/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7787 by nion, Wed Jan 2 20:22:47 2008 UTC revision 12707 by pabs, Sun Aug 30 03:00:07 2009 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  sort: static (linking statically against a lib), embed (embedding a copy of the library into another source package)          <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16    sort: static (linking statically against a lib)
17          embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19                thus might share parts of the source code)
20          old-version (the package is an older version of essentially
21                       the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
30          - gpdf <removed>          - gpdf <removed>
# Line 22  xpdf (some srcpkgs use xpdf2 code, some Line 34  xpdf (some srcpkgs use xpdf2 code, some
34          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
35          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
36          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
37          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
39          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
40          NOTE: links to poppler          NOTE: links to poppler
41          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
42          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
43          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
44          - pdfkit.framework 0.8-4 (embed)          - pdfkit.framework 0.8-4 (embed)
45          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
46          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
48          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
49            - pdfedit <unfixed> (embed; bug #510794)
50            - swftools <unfixed> (embed)
51    
52    ppmd
53            - libcomplearn-mod-ppmd <unfixed> (fork)
54            NOTE: discussion in #458152
55    
56    libevent
57            - transmission 1.71-1 (embed; bug #529372)
58    
59    lrmi
60            - read-edid 2.0.0-1 (embed; bug #495131)
61    
62  ppmd:  peercast
63          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - gnome-peercast <unfixed> (embed)
64            NOTE: gnome-peercast may better be removed, see #466539
65    
66  silc-toolkit:  silc-toolkit
67          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
68    
69  dietlibc:  icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    dietlibc
74          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
75    
76  libiax:  libmikmod
77            - sdl-mixer1.2 <unfixed> (embed)
78            TODO: report bug
79    
80    libiax
81          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixed> (embed)
82    
83  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
# Line 60  zlib (lots of apps embed a copy, but lin Line 91  zlib (lots of apps embed a copy, but lin
91          - pvpgn 1.7.8-2 (embed)          - pvpgn 1.7.8-2 (embed)
92          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
93          - rpm <unknown> (embed)          - rpm <unknown> (embed)
94          NOTE: pinged joeyh          NOTE: pinged anibal since when rpm was fixed
95            - tuxcmd-modules <unfixed> (embed)
96            - zsync <unfixed>
97            - tra <unfixed>
98            - sash <unfixed>
99            - nsis <unfixed>
100            - mseide-msegui <unfixed>
101            NOTE: mseide
102            - mirrordir <unfixed>
103            - poco <unfixed>
104            - klibc <unfixed>
105            - ghostscript <unfixed>
106            - freeimage <unfixed>
107            - clamav <unfixed> (fork)
108            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
109            - tuxonice-userui <unfixed>
110            - plt-scheme <unfixed>
111            - perl <unfixed>
112            - paraview <unfixed>
113            - gcvs <unfixed>
114            - erlang <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125    
126    dulwich
127            - hg-git <unfixed> (embed; bug #541996)
128    
129    libvigraimpex
130            - hugin <unfixed> (embed)
131            - enblend-fuse <unfixed> (embed)
132    
133    libbz2
134            - dpkg <unfixed> (static)
135    
136    libgadu:
137            - centericq <unfixed> (embed)
138            - gaim <unfixed> (embed)
139            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
140            - kdenetwork 4:3.3.2-5 (embed)
141            NOTE: from kdenetwork: kopete
142            - gadu <unfixed> (embed)
143            - ekg 1:1.8~rc0-1 (embed)
144            - kadu 0.6.0.2-3 (embed; bug #504430)
145            NOTE: gadu not packaged in Debian yet
146    
147    xmlrpc (which package is the "origin" of this code?)
148            - drupal <unfixed> (embed)
149            - phpgroupware <unfixed> (embed)
150            - egroupware <unfixed> (embed)
151            - phpwiki <unfixed> (embed)
152            - php4 <unfixed> (embed)
153            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
154    
155    shtool (affects build-time only)
156            - mysql-ocaml <unfixed> (embed)
157            - php4 <unfixed> (embed)
158    
159    mozilla source code
160            - mozilla-firefox <unfixed> (embed)
161            - mozilla-thunderbird <unfixed>
162            - firefox <removed>
163            - thunderbird <removed>
164            - iceweasel <unfixed> (embed)
165            - iceape <unfixed> (embed)
166            - icedove <unfixed> (embed)
167            - xulrunner <unfixed> (embed)
168            - nvu <removed> (embed)
169            - kompozer <unfixed> (embed; bug #532168)
170    
171    xli
172            - xloadimage <unfixed> (embed)
173    
174    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
175            - openmotif <unfixed> (embed)
176            - libxpm <unfixed> (embed)
177    
178    kerberized apps with BSD origin
179            - krb4 <unfixed> (embed)
180            - krb5 <unfixed> (embed)
181            - heimdal <unfixed> (embed)
182    
183    grip (which pkg is the origin?)
184            - libcdaudio <unfixed>
185            - grip <unfixed>
186            - gnome-vfs <unfixed>
187            TODO: check vfs2 as well
188    
189    fudforum
190            [etch] - phpgroupware <unfixed> (embed)
191            NOTE: phpgroupware-fudforum
192            [sarge] - egroupware-fudforum <removed> (embed)
193    
194    libbsd
195            - rdate 1:1.2-3 (embed)
196            - atheme-services <unfixed>
197            - libbsd-arc4random-perl <unfixed>
198            - isakmpd <unfixed>
199    
200    cvs
201            - gcvs <unfixed> (embed)
202            NOTE: see cvsunix/src in tarball
203    
204    pcre
205            - python* <unfixed> (embed)
206            - php4 <unknown> (embed)
207            - analog 2:5.23-0woody1 (embed)
208            - goffice <unfixed> (embed)
209            NOTE: libgoffice-*
210            - vfu 4.06-4.1 (embed; bug #450754)
211            - tf5 5.0beta7-1 (embed)
212            - monotone 0.43-1 (embed)
213            NOTE: this only affects versions >= 0.37
214            - glib2.0 2.15.2-1 (embed)
215            - apache2 2.0.53-4 (embed)
216            - exim4 4.10-0.srh20.12 (embed)
217            - yacas <unfixed> (embed)
218            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
219            - gtamsanalyzer.app 0.42-5 (embed)
220            - tin <unknown> (embed)
221            - kazehakase 0.5.2-1
222            - webkit <unfixed> (embed)
223            - qt4-x11 <unfixed> (embed)
224            NOTE: embedded via webkit copy
225            - erlang <unfixed> (embed)
226    
227    tiff
228            - wxwindows2.4 2.2.1 (embed)
229    
230    uudeview
231            - libconvert-uulib-perl <unfixed> (embed)
232            - pan <unfixed> (embed)
233    
234    sqlite (not affected by security vulnerabilities so far)
235            - amarok <unfixed> (embed)
236            - monotone 0.43-1 (embed)
237            - iceweasel <unfixed> (embed)
238    
239    util-linux/mount
240            - loop-aes-utils <unfixed> (embed)
241            NOTE: contains code from util-linux' mount in the mount-aes-udeb
242    
243    webmin
244            - usermin <unknown> (embed)
245            [sarge] - usermin <unfixed> (embed)
246    
247    sylpheed
248            - sylpheed-claws <unfixed> (fork)
249    
250    phpsysinfo
251            - egroupware <unfixed> (embed)
252            - phpgroupware <unfixed> (embed)
253    
254    phpldapadmin
255            [sarge] - egroupware <unfixed> (embed)
256            NOTE: removed from egroupware after sarge
257    
258    chmlib
259            - kchmviewer <unknown> (embed)
260    
261    ffmpeg (libavcodec/libavformat)
262            - mplayer 1.0~rc2-14 (embed; bug #395252)
263            - kino 1.0.0-1
264            - vlc <not-affected> (Links dynamically since initial release)
265            - smilutils 0.3.0-10
266            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
267            - motion 3.1.19-1
268            - gstreamer0.10-ffmpeg 0.10.3-2
269            - xmovie <unfixed>
270            NOTE: xmovie removed, only present in Etch
271            TODO: gimp-gap (potentially using ffmpeg code as well)
272            - avifile <unfixed> (embed; bug #538750)
273    
274    faad2
275            - mplayer 1.0~rc2-20 (embed)
276            - avifile <unfixed> (embed; bug #538750)
277    
278    mad MPEG decoding lib
279            - mad <unfixed> (embed)
280            - xine-lib <unfixed> (embed)
281    
282  libbz2:  libdts
283  dpkg (statically linked)          - xine-lib <unfixed> (embed)
284    
285  libgadu/ekg:  flac
286  centericq          - xine-lib <unfixed> (embed)
 gaim  
 pigdin (links dynamically against libgadu)  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 firefox (to be removed)  
 thunderbird (to be removed)  
 iceweasel  
 iceape  
 icedove  
 xulrunner  
 nvu (no longer in Debian)  
   
 xli:  
 xloadimage  
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum (removed from egroupware after sarge)  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 vfu (removed linking against embedded copy in 4.06-4.1; #450754)  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
 monotone (including this starting from 0.37)  
 glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)  
 apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)  
 exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)  
 yacas (<= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway)  
 gtamsanalyzer.app (links dynamically since 0.42-5)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
 monotone  
 iceweasel  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin (only in sarge)  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware (removed from egroupware after sarge)  
   
 chmlib:  
 kchmviewer (ships the code but links dynamically)  
   
 libavcodec/libavformat (source: ffmpeg):  
 mplayer (#395252)  
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
287    
288  mad MPEG decoding lib:  liba52
289  mad          - a52dec <unfixed> (embed)
290  xine-lib          - xine-lib <unfixed> (embed)
291    
292  libdts:  libmpeg2
293  libdts          - mpeg2dec <unfixed> (embed)
294  xine-lib          - xine-lib <unfixed> (embed)
295    
296  flac:  curl
297  flac          - wget <unfixed> (embed)
298  xine-lib          NOTE: code for NTLM authentication
299    
300  liba52:  uw-imap
301  a52dec          - pine <unfixed> (embed)
302  xine-lib          - alpine <unfixed> (embed)
303    
304  libmpeg2:  imagemagick
305  mpeg2dec          - graphicsmagick <unfixed> (fork)
 xine-lib  
306    
307  curl:  python-urlgrabber
308  wget (code for NTLM authentication)          - mercurial <unfixed> (embed; bug #531062)
309    
310  TODO evaluate:  python-mechanize
311  gimp-gap (potentially using ffmpeg code as well)          - python-beautifulsoup <unfixed> (embed)
312    
313  uw-imap:  halibut
314  pine          - nsis <unfixed> (fork)
 alpine  
315    
316  imagemagick:  libghttp
317  graphicsmagick          - hotway <unfixed> (embed)
318    
319  halibut:  libsndfile
320  nsis          - ardour 1:2.7.1-1 (embed)
321    
322  libghttp:  glibmm2.4
323  hotway          - ardour 1:2.7.1-1 (embed)
324    
325  libsndfile:  libgnomecanvasmm2.6
326  ardour          - ardour 1:2.7.1-1 (embed)
327    
328  glibmm2.4:  libsigc++-2.0
329  ardour          - ardour 1:2.7.1-1 (embed)
330    
331  libgnomecanvasmm2.6:  soundtouch
332  ardour          - ardour 1:2.7.1-1 (embed)
333    
334  libsigc++-2.0:  libmms
335  ardour          - xine-lib <unfixed> (embed)
336            - mimms <unfixed> (embed)
337    
338  soundtouch:  fckeditor
339  ardour          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
340            - moin 1.8.2-2 (embed; bug #452599)
341            - karrigell <removed> (embed; bug #452598)
342            - gforge 4.6.99+svn6225-1 (embed)
343            - request-tracker3.8 <unfixed> (embed)
344    
345  libmms:  ipatlas (not packaged in Debian)
346  xine-lib          - moodle <unfixed> (embed; bug #507185)
347  mimms  
348    libphp-phpmailer
349            - moodle <unfixed> (embed; bug #507185)
350            - mahara <unfixed> (embed)
351            - symfony <unfixed> (embed)
352            [etch] - phpgroupware <unfixed> (embed)
353            NOTE: phpgroupware-felamimail is only in etch
354            - egroupware <unfixed> (embed; bug #504283)
355            - glpi <unfixed>
356    
357    htmlArea (not packaged in Debian)
358            - moodle <unfixed> (embed)
359    
360  FCKeditor: (packaged as fckeditor)  giflib:
361  knowledgeroot          - wine <unfixed> (embed; bug #466181)
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
362    
363    bennu (not packaged in Debian, http://bennu.sourceforge.net)
364            - moodle <unfixed> (embed)
365    
366    smarty:
367            - moodle 1.8.2-2 (embed; bug #471158)
368            - gallery2 2.2.5-2 (embed; bug #471160)
369            - mahara 0.9.2-2 (embed; bug #471201)
370            - gosa 2.4beta1-1 (embed; bug #471200)
371    
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
372  TinyMCE  TinyMCE
373  bennu          - wordpress 2.5.1-3 (embed; bug #478257)
374            - moodle <unfixed> (embed; bug #507185)
375            - knowledgeroot <unfixed> (embed)
376            - joomla <itp> (bug #326398)
377    
378    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
379            - scite <unfixed> (embed)
380            - qscintilla <unfixed> (embed)
381            - qscintilla2 <unfixed> (embed)
382            - geany <unfixed> (fork)
383            - anjuta <unfixed> (embed)
384    
385    libphp-adodb
386            - moodle <unfixed> (embed; bug #507185)
387            NOTE: also AdoDB-XML Schema
388            - gallery2 <unfixed> (embed)
389            - phppgadmin <unfixed> (embed)
390            - egroupware <unfixed> (embed)
391            - phpwiki <unfixed> (embed)
392            - torrentflux 2.0beta1-2 (embed)
393            - ipplan <unfixed> (embed)
394            - typo3-src <unfixed> (embed)
395            - cacti <unknown> (embed)
396            [sarge] - cacti <unfixed> (embed)
397            NOTE: dependency exists, but internal version is used
398            - gforge 4.7~rc2-6 (embed)
399            - mahara <unfixed> (embed)
400    
401    gzip
402            - linux-kernel <unfixed> (embed)
403            NOTE: lib/inflate.c
404            - klibc <unfixed> (embed)
405            NOTE: based on linux-kernel gzip code
406            - busybox <unfixed> (embed)
407    
408    neon
409            - cadaver 0.22.3+debian-1 (embed; bug #188381)
410            - gnome-vfs2 <unfixed> (embed; bug #395874)
411            [etch] - litmus <unfixed> (embed; #395875)
412            - litmus <removed> (embed; #395875)
413            [sarge] - screem <unfixed> (embed)
414            - sitecopy 1:0.16.3-5 (embed; bug #395876)
415            [etch] - tla <unfixed> (embed; bug #395877)
416            [sarge] - tla <unfixed> (embed; bug #395877)
417    
418    libmodplug
419            - gst-plugins-bad0.10 <unfixed> (embed)
420    
421    libvncserver
422            - vino <unfixed> (embed)
423    
424    putty
425            - filezilla <unfixed> (embed)
426    
427    tinyxml (not packaged in Debian)
428            - filezilla <unfixed>
429    
430    gv
431            - evince <unfixed> (embed)
432            NOTE: ps/ tree from gv 3.5.8
433            - evince-gtk <unfixed> (embed)
434            NOTE: not packaged in Debian
435    
436    libXbae
437            [etch] - libpawlib2-lesstif <unfixed> (embed)
438            NOTE: from Cernlib
439    
440    libgtkhtml
441            - claws-mail-html2-viewer <unfixed> (fork)
442    
443    libXaw
444            [etch] - libpawlib2-lesstif <unfixed>
445            NOTE: from Cernlib
446            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
447    
448    libgd2
449            - graphviz <unfixed> (embed)
450            NOTE: lib/gd seems to be 2.0.33
451            - wml <unfixed> (embed)
452            - libwmf <unfixed> (embed)
453            NOTE: derived from gd 1.6.3
454    
455    rar
456            - unrar-nonfree <unfixed> (embed)
457    
458    unrar-free (maybe this code is derived from the original rar, too?)
459            - clamav <unfixed> (embed)
460            NOTE: seems to be disabled in default config
461    
462    mplayer (DirectMedia Object loader)
463            - xine-lib <unfixed> (embed)
464            NOTE: src/libw32dll/
465            - vlc <unfixed> (embed)
466            NOTE: modules/codec/dmo/
467            - mplayer 1.0~rc2-20 (embed)
468    
469    libwpd (WordPerfect converter)
470            - openoffice.org <unfixed> (embed)
471    
472    fsplib (http://sourceforge.net/projects/fsp/)
473            - gftp <unfixed> (embed)
474            NOTE: lib/fsplib version 0.3
475    
476    sprng
477            - tree-puzzle <unfixed> (embed)
478    
479    librpcsecgss
480            - krb5 <unfixed> (embed)
481    
482    jasper
483            - ghostscript <unfixed> (embed)
484            - gs-gpl <unfixed> (embed)
485    
486    libiris
487            - psi <unfixed> (embed)
488            - kdenetwork <unfixed> (embed)
489            NOTE: kopete embeds libiris but links dynamically to libidn
490            - kdegames <unfixed> (embed)
491            NOTE: ksirk/kde4
492    
493    libidn
494            - monotone 0.43-1 (embed)
495            - psi <unfixed> (embed)
496            NOTE: psi embeds libiris which embeds libidn
497            - kdegames <unfixed> (embed)
498            NOTE: kdegames/kde4 embeds libiris which embeds libidn
499    
500    liblua
501            - monotone 0.43-1 (embed)
502            - nmap <unfixed> (embed; bug #527997)
503            NOTE: fixed upstream as of nmap svn rev13336.
504    
505    libbotan
506            - monotone 0.43-1 (embed)
507    
508    NetXX
509            - monotone 0.43-1 (embed)
510    
511    libgc
512            - mono <unfixed> (embed)
513    
514    lzma
515            - p7zip <unfixed> (embed)
516            - xz-utils <unfixed> (fork)
517    
518    lzo
519            - grub2 <unfixed> (embed)
520    
521    yassl
522            - mysql-dfsg-5.0 <unfixed> (embed)
523    
524    pax code
525            - tar <unfixed> (embed)
526            - cpio <unfixed> (embed)
527    
528    t1lib
529            - tetex-bin 2.0.2-1 (embed)
530            - texlive-bin <unknown> (embed)
531    
532    guichan
533            - boswars <unfixed> (embed)
534            NOTE: maintainer notified us, working on it
535    
536    tolua
537            - boswars <unfixed> (embed)
538            NOTE: maintainer notified us, working on it
539    
540    asio-dev
541            - luxrender <unfixed> (embed)
542            NOTE: maintainer notified us, working on it
543            NOTE: may be merged with boost "soon"
544    
545    xine-lib
546            - vlc <unfixed> (embed)
547            NOTE: only parts included in modules/access/rtsp
548    
549    netpbm
550            - tcl8.3 <unfixed> (embed)
551            - tcl8.4 <unfixed> (embed)
552            - tcl8.5 <unfixed> (embed)
553            NOTE: generic/tkImgGIF.c
554    
555    tk8.5
556            - tk8.0 <removed> (old-version)
557            - tk8.3 <unfixed> (old-version)
558            - tk8.4 <unfixed> (old-version)
559            - perl-tk <unfixable> (fork)
560    
561    samba
562            - mc 2:4.6.2~git20080311-1 (embed)
563            NOTE: maintainer is aware of this, currently searching a solution
564    
565    plib1.8.4c2
566            - boson <unfixed> (fork)
567            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
568    
569    fribidi
570            - quesoglc <unfixed> (embed)
571            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
572    
573    glew
574            - quesoglc <unfixed> (embed; bug #489341)
575            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
576    
577    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
578            - transcend <unfixed> (embed)
579            - cultivation <unfixed> (embed)
580            - passage <unfixed> (embed)
581            - gravitation <unfixed> (embed)
582    
583    tar
584            - libarchive <unfixed> (embed)
585            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
586    
587    cpio
588            - libarchive <unfixed> (embed)
589            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
590    
591    webkit
592            - qt4-x11 <unfixed> (embed)
593    
594    ftgl
595            - blender 2.46+dfsg-1 (embed)
596    
597    wv
598            - abiword <unfixed>
599    
600    qemu
601            - kvm <unfixed> (embed; bug #543159)
602            - xen-3 <unfixed> (embed)
603            - xen-unstable <unfixed> (embed)
604    
605    vgabios
606            - kvm <unfixed> (embed; bug #489442)
607    
608    bochs
609            - kvm <unfixed> (embed; bug #489442)
610    
611    speex
612            - vorbis-tools <unfixed> (embed)
613            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
614            - gst-plugins-good0.10 <unfixed> (embed)
615            - xine-lib <unfixed> (embed)
616            - libfishsound <unfixed> (embed)
617            - libannodex <unfixed> (embed)
618            - vlc <unfixed> (embed)
619            - xmms-speex <unfixed> (embed)
620            - libsdl-sound1.2 <unfixed> (embed)
621            - sweep <unfixed> (embed)
622    
623    libreadline
624            - magic <unfixed> (old-version)
625            NOTE: magic is currently an RFS
626    
627    opcode
628            - ode <unfixed> (embed)
629            NOTE: opcode is not a package in debian, it is just embedded
630            NOTE: http://www.codercorner.com/Opcode.htm
631    
632    gimpact
633            - ode <unfixed> (embed)
634            NOTE: gimpact is not a package in debian, it is just embedded
635            NOTE: http://gimpact.sf.net
636    
637    mochikit
638            - mahara <unfixed> (embed)
639            NOTE: they require extra patches, still unmerged upstream
640            - ntop <unfixed> (embed)
641            - coherence <unfixed> (embed)
642            NOTE: python-coherence
643            - paste <unfixed> (embed)
644            NOTE: python-paste
645            - turbogears <unfixed> (embed)
646            NOTE: python-turbogears
647            - plone3 <unfixed> (embed)
648            NOTE: zope-plone3
649    
650    prototype
651            - netbeans-ide <unfixed> (embed)
652            - auth2db-frontend <unfixed> (embed)
653            - webcit <unfixed> (embed)
654            NOTE: citadel-webcit
655            - asterisk <unfixed> (embed)
656            - doc-iana <unfixed> (embed)
657            - libaws <unfixed> (embed)
658            NOTE: libaws-doc
659            - libgettext-ruby <unfixed> (embed)
660            NOTE: libgettext-ruby-data
661            - libjson-ruby <unfixed> (embed)
662            NOTE: libjson-ruby-doc
663            - lucene2 <unfixed> (embed)
664            NOTE: liblucene2-java-doc
665            - libopenid-ruby <unfixed> (embed)
666            - solr <unfixed> (embed)
667            NOTE: solr-common
668            - glpi <unfixed> (embed)
669            - hobbix <unfixed> (embed)
670            - mnemo2 <unfixed> (embed)
671            - nag2 <unfixed> (embed)
672            - knowledgeroot <unfixed> (embed)
673            - mediatomb <unfixed> (embed)
674            NOTE: mediatomb-common
675            - mt-daapd <unfixed> (embed)
676            - op-panel <unfixed> (embed)
677            - ebug-http <unfixed> (embed)
678            - phpgedview <removed> (embed)
679            - poker-network <unfixed> (embed)
680            NOTE: poker-web
681            - webhelpers <unfixed> (embed)
682            NOTE: python-webhelpers
683            - qwik <unfixed> (embed)
684            - rails <unfixed> (embed)
685            - typo3-src <unfixed> (embed)
686            - wordpress 2.5.0-2 (embed)
687            - zope <unfixed> (embed)
688            NOTE: zope-plone3
689            - smokeping <unfixed> (embed)
690            - ampache 3.4.1-2 (embed)
691            - exaile <unfixed> (embed)
692            - hobix <unfixed> (embed)
693            - pixelpost <unfixed> (embed)
694            - symfony <unfixed> (embed)
695            NOTE: it's been said that there are custom changes
696            - zabbix <unfixed> (embed)
697            NOTE: zabbix-frontend-php
698            - turba2 <unfixed> (embed)
699    
700    gdb
701            - insight <unfixed> (embed)
702    
703    e2fsprogs
704            - ldiskfsprogs <unfixable> (fork)
705    
706    quazip (not packaged in Debian)
707            - qcake <unfixed> (embed)
708            NOTE: starting with upstream version 0.6.4
709    
710    exo
711            - pcmanfm <unfixed> (embed; bug #499677)
712            NOTE: slightly modified source code
713    
714    java
715            - openjdk-6 <unfixed>
716            - sun-java5 <unfixed>
717            - sun-java6 <unfixed>
718    
719    libphp-snoopy
720            - ampache 3.4.1-2 (embed; bug #504169)
721            - mahara 1.0.5-2 (embed; bug #504170)
722            - pixelpost 1.7.1-5 (embed; bug #504171)
723            - mediamate 0.9.3.6-5 (embed; bug #504172)
724            - opendb <removed> (embed; bug #504173)
725            [etch] - opendb <unfixed> (embed; bug #504173)
726            - wordpress 2.5.1-9 (embed; bug #443948)
727            - moodle <unfixed> (embed; bug #507185)
728            [etch] - phpgroupware <unfixed> (embed)
729            NOTE: phpgroupware-felamimail
730            - magpierss 0.72-3 (embed; bug #431089)
731    
732    jquery
733            - zekr <unfixed> (embed)
734            - wordpress <unknown> (embed)
735            - yocto-reader <unfixed> (embed)
736            - textpattern <unfixed> (embed)
737            - genshi 0.5.1-1 (embed)
738            NOTE: compressed file under examples/ dir
739            - prewikka <unfixed> (embed)
740            - libramaze-ruby <unfixed> (embed)
741            - drupal5 <unfixed> (embed)
742            - b2evolution <unfixed> (embed)
743            - wesnoth <unfixed> (embed)
744    
745    tablesorter (jquery plugin, not packaged yet)
746            - wesnoth <unfixed> (embed)
747    
748    kses
749            - wordpress <unfixed> (embed; bug #504242)
750            NOTE: their copy has all methods renamed to wp_<foo>
751            NOTE: kses isn't in Debian, RFP: #504240
752            - moodle <unfixed> (embed; bug #507185)
753            - egroupware <unfixed> (embed)
754    
755    magpierss
756            - wordpress <unfixed> (embed; bug #504242)
757            - moodle <unfixed>
758    
759    php-gettext
760            - wordpress 2.8.4-1 (embed; bug #504242)
761    
762    libphp-ixr (name may change, it is the Incutio XML-RPC)
763            - wordpress <unfixed> (embed; bug #504242)
764            NOTE: libphp-ixr isn't in Debian, RFP: #504236
765            - dokuwiki <unfixed> (embed)
766            - textpattern <unfixed> (embed)
767    
768    libphp-cas
769            - glpi <unfixed> (embed)
770            - moodle <unfixed> (embed; bug #505984)
771    
772    scriptaculous
773            - glpi <unfixed> (embed)
774            - libaws <unfixed> (embed)
775            NOTE: libaws-doc
776            - op-panel <unfixed> (embed)
777            - symfony <unfixed> (embed)
778            NOTE: maintainer says there are extra incompatible changes required
779            - pixelpost <unfixed> (embed)
780            - webhelpers <unfixed> (embed)
781            NOTE: python-webhelpers
782            - qwik <unfixed> (embed)
783            - smokeping <unfixed> (embed)
784            - turba2 <unfixed> (embed)
785            - typo3-src 4.2.3-1 (embed)
786    
787    libmarkdown-php
788            - moodle <unfixed> (embed; bug #507185)
789            - pixelpost <unfixed> (embed)
790    
791    php-openid
792            - wordpress-openid <itp> (embed)
793    
794    geshi
795            - dokuwiki 0.0.20080505-3.1 (embed)
796            - pgfouine 1.0-1.1 (embed)
797            - websvn 2.1.0-1 (embed)
798    
799    webcalendar
800            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
801    
802    libical
803            - kdepim <unfixed> (fork)
804            - kdepimlibs <unfixed> (fork)
805            NOTE: fixed in KDE4 post 4.1.x series
806            - claws-mail-vcalendar-plugin <unfixed> (fork)
807    
808    libltdl3
809            - kdelibs <unfixed> (embed)
810            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
811            - synfig <unfixed> (embed)
812    
813    harfbuzz
814            - qt4-x11 <unfixed> (embed)
815    
816    libzip
817            - php5 <unfixed> (fork)
818            - odt2txt <unfixed> (embed; bug #523808)
819    
820    json.php (not packaged; should be replaced with php's built-in functions)
821            - moodle <unfixed>
822            - yui <unfixed>
823            - gallery2 <unfixed>
824            - dokuwiki <unfixed>
825            - typo3-src <unfixed>
826    
827    php-fpdf
828            - tcpdf <itp> (fork)
829            - moodle <unfixed>
830            - phpwiki <unfixed>
831            - egroupware <unfixed>
832            - ldap-account-manager <unfixed> (fork)
833    
834    tcpdf (itp: #495985)
835            - moodle <unfixed>
836            - phpmyadmin <unfixed>
837    
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
838  typo3  typo3
839  moodle          - moodle <unfixed>
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
840    
841  gzip:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
842  linux-kernel (lib/inflate.c)          - moodle <unfixed>
843  klibc (based on linux-kernel gzip code)          - gosa <unfixed>
 busybox  
844    
845  neon:  php-ole (itp: #487558)
846  cadaver (all, but being worked on: #188381)          - moodle <unfixed>
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
847    
848  libmodplug:  pieforms (http://www.catalyst.net.nz)
849  gst-plugins-bad0.10          - mahara <unfixed>
850    
851  libvncserver:  savant2 (http://phpsavant.com)
852  vino          - egroupware <unfixed>
853    
854  putty:  rssparser (http://nwow.org)
855  filezilla          - egroupware <unfixed>
856            - phpgroupware <unfixed>
857    
858  tinyxml (not packaged in Debian):  lcms
859  filezilla          - openjdk-6 <unfixed> (fork)
860    
861  gv:  libphp-phplayersmenu
862  evince (ps/ tree from gv 3.5.8)          - diogenes <unfixed>
863  evince-gtk (not packaged in Debian)          - phpldapadmin <unfixed>
864    
865  libXbae:  libphp-pclzip
866  libpawlib2-lesstif package (from Cernlib)          - docvert <unfixed>
867            - moodle <unfixed>
868            - egroupware <unfixed>
869    
870  libXaw:  libphp-simplepie
871  libpawlib2-lesstif package (from Cernlib)          - dokuwiki <unfixed>
872    
873  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  libphp-jpgraph
874            - egroupware <unfixed>
875    
876  libgd2:  php-simpletest
877  graphviz (lib/gd seems to be 2.0.33)          - moodle <unfixed>
878    
879  rar:  libpng
880  unrar-nonfree          - iceweasel <unfixed> (embed)
881            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
882            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
883            - iceape 1.0.13~pre080614i-0etch1 (embed)
884            - xulrunner <unfixed> (embed)
885            NOTE: Debian 1.9.0.6 uses embedded copy
886            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
887            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
888            NOTE: Ubuntu only
889            - firefox-3.0 <unfixed> (embed)
890            NOTE: Ubuntu only
891            - firefox-3.1 <unfixed> (embed)
892            NOTE: Ubuntu only
893            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
894            NOTE: Ubuntu only
895            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
896            NOTE: Ubuntu only
897            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
898            NOTE: Ubuntu only
899    
900  unrar-free: (maybe this code is derived from the original rar, too?)  irssi
901  clamav (seems to be disabled in default config)          - silc-client <unfixed> (embed)
902            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
903    
904  mplayer (DirectMedia Object loader):  extc
905  xine-lib (src/libw32dll/)          - mtasc <unfixed> (embed)
906  vlc (modules/codec/dmo/)          - haxe <unfixed> (embed)
907    
908  libwpd (WordPerfect converter):  swflib
909  openoffice.org          - mtasc <unfixed> (embed)
910            - haxe <unfixed> (embed)
911    
912  fsplib (http://sourceforge.net/projects/fsp/):  libitext-java
913  gftp (lib/fsplib version 0.3)          - bouncycastle 2.1.4-1 (embed)
914    
915  librpcsecgss:  python-ply
916  krb5          - pyke <unfixed> (embed)
917    
918  jasper:  libdumbnet (libdnet upstream)
919  ghostscript          - nmap <unfixed> (fork)
 gs-gpl  
920    
921  libidn:  gcc-4.4
922  monotone          - gcc-mingw32 <unfixed> (embed)
923    
924  liblua:  camlimages
925  monotone          - advi <unfixed> (embed)
926    
927  libbotan:  memcached
928  montone          - memcachedb <unfixed> (embed)
929    
930  NetXX:  yajl
931  monotone          - argyll <unfixed> (embed; bug #544223)
932            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
933    
934  libgc:  libept:
935  mono          - adept <unfixed> (embed; bug #540649)
936    
937  lzma:  libvorbis:
938  p7zip          - xulrunner <unfixed> (embed; bug #540959)
939    
940  lzo:  php-net-dnsbl:
941  grub2          - serendipity <unfixed> (embed)
942    
943  pax code:  php-onyx-rss:
944  tar          - serendipity <unfixed> (embed)
945  cpio  
946    php-text-wiki:
947            - serendipity <unfixed> (embed)
948    
949    php-xml-rpc:
950            - serendipity <unfixed> (embed)
951    
952  t1lib:  xyssl (does not have a shared library)
953  tetex-bin (links to system t1lib since 2.0.2)          - polarssl <unfixed> (fork)
 texlive-bin (links to system t1lib)  
954    
955    polarssl (does not have a shared library)
956            - pdkim <itp> (embed)
957            NOTE: pdkim ITP #543150

Legend:
Removed from v.7787  
changed lines
  Added in v.12707

  ViewVC Help
Powered by ViewVC 1.1.5