You don't have to include the sources in the same package as the executable, but you have to:
- Include a README/LICENSE file where you specify which projects you're using, with their respective licenses, and give instructions for obtaining the sources (like pointing to an URL)
- If you actually modify the sources of those files, you should also have those changes publicly available