All Projects

Project Category Task Type Priority Severity Summary Status  desc Progress
PackagesAnyPrivacy IssueVery HighCritical [cutegram] only useful with Telegram service Closed
100%
Task Description

Description:
Cutegram is a Telegram client. It is free software, however uses Telegram, a nonfree server-side service that requires accounts tied to telephone numbers. It needs go to the blacklist since Hyperbola’s objective is to support privacy of its community.

Additional info:

$ pacman -Si cutegram
Repository      : community
Name            : cutegram
Version         : 2.7.1-3
Description     : A different telegram client from Aseman team
Architecture    : x86_64
URL             : http://aseman.co/en/products/cutegram/
Licenses        : GPL
Groups          : None
Provides        : cutegram
Depends On      : qt5-imageformats  qt5-webkit  telegramqml>=0.9.1  libqtelegram-ae>=3:6.1
Optional Deps   : gst-plugins-bad: audio support
                  gst-plugins-good: audio and notification sound
Conflicts With  : cutegram-git  sigram-git  sigram  cutegram
Replaces        : cutegram-cn
Download Size   : 12.03 MiB
Installed Size  : 17.07 MiB
Packager        : Jiachen Yang <farseerfc@gmail.com>
Build Date      : Mon 25 Jan 2016 05:59:04 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
PackagesAnyPrivacy IssueVery HighCritical [libqtelegram-ae] only useful with Telegram service Closed
100%
Task Description

Description:
libqtelegram-ae is Telegram library written in Qt based on telegram-cli code. It is free software, however uses Telegram, a nonfree server-side service that requires accounts tied to telephone numbers. It needs go to the blacklist since Hyperbola’s objective is to support privacy of its community.

Additional info:

$ pacman -Si libqtelegram-ae
Repository      : community
Name            : libqtelegram-ae
Version         : 3:6.1-4
Description     : Telegram library written in Qt based on telegram-cli code
Architecture    : x86_64
URL             : https://launchpad.net/libqtelegram
Licenses        : GPL3
Groups          : None
Provides        : None
Depends On      : qt5-base  qt5-multimedia
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 431.27 KiB
Installed Size  : 1999.00 KiB
Packager        : Antonio Rojas <arojas@archlinux.org>
Build Date      : Wed 05 Apr 2017 07:16:39 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
PackagesAnyPrivacy IssueVery HighCritical [telegram-qt] only useful with Telegram service Closed
100%
Task Description

Description:
TelegramQt is a Telegram binding for Qt. It is free software, however uses Telegram, a nonfree server-side service that requires accounts tied to telephone numbers. It needs go to the blacklist since Hyperbola’s objective is to support privacy of its community.

Additional info:

$ pacman -Si telegram-qt
Repository      : community
Name            : telegram-qt
Version         : 0.1.0-2
Description     : Qt bindings for the Telegram protocol
Architecture    : x86_64
URL             : https://github.com/Kaffeine/telegram-qt
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : qt5-base
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 204.80 KiB
Installed Size  : 747.00 KiB
Packager        : Antonio Rojas <arojas@archlinux.org>
Build Date      : Sat 18 Feb 2017 06:49:55 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
PackagesAnyPrivacy IssueVery HighCritical [telegramqml] only useful with Telegram service Closed
100%
Task Description

Description:
TelegramQML are Telegram API tools for QtQml and Qml. It is free software, however uses Telegram, a nonfree server-side service that requires accounts tied to telephone numbers. It needs go to the blacklist since Hyperbola’s objective is to support privacy of its community.

Additional info:

$ pacman -Si telegramqml
Repository      : community
Name            : telegramqml
Version         : 0.9.2-2
Description     : Telegram API tools for QtQml and Qml
Architecture    : x86_64
URL             : https://github.com/Aseman-Land/TelegramQML
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : qt5-webkit  qt5-imageformats  qt5-graphicaleffects  qt5-quickcontrols  libqtelegram-ae
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 401.03 KiB
Installed Size  : 1905.00 KiB
Packager        : Jiachen Yang <farseerfc@gmail.com>
Build Date      : Mon 25 Jan 2016 05:46:59 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
PackagesAnyPrivacy IssueVery HighCritical [telepathy-morse] only useful with Telegram service Closed
100%
Task Description

Description:
Telepathy-Morse is a Qt-based Telegram connection manager for the Telepathy framework. It is free software, however uses Telegram, a nonfree server-side service that requires accounts tied to telephone numbers. It needs go to the blacklist since Hyperbola’s objective is to support privacy of its community.

Additional info:

$ pacman -Si telepathy-morse
Repository      : community
Name            : telepathy-morse
Version         : 0.1.0-1
Description     : Telepathy Connection Manager for the Telegram network
Architecture    : x86_64
URL             : https://github.com/TelepathyQt/telepathy-morse
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : telepathy-qt5  telegram-qt
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 90.80 KiB
Installed Size  : 351.00 KiB
Packager        : Antonio Rojas <arojas@archlinux.org>
Build Date      : Fri 16 Sep 2016 11:49:33 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
PackagesAnyPrivacy IssueVery HighCritical [telepathy-kde-accounts-kcm] recommends Telepathy-Morse ...Closed
100%
Task Description

Description:
telepathy-kde-accounts-kcm contains the telepathy-morse package in its optdepends array. It should be removed since Telepathy-Morse provides support for Telegram, a nonfree server-side service that requires accounts tied to telephone numbers.

Additional info:

$ pacman -Si telepathy-kde-accounts-kcm
Repository      : extra
Name            : telepathy-kde-accounts-kcm
Version         : 17.04.0-1
Description     : KCM Module for configuring Telepathy Instant Messaging Accounts
Architecture    : x86_64
URL             : https://community.kde.org/Real-Time_Communication_and_Collaboration
Licenses        : GPL
Groups          : kde-applications  kdenetwork  telepathy-kde
Provides        : None
Depends On      : telepathy-qt  kaccounts-providers
Optional Deps   : telepathy-gabble: XMPP/Jabber accounts support
                  telepathy-haze: account types supported by Pidgin/libpurple
                  telepathy-morse: Telegram accounts support
                  telepathy-salut: link-local XMPP account support
Conflicts With  : None
Replaces        : None
Download Size   : 334.86 KiB
Installed Size  : 2111.00 KiB
Packager        : Antonio Rojas <arojas@archlinux.org>
Build Date      : Sat 15 Apr 2017 06:47:59 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
PackagesTestingBug ReportMediumMedium [iceweasel-uxp-l10n] FindBar doesn't work with langpack ...Closed
100%
Task Description

Description:
FindBar doesn’t work with langpacks (l10n) installed, however if Iceweasel-UXP is used without it, FindBar works again.

Additional info:
* package version(s): 52.9.0_20180601-2
* config and/or log files etc:

[JavaScript Error: "chrome://global/content/bindings/findbar.xml : Unable to run script because scripts are blocked internally."]

[JavaScript Error: "chrome://global/content/bindings/findbar.xml : Unable to run script because scripts are blocked internally."]

[JavaScript Error: "chrome://global/content/bindings/findbar.xml : Unable to run script because scripts are blocked internally."]

[JavaScript Error: "XML Parsing Error: undefined entity
Location: jar:file:///usr/lib/iceweasel-uxp/omni.ja!/chrome/toolkit/content/global/bindings/findbar.xml
Line Number 172, Column 10:" {file: "jar:file:///usr/lib/iceweasel-uxp/omni.ja!/chrome/toolkit/content/global/bindings/findbar.xml" line: 172 column: 10 source: "         <xul:toolbarbutton anonid="find-next""}]

[JavaScript Error: "TypeError: findBar._findField is undefined" {file: "chrome://browser/content/tabbrowser.xml" line: 184}]
getFindBar@chrome://browser/content/tabbrowser.xml:184:11
@chrome://browser/content/browser.js:184:10
oncommand@chrome://browser/content/browser.xul:1:1

[JavaScript Warning: "Error in parsing value for 'max-width'.  Declaration dropped." {file: "chrome://browser/content/browser.xul" line: 0 column: 0 source: "-6.534000000000001px"}]

[JavaScript Warning: "Error in parsing value for 'max-width'.  Declaration dropped." {file: "chrome://browser/content/browser.xul" line: 0 column: 0 source: "-13.265999999999998px"}]

[JavaScript Warning: "Error in parsing value for 'max-width'.  Declaration dropped." {file: "chrome://browser/content/browser.xul" line: 0 column: 0 source: "-10.2px"}]

[JavaScript Warning: "Error in parsing value for 'max-width'.  Declaration dropped." {file: "chrome://browser/content/browser.xul" line: 0 column: 0 source: "-10.2px"}]

Steps to reproduce:

  • Install iceweasel-uxp and any l10n package (eg. iceweasel-uxp-l10n-en-gb)
  • Run:
    LC_ALL=en_GB.UTF-8 iceweasel-uxp
  • Go Edit > Find
PackagesAnyBug ReportMediumMedium [ppp] Couldn't open the /dev/ppp device: No such file o ...Closed
100%
Task Description

Description:
pppd service crashes because pppoe module isn’t running by default.

Additional info:
* package version(s): 2.4.7-2.hyperbola3
* config and/or log files etc:

pppd[3659]: Plugin rp-pppoe.so loaded.
pppd[3659]: Couldn't open the /dev/ppp device: No such file or directory
pppd[3659]: Linux kernel does not support PPPoE -- are you running 2.4.x?
pppd[3659]: Exit.

Steps to reproduce:

  • install ppp package:
    # pacman -S ppp
  • run pppd service:
    # rc-service pppd start
PackagesAnyFeature RequestVery HighHigh [amule] contains systemd unit files Closed
100%
Task Description

Description:

  • The Arch version of aMule from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : amule
Version         : 10983-2
Description     : An eMule-like client for ed2k p2p network
Architecture    : x86_64
URL             : http://www.amule.org
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : wxgtk  gd  geoip  libupnp  crypto++  boost-libs
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 4.84 MiB
Installed Size  : 22.65 MiB
Packager        : Antonio Rojas <arojas@archlinux.org>
Build Date      : Mon 23 Jan 2017 08:36:47 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
/usr/lib/systemd/system/amuled.service is owned by amule 10983-2
/usr/lib/systemd/system/amuleweb.service is owned by amule 10983-2

Steps to reproduce:

  • Install package.
PackagesAnyFeature RequestVery HighHigh [deluge] contains systemd unit files Closed
100%
Task Description

Description:

  • The Arch version of Deluge from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : deluge
Version         : 1.3.14-1
Description     : A BitTorrent client with multiple user interfaces in a client/server model
Architecture    : any
URL             : http://deluge-torrent.org/
Licenses        : GPL3
Groups          : None
Provides        : None
Depends On      : python2-xdg  libtorrent-rasterbar  python2-twisted  python2-pyopenssl  python2-chardet  python2-setuptools
Optional Deps   : python2-notify: libnotify notifications
                  pygtk: needed for gtk ui
                  librsvg: needed for gtk ui
                  python2-mako: needed for web ui
Conflicts With  : None
Replaces        : None
Download Size   : 2.26 MiB
Installed Size  : 12.20 MiB
Packager        : Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
Build Date      : Tue 07 Mar 2017 12:26:40 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
/usr/lib/systemd/system/deluged.service is owned by deluge 1.3.14-1
/usr/lib/systemd/system/deluge-web.service is owned by deluge 1.3.14-1

Steps to reproduce:

  • Install package.
PackagesAnyFeature RequestVery HighHigh [gnunet] contains systemd unit file Closed
100%
Task Description

Description:

  • The Arch version of GNUnet from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : community
Name            : gnunet
Version         : 0.10.1-9
Description     : A framework for secure peer-to-peer networking
Architecture    : x86_64
URL             : http://gnunet.org
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : gmp  libgcrypt  libextractor  sqlite  gnurl  libmicrohttpd  libunistring  libidn
Optional Deps   : bluez-libs
                  python
                  glpk
                  libpulse
                  opus
Conflicts With  : None
Replaces        : None
Download Size   : 1744.61 KiB
Installed Size  : 7046.00 KiB
Packager        : Antonio Rojas <arojas@archlinux.org>
Build Date      : Mon 04 Apr 2016 02:33:05 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
/usr/lib/systemd/system/gnunet.service is owned by gnunet 0.10.1-9

Steps to reproduce:

  • Install package.
PackagesAnyFeature RequestVery HighHigh [mldonkey] contains systemd unit files Closed
100%
Task Description

Description:

  • The Arch version of MLdonkey from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : community
Name            : mldonkey
Version         : 3.1.6-1
Description     : A multi-network P2P client
Architecture    : x86_64
URL             : http://mldonkey.sourceforge.net/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : file  gd  miniupnpc  libnatpmp
Optional Deps   : librsvg: GUI support
                  gtk2: GUI support
Conflicts With  : None
Replaces        : None
Download Size   : 4.01 MiB
Installed Size  : 21.11 MiB
Packager        : Anatol Pomozov <anatol.pomozov@gmail.com>
Build Date      : Wed 25 Jan 2017 04:13:10 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
/usr/lib/systemd/system/mldonkey.service is owned by mldonkey 3.1.6-1
/usr/lib/sysusers.d/mldonkey.conf is owned by mldonkey 3.1.6-1
/usr/lib/tmpfiles.d/mldonkey.conf is owned by mldonkey 3.1.6-1

Steps to reproduce:

  • Install package.
PackagesAnyFeature RequestVery HighHigh [timidity++] contains systemd unit file Closed
100%
Task Description

Description:

  • The Arch version of TiMidity++ from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : timidity++
Version         : 2.14.0-7
Description     : A MIDI to WAVE converter and player
Architecture    : x86_64
URL             : http://timidity.sourceforge.net
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : libao  jack
Optional Deps   : gtk2: for using the GTK+ interface
                  tk: for using the Tk interface
                  xaw3d: for using the Xaw interface
Conflicts With  : None
Replaces        : None
Download Size   : 530.60 KiB
Installed Size  : 1431.00 KiB
Packager        : Evangelos Foutras <evangelos@foutrelis.com>
Build Date      : Thu 10 Sep 2015 12:55:38 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
/usr/lib/systemd/system/timidity.service is owned by timidity++ 2.14.0-7

Steps to reproduce:

  • Install package.
PackagesAnyFeature RequestVery HighHigh [wesnoth] contains systemd unit files Closed
100%
Task Description

Description:

  • The Arch version of Wesnoth from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : community
Name            : wesnoth
Version         : 1.12.6-4
Description     : A turn-based strategy game on a fantasy world
Architecture    : x86_64
URL             : http://www.wesnoth.org/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : sdl_ttf  sdl_net  sdl_mixer  sdl_image  fribidi  boost-libs  pango  lua52  wesnoth-data  dbus  python2
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 4.97 MiB
Installed Size  : 22.86 MiB
Packager        : Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
Build Date      : Mon 02 Jan 2017 07:52:21 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
/usr/lib/systemd/system/wesnothd.service is owned by wesnoth 1.12.6-4
/usr/lib/tmpfiles.d/wesnothd.conf is owned by wesnoth 1.12.6-4

Steps to reproduce:

  • Install package.
PackagesAnyFeature RequestVery HighHigh [system-config-printer] contains systemd unit file Closed
100%
Task Description

Description:

  • The Arch version of system-config-printer from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : system-config-printer
Version         : 1.5.9-2
Description     : A CUPS printer configuration tool and status applet
Architecture    : x86_64
URL             : https://github.com/zdohnal/system-config-printer
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : python-pycups  python-dbus  python-pycurl  libnotify  python-requests  python-gobject  gtk3  python-cairo
Optional Deps   : python-pysmbc: SMB browser support
                  python-packagekit: to install drivers with PackageKit
                  cups-pk-helper: PolicyKit helper to configure cups with fine-grained privileges
Conflicts With  : None
Replaces        : None
Download Size   : 908.59 KiB
Installed Size  : 7159.00 KiB
Packager        : Andreas Radke <andyrtr@archlinux.org>
Build Date      : Fri 27 Jan 2017 04:18:24 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
/usr/lib/systemd/system/configure-printer@.service is owned by system-config-printer 1.5.9-2

Steps to reproduce:

  • Install package.
PackagesAnyFeature RequestVery HighHigh [pkgfile] contains systemd unit files Closed
100%
Task Description

Description:

  • The Arch version of pkgfile from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : pkgfile
Version         : 17-1
Description     : a pacman .files metadata explorer
Architecture    : x86_64
URL             : http://github.com/falconindy/pkgfile
Licenses        : MIT
Groups          : None
Provides        : None
Depends On      : libarchive  curl  pcre  pacman
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 23.16 KiB
Installed Size  : 47.00 KiB
Packager        : Dave Reisner <dreisner@archlinux.org>
Build Date      : Tue 18 Apr 2017 05:30:59 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
/usr/lib/systemd/system/pkgfile-update.service is owned by pkgfile 17-1
/usr/lib/systemd/system/pkgfile-update.timer is owned by pkgfile 17-1

Steps to reproduce:

  • Install package.
PackagesAnyImplementation RequestMediumLow [hunspell-pt-br] add new package Closed
100%
Task Description

Description:
Add Brazilian Portuguese grammar, spelling and hyphenation checker to hunspell.

PackagesAnyImplementation RequestMediumLow [hyphen-pt-br] add new package Closed
100%
Task Description

Description:
Add Brazilian Portuguese hyphenation to hunspell.

PackagesAnyFeature RequestVery HighHigh [pkgfile] contains systemd unit files Closed
100%
Task Description

Description:

  • The Arch version of pkgfile from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or create a cron job (scheduled task) to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : pkgfile
Version         : 17-1
Description     : a pacman .files metadata explorer
Architecture    : x86_64
URL             : http://github.com/falconindy/pkgfile
Licenses        : MIT
Groups          : None
Provides        : None
Depends On      : libarchive  curl  pcre  pacman
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 23.16 KiB
Installed Size  : 47.00 KiB
Packager        : Dave Reisner <dreisner@archlinux.org>
Build Date      : Tue 18 Apr 2017 05:30:59 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature
/usr/lib/systemd/system/pkgfile-update.service is owned by pkgfile 17-1
/usr/lib/systemd/system/pkgfile-update.timer is owned by pkgfile 17-1

Steps to reproduce:

  • Install package.
PackagesAnyBug ReportMediumLow [octopi] contains systemd unit file Closed
100%
Task Description

Description:

  • The current Octopi version has been fixed to support OpenRC in Hyperbola, however it includes its official systemd unit file yet.

Additional info:
* package version(s)

  • 0.9.0-1.hyperbola1.backports1

* config and/or log files etc.

/usr/lib/systemd/system/octopi.service is owned by octopi 0.9.0-1.hyperbola1.backports1

Steps to reproduce:

  • Install package.
PackagesAnyBug ReportHighCritical [links][elinks] segmentation fault after start by termi ...Closed
100%
Task Description

Description:

  • Segmentation fault after start by terminal emulator but elinks does not crash in console. After that, it prints characters when mouse buttons pressed so it can not copy its output.

Additional info:
* package version(s)

  • links 2.14-2
  • elinks 0.13-18

* config and/or log files etc.

  • gdb output for links 2.16:
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/libthread_db.so.1".
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff4295e43 in strchrnul () from /usr/lib/libc.so.6
  • gdb output for elinks 0.13-18:
[New Thread 0x7ffff4dfb700 (LWP 8393)]
Thread 1 "elinks" received signal SIGSEGV, Segmentation fault.
0x00007ffff5fa3e43 in strchrnul () from /usr/lib/libc.so.6

Steps to reproduce:

  • Run links and elinks by terminal emulator
PackagesAnyBug ReportLowLow [emacs-nox] uses "nox" suffix Closed
100%
Task Description

Description:

  • Fix package name to emacs-headless that is the correct name for packages without graphical user interface support. nox suffix is incorrect because Hyperbola supports Wayland too, not only X.Org.

Additional info:
* package version(s)

  • 25.2-1

* config and/or log files etc.

Steps to reproduce:

  • None
PackagesAnySecurity IssueVery HighCritical [vlc] CVE-2017-17670 Closed
100%
Task Description

Description:

  • In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.

Additional info:
* package version(s)

  • 2.2.6-1.hyperbola1

* config and/or log files etc.

  • None

Steps to reproduce:

  • Run VLC
PackagesAnySecurity IssueVery HighCritical [vlc] CVE-2018-11529 Closed
100%
Task Description

Description:

  • VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.

Additional info:
* package version(s)

  • 2.2.6-1.hyperbola1

* config and/or log files etc.

  • None

Steps to reproduce:

  • Run VLC
PackagesAnyBug ReportHighHigh [filesystem] contains systemd references and files Closed
100%
Task Description

Description:

  • The filesystem package contains systemd files (/etc/profile.d/locale.sh and /usr/share/factory/) and references in /usr/share/man/man7/hyperbola.7.gz

Additional info:
* package version(s)
* config and/or log files etc.

  • Proposal patch to fix the Hyperbola basic configuration man page:
diff --git hyperbola.7.txt hyperbola.7.txt.new
index 842e532..927cf6a 100644
--- hyperbola.7.txt
+++ hyperbola.7.txt.new
@@ -24,14 +24,12 @@ To view available services, use 'rc-status --all'.
 
 HOSTNAME[[H]]
 -------------
-The hostname of the machine can be set using 'hostnamectl set-hostname <hostname>'.
+The hostname of the machine can be set using 'hostname <hostname>' or 'sysctl -w kernel.hostname=<hostname>'.
 It will then be written to /etc/hostname.
 
 LOCALIZATION[[L]]
 -----------------
 Various locales may be enabled in /etc/locale.gen and are generated by 'locale-gen'.
-The system-wide locale to be used can be configured in /etc/locale.conf.
-These settings can be overridden on a per-user basis by keeping a user-specific locale.conf in $HOME/.config/locale.conf.
 The user-specific file will take precedence if it exists.
 
 VIRTUAL CONSOLE[[V]]
@@ -72,15 +70,16 @@ Syslinux is configured in /boot/syslinux/syslinux.cfg.
 MODULES[[M]]
 ------------
 Most modules should be loaded on-demand.
-Modules to be unconditionally loaded at boot can be specified in /etc/modules-load.d/,
+Modules to be unconditionally loaded at boot can be specified in /etc/conf.d/modules,
 and modules to be blacklisted from automatically loading can be configured in /etc/modprobe.d/.
 
 SEE ALSO
 --------
 
-*hostname*(5), *locale.conf*(5), *timezone*(3), *hwclock*(8),
-*fstab*(5), *crypttab*(5), *mkinitcpio*(8), *pacman*(8), *pacman.conf*(5),
-*grub-mkconfig*(8), *syslinux*(1), *modules-load.d*(5), *modprobe.d*(5)
+*hostname*(5), *timezone*(3), *hwclock*(8),
+*fstab*(5), *cryptsetup*(8), *mkinitcpio*(8), *pacman*(8), *pacman.conf*(5),
+*grub-mkconfig*(8), *syslinux*(1), *modprobe.d*(5),
+*openrc*(8), *rc-service*(8), *rc-status*(8), *rc-update*(8)
 
 AUTHORS
 -------

Steps to reproduce:

* Run:

~ man hyperbola
PackagesAnyFeature RequestHighHigh [acpi_call-lts] adapt package in accordance with the Hy ...Closed
100%
PackagesAnyFeature RequestHighHigh [bbswitch-lts] adapt package in accordance with the Hyp ...Closed
100%
PackagesAnyFeature RequestHighHigh [bbswitch-dkms-lts] adapt package in accordance with th ...Closed
100%
PackagesAnyFeature RequestHighHigh [tp_smapi-lts] adapt package in accordance with the Hyp ...Closed
100%
PackagesAnyFeature RequestHighHigh [vhba-module-lts] adapt package in accordance with the  ...Closed
100%
PackagesAnyFeature RequestHighHigh [lib32-glibc] adapt package in accordance with the Hype ...Closed
100%
PackagesAnyFeature RequestHighHigh [gcc-multilib] adapt package in accordance with the Hyp ...Closed
100%
PackagesAnyFeature RequestHighHigh [gcc-libs-multilib] adapt package in accordance with th ...Closed
100%
PackagesAnyFeature RequestHighHigh [lib32-gcc-libs] adapt package in accordance with the H ...Closed
100%
PackagesAnyFeature RequestHighHigh [gcc-fortran-multilib] adapt package in accordance with ...Closed
100%
PackagesAnyFeature RequestHighHigh [gcc-objc-multilib] adapt package in accordance with th ...Closed
100%
PackagesAnyFeature RequestHighHigh [gcc-ada-multilib] adapt package in accordance with the ...Closed
100%
PackagesAnyFeature RequestHighHigh [gcc-go-multilib] adapt package in accordance with the  ...Closed
100%
PackagesAnyFeature RequestHighHigh [quilt] adapt package in accordance with the Hyperbola  ...Closed
100%
PackagesAnyFeature RequestHighHigh [arm-unknown-linux-gnueabi-binutils] adapt package in a ...Closed
100%
PackagesAnyFeature RequestHighHigh [arm-unknown-linux-gnueabi-gcc] adapt package in accord ...Closed
100%
PackagesAnyFeature RequestHighHigh [sh-unknown-elf-binutils] adapt package in accordance w ...Closed
100%
PackagesAnyFeature RequestHighHigh [sh-unknown-elf-gcc] adapt package in accordance with t ...Closed
100%
PackagesAnyFeature RequestHighHigh [sh-unknown-elf-newlib] adapt package in accordance wit ...Closed
100%
PackagesAnyFeature RequestHighHigh [dsp56k-lts-firmware] adapt package in accordance with  ...Closed
100%
PackagesAnyFeature RequestHighHigh [ihex2fw-lts] adapt package in accordance with the Hype ...Closed
100%
PackagesAnyFeature RequestHighHigh [isci-lts-firmware] adapt package in accordance with th ...Closed
100%
PackagesAnyFeature RequestHighHigh [keyspan-pda-lts-firmware] adapt package in accordance  ...Closed
100%
PackagesAnyFeature RequestHighHigh [usbduxd-lts-firmware] adapt package in accordance with ...Closed
100%
PackagesAnyFeature RequestHighHigh [usbduxfast-lts-firmware] adapt package in accordance w ...Closed
100%
Showing tasks 601 - 650 of 705 Page 13 of 15

Available keyboard shortcuts

Tasklist

Task Details

Task Editing