/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 4835 by neilm, Mon Oct 9 20:39:54 2006 UTC revision 12707 by pabs, Sun Aug 30 03:00:07 2009 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16    sort: static (linking statically against a lib)
17          embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19                thus might share parts of the source code)
20          old-version (the package is an older version of essentially
21                       the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30            - gpdf <removed>
31            [sarge] - gpdf <unfixed>
32            NOTE: has been replaced by evince in etch
33            - pdftohtml <unknown>
34            [sarge] - pdftohtml <unfixed>
35            [etch] - pdftohtml <unfixed>
36            NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38            - texlive-base 3.0-12 (embed)
39            - texlive-bin 2007-1 (embed)
40            NOTE: links to poppler
41            - koffice <unfixed> (embed; bug #436163)
42            - libextractor 0.5.12-1 (embed)
43            NOTE: libextractor is using its own pdf decoder now
44            - pdfkit.framework 0.8-4 (embed)
45            - ipe <unfixed> (embed)
46            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47            - ruby-gnome2 <unknown> (embed)
48            NOTE: copy only present in source but links to poppler
49            - pdfedit <unfixed> (embed; bug #510794)
50            - swftools <unfixed> (embed)
51    
52    ppmd
53            - libcomplearn-mod-ppmd <unfixed> (fork)
54            NOTE: discussion in #458152
55    
56    libevent
57            - transmission 1.71-1 (embed; bug #529372)
58    
59    lrmi
60            - read-edid 2.0.0-1 (embed; bug #495131)
61    
62    peercast
63            - gnome-peercast <unfixed> (embed)
64            NOTE: gnome-peercast may better be removed, see #466539
65    
66    silc-toolkit
67            - silc-client 1.1~beta6-1 (embed)
68    
69    icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    dietlibc
74            - ccontrol 0.9.1+20071204-1 (static)
75    
76    libmikmod
77            - sdl-mixer1.2 <unfixed> (embed)
78            TODO: report bug
79    
80    libiax
81            - iaxmodem <unfixed> (embed)
82    
83    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
84            - dpkg <unfixed> (embed)
85            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
86            - rsync <unfixed> (embed)
87            NOTE: somehow derived code base
88            - mono <unfixed> (embed)
89            TODO: check mozilla
90            - Linux kernels <unfixed> (embed)
91            - pvpgn 1.7.8-2 (embed)
92            - mrtg 2.12.2-1 (embed)
93            - rpm <unknown> (embed)
94            NOTE: pinged anibal since when rpm was fixed
95            - tuxcmd-modules <unfixed> (embed)
96            - zsync <unfixed>
97            - tra <unfixed>
98            - sash <unfixed>
99            - nsis <unfixed>
100            - mseide-msegui <unfixed>
101            NOTE: mseide
102            - mirrordir <unfixed>
103            - poco <unfixed>
104            - klibc <unfixed>
105            - ghostscript <unfixed>
106            - freeimage <unfixed>
107            - clamav <unfixed> (fork)
108            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
109            - tuxonice-userui <unfixed>
110            - plt-scheme <unfixed>
111            - perl <unfixed>
112            - paraview <unfixed>
113            - gcvs <unfixed>
114            - erlang <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125    
126    dulwich
127            - hg-git <unfixed> (embed; bug #541996)
128    
129    libvigraimpex
130            - hugin <unfixed> (embed)
131            - enblend-fuse <unfixed> (embed)
132    
133    libbz2
134            - dpkg <unfixed> (static)
135    
136    libgadu:
137            - centericq <unfixed> (embed)
138            - gaim <unfixed> (embed)
139            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
140            - kdenetwork 4:3.3.2-5 (embed)
141            NOTE: from kdenetwork: kopete
142            - gadu <unfixed> (embed)
143            - ekg 1:1.8~rc0-1 (embed)
144            - kadu 0.6.0.2-3 (embed; bug #504430)
145            NOTE: gadu not packaged in Debian yet
146    
147    xmlrpc (which package is the "origin" of this code?)
148            - drupal <unfixed> (embed)
149            - phpgroupware <unfixed> (embed)
150            - egroupware <unfixed> (embed)
151            - phpwiki <unfixed> (embed)
152            - php4 <unfixed> (embed)
153            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
154    
155    shtool (affects build-time only)
156            - mysql-ocaml <unfixed> (embed)
157            - php4 <unfixed> (embed)
158    
159    mozilla source code
160            - mozilla-firefox <unfixed> (embed)
161            - mozilla-thunderbird <unfixed>
162            - firefox <removed>
163            - thunderbird <removed>
164            - iceweasel <unfixed> (embed)
165            - iceape <unfixed> (embed)
166            - icedove <unfixed> (embed)
167            - xulrunner <unfixed> (embed)
168            - nvu <removed> (embed)
169            - kompozer <unfixed> (embed; bug #532168)
170    
171    xli
172            - xloadimage <unfixed> (embed)
173    
174    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
175            - openmotif <unfixed> (embed)
176            - libxpm <unfixed> (embed)
177    
178    kerberized apps with BSD origin
179            - krb4 <unfixed> (embed)
180            - krb5 <unfixed> (embed)
181            - heimdal <unfixed> (embed)
182    
183    grip (which pkg is the origin?)
184            - libcdaudio <unfixed>
185            - grip <unfixed>
186            - gnome-vfs <unfixed>
187            TODO: check vfs2 as well
188    
189    fudforum
190            [etch] - phpgroupware <unfixed> (embed)
191            NOTE: phpgroupware-fudforum
192            [sarge] - egroupware-fudforum <removed> (embed)
193    
194    libbsd
195            - rdate 1:1.2-3 (embed)
196            - atheme-services <unfixed>
197            - libbsd-arc4random-perl <unfixed>
198            - isakmpd <unfixed>
199    
200    cvs
201            - gcvs <unfixed> (embed)
202            NOTE: see cvsunix/src in tarball
203    
204    pcre
205            - python* <unfixed> (embed)
206            - php4 <unknown> (embed)
207            - analog 2:5.23-0woody1 (embed)
208            - goffice <unfixed> (embed)
209            NOTE: libgoffice-*
210            - vfu 4.06-4.1 (embed; bug #450754)
211            - tf5 5.0beta7-1 (embed)
212            - monotone 0.43-1 (embed)
213            NOTE: this only affects versions >= 0.37
214            - glib2.0 2.15.2-1 (embed)
215            - apache2 2.0.53-4 (embed)
216            - exim4 4.10-0.srh20.12 (embed)
217            - yacas <unfixed> (embed)
218            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
219            - gtamsanalyzer.app 0.42-5 (embed)
220            - tin <unknown> (embed)
221            - kazehakase 0.5.2-1
222            - webkit <unfixed> (embed)
223            - qt4-x11 <unfixed> (embed)
224            NOTE: embedded via webkit copy
225            - erlang <unfixed> (embed)
226    
227    tiff
228            - wxwindows2.4 2.2.1 (embed)
229    
230    uudeview
231            - libconvert-uulib-perl <unfixed> (embed)
232            - pan <unfixed> (embed)
233    
234    sqlite (not affected by security vulnerabilities so far)
235            - amarok <unfixed> (embed)
236            - monotone 0.43-1 (embed)
237            - iceweasel <unfixed> (embed)
238    
239    util-linux/mount
240            - loop-aes-utils <unfixed> (embed)
241            NOTE: contains code from util-linux' mount in the mount-aes-udeb
242    
243    webmin
244            - usermin <unknown> (embed)
245            [sarge] - usermin <unfixed> (embed)
246    
247    sylpheed
248            - sylpheed-claws <unfixed> (fork)
249    
250    phpsysinfo
251            - egroupware <unfixed> (embed)
252            - phpgroupware <unfixed> (embed)
253    
254    phpldapadmin
255            [sarge] - egroupware <unfixed> (embed)
256            NOTE: removed from egroupware after sarge
257    
258    chmlib
259            - kchmviewer <unknown> (embed)
260    
261    ffmpeg (libavcodec/libavformat)
262            - mplayer 1.0~rc2-14 (embed; bug #395252)
263            - kino 1.0.0-1
264            - vlc <not-affected> (Links dynamically since initial release)
265            - smilutils 0.3.0-10
266            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
267            - motion 3.1.19-1
268            - gstreamer0.10-ffmpeg 0.10.3-2
269            - xmovie <unfixed>
270            NOTE: xmovie removed, only present in Etch
271            TODO: gimp-gap (potentially using ffmpeg code as well)
272            - avifile <unfixed> (embed; bug #538750)
273    
274    faad2
275            - mplayer 1.0~rc2-20 (embed)
276            - avifile <unfixed> (embed; bug #538750)
277    
278    mad MPEG decoding lib
279            - mad <unfixed> (embed)
280            - xine-lib <unfixed> (embed)
281    
 xpdf code: (some use xpdf 2, some xpdf 3)  
 gpdf (will be replaced by evince in Gnome 2.12)  
 pdftohtml (current poppler source package has a ported version, pinged maintainer)  
 kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
 tetex-bin (links to poppler since 3.0-12)  
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
 poppler  
 koffice (upstream is working on using poppler, probably not in time for Etch)  
 libextractor (uses internal pdf decoder since 0.5.12-1)  
 pdfkit.framework (links to poppler since 0.8-4)  
   
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
282  libdts  libdts
283  xine-lib          - xine-lib <unfixed> (embed)
284    
 flac:  
285  flac  flac
286  xine-lib          - xine-lib <unfixed> (embed)
287    
288  liba52:  liba52
289  a52dec          - a52dec <unfixed> (embed)
290  xine-lib          - xine-lib <unfixed> (embed)
291    
292  libmpeg2:  libmpeg2
293  mpeg2dec          - mpeg2dec <unfixed> (embed)
294  xine-lib          - xine-lib <unfixed> (embed)
295    
296  curl:  curl
297  wget (code for NTLM authentication)          - wget <unfixed> (embed)
298            NOTE: code for NTLM authentication
299  TODO evaluate:  
300  gimp-gap (potentially using ffmpeg code as well)  uw-imap
301            - pine <unfixed> (embed)
302  uw-imap:          - alpine <unfixed> (embed)
303  pine  
304    imagemagick
305            - graphicsmagick <unfixed> (fork)
306    
307    python-urlgrabber
308            - mercurial <unfixed> (embed; bug #531062)
309    
310    python-mechanize
311            - python-beautifulsoup <unfixed> (embed)
312    
313    halibut
314            - nsis <unfixed> (fork)
315    
316    libghttp
317            - hotway <unfixed> (embed)
318    
319    libsndfile
320            - ardour 1:2.7.1-1 (embed)
321    
322    glibmm2.4
323            - ardour 1:2.7.1-1 (embed)
324    
325    libgnomecanvasmm2.6
326            - ardour 1:2.7.1-1 (embed)
327    
328    libsigc++-2.0
329            - ardour 1:2.7.1-1 (embed)
330    
331    soundtouch
332            - ardour 1:2.7.1-1 (embed)
333    
334    libmms
335            - xine-lib <unfixed> (embed)
336            - mimms <unfixed> (embed)
337    
338    fckeditor
339            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
340            - moin 1.8.2-2 (embed; bug #452599)
341            - karrigell <removed> (embed; bug #452598)
342            - gforge 4.6.99+svn6225-1 (embed)
343            - request-tracker3.8 <unfixed> (embed)
344    
345    ipatlas (not packaged in Debian)
346            - moodle <unfixed> (embed; bug #507185)
347    
348    libphp-phpmailer
349            - moodle <unfixed> (embed; bug #507185)
350            - mahara <unfixed> (embed)
351            - symfony <unfixed> (embed)
352            [etch] - phpgroupware <unfixed> (embed)
353            NOTE: phpgroupware-felamimail is only in etch
354            - egroupware <unfixed> (embed; bug #504283)
355            - glpi <unfixed>
356    
357    htmlArea (not packaged in Debian)
358            - moodle <unfixed> (embed)
359    
360    giflib:
361            - wine <unfixed> (embed; bug #466181)
362    
363    bennu (not packaged in Debian, http://bennu.sourceforge.net)
364            - moodle <unfixed> (embed)
365    
366    smarty:
367            - moodle 1.8.2-2 (embed; bug #471158)
368            - gallery2 2.2.5-2 (embed; bug #471160)
369            - mahara 0.9.2-2 (embed; bug #471201)
370            - gosa 2.4beta1-1 (embed; bug #471200)
371    
372    TinyMCE
373            - wordpress 2.5.1-3 (embed; bug #478257)
374            - moodle <unfixed> (embed; bug #507185)
375            - knowledgeroot <unfixed> (embed)
376            - joomla <itp> (bug #326398)
377    
378    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
379            - scite <unfixed> (embed)
380            - qscintilla <unfixed> (embed)
381            - qscintilla2 <unfixed> (embed)
382            - geany <unfixed> (fork)
383            - anjuta <unfixed> (embed)
384    
385    libphp-adodb
386            - moodle <unfixed> (embed; bug #507185)
387            NOTE: also AdoDB-XML Schema
388            - gallery2 <unfixed> (embed)
389            - phppgadmin <unfixed> (embed)
390            - egroupware <unfixed> (embed)
391            - phpwiki <unfixed> (embed)
392            - torrentflux 2.0beta1-2 (embed)
393            - ipplan <unfixed> (embed)
394            - typo3-src <unfixed> (embed)
395            - cacti <unknown> (embed)
396            [sarge] - cacti <unfixed> (embed)
397            NOTE: dependency exists, but internal version is used
398            - gforge 4.7~rc2-6 (embed)
399            - mahara <unfixed> (embed)
400    
401    gzip
402            - linux-kernel <unfixed> (embed)
403            NOTE: lib/inflate.c
404            - klibc <unfixed> (embed)
405            NOTE: based on linux-kernel gzip code
406            - busybox <unfixed> (embed)
407    
408    neon
409            - cadaver 0.22.3+debian-1 (embed; bug #188381)
410            - gnome-vfs2 <unfixed> (embed; bug #395874)
411            [etch] - litmus <unfixed> (embed; #395875)
412            - litmus <removed> (embed; #395875)
413            [sarge] - screem <unfixed> (embed)
414            - sitecopy 1:0.16.3-5 (embed; bug #395876)
415            [etch] - tla <unfixed> (embed; bug #395877)
416            [sarge] - tla <unfixed> (embed; bug #395877)
417    
418    libmodplug
419            - gst-plugins-bad0.10 <unfixed> (embed)
420    
421    libvncserver
422            - vino <unfixed> (embed)
423    
424    putty
425            - filezilla <unfixed> (embed)
426    
427    tinyxml (not packaged in Debian)
428            - filezilla <unfixed>
429    
430    gv
431            - evince <unfixed> (embed)
432            NOTE: ps/ tree from gv 3.5.8
433            - evince-gtk <unfixed> (embed)
434            NOTE: not packaged in Debian
435    
436    libXbae
437            [etch] - libpawlib2-lesstif <unfixed> (embed)
438            NOTE: from Cernlib
439    
440    libgtkhtml
441            - claws-mail-html2-viewer <unfixed> (fork)
442    
443    libXaw
444            [etch] - libpawlib2-lesstif <unfixed>
445            NOTE: from Cernlib
446            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
447    
448    libgd2
449            - graphviz <unfixed> (embed)
450            NOTE: lib/gd seems to be 2.0.33
451            - wml <unfixed> (embed)
452            - libwmf <unfixed> (embed)
453            NOTE: derived from gd 1.6.3
454    
455    rar
456            - unrar-nonfree <unfixed> (embed)
457    
458    unrar-free (maybe this code is derived from the original rar, too?)
459            - clamav <unfixed> (embed)
460            NOTE: seems to be disabled in default config
461    
462    mplayer (DirectMedia Object loader)
463            - xine-lib <unfixed> (embed)
464            NOTE: src/libw32dll/
465            - vlc <unfixed> (embed)
466            NOTE: modules/codec/dmo/
467            - mplayer 1.0~rc2-20 (embed)
468    
469    libwpd (WordPerfect converter)
470            - openoffice.org <unfixed> (embed)
471    
472    fsplib (http://sourceforge.net/projects/fsp/)
473            - gftp <unfixed> (embed)
474            NOTE: lib/fsplib version 0.3
475    
476    sprng
477            - tree-puzzle <unfixed> (embed)
478    
479    librpcsecgss
480            - krb5 <unfixed> (embed)
481    
482    jasper
483            - ghostscript <unfixed> (embed)
484            - gs-gpl <unfixed> (embed)
485    
486    libiris
487            - psi <unfixed> (embed)
488            - kdenetwork <unfixed> (embed)
489            NOTE: kopete embeds libiris but links dynamically to libidn
490            - kdegames <unfixed> (embed)
491            NOTE: ksirk/kde4
492    
493    libidn
494            - monotone 0.43-1 (embed)
495            - psi <unfixed> (embed)
496            NOTE: psi embeds libiris which embeds libidn
497            - kdegames <unfixed> (embed)
498            NOTE: kdegames/kde4 embeds libiris which embeds libidn
499    
500    liblua
501            - monotone 0.43-1 (embed)
502            - nmap <unfixed> (embed; bug #527997)
503            NOTE: fixed upstream as of nmap svn rev13336.
504    
505    libbotan
506            - monotone 0.43-1 (embed)
507    
508    NetXX
509            - monotone 0.43-1 (embed)
510    
511    libgc
512            - mono <unfixed> (embed)
513    
514    lzma
515            - p7zip <unfixed> (embed)
516            - xz-utils <unfixed> (fork)
517    
518    lzo
519            - grub2 <unfixed> (embed)
520    
521    yassl
522            - mysql-dfsg-5.0 <unfixed> (embed)
523    
524    pax code
525            - tar <unfixed> (embed)
526            - cpio <unfixed> (embed)
527    
528    t1lib
529            - tetex-bin 2.0.2-1 (embed)
530            - texlive-bin <unknown> (embed)
531    
532    guichan
533            - boswars <unfixed> (embed)
534            NOTE: maintainer notified us, working on it
535    
536    tolua
537            - boswars <unfixed> (embed)
538            NOTE: maintainer notified us, working on it
539    
540    asio-dev
541            - luxrender <unfixed> (embed)
542            NOTE: maintainer notified us, working on it
543            NOTE: may be merged with boost "soon"
544    
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
   
 etl-dev (will be renamed to libetl-dev soon):  
 synfig  
   
 libmms:  
545  xine-lib  xine-lib
546  mimms          - vlc <unfixed> (embed)
547            NOTE: only parts included in modules/access/rtsp
 FCKeditor:  
 knowledgeroot  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
 busybox  
548    
549    netpbm
550            - tcl8.3 <unfixed> (embed)
551            - tcl8.4 <unfixed> (embed)
552            - tcl8.5 <unfixed> (embed)
553            NOTE: generic/tkImgGIF.c
554    
555    tk8.5
556            - tk8.0 <removed> (old-version)
557            - tk8.3 <unfixed> (old-version)
558            - tk8.4 <unfixed> (old-version)
559            - perl-tk <unfixable> (fork)
560    
561    samba
562            - mc 2:4.6.2~git20080311-1 (embed)
563            NOTE: maintainer is aware of this, currently searching a solution
564    
565    plib1.8.4c2
566            - boson <unfixed> (fork)
567            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
568    
569    fribidi
570            - quesoglc <unfixed> (embed)
571            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
572    
573    glew
574            - quesoglc <unfixed> (embed; bug #489341)
575            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
576    
577    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
578            - transcend <unfixed> (embed)
579            - cultivation <unfixed> (embed)
580            - passage <unfixed> (embed)
581            - gravitation <unfixed> (embed)
582    
583    tar
584            - libarchive <unfixed> (embed)
585            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
586    
587    cpio
588            - libarchive <unfixed> (embed)
589            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
590    
591    webkit
592            - qt4-x11 <unfixed> (embed)
593    
594    ftgl
595            - blender 2.46+dfsg-1 (embed)
596    
597    wv
598            - abiword <unfixed>
599    
600    qemu
601            - kvm <unfixed> (embed; bug #543159)
602            - xen-3 <unfixed> (embed)
603            - xen-unstable <unfixed> (embed)
604    
605    vgabios
606            - kvm <unfixed> (embed; bug #489442)
607    
608    bochs
609            - kvm <unfixed> (embed; bug #489442)
610    
611    speex
612            - vorbis-tools <unfixed> (embed)
613            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
614            - gst-plugins-good0.10 <unfixed> (embed)
615            - xine-lib <unfixed> (embed)
616            - libfishsound <unfixed> (embed)
617            - libannodex <unfixed> (embed)
618            - vlc <unfixed> (embed)
619            - xmms-speex <unfixed> (embed)
620            - libsdl-sound1.2 <unfixed> (embed)
621            - sweep <unfixed> (embed)
622    
623    libreadline
624            - magic <unfixed> (old-version)
625            NOTE: magic is currently an RFS
626    
627    opcode
628            - ode <unfixed> (embed)
629            NOTE: opcode is not a package in debian, it is just embedded
630            NOTE: http://www.codercorner.com/Opcode.htm
631    
632    gimpact
633            - ode <unfixed> (embed)
634            NOTE: gimpact is not a package in debian, it is just embedded
635            NOTE: http://gimpact.sf.net
636    
637    mochikit
638            - mahara <unfixed> (embed)
639            NOTE: they require extra patches, still unmerged upstream
640            - ntop <unfixed> (embed)
641            - coherence <unfixed> (embed)
642            NOTE: python-coherence
643            - paste <unfixed> (embed)
644            NOTE: python-paste
645            - turbogears <unfixed> (embed)
646            NOTE: python-turbogears
647            - plone3 <unfixed> (embed)
648            NOTE: zope-plone3
649    
650    prototype
651            - netbeans-ide <unfixed> (embed)
652            - auth2db-frontend <unfixed> (embed)
653            - webcit <unfixed> (embed)
654            NOTE: citadel-webcit
655            - asterisk <unfixed> (embed)
656            - doc-iana <unfixed> (embed)
657            - libaws <unfixed> (embed)
658            NOTE: libaws-doc
659            - libgettext-ruby <unfixed> (embed)
660            NOTE: libgettext-ruby-data
661            - libjson-ruby <unfixed> (embed)
662            NOTE: libjson-ruby-doc
663            - lucene2 <unfixed> (embed)
664            NOTE: liblucene2-java-doc
665            - libopenid-ruby <unfixed> (embed)
666            - solr <unfixed> (embed)
667            NOTE: solr-common
668            - glpi <unfixed> (embed)
669            - hobbix <unfixed> (embed)
670            - mnemo2 <unfixed> (embed)
671            - nag2 <unfixed> (embed)
672            - knowledgeroot <unfixed> (embed)
673            - mediatomb <unfixed> (embed)
674            NOTE: mediatomb-common
675            - mt-daapd <unfixed> (embed)
676            - op-panel <unfixed> (embed)
677            - ebug-http <unfixed> (embed)
678            - phpgedview <removed> (embed)
679            - poker-network <unfixed> (embed)
680            NOTE: poker-web
681            - webhelpers <unfixed> (embed)
682            NOTE: python-webhelpers
683            - qwik <unfixed> (embed)
684            - rails <unfixed> (embed)
685            - typo3-src <unfixed> (embed)
686            - wordpress 2.5.0-2 (embed)
687            - zope <unfixed> (embed)
688            NOTE: zope-plone3
689            - smokeping <unfixed> (embed)
690            - ampache 3.4.1-2 (embed)
691            - exaile <unfixed> (embed)
692            - hobix <unfixed> (embed)
693            - pixelpost <unfixed> (embed)
694            - symfony <unfixed> (embed)
695            NOTE: it's been said that there are custom changes
696            - zabbix <unfixed> (embed)
697            NOTE: zabbix-frontend-php
698            - turba2 <unfixed> (embed)
699    
700    gdb
701            - insight <unfixed> (embed)
702    
703    e2fsprogs
704            - ldiskfsprogs <unfixable> (fork)
705    
706    quazip (not packaged in Debian)
707            - qcake <unfixed> (embed)
708            NOTE: starting with upstream version 0.6.4
709    
710    exo
711            - pcmanfm <unfixed> (embed; bug #499677)
712            NOTE: slightly modified source code
713    
714    java
715            - openjdk-6 <unfixed>
716            - sun-java5 <unfixed>
717            - sun-java6 <unfixed>
718    
719    libphp-snoopy
720            - ampache 3.4.1-2 (embed; bug #504169)
721            - mahara 1.0.5-2 (embed; bug #504170)
722            - pixelpost 1.7.1-5 (embed; bug #504171)
723            - mediamate 0.9.3.6-5 (embed; bug #504172)
724            - opendb <removed> (embed; bug #504173)
725            [etch] - opendb <unfixed> (embed; bug #504173)
726            - wordpress 2.5.1-9 (embed; bug #443948)
727            - moodle <unfixed> (embed; bug #507185)
728            [etch] - phpgroupware <unfixed> (embed)
729            NOTE: phpgroupware-felamimail
730            - magpierss 0.72-3 (embed; bug #431089)
731    
732    jquery
733            - zekr <unfixed> (embed)
734            - wordpress <unknown> (embed)
735            - yocto-reader <unfixed> (embed)
736            - textpattern <unfixed> (embed)
737            - genshi 0.5.1-1 (embed)
738            NOTE: compressed file under examples/ dir
739            - prewikka <unfixed> (embed)
740            - libramaze-ruby <unfixed> (embed)
741            - drupal5 <unfixed> (embed)
742            - b2evolution <unfixed> (embed)
743            - wesnoth <unfixed> (embed)
744    
745    tablesorter (jquery plugin, not packaged yet)
746            - wesnoth <unfixed> (embed)
747    
748    kses
749            - wordpress <unfixed> (embed; bug #504242)
750            NOTE: their copy has all methods renamed to wp_<foo>
751            NOTE: kses isn't in Debian, RFP: #504240
752            - moodle <unfixed> (embed; bug #507185)
753            - egroupware <unfixed> (embed)
754    
755    magpierss
756            - wordpress <unfixed> (embed; bug #504242)
757            - moodle <unfixed>
758    
759    php-gettext
760            - wordpress 2.8.4-1 (embed; bug #504242)
761    
762    libphp-ixr (name may change, it is the Incutio XML-RPC)
763            - wordpress <unfixed> (embed; bug #504242)
764            NOTE: libphp-ixr isn't in Debian, RFP: #504236
765            - dokuwiki <unfixed> (embed)
766            - textpattern <unfixed> (embed)
767    
768    libphp-cas
769            - glpi <unfixed> (embed)
770            - moodle <unfixed> (embed; bug #505984)
771    
772    scriptaculous
773            - glpi <unfixed> (embed)
774            - libaws <unfixed> (embed)
775            NOTE: libaws-doc
776            - op-panel <unfixed> (embed)
777            - symfony <unfixed> (embed)
778            NOTE: maintainer says there are extra incompatible changes required
779            - pixelpost <unfixed> (embed)
780            - webhelpers <unfixed> (embed)
781            NOTE: python-webhelpers
782            - qwik <unfixed> (embed)
783            - smokeping <unfixed> (embed)
784            - turba2 <unfixed> (embed)
785            - typo3-src 4.2.3-1 (embed)
786    
787    libmarkdown-php
788            - moodle <unfixed> (embed; bug #507185)
789            - pixelpost <unfixed> (embed)
790    
791    php-openid
792            - wordpress-openid <itp> (embed)
793    
794    geshi
795            - dokuwiki 0.0.20080505-3.1 (embed)
796            - pgfouine 1.0-1.1 (embed)
797            - websvn 2.1.0-1 (embed)
798    
799    webcalendar
800            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
801    
802    libical
803            - kdepim <unfixed> (fork)
804            - kdepimlibs <unfixed> (fork)
805            NOTE: fixed in KDE4 post 4.1.x series
806            - claws-mail-vcalendar-plugin <unfixed> (fork)
807    
808    libltdl3
809            - kdelibs <unfixed> (embed)
810            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
811            - synfig <unfixed> (embed)
812    
813    harfbuzz
814            - qt4-x11 <unfixed> (embed)
815    
816    libzip
817            - php5 <unfixed> (fork)
818            - odt2txt <unfixed> (embed; bug #523808)
819    
820    json.php (not packaged; should be replaced with php's built-in functions)
821            - moodle <unfixed>
822            - yui <unfixed>
823            - gallery2 <unfixed>
824            - dokuwiki <unfixed>
825            - typo3-src <unfixed>
826    
827    php-fpdf
828            - tcpdf <itp> (fork)
829            - moodle <unfixed>
830            - phpwiki <unfixed>
831            - egroupware <unfixed>
832            - ldap-account-manager <unfixed> (fork)
833    
834    tcpdf (itp: #495985)
835            - moodle <unfixed>
836            - phpmyadmin <unfixed>
837    
838    typo3
839            - moodle <unfixed>
840    
841    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
842            - moodle <unfixed>
843            - gosa <unfixed>
844    
845    php-ole (itp: #487558)
846            - moodle <unfixed>
847    
848    pieforms (http://www.catalyst.net.nz)
849            - mahara <unfixed>
850    
851    savant2 (http://phpsavant.com)
852            - egroupware <unfixed>
853    
854    rssparser (http://nwow.org)
855            - egroupware <unfixed>
856            - phpgroupware <unfixed>
857    
858    lcms
859            - openjdk-6 <unfixed> (fork)
860    
861    libphp-phplayersmenu
862            - diogenes <unfixed>
863            - phpldapadmin <unfixed>
864    
865    libphp-pclzip
866            - docvert <unfixed>
867            - moodle <unfixed>
868            - egroupware <unfixed>
869    
870    libphp-simplepie
871            - dokuwiki <unfixed>
872    
873    libphp-jpgraph
874            - egroupware <unfixed>
875    
876    php-simpletest
877            - moodle <unfixed>
878    
879    libpng
880            - iceweasel <unfixed> (embed)
881            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
882            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
883            - iceape 1.0.13~pre080614i-0etch1 (embed)
884            - xulrunner <unfixed> (embed)
885            NOTE: Debian 1.9.0.6 uses embedded copy
886            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
887            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
888            NOTE: Ubuntu only
889            - firefox-3.0 <unfixed> (embed)
890            NOTE: Ubuntu only
891            - firefox-3.1 <unfixed> (embed)
892            NOTE: Ubuntu only
893            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
894            NOTE: Ubuntu only
895            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
896            NOTE: Ubuntu only
897            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
898            NOTE: Ubuntu only
899    
900    irssi
901            - silc-client <unfixed> (embed)
902            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
903    
904    extc
905            - mtasc <unfixed> (embed)
906            - haxe <unfixed> (embed)
907    
908    swflib
909            - mtasc <unfixed> (embed)
910            - haxe <unfixed> (embed)
911    
912    libitext-java
913            - bouncycastle 2.1.4-1 (embed)
914    
915    python-ply
916            - pyke <unfixed> (embed)
917    
918    libdumbnet (libdnet upstream)
919            - nmap <unfixed> (fork)
920    
921    gcc-4.4
922            - gcc-mingw32 <unfixed> (embed)
923    
924    camlimages
925            - advi <unfixed> (embed)
926    
927    memcached
928            - memcachedb <unfixed> (embed)
929    
930    yajl
931            - argyll <unfixed> (embed; bug #544223)
932            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
933    
934    libept:
935            - adept <unfixed> (embed; bug #540649)
936    
937    libvorbis:
938            - xulrunner <unfixed> (embed; bug #540959)
939    
940    php-net-dnsbl:
941            - serendipity <unfixed> (embed)
942    
943    php-onyx-rss:
944            - serendipity <unfixed> (embed)
945    
946    php-text-wiki:
947            - serendipity <unfixed> (embed)
948    
949    php-xml-rpc:
950            - serendipity <unfixed> (embed)
951    
952    xyssl (does not have a shared library)
953            - polarssl <unfixed> (fork)
954    
955    polarssl (does not have a shared library)
956            - pdkim <itp> (embed)
957            NOTE: pdkim ITP #543150

Legend:
Removed from v.4835  
changed lines
  Added in v.12707

  ViewVC Help
Powered by ViewVC 1.1.5