/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7830 by nion, Fri Jan 4 18:01:23 2008 UTC revision 11865 by hesso-guest, Sun May 10 06:15:28 2009 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
17        embed (embedding a copy of the library into another source package)        embed (embedding a copy of the library into another source package)
18        fork (the package is not just embedding code but it is a fork and thus might share parts of the source code)        fork (the package is not just embedding code but it is a fork and
19                thus might share parts of the source code)
20          old-version (the package is an older version of essentially
21                       the same code)
22    
23  The srcpkg might be some string to identify the code if there is no specific source package.  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
30          - gpdf <removed>          - gpdf <removed>
# Line 26  xpdf (some srcpkgs use xpdf2 code, some Line 34  xpdf (some srcpkgs use xpdf2 code, some
34          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
35          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
36          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
37          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
39          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
40          NOTE: links to poppler          NOTE: links to poppler
41          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
42          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
43          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
44          - pdfkit.framework 0.8-4 (embed)          - pdfkit.framework 0.8-4 (embed)
45          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
46          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
48          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
49            - pdfedit <unfixed> (embed; bug #510794)
50            - swftools <unfixed> (embed)
51    
52  ppmd  ppmd
53          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54    
55    peercast
56            - gnome-peercast <unfixed> (embed)
57            NOTE: gnome-peercast may better be removed, see #466539
58    
59  silc-toolkit  silc-toolkit
60          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
61    
62    icclib
63            - ghostscript <unfixed> (embed)
64            - argyll <unfixed> (embed)
65    
66  dietlibc  dietlibc
67          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
68    
69    libmikmod
70            - sdl-mixer1.2 <unfixed> (embed)
71            TODO: report bug
72    
73  libiax  libiax
74          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixed> (embed)
75    
# Line 64  zlib (lots of apps embed a copy, but lin Line 84  zlib (lots of apps embed a copy, but lin
84          - pvpgn 1.7.8-2 (embed)          - pvpgn 1.7.8-2 (embed)
85          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
86          - rpm <unknown> (embed)          - rpm <unknown> (embed)
87          NOTE: pinged joeyh since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
88            - tuxcmd-modules <unfixed> (embed)
89            - zsync <unfixed>
90            - tra <unfixed>
91            - sash <unfixed>
92            - nsis <unfixed>
93            - mseide-msegui <unfixed>
94            NOTE: mseide
95            - mirrordir <unfixed>
96            - poco <unfixed>
97            - klibc <unfixed>
98            - ghostscript <unfixed>
99            - freeimage <unfixed>
100            - clamav <unfixed> (fork)
101            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
102            - tuxonice-userui <unfixed>
103            - plt-scheme <unfixed>
104            - perl <unfixed>
105            - paraview <unfixed>
106            - gcvs <unfixed>
107            - erlang <unfixed>
108            - dump <unfixed>
109            - aide <unfixed> (static)
110            - dar <unfixed> (static)
111            - avfs <unfixed>
112            - fpc <unfixed>
113            - winff <unfixed>
114            NOTE: inherited from fpc, see #472304
115            - lazarus <unfixed>
116            NOTE: inherited from fpc, see #472304
117    
118  libbz2  libbz2
119          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
120    
121  ekg  libgadu:
122          - centericq <unfixed> (embed)          - centericq <unfixed> (embed)
123          - gaim <unfixed> (embed)          - gaim <unfixed> (embed)
124          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
125          - kopete 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
126          - kadu <unfixed> (embed)          NOTE: from kdenetwork: kopete
127          - gadu <unfixed> (embed)          - gadu <unfixed> (embed)
128          NOTE: g/kadu not packaged in Debian yet          - ekg 1:1.8~rc0-1 (embed)
129            - kadu 0.6.0.2-3 (embed; bug #504430)
130            NOTE: gadu not packaged in Debian yet
131    
132  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
133          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
134          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
135          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
136          - phpwiki (embed)          - phpwiki <unfixed> (embed)
137          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
138          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
139    
# Line 92  shtool (affects build-time only) Line 143  shtool (affects build-time only)
143    
144  mozilla source code  mozilla source code
145          - mozilla-firefox <unfixed> (embed)          - mozilla-firefox <unfixed> (embed)
146          - mozilla-thunderbird          - mozilla-thunderbird <unfixed>
147          - firefox <removed>          - firefox <removed>
         [etch] - firefox <unfixed> (embed)  
148          - thunderbird <removed>          - thunderbird <removed>
         [etch] - thunderbird <unfixed> (embed)  
149          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
150          - iceape <unfixed> (embed)          - iceape <unfixed> (embed)
151          - icedove <unfixed> (embed)          - icedove <unfixed> (embed)
# Line 108  xli Line 157  xli
157    
158  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
159          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
160          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed)
         NOTE: in libxpm  
161    
162  kerberized apps with BSD origin  kerberized apps with BSD origin
163          - krb4 <unfixed> (embed)          - krb4 <unfixed> (embed)
# Line 117  kerberized apps with BSD origin Line 165  kerberized apps with BSD origin
165          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
166    
167  grip (which pkg is the origin?)  grip (which pkg is the origin?)
168          - libcdaudio          - libcdaudio <unfixed>
169          - grip          - grip <unfixed>
170          - gnome-vfs          - gnome-vfs <unfixed>
171          TODO: check vfs2 as well          TODO: check vfs2 as well
172    
173  fudforum  fudforum
174          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
175          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
176          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
177    
178  cvs  cvs
179          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
# Line 135  pcre Line 183  pcre
183          - python* <unfixed> (embed)          - python* <unfixed> (embed)
184          - php4 <unknown> (embed)          - php4 <unknown> (embed)
185          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
186          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
187            NOTE: libgoffice-*
188          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
189          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
190          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
191          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
192          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
193          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
194          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
195          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
196          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
197          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
198            - tin <unknown> (embed)
199            - kazehakase 0.5.2-1
200            - webkit <unfixed> (embed)
201            - qt4-x11 <unfixed> (embed)
202            NOTE: embedded via webkit copy
203    
204  tiff  tiff
205          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
         TODO: check, which debian pkg this is in  
206    
207  uudeview  uudeview
208          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
209            - pan <unfixed> (embed)
210    
211  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
212          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
213          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
214          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
215    
216  util-linux/mount  util-linux/mount
# Line 176  phpsysinfo Line 229  phpsysinfo
229          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
230    
231  phpldapadmin  phpldapadmin
232          - [sarge] egroupware <unfixed> (embed)          [sarge] - egroupware <unfixed> (embed)
233          NOTE: removed from egroupware after sarge          NOTE: removed from egroupware after sarge
234    
235  chmlib  chmlib
236          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
237    
238  libavcodec/libavformat (source: ffmpeg)  libavcodec/libavformat (source: ffmpeg)
239          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
240          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
241          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
242          - vlc <unfixed> (static)          - smilutils 0.3.0-10
243          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
244          - motion <unfixed> (static)          - motion 3.1.19-1
245          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
         - gstreamer0.10-ffmpeg <unfixed> (embed)  
246          - xmovie <unfixed>          - xmovie <unfixed>
247            TODO: gimp-gap (potentially using ffmpeg code as well)
248    
249    faad2
250            - mplayer 1.0~rc2-20 (embed)
251    
252  mad MPEG decoding lib  mad MPEG decoding lib
253          - mad <unfixed> (embed)          - mad <unfixed> (embed)
254          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
255    
 libdts:  
256  libdts  libdts
257  xine-lib          - xine-lib <unfixed> (embed)
258    
 flac:  
259  flac  flac
260  xine-lib          - xine-lib <unfixed> (embed)
261    
262  liba52:  liba52
263  a52dec          - a52dec <unfixed> (embed)
264  xine-lib          - xine-lib <unfixed> (embed)
265    
266  libmpeg2:  libmpeg2
267  mpeg2dec          - mpeg2dec <unfixed> (embed)
268  xine-lib          - xine-lib <unfixed> (embed)
269    
270  curl:  curl
271  wget (code for NTLM authentication)          - wget <unfixed> (embed)
272            NOTE: code for NTLM authentication
273    
274  TODO evaluate:  uw-imap
275  gimp-gap (potentially using ffmpeg code as well)          - pine <unfixed> (embed)
276            - alpine <unfixed> (embed)
277    
278  uw-imap:  imagemagick
279  pine          - graphicsmagick <unfixed> (fork)
 alpine  
280    
281  imagemagick:  halibut
282  graphicsmagick          - nsis <unfixed> (fork)
283    
284  halibut:  libghttp
285  nsis          - hotway <unfixed> (embed)
286    
287  libghttp:  libsndfile
288  hotway          - ardour 1:2.7.1-1 (embed)
289    
290  libsndfile:  glibmm2.4
291  ardour          - ardour 1:2.7.1-1 (embed)
292    
293  glibmm2.4:  libgnomecanvasmm2.6
294  ardour          - ardour 1:2.7.1-1 (embed)
295    
296  libgnomecanvasmm2.6:  libsigc++-2.0
297  ardour          - ardour 1:2.7.1-1 (embed)
298    
299  libsigc++-2.0:  soundtouch
300  ardour          - ardour 1:2.7.1-1 (embed)
301    
302  soundtouch:  libmms
303  ardour          - xine-lib <unfixed> (embed)
304            - mimms <unfixed> (embed)
305    
306  libmms:  fckeditor
307  xine-lib          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
308  mimms          - moin 1.8.2-2 (embed; bug #452599)
309            - karrigell <removed> (embed; bug #452598)
310            - gforge 4.6.99+svn6225-1 (embed)
311    
312    ipatlas (not packaged in Debian)
313            - moodle <unfixed> (embed; bug #507185)
314    
315    libphp-phpmailer
316            - moodle <unfixed> (embed; bug #507185)
317            - mahara <unfixed> (embed)
318            - symfony <unfixed> (embed)
319            [etch] - phpgroupware <unfixed> (embed)
320            NOTE: phpgroupware-felamimail is only in etch
321            - egroupware <unfixed> (embed; bug #504283)
322            - glpi <unfixed>
323    
324    htmlArea (not packaged in Debian)
325            - moodle <unfixed> (embed)
326    
327    giflib:
328            - wine <unfixed> (embed; bug #466181)
329    
330    bennu (not packaged in Debian, http://bennu.sourceforge.net)
331            - moodle <unfixed> (embed)
332    
333    smarty:
334            - moodle 1.8.2-2 (embed; bug #471158)
335            - gallery2 2.2.5-2 (embed; bug #471160)
336            - mahara 0.9.2-2 (embed; bug #471201)
337            - gosa 2.4beta1-1 (embed; bug #471200)
338    
339  FCKeditor: (packaged as fckeditor)  TinyMCE
340  knowledgeroot          - wordpress 2.5.1-3 (embed; bug #478257)
341  moin (452599)          - moodle <unfixed> (embed; bug #507185)
342  karrigell (452598)          - knowledgeroot <unfixed> (embed)
343  gforge-plugins-extra (fixed since 4.6.99+svn6225-1)          - joomla <itp> (bug #326398)
344    
345    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
346            - scite <unfixed> (embed)
347            - qscintilla <unfixed> (embed)
348            - qscintilla2 <unfixed> (embed)
349            - geany <unfixed> (fork)
350            - anjuta <unfixed> (embed)
351    
352    libphp-adodb
353            - moodle <unfixed> (embed; bug #507185)
354            NOTE: also AdoDB-XML Schema
355            - gallery2 <unfixed> (embed)
356            - phppgadmin <unfixed> (embed)
357            - egroupware <unfixed> (embed)
358            - phpwiki <unfixed> (embed)
359            - ipplan <unfixed> (embed)
360            - typo3-src <unfixed> (embed)
361            - cacti <unknown> (embed)
362            [sarge] - cacti <unfixed> (embed)
363            NOTE: dependency exists, but internal version is used
364            - gforge 4.7~rc2-6 (embed)
365            - mahara <unfixed> (embed)
366    
367    gzip
368            - linux-kernel <unfixed> (embed)
369            NOTE: lib/inflate.c
370            - klibc <unfixed> (embed)
371            NOTE: based on linux-kernel gzip code
372            - busybox <unfixed> (embed)
373    
374    neon
375            - cadaver <unfixed> (embed; bug #188381)
376            - gnome-vfs2 <unfixed> (embed; bug #395874)
377            - litmus <unfixed> (embed; #395875)
378            [sarge] - screem <unfixed> (embed)
379            - sitecopy <unfixed> (embed; bug #395876)
380            [etch] - tla <unfixed> (embed; bug #395877)
381            [sarge] - tla <unfixed> (embed; bug #395877)
382    
383    libmodplug
384            - gst-plugins-bad0.10 <unfixed> (embed)
385    
386    libvncserver
387            - vino <unfixed> (embed)
388    
389    putty
390            - filezilla <unfixed> (embed)
391    
392    tinyxml (not packaged in Debian)
393            - filezilla <unfixed>
394    
395    gv
396            - evince <unfixed> (embed)
397            NOTE: ps/ tree from gv 3.5.8
398            - evince-gtk <unfixed> (embed)
399            NOTE: not packaged in Debian
400    
401    libXbae
402            [etch] - libpawlib2-lesstif <unfixed> (embed)
403            NOTE: from Cernlib
404    
405    libXaw
406            [etch] - libpawlib2-lesstif <unfixed>
407            NOTE: from Cernlib
408            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
409    
410    libgd2
411            - graphviz <unfixed> (embed)
412            NOTE: lib/gd seems to be 2.0.33
413            - wml <unfixed> (embed)
414            - libwmf <unfixed> (embed)
415            NOTE: derived from gd 1.6.3
416    
417    rar
418            - unrar-nonfree <unfixed> (embed)
419    
420    unrar-free (maybe this code is derived from the original rar, too?)
421            - clamav <unfixed> (embed)
422            NOTE: seems to be disabled in default config
423    
424    mplayer (DirectMedia Object loader)
425            - xine-lib <unfixed> (embed)
426            NOTE: src/libw32dll/
427            - vlc <unfixed> (embed)
428            NOTE: modules/codec/dmo/
429            - mplayer 1.0~rc2-20 (embed)
430    
431    libwpd (WordPerfect converter)
432            - openoffice.org <unfixed> (embed)
433    
434    fsplib (http://sourceforge.net/projects/fsp/)
435            - gftp <unfixed> (embed)
436            NOTE: lib/fsplib version 0.3
437    
438    sprng
439            - tree-puzzle <unfixed> (embed)
440    
441  Moodle contains lots of things:  librpcsecgss
442  AdoDB          - krb5 <unfixed> (embed)
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
443    
444  TinyMCE:  jasper
445  wordpress          - ghostscript <unfixed> (embed)
446  moodle          - gs-gpl <unfixed> (embed)
447  knowledgeroot  
448  joomla (ITP)  libiris
449            - psi <unfixed> (embed)
450  scintilla:          - kdenetwork <unfixed> (embed)
451  scite          NOTE: kopete embeds libiris but links dynamically to libidn
452  qscintilla          - kdegames <unfixed> (embed)
453  qscintilla2          NOTE: ksirk/kde4
454  geany  
455    libidn
456  libphp-adodb:          - monotone 0.43-1 (embed)
457  gallery2          - psi <unfixed> (embed)
458  phppgadmin          NOTE: psi embeds libiris which embeds libidn
459  egroupware          - kdegames <unfixed> (embed)
460  phpwiki          NOTE: kdegames/kde4 embeds libiris which embeds libidn
461  ipplan  
462  typo3  liblua
463  moodle          - monotone 0.43-1 (embed)
464  cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)          - nmap <unfixed> (embed; bug #527997)
465    
466  gzip:  libbotan
467  linux-kernel (lib/inflate.c)          - monotone 0.43-1 (embed)
 klibc (based on linux-kernel gzip code)  
 busybox  
468    
469  neon:  NetXX
470  cadaver (all, but being worked on: #188381)          - monotone 0.43-1 (embed)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
471    
472  libmodplug:  libgc
473  gst-plugins-bad0.10          - mono <unfixed> (embed)
474    
475  libvncserver:  lzma
476  vino          - p7zip <unfixed> (embed)
477    
478  putty:  lzo
479  filezilla          - grub2 <unfixed> (embed)
480    
481  tinyxml (not packaged in Debian):  yassl
482  filezilla          - mysql-dfsg-5.0 <unfixed> (embed)
483    
484  gv:  pax code
485  evince (ps/ tree from gv 3.5.8)          - tar <unfixed> (embed)
486  evince-gtk (not packaged in Debian)          - cpio <unfixed> (embed)
487    
488    t1lib
489            - tetex-bin 2.0.2-1 (embed)
490            - texlive-bin <unknown> (embed)
491    
492    guichan
493            - boswars <unfixed> (embed)
494            NOTE: maintainer notified us, working on it
495    
496    tolua
497            - boswars <unfixed> (embed)
498            NOTE: maintainer notified us, working on it
499    
500    asio-dev
501            - luxrender <unfixed> (embed)
502            NOTE: maintainer notified us, working on it
503            NOTE: may be merged with boost "soon"
504    
505  libXbae:  xine-lib
506  libpawlib2-lesstif package (from Cernlib)          - vlc <unfixed> (embed)
507            NOTE: only parts included in modules/access/rtsp
508    
509  libXaw:  netpbm
510  libpawlib2-lesstif package (from Cernlib)          - tcl8.3 <unfixed> (embed)
511            - tcl8.4 <unfixed> (embed)
512            - tcl8.5 <unfixed> (embed)
513            NOTE: generic/tkImgGIF.c
514    
515    tk8.5
516            - tk8.0 <removed> (old-version)
517            - tk8.3 <unfixed> (old-version)
518            - tk8.4 <unfixed> (old-version)
519            - perl-tk <unfixable> (fork)
520    
521    samba
522            - mc 2:4.6.2~git20080311-1 (embed)
523            NOTE: maintainer is aware of this, currently searching a solution
524    
525    plib1.8.4c2
526            - boson <unfixed> (fork)
527            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
528    
529    fribidi
530            - quesoglc <unfixed> (embed)
531            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
532    
533    glew
534            - quesoglc <unfixed> (embed; bug #489341)
535            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
536    
537    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
538            - transcend <unfixed> (embed)
539            - cultivation <unfixed> (embed)
540            - passage <unfixed> (embed)
541            - gravitation <unfixed> (embed)
542    
543  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  tar
544            - libarchive <unfixed> (embed)
545            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
546    
547  libgd2:  cpio
548  graphviz (lib/gd seems to be 2.0.33)          - libarchive <unfixed> (embed)
549            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
550    
551  rar:  webkit
552  unrar-nonfree          - qt4-x11 <unfixed> (embed)
553    
554  unrar-free: (maybe this code is derived from the original rar, too?)  ftgl
555  clamav (seems to be disabled in default config)          - blender 2.46+dfsg-1 (embed)
556    
557  mplayer (DirectMedia Object loader):  wv
558  xine-lib (src/libw32dll/)          - abiword <unfixed>
559  vlc (modules/codec/dmo/)  
560    qemu
561            - kvm <unfixed> (embed)
562            - xen-3 <unfixed> (embed)
563            - xen-unstable <unfixed> (embed)
564    
565    bochs
566            - kvm <unfixed> (embed; bug #489442)
567    
568    speex
569            - vorbis-tools <unfixed> (embed)
570            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
571            - gst-plugins-good0.10 <unfixed> (embed)
572            - xine-lib <unfixed> (embed)
573            - libfishsound <unfixed> (embed)
574            - libannodex <unfixed> (embed)
575            - vlc <unfixed> (embed)
576            - xmms-speex <unfixed> (embed)
577            - libsdl-sound1.2 <unfixed> (embed)
578            - sweep <unfixed> (embed)
579    
580    libreadline
581            - magic <unfixed> (old-version)
582            NOTE: magic is currently an RFS
583    
584    opcode
585            - ode <unfixed> (embed)
586            NOTE: opcode is not a package in debian, it is just embedded
587            NOTE: http://www.codercorner.com/Opcode.htm
588    
589    gimpact
590            - ode <unfixed> (embed)
591            NOTE: gimpact is not a package in debian, it is just embedded
592            NOTE: http://gimpact.sf.net
593    
594    mochikit
595            - mahara <unfixed> (embed)
596            NOTE: they require extra patches, still unmerged upstream
597            - ntop <unfixed> (embed)
598            - coherence <unfixed> (embed)
599            NOTE: python-coherence
600            - paste <unfixed> (embed)
601            NOTE: python-paste
602            - turbogears <unfixed> (embed)
603            NOTE: python-turbogears
604            - plone3 <unfixed> (embed)
605            NOTE: zope-plone3
606    
607    prototype
608            - netbeans-ide <unfixed> (embed)
609            - auth2db-frontend <unfixed> (embed)
610            - webcit <unfixed> (embed)
611            NOTE: citadel-webcit
612            - asterisk <unfixed> (embed)
613            - doc-iana <unfixed> (embed)
614            - libaws <unfixed> (embed)
615            NOTE: libaws-doc
616            - libgettext-ruby <unfixed> (embed)
617            NOTE: libgettext-ruby-data
618            - libjson-ruby <unfixed> (embed)
619            NOTE: libjson-ruby-doc
620            - lucene2 <unfixed> (embed)
621            NOTE: liblucene2-java-doc
622            - libopenid-ruby <unfixed> (embed)
623            - solr <unfixed> (embed)
624            NOTE: solr-common
625            - glpi <unfixed> (embed)
626            - hobbix <unfixed> (embed)
627            - mnemo2 <unfixed> (embed)
628            - nag2 <unfixed> (embed)
629            - knowledgeroot <unfixed> (embed)
630            - mediatomb <unfixed> (embed)
631            NOTE: mediatomb-common
632            - mt-daapd <unfixed> (embed)
633            - op-panel <unfixed> (embed)
634            - ebug-http <unfixed> (embed)
635            - phpgedview <removed> (embed)
636            - poker-network <unfixed> (embed)
637            NOTE: poker-web
638            - webhelpers <unfixed> (embed)
639            NOTE: python-webhelpers
640            - qwik <unfixed> (embed)
641            - rails <unfixed> (embed)
642            - typo3-src <unfixed> (embed)
643            - wordpress <unfixed> (embed)
644            - zope <unfixed> (embed)
645            NOTE: zope-plone3
646            - smokeping <unfixed> (embed)
647            - ampache 3.4.1-2 (embed)
648            - exaile <unfixed> (embed)
649            - hobix <unfixed> (embed)
650            - pixelpost <unfixed> (embed)
651            - symfony <unfixed> (embed)
652            NOTE: it's been said that there are custom changes
653            - zabbix <unfixed> (embed)
654            NOTE: zabbix-frontend-php
655            - turba2 <unfixed> (embed)
656    
657    gdb
658            - insight <unfixed> (embed)
659    
660    e2fsprogs
661            - ldiskfsprogs <unfixable> (fork)
662    
663    quazip (not packaged in Debian)
664            - qcake <unfixed> (embed)
665            NOTE: starting with upstream version 0.6.4
666    
667    exo
668            - pcmanfm <unfixed> (embed; bug #499677)
669            NOTE: slightly modified source code
670    
671    java
672            - openjdk-6 <unfixed>
673            - sun-java5 <unfixed>
674            - sun-java6 <unfixed>
675    
676    libphp-snoopy
677            - ampache 3.4.1-2 (embed; bug #504169)
678            - mahara 1.0.5-2 (embed; bug #504170)
679            - pixelpost <unfixed> (embed; bug #504171)
680            - mediamate 0.9.3.6-5 (embed; bug #504172)
681            - opendb <unfixed> (embed; bug #504173)
682            - wordpress 2.5.1-9 (embed; bug #443948)
683            - moodle <unfixed> (embed; bug #507185)
684            [etch] - phpgroupware <unfixed> (embed)
685            NOTE: phpgroupware-felamimail
686            - magpierss 0.72-3 (embed; bug #431089)
687    
688    jquery
689            - zekr <unfixed> (embed)
690            - wordpress <unfixed> (embed)
691            - yocto-reader <unfixed> (embed)
692            - textpattern <unfixed> (embed)
693            - genshi 0.5.1-1 (embed)
694            NOTE: compressed file under examples/ dir
695            - prewikka <unfixed> (embed)
696            - libramaze-ruby <unfixed> (embed)
697            - drupal5 <unfixed> (embed)
698            - b2evolution <unfixed> (embed)
699            - wesnoth <unfixed> (embed)
700    
701    tablesorter (jquery plugin, not packaged yet)
702            - wesnoth <unfixed> (embed)
703    
704    kses
705            - wordpress <unfixed> (embed; bug #504242)
706            NOTE: their copy has all methods renamed to wp_<foo>
707            - moodle <unfixed> (embed; bug #507185)
708            - egroupware <unfixed> (embed)
709    
710  libwpd (WordPerfect converter):  magpierss
711  openoffice.org          - wordpress <unfixed> (embed; bug #504242)
712            - moodle <unfixed>
713    
714    php-gettext
715            - wordpress <unfixed> (embed; bug #504242)
716    
717    libphp-ixr (name may change, it is the Incutio XML-RPC)
718            - wordpress <unfixed> (embed; bug #504242)
719            - dokuwiki <unfixed> (embed)
720            - textpattern <unfixed> (embed)
721    
722    libphp-cas
723            - glpi <unfixed> (embed)
724            - moodle <unfixed> (embed; bug #496069)
725    
726    scriptaculous
727            - glpi <unfixed> (embed)
728            - libaws <unfixed> (embed)
729            NOTE: libaws-doc
730            - op-panel <unfixed> (embed)
731            - symfony <unfixed> (embed)
732            NOTE: maintainer says there are extra incompatible changes required
733            - pixelpost <unfixed> (embed)
734            - webhelpers <unfixed> (embed)
735            NOTE: python-webhelpers
736            - qwik <unfixed> (embed)
737            - smokeping <unfixed> (embed)
738            - turba2 <unfixed> (embed)
739            - typo3-src 4.2.3-1 (embed)
740    
741    libmarkdown-php
742            - moodle <unfixed> (embed; bug #507185)
743            - pixelpost <unfixed> (embed)
744    
745    php-openid
746            - wordpress-openid <itp> (embed)
747    
748    geshi
749            - dokuwiki 0.0.20080505-3.1 (embed)
750            - pgfouine 1.0-1.1 (embed)
751            - websvn 2.1.0-1 (embed)
752    
753    webcalendar
754            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
755    
756    libical
757            - kdepim <unfixed> (fork)
758            - kdepimlibs <unfixed> (fork)
759            NOTE: fixed in KDE4 post 4.1.x series
760    
761    libltdl3
762            - kdelibs <unfixed> (embed)
763            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
764            - synfig <unfixed> (embed)
765    
766    harfbuzz
767            - qt4-x11 <unfixed> (embed)
768    
769    libzip
770            - php5 <unfixed> (fork)
771    
772    json.php (not packaged; should be replaced with php's built-in functions)
773            - moodle <unfixed>
774            - yui <unfixed>
775            - gallery2 <unfixed>
776            - dokuwiki <unfixed>
777            - typo3-src <unfixed>
778    
779    php-fpdf
780            - tcpdf <itp> (fork)
781            - moodle <unfixed>
782            - phpwiki <unfixed>
783            - egroupware <unfixed>
784            - ldap-account-manager <unfixed> (fork)
785    
786    tcpdf (itp: #495985)
787            - moodle <unfixed>
788            - phpmyadmin <unfixed>
789    
790  fsplib (http://sourceforge.net/projects/fsp/):  typo3
791  gftp (lib/fsplib version 0.3)          - moodle <unfixed>
792    
793  librpcsecgss:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
794  krb5          - moodle <unfixed>
795            - gosa <unfixed>
796    
797  jasper:  php-ole (itp: #487558)
798  ghostscript          - moodle <unfixed>
 gs-gpl  
799    
800  libidn:  pieforms (http://www.catalyst.net.nz)
801  monotone          - mahara <unfixed>
802    
803  liblua:  savant2 (http://phpsavant.com)
804  monotone          - egroupware <unfixed>
805    
806  libbotan:  rssparser (http://nwow.org)
807  montone          - egroupware <unfixed>
808            - phpgroupware <unfixed>
809    
810  NetXX:  lcms
811  monotone          - openjdk-6 <unfixed> (fork)
812    
813  libgc:  libphp-phplayersmenu
814  mono          - diogenes <unfixed>
815            - phpldapadmin <unfixed>
816    
817  lzma:  libphp-pclzip
818  p7zip          - docvert <unfixed>
819            - moodle <unfixed>
820            - egroupware <unfixed>
821    
822  lzo:  libphp-simplepie
823  grub2          - dokuwiki <unfixed>
824    
825  pax code:  libphp-jpgraph
826  tar          - egroupware <unfixed>
827  cpio  
828    php-simpletest
829            - moodle <unfixed>
830    
831    libpng
832            - iceweasel <unfixed> (embed)
833            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
834            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
835            - iceape 1.0.13~pre080614i-0etch1 (embed)
836            - xulrunner <unfixed> (embed)
837            NOTE: Debian 1.9.0.6 uses embedded copy
838            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
839            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
840            NOTE: Ubuntu only
841            - firefox-3.0 <unfixed> (embed)
842            NOTE: Ubuntu only
843            - firefox-3.1 <unfixed> (embed)
844            NOTE: Ubuntu only
845            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
846            NOTE: Ubuntu only
847            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
848            NOTE: Ubuntu only
849            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
850            NOTE: Ubuntu only
851    
852    irssi
853            - silc-client <unfixed> (embed)
854            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
855    
856    extc
857            - mtasc <unfixed> (embed)
858            - haxe <unfixed> (embed)
859    
860    swflib
861            - mtasc <unfixed> (embed)
862            - haxe <unfixed> (embed)
863    
864    libitext-java
865            - bouncycastle 2.1.4-1 (embed)
866    
867  t1lib:  python-ply
868  tetex-bin (links to system t1lib since 2.0.2)          - pyke <unfixed> (embed)
 texlive-bin (links to system t1lib)  
869    
870    libdumbnet (libdnet upstream)
871            - nmap <unfixed> (fork)

Legend:
Removed from v.7830  
changed lines
  Added in v.11865

  ViewVC Help
Powered by ViewVC 1.1.5