/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7385 by nion, Sat Nov 24 13:34:37 2007 UTC revision 11590 by jmm-guest, Wed Apr 8 15:51:18 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16  silc-toolkit:  sort: static (linking statically against a lib)
17  silc-client (uses libsilc and libsilcclient)        embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19  dietlibc:              thus might share parts of the source code)
20  ccontrol (links statically)        old-version (the package is an older version of essentially
21                       the same code)
22  libiax:  
23  iaxmodem  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
26  dpkg  Everything up to the next line is ignored.
27  rsync (somehow derived code base)  ---BEGIN
28  mono  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  mozilla(?)          NOTE: Fixed packages link to poppler library unless otherwise noted
30  Linux kernels          - gpdf <removed>
31  pvpgn (links dynamically since 1.7.8-2)          [sarge] - gpdf <unfixed>
32  mrtg (links dynamically since 2.12.2-1)          NOTE: has been replaced by evince in etch
33  rpm          - pdftohtml <unknown>
34            [sarge] - pdftohtml <unfixed>
35  libbz2:          [etch] - pdftohtml <unfixed>
36  dpkg (statically linked)          NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38  libgadu/ekg:          - texlive-base 3.0-12 (embed)
39  centericq          - texlive-bin 2007-1 (embed)
40  gaim          NOTE: links to poppler
41  kopete (ships the code, but links dynamically in the Debian package)          - koffice <unfixed> (embed; bug #436163)
42  kadu (not packaged in Debian)          - libextractor 0.5.12-1 (embed)
43  GNU gadu (not yet packaged in Debian)          NOTE: libextractor is using its own pdf decoder now
44            - libextractor 0.5.12-1 (embed)
45  xmlrpc: (which package is the "origin" of this code?)          - pdfkit.framework 0.8-4 (embed)
46  drupal          - ipe <unfixed> (embed)
47  phpgroupware          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
48  egroupware          - ruby-gnome2 <unknown> (embed)
49  phpwiki          NOTE: copy only present in source but links to poppler
50  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - pdfedit <unfixed> (embed; bug #510794)
51  tikiwiki  
52    ppmd
53  shtool: (affects build-time only)          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54  mysql-ocaml  
55  php4  peercast
56            - gnome-peercast <unfixed> (embed)
57  mozilla:          NOTE: gnome-peercast may better be removed, see #466539
58  mozilla-firefox  
59  mozilla-thunderbird  silc-toolkit
60  firefox (to be removed)          - silc-client 1.1~beta6-1 (embed)
61  thunderbird (to be removed)  
62  iceweasel  icclib
63  iceape          - ghostscript (embed)
64  icedove          - argyll (embed)
65  xulrunner  
66  nvu (no longer in Debian)  dietlibc
67            - ccontrol 0.9.1+20071204-1 (static)
68  xli:  
69  xloadimage  libmikmod
70            - sdl-mixer1.2 <unfixed> (embed)
71  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          TODO: report bug
72  openmotif  
73  xfree86/xorg (in libxpm)  libiax
74            - iaxmodem <unfixed> (embed)
75  kerberized apps with BSD origin:  
76  krb4  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
77  krb5          - dpkg <unfixed> (embed)
78  heimdal          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
79            - rsync <unfixed> (embed)
80  grip: (which pkg is the origin?)          NOTE: somehow derived code base
81  libcdaudio          - mono <unfixed> (embed)
82  grip          TODO: check mozilla
83  gnome-vfs (vfs2 as well?)          - Linux kernels <unfixed> (embed)
84            - pvpgn 1.7.8-2 (embed)
85  fudforum:          - mrtg 2.12.2-1 (embed)
86  phpgroupware-fudforum          - rpm <unknown> (embed)
87  egroupware-fudforum (removed from egroupware after sarge)          NOTE: pinged anibal since when rpm was fixed
88            - tuxcmd-modules <itp> (embed; bug #508082)
89  cvs:  
90  gcvs (at least an additional script is included, check if there's more)  libbz2
91            - dpkg <unfixed> (static)
92  pcre:  
93  all pythons  libgadu:
94  php4 (src included, but Debian package links dynamically)          - centericq <unfixed> (embed)
95  analog (src included, but Debian package links dynamically)          - gaim <unfixed> (embed)
96  libgoffice-1          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
97  vfu (#450754)          - kopete 4:3.3.2-5 (embed)
98  tf5 (since 5.0beta7 the Debian package links dynamically)          - kadu 0.6.0.2-3 (embed)
99  monotone (including this starting from 0.37)          - gadu <unfixed> (embed)
100  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          - ekg 1:1.8~rc0-1 (embed)
101  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)          - kadu 0.6.0.2-3 (embed; bug #504430)
102  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)          NOTE: gadu not packaged in Debian yet
103    
104  tiff:  xmlrpc (which package is the "origin" of this code?)
105  wxpythongtk (check, which debian pkg this is in)          - drupal <unfixed> (embed)
106  older kdegraphics/kpdf releases < 3.3 embedded a copy          - phpgroupware <unfixed> (embed)
107            - egroupware <unfixed> (embed)
108  uudeview:          - phpwiki (embed)
109  libconvert-uulib-perl          - php4 <unfixed> (embed)
110            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
111  sqlite: (not affected by security vulnerabilities so far)  
112  amarok  shtool (affects build-time only)
113  monotone          - mysql-ocaml <unfixed> (embed)
114  iceweasel          - php4 <unfixed> (embed)
115    
116  util-linux/mount:  mozilla source code
117  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - mozilla-firefox <unfixed> (embed)
118            - mozilla-thunderbird
119  webmin:          - firefox <removed>
120  usermin (only in sarge)          [etch] - firefox <unfixed> (embed)
121            - thunderbird <removed>
122  sylpheed:          [etch] - thunderbird <unfixed> (embed)
123  sylpheed-claws          - iceweasel <unfixed> (embed)
124            - iceape <unfixed> (embed)
125  phpsysinfo:          - icedove <unfixed> (embed)
126  egroupware          - xulrunner <unfixed> (embed)
127  phpgroupware          - nvu <removed> (embed)
128    
129  phpldapadmin:  xli
130  egroupware (removed from egroupware after sarge)          - xloadimage <unfixed> (embed)
131    
132  chmlib:  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
133  kchmviewer (ships the code but links dynamically)          - openmotif <unfixed> (embed)
134            - xfree86/xorg <unfixed> (embed)
135  libavcodec/libavformat (source: ffmpeg):          NOTE: in libxpm
136  mplayer (#395252)  
137  xvidcap  kerberized apps with BSD origin
138  kino (links statically, does not include code)          - krb4 <unfixed> (embed)
139  vlc (links statically, does not include code)          - krb5 <unfixed> (embed)
140  smilutils (links statically, does not include code)          - heimdal <unfixed> (embed)
141  motion (links statically, does not include code)  
142  gst-ffmpeg  grip (which pkg is the origin?)
143  gstreamer0.10-ffmpeg          - libcdaudio
144  xmovie          - grip
145            - gnome-vfs
146            TODO: check vfs2 as well
147    
148    fudforum
149            - phpgroupware-fudforum <unfixed> (embed)
150            - egroupware-fudforum <removed>
151            [sarge] - egroupware-fudforum <unfixed> (embed)
152    
153    cvs
154            - gcvs <unfixed> (embed)
155            NOTE: see cvsunix/src in tarball
156    
157    pcre
158            - python* <unfixed> (embed)
159            - php4 <unknown> (embed)
160            - analog 2:5.23-0woody1 (embed)
161            - libgoffice-1 <unfixed> (embed)
162            - vfu 4.06-4.1 (embed; bug #450754)
163            - tf5 5.0beta7-1 (embed)
164            - monotone 0.43-1 (embed)
165            NOTE: this only affects versions >= 0.37
166            - glib2.0 2.15.2-1 (embed)
167            - apache2 2.0.53-4 (embed)
168            - exim4 4.10-0.srh20.12 (embed)
169            - yacas <unfixed> (embed)
170            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
171            - gtamsanalyzer.app 0.42-5 (embed)
172            - tin <unknown> (embed)
173            - kazehakase 0.5.2-1
174            - webkit <unfixed> (embed)
175            - qt4-x11 <unfixed> (embed)
176            NOTE: embedded via webkit copy
177    
178    tiff
179            - wxwindows2.4 2.2.1 (embed)
180    
181    uudeview
182            - libconvert-uulib-perl <unfixed> (embed)
183            - pan <unfixed> (embed)
184    
185    sqlite (not affected by security vulnerabilities so far)
186            - amarok <unfixed> (embed)
187            - monotone 0.43-1 (embed)
188            - iceweasel <unfixed> (embed)
189    
190    util-linux/mount
191            - loop-aes-utils <unfixed> (embed)
192            NOTE: contains code from util-linux' mount in the mount-aes-udeb
193    
194    webmin
195            - usermin <unknown> (embed)
196            [sarge] - usermin <unfixed> (embed)
197    
198    sylpheed
199            - sylpheed-claws <unfixed> (fork)
200    
201    phpsysinfo
202            - egroupware <unfixed> (embed)
203            - phpgroupware <unfixed> (embed)
204    
205    phpldapadmin
206            [sarge] - egroupware <unfixed> (embed)
207            NOTE: removed from egroupware after sarge
208    
209    chmlib
210            - kchmviewer <unknown> (embed)
211    
212    libavcodec/libavformat (source: ffmpeg)
213            - mplayer 1.0~rc2-14 (embed; bug #395252)
214            - kino 1.0.0-1
215            - vlc <not-affected> (Links dynamically since initial release)
216            - smilutils 0.3.0-10
217            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
218            - motion 3.1.19-1
219            - gstreamer0.10-ffmpeg 0.10.3-2
220            - xmovie <unfixed>
221            TODO: gimp-gap (potentially using ffmpeg code as well)
222    
223    faad2
224            - mplayer 1.0~rc2-20 (embed)
225    
226    mad MPEG decoding lib
227            - mad <unfixed> (embed)
228            - xine-lib <unfixed> (embed)
229    
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
230  libdts  libdts
231  xine-lib          - xine-lib <unfixed> (embed)
232    
 flac:  
233  flac  flac
234  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
235    
236  curl:  liba52
237  wget (code for NTLM authentication)          - a52dec <unfixed> (embed)
238            - xine-lib <unfixed> (embed)
239    
240  TODO evaluate:  libmpeg2
241  gimp-gap (potentially using ffmpeg code as well)          - mpeg2dec <unfixed> (embed)
242            - xine-lib <unfixed> (embed)
243    
244  uw-imap:  curl
245  pine          - wget <unfixed> (embed)
246  alpine          NOTE: code for NTLM authentication
247    
248  imagemagick:  uw-imap
249  graphicsmagick          - pine <unfixed> (embed)
250            - alpine <unfixed> (embed)
251    
252  halibut:  imagemagick
253  nsis          - graphicsmagick <unfixed> (fork)
254    
255  libghttp:  halibut
256  hotway          - nsis <unfixed> (fork)
257    
258  libsndfile:  libghttp
259  ardour          - hotway <unfixed> (embed)
260    
261  glibmm2.4:  libsndfile
262  ardour          - ardour 1:2.7.1-1 (embed)
263    
264  libgnomecanvasmm2.6:  glibmm2.4
265  ardour          - ardour 1:2.7.1-1 (embed)
266    
267  libsigc++-2.0:  libgnomecanvasmm2.6
268  ardour          - ardour 1:2.7.1-1 (embed)
269    
270  soundtouch:  libsigc++-2.0
271  ardour          - ardour 1:2.7.1-1 (embed)
272    
273  libmms:  soundtouch
274  xine-lib          - ardour 1:2.7.1-1 (embed)
 mimms  
   
 FCKeditor: (packaged as fckeditor)  
 knowledgeroot  
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
   
   
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
275    
276  gzip:  libmms
277  linux-kernel (lib/inflate.c)          - xine-lib <unfixed> (embed)
278  klibc (based on linux-kernel gzip code)          - mimms <unfixed> (embed)
 busybox  
279    
280  neon:  fckeditor
281  cadaver (all, but being worked on: #188381)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
282  gnome-vfs2 (#395874)          - moin 1.8.2-2 (embed; bug #452599)
283  litmus (#395875)          - karrigell <removed> (embed; bug #452598)
284  screem (sarge only)          - gforge 4.6.99+svn6225-1 (embed)
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
285    
286  libmodplug:  ipatlas (not packaged in Debian)
287  gst-plugins-bad0.10          - moodle <unfixed> (embed; bug #507185)
288    
289  libvncserver:  libphp-phpmailer
290  vino          - moodle <unfixed> (embed; bug #507185)
291            - mahara <unfixed> (embed)
292            - symfony <unfixed> (embed)
293            - phpgroupware-felamimail <unfixed> (embed)
294            NOTE: phpgroupware-felamimail is only in etch
295            - egroupware <unfixed> (embed; bug #504283)
296            - glpi <unfixed>
297    
298  putty:  htmlArea (not packaged in Debian)
299  filezilla          - moodle <unfixed> (embed)
300    
301  tinyxml (not packaged in Debian):  giflib:
302  filezilla          - wine <unfixed> (embed; bug #466181)
303    
304  gv:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
305  evince (ps/ tree from gv 3.5.8)          - moodle <unfixed> (embed)
 evince-gtk (not packaged in Debian)  
306    
307  libXbae:  smarty:
308  libpawlib2-lesstif package (from Cernlib)          - moodle 1.8.2-2 (embed; bug #471158)
309            - gallery2 2.2.5-2 (embed; bug #471160)
310            - mahara 0.9.2-2 (embed; bug #471201)
311            - gosa 2.4beta1-1 (embed; bug #471200)
312    
313  libXaw:  TinyMCE
314  libpawlib2-lesstif package (from Cernlib)          - wordpress 2.5.1-3 (embed; bug #478257)
315            - moodle <unfixed> (embed; bug #507185)
316  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)          - knowledgeroot <unfixed> (embed)
317            - joomla <itp> (bug #326398)
318  libgd2:  
319  graphviz (lib/gd seems to be 2.0.33)  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
320            - scite <unfixed> (embed)
321  rar:          - qscintilla <unfixed> (embed)
322  unrar-nonfree          - qscintilla2 <unfixed> (embed)
323            - geany <unfixed> (fork)
324  unrar-free: (maybe this code is derived from the original rar, too?)          - anjuta <unfixed> (embed)
325  clamav (seems to be disabled in default config)  
326    libphp-adodb
327  mplayer (DirectMedia Object loader):          - moodle <unfixed> (embed; bug #507185)
328  xine-lib (src/libw32dll/)          NOTE: also AdoDB-XML Schema
329  vlc (modules/codec/dmo/)          - gallery2 <unfixed> (embed)
330            - phppgadmin <unfixed> (embed)
331  libwpd (WordPerfect converter):          - egroupware <unfixed> (embed)
332  openoffice.org          - phpwiki <unfixed> (embed)
333            - ipplan <unfixed> (embed)
334  fsplib (http://sourceforge.net/projects/fsp/):          - typo3 <unfixed> (embed)
335  gftp (lib/fsplib version 0.3)          - cacti <unknown> (embed)
336            [sarge] - cacti <unfixed> (embed)
337  librpcsecgss:          NOTE: dependency exists, but internal version is used
338  krb5          - gforge 4.7~rc2-6 (embed)
339            - mahara <unfixed> (embed)
340    
341    gzip
342            - linux-kernel <unfixed> (embed)
343            NOTE: lib/inflate.c
344            - klibc <unfixed> (embed)
345            NOTE: based on linux-kernel gzip code
346            - busybox <unfixed> (embed)
347    
348    neon
349            - cadaver <unfixed> (embed; bug #188381)
350            - gnome-vfs2 <unfixed> (embed; bug #395874)
351            - litmus <unfixed> (embed; #395875)
352            [sarge] - screem <unfixed> (embed)
353            - sitecopy <unfixed> (embed; bug #395876)
354            [etch] - tla <unfixed> (embed; bug #395877)
355            [sarge] - tla <unfixed> (embed; bug #395877)
356    
357    libmodplug
358            - gst-plugins-bad0.10 <unfixed> (embed)
359    
360    libvncserver
361            - vino <unfixed> (embed)
362    
363    putty
364            - filezilla <unfixed> (embed)
365    
366    tinyxml (not packaged in Debian)
367            - filezilla <unfixed>
368    
369    gv
370            - evince <unfixed> (embed)
371            NOTE: ps/ tree from gv 3.5.8
372            - evince-gtk <unfixed> (embed)
373            NOTE: not packaged in Debian
374    
375    libXbae
376            [etch] - libpawlib2-lesstif <unfixed> (embed)
377            NOTE: from Cernlib
378    
379    libXaw
380            [etch] - libpawlib2-lesstif
381            NOTE: from Cernlib
382            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
383    
384    libgd2
385            - graphviz <unfixed> (embed)
386            NOTE: lib/gd seems to be 2.0.33
387            - wml <unfixed> (embed)
388            NOTE: derived from gd 1.6.3
389    
390    rar
391            - unrar-nonfree <unfixed> (embed)
392    
393    unrar-free (maybe this code is derived from the original rar, too?)
394            - clamav <unfixed> (embed)
395            NOTE: seems to be disabled in default config
396    
397    mplayer (DirectMedia Object loader)
398            - xine-lib <unfixed> (embed)
399            NOTE: src/libw32dll/
400            - vlc <unfixed> (embed)
401            NOTE: modules/codec/dmo/
402            - mplayer 1.0~rc2-20 (embed)
403    
404    libwpd (WordPerfect converter)
405            - openoffice.org <unfixed> (embed)
406    
407    fsplib (http://sourceforge.net/projects/fsp/)
408            - gftp <unfixed> (embed)
409            NOTE: lib/fsplib version 0.3
410    
411    sprng
412            - tree-puzzle <unfixed> (embed)
413    
414    librpcsecgss
415            - krb5 <unfixed> (embed)
416    
417    jasper
418            - ghostscript <unfixed> (embed)
419            - gs-gpl <unfixed> (embed)
420    
421    libiris
422            - psi <unfixed> (embed)
423            - kdenetwork <unfixed> (embed)
424            NOTE: kopete embeds libiris but links dynamically to libidn
425            - kdegames <unfixed> (embed)
426            NOTE: ksirk/kde4
427    
428    libidn
429            - monotone 0.43-1 (embed)
430            - psi <unfixed> (embed)
431            NOTE: psi embeds libiris which embeds libidn
432            - kdegames <unfixed> (embed)
433            NOTE: kdegames/kde4 embeds libiris which embeds libidn
434    
435    liblua
436            - monotone 0.43-1 (embed)
437    
438    libbotan
439            - montone 0.43-1 (embed)
440    
441    NetXX
442            - monotone 0.43-1 (embed)
443    
444    libgc
445            - mono <unfixed> (embed)
446    
447    lzma
448            - p7zip <unfixed> (embed)
449    
450    lzo
451            - grub2 <unfixed> (embed)
452    
453    yassl
454            - mysql-dfsg-5.0 <unfixed> (embed)
455    
456    pax code
457            - tar <unfixed> (embed)
458            - cpio <unfixed> (embed)
459    
460    t1lib
461            - tetex-bin 2.0.2-1 (embed)
462            - texlive-bin <unknown> (embed)
463    
464    guichan
465            - boswars <unfixed> (embed)
466            NOTE: maintainer notified us, working on it
467    
468    tolua
469            - boswars <unfixed> (embed)
470            NOTE: maintainer notified us, working on it
471    
472    asio-dev
473            - luxrender <unfixed> (embed)
474            NOTE: maintainer notified us, working on it
475            NOTE: may be merged with boost "soon"
476    
477  jasper:  xine-lib
478  ghostscript          - vlc <unfixed> (embed)
479  gs-gpl          NOTE: only parts included in modules/access/rtsp
480    
481  libidn:  netpbm
482  monotone          - tcl8.3 <unfixed> (embed)
483            - tcl8.4 <unfixed> (embed)
484            - tcl8.5 <unfixed> (embed)
485            NOTE: generic/tkImgGIF.c
486    
487    tk8.5
488            - tk8.0 <removed> (old-version)
489            - tk8.3 <unfixed> (old-version)
490            - tk8.4 <unfixed> (old-version)
491            - perl-tk <unfixable> (fork)
492    
493    samba
494            - mc 2:4.6.2~git20080311-1 (embed)
495            NOTE: maintainer is aware of this, currently searching a solution
496    
497    plib1.8.4c2
498            - boson <unfixed> (fork)
499            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
500    
501    fribidi
502            - quesoglc <unfixed> (embed)
503            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
504    
505    glew
506            - quesoglc <unfixed> (embed; bug #489341)
507            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
508    
509    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
510            - transcend <unfixed> (embed)
511            - cultivation <unfixed> (embed)
512            - passage <unfixed> (embed)
513            - gravitation <unfixed> (embed)
514    
515  liblua:  tar
516  monotone          - libarchive <unfixed> (embed)
517            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
518    
519  libbotan:  cpio
520  montone          - libarchive <unfixed> (embed)
521            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
522    
523  NetXX:  webkit
524  monotone          - qt4-x11 <unfixed> (embed)
525    
526  libgc:  ftgl
527  mono          - blender 2.46+dfsg-1 (embed)
528    
529  lzma:  wv
530  p7zip          - abiword <unfixed>
531    
532    qemu
533            - kvm <unfixed> (embed)
534            - xen-3 <unfixed> (embed)
535            - xen-unstable <unfixed> (embed)
536    
537    bochs
538            - kvm <unfixed> (embed; bug #489442)
539    
540    speex
541            - vorbis-tools <unfixed> (embed)
542            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
543            - gst-plugins-good0.10 <unfixed> (embed)
544            - xine-lib <unfixed> (embed)
545            - libfishsound <unfixed> (embed)
546            - libannodex <unfixed> (embed)
547            - vlc <unfixed> (embed)
548            - xmms-speex <unfixed> (embed)
549            - libsdl-sound1.2 <unfixed> (embed)
550            - sweep <unfixed> (embed)
551    
552    libreadline
553            - magic <unfixed> (old-version)
554            NOTE: magic is currently an RFS
555    
556    opcode
557            - ode <unfixed> (embed)
558            NOTE: opcode is not a package in debian, it is just embedded
559            NOTE: http://www.codercorner.com/Opcode.htm
560    
561    gimpact
562            - ode <unfixed> (embed)
563            NOTE: gimpact is not a package in debian, it is just embedded
564            NOTE: http://gimpact.sf.net
565    
566    mochikit
567            - mahara <unfixed> (embed)
568            NOTE: they require extra patches, still unmerged upstream
569            - ntop <unfixed> (embed)
570            - python-oherence <unfixed> (embed)
571            - python-paste <unfixed> (embed)
572            - python-turbogears <unfixed> (embed)
573            - zope-plone3 <unfixed> (embed)
574    
575    prototype
576            - netbeans-ide <unfixed> (embed)
577            - auth2db-frontend <unfixed> (embed)
578            - citadel-webcit <unfixed> (embed)
579            - asterisk <unfixed> (embed)
580            - doc-iana <unfixed> (embed)
581            - libaws-doc <unfixed> (embed)
582            - libgettext-ruby-data <unfixed> (embed)
583            - libjson-ruby-doc <unfixed> (embed)
584            - liblucene2-java-doc <unfixed> (embed)
585            - libopenid-ruby <unfixed> (embed)
586            - solr-common <unfixed> (embed)
587            - glpi <unfixed> (embed)
588            - hobbix <unfixed> (embed)
589            - mnemo2 <unfixed> (embed)
590            - nag2 <unfixed> (embed)
591            - knowledgeroot <unfixed> (embed)
592            - mediatomb-common <unfixed> (embed)
593            - mt-daapd <unfixed> (embed)
594            - op-panel <unfixed> (embed)
595            - ebug-http <unfixed> (embed)
596            - phpgedview <removed> (embed)
597            - poker-web <unfixed> (embed)
598            - python-webhelpers <unfixed> (embed)
599            - qwik <unfixed> (embed)
600            - rails <unfixed> (embed)
601            - typo3-src-4.1 <unfixed> (embed)
602            - wordpress <unfixed> (embed)
603            - zope-plone3 <unfixed> (embed)
604            - smokeping <unfixed> (embed)
605            - ampache 3.4.1-2 (embed)
606            - exaile <unfixed> (embed)
607            - hobix <unfixed> (embed)
608            - pixelpost <unfixed> (embed)
609            - symfony <unfixed> (embed)
610            NOTE: it's been said that there are custom changes
611            - zabbix-frontend-php <unfixed> (embed)
612            - turba2 <unfixed> (embed)
613    
614    gdb
615            - insight <unfixed> (embed)
616    
617    e2fsprogs
618            - ldiskfsprogs <unfixable> (fork)
619    
620    quazip (not packaged in Debian)
621            - qcake <unfixed> (embed)
622            NOTE: starting with upstream version 0.6.4
623    
624    exo
625            - pcmanfm <unfixed> (embed; bug #499677)
626            NOTE: slightly modified source code
627    
628    java
629            - openjdk-6 <unfixed>
630            - sun-java5 <unfixed>
631            - sun-java6 <unfixed>
632    
633    libphp-snoopy
634            - ampache 3.4.1-2 (embed; bug #504169)
635            - mahara 1.0.5-2 (embed; bug #504170)
636            - pixelpost <unfixed> (embed; bug #504171)
637            - mediamate 0.9.3.6-5 (embed; bug #504172)
638            - opendb <unfixed> (embed; bug #504173)
639            - wordpress 2.5.1-9 (embed; bug #443948)
640            - moodle <unfixed> (embed; bug #507185)
641            - phpgroupware-felamimail <unfixed> (embed)
642            NOTE: phpgroupware-felamimail is only in etch
643            - magpierss 0.72-3 (embed; bug #431089)
644    
645    jquery
646            - zekr <unfixed> (embed)
647            - wordpress <unfixed> (embed)
648            - yocto-reader <unfixed> (embed)
649            - textpattern <unfixed> (embed)
650            - genshi 0.5.1-1 (embed)
651            NOTE: compressed file under examples/ dir
652            - prewikka <unfixed> (embed)
653            - libramaze-ruby <unfixed> (embed)
654            - drupal5 <unfixed> (embed)
655            - b2evolution <unfixed> (embed)
656            - wesnoth <unfixed> (embed)
657    
658    tablesorter (jquery plugin, not packaged yet)
659            - wesnoth <unfixed> (embed)
660    
661    kses
662            - wordpress <unfixed> (embed; bug #504242)
663            NOTE: their copy has all methods renamed to wp_<foo>
664            - moodle <unfixed> (embed; bug #507185)
665            - egroupware <unfixed> (embed)
666    
667    magpierss
668            - wordpress <unfixed> (embed; bug #504242)
669            - moodle <unfixed>
670    
671    php-gettext
672            - wordpress <unfixed> (embed; bug #504242)
673    
674    libphp-ixr (name may change, it is the Incutio XML-RPC)
675            - wordpress <unfixed> (embed; bug #504242)
676            - dokuwiki <unfixed> (embed)
677            - textpattern <unfixed> (embed)
678    
679    libphp-cas
680            - glpi <unfixed> (embed)
681            - moodle <unfixed> (embed; bug #496069)
682    
683    scriptaculous
684            - glpi <unfixed> (embed)
685            - libaws-doc <unfixed> (embed)
686            - op-panel <unfixed> (embed)
687            - symfony <unfixed> (embed)
688            NOTE: maintainer says there are extra incompatible changes required
689            - pixelpost <unfixed> (embed)
690            - python-webhelpers <unfixed> (embed)
691            - qwik <unfixed> (embed)
692            - smokeping <unfixed> (embed)
693            - turba2 <unfixed> (embed)
694            - typo3-src 4.2.3-1 (embed)
695    
696    libmarkdown-php
697            - moodle <unfixed> (embed; bug #507185)
698            - pixelpost <unfixed> (embed)
699    
700    php-openid
701            - wordpress-openid <itp> (embed)
702    
703    geshi
704            - dokuwiki 0.0.20080505-3.1 (embed)
705            - pgfouine 1.0-1.1 (embed)
706            - websvn 2.1.0-1 (embed)
707    
708    webcalendar
709            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
710    
711    libical
712            - kdepim <unfixed> (fork)
713            - kdepimlibs <unfixed> (fork)
714            NOTE: fixed in KDE4 post 4.1.x series
715    
716    libltdl3
717            - kdelibs <unfixed> (embed)
718            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
719            - synfig <unfixed> (embed)
720    
721    harfbuzz
722            - qt4-x11 <unfixed> (embed)
723    
724    libzip
725            - php5 <unfixed> (fork)
726    
727    json.php (not packaged; should be replaced with php's built-in functions)
728            - moodle <unfixed>
729            - yui <unfixed>
730            - gallery2 <unfixed>
731            - dokuwiki <unfixed>
732            - typo3-src-4.2 <unfixed>
733    
734    php-fpdf
735            - tcpdf <itp> (fork)
736            - moodle <unfixed>
737            - phpwiki <unfixed>
738            - egroupware <unfixed>
739            - ldap-account-manager <unfixed> (fork)
740    
741    tcpdf (itp: #495985)
742            - moodle <unfixed>
743            - phpmyadmin <unfixed>
744    
745  lzo:  typo3
746  grub2          - moodle <unfixed>
747    
748  pax code:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
749  tar          - moodle <unfixed>
750  cpio          - gosa <unfixed>
751    
752    php-ole (itp: #487558)
753            - moodle <unfixed>
754    
755    pieforms (http://www.catalyst.net.nz)
756            - mahara <unfixed>
757    
758    savant2 (http://phpsavant.com)
759            - egroupware <unfixed>
760    
761    rssparser (http://nwow.org)
762            - egroupware <unfixed>
763            - phpgroupware <unfixed>
764    
765    lcms
766            - openjdk-6 <unfixed> (fork)
767    
768    libphp-phplayersmenu
769            - diogenes <unfixed>
770            - phpldapadmin <unfixed>
771    
772    libphp-pclzip
773            - docvert <unfixed>
774            - moodle <unfixed>
775            - egroupware <unfixed>
776    
777    libphp-simplepie
778            - dokuwiki <unfixed>
779    
780    libphp-jpgraph
781            - egroupware <unfixed>
782    
783    php-simpletest
784            - moodle <unfixed>
785    
786    libpng
787            - iceweasel <unfixed> (embed)
788            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
789            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
790            - iceape 1.0.13~pre080614i-0etch1 (embed)
791            - xulrunner <unfixed> (embed)
792            NOTE: Debian 1.9.0.6 uses embedded copy
793            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
794            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
795            NOTE: Ubuntu only
796            - firefox-3.0 <unfixed> (embed)
797            NOTE: Ubuntu only
798            - firefox-3.1 <unfixed> (embed)
799            NOTE: Ubuntu only
800            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
801            NOTE: Ubuntu only
802            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
803            NOTE: Ubuntu only
804            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
805            NOTE: Ubuntu only
806    
807    irssi
808            - irssi-plugin-silc <unfixed> (embed)
809            NOTE: Seems to be a pre-0.8.12 version that is used
810    
811    extc
812            - mtasc <unfixed> (embed)
813            - haxe <unfixed> (embed)
814    
815    swflib
816            - mtasc <unfixed> (embed)
817            - haxe <unfixed> (embed)

Legend:
Removed from v.7385  
changed lines
  Added in v.11590

  ViewVC Help
Powered by ViewVC 1.1.5