/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 5321 by stef-guest, Mon Jan 22 17:54:13 2007 UTC revision 12663 by pabs, Sun Aug 23 04:02:17 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (will be replaced by evince in Gnome 2.12)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (current poppler source package has a ported version, pinged maintainer)  to be applied in multiple source packages.
7  kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, probably not in time for Etch)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp> or <unknown> if the version number can not be determined
15  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)          <unfixable> for unavoidable cases (e.g., forks that add real value)
16  dpkg  sort: static (linking statically against a lib)
17  rsync (somehow derived code base)        embed (embedding a copy of the library into another source package)
18  mozilla(?)        fork (the package is not just embedding code but it is a fork and
19  Linux kernels              thus might share parts of the source code)
20  pvpgn (links dynamically since 1.7.8-2)        old-version (the package is an older version of essentially
21  mrtg (links dynamically since 2.12.2-1)                     the same code)
22  rpm  
23    The srcpkg might be some string to identify the code if there is no
24  libbz2:  specific source package.
25  dpkg (statically linked)  
26    Everything up to the next line is ignored.
27  libgadu/ekg:  ---BEGIN
28  centericq  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  gaim          NOTE: Fixed packages link to poppler library unless otherwise noted
30  kopete (ships the code, but links dynamically in the Debian package)          - gpdf <removed>
31  kadu (not packaged in Debian)          [sarge] - gpdf <unfixed>
32  GNU gadu (not yet packaged in Debian)          NOTE: has been replaced by evince in etch
33            - pdftohtml <unknown>
34  xmlrpc: (which package is the "origin" of this code?)          [sarge] - pdftohtml <unfixed>
35  drupal          [etch] - pdftohtml <unfixed>
36  phpgroupware          NOTE: has been replaced by poppler-utils
37  egroupware          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38  phpwiki          - texlive-base 3.0-12 (embed)
39  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - texlive-bin 2007-1 (embed)
40  tikiwiki          NOTE: links to poppler
41            - koffice <unfixed> (embed; bug #436163)
42  shtool: (affects build-time only)          - libextractor 0.5.12-1 (embed)
43  mysql-ocaml          NOTE: libextractor is using its own pdf decoder now
44  php4          - pdfkit.framework 0.8-4 (embed)
45            - ipe <unfixed> (embed)
46  mozilla:          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47  mozilla-firefox          - ruby-gnome2 <unknown> (embed)
48  mozilla-thunderbird          NOTE: copy only present in source but links to poppler
49  firefox (to be removed)          - pdfedit <unfixed> (embed; bug #510794)
50  thunderbird (to be removed)          - swftools <unfixed> (embed)
51  iceweasel  
52  iceape  ppmd
53  icedove          - libcomplearn-mod-ppmd <unfixed> (fork)
54  xulrunner          NOTE: discussion in #458152
55  nvu (no longer in Debian)  
56    libevent
57  xli:          - transmission 1.71-1 (embed; bug #529372)
58  xloadimage  
59    lrmi
60  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          - read-edid 2.0.0-1 (embed; bug #495131)
61  openmotif  
62  xfree86/xorg (in libxpm)  peercast
63            - gnome-peercast <unfixed> (embed)
64  kerberized apps with BSD origin:          NOTE: gnome-peercast may better be removed, see #466539
65  krb4  
66  krb5  silc-toolkit
67  heimdal          - silc-client 1.1~beta6-1 (embed)
68    
69  grip: (which pkg is the origin?)  icclib
70  libcdaudio          - ghostscript <unfixed> (embed)
71  grip          - argyll <unfixed> (embed)
72  gnome-vfs (vfs2 as well?)  
73    dietlibc
74  fudforum:          - ccontrol 0.9.1+20071204-1 (static)
75  phpgroupware-fudforum  
76  egroupware-fudforum (removed from egroupware after sarge)  libmikmod
77            - sdl-mixer1.2 <unfixed> (embed)
78  cvs:          TODO: report bug
79  gcvs (at least an additional script is included, check if there's more)  
80    libiax
81  pcre:          - iaxmodem <unfixed> (embed)
82  all pythons  
83  php4 (src included, but Debian package links dynamically)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
84  analog (src included, but Debian package links dynamically)          - dpkg <unfixed> (embed)
85  libgoffice-1          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
86  tf5 (since 5.0beta7 the Debian package links dynamically)          - rsync <unfixed> (embed)
87            NOTE: somehow derived code base
88  tiff:          - mono <unfixed> (embed)
89  wxpythongtk (check, which debian pkg this is in)          TODO: check mozilla
90  older kdegraphics/kpdf releases < 3.3 embedded a copy          - Linux kernels <unfixed> (embed)
91            - pvpgn 1.7.8-2 (embed)
92  uudeview:          - mrtg 2.12.2-1 (embed)
93  libconvert-uulib-perl          - rpm <unknown> (embed)
94            NOTE: pinged anibal since when rpm was fixed
95  sqlite: (not affected by security vulnerabilities so far)          - tuxcmd-modules <unfixed> (embed)
96  amarok          - zsync <unfixed>
97            - tra <unfixed>
98  util-linux/mount:          - sash <unfixed>
99  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - nsis <unfixed>
100            - mseide-msegui <unfixed>
101  webmin:          NOTE: mseide
102  usermin (only in sarge)          - mirrordir <unfixed>
103            - poco <unfixed>
104  sylpheed:          - klibc <unfixed>
105  sylpheed-claws          - ghostscript <unfixed>
106            - freeimage <unfixed>
107  phpsysinfo:          - clamav <unfixed> (fork)
108  egroupware          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
109  phpgroupware          - tuxonice-userui <unfixed>
110            - plt-scheme <unfixed>
111            - perl <unfixed>
112            - paraview <unfixed>
113            - gcvs <unfixed>
114            - erlang <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124    
125    dulwich
126            - hg-git <unfixed> (embed; bug #541996)
127    
128    libvigraimpex
129            - hugin <unfixed> (embed)
130            - enblend-fuse <unfixed> (embed)
131    
132    libbz2
133            - dpkg <unfixed> (static)
134    
135    libgadu:
136            - centericq <unfixed> (embed)
137            - gaim <unfixed> (embed)
138            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
139            - kdenetwork 4:3.3.2-5 (embed)
140            NOTE: from kdenetwork: kopete
141            - gadu <unfixed> (embed)
142            - ekg 1:1.8~rc0-1 (embed)
143            - kadu 0.6.0.2-3 (embed; bug #504430)
144            NOTE: gadu not packaged in Debian yet
145    
146    xmlrpc (which package is the "origin" of this code?)
147            - drupal <unfixed> (embed)
148            - phpgroupware <unfixed> (embed)
149            - egroupware <unfixed> (embed)
150            - phpwiki <unfixed> (embed)
151            - php4 <unfixed> (embed)
152            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
153    
154    shtool (affects build-time only)
155            - mysql-ocaml <unfixed> (embed)
156            - php4 <unfixed> (embed)
157    
158    mozilla source code
159            - mozilla-firefox <unfixed> (embed)
160            - mozilla-thunderbird <unfixed>
161            - firefox <removed>
162            - thunderbird <removed>
163            - iceweasel <unfixed> (embed)
164            - iceape <unfixed> (embed)
165            - icedove <unfixed> (embed)
166            - xulrunner <unfixed> (embed)
167            - nvu <removed> (embed)
168            - kompozer <unfixed> (embed; bug #532168)
169    
170    xli
171            - xloadimage <unfixed> (embed)
172    
173    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
174            - openmotif <unfixed> (embed)
175            - libxpm <unfixed> (embed)
176    
177    kerberized apps with BSD origin
178            - krb4 <unfixed> (embed)
179            - krb5 <unfixed> (embed)
180            - heimdal <unfixed> (embed)
181    
182    grip (which pkg is the origin?)
183            - libcdaudio <unfixed>
184            - grip <unfixed>
185            - gnome-vfs <unfixed>
186            TODO: check vfs2 as well
187    
188    fudforum
189            [etch] - phpgroupware <unfixed> (embed)
190            NOTE: phpgroupware-fudforum
191            [sarge] - egroupware-fudforum <removed> (embed)
192    
193    libbsd
194            - rdate 1:1.2-3 (embed)
195            - atheme-services
196            - libbsd-arc4random-perl
197            - isakmpd
198    
199    cvs
200            - gcvs <unfixed> (embed)
201            NOTE: see cvsunix/src in tarball
202    
203    pcre
204            - python* <unfixed> (embed)
205            - php4 <unknown> (embed)
206            - analog 2:5.23-0woody1 (embed)
207            - goffice <unfixed> (embed)
208            NOTE: libgoffice-*
209            - vfu 4.06-4.1 (embed; bug #450754)
210            - tf5 5.0beta7-1 (embed)
211            - monotone 0.43-1 (embed)
212            NOTE: this only affects versions >= 0.37
213            - glib2.0 2.15.2-1 (embed)
214            - apache2 2.0.53-4 (embed)
215            - exim4 4.10-0.srh20.12 (embed)
216            - yacas <unfixed> (embed)
217            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
218            - gtamsanalyzer.app 0.42-5 (embed)
219            - tin <unknown> (embed)
220            - kazehakase 0.5.2-1
221            - webkit <unfixed> (embed)
222            - qt4-x11 <unfixed> (embed)
223            NOTE: embedded via webkit copy
224    
225    tiff
226            - wxwindows2.4 2.2.1 (embed)
227    
228    uudeview
229            - libconvert-uulib-perl <unfixed> (embed)
230            - pan <unfixed> (embed)
231    
232    sqlite (not affected by security vulnerabilities so far)
233            - amarok <unfixed> (embed)
234            - monotone 0.43-1 (embed)
235            - iceweasel <unfixed> (embed)
236    
237    util-linux/mount
238            - loop-aes-utils <unfixed> (embed)
239            NOTE: contains code from util-linux' mount in the mount-aes-udeb
240    
241    webmin
242            - usermin <unknown> (embed)
243            [sarge] - usermin <unfixed> (embed)
244    
245    sylpheed
246            - sylpheed-claws <unfixed> (fork)
247    
248    phpsysinfo
249            - egroupware <unfixed> (embed)
250            - phpgroupware <unfixed> (embed)
251    
252    phpldapadmin
253            [sarge] - egroupware <unfixed> (embed)
254            NOTE: removed from egroupware after sarge
255    
256    chmlib
257            - kchmviewer <unknown> (embed)
258    
259    libavcodec/libavformat (source: ffmpeg)
260            - mplayer 1.0~rc2-14 (embed; bug #395252)
261            - kino 1.0.0-1
262            - vlc <not-affected> (Links dynamically since initial release)
263            - smilutils 0.3.0-10
264            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
265            - motion 3.1.19-1
266            - gstreamer0.10-ffmpeg 0.10.3-2
267            - xmovie <unfixed>
268            NOTE: xmovie removed, only present in Etch
269            TODO: gimp-gap (potentially using ffmpeg code as well)
270            - avifile <unfixed> (embed; bug #538750)
271    
272    faad2
273            - mplayer 1.0~rc2-20 (embed)
274            - avifile <unfixed> (embed; bug #538750)
275    
276    mad MPEG decoding lib
277            - mad <unfixed> (embed)
278            - xine-lib <unfixed> (embed)
279    
280  phpldapadmin:  libdts
281  egroupware (removed from egroupware after sarge)          - xine-lib <unfixed> (embed)
282    
283  chmlib:  flac
284  kchmviewer (not packaged in Debian)          - xine-lib <unfixed> (embed)
285    
286  libavcodec/libavformat:  liba52
287  ffmpeg          - a52dec <unfixed> (embed)
288  xine-lib          - xine-lib <unfixed> (embed)
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
289    
290  mad MPEG decoding lib:  libmpeg2
291  mad          - mpeg2dec <unfixed> (embed)
292  xine-lib          - xine-lib <unfixed> (embed)
293    
294  libdts:  curl
295  libdts          - wget <unfixed> (embed)
296  xine-lib          NOTE: code for NTLM authentication
297    
298  flac:  uw-imap
299  flac          - pine <unfixed> (embed)
300  xine-lib          - alpine <unfixed> (embed)
301    
302  liba52:  imagemagick
303  a52dec          - graphicsmagick <unfixed> (fork)
 xine-lib  
304    
305  libmpeg2:  python-urlgrabber
306  mpeg2dec          - mercurial <unfixed> (embed; bug #531062)
 xine-lib  
307    
308  curl:  python-mechanize
309  wget (code for NTLM authentication)          - python-beautifulsoup <unfixed> (embed)
310    
311  TODO evaluate:  halibut
312  gimp-gap (potentially using ffmpeg code as well)          - nsis <unfixed> (fork)
313    
314  uw-imap:  libghttp
315  pine          - hotway <unfixed> (embed)
316    
317  imagemagick:  libsndfile
318  graphicsmagick          - ardour 1:2.7.1-1 (embed)
319    
320  halibut:  glibmm2.4
321  nsis          - ardour 1:2.7.1-1 (embed)
322    
323  libghttp:  libgnomecanvasmm2.6
324  hotway          - ardour 1:2.7.1-1 (embed)
325    
326  etl-dev (will be renamed to libetl-dev soon):  libsigc++-2.0
327  synfig          - ardour 1:2.7.1-1 (embed)
328    
329  libmms:  soundtouch
330  xine-lib          - ardour 1:2.7.1-1 (embed)
 mimms  
331    
332  FCKeditor:  libmms
333  knowledgeroot          - xine-lib <unfixed> (embed)
334            - mimms <unfixed> (embed)
335    
336  Moodle contains lots of things:  fckeditor
337  AdoDB          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
338  AdoDB-XML Schema          - moin 1.8.2-2 (embed; bug #452599)
339  ipatlas          - karrigell <removed> (embed; bug #452598)
340  PHPMailer          - gforge 4.6.99+svn6225-1 (embed)
341  Smarty          - request-tracker3.8 <unfixed> (embed)
342  htmlArea  
343  TinyMCE  ipatlas (not packaged in Debian)
344  bennu          - moodle <unfixed> (embed; bug #507185)
345    
346    libphp-phpmailer
347            - moodle <unfixed> (embed; bug #507185)
348            - mahara <unfixed> (embed)
349            - symfony <unfixed> (embed)
350            [etch] - phpgroupware <unfixed> (embed)
351            NOTE: phpgroupware-felamimail is only in etch
352            - egroupware <unfixed> (embed; bug #504283)
353            - glpi <unfixed>
354    
355    htmlArea (not packaged in Debian)
356            - moodle <unfixed> (embed)
357    
358  TinyMCE:  giflib:
359  wordpress          - wine <unfixed> (embed; bug #466181)
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
 busybox  
   
 ffmpeg:  
 mplayer (#395252)  
   
 neon:  
 cadaver (all, but being worked on: #188381)  
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
   
 libmodplug:  
 gst-plugins-bad0.10  
   
 libvncserver:  
 vino  
   
 putty:  
 filezilla  
   
 tinyxml (not packaged in Debian):  
 filezilla  
   
 gv:  
 evince (ps/ tree from gv 3.5.8)  
 evince-gtk (not packaged in Debian)  
   
 libXbae:  
 libpawlib2-lesstif package (from Cernlib)  
360    
361  libXaw:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
362  libpawlib2-lesstif package (from Cernlib)          - moodle <unfixed> (embed)
363    
364  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  smarty:
365            - moodle 1.8.2-2 (embed; bug #471158)
366            - gallery2 2.2.5-2 (embed; bug #471160)
367            - mahara 0.9.2-2 (embed; bug #471201)
368            - gosa 2.4beta1-1 (embed; bug #471200)
369    
370    TinyMCE
371            - wordpress 2.5.1-3 (embed; bug #478257)
372            - moodle <unfixed> (embed; bug #507185)
373            - knowledgeroot <unfixed> (embed)
374            - joomla <itp> (bug #326398)
375    
376    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
377            - scite <unfixed> (embed)
378            - qscintilla <unfixed> (embed)
379            - qscintilla2 <unfixed> (embed)
380            - geany <unfixed> (fork)
381            - anjuta <unfixed> (embed)
382    
383    libphp-adodb
384            - moodle <unfixed> (embed; bug #507185)
385            NOTE: also AdoDB-XML Schema
386            - gallery2 <unfixed> (embed)
387            - phppgadmin <unfixed> (embed)
388            - egroupware <unfixed> (embed)
389            - phpwiki <unfixed> (embed)
390            - torrentflux 2.0beta1-2 (embed)
391            - ipplan <unfixed> (embed)
392            - typo3-src <unfixed> (embed)
393            - cacti <unknown> (embed)
394            [sarge] - cacti <unfixed> (embed)
395            NOTE: dependency exists, but internal version is used
396            - gforge 4.7~rc2-6 (embed)
397            - mahara <unfixed> (embed)
398    
399    gzip
400            - linux-kernel <unfixed> (embed)
401            NOTE: lib/inflate.c
402            - klibc <unfixed> (embed)
403            NOTE: based on linux-kernel gzip code
404            - busybox <unfixed> (embed)
405    
406    neon
407            - cadaver 0.22.3+debian-1 (embed; bug #188381)
408            - gnome-vfs2 <unfixed> (embed; bug #395874)
409            [etch] - litmus <unfixed> (embed; #395875)
410            - litmus <removed> (embed; #395875)
411            [sarge] - screem <unfixed> (embed)
412            - sitecopy 1:0.16.3-5 (embed; bug #395876)
413            [etch] - tla <unfixed> (embed; bug #395877)
414            [sarge] - tla <unfixed> (embed; bug #395877)
415    
416    libmodplug
417            - gst-plugins-bad0.10 <unfixed> (embed)
418    
419    libvncserver
420            - vino <unfixed> (embed)
421    
422    putty
423            - filezilla <unfixed> (embed)
424    
425    tinyxml (not packaged in Debian)
426            - filezilla <unfixed>
427    
428    gv
429            - evince <unfixed> (embed)
430            NOTE: ps/ tree from gv 3.5.8
431            - evince-gtk <unfixed> (embed)
432            NOTE: not packaged in Debian
433    
434    libXbae
435            [etch] - libpawlib2-lesstif <unfixed> (embed)
436            NOTE: from Cernlib
437    
438    libgtkhtml
439            - claws-mail-html2-viewer <unfixed> (fork)
440    
441    libXaw
442            [etch] - libpawlib2-lesstif <unfixed>
443            NOTE: from Cernlib
444            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
445    
446    libgd2
447            - graphviz <unfixed> (embed)
448            NOTE: lib/gd seems to be 2.0.33
449            - wml <unfixed> (embed)
450            - libwmf <unfixed> (embed)
451            NOTE: derived from gd 1.6.3
452    
453    rar
454            - unrar-nonfree <unfixed> (embed)
455    
456    unrar-free (maybe this code is derived from the original rar, too?)
457            - clamav <unfixed> (embed)
458            NOTE: seems to be disabled in default config
459    
460    mplayer (DirectMedia Object loader)
461            - xine-lib <unfixed> (embed)
462            NOTE: src/libw32dll/
463            - vlc <unfixed> (embed)
464            NOTE: modules/codec/dmo/
465            - mplayer 1.0~rc2-20 (embed)
466    
467    libwpd (WordPerfect converter)
468            - openoffice.org <unfixed> (embed)
469    
470    fsplib (http://sourceforge.net/projects/fsp/)
471            - gftp <unfixed> (embed)
472            NOTE: lib/fsplib version 0.3
473    
474    sprng
475            - tree-puzzle <unfixed> (embed)
476    
477    librpcsecgss
478            - krb5 <unfixed> (embed)
479    
480    jasper
481            - ghostscript <unfixed> (embed)
482            - gs-gpl <unfixed> (embed)
483    
484    libiris
485            - psi <unfixed> (embed)
486            - kdenetwork <unfixed> (embed)
487            NOTE: kopete embeds libiris but links dynamically to libidn
488            - kdegames <unfixed> (embed)
489            NOTE: ksirk/kde4
490    
491    libidn
492            - monotone 0.43-1 (embed)
493            - psi <unfixed> (embed)
494            NOTE: psi embeds libiris which embeds libidn
495            - kdegames <unfixed> (embed)
496            NOTE: kdegames/kde4 embeds libiris which embeds libidn
497    
498    liblua
499            - monotone 0.43-1 (embed)
500            - nmap <unfixed> (embed; bug #527997)
501            NOTE: fixed upstream as of nmap svn rev13336.
502    
503    libbotan
504            - monotone 0.43-1 (embed)
505    
506    NetXX
507            - monotone 0.43-1 (embed)
508    
509    libgc
510            - mono <unfixed> (embed)
511    
512    lzma
513            - p7zip <unfixed> (embed)
514            - xz-utils <unfixed> (fork)
515    
516    lzo
517            - grub2 <unfixed> (embed)
518    
519    yassl
520            - mysql-dfsg-5.0 <unfixed> (embed)
521    
522    pax code
523            - tar <unfixed> (embed)
524            - cpio <unfixed> (embed)
525    
526    t1lib
527            - tetex-bin 2.0.2-1 (embed)
528            - texlive-bin <unknown> (embed)
529    
530    guichan
531            - boswars <unfixed> (embed)
532            NOTE: maintainer notified us, working on it
533    
534    tolua
535            - boswars <unfixed> (embed)
536            NOTE: maintainer notified us, working on it
537    
538    asio-dev
539            - luxrender <unfixed> (embed)
540            NOTE: maintainer notified us, working on it
541            NOTE: may be merged with boost "soon"
542    
543    xine-lib
544            - vlc <unfixed> (embed)
545            NOTE: only parts included in modules/access/rtsp
546    
547  libgd2:  netpbm
548  graphviz (lib/gd seems to be 2.0.33)          - tcl8.3 <unfixed> (embed)
549            - tcl8.4 <unfixed> (embed)
550            - tcl8.5 <unfixed> (embed)
551            NOTE: generic/tkImgGIF.c
552    
553    tk8.5
554            - tk8.0 <removed> (old-version)
555            - tk8.3 <unfixed> (old-version)
556            - tk8.4 <unfixed> (old-version)
557            - perl-tk <unfixable> (fork)
558    
559    samba
560            - mc 2:4.6.2~git20080311-1 (embed)
561            NOTE: maintainer is aware of this, currently searching a solution
562    
563    plib1.8.4c2
564            - boson <unfixed> (fork)
565            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
566    
567    fribidi
568            - quesoglc <unfixed> (embed)
569            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
570    
571    glew
572            - quesoglc <unfixed> (embed; bug #489341)
573            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
574    
575    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
576            - transcend <unfixed> (embed)
577            - cultivation <unfixed> (embed)
578            - passage <unfixed> (embed)
579            - gravitation <unfixed> (embed)
580    
581    tar
582            - libarchive <unfixed> (embed)
583            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
584    
585    cpio
586            - libarchive <unfixed> (embed)
587            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
588    
589    webkit
590            - qt4-x11 <unfixed> (embed)
591    
592    ftgl
593            - blender 2.46+dfsg-1 (embed)
594    
595    wv
596            - abiword <unfixed>
597    
598    qemu
599            - kvm <unfixed> (embed)
600            - xen-3 <unfixed> (embed)
601            - xen-unstable <unfixed> (embed)
602    
603    vgabios
604            - kvm <unfixed> (embed; bug #489442)
605    
606    bochs
607            - kvm <unfixed> (embed; bug #489442)
608    
609    speex
610            - vorbis-tools <unfixed> (embed)
611            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
612            - gst-plugins-good0.10 <unfixed> (embed)
613            - xine-lib <unfixed> (embed)
614            - libfishsound <unfixed> (embed)
615            - libannodex <unfixed> (embed)
616            - vlc <unfixed> (embed)
617            - xmms-speex <unfixed> (embed)
618            - libsdl-sound1.2 <unfixed> (embed)
619            - sweep <unfixed> (embed)
620    
621    libreadline
622            - magic <unfixed> (old-version)
623            NOTE: magic is currently an RFS
624    
625    opcode
626            - ode <unfixed> (embed)
627            NOTE: opcode is not a package in debian, it is just embedded
628            NOTE: http://www.codercorner.com/Opcode.htm
629    
630    gimpact
631            - ode <unfixed> (embed)
632            NOTE: gimpact is not a package in debian, it is just embedded
633            NOTE: http://gimpact.sf.net
634    
635    mochikit
636            - mahara <unfixed> (embed)
637            NOTE: they require extra patches, still unmerged upstream
638            - ntop <unfixed> (embed)
639            - coherence <unfixed> (embed)
640            NOTE: python-coherence
641            - paste <unfixed> (embed)
642            NOTE: python-paste
643            - turbogears <unfixed> (embed)
644            NOTE: python-turbogears
645            - plone3 <unfixed> (embed)
646            NOTE: zope-plone3
647    
648    prototype
649            - netbeans-ide <unfixed> (embed)
650            - auth2db-frontend <unfixed> (embed)
651            - webcit <unfixed> (embed)
652            NOTE: citadel-webcit
653            - asterisk <unfixed> (embed)
654            - doc-iana <unfixed> (embed)
655            - libaws <unfixed> (embed)
656            NOTE: libaws-doc
657            - libgettext-ruby <unfixed> (embed)
658            NOTE: libgettext-ruby-data
659            - libjson-ruby <unfixed> (embed)
660            NOTE: libjson-ruby-doc
661            - lucene2 <unfixed> (embed)
662            NOTE: liblucene2-java-doc
663            - libopenid-ruby <unfixed> (embed)
664            - solr <unfixed> (embed)
665            NOTE: solr-common
666            - glpi <unfixed> (embed)
667            - hobbix <unfixed> (embed)
668            - mnemo2 <unfixed> (embed)
669            - nag2 <unfixed> (embed)
670            - knowledgeroot <unfixed> (embed)
671            - mediatomb <unfixed> (embed)
672            NOTE: mediatomb-common
673            - mt-daapd <unfixed> (embed)
674            - op-panel <unfixed> (embed)
675            - ebug-http <unfixed> (embed)
676            - phpgedview <removed> (embed)
677            - poker-network <unfixed> (embed)
678            NOTE: poker-web
679            - webhelpers <unfixed> (embed)
680            NOTE: python-webhelpers
681            - qwik <unfixed> (embed)
682            - rails <unfixed> (embed)
683            - typo3-src <unfixed> (embed)
684            - wordpress 2.5.0-2 (embed)
685            - zope <unfixed> (embed)
686            NOTE: zope-plone3
687            - smokeping <unfixed> (embed)
688            - ampache 3.4.1-2 (embed)
689            - exaile <unfixed> (embed)
690            - hobix <unfixed> (embed)
691            - pixelpost <unfixed> (embed)
692            - symfony <unfixed> (embed)
693            NOTE: it's been said that there are custom changes
694            - zabbix <unfixed> (embed)
695            NOTE: zabbix-frontend-php
696            - turba2 <unfixed> (embed)
697    
698    gdb
699            - insight <unfixed> (embed)
700    
701    e2fsprogs
702            - ldiskfsprogs <unfixable> (fork)
703    
704    quazip (not packaged in Debian)
705            - qcake <unfixed> (embed)
706            NOTE: starting with upstream version 0.6.4
707    
708    exo
709            - pcmanfm <unfixed> (embed; bug #499677)
710            NOTE: slightly modified source code
711    
712    java
713            - openjdk-6 <unfixed>
714            - sun-java5 <unfixed>
715            - sun-java6 <unfixed>
716    
717    libphp-snoopy
718            - ampache 3.4.1-2 (embed; bug #504169)
719            - mahara 1.0.5-2 (embed; bug #504170)
720            - pixelpost 1.7.1-5 (embed; bug #504171)
721            - mediamate 0.9.3.6-5 (embed; bug #504172)
722            - opendb <removed> (embed; bug #504173)
723            [etch] - opendb <unfixed> (embed; bug #504173)
724            - wordpress 2.5.1-9 (embed; bug #443948)
725            - moodle <unfixed> (embed; bug #507185)
726            [etch] - phpgroupware <unfixed> (embed)
727            NOTE: phpgroupware-felamimail
728            - magpierss 0.72-3 (embed; bug #431089)
729    
730    jquery
731            - zekr <unfixed> (embed)
732            - wordpress <unknown> (embed)
733            - yocto-reader <unfixed> (embed)
734            - textpattern <unfixed> (embed)
735            - genshi 0.5.1-1 (embed)
736            NOTE: compressed file under examples/ dir
737            - prewikka <unfixed> (embed)
738            - libramaze-ruby <unfixed> (embed)
739            - drupal5 <unfixed> (embed)
740            - b2evolution <unfixed> (embed)
741            - wesnoth <unfixed> (embed)
742    
743    tablesorter (jquery plugin, not packaged yet)
744            - wesnoth <unfixed> (embed)
745    
746    kses
747            - wordpress <unfixed> (embed; bug #504242)
748            NOTE: their copy has all methods renamed to wp_<foo>
749            NOTE: kses isn't in Debian, RFP: #504240
750            - moodle <unfixed> (embed; bug #507185)
751            - egroupware <unfixed> (embed)
752    
753    magpierss
754            - wordpress <unfixed> (embed; bug #504242)
755            - moodle <unfixed>
756    
757    php-gettext
758            - wordpress 2.8.4-1 (embed; bug #504242)
759    
760    libphp-ixr (name may change, it is the Incutio XML-RPC)
761            - wordpress <unfixed> (embed; bug #504242)
762            NOTE: libphp-ixr isn't in Debian, RFP: #504236
763            - dokuwiki <unfixed> (embed)
764            - textpattern <unfixed> (embed)
765    
766    libphp-cas
767            - glpi <unfixed> (embed)
768            - moodle <unfixed> (embed; bug #505984)
769    
770    scriptaculous
771            - glpi <unfixed> (embed)
772            - libaws <unfixed> (embed)
773            NOTE: libaws-doc
774            - op-panel <unfixed> (embed)
775            - symfony <unfixed> (embed)
776            NOTE: maintainer says there are extra incompatible changes required
777            - pixelpost <unfixed> (embed)
778            - webhelpers <unfixed> (embed)
779            NOTE: python-webhelpers
780            - qwik <unfixed> (embed)
781            - smokeping <unfixed> (embed)
782            - turba2 <unfixed> (embed)
783            - typo3-src 4.2.3-1 (embed)
784    
785    libmarkdown-php
786            - moodle <unfixed> (embed; bug #507185)
787            - pixelpost <unfixed> (embed)
788    
789    php-openid
790            - wordpress-openid <itp> (embed)
791    
792    geshi
793            - dokuwiki 0.0.20080505-3.1 (embed)
794            - pgfouine 1.0-1.1 (embed)
795            - websvn 2.1.0-1 (embed)
796    
797    webcalendar
798            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
799    
800    libical
801            - kdepim <unfixed> (fork)
802            - kdepimlibs <unfixed> (fork)
803            NOTE: fixed in KDE4 post 4.1.x series
804            - claws-mail-vcalendar-plugin <unfixed> (fork)
805    
806    libltdl3
807            - kdelibs <unfixed> (embed)
808            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
809            - synfig <unfixed> (embed)
810    
811    harfbuzz
812            - qt4-x11 <unfixed> (embed)
813    
814    libzip
815            - php5 <unfixed> (fork)
816            - odt2txt <unfixed> (embed; bug #523808)
817    
818    json.php (not packaged; should be replaced with php's built-in functions)
819            - moodle <unfixed>
820            - yui <unfixed>
821            - gallery2 <unfixed>
822            - dokuwiki <unfixed>
823            - typo3-src <unfixed>
824    
825    php-fpdf
826            - tcpdf <itp> (fork)
827            - moodle <unfixed>
828            - phpwiki <unfixed>
829            - egroupware <unfixed>
830            - ldap-account-manager <unfixed> (fork)
831    
832    tcpdf (itp: #495985)
833            - moodle <unfixed>
834            - phpmyadmin <unfixed>
835    
836    typo3
837            - moodle <unfixed>
838    
839    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
840            - moodle <unfixed>
841            - gosa <unfixed>
842    
843    php-ole (itp: #487558)
844            - moodle <unfixed>
845    
846    pieforms (http://www.catalyst.net.nz)
847            - mahara <unfixed>
848    
849    savant2 (http://phpsavant.com)
850            - egroupware <unfixed>
851    
852    rssparser (http://nwow.org)
853            - egroupware <unfixed>
854            - phpgroupware <unfixed>
855    
856    lcms
857            - openjdk-6 <unfixed> (fork)
858    
859    libphp-phplayersmenu
860            - diogenes <unfixed>
861            - phpldapadmin <unfixed>
862    
863    libphp-pclzip
864            - docvert <unfixed>
865            - moodle <unfixed>
866            - egroupware <unfixed>
867    
868    libphp-simplepie
869            - dokuwiki <unfixed>
870    
871    libphp-jpgraph
872            - egroupware <unfixed>
873    
874    php-simpletest
875            - moodle <unfixed>
876    
877    libpng
878            - iceweasel <unfixed> (embed)
879            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
880            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
881            - iceape 1.0.13~pre080614i-0etch1 (embed)
882            - xulrunner <unfixed> (embed)
883            NOTE: Debian 1.9.0.6 uses embedded copy
884            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
885            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
886            NOTE: Ubuntu only
887            - firefox-3.0 <unfixed> (embed)
888            NOTE: Ubuntu only
889            - firefox-3.1 <unfixed> (embed)
890            NOTE: Ubuntu only
891            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
892            NOTE: Ubuntu only
893            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
894            NOTE: Ubuntu only
895            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
896            NOTE: Ubuntu only
897    
898    irssi
899            - silc-client <unfixed> (embed)
900            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
901    
902    extc
903            - mtasc <unfixed> (embed)
904            - haxe <unfixed> (embed)
905    
906    swflib
907            - mtasc <unfixed> (embed)
908            - haxe <unfixed> (embed)
909    
910    libitext-java
911            - bouncycastle 2.1.4-1 (embed)
912    
913    python-ply
914            - pyke <unfixed> (embed)
915    
916    libdumbnet (libdnet upstream)
917            - nmap <unfixed> (fork)
918    
919    gcc-4.4
920            - gcc-mingw32 <unfixed> (embed)
921    
922    camlimages
923            - advi <unfixed> (embed)
924    
925    memcached
926            - memcachedb <unfixed> (embed)
927    
928    yajl (ITP: #537199)
929            - argyll <unfixed> (embed)
930            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
931    
932    libept:
933            - adept <unfixed> (embed; bug #540649)
934    
935    libvorbis:
936            - xulrunner <unfixed> (embed; bug #540959)
937    
938    php-net-dnsbl:
939            - serendipity <unfixed> (embed)
940    
941    php-onyx-rss:
942            - serendipity <unfixed> (embed)
943    
944    php-text-wiki:
945            - serendipity <unfixed> (embed)
946    
947    php-xml-rpc:
948            - serendipity <unfixed> (embed)
949    
950    xyssl (does not have a shared library)
951            - polarssl <unfixed> (fork)
952    
953    polarssl (does not have a shared library)
954            - pdkim <itp> (embed)
955            NOTE: pdkim ITP #543150

Legend:
Removed from v.5321  
changed lines
  Added in v.12663

  ViewVC Help
Powered by ViewVC 1.1.5