/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7787 by nion, Wed Jan 2 20:22:47 2008 UTC revision 11344 by jamie-guest, Fri Mar 6 16:59:34 2009 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  sort: static (linking statically against a lib), embed (embedding a copy of the library into another source package)          <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16    sort: static (linking statically against a lib)
17          embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19                thus might share parts of the source code)
20          old-version (the package is an older version of essentially
21                       the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
30          - gpdf <removed>          - gpdf <removed>
# Line 24  xpdf (some srcpkgs use xpdf2 code, some Line 36  xpdf (some srcpkgs use xpdf2 code, some
36          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
37          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics <unfixed> (embed; bug #436164)
38          NOTE: the kpdf replacement in KDE 4 is using poppler          NOTE: the kpdf replacement in KDE 4 is using poppler
39          - tetex-bin 3.0-12 (embed)          - texlive-base 3.0-12 (embed)
40          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
41          NOTE: links to poppler          NOTE: links to poppler
42          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
# Line 36  xpdf (some srcpkgs use xpdf2 code, some Line 48  xpdf (some srcpkgs use xpdf2 code, some
48          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
49          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
50          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
51            - pdfedit <unfixed> (embed; bug #510794)
52    
53  ppmd:  ppmd
54          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
55    
56  silc-toolkit:  peercast
57            - gnome-peercast <unfixed> (embed)
58            NOTE: gnome-peercast may better be removed, see #466539
59    
60    silc-toolkit
61          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
62    
63  dietlibc:  dietlibc
64          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
65    
66  libiax:  libmikmod
67            - sdl-mixer1.2 <unfixed> (embed)
68            TODO: report bug
69    
70    libiax
71          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixed> (embed)
72    
73  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
# Line 60  zlib (lots of apps embed a copy, but lin Line 81  zlib (lots of apps embed a copy, but lin
81          - pvpgn 1.7.8-2 (embed)          - pvpgn 1.7.8-2 (embed)
82          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
83          - rpm <unknown> (embed)          - rpm <unknown> (embed)
84          NOTE: pinged joeyh          NOTE: pinged anibal since when rpm was fixed
85            - tuxcmd-modules <itp> (embed; bug #508082)
 libbz2:  
 dpkg (statically linked)  
86    
87  libgadu/ekg:  libbz2
88  centericq          - dpkg <unfixed> (static)
 gaim  
 pigdin (links dynamically against libgadu)  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 firefox (to be removed)  
 thunderbird (to be removed)  
 iceweasel  
 iceape  
 icedove  
 xulrunner  
 nvu (no longer in Debian)  
   
 xli:  
 xloadimage  
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum (removed from egroupware after sarge)  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 vfu (removed linking against embedded copy in 4.06-4.1; #450754)  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
 monotone (including this starting from 0.37)  
 glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)  
 apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)  
 exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)  
 yacas (<= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway)  
 gtamsanalyzer.app (links dynamically since 0.42-5)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
 monotone  
 iceweasel  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin (only in sarge)  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware (removed from egroupware after sarge)  
   
 chmlib:  
 kchmviewer (ships the code but links dynamically)  
   
 libavcodec/libavformat (source: ffmpeg):  
 mplayer (#395252)  
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
89    
90  mad MPEG decoding lib:  libgadu:
91  mad          - centericq <unfixed> (embed)
92  xine-lib          - gaim <unfixed> (embed)
93            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
94            - kopete 4:3.3.2-5 (embed)
95            - kadu 0.6.0.2-3 (embed)
96            - gadu <unfixed> (embed)
97            - ekg 1:1.8~rc0-1 (embed)
98            - kadu 0.6.0.2-3 (embed; bug #504430)
99            NOTE: gadu not packaged in Debian yet
100    
101    xmlrpc (which package is the "origin" of this code?)
102            - drupal <unfixed> (embed)
103            - phpgroupware <unfixed> (embed)
104            - egroupware <unfixed> (embed)
105            - phpwiki (embed)
106            - php4 <unfixed> (embed)
107            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
108    
109    shtool (affects build-time only)
110            - mysql-ocaml <unfixed> (embed)
111            - php4 <unfixed> (embed)
112    
113    mozilla source code
114            - mozilla-firefox <unfixed> (embed)
115            - mozilla-thunderbird
116            - firefox <removed>
117            [etch] - firefox <unfixed> (embed)
118            - thunderbird <removed>
119            [etch] - thunderbird <unfixed> (embed)
120            - iceweasel <unfixed> (embed)
121            - iceape <unfixed> (embed)
122            - icedove <unfixed> (embed)
123            - xulrunner <unfixed> (embed)
124            - nvu <removed> (embed)
125    
126    xli
127            - xloadimage <unfixed> (embed)
128    
129    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
130            - openmotif <unfixed> (embed)
131            - xfree86/xorg <unfixed> (embed)
132            NOTE: in libxpm
133    
134    kerberized apps with BSD origin
135            - krb4 <unfixed> (embed)
136            - krb5 <unfixed> (embed)
137            - heimdal <unfixed> (embed)
138    
139    grip (which pkg is the origin?)
140            - libcdaudio
141            - grip
142            - gnome-vfs
143            TODO: check vfs2 as well
144    
145    fudforum
146            - phpgroupware-fudforum <unfixed> (embed)
147            - egroupware-fudforum <removed>
148            [sarge] - egroupware-fudforum <unfixed> (embed)
149    
150    cvs
151            - gcvs <unfixed> (embed)
152            NOTE: see cvsunix/src in tarball
153    
154    pcre
155            - python* <unfixed> (embed)
156            - php4 <unknown> (embed)
157            - analog 2:5.23-0woody1 (embed)
158            - libgoffice-1 <unfixed> (embed)
159            - vfu 4.06-4.1 (embed; bug #450754)
160            - tf5 5.0beta7-1 (embed)
161            - monotone <unfixed> (embed)
162            NOTE: this only affects versions >= 0.37
163            - glib2.0 2.15.2-1 (embed)
164            - apache2 2.0.53-4 (embed)
165            - exim4 4.10-0.srh20.12 (embed)
166            - yacas <unfixed> (embed)
167            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
168            - gtamsanalyzer.app 0.42-5 (embed)
169            - tin <unknown> (embed)
170            - kazehakase 0.5.2-1
171            - webkit <unfixed> (embed)
172            - qt4-x11 <unfixed> (embed)
173            NOTE: embedded via webkit copy
174    
175    tiff
176            - wxwindows2.4 2.2.1 (embed)
177    
178    uudeview
179            - libconvert-uulib-perl <unfixed> (embed)
180            - pan <unfixed> (embed)
181    
182    sqlite (not affected by security vulnerabilities so far)
183            - amarok <unfixed> (embed)
184            - monotone <unfixed> (embed)
185            - iceweasel <unfixed> (embed)
186    
187    util-linux/mount
188            - loop-aes-utils <unfixed> (embed)
189            NOTE: contains code from util-linux' mount in the mount-aes-udeb
190    
191    webmin
192            - usermin <unknown> (embed)
193            [sarge] - usermin <unfixed> (embed)
194    
195    sylpheed
196            - sylpheed-claws <unfixed> (fork)
197    
198    phpsysinfo
199            - egroupware <unfixed> (embed)
200            - phpgroupware <unfixed> (embed)
201    
202    phpldapadmin
203            [sarge] - egroupware <unfixed> (embed)
204            NOTE: removed from egroupware after sarge
205    
206    chmlib
207            - kchmviewer <unknown> (embed)
208    
209    libavcodec/libavformat (source: ffmpeg)
210            - mplayer 1.0~rc2-14 (embed; bug #395252)
211            - kino 1.0.0-1
212            - vlc <not-affected> (Links dynamically since initial release)
213            - smilutils 0.3.0-10
214            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
215            - motion 3.1.19-1
216            - gstreamer0.10-ffmpeg 0.10.3-2
217            - xmovie <unfixed>
218            TODO: gimp-gap (potentially using ffmpeg code as well)
219    
220    faad2
221            - mplayer 1.0~rc2-20 (embed)
222    
223    mad MPEG decoding lib
224            - mad <unfixed> (embed)
225            - xine-lib <unfixed> (embed)
226    
 libdts:  
227  libdts  libdts
228  xine-lib          - xine-lib <unfixed> (embed)
229    
 flac:  
230  flac  flac
231  xine-lib          - xine-lib <unfixed> (embed)
232    
233  liba52:  liba52
234  a52dec          - a52dec <unfixed> (embed)
235  xine-lib          - xine-lib <unfixed> (embed)
236    
237  libmpeg2:  libmpeg2
238  mpeg2dec          - mpeg2dec <unfixed> (embed)
239  xine-lib          - xine-lib <unfixed> (embed)
   
 curl:  
 wget (code for NTLM authentication)  
240    
241  TODO evaluate:  curl
242  gimp-gap (potentially using ffmpeg code as well)          - wget <unfixed> (embed)
243            NOTE: code for NTLM authentication
244    
245  uw-imap:  uw-imap
246  pine          - pine <unfixed> (embed)
247  alpine          - alpine <unfixed> (embed)
248    
249  imagemagick:  imagemagick
250  graphicsmagick          - graphicsmagick <unfixed> (fork)
251    
252  halibut:  halibut
253  nsis          - nsis <unfixed> (fork)
254    
255  libghttp:  libghttp
256  hotway          - hotway <unfixed> (embed)
257    
258  libsndfile:  libsndfile
259  ardour          - ardour 1:2.7.1-1 (embed)
260    
261  glibmm2.4:  glibmm2.4
262  ardour          - ardour 1:2.7.1-1 (embed)
263    
264  libgnomecanvasmm2.6:  libgnomecanvasmm2.6
265  ardour          - ardour 1:2.7.1-1 (embed)
266    
267  libsigc++-2.0:  libsigc++-2.0
268  ardour          - ardour 1:2.7.1-1 (embed)
269    
270  soundtouch:  soundtouch
271  ardour          - ardour 1:2.7.1-1 (embed)
   
 libmms:  
 xine-lib  
 mimms  
272    
273  FCKeditor: (packaged as fckeditor)  libmms
274  knowledgeroot          - xine-lib <unfixed> (embed)
275  moin (452599)          - mimms <unfixed> (embed)
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
276    
277    fckeditor
278            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
279            - moin 1.8.2-2 (embed; bug #452599)
280            - karrigell <removed> (embed; bug #452598)
281            - gforge 4.6.99+svn6225-1 (embed)
282    
283    ipatlas (not packaged in Debian)
284            - moodle <unfixed> (embed; bug #507185)
285    
286  Moodle contains lots of things:  libphp-phpmailer
287  AdoDB          - moodle <unfixed> (embed; bug #507185)
288  AdoDB-XML Schema          - mahara <unfixed> (embed)
289  ipatlas          - symfony <unfixed> (embed)
290  PHPMailer          - phpgroupware-felamimail <unfixed> (embed)
291  Smarty          NOTE: phpgroupware-felamimail is only in etch
292  htmlArea          - egroupware <unfixed> (embed; bug #504283)
293  TinyMCE          - glpi <unfixed>
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
294    
295  gzip:  htmlArea (not packaged in Debian)
296  linux-kernel (lib/inflate.c)          - moodle <unfixed> (embed)
 klibc (based on linux-kernel gzip code)  
 busybox  
297    
298  neon:  giflib:
299  cadaver (all, but being worked on: #188381)          - wine <unfixed> (embed; bug #466181)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
300    
301  libmodplug:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
302  gst-plugins-bad0.10          - moodle <unfixed> (embed)
303    
304  libvncserver:  smarty:
305  vino          - moodle 1.8.2-2 (embed; bug #471158)
306            - gallery2 2.2.5-2 (embed; bug #471160)
307            - mahara 0.9.2-2 (embed; bug #471201)
308            - gosa 2.4beta1-1 (embed; bug #471200)
309    
310  putty:  TinyMCE
311  filezilla          - wordpress 2.5.1-3 (embed; bug #478257)
312            - moodle <unfixed> (embed; bug #507185)
313  tinyxml (not packaged in Debian):          - knowledgeroot <unfixed> (embed)
314  filezilla          - joomla <itp> (bug #326398)
315    
316  gv:  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
317  evince (ps/ tree from gv 3.5.8)          - scite <unfixed> (embed)
318  evince-gtk (not packaged in Debian)          - qscintilla <unfixed> (embed)
319            - qscintilla2 <unfixed> (embed)
320  libXbae:          - geany <unfixed> (fork)
321  libpawlib2-lesstif package (from Cernlib)          - anjuta <unfixed> (embed)
322    
323  libXaw:  libphp-adodb
324  libpawlib2-lesstif package (from Cernlib)          - moodle <unfixed> (embed; bug #507185)
325            NOTE: also AdoDB-XML Schema
326  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)          - gallery2 <unfixed> (embed)
327            - phppgadmin <unfixed> (embed)
328  libgd2:          - egroupware <unfixed> (embed)
329  graphviz (lib/gd seems to be 2.0.33)          - phpwiki <unfixed> (embed)
330            - ipplan <unfixed> (embed)
331            - typo3 <unfixed> (embed)
332            - cacti <unknown> (embed)
333            [sarge] - cacti <unfixed> (embed)
334            NOTE: dependency exists, but internal version is used
335            - gforge 4.7~rc2-6 (embed)
336            - mahara <unfixed> (embed)
337    
338    gzip
339            - linux-kernel <unfixed> (embed)
340            NOTE: lib/inflate.c
341            - klibc <unfixed> (embed)
342            NOTE: based on linux-kernel gzip code
343            - busybox <unfixed> (embed)
344    
345    neon
346            - cadaver <unfixed> (embed; bug #188381)
347            - gnome-vfs2 <unfixed> (embed; bug #395874)
348            - litmus <unfixed> (embed; #395875)
349            [sarge] - screem <unfixed> (embed)
350            - sitecopy <unfixed> (embed; bug #395876)
351            [etch] - tla <unfixed> (embed; bug #395877)
352            [sarge] - tla <unfixed> (embed; bug #395877)
353    
354    libmodplug
355            - gst-plugins-bad0.10 <unfixed> (embed)
356    
357    libvncserver
358            - vino <unfixed> (embed)
359    
360    putty
361            - filezilla <unfixed> (embed)
362    
363    tinyxml (not packaged in Debian)
364            - filezilla <unfixed>
365    
366    gv
367            - evince <unfixed> (embed)
368            NOTE: ps/ tree from gv 3.5.8
369            - evince-gtk <unfixed> (embed)
370            NOTE: not packaged in Debian
371    
372    libXbae
373            [etch] - libpawlib2-lesstif <unfixed> (embed)
374            NOTE: from Cernlib
375    
376    libXaw
377            [etch] - libpawlib2-lesstif
378            NOTE: from Cernlib
379            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
380    
381    libgd2
382            - graphviz <unfixed> (embed)
383            NOTE: lib/gd seems to be 2.0.33
384            - wml <unfixed> (embed)
385            NOTE: derived from gd 1.6.3
386    
387    rar
388            - unrar-nonfree <unfixed> (embed)
389    
390    unrar-free (maybe this code is derived from the original rar, too?)
391            - clamav <unfixed> (embed)
392            NOTE: seems to be disabled in default config
393    
394    mplayer (DirectMedia Object loader)
395            - xine-lib <unfixed> (embed)
396            NOTE: src/libw32dll/
397            - vlc <unfixed> (embed)
398            NOTE: modules/codec/dmo/
399            - mplayer 1.0~rc2-20 (embed)
400    
401    libwpd (WordPerfect converter)
402            - openoffice.org <unfixed> (embed)
403    
404    fsplib (http://sourceforge.net/projects/fsp/)
405            - gftp <unfixed> (embed)
406            NOTE: lib/fsplib version 0.3
407    
408    sprng
409            - tree-puzzle <unfixed> (embed)
410    
411    librpcsecgss
412            - krb5 <unfixed> (embed)
413    
414    jasper
415            - ghostscript <unfixed> (embed)
416            - gs-gpl <unfixed> (embed)
417    
418    libiris
419            - psi <unfixed> (embed)
420            - kdenetwork <unfixed> (embed)
421            NOTE: kopete embeds libiris but links dynamically to libidn
422            - kdegames <unfixed> (embed)
423            NOTE: ksirk/kde4
424    
425    libidn
426            - monotone <unfixed> (embed)
427            - psi <unfixed> (embed)
428            NOTE: psi embeds libiris which embeds libidn
429            - kdegames <unfixed> (embed)
430            NOTE: kdegames/kde4 embeds libiris which embeds libidn
431    
432    liblua
433            - monotone <unfixed> (embed)
434    
435  rar:  libbotan
436  unrar-nonfree          - montone <unfixed> (embed)
437    
438  unrar-free: (maybe this code is derived from the original rar, too?)  NetXX
439  clamav (seems to be disabled in default config)          - monotone <unfixed> (embed)
440    
441  mplayer (DirectMedia Object loader):  libgc
442  xine-lib (src/libw32dll/)          - mono <unfixed> (embed)
 vlc (modules/codec/dmo/)  
443    
444  libwpd (WordPerfect converter):  lzma
445  openoffice.org          - p7zip <unfixed> (embed)
446    
447  fsplib (http://sourceforge.net/projects/fsp/):  lzo
448  gftp (lib/fsplib version 0.3)          - grub2 <unfixed> (embed)
449    
450  librpcsecgss:  yassl
451  krb5          - mysql-dfsg-5.0 <unfixed> (embed)
452    
453  jasper:  pax code
454  ghostscript          - tar <unfixed> (embed)
455  gs-gpl          - cpio <unfixed> (embed)
456    
457    t1lib
458            - tetex-bin 2.0.2-1 (embed)
459            - texlive-bin <unknown> (embed)
460    
461    guichan
462            - boswars <unfixed> (embed)
463            NOTE: maintainer notified us, working on it
464    
465    tolua
466            - boswars <unfixed> (embed)
467            NOTE: maintainer notified us, working on it
468    
469    asio-dev
470            - luxrender <unfixed> (embed)
471            NOTE: maintainer notified us, working on it
472            NOTE: may be merged with boost "soon"
473    
474  libidn:  xine-lib
475  monotone          - vlc <unfixed> (embed)
476            NOTE: only parts included in modules/access/rtsp
477    
478  liblua:  netpbm
479  monotone          - tcl8.3 <unfixed> (embed)
480            - tcl8.4 <unfixed> (embed)
481            - tcl8.5 <unfixed> (embed)
482            NOTE: generic/tkImgGIF.c
483    
484    tk8.5
485            - tk8.0 <removed> (old-version)
486            - tk8.3 <unfixed> (old-version)
487            - tk8.4 <unfixed> (old-version)
488            - perl-tk <unfixable> (fork)
489    
490    samba
491            - mc 2:4.6.2~git20080311-1 (embed)
492            NOTE: maintainer is aware of this, currently searching a solution
493    
494    plib1.8.4c2
495            - boson <unfixed> (fork)
496            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
497    
498    fribidi
499            - quesoglc <unfixed> (embed)
500            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
501    
502    glew
503            - quesoglc <unfixed> (embed; bug #489341)
504            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
505    
506    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
507            - transcend <unfixed> (embed)
508            - cultivation <unfixed> (embed)
509            - passage <unfixed> (embed)
510            - gravitation <unfixed> (embed)
511    
512  libbotan:  tar
513  montone          - libarchive <unfixed> (embed)
514            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
515    
516  NetXX:  cpio
517  monotone          - libarchive <unfixed> (embed)
518            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
519    
520  libgc:  webkit
521  mono          - qt4-x11 <unfixed> (embed)
522    
523  lzma:  ftgl
524  p7zip          - blender 2.46+dfsg-1 (embed)
525    
526  lzo:  wv
527  grub2          - abiword <unfixed>
528    
529    qemu
530            - kvm <unfixed> (embed)
531            - xen-3 <unfixed> (embed)
532            - xen-unstable <unfixed> (embed)
533    
534    bochs
535            - kvm <unfixed> (embed; bug #489442)
536    
537    speex
538            - vorbis-tools <unfixed> (embed)
539            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
540            - gst-plugins-good0.10 <unfixed> (embed)
541            - xine-lib <unfixed> (embed)
542            - libfishsound <unfixed> (embed)
543            - libannodex <unfixed> (embed)
544            - vlc <unfixed> (embed)
545            - xmms-speex <unfixed> (embed)
546            - libsdl-sound1.2 <unfixed> (embed)
547            - sweep <unfixed> (embed)
548    
549    libreadline
550            - magic <unfixed> (old-version)
551            NOTE: magic is currently an RFS
552    
553    opcode
554            - ode <unfixed> (embed)
555            NOTE: opcode is not a package in debian, it is just embedded
556            NOTE: http://www.codercorner.com/Opcode.htm
557    
558    gimpact
559            - ode <unfixed> (embed)
560            NOTE: gimpact is not a package in debian, it is just embedded
561            NOTE: http://gimpact.sf.net
562    
563    mochikit
564            - mahara <unfixed> (embed)
565            NOTE: they require extra patches, still unmerged upstream
566            - ntop <unfixed> (embed)
567            - python-oherence <unfixed> (embed)
568            - python-paste <unfixed> (embed)
569            - python-turbogears <unfixed> (embed)
570            - zope-plone3 <unfixed> (embed)
571    
572    prototype
573            - netbeans-ide <unfixed> (embed)
574            - auth2db-frontend <unfixed> (embed)
575            - citadel-webcit <unfixed> (embed)
576            - asterisk <unfixed> (embed)
577            - doc-iana <unfixed> (embed)
578            - libaws-doc <unfixed> (embed)
579            - libgettext-ruby-data <unfixed> (embed)
580            - libjson-ruby-doc <unfixed> (embed)
581            - liblucene2-java-doc <unfixed> (embed)
582            - libopenid-ruby <unfixed> (embed)
583            - solr-common <unfixed> (embed)
584            - glpi <unfixed> (embed)
585            - hobbix <unfixed> (embed)
586            - mnemo2 <unfixed> (embed)
587            - nag2 <unfixed> (embed)
588            - knowledgeroot <unfixed> (embed)
589            - mediatomb-common <unfixed> (embed)
590            - mt-daapd <unfixed> (embed)
591            - op-panel <unfixed> (embed)
592            - ebug-http <unfixed> (embed)
593            - phpgedview <removed> (embed)
594            - poker-web <unfixed> (embed)
595            - python-webhelpers <unfixed> (embed)
596            - qwik <unfixed> (embed)
597            - rails <unfixed> (embed)
598            - typo3-src-4.1 <unfixed> (embed)
599            - wordpress <unfixed> (embed)
600            - zope-plone3 <unfixed> (embed)
601            - smokeping <unfixed> (embed)
602            - ampache 3.4.1-2 (embed)
603            - exaile <unfixed> (embed)
604            - hobix <unfixed> (embed)
605            - pixelpost <unfixed> (embed)
606            - symfony <unfixed> (embed)
607            NOTE: it's been said that there are custom changes
608            - zabbix-frontend-php <unfixed> (embed)
609            - turba2 <unfixed> (embed)
610    
611    gdb
612            - insight <unfixed> (embed)
613    
614    e2fsprogs
615            - ldiskfsprogs <unfixable> (fork)
616    
617    quazip (not packaged in Debian)
618            - qcake <unfixed> (embed)
619            NOTE: starting with upstream version 0.6.4
620    
621    exo
622            - pcmanfm <unfixed> (embed; bug #499677)
623            NOTE: slightly modified source code
624    
625    java
626            - openjdk-6 <unfixed>
627            - sun-java5 <unfixed>
628            - sun-java6 <unfixed>
629    
630    libphp-snoopy
631            - ampache 3.4.1-2 (embed; bug #504169)
632            - mahara 1.0.5-2 (embed; bug #504170)
633            - pixelpost <unfixed> (embed; bug #504171)
634            - mediamate 0.9.3.6-5 (embed; bug #504172)
635            - opendb <unfixed> (embed; bug #504173)
636            - wordpress 2.5.1-9 (embed; bug #443948)
637            - moodle <unfixed> (embed; bug #507185)
638            - phpgroupware-felamimail <unfixed> (embed)
639            NOTE: phpgroupware-felamimail is only in etch
640            - magpierss 0.72-3 (embed; bug #431089)
641    
642    jquery
643            - zekr <unfixed> (embed)
644            - wordpress <unfixed> (embed)
645            - yocto-reader <unfixed> (embed)
646            - textpattern <unfixed> (embed)
647            - genshi 0.5.1-1 (embed)
648            NOTE: compressed file under examples/ dir
649            - prewikka <unfixed> (embed)
650            - libramaze-ruby <unfixed> (embed)
651            - drupal5 <unfixed> (embed)
652            - b2evolution <unfixed> (embed)
653            - wesnoth <unfixed> (embed)
654    
655    tablesorter (jquery plugin, not packaged yet)
656            - wesnoth <unfixed> (embed)
657    
658    kses
659            - wordpress <unfixed> (embed; bug #504242)
660            NOTE: their copy has all methods renamed to wp_<foo>
661            - moodle <unfixed> (embed; bug #507185)
662            - egroupware <unfixed> (embed)
663    
664    magpierss
665            - wordpress <unfixed> (embed; bug #504242)
666            - moodle <unfixed>
667    
668    php-gettext
669            - wordpress <unfixed> (embed; bug #504242)
670    
671    libphp-ixr (name may change, it is the Incutio XML-RPC)
672            - wordpress <unfixed> (embed; bug #504242)
673            - dokuwiki <unfixed> (embed)
674            - textpattern <unfixed> (embed)
675    
676    libphp-cas
677            - glpi <unfixed> (embed)
678            - moodle <unfixed> (embed; bug #496069)
679    
680    scriptaculous
681            - glpi <unfixed> (embed)
682            - libaws-doc <unfixed> (embed)
683            - op-panel <unfixed> (embed)
684            - symfony <unfixed> (embed)
685            NOTE: maintainer says there are extra incompatible changes required
686            - pixelpost <unfixed> (embed)
687            - python-webhelpers <unfixed> (embed)
688            - qwik <unfixed> (embed)
689            - smokeping <unfixed> (embed)
690            - turba2 <unfixed> (embed)
691            - typo3-src 4.2.3-1 (embed)
692    
693    libmarkdown-php
694            - moodle <unfixed> (embed; bug #507185)
695            - pixelpost <unfixed> (embed)
696    
697    php-openid
698            - wordpress-openid <itp> (embed)
699    
700    geshi
701            - dokuwiki 0.0.20080505-3.1 (embed)
702            - pgfouine 1.0-1.1 (embed)
703            - websvn 2.1.0-1 (embed)
704    
705    webcalendar
706            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
707    
708    libical
709            - kdepim <unfixed> (fork)
710            - kdepimlibs <unfixed> (fork)
711            NOTE: fixed in KDE4 post 4.1.x series
712    
713    libltdl3
714            - kdelibs <unfixed> (embed)
715            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
716            - synfig <unfixed> (embed)
717    
718    harfbuzz
719            - qt4-x11 <unfixed> (embed)
720    
721    libzip
722            - php5 <unfixed> (fork)
723    
724    json.php (not packaged; should be replaced with php's built-in functions)
725            - moodle <unfixed>
726            - yui <unfixed>
727            - gallery2 <unfixed>
728            - dokuwiki <unfixed>
729            - typo3-src-4.2 <unfixed>
730    
731    php-fpdf
732            - tcpdf <itp> (fork)
733            - moodle <unfixed>
734            - phpwiki <unfixed>
735            - egroupware <unfixed>
736            - ldap-account-manager <unfixed> (fork)
737    
738    tcpdf (itp: #495985)
739            - moodle <unfixed>
740            - phpmyadmin <unfixed>
741    
742  pax code:  typo3
743  tar          - moodle <unfixed>
 cpio  
744    
745  t1lib:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
746  tetex-bin (links to system t1lib since 2.0.2)          - moodle <unfixed>
747  texlive-bin (links to system t1lib)          - gosa <unfixed>
748    
749    php-ole (itp: #487558)
750            - moodle <unfixed>
751    
752    pieforms (http://www.catalyst.net.nz)
753            - mahara <unfixed>
754    
755    savant2 (http://phpsavant.com)
756            - egroupware <unfixed>
757    
758    rssparser (http://nwow.org)
759            - egroupware <unfixed>
760            - phpgroupware <unfixed>
761    
762    lcms
763            - openjdk-6 <unfixed> (fork)
764    
765    libphp-phplayersmenu
766            - diogenes <unfixed>
767            - phpldapadmin <unfixed>
768    
769    libphp-pclzip
770            - docvert <unfixed>
771            - moodle <unfixed>
772            - egroupware <unfixed>
773    
774    libphp-simplepie
775            - dokuwiki <unfixed>
776    
777    libphp-jpgraph
778            - egroupware <unfixed>
779    
780    php-simpletest
781            - moodle <unfixed>
782    
783    libpng
784            - iceweasel <unfixed> (embed)
785            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
786            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
787            - iceape 1.0.13~pre080614i-0etch1 (embed)
788            - xulrunner <unfixed> (embed)
789            NOTE: Debian 1.9.0.6 uses embedded copy
790            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
791            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
792            NOTE: Ubuntu only
793            - firefox-3.0 <unfixed> (embed)
794            NOTE: Ubuntu only
795            - firefox-3.1 <unfixed> (embed)
796            NOTE: Ubuntu only
797            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
798            NOTE: Ubuntu only
799            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
800            NOTE: Ubuntu only
801            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
802            NOTE: Ubuntu only
803    

Legend:
Removed from v.7787  
changed lines
  Added in v.11344

  ViewVC Help
Powered by ViewVC 1.1.5