/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7279 by jmm-guest, Sun Nov 11 18:50:43 2007 UTC revision 12484 by pabs, Tue Aug 4 22:39:51 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16  silc-toolkit:  sort: static (linking statically against a lib)
17  silc-client (uses libsilc and libsilcclient)        embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19  dietlibc:              thus might share parts of the source code)
20  ccontrol (links statically)        old-version (the package is an older version of essentially
21                       the same code)
22  libiax:  
23  iaxmodem  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
26  dpkg  Everything up to the next line is ignored.
27  rsync (somehow derived code base)  ---BEGIN
28  mono  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  mozilla(?)          NOTE: Fixed packages link to poppler library unless otherwise noted
30  Linux kernels          - gpdf <removed>
31  pvpgn (links dynamically since 1.7.8-2)          [sarge] - gpdf <unfixed>
32  mrtg (links dynamically since 2.12.2-1)          NOTE: has been replaced by evince in etch
33  rpm          - pdftohtml <unknown>
34            [sarge] - pdftohtml <unfixed>
35  libbz2:          [etch] - pdftohtml <unfixed>
36  dpkg (statically linked)          NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38  libgadu/ekg:          - texlive-base 3.0-12 (embed)
39  centericq          - texlive-bin 2007-1 (embed)
40  gaim          NOTE: links to poppler
41  kopete (ships the code, but links dynamically in the Debian package)          - koffice <unfixed> (embed; bug #436163)
42  kadu (not packaged in Debian)          - libextractor 0.5.12-1 (embed)
43  GNU gadu (not yet packaged in Debian)          NOTE: libextractor is using its own pdf decoder now
44            - pdfkit.framework 0.8-4 (embed)
45  xmlrpc: (which package is the "origin" of this code?)          - ipe <unfixed> (embed)
46  drupal          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47  phpgroupware          - ruby-gnome2 <unknown> (embed)
48  egroupware          NOTE: copy only present in source but links to poppler
49  phpwiki          - pdfedit <unfixed> (embed; bug #510794)
50  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - swftools <unfixed> (embed)
51  tikiwiki  
52    ppmd
53  shtool: (affects build-time only)          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54  mysql-ocaml  
55  php4  libevent
56            - transmission <unfixed> (embed; bug #529372)
57  mozilla:  
58  mozilla-firefox  lrmi
59  mozilla-thunderbird          - read-edid 2.0.0-1 (embed; bug #495131)
60  firefox (to be removed)  
61  thunderbird (to be removed)  peercast
62  iceweasel          - gnome-peercast <unfixed> (embed)
63  iceape          NOTE: gnome-peercast may better be removed, see #466539
64  icedove  
65  xulrunner  silc-toolkit
66  nvu (no longer in Debian)          - silc-client 1.1~beta6-1 (embed)
67    
68  xli:  icclib
69  xloadimage          - ghostscript <unfixed> (embed)
70            - argyll <unfixed> (embed)
71  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
72  openmotif  dietlibc
73  xfree86/xorg (in libxpm)          - ccontrol 0.9.1+20071204-1 (static)
74    
75  kerberized apps with BSD origin:  libmikmod
76  krb4          - sdl-mixer1.2 <unfixed> (embed)
77  krb5          TODO: report bug
78  heimdal  
79    libiax
80  grip: (which pkg is the origin?)          - iaxmodem <unfixed> (embed)
81  libcdaudio  
82  grip  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
83  gnome-vfs (vfs2 as well?)          - dpkg <unfixed> (embed)
84            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
85  fudforum:          - rsync <unfixed> (embed)
86  phpgroupware-fudforum          NOTE: somehow derived code base
87  egroupware-fudforum (removed from egroupware after sarge)          - mono <unfixed> (embed)
88            TODO: check mozilla
89  cvs:          - Linux kernels <unfixed> (embed)
90  gcvs (at least an additional script is included, check if there's more)          - pvpgn 1.7.8-2 (embed)
91            - mrtg 2.12.2-1 (embed)
92  pcre:          - rpm <unknown> (embed)
93  all pythons          NOTE: pinged anibal since when rpm was fixed
94  php4 (src included, but Debian package links dynamically)          - tuxcmd-modules <unfixed> (embed)
95  analog (src included, but Debian package links dynamically)          - zsync <unfixed>
96  libgoffice-1          - tra <unfixed>
97  vfu (#450754)          - sash <unfixed>
98  tf5 (since 5.0beta7 the Debian package links dynamically)          - nsis <unfixed>
99  monotone (including this starting from 0.37)          - mseide-msegui <unfixed>
100  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          NOTE: mseide
101            - mirrordir <unfixed>
102  tiff:          - poco <unfixed>
103  wxpythongtk (check, which debian pkg this is in)          - klibc <unfixed>
104  older kdegraphics/kpdf releases < 3.3 embedded a copy          - ghostscript <unfixed>
105            - freeimage <unfixed>
106  uudeview:          - clamav <unfixed> (fork)
107  libconvert-uulib-perl          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
108            - tuxonice-userui <unfixed>
109  sqlite: (not affected by security vulnerabilities so far)          - plt-scheme <unfixed>
110  amarok          - perl <unfixed>
111  monotone          - paraview <unfixed>
112  iceweasel          - gcvs <unfixed>
113            - erlang <unfixed>
114  util-linux/mount:          - dump <unfixed>
115  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - aide <unfixed> (static)
116            - dar <unfixed> (static)
117  webmin:          - avfs <unfixed>
118  usermin (only in sarge)          - fpc <unfixed>
119            - winff <unfixed>
120  sylpheed:          NOTE: inherited from fpc, see #472304
121  sylpheed-claws          - lazarus <unfixed>
122            NOTE: inherited from fpc, see #472304
123  phpsysinfo:  
124  egroupware  libbz2
125  phpgroupware          - dpkg <unfixed> (static)
126    
127  phpldapadmin:  libgadu:
128  egroupware (removed from egroupware after sarge)          - centericq <unfixed> (embed)
129            - gaim <unfixed> (embed)
130  chmlib:          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
131  kchmviewer (not packaged in Debian)          - kdenetwork 4:3.3.2-5 (embed)
132            NOTE: from kdenetwork: kopete
133  libavcodec/libavformat (source: ffmpeg):          - gadu <unfixed> (embed)
134  mplayer (#395252)          - ekg 1:1.8~rc0-1 (embed)
135  xvidcap          - kadu 0.6.0.2-3 (embed; bug #504430)
136  kino (links statically, does not include code)          NOTE: gadu not packaged in Debian yet
137  vlc (links statically, does not include code)  
138  smilutils (links statically, does not include code)  xmlrpc (which package is the "origin" of this code?)
139  motion (links statically, does not include code)          - drupal <unfixed> (embed)
140  gst-ffmpeg          - phpgroupware <unfixed> (embed)
141  gstreamer0.10-ffmpeg          - egroupware <unfixed> (embed)
142  xmovie          - phpwiki <unfixed> (embed)
143            - php4 <unfixed> (embed)
144            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
145    
146    shtool (affects build-time only)
147            - mysql-ocaml <unfixed> (embed)
148            - php4 <unfixed> (embed)
149    
150    mozilla source code
151            - mozilla-firefox <unfixed> (embed)
152            - mozilla-thunderbird <unfixed>
153            - firefox <removed>
154            - thunderbird <removed>
155            - iceweasel <unfixed> (embed)
156            - iceape <unfixed> (embed)
157            - icedove <unfixed> (embed)
158            - xulrunner <unfixed> (embed)
159            - nvu <removed> (embed)
160            - kompozer <unfixed> (embed; bug #532168)
161    
162    xli
163            - xloadimage <unfixed> (embed)
164    
165    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
166            - openmotif <unfixed> (embed)
167            - libxpm <unfixed> (embed)
168    
169    kerberized apps with BSD origin
170            - krb4 <unfixed> (embed)
171            - krb5 <unfixed> (embed)
172            - heimdal <unfixed> (embed)
173    
174    grip (which pkg is the origin?)
175            - libcdaudio <unfixed>
176            - grip <unfixed>
177            - gnome-vfs <unfixed>
178            TODO: check vfs2 as well
179    
180    fudforum
181            [etch] - phpgroupware <unfixed> (embed)
182            NOTE: phpgroupware-fudforum
183            [sarge] - egroupware-fudforum <removed> (embed)
184    
185    libbsd
186            - rdate 1:1.2-3 (embed)
187    
188    cvs
189            - gcvs <unfixed> (embed)
190            NOTE: see cvsunix/src in tarball
191    
192    pcre
193            - python* <unfixed> (embed)
194            - php4 <unknown> (embed)
195            - analog 2:5.23-0woody1 (embed)
196            - goffice <unfixed> (embed)
197            NOTE: libgoffice-*
198            - vfu 4.06-4.1 (embed; bug #450754)
199            - tf5 5.0beta7-1 (embed)
200            - monotone 0.43-1 (embed)
201            NOTE: this only affects versions >= 0.37
202            - glib2.0 2.15.2-1 (embed)
203            - apache2 2.0.53-4 (embed)
204            - exim4 4.10-0.srh20.12 (embed)
205            - yacas <unfixed> (embed)
206            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
207            - gtamsanalyzer.app 0.42-5 (embed)
208            - tin <unknown> (embed)
209            - kazehakase 0.5.2-1
210            - webkit <unfixed> (embed)
211            - qt4-x11 <unfixed> (embed)
212            NOTE: embedded via webkit copy
213    
214    tiff
215            - wxwindows2.4 2.2.1 (embed)
216    
217    uudeview
218            - libconvert-uulib-perl <unfixed> (embed)
219            - pan <unfixed> (embed)
220    
221    sqlite (not affected by security vulnerabilities so far)
222            - amarok <unfixed> (embed)
223            - monotone 0.43-1 (embed)
224            - iceweasel <unfixed> (embed)
225    
226    util-linux/mount
227            - loop-aes-utils <unfixed> (embed)
228            NOTE: contains code from util-linux' mount in the mount-aes-udeb
229    
230    webmin
231            - usermin <unknown> (embed)
232            [sarge] - usermin <unfixed> (embed)
233    
234    sylpheed
235            - sylpheed-claws <unfixed> (fork)
236    
237    phpsysinfo
238            - egroupware <unfixed> (embed)
239            - phpgroupware <unfixed> (embed)
240    
241    phpldapadmin
242            [sarge] - egroupware <unfixed> (embed)
243            NOTE: removed from egroupware after sarge
244    
245    chmlib
246            - kchmviewer <unknown> (embed)
247    
248    libavcodec/libavformat (source: ffmpeg)
249            - mplayer 1.0~rc2-14 (embed; bug #395252)
250            - kino 1.0.0-1
251            - vlc <not-affected> (Links dynamically since initial release)
252            - smilutils 0.3.0-10
253            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
254            - motion 3.1.19-1
255            - gstreamer0.10-ffmpeg 0.10.3-2
256            - xmovie <unfixed>
257            TODO: gimp-gap (potentially using ffmpeg code as well)
258    
259    faad2
260            - mplayer 1.0~rc2-20 (embed)
261    
262    mad MPEG decoding lib
263            - mad <unfixed> (embed)
264            - xine-lib <unfixed> (embed)
265    
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
266  libdts  libdts
267  xine-lib          - xine-lib <unfixed> (embed)
268    
 flac:  
269  flac  flac
270  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
271    
272  libsndfile:  liba52
273  ardour          - a52dec <unfixed> (embed)
274            - xine-lib <unfixed> (embed)
275    
276  glibmm2.4:  libmpeg2
277  ardour          - mpeg2dec <unfixed> (embed)
278            - xine-lib <unfixed> (embed)
279    
280  libgnomecanvasmm2.6:  curl
281  ardour          - wget <unfixed> (embed)
282            NOTE: code for NTLM authentication
283    
284  libsigc++-2.0:  uw-imap
285  ardour          - pine <unfixed> (embed)
286            - alpine <unfixed> (embed)
287    
288  soundtouch:  imagemagick
289  ardour          - graphicsmagick <unfixed> (fork)
290    
291  libmms:  halibut
292  xine-lib          - nsis <unfixed> (fork)
 mimms  
   
 FCKeditor:  
 knowledgeroot  
 moin  
 karrigell  
 gforge-plugins-extra  
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
 busybox  
   
 neon:  
 cadaver (all, but being worked on: #188381)  
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
293    
294  libmodplug:  libghttp
295  gst-plugins-bad0.10          - hotway <unfixed> (embed)
296    
297  libvncserver:  libsndfile
298  vino          - ardour 1:2.7.1-1 (embed)
299    
300  putty:  glibmm2.4
301  filezilla          - ardour 1:2.7.1-1 (embed)
302    
303  tinyxml (not packaged in Debian):  libgnomecanvasmm2.6
304  filezilla          - ardour 1:2.7.1-1 (embed)
305    
306  gv:  libsigc++-2.0
307  evince (ps/ tree from gv 3.5.8)          - ardour 1:2.7.1-1 (embed)
 evince-gtk (not packaged in Debian)  
308    
309  libXbae:  soundtouch
310  libpawlib2-lesstif package (from Cernlib)          - ardour 1:2.7.1-1 (embed)
311    
312  libXaw:  libmms
313  libpawlib2-lesstif package (from Cernlib)          - xine-lib <unfixed> (embed)
314            - mimms <unfixed> (embed)
315    
316  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  fckeditor
317            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
318            - moin 1.8.2-2 (embed; bug #452599)
319            - karrigell <removed> (embed; bug #452598)
320            - gforge 4.6.99+svn6225-1 (embed)
321            - request-tracker3.8 <unfixed> (embed)
322    
323  libgd2:  ipatlas (not packaged in Debian)
324  graphviz (lib/gd seems to be 2.0.33)          - moodle <unfixed> (embed; bug #507185)
325    
326  rar:  libphp-phpmailer
327  unrar-nonfree          - moodle <unfixed> (embed; bug #507185)
328            - mahara <unfixed> (embed)
329            - symfony <unfixed> (embed)
330            [etch] - phpgroupware <unfixed> (embed)
331            NOTE: phpgroupware-felamimail is only in etch
332            - egroupware <unfixed> (embed; bug #504283)
333            - glpi <unfixed>
334    
335  unrar-free: (maybe this code is derived from the original rar, too?)  htmlArea (not packaged in Debian)
336  clamav (seems to be disabled in default config)          - moodle <unfixed> (embed)
337    
338  mplayer (DirectMedia Object loader):  giflib:
339  xine-lib (src/libw32dll/)          - wine <unfixed> (embed; bug #466181)
 vlc (modules/codec/dmo/)  
340    
341  libwpd (WordPerfect converter):  bennu (not packaged in Debian, http://bennu.sourceforge.net)
342  openoffice.org          - moodle <unfixed> (embed)
343    
344  fsplib (http://sourceforge.net/projects/fsp/):  smarty:
345  gftp (lib/fsplib version 0.3)          - moodle 1.8.2-2 (embed; bug #471158)
346            - gallery2 2.2.5-2 (embed; bug #471160)
347            - mahara 0.9.2-2 (embed; bug #471201)
348            - gosa 2.4beta1-1 (embed; bug #471200)
349    
350  librpcsecgss:  TinyMCE
351  krb5          - wordpress 2.5.1-3 (embed; bug #478257)
352            - moodle <unfixed> (embed; bug #507185)
353            - knowledgeroot <unfixed> (embed)
354            - joomla <itp> (bug #326398)
355    
356    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
357            - scite <unfixed> (embed)
358            - qscintilla <unfixed> (embed)
359            - qscintilla2 <unfixed> (embed)
360            - geany <unfixed> (fork)
361            - anjuta <unfixed> (embed)
362    
363    libphp-adodb
364            - moodle <unfixed> (embed; bug #507185)
365            NOTE: also AdoDB-XML Schema
366            - gallery2 <unfixed> (embed)
367            - phppgadmin <unfixed> (embed)
368            - egroupware <unfixed> (embed)
369            - phpwiki <unfixed> (embed)
370            - torrentflux 2.0beta1-2 (embed)
371            - ipplan <unfixed> (embed)
372            - typo3-src <unfixed> (embed)
373            - cacti <unknown> (embed)
374            [sarge] - cacti <unfixed> (embed)
375            NOTE: dependency exists, but internal version is used
376            - gforge 4.7~rc2-6 (embed)
377            - mahara <unfixed> (embed)
378    
379    gzip
380            - linux-kernel <unfixed> (embed)
381            NOTE: lib/inflate.c
382            - klibc <unfixed> (embed)
383            NOTE: based on linux-kernel gzip code
384            - busybox <unfixed> (embed)
385    
386    neon
387            - cadaver <unfixed> (embed; bug #188381)
388            - gnome-vfs2 <unfixed> (embed; bug #395874)
389            - litmus <unfixed> (embed; #395875)
390            [sarge] - screem <unfixed> (embed)
391            - sitecopy <unfixed> (embed; bug #395876)
392            [etch] - tla <unfixed> (embed; bug #395877)
393            [sarge] - tla <unfixed> (embed; bug #395877)
394    
395    libmodplug
396            - gst-plugins-bad0.10 <unfixed> (embed)
397    
398    libvncserver
399            - vino <unfixed> (embed)
400    
401    putty
402            - filezilla <unfixed> (embed)
403    
404    tinyxml (not packaged in Debian)
405            - filezilla <unfixed>
406    
407    gv
408            - evince <unfixed> (embed)
409            NOTE: ps/ tree from gv 3.5.8
410            - evince-gtk <unfixed> (embed)
411            NOTE: not packaged in Debian
412    
413    libXbae
414            [etch] - libpawlib2-lesstif <unfixed> (embed)
415            NOTE: from Cernlib
416    
417    libgtkhtml
418            - claws-mail-html2-viewer <unfixed> (fork)
419    
420    libXaw
421            [etch] - libpawlib2-lesstif <unfixed>
422            NOTE: from Cernlib
423            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
424    
425    libgd2
426            - graphviz <unfixed> (embed)
427            NOTE: lib/gd seems to be 2.0.33
428            - wml <unfixed> (embed)
429            - libwmf <unfixed> (embed)
430            NOTE: derived from gd 1.6.3
431    
432    rar
433            - unrar-nonfree <unfixed> (embed)
434    
435    unrar-free (maybe this code is derived from the original rar, too?)
436            - clamav <unfixed> (embed)
437            NOTE: seems to be disabled in default config
438    
439    mplayer (DirectMedia Object loader)
440            - xine-lib <unfixed> (embed)
441            NOTE: src/libw32dll/
442            - vlc <unfixed> (embed)
443            NOTE: modules/codec/dmo/
444            - mplayer 1.0~rc2-20 (embed)
445    
446    libwpd (WordPerfect converter)
447            - openoffice.org <unfixed> (embed)
448    
449    fsplib (http://sourceforge.net/projects/fsp/)
450            - gftp <unfixed> (embed)
451            NOTE: lib/fsplib version 0.3
452    
453    sprng
454            - tree-puzzle <unfixed> (embed)
455    
456    librpcsecgss
457            - krb5 <unfixed> (embed)
458    
459    jasper
460            - ghostscript <unfixed> (embed)
461            - gs-gpl <unfixed> (embed)
462    
463    libiris
464            - psi <unfixed> (embed)
465            - kdenetwork <unfixed> (embed)
466            NOTE: kopete embeds libiris but links dynamically to libidn
467            - kdegames <unfixed> (embed)
468            NOTE: ksirk/kde4
469    
470    libidn
471            - monotone 0.43-1 (embed)
472            - psi <unfixed> (embed)
473            NOTE: psi embeds libiris which embeds libidn
474            - kdegames <unfixed> (embed)
475            NOTE: kdegames/kde4 embeds libiris which embeds libidn
476    
477    liblua
478            - monotone 0.43-1 (embed)
479            - nmap <unfixed> (embed; bug #527997)
480            NOTE: fixed upstream as of nmap svn rev13336.
481    
482    libbotan
483            - monotone 0.43-1 (embed)
484    
485    NetXX
486            - monotone 0.43-1 (embed)
487    
488    libgc
489            - mono <unfixed> (embed)
490    
491    lzma
492            - p7zip <unfixed> (embed)
493    
494    lzo
495            - grub2 <unfixed> (embed)
496    
497    yassl
498            - mysql-dfsg-5.0 <unfixed> (embed)
499    
500    pax code
501            - tar <unfixed> (embed)
502            - cpio <unfixed> (embed)
503    
504    t1lib
505            - tetex-bin 2.0.2-1 (embed)
506            - texlive-bin <unknown> (embed)
507    
508    guichan
509            - boswars <unfixed> (embed)
510            NOTE: maintainer notified us, working on it
511    
512    tolua
513            - boswars <unfixed> (embed)
514            NOTE: maintainer notified us, working on it
515    
516    asio-dev
517            - luxrender <unfixed> (embed)
518            NOTE: maintainer notified us, working on it
519            NOTE: may be merged with boost "soon"
520    
521  jasper:  xine-lib
522  ghostscript          - vlc <unfixed> (embed)
523  gs-gpl          NOTE: only parts included in modules/access/rtsp
524    
525  libidn:  netpbm
526  monotone          - tcl8.3 <unfixed> (embed)
527            - tcl8.4 <unfixed> (embed)
528            - tcl8.5 <unfixed> (embed)
529            NOTE: generic/tkImgGIF.c
530    
531    tk8.5
532            - tk8.0 <removed> (old-version)
533            - tk8.3 <unfixed> (old-version)
534            - tk8.4 <unfixed> (old-version)
535            - perl-tk <unfixable> (fork)
536    
537    samba
538            - mc 2:4.6.2~git20080311-1 (embed)
539            NOTE: maintainer is aware of this, currently searching a solution
540    
541    plib1.8.4c2
542            - boson <unfixed> (fork)
543            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
544    
545    fribidi
546            - quesoglc <unfixed> (embed)
547            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
548    
549    glew
550            - quesoglc <unfixed> (embed; bug #489341)
551            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
552    
553    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
554            - transcend <unfixed> (embed)
555            - cultivation <unfixed> (embed)
556            - passage <unfixed> (embed)
557            - gravitation <unfixed> (embed)
558    
559  liblua:  tar
560  monotone          - libarchive <unfixed> (embed)
561            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
562    
563  libbotan:  cpio
564  montone          - libarchive <unfixed> (embed)
565            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
566    
567  NetXX:  webkit
568  monotone          - qt4-x11 <unfixed> (embed)
569    
570  libgc:  ftgl
571  mono          - blender 2.46+dfsg-1 (embed)
572    
573  lzma:  wv
574  p7zip          - abiword <unfixed>
575    
576    qemu
577            - kvm <unfixed> (embed)
578            - xen-3 <unfixed> (embed)
579            - xen-unstable <unfixed> (embed)
580    
581    vgabios
582            - kvm <unfixed> (embed; bug #489442)
583    
584    bochs
585            - kvm <unfixed> (embed; bug #489442)
586    
587    speex
588            - vorbis-tools <unfixed> (embed)
589            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
590            - gst-plugins-good0.10 <unfixed> (embed)
591            - xine-lib <unfixed> (embed)
592            - libfishsound <unfixed> (embed)
593            - libannodex <unfixed> (embed)
594            - vlc <unfixed> (embed)
595            - xmms-speex <unfixed> (embed)
596            - libsdl-sound1.2 <unfixed> (embed)
597            - sweep <unfixed> (embed)
598    
599    libreadline
600            - magic <unfixed> (old-version)
601            NOTE: magic is currently an RFS
602    
603    opcode
604            - ode <unfixed> (embed)
605            NOTE: opcode is not a package in debian, it is just embedded
606            NOTE: http://www.codercorner.com/Opcode.htm
607    
608    gimpact
609            - ode <unfixed> (embed)
610            NOTE: gimpact is not a package in debian, it is just embedded
611            NOTE: http://gimpact.sf.net
612    
613    mochikit
614            - mahara <unfixed> (embed)
615            NOTE: they require extra patches, still unmerged upstream
616            - ntop <unfixed> (embed)
617            - coherence <unfixed> (embed)
618            NOTE: python-coherence
619            - paste <unfixed> (embed)
620            NOTE: python-paste
621            - turbogears <unfixed> (embed)
622            NOTE: python-turbogears
623            - plone3 <unfixed> (embed)
624            NOTE: zope-plone3
625    
626    prototype
627            - netbeans-ide <unfixed> (embed)
628            - auth2db-frontend <unfixed> (embed)
629            - webcit <unfixed> (embed)
630            NOTE: citadel-webcit
631            - asterisk <unfixed> (embed)
632            - doc-iana <unfixed> (embed)
633            - libaws <unfixed> (embed)
634            NOTE: libaws-doc
635            - libgettext-ruby <unfixed> (embed)
636            NOTE: libgettext-ruby-data
637            - libjson-ruby <unfixed> (embed)
638            NOTE: libjson-ruby-doc
639            - lucene2 <unfixed> (embed)
640            NOTE: liblucene2-java-doc
641            - libopenid-ruby <unfixed> (embed)
642            - solr <unfixed> (embed)
643            NOTE: solr-common
644            - glpi <unfixed> (embed)
645            - hobbix <unfixed> (embed)
646            - mnemo2 <unfixed> (embed)
647            - nag2 <unfixed> (embed)
648            - knowledgeroot <unfixed> (embed)
649            - mediatomb <unfixed> (embed)
650            NOTE: mediatomb-common
651            - mt-daapd <unfixed> (embed)
652            - op-panel <unfixed> (embed)
653            - ebug-http <unfixed> (embed)
654            - phpgedview <removed> (embed)
655            - poker-network <unfixed> (embed)
656            NOTE: poker-web
657            - webhelpers <unfixed> (embed)
658            NOTE: python-webhelpers
659            - qwik <unfixed> (embed)
660            - rails <unfixed> (embed)
661            - typo3-src <unfixed> (embed)
662            - wordpress <unfixed> (embed)
663            - zope <unfixed> (embed)
664            NOTE: zope-plone3
665            - smokeping <unfixed> (embed)
666            - ampache 3.4.1-2 (embed)
667            - exaile <unfixed> (embed)
668            - hobix <unfixed> (embed)
669            - pixelpost <unfixed> (embed)
670            - symfony <unfixed> (embed)
671            NOTE: it's been said that there are custom changes
672            - zabbix <unfixed> (embed)
673            NOTE: zabbix-frontend-php
674            - turba2 <unfixed> (embed)
675    
676    gdb
677            - insight <unfixed> (embed)
678    
679    e2fsprogs
680            - ldiskfsprogs <unfixable> (fork)
681    
682    quazip (not packaged in Debian)
683            - qcake <unfixed> (embed)
684            NOTE: starting with upstream version 0.6.4
685    
686    exo
687            - pcmanfm <unfixed> (embed; bug #499677)
688            NOTE: slightly modified source code
689    
690    java
691            - openjdk-6 <unfixed>
692            - sun-java5 <unfixed>
693            - sun-java6 <unfixed>
694    
695    libphp-snoopy
696            - ampache 3.4.1-2 (embed; bug #504169)
697            - mahara 1.0.5-2 (embed; bug #504170)
698            - pixelpost <unfixed> (embed; bug #504171)
699            - mediamate 0.9.3.6-5 (embed; bug #504172)
700            - opendb <unfixed> (embed; bug #504173)
701            - wordpress 2.5.1-9 (embed; bug #443948)
702            - moodle <unfixed> (embed; bug #507185)
703            [etch] - phpgroupware <unfixed> (embed)
704            NOTE: phpgroupware-felamimail
705            - magpierss 0.72-3 (embed; bug #431089)
706    
707    jquery
708            - zekr <unfixed> (embed)
709            - wordpress <unfixed> (embed)
710            - yocto-reader <unfixed> (embed)
711            - textpattern <unfixed> (embed)
712            - genshi 0.5.1-1 (embed)
713            NOTE: compressed file under examples/ dir
714            - prewikka <unfixed> (embed)
715            - libramaze-ruby <unfixed> (embed)
716            - drupal5 <unfixed> (embed)
717            - b2evolution <unfixed> (embed)
718            - wesnoth <unfixed> (embed)
719    
720    tablesorter (jquery plugin, not packaged yet)
721            - wesnoth <unfixed> (embed)
722    
723    kses
724            - wordpress <unfixed> (embed; bug #504242)
725            NOTE: their copy has all methods renamed to wp_<foo>
726            - moodle <unfixed> (embed; bug #507185)
727            - egroupware <unfixed> (embed)
728    
729    magpierss
730            - wordpress <unfixed> (embed; bug #504242)
731            - moodle <unfixed>
732    
733    php-gettext
734            - wordpress <unfixed> (embed; bug #504242)
735    
736    libphp-ixr (name may change, it is the Incutio XML-RPC)
737            - wordpress <unfixed> (embed; bug #504242)
738            - dokuwiki <unfixed> (embed)
739            - textpattern <unfixed> (embed)
740    
741    libphp-cas
742            - glpi <unfixed> (embed)
743            - moodle <unfixed> (embed; bug #496069)
744    
745    scriptaculous
746            - glpi <unfixed> (embed)
747            - libaws <unfixed> (embed)
748            NOTE: libaws-doc
749            - op-panel <unfixed> (embed)
750            - symfony <unfixed> (embed)
751            NOTE: maintainer says there are extra incompatible changes required
752            - pixelpost <unfixed> (embed)
753            - webhelpers <unfixed> (embed)
754            NOTE: python-webhelpers
755            - qwik <unfixed> (embed)
756            - smokeping <unfixed> (embed)
757            - turba2 <unfixed> (embed)
758            - typo3-src 4.2.3-1 (embed)
759    
760    libmarkdown-php
761            - moodle <unfixed> (embed; bug #507185)
762            - pixelpost <unfixed> (embed)
763    
764    php-openid
765            - wordpress-openid <itp> (embed)
766    
767    geshi
768            - dokuwiki 0.0.20080505-3.1 (embed)
769            - pgfouine 1.0-1.1 (embed)
770            - websvn 2.1.0-1 (embed)
771    
772    webcalendar
773            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
774    
775    libical
776            - kdepim <unfixed> (fork)
777            - kdepimlibs <unfixed> (fork)
778            NOTE: fixed in KDE4 post 4.1.x series
779            - claws-mail-vcalendar-plugin <unfixed> (fork)
780    
781    libltdl3
782            - kdelibs <unfixed> (embed)
783            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
784            - synfig <unfixed> (embed)
785    
786    harfbuzz
787            - qt4-x11 <unfixed> (embed)
788    
789    libzip
790            - php5 <unfixed> (fork)
791            - odt2txt <unfixed> (embed; bug #523808)
792    
793    json.php (not packaged; should be replaced with php's built-in functions)
794            - moodle <unfixed>
795            - yui <unfixed>
796            - gallery2 <unfixed>
797            - dokuwiki <unfixed>
798            - typo3-src <unfixed>
799    
800    php-fpdf
801            - tcpdf <itp> (fork)
802            - moodle <unfixed>
803            - phpwiki <unfixed>
804            - egroupware <unfixed>
805            - ldap-account-manager <unfixed> (fork)
806    
807    tcpdf (itp: #495985)
808            - moodle <unfixed>
809            - phpmyadmin <unfixed>
810    
811  lzo:  typo3
812  grub2          - moodle <unfixed>
813    
814  pax code:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
815  tar          - moodle <unfixed>
816  cpio          - gosa <unfixed>
817    
818    php-ole (itp: #487558)
819            - moodle <unfixed>
820    
821    pieforms (http://www.catalyst.net.nz)
822            - mahara <unfixed>
823    
824    savant2 (http://phpsavant.com)
825            - egroupware <unfixed>
826    
827    rssparser (http://nwow.org)
828            - egroupware <unfixed>
829            - phpgroupware <unfixed>
830    
831    lcms
832            - openjdk-6 <unfixed> (fork)
833    
834    libphp-phplayersmenu
835            - diogenes <unfixed>
836            - phpldapadmin <unfixed>
837    
838    libphp-pclzip
839            - docvert <unfixed>
840            - moodle <unfixed>
841            - egroupware <unfixed>
842    
843    libphp-simplepie
844            - dokuwiki <unfixed>
845    
846    libphp-jpgraph
847            - egroupware <unfixed>
848    
849    php-simpletest
850            - moodle <unfixed>
851    
852    libpng
853            - iceweasel <unfixed> (embed)
854            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
855            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
856            - iceape 1.0.13~pre080614i-0etch1 (embed)
857            - xulrunner <unfixed> (embed)
858            NOTE: Debian 1.9.0.6 uses embedded copy
859            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
860            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
861            NOTE: Ubuntu only
862            - firefox-3.0 <unfixed> (embed)
863            NOTE: Ubuntu only
864            - firefox-3.1 <unfixed> (embed)
865            NOTE: Ubuntu only
866            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
867            NOTE: Ubuntu only
868            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
869            NOTE: Ubuntu only
870            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
871            NOTE: Ubuntu only
872    
873    irssi
874            - silc-client <unfixed> (embed)
875            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
876    
877    extc
878            - mtasc <unfixed> (embed)
879            - haxe <unfixed> (embed)
880    
881    swflib
882            - mtasc <unfixed> (embed)
883            - haxe <unfixed> (embed)
884    
885    libitext-java
886            - bouncycastle 2.1.4-1 (embed)
887    
888    python-ply
889            - pyke <unfixed> (embed)
890    
891    libdumbnet (libdnet upstream)
892            - nmap <unfixed> (fork)
893    
894    gcc-4.4
895            - gcc-mingw32 <unfixed> (embed)
896    
897    camlimages
898            - advi <unfixed> (embed)
899    
900    yajl (ITP: #537199)
901            - argyll <unfixed> (embed)
902            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html

Legend:
Removed from v.7279  
changed lines
  Added in v.12484

  ViewVC Help
Powered by ViewVC 1.1.5