All Projects

This package contains vague terminology “Open Source”:

extra/unixodbc 2.3.4-2
    ODBC is an open specification for providing application developers with a predictable API with which to access Data Sources

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

ODBC is a free specification for providing application developers with a predictable API with which to access Data Sources

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si unrealircd
Repository      : community
Name            : unrealircd
Version         : 4.0.11-2
Description     : Open Source IRC Server
Architecture    : x86_64
URL             : http://unrealircd.com
Licenses        : GPL2
Groups          : None
Provides        : ircd
Depends On      : openssl  curl  c-ares  tre  pcre2
Optional Deps   : None
Conflicts With  : ircd
Replaces        : None
Download Size   : 697.57 KiB
Installed Size  : 3111.00 KiB
Packager        : Sergej Pupykin <pupykin.s+arch@gmail.com>
Build Date      : Fri 17 Feb 2017 03:41:55 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

This package contains vague terminology “Open Source”:

community/unrealircd 4.0.11-2
    Open Source IRC Server

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

Free Software IRC Server

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si unshield
Repository      : community
Name            : unshield
Version         : 1.3-2
Description     : Extracts CAB files from InstallShield installers
Architecture    : x86_64
URL             : https://github.com/twogood/unshield
Licenses        : custom
Groups          : None
Provides        : None
Depends On      : zlib  openssl
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 24.25 KiB
Installed Size  : 58.00 KiB
Packager        : Jelle van der Waa <jelle@archlinux.org>
Build Date      : Mon 13 Feb 2017 05:34:05 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Rebuild package against libressl, since it makedepends on openssl.

$ pacman -Si uwsgi
Repository      : community
Name            : uwsgi
Version         : 2.0.15-1.hyperbola1
Description     : A fast, self-healing and developer/sysadmin-friendly application container server coded in pure C, with OpenRC support
Architecture    : x86_64
URL             : https://projects.unbit.it/uwsgi
Licenses        : GPL2
Groups          : None
Provides        : None
Depends On      : python2  libxml2  jansson  libyaml  libcap  pam  pcre
Optional Deps   : None
Conflicts With  : python-uwsgi
Replaces        : None
Download Size   : 361.88 KiB
Installed Size  : 1023.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Sat 16 Sep 2017 06:00:29 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it makedepends on openssl-1.0.

$ pacman -Si vagrant
Repository      : community
Name            : vagrant
Version         : 1.9.3-1
Description     : Build and distribute virtualized development environments
Architecture    : x86_64
URL             : http://vagrantup.com
Licenses        : MIT
Groups          : None
Provides        : None
Depends On      : vagrant-substrate  libyaml
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 16.54 MiB
Installed Size  : 37.19 MiB
Packager        : Jonathan Steel <jsteel@archlinux.org>
Build Date      : Wed 29 Mar 2017 01:06:53 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si vde2
Repository      : extra
Name            : vde2
Version         : 2.3.2-10
Description     : Virtual Distributed Ethernet for emulators like qemu
Architecture    : x86_64
URL             : https://sourceforge.net/projects/vde/
Licenses        : GPL  LGPL  CUSTOM
Groups          : None
Provides        : None
Depends On      : bash  libpcap  openssl
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 201.37 KiB
Installed Size  : 717.00 KiB
Packager        : Jan de Groot <jgc@archlinux.org>
Build Date      : Mon 20 Mar 2017 08:00:13 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Description:

• In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.

Additional info:
* package version(s)

• 2.2.6-1.hyperbola1

* config and/or log files etc.

• None

Steps to reproduce:

• Run VLC

Description:

• VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.

Additional info:
* package version(s)

• 2.2.6-1.hyperbola1

* config and/or log files etc.

• None

Steps to reproduce:

• Run VLC

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si vpnc
Repository      : extra
Name            : vpnc
Version         : 0.5.3.svn550-2
Description     : VPN client for cisco3000 VPN Concentrators
Architecture    : x86_64
URL             : http://www.unix-ag.uni-kl.de/~massar/vpnc/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : libgcrypt  openssl  iproute2
Optional Deps   : openresolv: Let vpnc manage resolv.conf
Conflicts With  : None
Replaces        : None
Download Size   : 71.40 KiB
Installed Size  : 196.00 KiB
Packager        : Jan de Groot <jgc@archlinux.org>
Build Date      : Sat 04 Mar 2017 07:15:23 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Warsow contains a library called steamlib which is built from the source. It’s useful only for Steam support which is nonfree software.

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si webfs
Repository      : community
Name            : webfs
Version         : 1.21-13
Description     : Simple and instant http server for mostly static content.
Architecture    : x86_64
URL             : http://linux.bytesex.org/misc/webfs.html
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : mime-types  openssl
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 26.04 KiB
Installed Size  : 55.00 KiB
Packager        : Jelle van der Waa <jelle@vdwaa.nl>
Build Date      : Sat 04 Mar 2017 06:06:34 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it optdepends on openssl.

$ pacman -Si websocketpp
Repository      : community
Name            : websocketpp
Version         : 0.7.0-1
Description     : C++/Boost Asio based websocket client/server library
Architecture    : any
URL             : http://www.zaphoyd.com/websocketpp/
Licenses        : BSD
Groups          : None
Provides        : None
Depends On      : None
Optional Deps   : openssl: TLS socket component support
                  asio: alternative asio transport support
                  boost: non C++11 environments support
                  boost-libs: non C++11 environments support
Conflicts With  : None
Replaces        : None
Download Size   : 116.73 KiB
Installed Size  : 1002.00 KiB
Packager        : Levente Polyak <anthraxx@archlinux.org>
Build Date      : Tue 23 Feb 2016 09:20:59 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Description:

• The Arch version of Wesnoth from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : community
Name            : wesnoth
Version         : 1.12.6-4
Description     : A turn-based strategy game on a fantasy world
Architecture    : x86_64
URL             : http://www.wesnoth.org/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : sdl_ttf  sdl_net  sdl_mixer  sdl_image  fribidi  boost-libs  pango  lua52  wesnoth-data  dbus  python2
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 4.97 MiB
Installed Size  : 22.86 MiB
Packager        : Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
Build Date      : Mon 02 Jan 2017 07:52:21 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/wesnothd.service is owned by wesnoth 1.12.6-4
/usr/lib/tmpfiles.d/wesnothd.conf is owned by wesnoth 1.12.6-4

Steps to reproduce:

• Install package.

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

This package contains vague terminology “Open Source”:

extra/wildmidi 0.4.0-1
    Open Source MIDI Synthesizer

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

Free Software MIDI Synthesizer