc-client 1.1~beta6-1 (embed)
68    
69  xli:  icclib
70  xloadimage          - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
73  openmotif  dietlibc
74  xfree86/xorg (in libxpm)          - ccontrol 0.9.1+20071204-1 (static)
75    
76  kerberized apps with BSD origin:  libmikmod
77  krb4          - sdl-mixer1.2 <unfixed> (embed)
78  krb5          TODO: report bug
79  heimdal  
80    libiax
81  grip: (which pkg is the origin?)          - iaxmodem <unfixed> (embed)
82  libcdaudio  
83  grip  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
84  gnome-vfs (vfs2 as well?)          - dpkg <unfixed> (embed)
85            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
86  fudforum:          - rsync <unfixed> (embed)
87  phpgroupware-fudforum          NOTE: somehow derived code base
88  egroupware-fudforum (removed from egroupware after sarge)          - mono <unfixed> (embed)
89            TODO: check mozilla
90  cvs:          - Linux kernels <unfixed> (embed)
91  gcvs (at least an additional script is included, check if there's more)          - pvpgn 1.7.8-2 (embed)
92            - mrtg 2.12.2-1 (embed)
93  pcre:          - rpm <unknown> (embed)
94  all pythons          NOTE: pinged anibal since when rpm was fixed
95  php4 (src included, but Debian package links dynamically)          - tuxcmd-modules <unfixed> (embed)
96  analog (src included, but Debian package links dynamically)          - zsync <unfixed>
97  libgoffice-1          - tra <unfixed>
98  vfu (#450754)          - sash <unfixed>
99  tf5 (since 5.0beta7 the Debian package links dynamically)          - nsis <unfixed>
100  monotone (including this starting from 0.37)          - mseide-msegui <unfixed>
101  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          NOTE: mseide
102  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)          - mirrordir <unfixed>
103  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)          - poco <unfixed>
104            - klibc <unfixed>
105  tiff:          - ghostscript <unfixed>
106  wxpythongtk (check, which debian pkg this is in)          - freeimage <unfixed>
107  older kdegraphics/kpdf releases < 3.3 embedded a copy          - clamav <unfixed> (fork)
108            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
109  uudeview:          - tuxonice-userui <unfixed>
110  libconvert-uulib-perl          - plt-scheme <unfixed>
111            - perl <unfixed>
112  sqlite: (not affected by security vulnerabilities so far)          - paraview <unfixed>
113  amarok          - gcvs <unfixed>
114  monotone          - erlang <unfixed>
115  iceweasel          - dump <unfixed>
116            - aide <unfixed> (static)
117  util-linux/mount:          - dar <unfixed> (static)
118  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - avfs <unfixed>
119            - fpc <unfixed>
120  webmin:          - winff <unfixed>
121  usermin (only in sarge)          NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123  sylpheed:          NOTE: inherited from fpc, see #472304
124  sylpheed-claws  
125    dulwich
126  phpsysinfo:          - hg-git <unfixed> (embed; bug #541996)
127  egroupware  
128  phpgroupware  libvigraimpex
129            - hugin <unfixed> (embed)
130  phpldapadmin:          - enblend-fuse <unfixed> (embed)
131  egroupware (removed from egroupware after sarge)  
132    libbz2
133  chmlib:          - dpkg <unfixed> (static)
134  kchmviewer (ships the code but links dynamically)  
135    libgadu:
136  libavcodec/libavformat (source: ffmpeg):          - centericq <unfixed> (embed)
137  mplayer (#395252)          - gaim <unfixed> (embed)
138  xvidcap          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
139  kino (links statically, does not include code)          - kdenetwork 4:3.3.2-5 (embed)
140  vlc (links statically, does not include code)          NOTE: from kdenetwork: kopete
141  smilutils (links statically, does not include code)          - gadu <unfixed> (embed)
142  motion (links statically, does not include code)          - ekg 1:1.8~rc0-1 (embed)
143  gst-ffmpeg          - kadu 0.6.0.2-3 (embed; bug #504430)
144  gstreamer0.10-ffmpeg          NOTE: gadu not packaged in Debian yet
145  xmovie  
146    xmlrpc (which package is the "origin" of this code?)
147            - drupal <unfixed> (embed)
148            - phpgroupware <unfixed> (embed)
149            - egroupware <unfixed> (embed)
150            - phpwiki <unfixed> (embed)
151            - php4 <unfixed> (embed)
152            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
153    
154    shtool (affects build-time only)
155            - mysql-ocaml <unfixed> (embed)
156            - php4 <unfixed> (embed)
157    
158    mozilla source code
159            - mozilla-firefox <unfixed> (embed)
160            - mozilla-thunderbird <unfixed>
161            - firefox <removed>
162            - thunderbird <removed>
163            - iceweasel <unfixed> (embed)
164            - iceape <unfixed> (embed)
165            - icedove <unfixed> (embed)
166            - xulrunner <unfixed> (embed)
167            - nvu <removed> (embed)
168            - kompozer <unfixed> (embed; bug #532168)
169    
170    xli
171            - xloadimage <unfixed> (embed)
172    
173    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
174            - openmotif <unfixed> (embed)
175            - libxpm <unfixed> (embed)
176    
177    kerberized apps with BSD origin
178            - krb4 <unfixed> (embed)
179            - krb5 <unfixed> (embed)
180            - heimdal <unfixed> (embed)
181    
182    grip (which pkg is the origin?)
183            - libcdaudio <unfixed>
184            - grip <unfixed>
185            - gnome-vfs <unfixed>
186            TODO: check vfs2 as well
187    
188    fudforum
189            [etch] - phpgroupware <unfixed> (embed)
190            NOTE: phpgroupware-fudforum
191            [sarge] - egroupware-fudforum <removed> (embed)
192    
193    libbsd
194            - rdate 1:1.2-3 (embed)
195            - atheme-services
196            - libbsd-arc4random-perl
197            - isakmpd
198    
199    cvs
200            - gcvs <unfixed> (embed)
201            NOTE: see cvsunix/src in tarball
202    
203    pcre
204            - python* <unfixed> (embed)
205            - php4 <unknown> (embed)
206            - analog 2:5.23-0woody1 (embed)
207            - goffice <unfixed> (embed)
208            NOTE: libgoffice-*
209            - vfu 4.06-4.1 (embed; bug #450754)
210            - tf5 5.0beta7-1 (embed)
211            - monotone 0.43-1 (embed)
212            NOTE: this only affects versions >= 0.37
213            - glib2.0 2.15.2-1 (embed)
214            - apache2 2.0.53-4 (embed)
215            - exim4 4.10-0.srh20.12 (embed)
216            - yacas <unfixed> (embed)
217            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
218            - gtamsanalyzer.app 0.42-5 (embed)
219            - tin <unknown> (embed)
220            - kazehakase 0.5.2-1
221            - webkit <unfixed> (embed)
222            - qt4-x11 <unfixed> (embed)
223            NOTE: embedded via webkit copy
224    
225    tiff
226            - wxwindows2.4 2.2.1 (embed)
227    
228    uudeview
229            - libconvert-uulib-perl <unfixed> (embed)
230            - pan <unfixed> (embed)
231    
232    sqlite (not affected by security vulnerabilities so far)
233            - amarok <unfixed> (embed)
234            - monotone 0.43-1 (embed)
235            - iceweasel <unfixed> (embed)
236    
237    util-linux/mount
238            - loop-aes-utils <unfixed> (embed)
239            NOTE: contains code from util-linux' mount in the mount-aes-udeb
240    
241    webmin
242            - usermin <unknown> (embed)
243            [sarge] - usermin <unfixed> (embed)
244    
245    sylpheed
246            - sylpheed-claws <unfixed> (fork)
247    
248    phpsysinfo
249            - egroupware <unfixed> (embed)
250            - phpgroupware <unfixed> (embed)
251    
252    phpldapadmin
253            [sarge] - egroupware <unfixed> (embed)
254            NOTE: removed from egroupware after sarge
255    
256    chmlib
257            - kchmviewer <unknown> (embed)
258    
259    libavcodec/libavformat (source: ffmpeg)
260            - mplayer 1.0~rc2-14 (embed; bug #395252)
261            - kino 1.0.0-1
262            - vlc <not-affected> (Links dynamically since initial release)
263            - smilutils 0.3.0-10
264            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
265            - motion 3.1.19-1
266            - gstreamer0.10-ffmpeg 0.10.3-2
267            - xmovie <unfixed>
268            TODO: gimp-gap (potentially using ffmpeg code as well)
269    
270    faad2
271            - mplayer 1.0~rc2-20 (embed)
272            - avifile <unfixed> (embed; bug #538750)
273    
274    mad MPEG decoding lib
275            - mad <unfixed> (embed)
276            - xine-lib <unfixed> (embed)
277    
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
278  libdts  libdts
279  xine-lib          - xine-lib <unfixed> (embed)
280    
 flac:  
281  flac  flac
282  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
283    
284  libghttp:  liba52
285  hotway          - a52dec <unfixed> (embed)
286            - xine-lib <unfixed> (embed)
287    
288  libsndfile:  libmpeg2
289  ardour          - mpeg2dec <unfixed> (embed)
290            - xine-lib <unfixed> (embed)
291    
292  glibmm2.4:  curl
293  ardour          - wget <unfixed> (embed)
294            NOTE: code for NTLM authentication
295    
296  libgnomecanvasmm2.6:  uw-imap
297  ardour          - pine <unfixed> (embed)
298            - alpine <unfixed> (embed)
299    
300  libsigc++-2.0:  imagemagick
301  ardour          - graphicsmagick <unfixed> (fork)
302    
303  soundtouch:  python-urlgrabber
304  ardour          - mercurial <unfixed> (embed; bug #531062)
305    
306  libmms:  python-mechanize
307  xine-lib          - python-beautifulsoup <unfixed> (embed)
 mimms  
   
 FCKeditor: (packaged as fckeditor)  
 knowledgeroot  
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
308    
309    halibut
310            - nsis <unfixed> (fork)
311    
312    libghttp
313            - hotway <unfixed> (embed)
314    
315  Moodle contains lots of things:  libsndfile
316  AdoDB          - ardour 1:2.7.1-1 (embed)
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
317    
318  TinyMCE:  glibmm2.4
319  wordpress          - ardour 1:2.7.1-1 (embed)
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
320    
321  gzip:  libgnomecanvasmm2.6
322  linux-kernel (lib/inflate.c)          - ardour 1:2.7.1-1 (embed)
 klibc (based on linux-kernel gzip code)  
 busybox  
323    
324  neon:  libsigc++-2.0
325  cadaver (all, but being worked on: #188381)          - ardour 1:2.7.1-1 (embed)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
326    
327  libmodplug:  soundtouch
328  gst-plugins-bad0.10          - ardour 1:2.7.1-1 (embed)
329    
330  libvncserver:  libmms
331  vino          - xine-lib <unfixed> (embed)
332            - mimms <unfixed> (embed)
333    
334  putty:  fckeditor
335  filezilla          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
336            - moin 1.8.2-2 (embed; bug #452599)
337            - karrigell <removed> (embed; bug #452598)
338            - gforge 4.6.99+svn6225-1 (embed)
339            - request-tracker3.8 <unfixed> (embed)
340    
341  tinyxml (not packaged in Debian):  ipatlas (not packaged in Debian)
342  filezilla          - moodle <unfixed> (embed; bug #507185)
343    
344  gv:  libphp-phpmailer
345  evince (ps/ tree from gv 3.5.8)          - moodle <unfixed> (embed; bug #507185)
346  evince-gtk (not packaged in Debian)          - mahara <unfixed> (embed)
347            - symfony <unfixed> (embed)
348            [etch] - phpgroupware <unfixed> (embed)
349            NOTE: phpgroupware-felamimail is only in etch
350            - egroupware <unfixed> (embed; bug #504283)
351            - glpi <unfixed>
352    
353  libXbae:  htmlArea (not packaged in Debian)
354  libpawlib2-lesstif package (from Cernlib)          - moodle <unfixed> (embed)
355    
356  libXaw:  giflib:
357  libpawlib2-lesstif package (from Cernlib)          - wine <unfixed> (embed; bug #466181)
358    
359  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  bennu (not packaged in Debian, http://bennu.sourceforge.net)
360            - moodle <unfixed> (embed)
361    
362  libgd2:  smarty:
363  graphviz (lib/gd seems to be 2.0.33)          - moodle 1.8.2-2 (embed; bug #471158)
364            - gallery2 2.2.5-2 (embed; bug #471160)
365            - mahara 0.9.2-2 (embed; bug #471201)
366            - gosa 2.4beta1-1 (embed; bug #471200)
367    
368  rar:  TinyMCE
369  unrar-nonfree          - wordpress 2.5.1-3 (embed; bug #478257)
370            - moodle <unfixed> (embed; bug #507185)
371  unrar-free: (maybe this code is derived from the original rar, too?)          - knowledgeroot <unfixed> (embed)
372  clamav (seems to be disabled in default config)          - joomla <itp> (bug #326398)
373    
374  mplayer (DirectMedia Object loader):  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
375  xine-lib (src/libw32dll/)          - scite <unfixed> (embed)
376  vlc (modules/codec/dmo/)          - qscintilla <unfixed> (embed)
377            - qscintilla2 <unfixed> (embed)
378            - geany <unfixed> (fork)
379            - anjuta <unfixed> (embed)
380    
381    libphp-adodb
382            - moodle <unfixed> (embed; bug #507185)
383            NOTE: also AdoDB-XML Schema
384            - gallery2 <unfixed> (embed)
385            - phppgadmin <unfixed> (embed)
386            - egroupware <unfixed> (embed)
387            - phpwiki <unfixed> (embed)
388            - torrentflux 2.0beta1-2 (embed)
389            - ipplan <unfixed> (embed)
390            - typo3-src <unfixed> (embed)
391            - cacti <unknown> (embed)
392            [sarge] - cacti <unfixed> (embed)
393            NOTE: dependency exists, but internal version is used
394            - gforge 4.7~rc2-6 (embed)
395            - mahara <unfixed> (embed)
396    
397    gzip
398            - linux-kernel <unfixed> (embed)
399            NOTE: lib/inflate.c
400            - klibc <unfixed> (embed)
401            NOTE: based on linux-kernel gzip code
402            - busybox <unfixed> (embed)
403    
404    neon
405            - cadaver 0.22.3+debian-1 (embed; bug #188381)
406            - gnome-vfs2 <unfixed> (embed; bug #395874)
407            [etch] - litmus <unfixed> (embed; #395875)
408            - litmus <removed> (embed; #395875)
409            [sarge] - screem <unfixed> (embed)
410            - sitecopy 1:0.16.3-5 (embed; bug #395876)
411            [etch] - tla <unfixed> (embed; bug #395877)
412            [sarge] - tla <unfixed> (embed; bug #395877)
413    
414    libmodplug
415            - gst-plugins-bad0.10 <unfixed> (embed)
416    
417    libvncserver
418            - vino <unfixed> (embed)
419    
420    putty
421            - filezilla <unfixed> (embed)
422    
423    tinyxml (not packaged in Debian)
424            - filezilla <unfixed>
425    
426    gv
427            - evince <unfixed> (embed)
428            NOTE: ps/ tree from gv 3.5.8
429            - evince-gtk <unfixed> (embed)
430            NOTE: not packaged in Debian
431    
432    libXbae
433            [etch] - libpawlib2-lesstif <unfixed> (embed)
434            NOTE: from Cernlib
435    
436    libgtkhtml
437            - claws-mail-html2-viewer <unfixed> (fork)
438    
439    libXaw
440            [etch] - libpawlib2-lesstif <unfixed>
441            NOTE: from Cernlib
442            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
443    
444    libgd2
445            - graphviz <unfixed> (embed)
446            NOTE: lib/gd seems to be 2.0.33
447            - wml <unfixed> (embed)
448            - libwmf <unfixed> (embed)
449            NOTE: derived from gd 1.6.3
450    
451    rar
452            - unrar-nonfree <unfixed> (embed)
453    
454    unrar-free (maybe this code is derived from the original rar, too?)
455            - clamav <unfixed> (embed)
456            NOTE: seems to be disabled in default config
457    
458    mplayer (DirectMedia Object loader)
459            - xine-lib <unfixed> (embed)
460            NOTE: src/libw32dll/
461            - vlc <unfixed> (embed)
462            NOTE: modules/codec/dmo/
463            - mplayer 1.0~rc2-20 (embed)
464    
465    libwpd (WordPerfect converter)
466            - openoffice.org <unfixed> (embed)
467    
468    fsplib (http://sourceforge.net/projects/fsp/)
469            - gftp <unfixed> (embed)
470            NOTE: lib/fsplib version 0.3
471    
472    sprng
473            - tree-puzzle <unfixed> (embed)
474    
475    librpcsecgss
476            - krb5 <unfixed> (embed)
477    
478    jasper
479            - ghostscript <unfixed> (embed)
480            - gs-gpl <unfixed> (embed)
481    
482    libiris
483            - psi <unfixed> (embed)
484            - kdenetwork <unfixed> (embed)
485            NOTE: kopete embeds libiris but links dynamically to libidn
486            - kdegames <unfixed> (embed)
487            NOTE: ksirk/kde4
488    
489    libidn
490            - monotone 0.43-1 (embed)
491            - psi <unfixed> (embed)
492            NOTE: psi embeds libiris which embeds libidn
493            - kdegames <unfixed> (embed)
494            NOTE: kdegames/kde4 embeds libiris which embeds libidn
495    
496    liblua
497            - monotone 0.43-1 (embed)
498            - nmap <unfixed> (embed; bug #527997)
499            NOTE: fixed upstream as of nmap svn rev13336.
500    
501    libbotan
502            - monotone 0.43-1 (embed)
503    
504    NetXX
505            - monotone 0.43-1 (embed)
506    
507    libgc
508            - mono <unfixed> (embed)
509    
510    lzma
511            - p7zip <unfixed> (embed)
512            - xz-utils <unfixed> (fork)
513    
514    lzo
515            - grub2 <unfixed> (embed)
516    
517    yassl
518            - mysql-dfsg-5.0 <unfixed> (embed)
519    
520    pax code
521            - tar <unfixed> (embed)
522            - cpio <unfixed> (embed)
523    
524    t1lib
525            - tetex-bin 2.0.2-1 (embed)
526            - texlive-bin <unknown> (embed)
527    
528    guichan
529            - boswars <unfixed> (embed)
530            NOTE: maintainer notified us, working on it
531    
532    tolua
533            - boswars <unfixed> (embed)
534            NOTE: maintainer notified us, working on it
535    
536    asio-dev
537            - luxrender <unfixed> (embed)
538            NOTE: maintainer notified us, working on it
539            NOTE: may be merged with boost "soon"
540    
541  libwpd (WordPerfect converter):  xine-lib
542  openoffice.org          - vlc <unfixed> (embed)
543            NOTE: only parts included in modules/access/rtsp
544    
545  fsplib (http://sourceforge.net/projects/fsp/):  netpbm
546  gftp (lib/fsplib version 0.3)          - tcl8.3 <unfixed> (embed)
547            - tcl8.4 <unfixed> (embed)
548            - tcl8.5 <unfixed> (embed)
549            NOTE: generic/tkImgGIF.c
550    
551    tk8.5
552            - tk8.0 <removed> (old-version)
553            - tk8.3 <unfixed> (old-version)
554            - tk8.4 <unfixed> (old-version)
555            - perl-tk <unfixable> (fork)
556    
557    samba
558            - mc 2:4.6.2~git20080311-1 (embed)
559            NOTE: maintainer is aware of this, currently searching a solution
560    
561    plib1.8.4c2
562            - boson <unfixed> (fork)
563            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
564    
565    fribidi
566            - quesoglc <unfixed> (embed)
567            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
568    
569    glew
570            - quesoglc <unfixed> (embed; bug #489341)
571            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
572    
573    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
574            - transcend <unfixed> (embed)
575            - cultivation <unfixed> (embed)
576            - passage <unfixed> (embed)
577            - gravitation <unfixed> (embed)
578    
579  librpcsecgss:  tar
580  krb5          - libarchive <unfixed> (embed)
581            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
582    
583  jasper:  cpio
584  ghostscript          - libarchive <unfixed> (embed)
585  gs-gpl          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
586    
587  libidn:  webkit
588  monotone          - qt4-x11 <unfixed> (embed)
589    
590  liblua:  ftgl
591  monotone          - blender 2.46+dfsg-1 (embed)
592    
593  libbotan:  wv
594  montone          - abiword <unfixed>
595    
596    qemu
597            - kvm <unfixed> (embed)
598            - xen-3 <unfixed> (embed)
599            - xen-unstable <unfixed> (embed)
600    
601    vgabios
602            - kvm <unfixed> (embed; bug #489442)
603    
604    bochs
605            - kvm <unfixed> (embed; bug #489442)
606    
607    speex
608            - vorbis-tools <unfixed> (embed)
609            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
610            - gst-plugins-good0.10 <unfixed> (embed)
611            - xine-lib <unfixed> (embed)
612            - libfishsound <unfixed> (embed)
613            - libannodex <unfixed> (embed)
614            - vlc <unfixed> (embed)
615            - xmms-speex <unfixed> (embed)
616            - libsdl-sound1.2 <unfixed> (embed)
617            - sweep <unfixed> (embed)
618    
619    libreadline
620            - magic <unfixed> (old-version)
621            NOTE: magic is currently an RFS
622    
623    opcode
624            - ode <unfixed> (embed)
625            NOTE: opcode is not a package in debian, it is just embedded
626            NOTE: http://www.codercorner.com/Opcode.htm
627    
628    gimpact
629            - ode <unfixed> (embed)
630            NOTE: gimpact is not a package in debian, it is just embedded
631            NOTE: http://gimpact.sf.net
632    
633    mochikit
634            - mahara <unfixed> (embed)
635            NOTE: they require extra patches, still unmerged upstream
636            - ntop <unfixed> (embed)
637            - coherence <unfixed> (embed)
638            NOTE: python-coherence
639            - paste <unfixed> (embed)
640            NOTE: python-paste
641            - turbogears <unfixed> (embed)
642            NOTE: python-turbogears
643            - plone3 <unfixed> (embed)
644            NOTE: zope-plone3
645    
646    prototype
647            - netbeans-ide <unfixed> (embed)
648            - auth2db-frontend <unfixed> (embed)
649            - webcit <unfixed> (embed)
650            NOTE: citadel-webcit
651            - asterisk <unfixed> (embed)
652            - doc-iana <unfixed> (embed)
653            - libaws <unfixed> (embed)
654            NOTE: libaws-doc
655            - libgettext-ruby <unfixed> (embed)
656            NOTE: libgettext-ruby-data
657            - libjson-ruby <unfixed> (embed)
658            NOTE: libjson-ruby-doc
659            - lucene2 <unfixed> (embed)
660            NOTE: liblucene2-java-doc
661            - libopenid-ruby <unfixed> (embed)
662            - solr <unfixed> (embed)
663            NOTE: solr-common
664            - glpi <unfixed> (embed)
665            - hobbix <unfixed> (embed)
666            - mnemo2 <unfixed> (embed)
667            - nag2 <unfixed> (embed)
668            - knowledgeroot <unfixed> (embed)
669            - mediatomb <unfixed> (embed)
670            NOTE: mediatomb-common
671            - mt-daapd <unfixed> (embed)
672            - op-panel <unfixed> (embed)
673            - ebug-http <unfixed> (embed)
674            - phpgedview <removed> (embed)
675            - poker-network <unfixed> (embed)
676            NOTE: poker-web
677            - webhelpers <unfixed> (embed)
678            NOTE: python-webhelpers
679            - qwik <unfixed> (embed)
680            - rails <unfixed> (embed)
681            - typo3-src <unfixed> (embed)
682            - wordpress <unfixed> (embed)
683            - zope <unfixed> (embed)
684            NOTE: zope-plone3
685            - smokeping <unfixed> (embed)
686            - ampache 3.4.1-2 (embed)
687            - exaile <unfixed> (embed)
688            - hobix <unfixed> (embed)
689            - pixelpost <unfixed> (embed)
690            - symfony <unfixed> (embed)
691            NOTE: it's been said that there are custom changes
692            - zabbix <unfixed> (embed)
693            NOTE: zabbix-frontend-php
694            - turba2 <unfixed> (embed)
695    
696    gdb
697            - insight <unfixed> (embed)
698    
699    e2fsprogs
700            - ldiskfsprogs <unfixable> (fork)
701    
702    quazip (not packaged in Debian)
703            - qcake <unfixed> (embed)
704            NOTE: starting with upstream version 0.6.4
705    
706    exo
707            - pcmanfm <unfixed> (embed; bug #499677)
708            NOTE: slightly modified source code
709    
710    java
711            - openjdk-6 <unfixed>
712            - sun-java5 <unfixed>
713            - sun-java6 <unfixed>
714    
715    libphp-snoopy
716            - ampache 3.4.1-2 (embed; bug #504169)
717            - mahara 1.0.5-2 (embed; bug #504170)
718            - pixelpost 1.7.1-5 (embed; bug #504171)
719            - mediamate 0.9.3.6-5 (embed; bug #504172)
720            - opendb <removed> (embed; bug #504173)
721            [etch] - opendb <unfixed> (embed; bug #504173)
722            - wordpress 2.5.1-9 (embed; bug #443948)
723            - moodle <unfixed> (embed; bug #507185)
724            [etch] - phpgroupware <unfixed> (embed)
725            NOTE: phpgroupware-felamimail
726            - magpierss 0.72-3 (embed; bug #431089)
727    
728    jquery
729            - zekr <unfixed> (embed)
730            - wordpress <unfixed> (embed)
731            - yocto-reader <unfixed> (embed)
732            - textpattern <unfixed> (embed)
733            - genshi 0.5.1-1 (embed)
734            NOTE: compressed file under examples/ dir
735            - prewikka <unfixed> (embed)
736            - libramaze-ruby <unfixed> (embed)
737            - drupal5 <unfixed> (embed)
738            - b2evolution <unfixed> (embed)
739            - wesnoth <unfixed> (embed)
740    
741    tablesorter (jquery plugin, not packaged yet)
742            - wesnoth <unfixed> (embed)
743    
744    kses
745            - wordpress <unfixed> (embed; bug #504242)
746            NOTE: their copy has all methods renamed to wp_<foo>
747            - moodle <unfixed> (embed; bug #507185)
748            - egroupware <unfixed> (embed)
749    
750    magpierss
751            - wordpress <unfixed> (embed; bug #504242)
752            - moodle <unfixed>
753    
754    php-gettext
755            - wordpress <unfixed> (embed; bug #504242)
756    
757    libphp-ixr (name may change, it is the Incutio XML-RPC)
758            - wordpress <unfixed> (embed; bug #504242)
759            - dokuwiki <unfixed> (embed)
760            - textpattern <unfixed> (embed)
761    
762    libphp-cas
763            - glpi <unfixed> (embed)
764            - moodle <unfixed> (embed; bug #505984)
765    
766    scriptaculous
767            - glpi <unfixed> (embed)
768            - libaws <unfixed> (embed)
769            NOTE: libaws-doc
770            - op-panel <unfixed> (embed)
771            - symfony <unfixed> (embed)
772            NOTE: maintainer says there are extra incompatible changes required
773            - pixelpost <unfixed> (embed)
774            - webhelpers <unfixed> (embed)
775            NOTE: python-webhelpers
776            - qwik <unfixed> (embed)
777            - smokeping <unfixed> (embed)
778            - turba2 <unfixed> (embed)
779            - typo3-src 4.2.3-1 (embed)
780    
781    libmarkdown-php
782            - moodle <unfixed> (embed; bug #507185)
783            - pixelpost <unfixed> (embed)
784    
785    php-openid
786            - wordpress-openid <itp> (embed)
787    
788    geshi
789            - dokuwiki 0.0.20080505-3.1 (embed)
790            - pgfouine 1.0-1.1 (embed)
791            - websvn 2.1.0-1 (embed)
792    
793    webcalendar
794            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
795    
796    libical
797            - kdepim <unfixed> (fork)
798            - kdepimlibs <unfixed> (fork)
799            NOTE: fixed in KDE4 post 4.1.x series
800            - claws-mail-vcalendar-plugin <unfixed> (fork)
801    
802    libltdl3
803            - kdelibs <unfixed> (embed)
804            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
805            - synfig <unfixed> (embed)
806    
807    harfbuzz
808            - qt4-x11 <unfixed> (embed)
809    
810    libzip
811            - php5 <unfixed> (fork)
812            - odt2txt <unfixed> (embed; bug #523808)
813    
814    json.php (not packaged; should be replaced with php's built-in functions)
815            - moodle <unfixed>
816            - yui <unfixed>
817            - gallery2 <unfixed>
818            - dokuwiki <unfixed>
819            - typo3-src <unfixed>
820    
821    php-fpdf
822            - tcpdf <itp> (fork)
823            - moodle <unfixed>
824            - phpwiki <unfixed>
825            - egroupware <unfixed>
826            - ldap-account-manager <unfixed> (fork)
827    
828    tcpdf (itp: #495985)
829            - moodle <unfixed>
830            - phpmyadmin <unfixed>
831    
832  NetXX:  typo3
833  monotone          - moodle <unfixed>
834    
835  libgc:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
836  mono          - moodle <unfixed>
837            - gosa <unfixed>
838    
839    php-ole (itp: #487558)
840            - moodle <unfixed>
841    
842    pieforms (http://www.catalyst.net.nz)
843            - mahara <unfixed>
844    
845    savant2 (http://phpsavant.com)
846            - egroupware <unfixed>
847    
848    rssparser (http://nwow.org)
849            - egroupware <unfixed>
850            - phpgroupware <unfixed>
851    
852    lcms
853            - openjdk-6 <unfixed> (fork)
854    
855    libphp-phplayersmenu
856            - diogenes <unfixed>
857            - phpldapadmin <unfixed>
858    
859    libphp-pclzip
860            - docvert <unfixed>
861            - moodle <unfixed>
862            - egroupware <unfixed>
863    
864    libphp-simplepie
865            - dokuwiki <unfixed>
866    
867    libphp-jpgraph
868            - egroupware <unfixed>
869    
870    php-simpletest
871            - moodle <unfixed>
872    
873    libpng
874            - iceweasel <unfixed> (embed)
875            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
876            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
877            - iceape 1.0.13~pre080614i-0etch1 (embed)
878            - xulrunner <unfixed> (embed)
879            NOTE: Debian 1.9.0.6 uses embedded copy
880            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
881            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
882            NOTE: Ubuntu only
883            - firefox-3.0 <unfixed> (embed)
884            NOTE: Ubuntu only
885            - firefox-3.1 <unfixed> (embed)
886            NOTE: Ubuntu only
887            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
888            NOTE: Ubuntu only
889            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
890            NOTE: Ubuntu only
891            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
892            NOTE: Ubuntu only
893    
894    irssi
895            - silc-client <unfixed> (embed)
896            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
897    
898    extc
899            - mtasc <unfixed> (embed)
900            - haxe <unfixed> (embed)
901    
902    swflib
903            - mtasc <unfixed> (embed)
904            - haxe <unfixed> (embed)
905    
906    libitext-java
907            - bouncycastle 2.1.4-1 (embed)
908    
909    python-ply
910            - pyke <unfixed> (embed)
911    
912    libdumbnet (libdnet upstream)
913            - nmap <unfixed> (fork)
914    
915    gcc-4.4
916            - gcc-mingw32 <unfixed> (embed)
917    
918    camlimages
919            - advi <unfixed> (embed)
920    
921    memcached
922            - memcachedb <unfixed> (embed)
923    
924    yajl (ITP: #537199)
925            - argyll <unfixed> (embed)
926            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
927    
928    libept:
929            - adept <unfixed> (embed; bug #540649)
930    
931    libvorbis:
932            - xulrunner <unfixed> (embed; bug #540959)
933    
934    php-net-dnsbl:
935            - serendipity <unfixed> (embed)
936    
937  lzma:  php-onyx-rss:
938  p7zip          - serendipity <unfixed> (embed)
939    
940  lzo:  php-text-wiki:
941  grub2          - serendipity <unfixed> (embed)
942    
943  pax code:  php-xml-rpc:
944  tar          - serendipity <unfixed> (embed)
 cpio  

Legend:
Removed from v.7463  
changed lines
  Added in v.12625

  ViewVC Help
Powered by ViewVC 1.1.5