/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1757 by jmm-guest, Thu Sep 1 13:25:58 2005 UTC revision 13132 by jwilk-guest, Wed Oct 28 23:00:07 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
7  kdegraphics/kpdf  
8  tetex-bin  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embedding a copy of the library into another source package)
19          fork (the package is not just embedding code but it is a fork and
20                thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24    The srcpkg might be some string to identify the code if there is no
25    specific source package.
26    
27    Everything up to the next line is ignored.
28    ---BEGIN
29    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30            NOTE: Fixed packages link to poppler library unless otherwise noted
31            - pdftohtml <unknown>
32            [sarge] - pdftohtml <unfixed>
33            [etch] - pdftohtml <unfixed>
34            NOTE: has been replaced by poppler-utils
35            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36            - texlive-base 3.0-12 (embed)
37            - texlive-bin 2007-1 (embed)
38            NOTE: links to poppler
39            - koffice <unfixed> (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50    ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59    
60    peercast
61            - gnome-peercast <unfixed> (embed)
62            NOTE: gnome-peercast may better be removed, see #466539
63    
64    silc-toolkit
65            - silc-client 1.1~beta6-1 (embed)
66    
67    icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71    dietlibc
72            - ccontrol 0.9.1+20071204-1 (static)
73    
74    libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78    libiax
79            - iaxmodem <unfixable> (embed; bug #548885)
80    
81    spandsp
82            - iaxmodem <unfixable> (embed; bug #548885)
83    
84    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85            - dpkg <unfixed> (embed)
86            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87            - rsync <unfixed> (embed)
88            NOTE: somehow derived code base
89            - mono <unfixed> (embed)
90            TODO: check mozilla
91            - Linux kernels <unfixed> (embed)
92            - pvpgn 1.7.8-2 (embed)
93            - mrtg 2.12.2-1 (embed)
94            - rpm <unknown> (embed)
95            NOTE: pinged anibal since when rpm was fixed
96            - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98            - tra <unfixed>
99            - sash <unfixed>
100            - nsis <unfixed>
101            - mseide-msegui <unfixed>
102            NOTE: mseide
103            - mirrordir <unfixed>
104            - poco <unfixed>
105            - klibc <unfixed>
106            - ghostscript <unfixed>
107            - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112            - perl <unfixed>
113            - paraview <unfixed>
114            - gcvs <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125            - gamera 3.2.3-1 (embed)
126    
127    dulwich
128            - hg-git 0.1.0-1 (embed; bug #541996)
129    
130    libvigraimpex
131            - hugin <unfixed> (embed; bug #542259)
132            - enblend-enfuse <unfixed> (embed; bug #542258)
133            - gamera 3.2.3-1 (embed)
134    
135    libbz2
136            - dpkg <unfixed> (static)
137    
138    libgadu
139            - centericq <unfixed> (embed)
140            - pidgin <unfixed> (embed)
141            NOTE: pidgin links dynamically against libgadu; that should be fixed, then???
142            - kdenetwork 4:3.3.2-5 (embed)
143            NOTE: from kdenetwork: kopete
144            - ekg 1:1.8~rc0-1 (embed)
145            - kadu 0.6.0.2-3 (embed; bug #504430)
146            - gadu <itp> (embed)
147    
148    xmlrpc (which package is the "origin" of this code?)
149            - drupal <unfixed> (embed)
150            - phpgroupware <unfixed> (embed)
151            - egroupware <unfixed> (embed)
152            - phpwiki <unfixed> (embed)
153            - php4 <unfixed> (embed)
154            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
155    
156    shtool (affects build-time only)
157            - mysql-ocaml <unfixed> (embed)
158            - php4 <unfixed> (embed)
159    
160    iceape
161            - iceweasel <unfixed> (fork)
162            - icedove <unfixed> (fork)
163            - xulrunner <unfixed> (fork)
164            - kompozer <unfixed> (embed; bug #532168)
165    
166    xli
167            - xloadimage <unfixed> (embed)
168    
169    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
170            - openmotif <unfixed> (embed)
171            - libxpm <unfixed> (embed)
172    
173    kerberized apps with BSD origin
174            - krb4 <removed> (embed)
175            - krb5 <unfixed> (embed)
176            - heimdal <unfixed> (embed)
177    
178    grip (which pkg is the origin?)
179            - libcdaudio <unfixed>
180            - grip <unfixed>
181            - gnome-vfs <unfixed>
182            TODO: check vfs2 as well
183    
184    fudforum
185            [etch] - phpgroupware <unfixed> (embed)
186            NOTE: phpgroupware-fudforum
187            [sarge] - egroupware-fudforum <removed> (embed)
188    
189    libbsd
190            - rdate 1:1.2-3 (embed)
191            - atheme-services <unfixed>
192            - libbsd-arc4random-perl <unfixed>
193            - isakmpd <unfixed>
194    
195    cvs
196            - gcvs <unfixed> (embed)
197            NOTE: see cvsunix/src in tarball
198    
199    pcre
200            - python* <unfixed> (embed)
201            - php4 <unknown> (embed)
202            - analog 2:5.23-0woody1 (embed)
203            - goffice <unfixed> (embed)
204            NOTE: libgoffice-*
205            - vfu 4.06-4.1 (embed; bug #450754)
206            - tf5 5.0beta7-1 (embed)
207            - monotone 0.43-1 (embed)
208            NOTE: this only affects versions >= 0.37
209            - glib2.0 2.15.2-1 (embed)
210            - apache2 2.0.53-4 (embed)
211            - exim4 4.10-0.srh20.12 (embed)
212            - yacas <unfixed> (embed)
213            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
214            - gtamsanalyzer.app 0.42-5 (embed)
215            - tin <unknown> (embed)
216            - kazehakase 0.5.2-1
217            - webkit 1.0.1-1 (embed)
218            - qt4-x11 <unfixed> (embed)
219            NOTE: embedded via webkit copy
220            - erlang <unfixed> (embed)
221    
222    tiff
223            - wxwindows2.4 2.2.1 (embed)
224            - gamera 3.2.3-1 (embed)
225    
226    uudeview
227            - libconvert-uulib-perl <unfixed> (embed)
228            - pan <unfixed> (embed)
229    
230    sqlite (not affected by security vulnerabilities so far)
231            - amarok <unfixed> (embed)
232            - monotone 0.43-1 (embed)
233            - iceweasel <unfixed> (embed)
234    
235    util-linux/mount
236            - loop-aes-utils <unfixed> (embed)
237            NOTE: contains code from util-linux' mount in the mount-aes-udeb
238    
239    sylpheed
240            - sylpheed-claws <unfixed> (fork)
241    
242    phpsysinfo
243            - egroupware <unfixed> (embed)
244            - phpgroupware <unfixed> (embed)
245    
246    phpldapadmin
247            [sarge] - egroupware <unfixed> (embed)
248            NOTE: removed from egroupware after sarge
249    
250    chmlib
251            - kchmviewer <unknown> (embed)
252    
253    ffmpeg (libavcodec/libavformat)
254            - mplayer 1.0~rc2-14 (embed; bug #395252)
255            - kino 1.0.0-1
256            - vlc <not-affected> (Links dynamically since initial release)
257            - smilutils 0.3.0-10
258            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
259            - motion 3.1.19-1
260            - gstreamer0.10-ffmpeg 0.10.3-2
261            - xmovie <removed> (static)
262            TODO: gimp-gap (potentially using ffmpeg code as well)
263            - avifile <unfixed> (embed; bug #538750)
264    
265    faad2
266            - mplayer 1.0~rc2-20 (embed)
267            - avifile <unfixed> (embed; bug #538750)
268    
269    libmad (MPEG decoding lib)
270            - xine-lib <unfixed> (embed)
271            - avifile <unfixed> (embed) [./plugins/libmad/*]
272            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
273    
274    libdts
275            - xine-lib <unfixed> (embed)
276    
277    flac
278            - xine-lib <unfixed> (embed)
279    
280    liba52
281            - a52dec <unfixed> (embed)
282            - xine-lib <unfixed> (embed)
283    
284    libmpeg2
285            - mpeg2dec <unfixed> (embed)
286            - xine-lib <unfixed> (embed)
287    
288    libntlm
289            - wget <unfixed> (fork; bug #550436)
290            - curl <unfixed> (fork; bug #550437)
291            - cntlm <unfixed> (fork; bug #550438)
292    
293    uw-imap
294            - pine <unfixed> (embed)
295            - alpine <unfixed> (embed)
296    
297    imagemagick
298            - graphicsmagick <unfixed> (fork)
299    
300    python-urlgrabber
301            - mercurial <unfixed> (embed; bug #531062)
302    
303    beautifulsoup
304            - python-mechanize <unfixed> (embed)
305    
306    halibut
307            - nsis <unfixed> (fork)
308    
309    libghttp
310            - hotway <unfixed> (embed)
311    
312    libsndfile
313            - ardour 1:2.7.1-1 (embed)
314    
315    glibmm2.4
316            - ardour 1:2.7.1-1 (embed)
317    
318    libgnomecanvasmm2.6
319            - ardour 1:2.7.1-1 (embed)
320    
321    libsigc++-2.0
322            - ardour 1:2.7.1-1 (embed)
323    
324    soundtouch
325            - ardour 1:2.7.1-1 (embed)
326    
327    libmms
328            - xine-lib <unfixed> (embed)
329            - mimms <unfixed> (embed)
330    
331    fckeditor
332            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
333            - moin 1.8.2-2 (embed; bug #452599)
334            - karrigell <removed> (embed; bug #452598)
335            - gforge 4.6.99+svn6225-1 (embed)
336            - request-tracker3.8 <unfixed> (embed)
337    
338    ipatlas (not packaged in Debian)
339            - moodle <unfixed> (embed; bug #507185)
340    
341    libphp-phpmailer
342            - moodle <unfixed> (embed; bug #507185)
343            - mahara <unfixed> (embed)
344            - symfony <unfixed> (embed)
345            [etch] - phpgroupware <unfixed> (embed)
346            NOTE: phpgroupware-felamimail is only in etch
347            - egroupware <unfixed> (embed; bug #504283)
348            - glpi <unfixed>
349    
350    htmlArea (not packaged in Debian)
351            - moodle <unfixed> (embed)
352    
353    giflib:
354            - wine <unfixed> (embed; bug #466181)
355    
356    bennu (not packaged in Debian, http://bennu.sourceforge.net)
357            - moodle <unfixed> (embed)
358    
359    smarty:
360            - moodle 1.8.2-2 (embed; bug #471158)
361            - gallery2 2.2.5-2 (embed; bug #471160)
362            - mahara 0.9.2-2 (embed; bug #471201)
363            - gosa 2.4beta1-1 (embed; bug #471200)
364    
365    TinyMCE
366            - wordpress 2.5.1-3 (embed; bug #478257)
367            - moodle <unfixed> (embed; bug #507185)
368            - knowledgeroot <unfixed> (embed)
369            - joomla <itp> (bug #326398)
370    
371    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
372            - scite <unfixed> (embed)
373            - qscintilla <unfixed> (embed)
374            - qscintilla2 <unfixed> (embed)
375            - geany <unfixed> (fork)
376            - anjuta <unfixed> (embed)
377    
378    libphp-adodb
379            - moodle <unfixed> (embed; bug #507185)
380            NOTE: also AdoDB-XML Schema
381            - gallery2 <unfixed> (embed)
382            - phppgadmin <unfixed> (embed)
383            - egroupware <unfixed> (embed)
384            - phpwiki <unfixed> (embed)
385            - torrentflux 2.0beta1-2 (embed)
386            - ipplan <unfixed> (embed)
387            - typo3-src <unfixed> (embed)
388            - cacti <unknown> (embed)
389            [sarge] - cacti <unfixed> (embed)
390            NOTE: dependency exists, but internal version is used
391            - gforge 4.7~rc2-6 (embed)
392            - mahara <unfixed> (embed)
393    
394    gzip
395            - linux-kernel <unfixed> (embed)
396            NOTE: lib/inflate.c
397            - klibc <unfixed> (embed)
398            NOTE: based on linux-kernel gzip code
399            - busybox <unfixed> (embed)
400    
401    neon
402            - cadaver 0.22.3+debian-1 (embed; bug #188381)
403            - gnome-vfs2 <unfixed> (embed; bug #395874)
404            [etch] - litmus <unfixed> (embed; #395875)
405            - litmus <removed> (embed; #395875)
406            [sarge] - screem <unfixed> (embed)
407            - sitecopy 1:0.16.3-5 (embed; bug #395876)
408            [etch] - tla <unfixed> (embed; bug #395877)
409            [sarge] - tla <unfixed> (embed; bug #395877)
410    
411    libmodplug
412            - gst-plugins-bad0.10 <unfixed> (embed)
413    
414    libvncserver
415            - vino <unfixed> (embed)
416    
417    putty
418            - filezilla <unfixed> (embed)
419    
420    tinyxml (not packaged in Debian)
421            - filezilla <unfixed>
422    
423    gv
424            - evince <unfixed> (embed)
425            NOTE: ps/ tree from gv 3.5.8
426            NOTE: evince-gtk is affected (a component of evince source package)
427    
428    libXbae
429            - paw <removed> (embed)
430            [etch] - paw <unfixed> (embed)
431    
432    libgtkhtml
433            - claws-mail-extra-plugins <unfixed> (fork)
434    
435    libXaw
436            - paw <removed> (embed)
437            [etch] - paw <unfixed> (embed)
438            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
439    
440    libgd2
441            - graphviz <unfixed> (embed)
442            NOTE: lib/gd seems to be 2.0.33
443            - wml <unfixed> (embed)
444            - libwmf <unfixed> (embed)
445            NOTE: derived from gd 1.6.3
446    
447    rar
448            - unrar-nonfree <unfixed> (embed)
449    
450    unrar-free (maybe this code is derived from the original rar, too?)
451            - clamav <unfixed> (embed)
452            NOTE: seems to be disabled in default config
453    
454    mplayer (DirectMedia Object loader)
455            - xine-lib <unfixed> (embed)
456            NOTE: src/libw32dll/
457            - vlc <unfixed> (embed)
458            NOTE: modules/codec/dmo/
459            - mplayer 1.0~rc2-20 (embed)
460    
461    libwpd (WordPerfect converter)
462            - openoffice.org <unfixed> (embed)
463    
464    fsplib (http://sourceforge.net/projects/fsp/)
465            - gftp <unfixed> (embed)
466            NOTE: lib/fsplib version 0.3
467    
468    sprng
469            - tree-puzzle <unfixed> (embed)
470    
471    librpcsecgss
472            - krb5 <unfixed> (embed)
473    
474    jasper
475            - ghostscript <unfixed> (embed)
476            - gs-gpl <unfixed> (embed)
477    
478    libiris
479            - psi <unfixed> (embed)
480            - kdenetwork <unfixed> (embed)
481            NOTE: kopete embeds libiris but links dynamically to libidn
482            - kdegames <unfixed> (embed)
483            NOTE: ksirk/kde4
484    
485    libidn
486            - monotone 0.43-1 (embed)
487            - psi <unfixed> (embed)
488            NOTE: psi embeds libiris which embeds libidn
489            - kdegames <unfixed> (embed)
490            NOTE: kdegames/kde4 embeds libiris which embeds libidn
491    
492    liblua
493            - monotone 0.43-1 (embed)
494            - nmap <unfixed> (embed; bug #527997)
495            NOTE: fixed upstream as of nmap svn rev13336.
496    
497    libbotan
498            - monotone 0.43-1 (embed)
499    
500    NetXX
501            - monotone 0.43-1 (embed)
502    
503    libgc
504            - mono <unfixed> (embed)
505    
506    lzma
507            - p7zip <unfixed> (embed)
508            - xz-utils <unfixed> (fork)
509    
510    lzo
511            - grub2 <unfixed> (embed)
512    
513    yassl
514            - mysql-dfsg-5.0 <unfixed> (embed)
515    
516    pax code
517            - tar <unfixed> (embed)
518            - cpio <unfixed> (embed)
519    
520    t1lib
521            - tetex-bin 2.0.2-1 (embed)
522            - texlive-bin <unknown> (embed)
523    
524    guichan
525            - boswars <unfixed> (embed)
526            NOTE: maintainer notified us, working on it
527    
528    tolua
529            - boswars <unfixed> (embed)
530            NOTE: maintainer notified us, working on it
531    
532    asio-dev
533            - luxrender <unfixed> (embed)
534            NOTE: maintainer notified us, working on it
535            NOTE: may be merged with boost "soon"
536    
537    xine-lib
538            - vlc <unfixed> (embed)
539            NOTE: only parts included in modules/access/rtsp
540    
541    netpbm
542            - tcl8.3 <unfixed> (embed)
543            - tcl8.4 <unfixed> (embed)
544            - tcl8.5 <unfixed> (embed)
545            NOTE: generic/tkImgGIF.c
546    
547    tk8.5
548            - tk8.0 <removed> (old-version)
549            - tk8.3 <unfixed> (old-version)
550            - tk8.4 <unfixed> (old-version)
551            - perl-tk <unfixable> (fork)
552    
553    samba
554            - mc 2:4.6.2~git20080311-1 (embed)
555            NOTE: maintainer is aware of this, currently searching a solution
556    
557    plib1.8.4c2
558            - boson <unfixed> (fork)
559            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
560    
561    fribidi
562            - quesoglc <unfixed> (embed)
563            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
564    
565    glew
566            - quesoglc <unfixed> (embed; bug #489341)
567            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
568    
569    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
570            - transcend <unfixed> (embed)
571            - cultivation <unfixed> (embed)
572            - passage <unfixed> (embed)
573            - gravitation <unfixed> (embed)
574    
575    tar
576            - libarchive <unfixed> (embed)
577            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
578    
579    cpio
580            - libarchive <unfixed> (embed)
581            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
582    
583    webkit
584            - qt4-x11 <unfixed> (embed)
585    
586    ftgl
587            - blender 2.46+dfsg-1 (embed)
588    
589    wv
590            - abiword <unfixed>
591    
592    qemu
593            - kvm <unfixed> (embed; bug #543159)
594            - xen-3 <unfixed> (embed)
595            - xen-unstable <unfixed> (embed)
596    
597    vgabios
598            - kvm <unfixed> (embed; bug #489442)
599    
600    bochs
601            - kvm <unfixed> (embed; bug #489442)
602    
603    speex
604            - vorbis-tools <unfixed> (embed)
605            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
606            - gst-plugins-good0.10 <unfixed> (embed)
607            - xine-lib <unfixed> (embed)
608            - libfishsound <unfixed> (embed)
609            - libannodex <unfixed> (embed)
610            - vlc <unfixed> (embed)
611            - xmms-speex <unfixed> (embed)
612            - libsdl-sound1.2 <unfixed> (embed)
613            - sweep <unfixed> (embed)
614    
615    libreadline
616            - magic <itp> (old-version)
617    
618    opcode
619            - ode <unfixed> (embed)
620            NOTE: opcode is not a package in debian, it is just embedded
621            NOTE: http://www.codercorner.com/Opcode.htm
622    
623    gimpact
624            - ode <unfixed> (embed)
625            NOTE: gimpact is not a package in debian, it is just embedded
626            NOTE: http://gimpact.sf.net
627    
628    mochikit
629            - mahara <unfixed> (embed)
630            NOTE: they require extra patches, still unmerged upstream
631            - ntop <unfixed> (embed)
632            - coherence <unfixed> (embed)
633            NOTE: python-coherence
634            - paste <unfixed> (embed)
635            NOTE: python-paste
636            - turbogears <unfixed> (embed)
637            NOTE: python-turbogears
638            - plone3 <unfixed> (embed)
639            NOTE: zope-plone3
640    
641    prototypejs
642            - netbeans-ide 6.0.1+dfsg-2 (embed)
643            - auth2db <unfixed> (embed)
644            - webcit <unfixed> (embed)
645            NOTE: citadel-webcit
646            - asterisk <unfixed> (embed)
647            - doc-iana <unfixed> (embed)
648            - libaws <unfixed> (embed)
649            NOTE: libaws-doc
650            - libgettext-ruby <unfixed> (embed)
651            NOTE: libgettext-ruby-data
652            - libjson-ruby <unfixed> (embed)
653            NOTE: libjson-ruby-doc
654            - lucene2 <unfixed> (embed)
655            NOTE: liblucene2-java-doc
656            - libopenid-ruby <unfixed> (embed)
657            - solr <unfixed> (embed)
658            NOTE: solr-common
659            - glpi <unfixed> (embed)
660            - mnemo2 <unfixed> (embed)
661            - nag2 <unfixed> (embed)
662            - knowledgeroot <unfixed> (embed)
663            - mediatomb <unfixed> (embed)
664            NOTE: mediatomb-common
665            - mt-daapd <unfixed> (embed)
666            - op-panel <unfixed> (embed)
667            - ebug-http <unfixed> (embed)
668            - phpgedview <removed> (embed)
669            - poker-network <unfixed> (embed)
670            NOTE: poker-web
671            - webhelpers <unfixed> (embed)
672            NOTE: python-webhelpers
673            - qwik <unfixed> (embed)
674            - rails <unfixed> (embed)
675            - typo3-src <unfixed> (embed)
676            - wordpress 2.5.0-2 (embed)
677            - zope <unfixed> (embed)
678            NOTE: zope-plone3
679            - smokeping <unfixed> (embed)
680            - ampache 3.4.1-2 (embed)
681            - exaile <unfixed> (embed)
682            - hobix <unfixed> (embed)
683            - pixelpost <unfixed> (embed)
684            - symfony <unfixed> (embed)
685            NOTE: it's been said that there are custom changes
686            - zabbix <unfixed> (embed)
687            NOTE: zabbix-frontend-php
688            - turba2 <unfixed> (embed)
689    
690    gdb
691            - insight <unfixed> (embed)
692    
693    e2fsprogs
694            - ldiskfsprogs <unfixable> (fork)
695    
696    quazip (not packaged in Debian)
697            - qcake <unfixed> (embed)
698            NOTE: starting with upstream version 0.6.4
699    
700    exo
701            - pcmanfm <unfixed> (embed; bug #499677)
702            NOTE: slightly modified source code
703    
704    java
705            - openjdk-6 <unfixed>
706            - sun-java5 <unfixed>
707            - sun-java6 <unfixed>
708    
709    libphp-snoopy
710            - ampache 3.4.1-2 (embed; bug #504169)
711            - mahara 1.0.5-2 (embed; bug #504170)
712            - pixelpost 1.7.1-5 (embed; bug #504171)
713            - mediamate 0.9.3.6-5 (embed; bug #504172)
714            - opendb <removed> (embed; bug #504173)
715            [etch] - opendb <unfixed> (embed; bug #504173)
716            - wordpress 2.5.1-9 (embed; bug #443948)
717            - moodle <unfixed> (embed; bug #507185)
718            [etch] - phpgroupware <unfixed> (embed)
719            NOTE: phpgroupware-felamimail
720            - magpierss 0.72-3 (embed; bug #431089)
721    
722    jquery
723            - zekr <unfixed> (embed)
724            - wordpress <unknown> (embed)
725            - yocto-reader <unfixed> (embed)
726            - textpattern <unfixed> (embed)
727            - genshi 0.5.1-1 (embed)
728            NOTE: compressed file under examples/ dir
729            - prewikka <unfixed> (embed)
730            - libramaze-ruby <unfixed> (embed)
731            - drupal5 <unfixed> (embed)
732            - b2evolution <unfixed> (embed)
733            - wesnoth <unfixed> (embed)
734    
735    tablesorter (jquery plugin, not packaged yet)
736            - wesnoth <unfixed> (embed)
737    
738    kses
739            - wordpress <unfixed> (embed; bug #504242)
740            NOTE: their copy has all methods renamed to wp_<foo>
741            NOTE: kses isn't in Debian, RFP: #504240
742            - moodle <unfixed> (embed; bug #507185)
743            - egroupware <unfixed> (embed)
744    
745    magpierss
746            - wordpress <unfixed> (embed; bug #504242)
747            - moodle <unfixed>
748    
749    php-gettext
750            - wordpress 2.8.4-1 (embed; bug #504242)
751    
752    libphp-ixr (name may change, it is the Incutio XML-RPC)
753            - wordpress <unfixed> (embed; bug #504242)
754            NOTE: libphp-ixr isn't in Debian, RFP: #504236
755            - dokuwiki <unfixed> (embed)
756            - textpattern <unfixed> (embed)
757    
758    libphp-cas
759            - glpi <unfixed> (embed)
760            - moodle <unfixed> (embed; bug #505984)
761    
762    scriptaculous
763            - glpi <unfixed> (embed)
764            - libaws <unfixed> (embed)
765            NOTE: libaws-doc
766            - op-panel <unfixed> (embed)
767            - symfony <unfixed> (embed)
768            NOTE: maintainer says there are extra incompatible changes required
769            - pixelpost <unfixed> (embed)
770            - webhelpers <unfixed> (embed)
771            NOTE: python-webhelpers
772            - qwik <unfixed> (embed)
773            - smokeping <unfixed> (embed)
774            - turba2 <unfixed> (embed)
775            - typo3-src 4.2.3-1 (embed)
776    
777    libmarkdown-php
778            - moodle <unfixed> (embed; bug #507185)
779            - pixelpost <unfixed> (embed)
780    
781    php-openid
782            - wordpress-openid <itp> (embed)
783    
784    geshi
785            - dokuwiki 0.0.20080505-3.1 (embed)
786            - pgfouine 1.0-1.1 (embed)
787            - websvn 2.1.0-1 (embed)
788    
789    webcalendar
790            - gforge 4.7~rc2-6 (embed; bug #504758)
791    
792    libical
793            - kdepim <unfixed> (fork)
794            - kdepimlibs <unfixed> (fork)
795            NOTE: fixed in KDE4 post 4.1.x series
796            - claws-mail-extra-plugins <unfixed> (fork)
797    
798    libltdl3
799            - kdelibs <unfixed> (embed)
800            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
801            - synfig <unfixed> (embed)
802    
803    harfbuzz
804            - qt4-x11 <unfixed> (embed)
805    
806    libzip
807            - php5 <unfixed> (fork)
808            - odt2txt <unfixed> (embed; bug #523808)
809    
810    json.php (not packaged; should be replaced with php's built-in functions)
811            - moodle <unfixed>
812            - yui <unfixed>
813            - gallery2 <unfixed>
814            - dokuwiki <unfixed>
815            - typo3-src <unfixed>
816    
817    php-fpdf
818            - tcpdf <itp> (fork)
819            - moodle <unfixed>
820            - phpwiki <unfixed>
821            - egroupware <unfixed>
822            - ldap-account-manager <unfixed> (fork)
823    
824    tcpdf (itp: #495985)
825            - moodle <unfixed>
826            - phpmyadmin <unfixed>
827    
828    typo3
829            - moodle <unfixed>
830    
831    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
832            - moodle <unfixed>
833            - gosa <unfixed>
834    
835    php-ole (itp: #487558)
836            - moodle <unfixed>
837    
838    pieforms (http://www.catalyst.net.nz)
839            - mahara <unfixed>
840    
841    savant2 (http://phpsavant.com)
842            - egroupware <unfixed>
843    
844    rssparser (http://nwow.org)
845            - egroupware <unfixed>
846            - phpgroupware <unfixed>
847    
848    lcms
849            - openjdk-6 <unfixed> (fork)
850    
851    libphp-phplayersmenu
852            - diogenes <unfixed>
853            - phpldapadmin <unfixed>
854    
855    libphp-pclzip
856            - docvert <unfixed>
857            - moodle <unfixed>
858            - egroupware <unfixed>
859    
860    libphp-simplepie
861            - dokuwiki <unfixed>
862    
863    libphp-jpgraph
864            - egroupware <unfixed>
865    
866    php-simpletest
867            - moodle <unfixed>
868    
869    libpng
870            - iceweasel <not-affected> (uses xulrunner)
871            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
872            - iceape 1.0.13~pre080614i-0etch1 (embed)
873            - xulrunner 1.9.0.13-1 (embed)
874            [lenny] - xulrunner 1.9.0.11-0lenny1
875            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
876            - gamera 3.2.3-1 (embed)
877    
878    irssi
879            - silc-client <unfixed> (embed)
880            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
881    
882    extc
883            - mtasc <unfixed> (embed)
884            - haxe <unfixed> (embed)
885    
886    swflib
887            - mtasc <unfixed> (embed)
888            - haxe <unfixed> (embed)
889    
890    libitext-java
891            - bouncycastle 2.1.4-1 (embed)
892    
893    python-ply
894            - pyke <unfixed> (embed)
895    
896    libdumbnet (libdnet upstream)
897            - nmap <unfixed> (fork)
898    
899    gcc-4.4
900            - gcc-mingw32 <unfixed> (embed)
901    
902    camlimages
903            - advi <unfixed> (static; bug #550441)
904    
905    memcached
906            - memcachedb <unfixed> (embed)
907    
908    yajl
909            - argyll <unfixed> (embed; bug #544223)
910            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
911    
912    libept
913            - adept <unfixed> (embed; bug #540649)
914    
915    libvorbis
916            - iceweasel <not-affected> (uses xulrunner)
917            - xulrunner <not-affected> (introduced in 1.9.1)
918            TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]
919    
920    cairo
921            - iceweasel <not-affected> (uses xulrunner)
922            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
923    
924    php-net-dnsbl
925            - serendipity <unfixed> (embed)
926    
927    php-onyx-rss
928            - serendipity <unfixed> (embed)
929    
930    php-text-wiki
931            - serendipity <unfixed> (embed)
932    
933    php-xml-rpc
934            - serendipity <unfixed> (embed)
935    
936    polarssl (does not have a shared library)
937            - pdkim <itp> (embed; bug #543150)
938            - xyssl <unfixed> (old-version)
939    
940    pidgin
941            - gaim <removed> (old-version)
942    
943    icu
944            - webkit 1.0.1-1 (embed; bug #547214)
945            - texlive-bin <unfixed> (fork)
946            NOTE: texlive upstream working with icu upstream to merge their changes
947    
948    cyrus-imapd-2.2
949            - kolab-cyrus-imapd <unfixed> (fork)
950            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
951    
952    python-cxx-dev
953            - freecad <unfixed> (embed; bug #547936)
954    
955    libzipios++-dev
956            - freecad <unfixed> (embed; bug #547941)
957    
958    linux-2.6
959            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
960            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
961            - kernel-source-2.6.8 <removed> (old-version)
962            - kernel-source-2.4.27 <removed> (old-version)
963            - kernel-source-2.4.24 <removed> (old-version)
964            - kernel-source-2.2.25 <removed> (old-version)
965            - kernel-source-2.2.20 <removed> (old-version)
966    
967    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
968            - kvm <unfixed> (embed) [./libfdt/*]
969    
970    qweb (not packaged)
971            - ajaxterm <unfixed>
972    
973    opensaml2
974            - opensaml <removed> (old-version)
975    
976    shibboleth-sp2
977            - shibboleth-sp <removed> (old-version)
978    
979    tuxonice-userui
980            - suspend2-userui <removed> (old-version)
981    
982    expat
983            - w3c-www <unfixed> (embed; bug #551941) [./modules/expat/*]
984            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
985    
986    xerces-c
987            - xerces-c2 <unfixed> (old-version)
988            - xerces27 <removed> (old-version)
989    
990    md5 (RSA's version; not the gnu version provided by coreutils)
991            - w3c-www <unfixed> (embed; bug #551942) [./modules/md5/*]
992    
993  zlib code: (separate between 1.2 and 1.1)  enet
994  dpkg          - sauerbraten <unfixed> (embed; #497194)
 rsync  
 mozilla-firefox  
 mozilla(?)  
 Linux kernels  
995    
996    eglibc
997            - glibc <removed> (old-version)
998    
999  libgadu/ekg:  galib
1000  centericq          - gamera 3.2.3-1 (embed)
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm, still the case with x.org?  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 gnumeric(?)  
 python  
 php4 (src included, but Debian package links dynamically)  

Legend:
Removed from v.1757  
changed lines
  Added in v.13132

  ViewVC Help
Powered by ViewVC 1.1.5