/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 6966 by nion, Sun Oct 14 23:45:12 2007 UTC revision 12515 by jmm-guest, Sat Aug 8 11:48:43 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16  silc-toolkit:  sort: static (linking statically against a lib)
17  silc-client (uses libsilc and libsilcclient)        embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)              thus might share parts of the source code)
20  dpkg        old-version (the package is an older version of essentially
21  rsync (somehow derived code base)                     the same code)
22  mozilla(?)  
23  Linux kernels  The srcpkg might be some string to identify the code if there is no
24  pvpgn (links dynamically since 1.7.8-2)  specific source package.
25  mrtg (links dynamically since 2.12.2-1)  
26  rpm  Everything up to the next line is ignored.
27    ---BEGIN
28  libbz2:  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  dpkg (statically linked)          NOTE: Fixed packages link to poppler library unless otherwise noted
30            - gpdf <removed>
31  libgadu/ekg:          [sarge] - gpdf <unfixed>
32  centericq          NOTE: has been replaced by evince in etch
33  gaim          - pdftohtml <unknown>
34  kopete (ships the code, but links dynamically in the Debian package)          [sarge] - pdftohtml <unfixed>
35  kadu (not packaged in Debian)          [etch] - pdftohtml <unfixed>
36  GNU gadu (not yet packaged in Debian)          NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38  xmlrpc: (which package is the "origin" of this code?)          - texlive-base 3.0-12 (embed)
39  drupal          - texlive-bin 2007-1 (embed)
40  phpgroupware          NOTE: links to poppler
41  egroupware          - koffice <unfixed> (embed; bug #436163)
42  phpwiki          - libextractor 0.5.12-1 (embed)
43  php4 (php-pear, IIRC this was reorganized some weeks ago?)          NOTE: libextractor is using its own pdf decoder now
44  tikiwiki          - pdfkit.framework 0.8-4 (embed)
45            - ipe <unfixed> (embed)
46  shtool: (affects build-time only)          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47  mysql-ocaml          - ruby-gnome2 <unknown> (embed)
48  php4          NOTE: copy only present in source but links to poppler
49            - pdfedit <unfixed> (embed; bug #510794)
50  mozilla:          - swftools <unfixed> (embed)
51  mozilla-firefox  
52  mozilla-thunderbird  ppmd
53  firefox (to be removed)          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)
54  thunderbird (to be removed)  
55  iceweasel  libevent
56  iceape          - transmission <unfixed> (embed; bug #529372)
57  icedove  
58  xulrunner  lrmi
59  nvu (no longer in Debian)          - read-edid 2.0.0-1 (embed; bug #495131)
60    
61  xli:  peercast
62  xloadimage          - gnome-peercast <unfixed> (embed)
63            NOTE: gnome-peercast may better be removed, see #466539
64  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
65  openmotif  silc-toolkit
66  xfree86/xorg (in libxpm)          - silc-client 1.1~beta6-1 (embed)
67    
68  kerberized apps with BSD origin:  icclib
69  krb4          - ghostscript <unfixed> (embed)
70  krb5          - argyll <unfixed> (embed)
71  heimdal  
72    dietlibc
73  grip: (which pkg is the origin?)          - ccontrol 0.9.1+20071204-1 (static)
74  libcdaudio  
75  grip  libmikmod
76  gnome-vfs (vfs2 as well?)          - sdl-mixer1.2 <unfixed> (embed)
77            TODO: report bug
78  fudforum:  
79  phpgroupware-fudforum  libiax
80  egroupware-fudforum (removed from egroupware after sarge)          - iaxmodem <unfixed> (embed)
81    
82  cvs:  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
83  gcvs (at least an additional script is included, check if there's more)          - dpkg <unfixed> (embed)
84            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
85  pcre:          - rsync <unfixed> (embed)
86  all pythons          NOTE: somehow derived code base
87  php4 (src included, but Debian package links dynamically)          - mono <unfixed> (embed)
88  analog (src included, but Debian package links dynamically)          TODO: check mozilla
89  libgoffice-1          - Linux kernels <unfixed> (embed)
90  vfu          - pvpgn 1.7.8-2 (embed)
91  tf5 (since 5.0beta7 the Debian package links dynamically)          - mrtg 2.12.2-1 (embed)
92            - rpm <unknown> (embed)
93  tiff:          NOTE: pinged anibal since when rpm was fixed
94  wxpythongtk (check, which debian pkg this is in)          - tuxcmd-modules <unfixed> (embed)
95  older kdegraphics/kpdf releases < 3.3 embedded a copy          - zsync <unfixed>
96            - tra <unfixed>
97  uudeview:          - sash <unfixed>
98  libconvert-uulib-perl          - nsis <unfixed>
99            - mseide-msegui <unfixed>
100  sqlite: (not affected by security vulnerabilities so far)          NOTE: mseide
101  amarok          - mirrordir <unfixed>
102            - poco <unfixed>
103  util-linux/mount:          - klibc <unfixed>
104  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - ghostscript <unfixed>
105            - freeimage <unfixed>
106  webmin:          - clamav <unfixed> (fork)
107  usermin (only in sarge)          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
108            - tuxonice-userui <unfixed>
109  fckeditor:          - plt-scheme <unfixed>
110  knowledgeroot          - perl <unfixed>
111            - paraview <unfixed>
112  sylpheed:          - gcvs <unfixed>
113  sylpheed-claws          - erlang <unfixed>
114            - dump <unfixed>
115  phpsysinfo:          - aide <unfixed> (static)
116  egroupware          - dar <unfixed> (static)
117  phpgroupware          - avfs <unfixed>
118            - fpc <unfixed>
119            - winff <unfixed>
120            NOTE: inherited from fpc, see #472304
121            - lazarus <unfixed>
122            NOTE: inherited from fpc, see #472304
123    
124    libbz2
125            - dpkg <unfixed> (static)
126    
127    libgadu:
128            - centericq <unfixed> (embed)
129            - gaim <unfixed> (embed)
130            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
131            - kdenetwork 4:3.3.2-5 (embed)
132            NOTE: from kdenetwork: kopete
133            - gadu <unfixed> (embed)
134            - ekg 1:1.8~rc0-1 (embed)
135            - kadu 0.6.0.2-3 (embed; bug #504430)
136            NOTE: gadu not packaged in Debian yet
137    
138    xmlrpc (which package is the "origin" of this code?)
139            - drupal <unfixed> (embed)
140            - phpgroupware <unfixed> (embed)
141            - egroupware <unfixed> (embed)
142            - phpwiki <unfixed> (embed)
143            - php4 <unfixed> (embed)
144            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
145    
146    shtool (affects build-time only)
147            - mysql-ocaml <unfixed> (embed)
148            - php4 <unfixed> (embed)
149    
150    mozilla source code
151            - mozilla-firefox <unfixed> (embed)
152            - mozilla-thunderbird <unfixed>
153            - firefox <removed>
154            - thunderbird <removed>
155            - iceweasel <unfixed> (embed)
156            - iceape <unfixed> (embed)
157            - icedove <unfixed> (embed)
158            - xulrunner <unfixed> (embed)
159            - nvu <removed> (embed)
160            - kompozer <unfixed> (embed; bug #532168)
161    
162    xli
163            - xloadimage <unfixed> (embed)
164    
165    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
166            - openmotif <unfixed> (embed)
167            - libxpm <unfixed> (embed)
168    
169    kerberized apps with BSD origin
170            - krb4 <unfixed> (embed)
171            - krb5 <unfixed> (embed)
172            - heimdal <unfixed> (embed)
173    
174    grip (which pkg is the origin?)
175            - libcdaudio <unfixed>
176            - grip <unfixed>
177            - gnome-vfs <unfixed>
178            TODO: check vfs2 as well
179    
180    fudforum
181            [etch] - phpgroupware <unfixed> (embed)
182            NOTE: phpgroupware-fudforum
183            [sarge] - egroupware-fudforum <removed> (embed)
184    
185    libbsd
186            - rdate 1:1.2-3 (embed)
187            - atheme-services
188            - libbsd-arc4random-perl
189            - isakmpd
190    
191    cvs
192            - gcvs <unfixed> (embed)
193            NOTE: see cvsunix/src in tarball
194    
195    pcre
196            - python* <unfixed> (embed)
197            - php4 <unknown> (embed)
198            - analog 2:5.23-0woody1 (embed)
199            - goffice <unfixed> (embed)
200            NOTE: libgoffice-*
201            - vfu 4.06-4.1 (embed; bug #450754)
202            - tf5 5.0beta7-1 (embed)
203            - monotone 0.43-1 (embed)
204            NOTE: this only affects versions >= 0.37
205            - glib2.0 2.15.2-1 (embed)
206            - apache2 2.0.53-4 (embed)
207            - exim4 4.10-0.srh20.12 (embed)
208            - yacas <unfixed> (embed)
209            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
210            - gtamsanalyzer.app 0.42-5 (embed)
211            - tin <unknown> (embed)
212            - kazehakase 0.5.2-1
213            - webkit <unfixed> (embed)
214            - qt4-x11 <unfixed> (embed)
215            NOTE: embedded via webkit copy
216    
217    tiff
218            - wxwindows2.4 2.2.1 (embed)
219    
220    uudeview
221            - libconvert-uulib-perl <unfixed> (embed)
222            - pan <unfixed> (embed)
223    
224    sqlite (not affected by security vulnerabilities so far)
225            - amarok <unfixed> (embed)
226            - monotone 0.43-1 (embed)
227            - iceweasel <unfixed> (embed)
228    
229    util-linux/mount
230            - loop-aes-utils <unfixed> (embed)
231            NOTE: contains code from util-linux' mount in the mount-aes-udeb
232    
233    webmin
234            - usermin <unknown> (embed)
235            [sarge] - usermin <unfixed> (embed)
236    
237    sylpheed
238            - sylpheed-claws <unfixed> (fork)
239    
240    phpsysinfo
241            - egroupware <unfixed> (embed)
242            - phpgroupware <unfixed> (embed)
243    
244    phpldapadmin
245            [sarge] - egroupware <unfixed> (embed)
246            NOTE: removed from egroupware after sarge
247    
248    chmlib
249            - kchmviewer <unknown> (embed)
250    
251    libavcodec/libavformat (source: ffmpeg)
252            - mplayer 1.0~rc2-14 (embed; bug #395252)
253            - kino 1.0.0-1
254            - vlc <not-affected> (Links dynamically since initial release)
255            - smilutils 0.3.0-10
256            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
257            - motion 3.1.19-1
258            - gstreamer0.10-ffmpeg 0.10.3-2
259            - xmovie <unfixed>
260            TODO: gimp-gap (potentially using ffmpeg code as well)
261    
262    faad2
263            - mplayer 1.0~rc2-20 (embed)
264    
265    mad MPEG decoding lib
266            - mad <unfixed> (embed)
267            - xine-lib <unfixed> (embed)
268    
 phpldapadmin:  
 egroupware (removed from egroupware after sarge)  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
269  libdts  libdts
270  xine-lib          - xine-lib <unfixed> (embed)
271    
 flac:  
272  flac  flac
273  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
274    
275  TODO evaluate:  liba52
276  gimp-gap (potentially using ffmpeg code as well)          - a52dec <unfixed> (embed)
277            - xine-lib <unfixed> (embed)
278    
279  uw-imap:  libmpeg2
280  pine          - mpeg2dec <unfixed> (embed)
281            - xine-lib <unfixed> (embed)
282    
283  imagemagick:  curl
284  graphicsmagick          - wget <unfixed> (embed)
285            NOTE: code for NTLM authentication
286    
287  halibut:  uw-imap
288  nsis          - pine <unfixed> (embed)
289            - alpine <unfixed> (embed)
290    
291  libghttp:  imagemagick
292  hotway          - graphicsmagick <unfixed> (fork)
293    
294  libsndfile:  python-urlgrabber
295  ardour          - mercurial <unfixed> (embed; bug #531062)
296    
297  glibmm2.4:  python-mechanize
298  ardour          - python-beautifulsoup <unfixed> (embed)
299    
300  libgnomecanvasmm2.6:  halibut
301  ardour          - nsis <unfixed> (fork)
302    
303  libsigc++-2.0:  libghttp
304  ardour          - hotway <unfixed> (embed)
305    
306  soundtouch:  libsndfile
307  ardour          - ardour 1:2.7.1-1 (embed)
308    
309  libmms:  glibmm2.4
310  xine-lib          - ardour 1:2.7.1-1 (embed)
 mimms  
   
 FCKeditor:  
 knowledgeroot  
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
311    
312  gzip:  libgnomecanvasmm2.6
313  linux-kernel (lib/inflate.c)          - ardour 1:2.7.1-1 (embed)
 klibc (based on linux-kernel gzip code)  
 busybox  
314    
315  ffmpeg:  libsigc++-2.0
316  mplayer (#395252)          - ardour 1:2.7.1-1 (embed)
317    
318  neon:  soundtouch
319  cadaver (all, but being worked on: #188381)          - ardour 1:2.7.1-1 (embed)
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
320    
321  libmodplug:  libmms
322  gst-plugins-bad0.10          - xine-lib <unfixed> (embed)
323            - mimms <unfixed> (embed)
324    
325  libvncserver:  fckeditor
326  vino          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
327            - moin 1.8.2-2 (embed; bug #452599)
328            - karrigell <removed> (embed; bug #452598)
329            - gforge 4.6.99+svn6225-1 (embed)
330            - request-tracker3.8 <unfixed> (embed)
331    
332  putty:  ipatlas (not packaged in Debian)
333  filezilla          - moodle <unfixed> (embed; bug #507185)
334    
335  tinyxml (not packaged in Debian):  libphp-phpmailer
336  filezilla          - moodle <unfixed> (embed; bug #507185)
337            - mahara <unfixed> (embed)
338            - symfony <unfixed> (embed)
339            [etch] - phpgroupware <unfixed> (embed)
340            NOTE: phpgroupware-felamimail is only in etch
341            - egroupware <unfixed> (embed; bug #504283)
342            - glpi <unfixed>
343    
344  gv:  htmlArea (not packaged in Debian)
345  evince (ps/ tree from gv 3.5.8)          - moodle <unfixed> (embed)
 evince-gtk (not packaged in Debian)  
346    
347  libXbae:  giflib:
348  libpawlib2-lesstif package (from Cernlib)          - wine <unfixed> (embed; bug #466181)
349    
350  libXaw:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
351  libpawlib2-lesstif package (from Cernlib)          - moodle <unfixed> (embed)
352    
353  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  smarty:
354            - moodle 1.8.2-2 (embed; bug #471158)
355            - gallery2 2.2.5-2 (embed; bug #471160)
356            - mahara 0.9.2-2 (embed; bug #471201)
357            - gosa 2.4beta1-1 (embed; bug #471200)
358    
359  libgd2:  TinyMCE
360  graphviz (lib/gd seems to be 2.0.33)          - wordpress 2.5.1-3 (embed; bug #478257)
361            - moodle <unfixed> (embed; bug #507185)
362  rar:          - knowledgeroot <unfixed> (embed)
363  unrar-nonfree          - joomla <itp> (bug #326398)
364    
365  unrar-free: (maybe this code is derived from the original rar, too?)  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
366  clamav (seems to be disabled in default config)          - scite <unfixed> (embed)
367            - qscintilla <unfixed> (embed)
368  mplayer (DirectMedia Object loader):          - qscintilla2 <unfixed> (embed)
369  xine-lib (src/libw32dll/)          - geany <unfixed> (fork)
370  vlc (modules/codec/dmo/)          - anjuta <unfixed> (embed)
371    
372  libwpd (WordPerfect converter):  libphp-adodb
373  openoffice.org          - moodle <unfixed> (embed; bug #507185)
374            NOTE: also AdoDB-XML Schema
375            - gallery2 <unfixed> (embed)
376            - phppgadmin <unfixed> (embed)
377            - egroupware <unfixed> (embed)
378            - phpwiki <unfixed> (embed)
379            - torrentflux 2.0beta1-2 (embed)
380            - ipplan <unfixed> (embed)
381            - typo3-src <unfixed> (embed)
382            - cacti <unknown> (embed)
383            [sarge] - cacti <unfixed> (embed)
384            NOTE: dependency exists, but internal version is used
385            - gforge 4.7~rc2-6 (embed)
386            - mahara <unfixed> (embed)
387    
388    gzip
389            - linux-kernel <unfixed> (embed)
390            NOTE: lib/inflate.c
391            - klibc <unfixed> (embed)
392            NOTE: based on linux-kernel gzip code
393            - busybox <unfixed> (embed)
394    
395    neon
396            - cadaver <unfixed> (embed; bug #188381)
397            - gnome-vfs2 <unfixed> (embed; bug #395874)
398            - litmus <unfixed> (embed; #395875)
399            [sarge] - screem <unfixed> (embed)
400            - sitecopy <unfixed> (embed; bug #395876)
401            [etch] - tla <unfixed> (embed; bug #395877)
402            [sarge] - tla <unfixed> (embed; bug #395877)
403    
404    libmodplug
405            - gst-plugins-bad0.10 <unfixed> (embed)
406    
407    libvncserver
408            - vino <unfixed> (embed)
409    
410    putty
411            - filezilla <unfixed> (embed)
412    
413    tinyxml (not packaged in Debian)
414            - filezilla <unfixed>
415    
416    gv
417            - evince <unfixed> (embed)
418            NOTE: ps/ tree from gv 3.5.8
419            - evince-gtk <unfixed> (embed)
420            NOTE: not packaged in Debian
421    
422    libXbae
423            [etch] - libpawlib2-lesstif <unfixed> (embed)
424            NOTE: from Cernlib
425    
426    libgtkhtml
427            - claws-mail-html2-viewer <unfixed> (fork)
428    
429    libXaw
430            [etch] - libpawlib2-lesstif <unfixed>
431            NOTE: from Cernlib
432            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
433    
434    libgd2
435            - graphviz <unfixed> (embed)
436            NOTE: lib/gd seems to be 2.0.33
437            - wml <unfixed> (embed)
438            - libwmf <unfixed> (embed)
439            NOTE: derived from gd 1.6.3
440    
441    rar
442            - unrar-nonfree <unfixed> (embed)
443    
444    unrar-free (maybe this code is derived from the original rar, too?)
445            - clamav <unfixed> (embed)
446            NOTE: seems to be disabled in default config
447    
448    mplayer (DirectMedia Object loader)
449            - xine-lib <unfixed> (embed)
450            NOTE: src/libw32dll/
451            - vlc <unfixed> (embed)
452            NOTE: modules/codec/dmo/
453            - mplayer 1.0~rc2-20 (embed)
454    
455    libwpd (WordPerfect converter)
456            - openoffice.org <unfixed> (embed)
457    
458    fsplib (http://sourceforge.net/projects/fsp/)
459            - gftp <unfixed> (embed)
460            NOTE: lib/fsplib version 0.3
461    
462    sprng
463            - tree-puzzle <unfixed> (embed)
464    
465    librpcsecgss
466            - krb5 <unfixed> (embed)
467    
468    jasper
469            - ghostscript <unfixed> (embed)
470            - gs-gpl <unfixed> (embed)
471    
472    libiris
473            - psi <unfixed> (embed)
474            - kdenetwork <unfixed> (embed)
475            NOTE: kopete embeds libiris but links dynamically to libidn
476            - kdegames <unfixed> (embed)
477            NOTE: ksirk/kde4
478    
479    libidn
480            - monotone 0.43-1 (embed)
481            - psi <unfixed> (embed)
482            NOTE: psi embeds libiris which embeds libidn
483            - kdegames <unfixed> (embed)
484            NOTE: kdegames/kde4 embeds libiris which embeds libidn
485    
486    liblua
487            - monotone 0.43-1 (embed)
488            - nmap <unfixed> (embed; bug #527997)
489            NOTE: fixed upstream as of nmap svn rev13336.
490    
491    libbotan
492            - monotone 0.43-1 (embed)
493    
494    NetXX
495            - monotone 0.43-1 (embed)
496    
497    libgc
498            - mono <unfixed> (embed)
499    
500    lzma
501            - p7zip <unfixed> (embed)
502    
503    lzo
504            - grub2 <unfixed> (embed)
505    
506    yassl
507            - mysql-dfsg-5.0 <unfixed> (embed)
508    
509    pax code
510            - tar <unfixed> (embed)
511            - cpio <unfixed> (embed)
512    
513    t1lib
514            - tetex-bin 2.0.2-1 (embed)
515            - texlive-bin <unknown> (embed)
516    
517    guichan
518            - boswars <unfixed> (embed)
519            NOTE: maintainer notified us, working on it
520    
521    tolua
522            - boswars <unfixed> (embed)
523            NOTE: maintainer notified us, working on it
524    
525    asio-dev
526            - luxrender <unfixed> (embed)
527            NOTE: maintainer notified us, working on it
528            NOTE: may be merged with boost "soon"
529    
530  fsplib (http://sourceforge.net/projects/fsp/):  xine-lib
531  gftp (lib/fsplib version 0.3)          - vlc <unfixed> (embed)
532            NOTE: only parts included in modules/access/rtsp
533    
534  librpcsecgss:  netpbm
535  krb5          - tcl8.3 <unfixed> (embed)
536            - tcl8.4 <unfixed> (embed)
537            - tcl8.5 <unfixed> (embed)
538            NOTE: generic/tkImgGIF.c
539    
540    tk8.5
541            - tk8.0 <removed> (old-version)
542            - tk8.3 <unfixed> (old-version)
543            - tk8.4 <unfixed> (old-version)
544            - perl-tk <unfixable> (fork)
545    
546    samba
547            - mc 2:4.6.2~git20080311-1 (embed)
548            NOTE: maintainer is aware of this, currently searching a solution
549    
550    plib1.8.4c2
551            - boson <unfixed> (fork)
552            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
553    
554    fribidi
555            - quesoglc <unfixed> (embed)
556            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
557    
558    glew
559            - quesoglc <unfixed> (embed; bug #489341)
560            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
561    
562    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
563            - transcend <unfixed> (embed)
564            - cultivation <unfixed> (embed)
565            - passage <unfixed> (embed)
566            - gravitation <unfixed> (embed)
567    
568    tar
569            - libarchive <unfixed> (embed)
570            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
571    
572    cpio
573            - libarchive <unfixed> (embed)
574            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
575    
576    webkit
577            - qt4-x11 <unfixed> (embed)
578    
579    ftgl
580            - blender 2.46+dfsg-1 (embed)
581    
582    wv
583            - abiword <unfixed>
584    
585    qemu
586            - kvm <unfixed> (embed)
587            - xen-3 <unfixed> (embed)
588            - xen-unstable <unfixed> (embed)
589    
590    vgabios
591            - kvm <unfixed> (embed; bug #489442)
592    
593    bochs
594            - kvm <unfixed> (embed; bug #489442)
595    
596    speex
597            - vorbis-tools <unfixed> (embed)
598            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
599            - gst-plugins-good0.10 <unfixed> (embed)
600            - xine-lib <unfixed> (embed)
601            - libfishsound <unfixed> (embed)
602            - libannodex <unfixed> (embed)
603            - vlc <unfixed> (embed)
604            - xmms-speex <unfixed> (embed)
605            - libsdl-sound1.2 <unfixed> (embed)
606            - sweep <unfixed> (embed)
607    
608    libreadline
609            - magic <unfixed> (old-version)
610            NOTE: magic is currently an RFS
611    
612    opcode
613            - ode <unfixed> (embed)
614            NOTE: opcode is not a package in debian, it is just embedded
615            NOTE: http://www.codercorner.com/Opcode.htm
616    
617    gimpact
618            - ode <unfixed> (embed)
619            NOTE: gimpact is not a package in debian, it is just embedded
620            NOTE: http://gimpact.sf.net
621    
622    mochikit
623            - mahara <unfixed> (embed)
624            NOTE: they require extra patches, still unmerged upstream
625            - ntop <unfixed> (embed)
626            - coherence <unfixed> (embed)
627            NOTE: python-coherence
628            - paste <unfixed> (embed)
629            NOTE: python-paste
630            - turbogears <unfixed> (embed)
631            NOTE: python-turbogears
632            - plone3 <unfixed> (embed)
633            NOTE: zope-plone3
634    
635    prototype
636            - netbeans-ide <unfixed> (embed)
637            - auth2db-frontend <unfixed> (embed)
638            - webcit <unfixed> (embed)
639            NOTE: citadel-webcit
640            - asterisk <unfixed> (embed)
641            - doc-iana <unfixed> (embed)
642            - libaws <unfixed> (embed)
643            NOTE: libaws-doc
644            - libgettext-ruby <unfixed> (embed)
645            NOTE: libgettext-ruby-data
646            - libjson-ruby <unfixed> (embed)
647            NOTE: libjson-ruby-doc
648            - lucene2 <unfixed> (embed)
649            NOTE: liblucene2-java-doc
650            - libopenid-ruby <unfixed> (embed)
651            - solr <unfixed> (embed)
652            NOTE: solr-common
653            - glpi <unfixed> (embed)
654            - hobbix <unfixed> (embed)
655            - mnemo2 <unfixed> (embed)
656            - nag2 <unfixed> (embed)
657            - knowledgeroot <unfixed> (embed)
658            - mediatomb <unfixed> (embed)
659            NOTE: mediatomb-common
660            - mt-daapd <unfixed> (embed)
661            - op-panel <unfixed> (embed)
662            - ebug-http <unfixed> (embed)
663            - phpgedview <removed> (embed)
664            - poker-network <unfixed> (embed)
665            NOTE: poker-web
666            - webhelpers <unfixed> (embed)
667            NOTE: python-webhelpers
668            - qwik <unfixed> (embed)
669            - rails <unfixed> (embed)
670            - typo3-src <unfixed> (embed)
671            - wordpress <unfixed> (embed)
672            - zope <unfixed> (embed)
673            NOTE: zope-plone3
674            - smokeping <unfixed> (embed)
675            - ampache 3.4.1-2 (embed)
676            - exaile <unfixed> (embed)
677            - hobix <unfixed> (embed)
678            - pixelpost <unfixed> (embed)
679            - symfony <unfixed> (embed)
680            NOTE: it's been said that there are custom changes
681            - zabbix <unfixed> (embed)
682            NOTE: zabbix-frontend-php
683            - turba2 <unfixed> (embed)
684    
685    gdb
686            - insight <unfixed> (embed)
687    
688    e2fsprogs
689            - ldiskfsprogs <unfixable> (fork)
690    
691    quazip (not packaged in Debian)
692            - qcake <unfixed> (embed)
693            NOTE: starting with upstream version 0.6.4
694    
695    exo
696            - pcmanfm <unfixed> (embed; bug #499677)
697            NOTE: slightly modified source code
698    
699    java
700            - openjdk-6 <unfixed>
701            - sun-java5 <unfixed>
702            - sun-java6 <unfixed>
703    
704    libphp-snoopy
705            - ampache 3.4.1-2 (embed; bug #504169)
706            - mahara 1.0.5-2 (embed; bug #504170)
707            - pixelpost <unfixed> (embed; bug #504171)
708            - mediamate 0.9.3.6-5 (embed; bug #504172)
709            - opendb <unfixed> (embed; bug #504173)
710            - wordpress 2.5.1-9 (embed; bug #443948)
711            - moodle <unfixed> (embed; bug #507185)
712            [etch] - phpgroupware <unfixed> (embed)
713            NOTE: phpgroupware-felamimail
714            - magpierss 0.72-3 (embed; bug #431089)
715    
716    jquery
717            - zekr <unfixed> (embed)
718            - wordpress <unfixed> (embed)
719            - yocto-reader <unfixed> (embed)
720            - textpattern <unfixed> (embed)
721            - genshi 0.5.1-1 (embed)
722            NOTE: compressed file under examples/ dir
723            - prewikka <unfixed> (embed)
724            - libramaze-ruby <unfixed> (embed)
725            - drupal5 <unfixed> (embed)
726            - b2evolution <unfixed> (embed)
727            - wesnoth <unfixed> (embed)
728    
729    tablesorter (jquery plugin, not packaged yet)
730            - wesnoth <unfixed> (embed)
731    
732    kses
733            - wordpress <unfixed> (embed; bug #504242)
734            NOTE: their copy has all methods renamed to wp_<foo>
735            - moodle <unfixed> (embed; bug #507185)
736            - egroupware <unfixed> (embed)
737    
738    magpierss
739            - wordpress <unfixed> (embed; bug #504242)
740            - moodle <unfixed>
741    
742    php-gettext
743            - wordpress <unfixed> (embed; bug #504242)
744    
745    libphp-ixr (name may change, it is the Incutio XML-RPC)
746            - wordpress <unfixed> (embed; bug #504242)
747            - dokuwiki <unfixed> (embed)
748            - textpattern <unfixed> (embed)
749    
750    libphp-cas
751            - glpi <unfixed> (embed)
752            - moodle <unfixed> (embed; bug #496069)
753    
754    scriptaculous
755            - glpi <unfixed> (embed)
756            - libaws <unfixed> (embed)
757            NOTE: libaws-doc
758            - op-panel <unfixed> (embed)
759            - symfony <unfixed> (embed)
760            NOTE: maintainer says there are extra incompatible changes required
761            - pixelpost <unfixed> (embed)
762            - webhelpers <unfixed> (embed)
763            NOTE: python-webhelpers
764            - qwik <unfixed> (embed)
765            - smokeping <unfixed> (embed)
766            - turba2 <unfixed> (embed)
767            - typo3-src 4.2.3-1 (embed)
768    
769    libmarkdown-php
770            - moodle <unfixed> (embed; bug #507185)
771            - pixelpost <unfixed> (embed)
772    
773    php-openid
774            - wordpress-openid <itp> (embed)
775    
776    geshi
777            - dokuwiki 0.0.20080505-3.1 (embed)
778            - pgfouine 1.0-1.1 (embed)
779            - websvn 2.1.0-1 (embed)
780    
781    webcalendar
782            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
783    
784    libical
785            - kdepim <unfixed> (fork)
786            - kdepimlibs <unfixed> (fork)
787            NOTE: fixed in KDE4 post 4.1.x series
788            - claws-mail-vcalendar-plugin <unfixed> (fork)
789    
790    libltdl3
791            - kdelibs <unfixed> (embed)
792            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
793            - synfig <unfixed> (embed)
794    
795    harfbuzz
796            - qt4-x11 <unfixed> (embed)
797    
798    libzip
799            - php5 <unfixed> (fork)
800            - odt2txt <unfixed> (embed; bug #523808)
801    
802    json.php (not packaged; should be replaced with php's built-in functions)
803            - moodle <unfixed>
804            - yui <unfixed>
805            - gallery2 <unfixed>
806            - dokuwiki <unfixed>
807            - typo3-src <unfixed>
808    
809    php-fpdf
810            - tcpdf <itp> (fork)
811            - moodle <unfixed>
812            - phpwiki <unfixed>
813            - egroupware <unfixed>
814            - ldap-account-manager <unfixed> (fork)
815    
816    tcpdf (itp: #495985)
817            - moodle <unfixed>
818            - phpmyadmin <unfixed>
819    
820    typo3
821            - moodle <unfixed>
822    
823    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
824            - moodle <unfixed>
825            - gosa <unfixed>
826    
827    php-ole (itp: #487558)
828            - moodle <unfixed>
829    
830    pieforms (http://www.catalyst.net.nz)
831            - mahara <unfixed>
832    
833    savant2 (http://phpsavant.com)
834            - egroupware <unfixed>
835    
836    rssparser (http://nwow.org)
837            - egroupware <unfixed>
838            - phpgroupware <unfixed>
839    
840    lcms
841            - openjdk-6 <unfixed> (fork)
842    
843    libphp-phplayersmenu
844            - diogenes <unfixed>
845            - phpldapadmin <unfixed>
846    
847    libphp-pclzip
848            - docvert <unfixed>
849            - moodle <unfixed>
850            - egroupware <unfixed>
851    
852    libphp-simplepie
853            - dokuwiki <unfixed>
854    
855    libphp-jpgraph
856            - egroupware <unfixed>
857    
858    php-simpletest
859            - moodle <unfixed>
860    
861    libpng
862            - iceweasel <unfixed> (embed)
863            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
864            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
865            - iceape 1.0.13~pre080614i-0etch1 (embed)
866            - xulrunner <unfixed> (embed)
867            NOTE: Debian 1.9.0.6 uses embedded copy
868            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
869            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
870            NOTE: Ubuntu only
871            - firefox-3.0 <unfixed> (embed)
872            NOTE: Ubuntu only
873            - firefox-3.1 <unfixed> (embed)
874            NOTE: Ubuntu only
875            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
876            NOTE: Ubuntu only
877            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
878            NOTE: Ubuntu only
879            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
880            NOTE: Ubuntu only
881    
882    irssi
883            - silc-client <unfixed> (embed)
884            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
885    
886    extc
887            - mtasc <unfixed> (embed)
888            - haxe <unfixed> (embed)
889    
890    swflib
891            - mtasc <unfixed> (embed)
892            - haxe <unfixed> (embed)
893    
894    libitext-java
895            - bouncycastle 2.1.4-1 (embed)
896    
897    python-ply
898            - pyke <unfixed> (embed)
899    
900    libdumbnet (libdnet upstream)
901            - nmap <unfixed> (fork)
902    
903    gcc-4.4
904            - gcc-mingw32 <unfixed> (embed)
905    
906    camlimages
907            - advi <unfixed> (embed)
908    
909    memcached
910            - memcachedb <unfixed> (embed)
911    
912    yajl (ITP: #537199)
913            - argyll <unfixed> (embed)
914            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html

Legend:
Removed from v.6966  
changed lines
  Added in v.12515

  ViewVC Help
Powered by ViewVC 1.1.5