/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 6966 by nion, Sun Oct 14 23:45:12 2007 UTC revision 12625 by jmm-guest, Mon Aug 17 18:38:10 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp> or <unknown> if the version number can not be determined
15            <unfixable> for unavoidable cases (e.g., forks that add real value)
16  silc-toolkit:  sort: static (linking statically against a lib)
17  silc-client (uses libsilc and libsilcclient)        embed (embedding a copy of the library into another source package)
18          fork (the package is not just embedding code but it is a fork and
19  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)              thus might share parts of the source code)
20  dpkg        old-version (the package is an older version of essentially
21  rsync (somehow derived code base)                     the same code)
22  mozilla(?)  
23  Linux kernels  The srcpkg might be some string to identify the code if there is no
24  pvpgn (links dynamically since 1.7.8-2)  specific source package.
25  mrtg (links dynamically since 2.12.2-1)  
26  rpm  Everything up to the next line is ignored.
27    ---BEGIN
28  libbz2:  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  dpkg (statically linked)          NOTE: Fixed packages link to poppler library unless otherwise noted
30            - gpdf <removed>
31  libgadu/ekg:          [sarge] - gpdf <unfixed>
32  centericq          NOTE: has been replaced by evince in etch
33  gaim          - pdftohtml <unknown>
34  kopete (ships the code, but links dynamically in the Debian package)          [sarge] - pdftohtml <unfixed>
35  kadu (not packaged in Debian)          [etch] - pdftohtml <unfixed>
36  GNU gadu (not yet packaged in Debian)          NOTE: has been replaced by poppler-utils
37            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38  xmlrpc: (which package is the "origin" of this code?)          - texlive-base 3.0-12 (embed)
39  drupal          - texlive-bin 2007-1 (embed)
40  phpgroupware          NOTE: links to poppler
41  egroupware          - koffice <unfixed> (embed; bug #436163)
42  phpwiki          - libextractor 0.5.12-1 (embed)
43  php4 (php-pear, IIRC this was reorganized some weeks ago?)          NOTE: libextractor is using its own pdf decoder now
44  tikiwiki          - pdfkit.framework 0.8-4 (embed)
45            - ipe <unfixed> (embed)
46  shtool: (affects build-time only)          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
47  mysql-ocaml          - ruby-gnome2 <unknown> (embed)
48  php4          NOTE: copy only present in source but links to poppler
49            - pdfedit <unfixed> (embed; bug #510794)
50  mozilla:          - swftools <unfixed> (embed)
51  mozilla-firefox  
52  mozilla-thunderbird  ppmd
53  firefox (to be removed)          - libcomplearn-mod-ppmd <unfixed> (fork)
54  thunderbird (to be removed)          NOTE: discussion in #458152
55  iceweasel  
56  iceape  libevent
57  icedove          - transmission 1.71-1 (embed; bug #529372)
58  xulrunner  
59  nvu (no longer in Debian)  lrmi
60            - read-edid 2.0.0-1 (embed; bug #495131)
61  xli:  
62  xloadimage  peercast
63            - gnome-peercast <unfixed> (embed)
64  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          NOTE: gnome-peercast may better be removed, see #466539
65  openmotif  
66  xfree86/xorg (in libxpm)  silc-toolkit
67            - silc-client 1.1~beta6-1 (embed)
68  kerberized apps with BSD origin:  
69  krb4  icclib
70  krb5          - ghostscript <unfixed> (embed)
71  heimdal          - argyll <unfixed> (embed)
72    
73  grip: (which pkg is the origin?)  dietlibc
74  libcdaudio          - ccontrol 0.9.1+20071204-1 (static)
75  grip  
76  gnome-vfs (vfs2 as well?)  libmikmod
77            - sdl-mixer1.2 <unfixed> (embed)
78  fudforum:          TODO: report bug
79  phpgroupware-fudforum  
80  egroupware-fudforum (removed from egroupware after sarge)  libiax
81            - iaxmodem <unfixed> (embed)
82  cvs:  
83  gcvs (at least an additional script is included, check if there's more)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
84            - dpkg <unfixed> (embed)
85  pcre:          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
86  all pythons          - rsync <unfixed> (embed)
87  php4 (src included, but Debian package links dynamically)          NOTE: somehow derived code base
88  analog (src included, but Debian package links dynamically)          - mono <unfixed> (embed)
89  libgoffice-1          TODO: check mozilla
90  vfu          - Linux kernels <unfixed> (embed)
91  tf5 (since 5.0beta7 the Debian package links dynamically)          - pvpgn 1.7.8-2 (embed)
92            - mrtg 2.12.2-1 (embed)
93  tiff:          - rpm <unknown> (embed)
94  wxpythongtk (check, which debian pkg this is in)          NOTE: pinged anibal since when rpm was fixed
95  older kdegraphics/kpdf releases < 3.3 embedded a copy          - tuxcmd-modules <unfixed> (embed)
96            - zsync <unfixed>
97  uudeview:          - tra <unfixed>
98  libconvert-uulib-perl          - sash <unfixed>
99            - nsis <unfixed>
100  sqlite: (not affected by security vulnerabilities so far)          - mseide-msegui <unfixed>
101  amarok          NOTE: mseide
102            - mirrordir <unfixed>
103  util-linux/mount:          - poco <unfixed>
104  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - klibc <unfixed>
105            - ghostscript <unfixed>
106  webmin:          - freeimage <unfixed>
107  usermin (only in sarge)          - clamav <unfixed> (fork)
108            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
109  fckeditor:          - tuxonice-userui <unfixed>
110  knowledgeroot          - plt-scheme <unfixed>
111            - perl <unfixed>
112  sylpheed:          - paraview <unfixed>
113  sylpheed-claws          - gcvs <unfixed>
114            - erlang <unfixed>
115  phpsysinfo:          - dump <unfixed>
116  egroupware          - aide <unfixed> (static)
117  phpgroupware          - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124    
125    dulwich
126            - hg-git <unfixed> (embed; bug #541996)
127    
128    libvigraimpex
129            - hugin <unfixed> (embed)
130            - enblend-fuse <unfixed> (embed)
131    
132    libbz2
133            - dpkg <unfixed> (static)
134    
135    libgadu:
136            - centericq <unfixed> (embed)
137            - gaim <unfixed> (embed)
138            - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)
139            - kdenetwork 4:3.3.2-5 (embed)
140            NOTE: from kdenetwork: kopete
141            - gadu <unfixed> (embed)
142            - ekg 1:1.8~rc0-1 (embed)
143            - kadu 0.6.0.2-3 (embed; bug #504430)
144            NOTE: gadu not packaged in Debian yet
145    
146    xmlrpc (which package is the "origin" of this code?)
147            - drupal <unfixed> (embed)
148            - phpgroupware <unfixed> (embed)
149            - egroupware <unfixed> (embed)
150            - phpwiki <unfixed> (embed)
151            - php4 <unfixed> (embed)
152            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
153    
154    shtool (affects build-time only)
155            - mysql-ocaml <unfixed> (embed)
156            - php4 <unfixed> (embed)
157    
158    mozilla source code
159            - mozilla-firefox <unfixed> (embed)
160            - mozilla-thunderbird <unfixed>
161            - firefox <removed>
162            - thunderbird <removed>
163            - iceweasel <unfixed> (embed)
164            - iceape <unfixed> (embed)
165            - icedove <unfixed> (embed)
166            - xulrunner <unfixed> (embed)
167            - nvu <removed> (embed)
168            - kompozer <unfixed> (embed; bug #532168)
169    
170    xli
171            - xloadimage <unfixed> (embed)
172    
173    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
174            - openmotif <unfixed> (embed)
175            - libxpm <unfixed> (embed)
176    
177    kerberized apps with BSD origin
178            - krb4 <unfixed> (embed)
179            - krb5 <unfixed> (embed)
180            - heimdal <unfixed> (embed)
181    
182    grip (which pkg is the origin?)
183            - libcdaudio <unfixed>
184            - grip <unfixed>
185            - gnome-vfs <unfixed>
186            TODO: check vfs2 as well
187    
188    fudforum
189            [etch] - phpgroupware <unfixed> (embed)
190            NOTE: phpgroupware-fudforum
191            [sarge] - egroupware-fudforum <removed> (embed)
192    
193    libbsd
194            - rdate 1:1.2-3 (embed)
195            - atheme-services
196            - libbsd-arc4random-perl
197            - isakmpd
198    
199    cvs
200            - gcvs <unfixed> (embed)
201            NOTE: see cvsunix/src in tarball
202    
203    pcre
204            - python* <unfixed> (embed)
205            - php4 <unknown> (embed)
206            - analog 2:5.23-0woody1 (embed)
207            - goffice <unfixed> (embed)
208            NOTE: libgoffice-*
209            - vfu 4.06-4.1 (embed; bug #450754)
210            - tf5 5.0beta7-1 (embed)
211            - monotone 0.43-1 (embed)
212            NOTE: this only affects versions >= 0.37
213            - glib2.0 2.15.2-1 (embed)
214            - apache2 2.0.53-4 (embed)
215            - exim4 4.10-0.srh20.12 (embed)
216            - yacas <unfixed> (embed)
217            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
218            - gtamsanalyzer.app 0.42-5 (embed)
219            - tin <unknown> (embed)
220            - kazehakase 0.5.2-1
221            - webkit <unfixed> (embed)
222            - qt4-x11 <unfixed> (embed)
223            NOTE: embedded via webkit copy
224    
225    tiff
226            - wxwindows2.4 2.2.1 (embed)
227    
228    uudeview
229            - libconvert-uulib-perl <unfixed> (embed)
230            - pan <unfixed> (embed)
231    
232    sqlite (not affected by security vulnerabilities so far)
233            - amarok <unfixed> (embed)
234            - monotone 0.43-1 (embed)
235            - iceweasel <unfixed> (embed)
236    
237    util-linux/mount
238            - loop-aes-utils <unfixed> (embed)
239            NOTE: contains code from util-linux' mount in the mount-aes-udeb
240    
241    webmin
242            - usermin <unknown> (embed)
243            [sarge] - usermin <unfixed> (embed)
244    
245    sylpheed
246            - sylpheed-claws <unfixed> (fork)
247    
248    phpsysinfo
249            - egroupware <unfixed> (embed)
250            - phpgroupware <unfixed> (embed)
251    
252    phpldapadmin
253            [sarge] - egroupware <unfixed> (embed)
254            NOTE: removed from egroupware after sarge
255    
256    chmlib
257            - kchmviewer <unknown> (embed)
258    
259    libavcodec/libavformat (source: ffmpeg)
260            - mplayer 1.0~rc2-14 (embed; bug #395252)
261            - kino 1.0.0-1
262            - vlc <not-affected> (Links dynamically since initial release)
263            - smilutils 0.3.0-10
264            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
265            - motion 3.1.19-1
266            - gstreamer0.10-ffmpeg 0.10.3-2
267            - xmovie <unfixed>
268            TODO: gimp-gap (potentially using ffmpeg code as well)
269    
270    faad2
271            - mplayer 1.0~rc2-20 (embed)
272            - avifile <unfixed> (embed; bug #538750)
273    
274    mad MPEG decoding lib
275            - mad <unfixed> (embed)
276            - xine-lib <unfixed> (embed)
277    
 phpldapadmin:  
 egroupware (removed from egroupware after sarge)  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 gstreamer0.10-ffmpeg  
 xmovie  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
278  libdts  libdts
279  xine-lib          - xine-lib <unfixed> (embed)
280    
 flac:  
281  flac  flac
282  xine-lib          - xine-lib <unfixed> (embed)
283    
284  liba52:  liba52
285  a52dec          - a52dec <unfixed> (embed)
286  xine-lib          - xine-lib <unfixed> (embed)
287    
288  libmpeg2:  libmpeg2
289  mpeg2dec          - mpeg2dec <unfixed> (embed)
290  xine-lib          - xine-lib <unfixed> (embed)
291    
292  curl:  curl
293  wget (code for NTLM authentication)          - wget <unfixed> (embed)
294            NOTE: code for NTLM authentication
295    
296  TODO evaluate:  uw-imap
297  gimp-gap (potentially using ffmpeg code as well)          - pine <unfixed> (embed)
298            - alpine <unfixed> (embed)
299    
300  uw-imap:  imagemagick
301  pine          - graphicsmagick <unfixed> (fork)
302    
303  imagemagick:  python-urlgrabber
304  graphicsmagick          - mercurial <unfixed> (embed; bug #531062)
305    
306  halibut:  python-mechanize
307  nsis          - python-beautifulsoup <unfixed> (embed)
308    
309  libghttp:  halibut
310  hotway          - nsis <unfixed> (fork)
311    
312  libsndfile:  libghttp
313  ardour          - hotway <unfixed> (embed)
314    
315  glibmm2.4:  libsndfile
316  ardour          - ardour 1:2.7.1-1 (embed)
317    
318  libgnomecanvasmm2.6:  glibmm2.4
319  ardour          - ardour 1:2.7.1-1 (embed)
320    
321  libsigc++-2.0:  libgnomecanvasmm2.6
322  ardour          - ardour 1:2.7.1-1 (embed)
323    
324  soundtouch:  libsigc++-2.0
325  ardour          - ardour 1:2.7.1-1 (embed)
326    
327  libmms:  soundtouch
328  xine-lib          - ardour 1:2.7.1-1 (embed)
 mimms  
329    
330  FCKeditor:  libmms
331  knowledgeroot          - xine-lib <unfixed> (embed)
332            - mimms <unfixed> (embed)
333    
334  Moodle contains lots of things:  fckeditor
335  AdoDB          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
336  AdoDB-XML Schema          - moin 1.8.2-2 (embed; bug #452599)
337  ipatlas          - karrigell <removed> (embed; bug #452598)
338  PHPMailer          - gforge 4.6.99+svn6225-1 (embed)
339  Smarty          - request-tracker3.8 <unfixed> (embed)
 htmlArea  
 TinyMCE  
 bennu  
340    
341  TinyMCE:  ipatlas (not packaged in Debian)
342  wordpress          - moodle <unfixed> (embed; bug #507185)
 moodle  
 knowledgeroot  
 joomla (ITP)  
343    
344  scintilla:  libphp-phpmailer
345  scite          - moodle <unfixed> (embed; bug #507185)
346  qscintilla          - mahara <unfixed> (embed)
347  geany          - symfony <unfixed> (embed)
348            [etch] - phpgroupware <unfixed> (embed)
349            NOTE: phpgroupware-felamimail is only in etch
350            - egroupware <unfixed> (embed; bug #504283)
351            - glpi <unfixed>
352    
353  libphp-adodb:  htmlArea (not packaged in Debian)
354  gallery2          - moodle <unfixed> (embed)
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
355    
356  gzip:  giflib:
357  linux-kernel (lib/inflate.c)          - wine <unfixed> (embed; bug #466181)
 klibc (based on linux-kernel gzip code)  
 busybox  
358    
359  ffmpeg:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
360  mplayer (#395252)          - moodle <unfixed> (embed)
361    
362  neon:  smarty:
363  cadaver (all, but being worked on: #188381)          - moodle 1.8.2-2 (embed; bug #471158)
364  gnome-vfs2 (#395874)          - gallery2 2.2.5-2 (embed; bug #471160)
365  litmus (#395875)          - mahara 0.9.2-2 (embed; bug #471201)
366  screem (sarge only)          - gosa 2.4beta1-1 (embed; bug #471200)
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
367    
368  libmodplug:  TinyMCE
369  gst-plugins-bad0.10          - wordpress 2.5.1-3 (embed; bug #478257)
370            - moodle <unfixed> (embed; bug #507185)
371  libvncserver:          - knowledgeroot <unfixed> (embed)
372  vino          - joomla <itp> (bug #326398)
373    
374  putty:  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
375  filezilla          - scite <unfixed> (embed)
376            - qscintilla <unfixed> (embed)
377  tinyxml (not packaged in Debian):          - qscintilla2 <unfixed> (embed)
378  filezilla          - geany <unfixed> (fork)
379            - anjuta <unfixed> (embed)
380  gv:  
381  evince (ps/ tree from gv 3.5.8)  libphp-adodb
382  evince-gtk (not packaged in Debian)          - moodle <unfixed> (embed; bug #507185)
383            NOTE: also AdoDB-XML Schema
384  libXbae:          - gallery2 <unfixed> (embed)
385  libpawlib2-lesstif package (from Cernlib)          - phppgadmin <unfixed> (embed)
386            - egroupware <unfixed> (embed)
387  libXaw:          - phpwiki <unfixed> (embed)
388  libpawlib2-lesstif package (from Cernlib)          - torrentflux 2.0beta1-2 (embed)
389            - ipplan <unfixed> (embed)
390  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)          - typo3-src <unfixed> (embed)
391            - cacti <unknown> (embed)
392  libgd2:          [sarge] - cacti <unfixed> (embed)
393  graphviz (lib/gd seems to be 2.0.33)          NOTE: dependency exists, but internal version is used
394            - gforge 4.7~rc2-6 (embed)
395  rar:          - mahara <unfixed> (embed)
396  unrar-nonfree  
397    gzip
398            - linux-kernel <unfixed> (embed)
399            NOTE: lib/inflate.c
400            - klibc <unfixed> (embed)
401            NOTE: based on linux-kernel gzip code
402            - busybox <unfixed> (embed)
403    
404    neon
405            - cadaver 0.22.3+debian-1 (embed; bug #188381)
406            - gnome-vfs2 <unfixed> (embed; bug #395874)
407            [etch] - litmus <unfixed> (embed; #395875)
408            - litmus <removed> (embed; #395875)
409            [sarge] - screem <unfixed> (embed)
410            - sitecopy 1:0.16.3-5 (embed; bug #395876)
411            [etch] - tla <unfixed> (embed; bug #395877)
412            [sarge] - tla <unfixed> (embed; bug #395877)
413    
414    libmodplug
415            - gst-plugins-bad0.10 <unfixed> (embed)
416    
417    libvncserver
418            - vino <unfixed> (embed)
419    
420    putty
421            - filezilla <unfixed> (embed)
422    
423    tinyxml (not packaged in Debian)
424            - filezilla <unfixed>
425    
426    gv
427            - evince <unfixed> (embed)
428            NOTE: ps/ tree from gv 3.5.8
429            - evince-gtk <unfixed> (embed)
430            NOTE: not packaged in Debian
431    
432    libXbae
433            [etch] - libpawlib2-lesstif <unfixed> (embed)
434            NOTE: from Cernlib
435    
436    libgtkhtml
437            - claws-mail-html2-viewer <unfixed> (fork)
438    
439    libXaw
440            [etch] - libpawlib2-lesstif <unfixed>
441            NOTE: from Cernlib
442            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
443    
444    libgd2
445            - graphviz <unfixed> (embed)
446            NOTE: lib/gd seems to be 2.0.33
447            - wml <unfixed> (embed)
448            - libwmf <unfixed> (embed)
449            NOTE: derived from gd 1.6.3
450    
451    rar
452            - unrar-nonfree <unfixed> (embed)
453    
454    unrar-free (maybe this code is derived from the original rar, too?)
455            - clamav <unfixed> (embed)
456            NOTE: seems to be disabled in default config
457    
458    mplayer (DirectMedia Object loader)
459            - xine-lib <unfixed> (embed)
460            NOTE: src/libw32dll/
461            - vlc <unfixed> (embed)
462            NOTE: modules/codec/dmo/
463            - mplayer 1.0~rc2-20 (embed)
464    
465    libwpd (WordPerfect converter)
466            - openoffice.org <unfixed> (embed)
467    
468    fsplib (http://sourceforge.net/projects/fsp/)
469            - gftp <unfixed> (embed)
470            NOTE: lib/fsplib version 0.3
471    
472    sprng
473            - tree-puzzle <unfixed> (embed)
474    
475    librpcsecgss
476            - krb5 <unfixed> (embed)
477    
478    jasper
479            - ghostscript <unfixed> (embed)
480            - gs-gpl <unfixed> (embed)
481    
482    libiris
483            - psi <unfixed> (embed)
484            - kdenetwork <unfixed> (embed)
485            NOTE: kopete embeds libiris but links dynamically to libidn
486            - kdegames <unfixed> (embed)
487            NOTE: ksirk/kde4
488    
489    libidn
490            - monotone 0.43-1 (embed)
491            - psi <unfixed> (embed)
492            NOTE: psi embeds libiris which embeds libidn
493            - kdegames <unfixed> (embed)
494            NOTE: kdegames/kde4 embeds libiris which embeds libidn
495    
496    liblua
497            - monotone 0.43-1 (embed)
498            - nmap <unfixed> (embed; bug #527997)
499            NOTE: fixed upstream as of nmap svn rev13336.
500    
501    libbotan
502            - monotone 0.43-1 (embed)
503    
504    NetXX
505            - monotone 0.43-1 (embed)
506    
507    libgc
508            - mono <unfixed> (embed)
509    
510    lzma
511            - p7zip <unfixed> (embed)
512            - xz-utils <unfixed> (fork)
513    
514    lzo
515            - grub2 <unfixed> (embed)
516    
517    yassl
518            - mysql-dfsg-5.0 <unfixed> (embed)
519    
520    pax code
521            - tar <unfixed> (embed)
522            - cpio <unfixed> (embed)
523    
524    t1lib
525            - tetex-bin 2.0.2-1 (embed)
526            - texlive-bin <unknown> (embed)
527    
528    guichan
529            - boswars <unfixed> (embed)
530            NOTE: maintainer notified us, working on it
531    
532    tolua
533            - boswars <unfixed> (embed)
534            NOTE: maintainer notified us, working on it
535    
536    asio-dev
537            - luxrender <unfixed> (embed)
538            NOTE: maintainer notified us, working on it
539            NOTE: may be merged with boost "soon"
540    
541  unrar-free: (maybe this code is derived from the original rar, too?)  xine-lib
542  clamav (seems to be disabled in default config)          - vlc <unfixed> (embed)
543            NOTE: only parts included in modules/access/rtsp
544    
545  mplayer (DirectMedia Object loader):  netpbm
546  xine-lib (src/libw32dll/)          - tcl8.3 <unfixed> (embed)
547  vlc (modules/codec/dmo/)          - tcl8.4 <unfixed> (embed)
548            - tcl8.5 <unfixed> (embed)
549            NOTE: generic/tkImgGIF.c
550    
551    tk8.5
552            - tk8.0 <removed> (old-version)
553            - tk8.3 <unfixed> (old-version)
554            - tk8.4 <unfixed> (old-version)
555            - perl-tk <unfixable> (fork)
556    
557    samba
558            - mc 2:4.6.2~git20080311-1 (embed)
559            NOTE: maintainer is aware of this, currently searching a solution
560    
561    plib1.8.4c2
562            - boson <unfixed> (fork)
563            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
564    
565    fribidi
566            - quesoglc <unfixed> (embed)
567            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
568    
569    glew
570            - quesoglc <unfixed> (embed; bug #489341)
571            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
572    
573    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
574            - transcend <unfixed> (embed)
575            - cultivation <unfixed> (embed)
576            - passage <unfixed> (embed)
577            - gravitation <unfixed> (embed)
578    
579    tar
580            - libarchive <unfixed> (embed)
581            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
582    
583    cpio
584            - libarchive <unfixed> (embed)
585            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
586    
587    webkit
588            - qt4-x11 <unfixed> (embed)
589    
590    ftgl
591            - blender 2.46+dfsg-1 (embed)
592    
593    wv
594            - abiword <unfixed>
595    
596    qemu
597            - kvm <unfixed> (embed)
598            - xen-3 <unfixed> (embed)
599            - xen-unstable <unfixed> (embed)
600    
601    vgabios
602            - kvm <unfixed> (embed; bug #489442)
603    
604    bochs
605            - kvm <unfixed> (embed; bug #489442)
606    
607    speex
608            - vorbis-tools <unfixed> (embed)
609            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
610            - gst-plugins-good0.10 <unfixed> (embed)
611            - xine-lib <unfixed> (embed)
612            - libfishsound <unfixed> (embed)
613            - libannodex <unfixed> (embed)
614            - vlc <unfixed> (embed)
615            - xmms-speex <unfixed> (embed)
616            - libsdl-sound1.2 <unfixed> (embed)
617            - sweep <unfixed> (embed)
618    
619    libreadline
620            - magic <unfixed> (old-version)
621            NOTE: magic is currently an RFS
622    
623    opcode
624            - ode <unfixed> (embed)
625            NOTE: opcode is not a package in debian, it is just embedded
626            NOTE: http://www.codercorner.com/Opcode.htm
627    
628    gimpact
629            - ode <unfixed> (embed)
630            NOTE: gimpact is not a package in debian, it is just embedded
631            NOTE: http://gimpact.sf.net
632    
633    mochikit
634            - mahara <unfixed> (embed)
635            NOTE: they require extra patches, still unmerged upstream
636            - ntop <unfixed> (embed)
637            - coherence <unfixed> (embed)
638            NOTE: python-coherence
639            - paste <unfixed> (embed)
640            NOTE: python-paste
641            - turbogears <unfixed> (embed)
642            NOTE: python-turbogears
643            - plone3 <unfixed> (embed)
644            NOTE: zope-plone3
645    
646    prototype
647            - netbeans-ide <unfixed> (embed)
648            - auth2db-frontend <unfixed> (embed)
649            - webcit <unfixed> (embed)
650            NOTE: citadel-webcit
651            - asterisk <unfixed> (embed)
652            - doc-iana <unfixed> (embed)
653            - libaws <unfixed> (embed)
654            NOTE: libaws-doc
655            - libgettext-ruby <unfixed> (embed)
656            NOTE: libgettext-ruby-data
657            - libjson-ruby <unfixed> (embed)
658            NOTE: libjson-ruby-doc
659            - lucene2 <unfixed> (embed)
660            NOTE: liblucene2-java-doc
661            - libopenid-ruby <unfixed> (embed)
662            - solr <unfixed> (embed)
663            NOTE: solr-common
664            - glpi <unfixed> (embed)
665            - hobbix <unfixed> (embed)
666            - mnemo2 <unfixed> (embed)
667            - nag2 <unfixed> (embed)
668            - knowledgeroot <unfixed> (embed)
669            - mediatomb <unfixed> (embed)
670            NOTE: mediatomb-common
671            - mt-daapd <unfixed> (embed)
672            - op-panel <unfixed> (embed)
673            - ebug-http <unfixed> (embed)
674            - phpgedview <removed> (embed)
675            - poker-network <unfixed> (embed)
676            NOTE: poker-web
677            - webhelpers <unfixed> (embed)
678            NOTE: python-webhelpers
679            - qwik <unfixed> (embed)
680            - rails <unfixed> (embed)
681            - typo3-src <unfixed> (embed)
682            - wordpress <unfixed> (embed)
683            - zope <unfixed> (embed)
684            NOTE: zope-plone3
685            - smokeping <unfixed> (embed)
686            - ampache 3.4.1-2 (embed)
687            - exaile <unfixed> (embed)
688            - hobix <unfixed> (embed)
689            - pixelpost <unfixed> (embed)
690            - symfony <unfixed> (embed)
691            NOTE: it's been said that there are custom changes
692            - zabbix <unfixed> (embed)
693            NOTE: zabbix-frontend-php
694            - turba2 <unfixed> (embed)
695    
696    gdb
697            - insight <unfixed> (embed)
698    
699    e2fsprogs
700            - ldiskfsprogs <unfixable> (fork)
701    
702    quazip (not packaged in Debian)
703            - qcake <unfixed> (embed)
704            NOTE: starting with upstream version 0.6.4
705    
706    exo
707            - pcmanfm <unfixed> (embed; bug #499677)
708            NOTE: slightly modified source code
709    
710    java
711            - openjdk-6 <unfixed>
712            - sun-java5 <unfixed>
713            - sun-java6 <unfixed>
714    
715    libphp-snoopy
716            - ampache 3.4.1-2 (embed; bug #504169)
717            - mahara 1.0.5-2 (embed; bug #504170)
718            - pixelpost 1.7.1-5 (embed; bug #504171)
719            - mediamate 0.9.3.6-5 (embed; bug #504172)
720            - opendb <removed> (embed; bug #504173)
721            [etch] - opendb <unfixed> (embed; bug #504173)
722            - wordpress 2.5.1-9 (embed; bug #443948)
723            - moodle <unfixed> (embed; bug #507185)
724            [etch] - phpgroupware <unfixed> (embed)
725            NOTE: phpgroupware-felamimail
726            - magpierss 0.72-3 (embed; bug #431089)
727    
728    jquery
729            - zekr <unfixed> (embed)
730            - wordpress <unfixed> (embed)
731            - yocto-reader <unfixed> (embed)
732            - textpattern <unfixed> (embed)
733            - genshi 0.5.1-1 (embed)
734            NOTE: compressed file under examples/ dir
735            - prewikka <unfixed> (embed)
736            - libramaze-ruby <unfixed> (embed)
737            - drupal5 <unfixed> (embed)
738            - b2evolution <unfixed> (embed)
739            - wesnoth <unfixed> (embed)
740    
741    tablesorter (jquery plugin, not packaged yet)
742            - wesnoth <unfixed> (embed)
743    
744    kses
745            - wordpress <unfixed> (embed; bug #504242)
746            NOTE: their copy has all methods renamed to wp_<foo>
747            - moodle <unfixed> (embed; bug #507185)
748            - egroupware <unfixed> (embed)
749    
750    magpierss
751            - wordpress <unfixed> (embed; bug #504242)
752            - moodle <unfixed>
753    
754    php-gettext
755            - wordpress <unfixed> (embed; bug #504242)
756    
757    libphp-ixr (name may change, it is the Incutio XML-RPC)
758            - wordpress <unfixed> (embed; bug #504242)
759            - dokuwiki <unfixed> (embed)
760            - textpattern <unfixed> (embed)
761    
762    libphp-cas
763            - glpi <unfixed> (embed)
764            - moodle <unfixed> (embed; bug #505984)
765    
766    scriptaculous
767            - glpi <unfixed> (embed)
768            - libaws <unfixed> (embed)
769            NOTE: libaws-doc
770            - op-panel <unfixed> (embed)
771            - symfony <unfixed> (embed)
772            NOTE: maintainer says there are extra incompatible changes required
773            - pixelpost <unfixed> (embed)
774            - webhelpers <unfixed> (embed)
775            NOTE: python-webhelpers
776            - qwik <unfixed> (embed)
777            - smokeping <unfixed> (embed)
778            - turba2 <unfixed> (embed)
779            - typo3-src 4.2.3-1 (embed)
780    
781    libmarkdown-php
782            - moodle <unfixed> (embed; bug #507185)
783            - pixelpost <unfixed> (embed)
784    
785    php-openid
786            - wordpress-openid <itp> (embed)
787    
788    geshi
789            - dokuwiki 0.0.20080505-3.1 (embed)
790            - pgfouine 1.0-1.1 (embed)
791            - websvn 2.1.0-1 (embed)
792    
793    webcalendar
794            - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)
795    
796    libical
797            - kdepim <unfixed> (fork)
798            - kdepimlibs <unfixed> (fork)
799            NOTE: fixed in KDE4 post 4.1.x series
800            - claws-mail-vcalendar-plugin <unfixed> (fork)
801    
802    libltdl3
803            - kdelibs <unfixed> (embed)
804            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
805            - synfig <unfixed> (embed)
806    
807    harfbuzz
808            - qt4-x11 <unfixed> (embed)
809    
810    libzip
811            - php5 <unfixed> (fork)
812            - odt2txt <unfixed> (embed; bug #523808)
813    
814    json.php (not packaged; should be replaced with php's built-in functions)
815            - moodle <unfixed>
816            - yui <unfixed>
817            - gallery2 <unfixed>
818            - dokuwiki <unfixed>
819            - typo3-src <unfixed>
820    
821    php-fpdf
822            - tcpdf <itp> (fork)
823            - moodle <unfixed>
824            - phpwiki <unfixed>
825            - egroupware <unfixed>
826            - ldap-account-manager <unfixed> (fork)
827    
828    tcpdf (itp: #495985)
829            - moodle <unfixed>
830            - phpmyadmin <unfixed>
831    
832    typo3
833            - moodle <unfixed>
834    
835    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
836            - moodle <unfixed>
837            - gosa <unfixed>
838    
839    php-ole (itp: #487558)
840            - moodle <unfixed>
841    
842    pieforms (http://www.catalyst.net.nz)
843            - mahara <unfixed>
844    
845    savant2 (http://phpsavant.com)
846            - egroupware <unfixed>
847    
848    rssparser (http://nwow.org)
849            - egroupware <unfixed>
850            - phpgroupware <unfixed>
851    
852    lcms
853            - openjdk-6 <unfixed> (fork)
854    
855    libphp-phplayersmenu
856            - diogenes <unfixed>
857            - phpldapadmin <unfixed>
858    
859    libphp-pclzip
860            - docvert <unfixed>
861            - moodle <unfixed>
862            - egroupware <unfixed>
863    
864    libphp-simplepie
865            - dokuwiki <unfixed>
866    
867    libphp-jpgraph
868            - egroupware <unfixed>
869    
870    php-simpletest
871            - moodle <unfixed>
872    
873    libpng
874            - iceweasel <unfixed> (embed)
875            NOTE: 3.0 uses embedded copy, 2.0 uses system libpng
876            - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
877            - iceape 1.0.13~pre080614i-0etch1 (embed)
878            - xulrunner <unfixed> (embed)
879            NOTE: Debian 1.9.0.6 uses embedded copy
880            NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng
881            - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)
882            NOTE: Ubuntu only
883            - firefox-3.0 <unfixed> (embed)
884            NOTE: Ubuntu only
885            - firefox-3.1 <unfixed> (embed)
886            NOTE: Ubuntu only
887            - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)
888            NOTE: Ubuntu only
889            - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)
890            NOTE: Ubuntu only
891            - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)
892            NOTE: Ubuntu only
893    
894    irssi
895            - silc-client <unfixed> (embed)
896            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
897    
898    extc
899            - mtasc <unfixed> (embed)
900            - haxe <unfixed> (embed)
901    
902    swflib
903            - mtasc <unfixed> (embed)
904            - haxe <unfixed> (embed)
905    
906    libitext-java
907            - bouncycastle 2.1.4-1 (embed)
908    
909    python-ply
910            - pyke <unfixed> (embed)
911    
912    libdumbnet (libdnet upstream)
913            - nmap <unfixed> (fork)
914    
915    gcc-4.4
916            - gcc-mingw32 <unfixed> (embed)
917    
918    camlimages
919            - advi <unfixed> (embed)
920    
921    memcached
922            - memcachedb <unfixed> (embed)
923    
924    yajl (ITP: #537199)
925            - argyll <unfixed> (embed)
926            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
927    
928    libept:
929            - adept <unfixed> (embed; bug #540649)
930    
931    libvorbis:
932            - xulrunner <unfixed> (embed; bug #540959)
933    
934    php-net-dnsbl:
935            - serendipity <unfixed> (embed)
936    
937  libwpd (WordPerfect converter):  php-onyx-rss:
938  openoffice.org          - serendipity <unfixed> (embed)
939    
940  fsplib (http://sourceforge.net/projects/fsp/):  php-text-wiki:
941  gftp (lib/fsplib version 0.3)          - serendipity <unfixed> (embed)
942    
943  librpcsecgss:  php-xml-rpc:
944  krb5          - serendipity <unfixed> (embed)

Legend:
Removed from v.6966  
changed lines
  Added in v.12625

  ViewVC Help
Powered by ViewVC 1.1.5