/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7487 by jamie-guest, Mon Dec 3 21:58:43 2007 UTC revision 11344 by jamie-guest, Fri Mar 6 16:59:34 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp> or <unknown> if the version number can not be determined
15  ruby-gnome2 (has a copy of poppler but links against the shared lib)          <unfixable> for unavoidable cases (e.g., forks that add real value)
16    sort: static (linking statically against a lib)
17  silc-toolkit:        embed (embedding a copy of the library into another source package)
18  silc-client (uses libsilc and libsilcclient)        fork (the package is not just embedding code but it is a fork and
19                thus might share parts of the source code)
20  dietlibc:        old-version (the package is an older version of essentially
21  ccontrol (links statically)                     the same code)
22    
23  libiax:  The srcpkg might be some string to identify the code if there is no
24  iaxmodem  specific source package.
25    
26  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  Everything up to the next line is ignored.
27  dpkg  ---BEGIN
28  rsync (somehow derived code base)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  mono          NOTE: Fixed packages link to poppler library unless otherwise noted
30  mozilla(?)          - gpdf <removed>
31  Linux kernels          [sarge] - gpdf <unfixed>
32  pvpgn (links dynamically since 1.7.8-2)          NOTE: has been replaced by evince in etch
33  mrtg (links dynamically since 2.12.2-1)          - pdftohtml <unknown>
34  rpm          [sarge] - pdftohtml <unfixed>
35            [etch] - pdftohtml <unfixed>
36  libbz2:          NOTE: has been replaced by poppler-utils
37  dpkg (statically linked)          - kdegraphics <unfixed> (embed; bug #436164)
38            NOTE: the kpdf replacement in KDE 4 is using poppler
39  libgadu/ekg:          - texlive-base 3.0-12 (embed)
40  centericq          - texlive-bin 2007-1 (embed)
41  gaim          NOTE: links to poppler
42  pigdin (links dynamically against libgadu)          - koffice <unfixed> (embed; bug #436163)
43  kopete (ships the code, but links dynamically in the Debian package)          - libextractor 0.5.12-1 (embed)
44  kadu (not packaged in Debian)          NOTE: libextractor is using its own pdf decoder now
45  GNU gadu (not yet packaged in Debian)          - libextractor 0.5.12-1 (embed)
46            - pdfkit.framework 0.8-4 (embed)
47  xmlrpc: (which package is the "origin" of this code?)          - ipe <unfixed> (embed)
48  drupal          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
49  phpgroupware          - ruby-gnome2 <unknown> (embed)
50  egroupware          NOTE: copy only present in source but links to poppler
51  phpwiki          - pdfedit <unfixed> (embed; bug #510794)
52  php4 (php-pear, IIRC this was reorganized some weeks ago?)  
53    ppmd
54  shtool: (affects build-time only)          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
55  mysql-ocaml  
56  php4  peercast
57            - gnome-peercast <unfixed> (embed)
58  mozilla:          NOTE: gnome-peercast may better be removed, see #466539
59  mozilla-firefox  
60  mozilla-thunderbird  silc-toolkit
61  firefox (to be removed)          - silc-client 1.1~beta6-1 (embed)
62  thunderbird (to be removed)  
63  iceweasel  dietlibc
64  iceape          - ccontrol 0.9.1+20071204-1 (static)
65  icedove  
66  xulrunner  libmikmod
67  nvu (no longer in Debian)          - sdl-mixer1.2 <unfixed> (embed)
68            TODO: report bug
69  xli:  
70  xloadimage  libiax
71            - iaxmodem <unfixed> (embed)
72  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
73  openmotif  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
74  xfree86/xorg (in libxpm)          - dpkg <unfixed> (embed)
75            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
76  kerberized apps with BSD origin:          - rsync <unfixed> (embed)
77  krb4          NOTE: somehow derived code base
78  krb5          - mono <unfixed> (embed)
79  heimdal          TODO: check mozilla
80            - Linux kernels <unfixed> (embed)
81  grip: (which pkg is the origin?)          - pvpgn 1.7.8-2 (embed)
82  libcdaudio          - mrtg 2.12.2-1 (embed)
83  grip          - rpm <unknown> (embed)
84  gnome-vfs (vfs2 as well?)          NOTE: pinged anibal since when rpm was fixed
85            - tuxcmd-modules <itp> (embed; bug #508082)
86  fudforum:  
87  phpgroupware-fudforum  libbz2
88  egroupware-fudforum (removed from egroupware after sarge)          - dpkg <unfixed> (static)
89    
90  cvs:  libgadu:
91  gcvs (at least an additional script is included, check if there's more)          - centericq <unfixed> (embed)
92            - gaim <unfixed> (embed)
93  pcre:          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
94  all pythons          - kopete 4:3.3.2-5 (embed)
95  php4 (src included, but Debian package links dynamically)          - kadu 0.6.0.2-3 (embed)
96  analog (src included, but Debian package links dynamically)          - gadu <unfixed> (embed)
97  libgoffice-1          - ekg 1:1.8~rc0-1 (embed)
98  vfu (#450754)          - kadu 0.6.0.2-3 (embed; bug #504430)
99  tf5 (since 5.0beta7 the Debian package links dynamically)          NOTE: gadu not packaged in Debian yet
100  monotone (including this starting from 0.37)  
101  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)  xmlrpc (which package is the "origin" of this code?)
102  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)          - drupal <unfixed> (embed)
103  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)          - phpgroupware <unfixed> (embed)
104            - egroupware <unfixed> (embed)
105  tiff:          - phpwiki (embed)
106  wxpythongtk (check, which debian pkg this is in)          - php4 <unfixed> (embed)
107  older kdegraphics/kpdf releases < 3.3 embedded a copy          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
108    
109  uudeview:  shtool (affects build-time only)
110  libconvert-uulib-perl          - mysql-ocaml <unfixed> (embed)
111            - php4 <unfixed> (embed)
112  sqlite: (not affected by security vulnerabilities so far)  
113  amarok  mozilla source code
114  monotone          - mozilla-firefox <unfixed> (embed)
115  iceweasel          - mozilla-thunderbird
116            - firefox <removed>
117  util-linux/mount:          [etch] - firefox <unfixed> (embed)
118  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - thunderbird <removed>
119            [etch] - thunderbird <unfixed> (embed)
120  webmin:          - iceweasel <unfixed> (embed)
121  usermin (only in sarge)          - iceape <unfixed> (embed)
122            - icedove <unfixed> (embed)
123  sylpheed:          - xulrunner <unfixed> (embed)
124  sylpheed-claws          - nvu <removed> (embed)
125    
126  phpsysinfo:  xli
127  egroupware          - xloadimage <unfixed> (embed)
128  phpgroupware  
129    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
130  phpldapadmin:          - openmotif <unfixed> (embed)
131  egroupware (removed from egroupware after sarge)          - xfree86/xorg <unfixed> (embed)
132            NOTE: in libxpm
133  chmlib:  
134  kchmviewer (ships the code but links dynamically)  kerberized apps with BSD origin
135            - krb4 <unfixed> (embed)
136  libavcodec/libavformat (source: ffmpeg):          - krb5 <unfixed> (embed)
137  mplayer (#395252)          - heimdal <unfixed> (embed)
138  xvidcap  
139  kino (links statically, does not include code)  grip (which pkg is the origin?)
140  vlc (links statically, does not include code)          - libcdaudio
141  smilutils (links statically, does not include code)          - grip
142  motion (links statically, does not include code)          - gnome-vfs
143  gst-ffmpeg          TODO: check vfs2 as well
144  gstreamer0.10-ffmpeg  
145  xmovie  fudforum
146            - phpgroupware-fudforum <unfixed> (embed)
147            - egroupware-fudforum <removed>
148            [sarge] - egroupware-fudforum <unfixed> (embed)
149    
150    cvs
151            - gcvs <unfixed> (embed)
152            NOTE: see cvsunix/src in tarball
153    
154    pcre
155            - python* <unfixed> (embed)
156            - php4 <unknown> (embed)
157            - analog 2:5.23-0woody1 (embed)
158            - libgoffice-1 <unfixed> (embed)
159            - vfu 4.06-4.1 (embed; bug #450754)
160            - tf5 5.0beta7-1 (embed)
161            - monotone <unfixed> (embed)
162            NOTE: this only affects versions >= 0.37
163            - glib2.0 2.15.2-1 (embed)
164            - apache2 2.0.53-4 (embed)
165            - exim4 4.10-0.srh20.12 (embed)
166            - yacas <unfixed> (embed)
167            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
168            - gtamsanalyzer.app 0.42-5 (embed)
169            - tin <unknown> (embed)
170            - kazehakase 0.5.2-1
171            - webkit <unfixed> (embed)
172            - qt4-x11 <unfixed> (embed)
173            NOTE: embedded via webkit copy
174    
175    tiff
176            - wxwindows2.4 2.2.1 (embed)
177    
178    uudeview
179            - libconvert-uulib-perl <unfixed> (embed)
180            - pan <unfixed> (embed)
181    
182    sqlite (not affected by security vulnerabilities so far)
183            - amarok <unfixed> (embed)
184            - monotone <unfixed> (embed)
185            - iceweasel <unfixed> (embed)
186    
187    util-linux/mount
188            - loop-aes-utils <unfixed> (embed)
189            NOTE: contains code from util-linux' mount in the mount-aes-udeb
190    
191    webmin
192            - usermin <unknown> (embed)
193            [sarge] - usermin <unfixed> (embed)
194    
195    sylpheed
196            - sylpheed-claws <unfixed> (fork)
197    
198    phpsysinfo
199            - egroupware <unfixed> (embed)
200            - phpgroupware <unfixed> (embed)
201    
202    phpldapadmin
203            [sarge] - egroupware <unfixed> (embed)
204            NOTE: removed from egroupware after sarge
205    
206    chmlib
207            - kchmviewer <unknown> (embed)
208    
209    libavcodec/libavformat (source: ffmpeg)
210            - mplayer 1.0~rc2-14 (embed; bug #395252)
211            - kino 1.0.0-1
212            - vlc <not-affected> (Links dynamically since initial release)
213            - smilutils 0.3.0-10
214            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
215            - motion 3.1.19-1
216            - gstreamer0.10-ffmpeg 0.10.3-2
217            - xmovie <unfixed>
218            TODO: gimp-gap (potentially using ffmpeg code as well)
219    
220    faad2
221            - mplayer 1.0~rc2-20 (embed)
222    
223    mad MPEG decoding lib
224            - mad <unfixed> (embed)
225            - xine-lib <unfixed> (embed)
226    
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
227  libdts  libdts
228  xine-lib          - xine-lib <unfixed> (embed)
229    
 flac:  
230  flac  flac
231  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
   
 libsndfile:  
 ardour  
   
 glibmm2.4:  
 ardour  
232    
233  libgnomecanvasmm2.6:  liba52
234  ardour          - a52dec <unfixed> (embed)
235            - xine-lib <unfixed> (embed)
236    
237  libsigc++-2.0:  libmpeg2
238  ardour          - mpeg2dec <unfixed> (embed)
239            - xine-lib <unfixed> (embed)
240    
241  soundtouch:  curl
242  ardour          - wget <unfixed> (embed)
243            NOTE: code for NTLM authentication
244    
245  libmms:  uw-imap
246  xine-lib          - pine <unfixed> (embed)
247  mimms          - alpine <unfixed> (embed)
   
 FCKeditor: (packaged as fckeditor)  
 knowledgeroot  
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
   
   
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
248    
249  gzip:  imagemagick
250  linux-kernel (lib/inflate.c)          - graphicsmagick <unfixed> (fork)
 klibc (based on linux-kernel gzip code)  
 busybox  
251    
252  neon:  halibut
253  cadaver (all, but being worked on: #188381)          - nsis <unfixed> (fork)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
254    
255  libmodplug:  libghttp
256  gst-plugins-bad0.10          - hotway <unfixed> (embed)
257    
258  libvncserver:  libsndfile
259  vino          - ardour 1:2.7.1-1 (embed)
260    
261  putty:  glibmm2.4
262  filezilla          - ardour 1:2.7.1-1 (embed)
263    
264  tinyxml (not packaged in Debian):  libgnomecanvasmm2.6
265  filezilla          - ardour 1:2.7.1-1 (embed)
266    
267  gv:  libsigc++-2.0
268  evince (ps/ tree from gv 3.5.8)          - ardour 1:2.7.1-1 (embed)
 evince-gtk (not packaged in Debian)  
269    
270  libXbae:  soundtouch
271  libpawlib2-lesstif package (from Cernlib)          - ardour 1:2.7.1-1 (embed)
272    
273  libXaw:  libmms
274  libpawlib2-lesstif package (from Cernlib)          - xine-lib <unfixed> (embed)
275            - mimms <unfixed> (embed)
276    
277  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  fckeditor
278            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
279            - moin 1.8.2-2 (embed; bug #452599)
280            - karrigell <removed> (embed; bug #452598)
281            - gforge 4.6.99+svn6225-1 (embed)
282    
283  libgd2:  ipatlas (not packaged in Debian)
284  graphviz (lib/gd seems to be 2.0.33)          - moodle <unfixed> (embed; bug #507185)
285    
286  rar:  libphp-phpmailer
287  unrar-nonfree          - moodle <unfixed> (embed; bug #507185)
288            - mahara <unfixed> (embed)
289            - symfony <unfixed> (embed)
290            - phpgroupware-felamimail <unfixed> (embed)
291            NOTE: phpgroupware-felamimail is only in etch
292            - egroupware <unfixed> (embed; bug #504283)
293            - glpi <unfixed>
294    
295  unrar-free: (maybe this code is derived from the original rar, too?)  htmlArea (not packaged in Debian)
296  clamav (seems to be disabled in default config)          - moodle <unfixed> (embed)
297    
298  mplayer (DirectMedia Object loader):  giflib:
299  xine-lib (src/libw32dll/)          - wine <unfixed> (embed; bug #466181)
 vlc (modules/codec/dmo/)  
300    
301  libwpd (WordPerfect converter):  bennu (not packaged in Debian, http://bennu.sourceforge.net)
302  openoffice.org          - moodle <unfixed> (embed)
303    
304  fsplib (http://sourceforge.net/projects/fsp/):  smarty:
305  gftp (lib/fsplib version 0.3)          - moodle 1.8.2-2 (embed; bug #471158)
306            - gallery2 2.2.5-2 (embed; bug #471160)
307            - mahara 0.9.2-2 (embed; bug #471201)
308            - gosa 2.4beta1-1 (embed; bug #471200)
309    
310  librpcsecgss:  TinyMCE
311  krb5          - wordpress 2.5.1-3 (embed; bug #478257)
312            - moodle <unfixed> (embed; bug #507185)
313  jasper:          - knowledgeroot <unfixed> (embed)
314  ghostscript          - joomla <itp> (bug #326398)
315  gs-gpl  
316    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
317            - scite <unfixed> (embed)
318            - qscintilla <unfixed> (embed)
319            - qscintilla2 <unfixed> (embed)
320            - geany <unfixed> (fork)
321            - anjuta <unfixed> (embed)
322    
323    libphp-adodb
324            - moodle <unfixed> (embed; bug #507185)
325            NOTE: also AdoDB-XML Schema
326            - gallery2 <unfixed> (embed)
327            - phppgadmin <unfixed> (embed)
328            - egroupware <unfixed> (embed)
329            - phpwiki <unfixed> (embed)
330            - ipplan <unfixed> (embed)
331            - typo3 <unfixed> (embed)
332            - cacti <unknown> (embed)
333            [sarge] - cacti <unfixed> (embed)
334            NOTE: dependency exists, but internal version is used
335            - gforge 4.7~rc2-6 (embed)
336            - mahara <unfixed> (embed)
337    
338    gzip
339            - linux-kernel <unfixed> (embed)
340            NOTE: lib/inflate.c
341            - klibc <unfixed> (embed)
342            NOTE: based on linux-kernel gzip code
343            - busybox <unfixed> (embed)
344    
345    neon
346            - cadaver <unfixed> (embed; bug #188381)
347            - gnome-vfs2 <unfixed> (embed; bug #395874)
348            - litmus <unfixed> (embed; #395875)
349            [sarge] - screem <unfixed> (embed)
350            - sitecopy <unfixed> (embed; bug #395876)
351            [etch] - tla <unfixed> (embed; bug #395877)
352            [sarge] - tla <unfixed> (embed; bug #395877)
353    
354    libmodplug
355            - gst-plugins-bad0.10 <unfixed> (embed)
356    
357    libvncserver
358            - vino <unfixed> (embed)
359    
360    putty
361            - filezilla <unfixed> (embed)
362    
363    tinyxml (not packaged in Debian)
364            - filezilla <unfixed>
365    
366    gv
367            - evince <unfixed> (embed)
368            NOTE: ps/ tree from gv 3.5.8
369            - evince-gtk <unfixed> (embed)
370            NOTE: not packaged in Debian
371    
372    libXbae
373            [etch] - libpawlib2-lesstif <unfixed> (embed)
374            NOTE: from Cernlib
375    
376    libXaw
377            [etch] - libpawlib2-lesstif
378            NOTE: from Cernlib
379            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
380    
381    libgd2
382            - graphviz <unfixed> (embed)
383            NOTE: lib/gd seems to be 2.0.33
384            - wml <unfixed> (embed)
385            NOTE: derived from gd 1.6.3
386    
387    rar
388            - unrar-nonfree <unfixed> (embed)
389    
390    unrar-free (maybe this code is derived from the original rar, too?)
391            - clamav <unfixed> (embed)
392            NOTE: seems to be disabled in default config
393    
394    mplayer (DirectMedia Object loader)
395            - xine-lib <unfixed> (embed)
396            NOTE: src/libw32dll/
397            - vlc <unfixed> (embed)
398            NOTE: modules/codec/dmo/
399            - mplayer 1.0~rc2-20 (embed)
400    
401    libwpd (WordPerfect converter)
402            - openoffice.org <unfixed> (embed)
403    
404    fsplib (http://sourceforge.net/projects/fsp/)
405            - gftp <unfixed> (embed)
406            NOTE: lib/fsplib version 0.3
407    
408    sprng
409            - tree-puzzle <unfixed> (embed)
410    
411    librpcsecgss
412            - krb5 <unfixed> (embed)
413    
414    jasper
415            - ghostscript <unfixed> (embed)
416            - gs-gpl <unfixed> (embed)
417    
418    libiris
419            - psi <unfixed> (embed)
420            - kdenetwork <unfixed> (embed)
421            NOTE: kopete embeds libiris but links dynamically to libidn
422            - kdegames <unfixed> (embed)
423            NOTE: ksirk/kde4
424    
425    libidn
426            - monotone <unfixed> (embed)
427            - psi <unfixed> (embed)
428            NOTE: psi embeds libiris which embeds libidn
429            - kdegames <unfixed> (embed)
430            NOTE: kdegames/kde4 embeds libiris which embeds libidn
431    
432    liblua
433            - monotone <unfixed> (embed)
434    
435    libbotan
436            - montone <unfixed> (embed)
437    
438    NetXX
439            - monotone <unfixed> (embed)
440    
441    libgc
442            - mono <unfixed> (embed)
443    
444    lzma
445            - p7zip <unfixed> (embed)
446    
447    lzo
448            - grub2 <unfixed> (embed)
449    
450    yassl
451            - mysql-dfsg-5.0 <unfixed> (embed)
452    
453    pax code
454            - tar <unfixed> (embed)
455            - cpio <unfixed> (embed)
456    
457    t1lib
458            - tetex-bin 2.0.2-1 (embed)
459            - texlive-bin <unknown> (embed)
460    
461    guichan
462            - boswars <unfixed> (embed)
463            NOTE: maintainer notified us, working on it
464    
465    tolua
466            - boswars <unfixed> (embed)
467            NOTE: maintainer notified us, working on it
468    
469    asio-dev
470            - luxrender <unfixed> (embed)
471            NOTE: maintainer notified us, working on it
472            NOTE: may be merged with boost "soon"
473    
474  libidn:  xine-lib
475  monotone          - vlc <unfixed> (embed)
476            NOTE: only parts included in modules/access/rtsp
477    
478  liblua:  netpbm
479  monotone          - tcl8.3 <unfixed> (embed)
480            - tcl8.4 <unfixed> (embed)
481            - tcl8.5 <unfixed> (embed)
482            NOTE: generic/tkImgGIF.c
483    
484    tk8.5
485            - tk8.0 <removed> (old-version)
486            - tk8.3 <unfixed> (old-version)
487            - tk8.4 <unfixed> (old-version)
488            - perl-tk <unfixable> (fork)
489    
490    samba
491            - mc 2:4.6.2~git20080311-1 (embed)
492            NOTE: maintainer is aware of this, currently searching a solution
493    
494    plib1.8.4c2
495            - boson <unfixed> (fork)
496            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
497    
498    fribidi
499            - quesoglc <unfixed> (embed)
500            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
501    
502    glew
503            - quesoglc <unfixed> (embed; bug #489341)
504            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
505    
506    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
507            - transcend <unfixed> (embed)
508            - cultivation <unfixed> (embed)
509            - passage <unfixed> (embed)
510            - gravitation <unfixed> (embed)
511    
512  libbotan:  tar
513  montone          - libarchive <unfixed> (embed)
514            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
515    
516  NetXX:  cpio
517  monotone          - libarchive <unfixed> (embed)
518            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
519    
520  libgc:  webkit
521  mono          - qt4-x11 <unfixed> (embed)
522    
523  lzma:  ftgl
524  p7zip          - blender 2.46+dfsg-1 (embed)
525    
526  lzo:  wv
527  grub2          - abiword <unfixed>
528    
529    qemu
530            - kvm <unfixed> (embed)
531            - xen-3 <unfixed> (embed)
532            - xen-unstable <unfixed> (embed)
533    
534    bochs
535            - kvm <unfixed> (embed; bug #489442)
536    
537    speex
538            - vorbis-tools <unfixed> (embed)
539            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
540            - gst-plugins-good0.10 <unfixed> (embed)
541            - xine-lib <unfixed> (embed)
542            - libfishsound <unfixed> (embed)
543            - libannodex <unfixed> (embed)
544            - vlc <unfixed> (embed)
545            - xmms-speex <unfixed> (embed)
546            - libsdl-sound1.2 <unfixed> (embed)
547            - sweep <unfixed> (embed)
548    
549    libreadline
550            - magic <unfixed> (old-version)
551            NOTE: magic is currently an RFS
552    
553    opcode
554            - ode <unfixed> (embed)
555            NOTE: opcode is not a package in debian, it is just embedded
556            NOTE: http://www.codercorner.com/Opcode.htm
557    
558    gimpact
559            - ode <unfixed> (embed)
560            NOTE: gimpact is not a package in debian, it is just embedded
561            NOTE: http://gimpact.sf.net
562    
563    mochikit
564            - mahara <unfixed> (embed)
565            NOTE: they require extra patches, still unmerged upstream
566            - ntop <unfixed> (embed)
567            - python-oherence <unfixed> (embed)
568            - python-paste <unfixed> (embed)
569            - python-turbogears <unfixed> (embed)
570            - zope-plone3 <unfixed> (embed)
571    
572    prototype
573            - netbeans-ide <unfixed> (embed)
574            - auth2db-frontend <unfixed> (embed)
575            - citadel-webcit <unfixed> (embed)
576            - asterisk <unfixed> (embed)
577            - doc-iana <unfixed> (embed)
578            - libaws-doc <unfixed> (embed)
579            - libgettext-ruby-data <unfixed> (embed)
580            - libjson-ruby-doc <unfixed> (embed)
581            - liblucene2-java-doc <unfixed> (embed)
582            - libopenid-ruby <unfixed> (embed)
583            - solr-common <unfixed> (embed)
584            - glpi <unfixed> (embed)
585            - hobbix <unfixed> (embed)
586            - mnemo2 <unfixed> (embed)
587            - nag2 <unfixed> (embed)
588            - knowledgeroot <unfixed> (embed)
589            - mediatomb-common <unfixed> (embed)
590            - mt-daapd <unfixed> (embed)
591            - op-panel <unfixed> (embed)
592            - ebug-http <unfixed> (embed)
593            - phpgedview <removed> (embed)
594            - poker-web <unfixed> (embed)
595            - python-webhelpers <unfixed> (embed)
596            - qwik <unfixed> (embed)
597            - rails <unfixed> (embed)
598            - typo3-src-4.1 <unfixed> (embed)
599            - wordpress <unfixed> (embed)
600            - zope-plone3 <unfixed> (embed)
601            - smokeping <unfixed> (embed)
602            - ampache 3.4.1-2 (embed)
603            - exaile <unfixed> (embed)
604            - hobix <unfixed> (embed)
605            - pixelpost <unfixed> (embed)
606            - symfony <unfixed> (embed)
607            NOTE: it's been said that there are custom changes
608            - zabbix-frontend-php <unfixed> (embed)
609            - turba2 <unfixed> (embed)
610    
611    gdb
612            - insight <unfixed> (embed)
613    
614    e2fsprogs
615            - ldiskfsprogs <unfixable> (fork)
616    
617    quazip (not packaged in Debian)
618            - qcake <unfixed> (embed)
619            NOTE: starting with upstream version 0.6.4
620    
621    exo
622            - pcmanfm <unfixed> (embed; bug #499677)
623            NOTE: slightly modified source code
624    
625    java
626            - openjdk-6 <unfixed>
627            - sun-java5 <unfixed>
628            - sun-java6 <unfixed>
629    
630    libphp-snoopy
631            - ampache 3.4.1-2 (embed; bug #504169)
632            - mahara 1.0.5-2 (embed; bug #504170)
633            - pixelpost <unfixed> (embed; bug #504171)
634            - mediamate 0.9.3.6-5 (embed; bug #504172)
635            - opendb <unfixed> (embed; bug #504173)
636            - wordpress 2.5.1-9 (embed; bug #443948)
637            - moodle <unfixed> (embed; bug #507185)
638            - phpgroupware-felamimail <unfixed> (embed)
639            NOTE: phpgroupware-felamimail is only in etch
640            - magpierss 0.72-3 (embed; bug #431089)
641    
642    jquery
643            - zekr <unfixed> (embed)
644            - wordpress <unfixed> (embed)
645            - yocto-reader <unfixed> (embed)
646            - textpattern <unfixed> (embed)
647            - genshi 0.5.1-1 (embed)
648            NOTE: compressed file under examples/ dir
649            - prewikka <unfixed> (embed)
650            - libramaze-ruby <unfixed> (embed)
651            - drupal5 <unfixed> (embed)
652            - b2evolution <unfixed> (embed)
653            - wesnoth <unfixed> (embed)
654    
655    tablesorter (jquery plugin, not packaged yet)
656            - wesnoth <unfixed> (embed)
657    
658    kses
659            - wordpress <unfixed> (embed; bug #504242)
660            NOTE: their copy has all methods renamed to wp_<foo>
661            - moodle <unfixed> (embed; bug #507185)
662            - egroupware <unfixed> (embed)
663    
664    magpierss
665            - wordpress <unfixed> (embed; bug #504242)
666            - moodle <unfixed>
667    
668    php-gettext
669            - wordpress <unfixed> (embed; bug #504242)
670    
671    libphp-ixr (name may change, it is the Incutio XML-RPC)
672            - wordpress <unfixed> (embed; bug #504242)
673            - dokuwiki <unfixed> (embed)
674            - textpattern <unfixed> (embed)
675    
676    libphp-cas
677            - glpi <unfixed> (embed)
678            - moodle <unfixed> (embed; bug #496069)
679    
680    scriptaculous
681            - glpi <unfixed> (embed)
682            - libaws-doc <unfixed> (embed)
683            - op-panel <unfixed> (embed)
684            - symfony <unfixed> (embed)
685            NOTE: maintainer says there are extra incompatible changes required
686            - pixelpost <unfixed> (embed)
687            - python-webhelpers <unfixed> (embed)
688            - qwik <unfixed> (embed)
689            - smokeping <unfixed> (embed)
690            - turba2 <unfixed> (embed)
691            - typo3-src 4.2.3-1 (embed)
692    
693    libmarkdown-php
694            - moodle <unfixed> (embed; bug #507185)
695            - pixelpost <unfixed> (embed)
696    
697    php-openid
698            - wordpress-openid <itp> (embed)
699    
700    geshi
701            - dokuwiki 0.0.20080505-3.1 (embed)
702            - pgfouine 1.0-1.1 (embed)
703            - websvn 2.1.0-1 (embed)
704    
705    webcalendar
706            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
707    
708    libical
709            - kdepim <unfixed> (fork)
710            - kdepimlibs <unfixed> (fork)
711            NOTE: fixed in KDE4 post 4.1.x series
712    
713    libltdl3
714            - kdelibs <unfixed> (embed)
715            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
716            - synfig <unfixed> (embed)
717    
718    harfbuzz
719            - qt4-x11 <unfixed> (embed)
720    
721    libzip
722            - php5 <unfixed> (fork)
723    
724    json.php (not packaged; should be replaced with php's built-in functions)
725            - moodle <unfixed>
726            - yui <unfixed>
727            - gallery2 <unfixed>
728            - dokuwiki <unfixed>
729            - typo3-src-4.2 <unfixed>
730    
731    php-fpdf
732            - tcpdf <itp> (fork)
733            - moodle <unfixed>
734            - phpwiki <unfixed>
735            - egroupware <unfixed>
736            - ldap-account-manager <unfixed> (fork)
737    
738    tcpdf (itp: #495985)
739            - moodle <unfixed>
740            - phpmyadmin <unfixed>
741    
742  pax code:  typo3
743  tar          - moodle <unfixed>
 cpio  
744    
745  t1lib:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
746  tetex-bin          - moodle <unfixed>
747  texlive-bin          - gosa <unfixed>
748    
749    php-ole (itp: #487558)
750            - moodle <unfixed>
751    
752    pieforms (http://www.catalyst.net.nz)
753            - mahara <unfixed>
754    
755    savant2 (http://phpsavant.com)
756            - egroupware <unfixed>
757    
758    rssparser (http://nwow.org)
759            - egroupware <unfixed>
760            - phpgroupware <unfixed>
761    
762    lcms
763            - openjdk-6 <unfixed> (fork)
764    
765    libphp-phplayersmenu
766            - diogenes <unfixed>
767            - phpldapadmin <unfixed>
768    
769    libphp-pclzip
770            - docvert <unfixed>
771            - moodle <unfixed>
772            - egroupware <unfixed>
773    
774    libphp-simplepie
775            - dokuwiki <unfixed>
776    
777    libphp-jpgraph
778            - egroupware <unfixed>
779    
780    php-simpletest
781            - moodle <unfixed>
782    
783    libpng
784            - iceweasel <unfixed> (embed)
785            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
786            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
787            - iceape 1.0.13~pre080614i-0etch1 (embed)
788            - xulrunner <unfixed> (embed)
789            NOTE: Debian 1.9.0.6 uses embedded copy
790            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
791            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
792            NOTE: Ubuntu only
793            - firefox-3.0 <unfixed> (embed)
794            NOTE: Ubuntu only
795            - firefox-3.1 <unfixed> (embed)
796            NOTE: Ubuntu only
797            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
798            NOTE: Ubuntu only
799            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
800            NOTE: Ubuntu only
801            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
802            NOTE: Ubuntu only
803    

Legend:
Removed from v.7487  
changed lines
  Added in v.11344

  ViewVC Help
Powered by ViewVC 1.1.5