/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 6969 by nion, Mon Oct 15 12:10:34 2007 UTC revision 12718 by gilbert-guest, Mon Aug 31 00:49:59 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16  silc-toolkit:          that add real value)
17  silc-client (uses libsilc and libsilcclient)  sort: static (linking statically against a lib)
18          embed (embedding a copy of the library into another source package)
19  dietlibc:        fork (the package is not just embedding code but it is a fork and
20  ccontrol (links statically)              thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22  libiax:                     the same code)
23  iaxmodem  
24    The srcpkg might be some string to identify the code if there is no
25  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  specific source package.
26  dpkg  
27  rsync (somehow derived code base)  Everything up to the next line is ignored.
28  mozilla(?)  ---BEGIN
29  Linux kernels  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30  pvpgn (links dynamically since 1.7.8-2)          NOTE: Fixed packages link to poppler library unless otherwise noted
31  mrtg (links dynamically since 2.12.2-1)          NOTE: has been replaced by evince in etch
32  rpm          - pdftohtml <unknown>
33            [sarge] - pdftohtml <unfixed>
34  libbz2:          [etch] - pdftohtml <unfixed>
35  dpkg (statically linked)          NOTE: has been replaced by poppler-utils
36            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
37  libgadu/ekg:          - texlive-base 3.0-12 (embed)
38  centericq          - texlive-bin 2007-1 (embed)
39  gaim          NOTE: links to poppler
40  kopete (ships the code, but links dynamically in the Debian package)          - koffice <unfixed> (embed; bug #436163)
41  kadu (not packaged in Debian)          - libextractor 0.5.12-1 (embed)
42  GNU gadu (not yet packaged in Debian)          NOTE: libextractor is using its own pdf decoder now
43            - ipe <unfixed> (embed)
44  xmlrpc: (which package is the "origin" of this code?)          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45  drupal          - ruby-gnome2 <unknown> (embed)
46  phpgroupware          NOTE: copy only present in source but links to poppler
47  egroupware          - pdfedit <unfixed> (embed; bug #510794)
48  phpwiki          - swftools <unfixed> (embed)
49  php4 (php-pear, IIRC this was reorganized some weeks ago?)  
50  tikiwiki  ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52  shtool: (affects build-time only)          NOTE: discussion in #458152
53  mysql-ocaml  
54  php4  libevent
55            - transmission 1.71-1 (embed; bug #529372)
56  mozilla:  
57  mozilla-firefox  lrmi
58  mozilla-thunderbird          - read-edid 2.0.0-1 (embed; bug #495131)
59  firefox (to be removed)  
60  thunderbird (to be removed)  peercast
61  iceweasel          - gnome-peercast <unfixed> (embed)
62  iceape          NOTE: gnome-peercast may better be removed, see #466539
63  icedove  
64  xulrunner  silc-toolkit
65  nvu (no longer in Debian)          - silc-client 1.1~beta6-1 (embed)
66    
67  xli:  icclib
68  xloadimage          - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
71  openmotif  dietlibc
72  xfree86/xorg (in libxpm)          - ccontrol 0.9.1+20071204-1 (static)
73    
74  kerberized apps with BSD origin:  libmikmod
75  krb4          - sdl-mixer1.2 <unfixed> (embed)
76  krb5          TODO: report bug
77  heimdal  
78    libiax
79  grip: (which pkg is the origin?)          - iaxmodem <unfixed> (embed)
80  libcdaudio  
81  grip  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
82  gnome-vfs (vfs2 as well?)          - dpkg <unfixed> (embed)
83            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
84  fudforum:          - rsync <unfixed> (embed)
85  phpgroupware-fudforum          NOTE: somehow derived code base
86  egroupware-fudforum (removed from egroupware after sarge)          - mono <unfixed> (embed)
87            TODO: check mozilla
88  cvs:          - Linux kernels <unfixed> (embed)
89  gcvs (at least an additional script is included, check if there's more)          - pvpgn 1.7.8-2 (embed)
90            - mrtg 2.12.2-1 (embed)
91  pcre:          - rpm <unknown> (embed)
92  all pythons          NOTE: pinged anibal since when rpm was fixed
93  php4 (src included, but Debian package links dynamically)          - tuxcmd-modules <unfixed> (embed)
94  analog (src included, but Debian package links dynamically)          - zsync <unfixed>
95  libgoffice-1          - tra <unfixed>
96  vfu          - sash <unfixed>
97  tf5 (since 5.0beta7 the Debian package links dynamically)          - nsis <unfixed>
98            - mseide-msegui <unfixed>
99  tiff:          NOTE: mseide
100  wxpythongtk (check, which debian pkg this is in)          - mirrordir <unfixed>
101  older kdegraphics/kpdf releases < 3.3 embedded a copy          - poco <unfixed>
102            - klibc <unfixed>
103  uudeview:          - ghostscript <unfixed>
104  libconvert-uulib-perl          - freeimage <unfixed>
105            - clamav <unfixed> (fork)
106  sqlite: (not affected by security vulnerabilities so far)          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
107  amarok          - tuxonice-userui <unfixed>
108            - plt-scheme <unfixed>
109  util-linux/mount:          - perl <unfixed>
110  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - paraview <unfixed>
111            - gcvs <unfixed>
112  webmin:          - erlang <unfixed>
113  usermin (only in sarge)          - dump <unfixed>
114            - aide <unfixed> (static)
115  fckeditor:          - dar <unfixed> (static)
116  knowledgeroot          - avfs <unfixed>
117            - fpc <unfixed>
118  sylpheed:          - winff <unfixed>
119  sylpheed-claws          NOTE: inherited from fpc, see #472304
120            - lazarus <unfixed>
121  phpsysinfo:          NOTE: inherited from fpc, see #472304
122  egroupware          - erlang <unfixed> (embed)
123  phpgroupware  
124    dulwich
125            - hg-git <unfixed> (embed; bug #541996)
126    
127    libvigraimpex
128            - hugin <unfixed> (embed)
129    
130    libbz2
131            - dpkg <unfixed> (static)
132    
133    libgadu
134            - centericq <unfixed> (embed)
135            - gaim <unfixed> (embed)
136            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
137            - kdenetwork 4:3.3.2-5 (embed)
138            NOTE: from kdenetwork: kopete
139            - ekg 1:1.8~rc0-1 (embed)
140            - kadu 0.6.0.2-3 (embed; bug #504430)
141            - gadu <itp> (embed)
142    
143    xmlrpc (which package is the "origin" of this code?)
144            - drupal <unfixed> (embed)
145            - phpgroupware <unfixed> (embed)
146            - egroupware <unfixed> (embed)
147            - phpwiki <unfixed> (embed)
148            - php4 <unfixed> (embed)
149            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
150    
151    shtool (affects build-time only)
152            - mysql-ocaml <unfixed> (embed)
153            - php4 <unfixed> (embed)
154    
155    mozilla source code
156            - mozilla-firefox <removed> (embed)
157            - mozilla-thunderbird <removed>
158            - firefox <removed>
159            - thunderbird <removed>
160            - iceweasel <unfixed> (embed)
161            - iceape <unfixed> (embed)
162            - icedove <unfixed> (embed)
163            - xulrunner <unfixed> (embed)
164            - nvu <removed> (embed)
165            - kompozer <unfixed> (embed; bug #532168)
166    
167    xli
168            - xloadimage <unfixed> (embed)
169    
170    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
171            - openmotif <unfixed> (embed)
172            - libxpm <unfixed> (embed)
173    
174    kerberized apps with BSD origin
175            - krb4 <removed> (embed)
176            - krb5 <unfixed> (embed)
177            - heimdal <unfixed> (embed)
178    
179    grip (which pkg is the origin?)
180            - libcdaudio <unfixed>
181            - grip <unfixed>
182            - gnome-vfs <unfixed>
183            TODO: check vfs2 as well
184    
185    fudforum
186            [etch] - phpgroupware <unfixed> (embed)
187            NOTE: phpgroupware-fudforum
188            [sarge] - egroupware-fudforum <removed> (embed)
189    
190    libbsd
191            - rdate 1:1.2-3 (embed)
192            - atheme-services <unfixed>
193            - libbsd-arc4random-perl <unfixed>
194            - isakmpd <unfixed>
195    
196    cvs
197            - gcvs <unfixed> (embed)
198            NOTE: see cvsunix/src in tarball
199    
200    pcre
201            - python* <unfixed> (embed)
202            - php4 <unknown> (embed)
203            - analog 2:5.23-0woody1 (embed)
204            - goffice <unfixed> (embed)
205            NOTE: libgoffice-*
206            - vfu 4.06-4.1 (embed; bug #450754)
207            - tf5 5.0beta7-1 (embed)
208            - monotone 0.43-1 (embed)
209            NOTE: this only affects versions >= 0.37
210            - glib2.0 2.15.2-1 (embed)
211            - apache2 2.0.53-4 (embed)
212            - exim4 4.10-0.srh20.12 (embed)
213            - yacas <unfixed> (embed)
214            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
215            - gtamsanalyzer.app 0.42-5 (embed)
216            - tin <unknown> (embed)
217            - kazehakase 0.5.2-1
218            - webkit <unfixed> (embed)
219            - qt4-x11 <unfixed> (embed)
220            NOTE: embedded via webkit copy
221            - erlang <unfixed> (embed)
222    
223    tiff
224            - wxwindows2.4 2.2.1 (embed)
225    
226    uudeview
227            - libconvert-uulib-perl <unfixed> (embed)
228            - pan <unfixed> (embed)
229    
230    sqlite (not affected by security vulnerabilities so far)
231            - amarok <unfixed> (embed)
232            - monotone 0.43-1 (embed)
233            - iceweasel <unfixed> (embed)
234    
235    util-linux/mount
236            - loop-aes-utils <unfixed> (embed)
237            NOTE: contains code from util-linux' mount in the mount-aes-udeb
238    
239    sylpheed
240            - sylpheed-claws <unfixed> (fork)
241    
242    phpsysinfo
243            - egroupware <unfixed> (embed)
244            - phpgroupware <unfixed> (embed)
245    
246    phpldapadmin
247            [sarge] - egroupware <unfixed> (embed)
248            NOTE: removed from egroupware after sarge
249    
250    chmlib
251            - kchmviewer <unknown> (embed)
252    
253    ffmpeg (libavcodec/libavformat)
254            - mplayer 1.0~rc2-14 (embed; bug #395252)
255            - kino 1.0.0-1
256            - vlc <not-affected> (Links dynamically since initial release)
257            - smilutils 0.3.0-10
258            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
259            - motion 3.1.19-1
260            - gstreamer0.10-ffmpeg 0.10.3-2
261            - xmovie <unfixed>
262            NOTE: xmovie removed, only present in Etch
263            TODO: gimp-gap (potentially using ffmpeg code as well)
264            - avifile <unfixed> (embed; bug #538750)
265    
266    faad2
267            - mplayer 1.0~rc2-20 (embed)
268            - avifile <unfixed> (embed; bug #538750)
269    
270    libmad (MPEG decoding lib)
271            - xine-lib <unfixed> (embed)
272            - avifile <unfixed> (embed) [./plugins/libmad/*]
273            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
274    
 phpldapadmin:  
 egroupware (removed from egroupware after sarge)  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
275  libdts  libdts
276  xine-lib          - xine-lib <unfixed> (embed)
277    
 flac:  
278  flac  flac
279  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
280    
281  TODO evaluate:  liba52
282  gimp-gap (potentially using ffmpeg code as well)          - a52dec <unfixed> (embed)
283            - xine-lib <unfixed> (embed)
284    
285  uw-imap:  libmpeg2
286  pine          - mpeg2dec <unfixed> (embed)
287            - xine-lib <unfixed> (embed)
288    
289  imagemagick:  curl
290  graphicsmagick          - wget <unfixed> (embed)
291            NOTE: code for NTLM authentication
292    
293  halibut:  uw-imap
294  nsis          - pine <unfixed> (embed)
295            - alpine <unfixed> (embed)
296    
297  libghttp:  imagemagick
298  hotway          - graphicsmagick <unfixed> (fork)
299    
300  libsndfile:  python-urlgrabber
301  ardour          - mercurial <unfixed> (embed; bug #531062)
302    
303  glibmm2.4:  python-mechanize
304  ardour          - beautifulsoup <unfixed> (embed)
305    
306  libgnomecanvasmm2.6:  halibut
307  ardour          - nsis <unfixed> (fork)
308    
309  libsigc++-2.0:  libghttp
310  ardour          - hotway <unfixed> (embed)
311    
312  soundtouch:  libsndfile
313  ardour          - ardour 1:2.7.1-1 (embed)
314    
315  libmms:  glibmm2.4
316  xine-lib          - ardour 1:2.7.1-1 (embed)
 mimms  
   
 FCKeditor:  
 knowledgeroot  
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
317    
318  gzip:  libgnomecanvasmm2.6
319  linux-kernel (lib/inflate.c)          - ardour 1:2.7.1-1 (embed)
 klibc (based on linux-kernel gzip code)  
 busybox  
320    
321  ffmpeg:  libsigc++-2.0
322  mplayer (#395252)          - ardour 1:2.7.1-1 (embed)
323    
324  neon:  soundtouch
325  cadaver (all, but being worked on: #188381)          - ardour 1:2.7.1-1 (embed)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
326    
327  libmodplug:  libmms
328  gst-plugins-bad0.10          - xine-lib <unfixed> (embed)
329            - mimms <unfixed> (embed)
330    
331  libvncserver:  fckeditor
332  vino          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
333            - moin 1.8.2-2 (embed; bug #452599)
334            - karrigell <removed> (embed; bug #452598)
335            - gforge 4.6.99+svn6225-1 (embed)
336            - request-tracker3.8 <unfixed> (embed)
337    
338  putty:  ipatlas (not packaged in Debian)
339  filezilla          - moodle <unfixed> (embed; bug #507185)
340    
341  tinyxml (not packaged in Debian):  libphp-phpmailer
342  filezilla          - moodle <unfixed> (embed; bug #507185)
343            - mahara <unfixed> (embed)
344            - symfony <unfixed> (embed)
345            [etch] - phpgroupware <unfixed> (embed)
346            NOTE: phpgroupware-felamimail is only in etch
347            - egroupware <unfixed> (embed; bug #504283)
348            - glpi <unfixed>
349    
350  gv:  htmlArea (not packaged in Debian)
351  evince (ps/ tree from gv 3.5.8)          - moodle <unfixed> (embed)
 evince-gtk (not packaged in Debian)  
352    
353  libXbae:  giflib:
354  libpawlib2-lesstif package (from Cernlib)          - wine <unfixed> (embed; bug #466181)
355    
356  libXaw:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
357  libpawlib2-lesstif package (from Cernlib)          - moodle <unfixed> (embed)
358    
359  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  smarty:
360            - moodle 1.8.2-2 (embed; bug #471158)
361            - gallery2 2.2.5-2 (embed; bug #471160)
362            - mahara 0.9.2-2 (embed; bug #471201)
363            - gosa 2.4beta1-1 (embed; bug #471200)
364    
365  libgd2:  TinyMCE
366  graphviz (lib/gd seems to be 2.0.33)          - wordpress 2.5.1-3 (embed; bug #478257)
367            - moodle <unfixed> (embed; bug #507185)
368  rar:          - knowledgeroot <unfixed> (embed)
369  unrar-nonfree          - joomla <itp> (bug #326398)
370    
371  unrar-free: (maybe this code is derived from the original rar, too?)  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
372  clamav (seems to be disabled in default config)          - scite <unfixed> (embed)
373            - qscintilla <unfixed> (embed)
374  mplayer (DirectMedia Object loader):          - qscintilla2 <unfixed> (embed)
375  xine-lib (src/libw32dll/)          - geany <unfixed> (fork)
376  vlc (modules/codec/dmo/)          - anjuta <unfixed> (embed)
377    
378  libwpd (WordPerfect converter):  libphp-adodb
379  openoffice.org          - moodle <unfixed> (embed; bug #507185)
380            NOTE: also AdoDB-XML Schema
381            - gallery2 <unfixed> (embed)
382            - phppgadmin <unfixed> (embed)
383            - egroupware <unfixed> (embed)
384            - phpwiki <unfixed> (embed)
385            - torrentflux 2.0beta1-2 (embed)
386            - ipplan <unfixed> (embed)
387            - typo3-src <unfixed> (embed)
388            - cacti <unknown> (embed)
389            [sarge] - cacti <unfixed> (embed)
390            NOTE: dependency exists, but internal version is used
391            - gforge 4.7~rc2-6 (embed)
392            - mahara <unfixed> (embed)
393    
394    gzip
395            - linux-kernel <unfixed> (embed)
396            NOTE: lib/inflate.c
397            - klibc <unfixed> (embed)
398            NOTE: based on linux-kernel gzip code
399            - busybox <unfixed> (embed)
400    
401    neon
402            - cadaver 0.22.3+debian-1 (embed; bug #188381)
403            - gnome-vfs2 <unfixed> (embed; bug #395874)
404            [etch] - litmus <unfixed> (embed; #395875)
405            - litmus <removed> (embed; #395875)
406            [sarge] - screem <unfixed> (embed)
407            - sitecopy 1:0.16.3-5 (embed; bug #395876)
408            [etch] - tla <unfixed> (embed; bug #395877)
409            [sarge] - tla <unfixed> (embed; bug #395877)
410    
411    libmodplug
412            - gst-plugins-bad0.10 <unfixed> (embed)
413    
414    libvncserver
415            - vino <unfixed> (embed)
416    
417    putty
418            - filezilla <unfixed> (embed)
419    
420    tinyxml (not packaged in Debian)
421            - filezilla <unfixed>
422    
423    gv
424            - evince <unfixed> (embed)
425            NOTE: ps/ tree from gv 3.5.8
426            NOTE: evince-gtk is affected (a component of evince source package)
427    
428    libXbae
429            - paw <removed> (embed)
430            [etch] - paw <unfixed> (embed)
431    
432    libgtkhtml
433            - claws-mail-extra-plugins <unfixed> (fork)
434    
435    libXaw
436            - paw <removed> (embed)
437            [etch] - paw <unfixed> (embed)
438            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
439    
440    libgd2
441            - graphviz <unfixed> (embed)
442            NOTE: lib/gd seems to be 2.0.33
443            - wml <unfixed> (embed)
444            - libwmf <unfixed> (embed)
445            NOTE: derived from gd 1.6.3
446    
447    rar
448            - unrar-nonfree <unfixed> (embed)
449    
450    unrar-free (maybe this code is derived from the original rar, too?)
451            - clamav <unfixed> (embed)
452            NOTE: seems to be disabled in default config
453    
454    mplayer (DirectMedia Object loader)
455            - xine-lib <unfixed> (embed)
456            NOTE: src/libw32dll/
457            - vlc <unfixed> (embed)
458            NOTE: modules/codec/dmo/
459            - mplayer 1.0~rc2-20 (embed)
460    
461    libwpd (WordPerfect converter)
462            - openoffice.org <unfixed> (embed)
463    
464    fsplib (http://sourceforge.net/projects/fsp/)
465            - gftp <unfixed> (embed)
466            NOTE: lib/fsplib version 0.3
467    
468    sprng
469            - tree-puzzle <unfixed> (embed)
470    
471    librpcsecgss
472            - krb5 <unfixed> (embed)
473    
474    jasper
475            - ghostscript <unfixed> (embed)
476            - gs-gpl <unfixed> (embed)
477    
478    libiris
479            - psi <unfixed> (embed)
480            - kdenetwork <unfixed> (embed)
481            NOTE: kopete embeds libiris but links dynamically to libidn
482            - kdegames <unfixed> (embed)
483            NOTE: ksirk/kde4
484    
485    libidn
486            - monotone 0.43-1 (embed)
487            - psi <unfixed> (embed)
488            NOTE: psi embeds libiris which embeds libidn
489            - kdegames <unfixed> (embed)
490            NOTE: kdegames/kde4 embeds libiris which embeds libidn
491    
492    liblua
493            - monotone 0.43-1 (embed)
494            - nmap <unfixed> (embed; bug #527997)
495            NOTE: fixed upstream as of nmap svn rev13336.
496    
497    libbotan
498            - monotone 0.43-1 (embed)
499    
500    NetXX
501            - monotone 0.43-1 (embed)
502    
503    libgc
504            - mono <unfixed> (embed)
505    
506    lzma
507            - p7zip <unfixed> (embed)
508            - xz-utils <unfixed> (fork)
509    
510    lzo
511            - grub2 <unfixed> (embed)
512    
513    yassl
514            - mysql-dfsg-5.0 <unfixed> (embed)
515    
516    pax code
517            - tar <unfixed> (embed)
518            - cpio <unfixed> (embed)
519    
520    t1lib
521            - tetex-bin 2.0.2-1 (embed)
522            - texlive-bin <unknown> (embed)
523    
524    guichan
525            - boswars <unfixed> (embed)
526            NOTE: maintainer notified us, working on it
527    
528    tolua
529            - boswars <unfixed> (embed)
530            NOTE: maintainer notified us, working on it
531    
532    asio-dev
533            - luxrender <unfixed> (embed)
534            NOTE: maintainer notified us, working on it
535            NOTE: may be merged with boost "soon"
536    
537  fsplib (http://sourceforge.net/projects/fsp/):  xine-lib
538  gftp (lib/fsplib version 0.3)          - vlc <unfixed> (embed)
539            NOTE: only parts included in modules/access/rtsp
540    
541  librpcsecgss:  netpbm
542  krb5          - tcl8.3 <unfixed> (embed)
543            - tcl8.4 <unfixed> (embed)
544            - tcl8.5 <unfixed> (embed)
545            NOTE: generic/tkImgGIF.c
546    
547    tk8.5
548            - tk8.0 <removed> (old-version)
549            - tk8.3 <unfixed> (old-version)
550            - tk8.4 <unfixed> (old-version)
551            - perl-tk <unfixable> (fork)
552    
553    samba
554            - mc 2:4.6.2~git20080311-1 (embed)
555            NOTE: maintainer is aware of this, currently searching a solution
556    
557    plib1.8.4c2
558            - boson <unfixed> (fork)
559            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
560    
561    fribidi
562            - quesoglc <unfixed> (embed)
563            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
564    
565    glew
566            - quesoglc <unfixed> (embed; bug #489341)
567            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
568    
569    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
570            - transcend <unfixed> (embed)
571            - cultivation <unfixed> (embed)
572            - passage <unfixed> (embed)
573            - gravitation <unfixed> (embed)
574    
575    tar
576            - libarchive <unfixed> (embed)
577            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
578    
579    cpio
580            - libarchive <unfixed> (embed)
581            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
582    
583    webkit
584            - qt4-x11 <unfixed> (embed)
585    
586    ftgl
587            - blender 2.46+dfsg-1 (embed)
588    
589    wv
590            - abiword <unfixed>
591    
592    qemu
593            - kvm <unfixed> (embed; bug #543159)
594            - xen-3 <unfixed> (embed)
595            - xen-unstable <unfixed> (embed)
596    
597    vgabios
598            - kvm <unfixed> (embed; bug #489442)
599    
600    bochs
601            - kvm <unfixed> (embed; bug #489442)
602    
603    speex
604            - vorbis-tools <unfixed> (embed)
605            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
606            - gst-plugins-good0.10 <unfixed> (embed)
607            - xine-lib <unfixed> (embed)
608            - libfishsound <unfixed> (embed)
609            - libannodex <unfixed> (embed)
610            - vlc <unfixed> (embed)
611            - xmms-speex <unfixed> (embed)
612            - libsdl-sound1.2 <unfixed> (embed)
613            - sweep <unfixed> (embed)
614    
615    libreadline
616            - magic <itp> (old-version)
617    
618    opcode
619            - ode <unfixed> (embed)
620            NOTE: opcode is not a package in debian, it is just embedded
621            NOTE: http://www.codercorner.com/Opcode.htm
622    
623    gimpact
624            - ode <unfixed> (embed)
625            NOTE: gimpact is not a package in debian, it is just embedded
626            NOTE: http://gimpact.sf.net
627    
628    mochikit
629            - mahara <unfixed> (embed)
630            NOTE: they require extra patches, still unmerged upstream
631            - ntop <unfixed> (embed)
632            - coherence <unfixed> (embed)
633            NOTE: python-coherence
634            - paste <unfixed> (embed)
635            NOTE: python-paste
636            - turbogears <unfixed> (embed)
637            NOTE: python-turbogears
638            - plone3 <unfixed> (embed)
639            NOTE: zope-plone3
640    
641    prototypejs
642            - netbeans-ide <unfixed> (embed)
643            - auth2db <unfixed> (embed)
644            - webcit <unfixed> (embed)
645            NOTE: citadel-webcit
646            - asterisk <unfixed> (embed)
647            - doc-iana <unfixed> (embed)
648            - libaws <unfixed> (embed)
649            NOTE: libaws-doc
650            - libgettext-ruby <unfixed> (embed)
651            NOTE: libgettext-ruby-data
652            - libjson-ruby <unfixed> (embed)
653            NOTE: libjson-ruby-doc
654            - lucene2 <unfixed> (embed)
655            NOTE: liblucene2-java-doc
656            - libopenid-ruby <unfixed> (embed)
657            - solr <unfixed> (embed)
658            NOTE: solr-common
659            - glpi <unfixed> (embed)
660            - mnemo2 <unfixed> (embed)
661            - nag2 <unfixed> (embed)
662            - knowledgeroot <unfixed> (embed)
663            - mediatomb <unfixed> (embed)
664            NOTE: mediatomb-common
665            - mt-daapd <unfixed> (embed)
666            - op-panel <unfixed> (embed)
667            - ebug-http <unfixed> (embed)
668            - phpgedview <removed> (embed)
669            - poker-network <unfixed> (embed)
670            NOTE: poker-web
671            - webhelpers <unfixed> (embed)
672            NOTE: python-webhelpers
673            - qwik <unfixed> (embed)
674            - rails <unfixed> (embed)
675            - typo3-src <unfixed> (embed)
676            - wordpress 2.5.0-2 (embed)
677            - zope <unfixed> (embed)
678            NOTE: zope-plone3
679            - smokeping <unfixed> (embed)
680            - ampache 3.4.1-2 (embed)
681            - exaile <unfixed> (embed)
682            - hobix <unfixed> (embed)
683            - pixelpost <unfixed> (embed)
684            - symfony <unfixed> (embed)
685            NOTE: it's been said that there are custom changes
686            - zabbix <unfixed> (embed)
687            NOTE: zabbix-frontend-php
688            - turba2 <unfixed> (embed)
689    
690    gdb
691            - insight <unfixed> (embed)
692    
693    e2fsprogs
694            - ldiskfsprogs <unfixable> (fork)
695    
696    quazip (not packaged in Debian)
697            - qcake <unfixed> (embed)
698            NOTE: starting with upstream version 0.6.4
699    
700    exo
701            - pcmanfm <unfixed> (embed; bug #499677)
702            NOTE: slightly modified source code
703    
704    java
705            - openjdk-6 <unfixed>
706            - sun-java5 <unfixed>
707            - sun-java6 <unfixed>
708    
709    libphp-snoopy
710            - ampache 3.4.1-2 (embed; bug #504169)
711            - mahara 1.0.5-2 (embed; bug #504170)
712            - pixelpost 1.7.1-5 (embed; bug #504171)
713            - mediamate 0.9.3.6-5 (embed; bug #504172)
714            - opendb <removed> (embed; bug #504173)
715            [etch] - opendb <unfixed> (embed; bug #504173)
716            - wordpress 2.5.1-9 (embed; bug #443948)
717            - moodle <unfixed> (embed; bug #507185)
718            [etch] - phpgroupware <unfixed> (embed)
719            NOTE: phpgroupware-felamimail
720            - magpierss 0.72-3 (embed; bug #431089)
721    
722    jquery
723            - zekr <unfixed> (embed)
724            - wordpress <unknown> (embed)
725            - yocto-reader <unfixed> (embed)
726            - textpattern <unfixed> (embed)
727            - genshi 0.5.1-1 (embed)
728            NOTE: compressed file under examples/ dir
729            - prewikka <unfixed> (embed)
730            - libramaze-ruby <unfixed> (embed)
731            - drupal5 <unfixed> (embed)
732            - b2evolution <unfixed> (embed)
733            - wesnoth <unfixed> (embed)
734    
735    tablesorter (jquery plugin, not packaged yet)
736            - wesnoth <unfixed> (embed)
737    
738    kses
739            - wordpress <unfixed> (embed; bug #504242)
740            NOTE: their copy has all methods renamed to wp_<foo>
741            NOTE: kses isn't in Debian, RFP: #504240
742            - moodle <unfixed> (embed; bug #507185)
743            - egroupware <unfixed> (embed)
744    
745    magpierss
746            - wordpress <unfixed> (embed; bug #504242)
747            - moodle <unfixed>
748    
749    php-gettext
750            - wordpress 2.8.4-1 (embed; bug #504242)
751    
752    libphp-ixr (name may change, it is the Incutio XML-RPC)
753            - wordpress <unfixed> (embed; bug #504242)
754            NOTE: libphp-ixr isn't in Debian, RFP: #504236
755            - dokuwiki <unfixed> (embed)
756            - textpattern <unfixed> (embed)
757    
758    libphp-cas
759            - glpi <unfixed> (embed)
760            - moodle <unfixed> (embed; bug #505984)
761    
762    scriptaculous
763            - glpi <unfixed> (embed)
764            - libaws <unfixed> (embed)
765            NOTE: libaws-doc
766            - op-panel <unfixed> (embed)
767            - symfony <unfixed> (embed)
768            NOTE: maintainer says there are extra incompatible changes required
769            - pixelpost <unfixed> (embed)
770            - webhelpers <unfixed> (embed)
771            NOTE: python-webhelpers
772            - qwik <unfixed> (embed)
773            - smokeping <unfixed> (embed)
774            - turba2 <unfixed> (embed)
775            - typo3-src 4.2.3-1 (embed)
776    
777    libmarkdown-php
778            - moodle <unfixed> (embed; bug #507185)
779            - pixelpost <unfixed> (embed)
780    
781    php-openid
782            - wordpress-openid <itp> (embed)
783    
784    geshi
785            - dokuwiki 0.0.20080505-3.1 (embed)
786            - pgfouine 1.0-1.1 (embed)
787            - websvn 2.1.0-1 (embed)
788    
789    webcalendar
790            - gforge 4.7~rc2-6 (embed; bug #504758)
791    
792    libical
793            - kdepim <unfixed> (fork)
794            - kdepimlibs <unfixed> (fork)
795            NOTE: fixed in KDE4 post 4.1.x series
796            - claws-mail-extra-plugins <unfixed> (fork)
797    
798    libltdl3
799            - kdelibs <unfixed> (embed)
800            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
801            - synfig <unfixed> (embed)
802    
803    harfbuzz
804            - qt4-x11 <unfixed> (embed)
805    
806    libzip
807            - php5 <unfixed> (fork)
808            - odt2txt <unfixed> (embed; bug #523808)
809    
810    json.php (not packaged; should be replaced with php's built-in functions)
811            - moodle <unfixed>
812            - yui <unfixed>
813            - gallery2 <unfixed>
814            - dokuwiki <unfixed>
815            - typo3-src <unfixed>
816    
817    php-fpdf
818            - tcpdf <itp> (fork)
819            - moodle <unfixed>
820            - phpwiki <unfixed>
821            - egroupware <unfixed>
822            - ldap-account-manager <unfixed> (fork)
823    
824    tcpdf (itp: #495985)
825            - moodle <unfixed>
826            - phpmyadmin <unfixed>
827    
828    typo3
829            - moodle <unfixed>
830    
831    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
832            - moodle <unfixed>
833            - gosa <unfixed>
834    
835    php-ole (itp: #487558)
836            - moodle <unfixed>
837    
838    pieforms (http://www.catalyst.net.nz)
839            - mahara <unfixed>
840    
841    savant2 (http://phpsavant.com)
842            - egroupware <unfixed>
843    
844    rssparser (http://nwow.org)
845            - egroupware <unfixed>
846            - phpgroupware <unfixed>
847    
848    lcms
849            - openjdk-6 <unfixed> (fork)
850    
851    libphp-phplayersmenu
852            - diogenes <unfixed>
853            - phpldapadmin <unfixed>
854    
855    libphp-pclzip
856            - docvert <unfixed>
857            - moodle <unfixed>
858            - egroupware <unfixed>
859    
860    libphp-simplepie
861            - dokuwiki <unfixed>
862    
863    libphp-jpgraph
864            - egroupware <unfixed>
865    
866    php-simpletest
867            - moodle <unfixed>
868    
869    libpng
870            - iceweasel <not-affected> (uses xulrunner)
871            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
872            - iceape 1.0.13~pre080614i-0etch1 (embed)
873            - xulrunner 1.9.0.13-1 (embed)
874            [lenny] - xulrunner 1.9.0.11-0lenny1
875            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
876    
877    irssi
878            - silc-client <unfixed> (embed)
879            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
880    
881    extc
882            - mtasc <unfixed> (embed)
883            - haxe <unfixed> (embed)
884    
885    swflib
886            - mtasc <unfixed> (embed)
887            - haxe <unfixed> (embed)
888    
889    libitext-java
890            - bouncycastle 2.1.4-1 (embed)
891    
892    python-ply
893            - pyke <unfixed> (embed)
894    
895    libdumbnet (libdnet upstream)
896            - nmap <unfixed> (fork)
897    
898    gcc-4.4
899            - gcc-mingw32 <unfixed> (embed)
900    
901    camlimages
902            - advi <unfixed> (embed)
903    
904    memcached
905            - memcachedb <unfixed> (embed)
906    
907    yajl
908            - argyll <unfixed> (embed; bug #544223)
909            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
910    
911    libept:
912            - adept <unfixed> (embed; bug #540649)
913    
914    libvorbis:
915            - iceweasel <not-affected> (uses xulrunner)
916            - xulrunner <not-affected> (introduced in 1.9.1)
917            TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]
918    
919    cairo:
920            - iceweasel <not-affected> (uses xulrunner)
921            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
922    
923    php-net-dnsbl:
924            - serendipity <unfixed> (embed)
925    
926    php-onyx-rss:
927            - serendipity <unfixed> (embed)
928    
929    php-text-wiki:
930            - serendipity <unfixed> (embed)
931    
932    php-xml-rpc:
933            - serendipity <unfixed> (embed)
934    
935    xyssl (does not have a shared library)
936            - polarssl <unfixed> (fork)
937    
938    polarssl (does not have a shared library)
939            - pdkim <itp> (embed)
940            NOTE: pdkim ITP #543150

Legend:
Removed from v.6969  
changed lines
  Added in v.12718

  ViewVC Help
Powered by ViewVC 1.1.5