/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7787 by nion, Wed Jan 2 20:22:47 2008 UTC revision 12966 by gilbert-guest, Fri Oct 9 19:41:19 2009 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  sort: static (linking statically against a lib), embed (embedding a copy of the library into another source package)          <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embedding a copy of the library into another source package)
19          fork (the package is not just embedding code but it is a fork and
20                thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24    The srcpkg might be some string to identify the code if there is no
25    specific source package.
26    
27    Everything up to the next line is ignored.
28    ---BEGIN
29  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
31          NOTE: has been replaced by evince in etch          NOTE: has been replaced by evince in etch
32          - pdftohtml <unknown>          - pdftohtml <unknown>
33          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
34          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
35          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
36          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
38          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
39          NOTE: links to poppler          NOTE: links to poppler
40          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
41          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
42          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
43          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
44          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
46          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
47            - pdfedit <unfixed> (embed; bug #510794)
48            - swftools <unfixed> (embed)
49    
50    ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57  ppmd:  lrmi
58          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - read-edid 2.0.0-1 (embed; bug #495131)
59    
60  silc-toolkit:  peercast
61            - gnome-peercast <unfixed> (embed)
62            NOTE: gnome-peercast may better be removed, see #466539
63    
64    silc-toolkit
65          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
66    
67  dietlibc:  icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71    dietlibc
72          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
73    
74  libiax:  libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78    libiax
79          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixed> (embed)
80    
81  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
# Line 60  zlib (lots of apps embed a copy, but lin Line 89  zlib (lots of apps embed a copy, but lin
89          - pvpgn 1.7.8-2 (embed)          - pvpgn 1.7.8-2 (embed)
90          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
91          - rpm <unknown> (embed)          - rpm <unknown> (embed)
92          NOTE: pinged joeyh          NOTE: pinged anibal since when rpm was fixed
93            - tuxcmd-modules <unfixed> (embed)
94            - zsync <unfixed>
95            - tra <unfixed>
96            - sash <unfixed>
97            - nsis <unfixed>
98            - mseide-msegui <unfixed>
99            NOTE: mseide
100            - mirrordir <unfixed>
101            - poco <unfixed>
102            - klibc <unfixed>
103            - ghostscript <unfixed>
104            - freeimage <unfixed>
105            - clamav <unfixed> (fork)
106            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
107            - tuxonice-userui <unfixed>
108            - plt-scheme <unfixed>
109            - perl <unfixed>
110            - paraview <unfixed>
111            - gcvs <unfixed>
112            - erlang <unfixed>
113            - dump <unfixed>
114            - aide <unfixed> (static)
115            - dar <unfixed> (static)
116            - avfs <unfixed>
117            - fpc <unfixed>
118            - winff <unfixed>
119            NOTE: inherited from fpc, see #472304
120            - lazarus <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - erlang <unfixed> (embed)
123    
124    dulwich
125            - hg-git <unfixed> (embed; bug #541996)
126    
127    libvigraimpex
128            - hugin <unfixed> (embed; bug #542259)
129            - enblend-enfuse <unfixed> (embed; bug #542258)
130    
131    libbz2
132            - dpkg <unfixed> (static)
133    
134    libgadu
135            - centericq <unfixed> (embed)
136            - pidgin <unfixed> (embed)
137            NOTE: pidgin links dynamically against libgadu; that should be fixed, then???
138            - kdenetwork 4:3.3.2-5 (embed)
139            NOTE: from kdenetwork: kopete
140            - ekg 1:1.8~rc0-1 (embed)
141            - kadu 0.6.0.2-3 (embed; bug #504430)
142            - gadu <itp> (embed)
143    
144    xmlrpc (which package is the "origin" of this code?)
145            - drupal <unfixed> (embed)
146            - phpgroupware <unfixed> (embed)
147            - egroupware <unfixed> (embed)
148            - phpwiki <unfixed> (embed)
149            - php4 <unfixed> (embed)
150            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
151    
152    shtool (affects build-time only)
153            - mysql-ocaml <unfixed> (embed)
154            - php4 <unfixed> (embed)
155    
 libbz2:  
 dpkg (statically linked)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 pigdin (links dynamically against libgadu)  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 firefox (to be removed)  
 thunderbird (to be removed)  
 iceweasel  
156  iceape  iceape
157  icedove          - iceweasel <unfixed> (fork)
158  xulrunner          - icedove <unfixed> (fork)
159  nvu (no longer in Debian)          - xulrunner <unfixed> (fork)
160            - kompozer <unfixed> (embed; bug #532168)
161  xli:  
162  xloadimage  xli
163            - xloadimage <unfixed> (embed)
164  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
165  openmotif  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
166  xfree86/xorg (in libxpm)          - openmotif <unfixed> (embed)
167            - libxpm <unfixed> (embed)
168  kerberized apps with BSD origin:  
169  krb4  kerberized apps with BSD origin
170  krb5          - krb4 <removed> (embed)
171  heimdal          - krb5 <unfixed> (embed)
172            - heimdal <unfixed> (embed)
173  grip: (which pkg is the origin?)  
174  libcdaudio  grip (which pkg is the origin?)
175  grip          - libcdaudio <unfixed>
176  gnome-vfs (vfs2 as well?)          - grip <unfixed>
177            - gnome-vfs <unfixed>
178  fudforum:          TODO: check vfs2 as well
179  phpgroupware-fudforum  
180  egroupware-fudforum (removed from egroupware after sarge)  fudforum
181            [etch] - phpgroupware <unfixed> (embed)
182  cvs:          NOTE: phpgroupware-fudforum
183  gcvs (at least an additional script is included, check if there's more)          [sarge] - egroupware-fudforum <removed> (embed)
184    
185  pcre:  libbsd
186  all pythons          - rdate 1:1.2-3 (embed)
187  php4 (src included, but Debian package links dynamically)          - atheme-services <unfixed>
188  analog (src included, but Debian package links dynamically)          - libbsd-arc4random-perl <unfixed>
189  libgoffice-1          - isakmpd <unfixed>
190  vfu (removed linking against embedded copy in 4.06-4.1; #450754)  
191  tf5 (since 5.0beta7 the Debian package links dynamically)  cvs
192  monotone (including this starting from 0.37)          - gcvs <unfixed> (embed)
193  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          NOTE: see cvsunix/src in tarball
194  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)  
195  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)  pcre
196  yacas (<= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway)          - python* <unfixed> (embed)
197  gtamsanalyzer.app (links dynamically since 0.42-5)          - php4 <unknown> (embed)
198            - analog 2:5.23-0woody1 (embed)
199  tiff:          - goffice <unfixed> (embed)
200  wxpythongtk (check, which debian pkg this is in)          NOTE: libgoffice-*
201  older kdegraphics/kpdf releases < 3.3 embedded a copy          - vfu 4.06-4.1 (embed; bug #450754)
202            - tf5 5.0beta7-1 (embed)
203  uudeview:          - monotone 0.43-1 (embed)
204  libconvert-uulib-perl          NOTE: this only affects versions >= 0.37
205            - glib2.0 2.15.2-1 (embed)
206  sqlite: (not affected by security vulnerabilities so far)          - apache2 2.0.53-4 (embed)
207  amarok          - exim4 4.10-0.srh20.12 (embed)
208  monotone          - yacas <unfixed> (embed)
209  iceweasel          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
210            - gtamsanalyzer.app 0.42-5 (embed)
211  util-linux/mount:          - tin <unknown> (embed)
212  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - kazehakase 0.5.2-1
213            - webkit 1.0.1-1 (embed)
214  webmin:          - qt4-x11 <unfixed> (embed)
215  usermin (only in sarge)          NOTE: embedded via webkit copy
216            - erlang <unfixed> (embed)
217  sylpheed:  
218  sylpheed-claws  tiff
219            - wxwindows2.4 2.2.1 (embed)
220  phpsysinfo:  
221  egroupware  uudeview
222  phpgroupware          - libconvert-uulib-perl <unfixed> (embed)
223            - pan <unfixed> (embed)
224  phpldapadmin:  
225  egroupware (removed from egroupware after sarge)  sqlite (not affected by security vulnerabilities so far)
226            - amarok <unfixed> (embed)
227  chmlib:          - monotone 0.43-1 (embed)
228  kchmviewer (ships the code but links dynamically)          - iceweasel <unfixed> (embed)
229    
230  libavcodec/libavformat (source: ffmpeg):  util-linux/mount
231  mplayer (#395252)          - loop-aes-utils <unfixed> (embed)
232  xvidcap          NOTE: contains code from util-linux' mount in the mount-aes-udeb
233  kino (links statically, does not include code)  
234  vlc (links statically, does not include code)  sylpheed
235  smilutils (links statically, does not include code)          - sylpheed-claws <unfixed> (fork)
236  motion (links statically, does not include code)  
237  gst-ffmpeg  phpsysinfo
238  gstreamer0.10-ffmpeg          - egroupware <unfixed> (embed)
239  xmovie          - phpgroupware <unfixed> (embed)
240    
241  mad MPEG decoding lib:  phpldapadmin
242  mad          [sarge] - egroupware <unfixed> (embed)
243  xine-lib          NOTE: removed from egroupware after sarge
244    
245    chmlib
246            - kchmviewer <unknown> (embed)
247    
248    ffmpeg (libavcodec/libavformat)
249            - mplayer 1.0~rc2-14 (embed; bug #395252)
250            - kino 1.0.0-1
251            - vlc <not-affected> (Links dynamically since initial release)
252            - smilutils 0.3.0-10
253            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
254            - motion 3.1.19-1
255            - gstreamer0.10-ffmpeg 0.10.3-2
256            - xmovie <removed>
257            TODO: gimp-gap (potentially using ffmpeg code as well)
258            - avifile <unfixed> (embed; bug #538750)
259    
260    faad2
261            - mplayer 1.0~rc2-20 (embed)
262            - avifile <unfixed> (embed; bug #538750)
263    
264    libmad (MPEG decoding lib)
265            - xine-lib <unfixed> (embed)
266            - avifile <unfixed> (embed) [./plugins/libmad/*]
267            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
268    
 libdts:  
269  libdts  libdts
270  xine-lib          - xine-lib <unfixed> (embed)
271    
 flac:  
272  flac  flac
273  xine-lib          - xine-lib <unfixed> (embed)
274    
275  liba52:  liba52
276  a52dec          - a52dec <unfixed> (embed)
277  xine-lib          - xine-lib <unfixed> (embed)
278    
279  libmpeg2:  libmpeg2
280  mpeg2dec          - mpeg2dec <unfixed> (embed)
281  xine-lib          - xine-lib <unfixed> (embed)
282    
283  curl:  curl
284  wget (code for NTLM authentication)          - wget <unfixed> (embed)
285            NOTE: code for NTLM authentication
286    
287  TODO evaluate:  uw-imap
288  gimp-gap (potentially using ffmpeg code as well)          - pine <unfixed> (embed)
289            - alpine <unfixed> (embed)
290    
291  uw-imap:  imagemagick
292  pine          - graphicsmagick <unfixed> (fork)
 alpine  
293    
294  imagemagick:  python-urlgrabber
295  graphicsmagick          - mercurial <unfixed> (embed; bug #531062)
296    
297  halibut:  python-mechanize
298  nsis          - beautifulsoup <unfixed> (embed)
299    
300  libghttp:  halibut
301  hotway          - nsis <unfixed> (fork)
302    
303  libsndfile:  libghttp
304  ardour          - hotway <unfixed> (embed)
305    
306  glibmm2.4:  libsndfile
307  ardour          - ardour 1:2.7.1-1 (embed)
308    
309  libgnomecanvasmm2.6:  glibmm2.4
310  ardour          - ardour 1:2.7.1-1 (embed)
311    
312  libsigc++-2.0:  libgnomecanvasmm2.6
313  ardour          - ardour 1:2.7.1-1 (embed)
314    
315  soundtouch:  libsigc++-2.0
316  ardour          - ardour 1:2.7.1-1 (embed)
317    
318  libmms:  soundtouch
319  xine-lib          - ardour 1:2.7.1-1 (embed)
320  mimms  
321    libmms
322            - xine-lib <unfixed> (embed)
323            - mimms <unfixed> (embed)
324    
325    fckeditor
326            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
327            - moin 1.8.2-2 (embed; bug #452599)
328            - karrigell <removed> (embed; bug #452598)
329            - gforge 4.6.99+svn6225-1 (embed)
330            - request-tracker3.8 <unfixed> (embed)
331    
332    ipatlas (not packaged in Debian)
333            - moodle <unfixed> (embed; bug #507185)
334    
335    libphp-phpmailer
336            - moodle <unfixed> (embed; bug #507185)
337            - mahara <unfixed> (embed)
338            - symfony <unfixed> (embed)
339            [etch] - phpgroupware <unfixed> (embed)
340            NOTE: phpgroupware-felamimail is only in etch
341            - egroupware <unfixed> (embed; bug #504283)
342            - glpi <unfixed>
343    
344  FCKeditor: (packaged as fckeditor)  htmlArea (not packaged in Debian)
345  knowledgeroot          - moodle <unfixed> (embed)
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
346    
347    giflib:
348            - wine <unfixed> (embed; bug #466181)
349    
350    bennu (not packaged in Debian, http://bennu.sourceforge.net)
351            - moodle <unfixed> (embed)
352    
353    smarty:
354            - moodle 1.8.2-2 (embed; bug #471158)
355            - gallery2 2.2.5-2 (embed; bug #471160)
356            - mahara 0.9.2-2 (embed; bug #471201)
357            - gosa 2.4beta1-1 (embed; bug #471200)
358    
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
359  TinyMCE  TinyMCE
360  bennu          - wordpress 2.5.1-3 (embed; bug #478257)
361            - moodle <unfixed> (embed; bug #507185)
362            - knowledgeroot <unfixed> (embed)
363            - joomla <itp> (bug #326398)
364    
365    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
366            - scite <unfixed> (embed)
367            - qscintilla <unfixed> (embed)
368            - qscintilla2 <unfixed> (embed)
369            - geany <unfixed> (fork)
370            - anjuta <unfixed> (embed)
371    
372    libphp-adodb
373            - moodle <unfixed> (embed; bug #507185)
374            NOTE: also AdoDB-XML Schema
375            - gallery2 <unfixed> (embed)
376            - phppgadmin <unfixed> (embed)
377            - egroupware <unfixed> (embed)
378            - phpwiki <unfixed> (embed)
379            - torrentflux 2.0beta1-2 (embed)
380            - ipplan <unfixed> (embed)
381            - typo3-src <unfixed> (embed)
382            - cacti <unknown> (embed)
383            [sarge] - cacti <unfixed> (embed)
384            NOTE: dependency exists, but internal version is used
385            - gforge 4.7~rc2-6 (embed)
386            - mahara <unfixed> (embed)
387    
388    gzip
389            - linux-kernel <unfixed> (embed)
390            NOTE: lib/inflate.c
391            - klibc <unfixed> (embed)
392            NOTE: based on linux-kernel gzip code
393            - busybox <unfixed> (embed)
394    
395    neon
396            - cadaver 0.22.3+debian-1 (embed; bug #188381)
397            - gnome-vfs2 <unfixed> (embed; bug #395874)
398            [etch] - litmus <unfixed> (embed; #395875)
399            - litmus <removed> (embed; #395875)
400            [sarge] - screem <unfixed> (embed)
401            - sitecopy 1:0.16.3-5 (embed; bug #395876)
402            [etch] - tla <unfixed> (embed; bug #395877)
403            [sarge] - tla <unfixed> (embed; bug #395877)
404    
405    libmodplug
406            - gst-plugins-bad0.10 <unfixed> (embed)
407    
408    libvncserver
409            - vino <unfixed> (embed)
410    
411    putty
412            - filezilla <unfixed> (embed)
413    
414    tinyxml (not packaged in Debian)
415            - filezilla <unfixed>
416    
417    gv
418            - evince <unfixed> (embed)
419            NOTE: ps/ tree from gv 3.5.8
420            NOTE: evince-gtk is affected (a component of evince source package)
421    
422    libXbae
423            - paw <removed> (embed)
424            [etch] - paw <unfixed> (embed)
425    
426    libgtkhtml
427            - claws-mail-extra-plugins <unfixed> (fork)
428    
429    libXaw
430            - paw <removed> (embed)
431            [etch] - paw <unfixed> (embed)
432            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
433    
434    libgd2
435            - graphviz <unfixed> (embed)
436            NOTE: lib/gd seems to be 2.0.33
437            - wml <unfixed> (embed)
438            - libwmf <unfixed> (embed)
439            NOTE: derived from gd 1.6.3
440    
441    rar
442            - unrar-nonfree <unfixed> (embed)
443    
444    unrar-free (maybe this code is derived from the original rar, too?)
445            - clamav <unfixed> (embed)
446            NOTE: seems to be disabled in default config
447    
448    mplayer (DirectMedia Object loader)
449            - xine-lib <unfixed> (embed)
450            NOTE: src/libw32dll/
451            - vlc <unfixed> (embed)
452            NOTE: modules/codec/dmo/
453            - mplayer 1.0~rc2-20 (embed)
454    
455    libwpd (WordPerfect converter)
456            - openoffice.org <unfixed> (embed)
457    
458    fsplib (http://sourceforge.net/projects/fsp/)
459            - gftp <unfixed> (embed)
460            NOTE: lib/fsplib version 0.3
461    
462    sprng
463            - tree-puzzle <unfixed> (embed)
464    
465    librpcsecgss
466            - krb5 <unfixed> (embed)
467    
468    jasper
469            - ghostscript <unfixed> (embed)
470            - gs-gpl <unfixed> (embed)
471    
472    libiris
473            - psi <unfixed> (embed)
474            - kdenetwork <unfixed> (embed)
475            NOTE: kopete embeds libiris but links dynamically to libidn
476            - kdegames <unfixed> (embed)
477            NOTE: ksirk/kde4
478    
479    libidn
480            - monotone 0.43-1 (embed)
481            - psi <unfixed> (embed)
482            NOTE: psi embeds libiris which embeds libidn
483            - kdegames <unfixed> (embed)
484            NOTE: kdegames/kde4 embeds libiris which embeds libidn
485    
486    liblua
487            - monotone 0.43-1 (embed)
488            - nmap <unfixed> (embed; bug #527997)
489            NOTE: fixed upstream as of nmap svn rev13336.
490    
491    libbotan
492            - monotone 0.43-1 (embed)
493    
494    NetXX
495            - monotone 0.43-1 (embed)
496    
497    libgc
498            - mono <unfixed> (embed)
499    
500    lzma
501            - p7zip <unfixed> (embed)
502            - xz-utils <unfixed> (fork)
503    
504    lzo
505            - grub2 <unfixed> (embed)
506    
507    yassl
508            - mysql-dfsg-5.0 <unfixed> (embed)
509    
510    pax code
511            - tar <unfixed> (embed)
512            - cpio <unfixed> (embed)
513    
514    t1lib
515            - tetex-bin 2.0.2-1 (embed)
516            - texlive-bin <unknown> (embed)
517    
518    guichan
519            - boswars <unfixed> (embed)
520            NOTE: maintainer notified us, working on it
521    
522    tolua
523            - boswars <unfixed> (embed)
524            NOTE: maintainer notified us, working on it
525    
526    asio-dev
527            - luxrender <unfixed> (embed)
528            NOTE: maintainer notified us, working on it
529            NOTE: may be merged with boost "soon"
530    
531    xine-lib
532            - vlc <unfixed> (embed)
533            NOTE: only parts included in modules/access/rtsp
534    
535    netpbm
536            - tcl8.3 <unfixed> (embed)
537            - tcl8.4 <unfixed> (embed)
538            - tcl8.5 <unfixed> (embed)
539            NOTE: generic/tkImgGIF.c
540    
541    tk8.5
542            - tk8.0 <removed> (old-version)
543            - tk8.3 <unfixed> (old-version)
544            - tk8.4 <unfixed> (old-version)
545            - perl-tk <unfixable> (fork)
546    
547    samba
548            - mc 2:4.6.2~git20080311-1 (embed)
549            NOTE: maintainer is aware of this, currently searching a solution
550    
551    plib1.8.4c2
552            - boson <unfixed> (fork)
553            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
554    
555    fribidi
556            - quesoglc <unfixed> (embed)
557            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
558    
559    glew
560            - quesoglc <unfixed> (embed; bug #489341)
561            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
562    
563    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
564            - transcend <unfixed> (embed)
565            - cultivation <unfixed> (embed)
566            - passage <unfixed> (embed)
567            - gravitation <unfixed> (embed)
568    
569    tar
570            - libarchive <unfixed> (embed)
571            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
572    
573    cpio
574            - libarchive <unfixed> (embed)
575            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
576    
577    webkit
578            - qt4-x11 <unfixed> (embed)
579    
580    ftgl
581            - blender 2.46+dfsg-1 (embed)
582    
583    wv
584            - abiword <unfixed>
585    
586    qemu
587            - kvm <unfixed> (embed; bug #543159)
588            - xen-3 <unfixed> (embed)
589            - xen-unstable <unfixed> (embed)
590    
591    vgabios
592            - kvm <unfixed> (embed; bug #489442)
593    
594    bochs
595            - kvm <unfixed> (embed; bug #489442)
596    
597    speex
598            - vorbis-tools <unfixed> (embed)
599            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
600            - gst-plugins-good0.10 <unfixed> (embed)
601            - xine-lib <unfixed> (embed)
602            - libfishsound <unfixed> (embed)
603            - libannodex <unfixed> (embed)
604            - vlc <unfixed> (embed)
605            - xmms-speex <unfixed> (embed)
606            - libsdl-sound1.2 <unfixed> (embed)
607            - sweep <unfixed> (embed)
608    
609    libreadline
610            - magic <itp> (old-version)
611    
612    opcode
613            - ode <unfixed> (embed)
614            NOTE: opcode is not a package in debian, it is just embedded
615            NOTE: http://www.codercorner.com/Opcode.htm
616    
617    gimpact
618            - ode <unfixed> (embed)
619            NOTE: gimpact is not a package in debian, it is just embedded
620            NOTE: http://gimpact.sf.net
621    
622    mochikit
623            - mahara <unfixed> (embed)
624            NOTE: they require extra patches, still unmerged upstream
625            - ntop <unfixed> (embed)
626            - coherence <unfixed> (embed)
627            NOTE: python-coherence
628            - paste <unfixed> (embed)
629            NOTE: python-paste
630            - turbogears <unfixed> (embed)
631            NOTE: python-turbogears
632            - plone3 <unfixed> (embed)
633            NOTE: zope-plone3
634    
635    prototypejs
636            - netbeans-ide <unfixed> (embed)
637            - auth2db <unfixed> (embed)
638            - webcit <unfixed> (embed)
639            NOTE: citadel-webcit
640            - asterisk <unfixed> (embed)
641            - doc-iana <unfixed> (embed)
642            - libaws <unfixed> (embed)
643            NOTE: libaws-doc
644            - libgettext-ruby <unfixed> (embed)
645            NOTE: libgettext-ruby-data
646            - libjson-ruby <unfixed> (embed)
647            NOTE: libjson-ruby-doc
648            - lucene2 <unfixed> (embed)
649            NOTE: liblucene2-java-doc
650            - libopenid-ruby <unfixed> (embed)
651            - solr <unfixed> (embed)
652            NOTE: solr-common
653            - glpi <unfixed> (embed)
654            - mnemo2 <unfixed> (embed)
655            - nag2 <unfixed> (embed)
656            - knowledgeroot <unfixed> (embed)
657            - mediatomb <unfixed> (embed)
658            NOTE: mediatomb-common
659            - mt-daapd <unfixed> (embed)
660            - op-panel <unfixed> (embed)
661            - ebug-http <unfixed> (embed)
662            - phpgedview <removed> (embed)
663            - poker-network <unfixed> (embed)
664            NOTE: poker-web
665            - webhelpers <unfixed> (embed)
666            NOTE: python-webhelpers
667            - qwik <unfixed> (embed)
668            - rails <unfixed> (embed)
669            - typo3-src <unfixed> (embed)
670            - wordpress 2.5.0-2 (embed)
671            - zope <unfixed> (embed)
672            NOTE: zope-plone3
673            - smokeping <unfixed> (embed)
674            - ampache 3.4.1-2 (embed)
675            - exaile <unfixed> (embed)
676            - hobix <unfixed> (embed)
677            - pixelpost <unfixed> (embed)
678            - symfony <unfixed> (embed)
679            NOTE: it's been said that there are custom changes
680            - zabbix <unfixed> (embed)
681            NOTE: zabbix-frontend-php
682            - turba2 <unfixed> (embed)
683    
684    gdb
685            - insight <unfixed> (embed)
686    
687    e2fsprogs
688            - ldiskfsprogs <unfixable> (fork)
689    
690    quazip (not packaged in Debian)
691            - qcake <unfixed> (embed)
692            NOTE: starting with upstream version 0.6.4
693    
694    exo
695            - pcmanfm <unfixed> (embed; bug #499677)
696            NOTE: slightly modified source code
697    
698    java
699            - openjdk-6 <unfixed>
700            - sun-java5 <unfixed>
701            - sun-java6 <unfixed>
702    
703    libphp-snoopy
704            - ampache 3.4.1-2 (embed; bug #504169)
705            - mahara 1.0.5-2 (embed; bug #504170)
706            - pixelpost 1.7.1-5 (embed; bug #504171)
707            - mediamate 0.9.3.6-5 (embed; bug #504172)
708            - opendb <removed> (embed; bug #504173)
709            [etch] - opendb <unfixed> (embed; bug #504173)
710            - wordpress 2.5.1-9 (embed; bug #443948)
711            - moodle <unfixed> (embed; bug #507185)
712            [etch] - phpgroupware <unfixed> (embed)
713            NOTE: phpgroupware-felamimail
714            - magpierss 0.72-3 (embed; bug #431089)
715    
716    jquery
717            - zekr <unfixed> (embed)
718            - wordpress <unknown> (embed)
719            - yocto-reader <unfixed> (embed)
720            - textpattern <unfixed> (embed)
721            - genshi 0.5.1-1 (embed)
722            NOTE: compressed file under examples/ dir
723            - prewikka <unfixed> (embed)
724            - libramaze-ruby <unfixed> (embed)
725            - drupal5 <unfixed> (embed)
726            - b2evolution <unfixed> (embed)
727            - wesnoth <unfixed> (embed)
728    
729    tablesorter (jquery plugin, not packaged yet)
730            - wesnoth <unfixed> (embed)
731    
732    kses
733            - wordpress <unfixed> (embed; bug #504242)
734            NOTE: their copy has all methods renamed to wp_<foo>
735            NOTE: kses isn't in Debian, RFP: #504240
736            - moodle <unfixed> (embed; bug #507185)
737            - egroupware <unfixed> (embed)
738    
739    magpierss
740            - wordpress <unfixed> (embed; bug #504242)
741            - moodle <unfixed>
742    
743    php-gettext
744            - wordpress 2.8.4-1 (embed; bug #504242)
745    
746    libphp-ixr (name may change, it is the Incutio XML-RPC)
747            - wordpress <unfixed> (embed; bug #504242)
748            NOTE: libphp-ixr isn't in Debian, RFP: #504236
749            - dokuwiki <unfixed> (embed)
750            - textpattern <unfixed> (embed)
751    
752    libphp-cas
753            - glpi <unfixed> (embed)
754            - moodle <unfixed> (embed; bug #505984)
755    
756    scriptaculous
757            - glpi <unfixed> (embed)
758            - libaws <unfixed> (embed)
759            NOTE: libaws-doc
760            - op-panel <unfixed> (embed)
761            - symfony <unfixed> (embed)
762            NOTE: maintainer says there are extra incompatible changes required
763            - pixelpost <unfixed> (embed)
764            - webhelpers <unfixed> (embed)
765            NOTE: python-webhelpers
766            - qwik <unfixed> (embed)
767            - smokeping <unfixed> (embed)
768            - turba2 <unfixed> (embed)
769            - typo3-src 4.2.3-1 (embed)
770    
771    libmarkdown-php
772            - moodle <unfixed> (embed; bug #507185)
773            - pixelpost <unfixed> (embed)
774    
775    php-openid
776            - wordpress-openid <itp> (embed)
777    
778    geshi
779            - dokuwiki 0.0.20080505-3.1 (embed)
780            - pgfouine 1.0-1.1 (embed)
781            - websvn 2.1.0-1 (embed)
782    
783    webcalendar
784            - gforge 4.7~rc2-6 (embed; bug #504758)
785    
786    libical
787            - kdepim <unfixed> (fork)
788            - kdepimlibs <unfixed> (fork)
789            NOTE: fixed in KDE4 post 4.1.x series
790            - claws-mail-extra-plugins <unfixed> (fork)
791    
792    libltdl3
793            - kdelibs <unfixed> (embed)
794            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
795            - synfig <unfixed> (embed)
796    
797    harfbuzz
798            - qt4-x11 <unfixed> (embed)
799    
800    libzip
801            - php5 <unfixed> (fork)
802            - odt2txt <unfixed> (embed; bug #523808)
803    
804    json.php (not packaged; should be replaced with php's built-in functions)
805            - moodle <unfixed>
806            - yui <unfixed>
807            - gallery2 <unfixed>
808            - dokuwiki <unfixed>
809            - typo3-src <unfixed>
810    
811    php-fpdf
812            - tcpdf <itp> (fork)
813            - moodle <unfixed>
814            - phpwiki <unfixed>
815            - egroupware <unfixed>
816            - ldap-account-manager <unfixed> (fork)
817    
818    tcpdf (itp: #495985)
819            - moodle <unfixed>
820            - phpmyadmin <unfixed>
821    
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
822  typo3  typo3
823  moodle          - moodle <unfixed>
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
824    
825  gzip:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
826  linux-kernel (lib/inflate.c)          - moodle <unfixed>
827  klibc (based on linux-kernel gzip code)          - gosa <unfixed>
 busybox  
828    
829  neon:  php-ole (itp: #487558)
830  cadaver (all, but being worked on: #188381)          - moodle <unfixed>
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
831    
832  libmodplug:  pieforms (http://www.catalyst.net.nz)
833  gst-plugins-bad0.10          - mahara <unfixed>
834    
835  libvncserver:  savant2 (http://phpsavant.com)
836  vino          - egroupware <unfixed>
837    
838  putty:  rssparser (http://nwow.org)
839  filezilla          - egroupware <unfixed>
840            - phpgroupware <unfixed>
841    
842  tinyxml (not packaged in Debian):  lcms
843  filezilla          - openjdk-6 <unfixed> (fork)
844    
845  gv:  libphp-phplayersmenu
846  evince (ps/ tree from gv 3.5.8)          - diogenes <unfixed>
847  evince-gtk (not packaged in Debian)          - phpldapadmin <unfixed>
848    
849  libXbae:  libphp-pclzip
850  libpawlib2-lesstif package (from Cernlib)          - docvert <unfixed>
851            - moodle <unfixed>
852            - egroupware <unfixed>
853    
854  libXaw:  libphp-simplepie
855  libpawlib2-lesstif package (from Cernlib)          - dokuwiki <unfixed>
856    
857  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  libphp-jpgraph
858            - egroupware <unfixed>
859    
860  libgd2:  php-simpletest
861  graphviz (lib/gd seems to be 2.0.33)          - moodle <unfixed>
862    
863  rar:  libpng
864  unrar-nonfree          - iceweasel <not-affected> (uses xulrunner)
865            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
866            - iceape 1.0.13~pre080614i-0etch1 (embed)
867            - xulrunner 1.9.0.13-1 (embed)
868            [lenny] - xulrunner 1.9.0.11-0lenny1
869            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
870    
871  unrar-free: (maybe this code is derived from the original rar, too?)  irssi
872  clamav (seems to be disabled in default config)          - silc-client <unfixed> (embed)
873            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
874    
875  mplayer (DirectMedia Object loader):  extc
876  xine-lib (src/libw32dll/)          - mtasc <unfixed> (embed)
877  vlc (modules/codec/dmo/)          - haxe <unfixed> (embed)
878    
879  libwpd (WordPerfect converter):  swflib
880  openoffice.org          - mtasc <unfixed> (embed)
881            - haxe <unfixed> (embed)
882    
883  fsplib (http://sourceforge.net/projects/fsp/):  libitext-java
884  gftp (lib/fsplib version 0.3)          - bouncycastle 2.1.4-1 (embed)
885    
886  librpcsecgss:  python-ply
887  krb5          - pyke <unfixed> (embed)
888    
889  jasper:  libdumbnet (libdnet upstream)
890  ghostscript          - nmap <unfixed> (fork)
 gs-gpl  
891    
892  libidn:  gcc-4.4
893  monotone          - gcc-mingw32 <unfixed> (embed)
894    
895  liblua:  camlimages
896  monotone          - advi <unfixed> (embed)
897    
898  libbotan:  memcached
899  montone          - memcachedb <unfixed> (embed)
900    
901  NetXX:  yajl
902  monotone          - argyll <unfixed> (embed; bug #544223)
903            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
904    
905  libgc:  libept
906  mono          - adept <unfixed> (embed; bug #540649)
907    
908  lzma:  libvorbis
909  p7zip          - iceweasel <not-affected> (uses xulrunner)
910            - xulrunner <not-affected> (introduced in 1.9.1)
911            TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]
912    
913  lzo:  cairo
914  grub2          - iceweasel <not-affected> (uses xulrunner)
915            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
916    
917  pax code:  php-net-dnsbl
918  tar          - serendipity <unfixed> (embed)
919  cpio  
920    php-onyx-rss
921            - serendipity <unfixed> (embed)
922    
923    php-text-wiki
924            - serendipity <unfixed> (embed)
925    
926    php-xml-rpc
927            - serendipity <unfixed> (embed)
928    
929    polarssl (does not have a shared library)
930            - pdkim <itp> (embed; bug #543150)
931            - xyssl <unfixed> (old-version)
932    
933    pidgin
934            - gaim <removed> (old-version)
935    
936    icu
937            - webkit 1.0.1-1 (embed; bug #547214)
938            - texlive-bin <unfixed> (fork)
939            NOTE: texlive upstream working with icu upstream to merge their changes
940    
941    cyrus-imapd-2.2
942            - kolab-cyrus-imapd <unfixed> (fork)
943            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
944    
945    python-cxx-dev
946            - freecad <unfixed> (embed; bug #547936)
947    
948    libzipios++-dev
949            - freecad <unfixed> (embed; bug #547941)
950    
951    linux-2.6
952            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
953            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
954    
955    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
956            - kvm <unfixed> (embed) [./libfdt/*]
957    
958    qweb (not packaged)
959            - ajaxterm <unfixed>
960    
961  t1lib:  opensaml2
962  tetex-bin (links to system t1lib since 2.0.2)          - opensaml <removed> (old-version)
 texlive-bin (links to system t1lib)  
963    
964    shibboleth-sp2
965            - shibboleth-sp <removed> (old-version)

Legend:
Removed from v.7787  
changed lines
  Added in v.12966

  ViewVC Help
Powered by ViewVC 1.1.5