/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 4706 - (show annotations) (download)
Sat Sep 9 22:22:45 2006 UTC (6 years, 8 months ago) by stef-guest
File size: 3442 byte(s)
- CVE-2006-4561 new firefox issue (low)
- tikiwiki CVEified
- CVE-2006-4618 adodb not affected (in 6 packages)
- CVE-2006-4455 xchat not affected
- some NFUs
1
2 This file collects cases, where a source package embeds code from
3 other projects, without linking dynamically:
4
5 xpdf code: (some use xpdf 2, some xpdf 3)
6 gpdf (will be replaced by evince in Gnome 2.12)
7 pdftohtml (current poppler source package has a ported version, pinged maintainer)
8 kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)
9 tetex-bin (links to poppler since 3.0-12)
10 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)
11 poppler
12 koffice (upstream is working on using poppler, probably not in time for Etch)
13 libextractor (uses internal pdf decoder since 0.5.12-1)
14 pdfkit.framework (links to poppler since 0.8-4)
15
16 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
17 dpkg
18 rsync (somehow derived code base)
19 mozilla(?)
20 Linux kernels
21 pvpgn (links dynamically since 1.7.8-2)
22 mrtg (links dynamically since 2.12.2-1)
23
24 libgadu/ekg:
25 centericq
26 gaim
27 kopete (ships the code, but links dynamically in the Debian package)
28 kadu (not packaged in Debian)
29 GNU gadu (not yet packaged in Debian)
30
31
32 xmlrpc: (which package is the "origin" of this code?)
33 drupal
34 phpgroupware
35 egroupware
36 phpwiki
37 php4 (php-pear, IIRC this was reorganized some weeks ago?)
38 tikiwiki (not packaged in Debian)
39
40
41 shtool: (affects build-time only)
42 mysql-ocaml
43 php4
44
45
46 mozilla:
47 mozilla-firefox
48 mozilla-thunderbird
49 nvu
50
51
52 xli:
53 xloadimage
54
55
56 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
57 openmotif
58 xfree86/xorg (in libxpm)
59
60
61 kerberized apps with BSD origin:
62 krb4
63 krb5
64 heimdal
65
66
67 grip: (which pkg is the origin?)
68 libcdaudio
69 grip
70 gnome-vfs (vfs2 as well?)
71
72
73 fudforum:
74 phpgroupware-fudforum
75 egroupware-fudforum
76
77 cvs:
78 gcvs (at least an additional script is included, check if there's more)
79
80 pcre:
81 all pythons
82 php4 (src included, but Debian package links dynamically)
83 analog (src included, but Debian package links dynamically)
84 libgoffice-1
85 tf5 (since 5.0beta7 the Debian package links dynamically)
86
87 tiff:
88 wxpythongtk (check, which debian pkg this is in)
89 older kdegraphics/kpdf releases < 3.3 embedded a copy
90
91
92 uudeview:
93 libconvert-uulib-perl
94
95 sqlite: (not affected by security vulnerabilities so far)
96 amarok
97
98 util-linux/mount:
99 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb
100
101 webmin:
102 usermin
103
104 sylpheed:
105 sylpheed-claws
106
107 phpsysinfo:
108 egroupware
109 phpgroupware
110
111 phpldapadmin:
112 egroupware
113
114 chmlib:
115 kchmviewer (not packaged in Debian)
116
117 libavcodec/libavformat:
118 ffmpeg
119 xine-lib
120 xvidcap (currently in NEW)
121 kino (links statically, does not include code)
122 vlc (links statically, does not include code)
123 smilutils (links statically, does not include code)
124 motion (links statically, does not include code)
125 gst-ffmpeg
126 xmovie (currently in NEW)
127 gst-ffmpeg
128
129 mad MPEG decoding lib:
130 mad
131 xine-lib
132
133 libdts:
134 libdts
135 xine-lib
136
137 flac:
138 flac
139 xine-lib
140
141 liba52:
142 a52dec
143 xine-lib
144
145 libmpeg2:
146 mpeg2dec
147 xine-lib
148
149 curl:
150 wget (code for NTLM authentication)
151
152 TODO evaluate:
153 gimp-gap (potentially using ffmpeg code as well)
154
155 uw-imap:
156 pine
157
158 imagemagick:
159 graphicsmagick
160
161 halibut:
162 nsis
163
164 libghttp:
165 hotway
166
167 etl-dev (will be renamed to libetl-dev soon):
168 synfig
169
170 libphp-adodb:
171 moodle
172 cacti (dependency exists, but internal version is used)
173
174 libmms:
175 xine-lib
176 mimms
177
178 FCKeditor:
179 knowledgeroot
180
181 TinyMCE:
182 wordpress
183 moodle
184 knowledgeroot
185 joomla (ITP)
186
187 scintilla
188 scite
189 qscintilla
190 geany
191
192 libphp-adodb
193 gallery2
194 phppgadmin
195 egroupware
196 phpwiki
197 moodle
198

  ViewVC Help
Powered by ViewVC 1.1.5