This file collects cases, where a source package embeds code from other projects, without linking dynamically: xpdf code: (some use xpdf 2, some xpdf 3) gpdf (has been replaced by evince - which uses poppler - in Etch) pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though) kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164) tetex-bin (links to poppler since 3.0-12) texlive-bin (links to poppler) cupsys (uses xpdf-utils, it's still present in the src, though) poppler koffice/kword (upstream is working on using poppler, #436163) libextractor (uses internal pdf decoder since 0.5.12-1) pdfkit.framework (links to poppler since 0.8-4) ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp) ruby-gnome2 (has a copy of poppler but links against the shared lib) silc-toolkit: silc-client (uses libsilc and libsilcclient) dietlibc: ccontrol (links statically) libiax: iaxmodem zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions) dpkg rsync (somehow derived code base) mono mozilla(?) Linux kernels pvpgn (links dynamically since 1.7.8-2) mrtg (links dynamically since 2.12.2-1) rpm libbz2: dpkg (statically linked) libgadu/ekg: centericq gaim pigdin (links dynamically against libgadu) kopete (ships the code, but links dynamically in the Debian package) kadu (not packaged in Debian) GNU gadu (not yet packaged in Debian) xmlrpc: (which package is the "origin" of this code?) drupal phpgroupware egroupware phpwiki php4 (php-pear, IIRC this was reorganized some weeks ago?) shtool: (affects build-time only) mysql-ocaml php4 mozilla: mozilla-firefox mozilla-thunderbird firefox (to be removed) thunderbird (to be removed) iceweasel iceape icedove xulrunner nvu (no longer in Debian) xli: xloadimage lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream) openmotif xfree86/xorg (in libxpm) kerberized apps with BSD origin: krb4 krb5 heimdal grip: (which pkg is the origin?) libcdaudio grip gnome-vfs (vfs2 as well?) fudforum: phpgroupware-fudforum egroupware-fudforum (removed from egroupware after sarge) cvs: gcvs (at least an additional script is included, check if there's more) pcre: all pythons php4 (src included, but Debian package links dynamically) analog (src included, but Debian package links dynamically) libgoffice-1 vfu (removed linking against embedded copy in 4.06-4.1; #450754) tf5 (since 5.0beta7 the Debian package links dynamically) monotone (including this starting from 0.37) glib (2.14 series for gregex support, only for udeb, regular packag links dynamic) apache2 (since 2.0.53-4 uses 040_link_external_pcre patch) exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre) yacas (<= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway) tiff: wxpythongtk (check, which debian pkg this is in) older kdegraphics/kpdf releases < 3.3 embedded a copy uudeview: libconvert-uulib-perl sqlite: (not affected by security vulnerabilities so far) amarok monotone iceweasel util-linux/mount: loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb webmin: usermin (only in sarge) sylpheed: sylpheed-claws phpsysinfo: egroupware phpgroupware phpldapadmin: egroupware (removed from egroupware after sarge) chmlib: kchmviewer (ships the code but links dynamically) libavcodec/libavformat (source: ffmpeg): mplayer (#395252) xvidcap kino (links statically, does not include code) vlc (links statically, does not include code) smilutils (links statically, does not include code) motion (links statically, does not include code) gst-ffmpeg gstreamer0.10-ffmpeg xmovie mad MPEG decoding lib: mad xine-lib libdts: libdts xine-lib flac: flac xine-lib liba52: a52dec xine-lib libmpeg2: mpeg2dec xine-lib curl: wget (code for NTLM authentication) TODO evaluate: gimp-gap (potentially using ffmpeg code as well) uw-imap: pine alpine imagemagick: graphicsmagick halibut: nsis libghttp: hotway libsndfile: ardour glibmm2.4: ardour libgnomecanvasmm2.6: ardour libsigc++-2.0: ardour soundtouch: ardour libmms: xine-lib mimms FCKeditor: (packaged as fckeditor) knowledgeroot moin (452599) karrigell (452598) gforge-plugins-extra (fixed since 4.6.99+svn6225-1) Moodle contains lots of things: AdoDB AdoDB-XML Schema ipatlas PHPMailer Smarty htmlArea TinyMCE bennu TinyMCE: wordpress moodle knowledgeroot joomla (ITP) scintilla: scite qscintilla qscintilla2 geany libphp-adodb: gallery2 phppgadmin egroupware phpwiki ipplan typo3 moodle cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch) gzip: linux-kernel (lib/inflate.c) klibc (based on linux-kernel gzip code) busybox neon: cadaver (all, but being worked on: #188381) gnome-vfs2 (#395874) litmus (#395875) screem (sarge only) sitecopy (#395876) tla (etch/sid only: #395877) libmodplug: gst-plugins-bad0.10 libvncserver: vino putty: filezilla tinyxml (not packaged in Debian): filezilla gv: evince (ps/ tree from gv 3.5.8) evince-gtk (not packaged in Debian) libXbae: libpawlib2-lesstif package (from Cernlib) libXaw: libpawlib2-lesstif package (from Cernlib) (I plan to deal with the above two cases after Etch release. -- KevinMcCarty) libgd2: graphviz (lib/gd seems to be 2.0.33) rar: unrar-nonfree unrar-free: (maybe this code is derived from the original rar, too?) clamav (seems to be disabled in default config) mplayer (DirectMedia Object loader): xine-lib (src/libw32dll/) vlc (modules/codec/dmo/) libwpd (WordPerfect converter): openoffice.org fsplib (http://sourceforge.net/projects/fsp/): gftp (lib/fsplib version 0.3) librpcsecgss: krb5 jasper: ghostscript gs-gpl libidn: monotone liblua: monotone libbotan: montone NetXX: monotone libgc: mono lzma: p7zip lzo: grub2 pax code: tar cpio t1lib: tetex-bin (links to system t1lib since 2.0.2) texlive-bin (links to system t1lib)