|
Packages | Any | Bug Report | Very Low | Medium | [slim] login screen not displaying correctly | Assigned | |
Task Description
It worked fine on the previous version of Hyperbola. The word user/username does not show up. A workaround is to wait 10 seconds and enter the username and click enter - then it will switch correctly to the password screen (otherwise you need to enter the username and password at least twice in order to successfully login).
|
|
Packages | Any | Bug Report | Very Low | Medium | [openrc] cannot load fuse at boot | Unconfirmed | |
Task Description
I added <quote>modules=”fs-fuse”</quote> to /etc/conf.d/modules (and also “fuse” instead).
I looked in /var/log/rc.log and I see this line
<quote>modprobe: FATAL: Module fs-fusetun not found in directory /lib/modules/4.9.194-gnu-1-lts</quote>
It looks like modprobe added “tun” to the filename which prevents loading the module.
|
|
Packages | Any | Bug Report | Very Low | Medium | [exfat-utils] filesystem can only be mounted manually | Unconfirmed | |
Task Description
One can mount exfat by running commands such as “sudo modprobe fuse” and “sudo mount.exfat /dev/sdc1 /mnt/storage” but it is inconvenient.
Also, loading fuse at startup is problematic - see here:
https://issues.hyperbola.info/index.php?do=details&task_id=1433
|
|
Packages | Stable | Bug Report | Very Low | High | [vlc] DVB : cache_block stream error: cannot pre fill b... | Unconfirmed | |
Task Description
Current VLC version (3.0.4-3.hyperbola1.backports1) fails to play DVB stream using a RTL2832 usb dongle.
I start the playlist like this :
vlc channels.conf
but it returns the following error :
cache_block stream error: cannot pre fill buffer
Also, it asks the user to be in “video” group to access DVB device, this was not needed before with Hyperbola 0.2.9. User being in “wheel” was enough. Anyway, even after adding my user to video group, it still fails with “cache_block stream error: cannot pre fill buffer”
This is not an issue with my DVB adapter or driver. rtl2832 is correctly loaded. And I can play the channels.conf playlist just fine with “mpv” or “mplayer”. Also, the channels.conf used works just fine with a more recent version of VLC on an other system (Manjaro) so something is broken with the current VLC used.
Maybe a package bump would fix the issue.
|
|
Packages | Any | Bug Report | Very Low | Critical | [system-config-printer] Impossible to print some pdfs (... | Assigned | |
Task Description
Hello,
I’m unable to print some pdfs on my Hyperbola 3.0 system. Some background :
cups is installed, service enabled and working system-config-printer is installed and my printer has been correctly added.
I can print most pdfs and text files but recently with a pdf, it fails to print it.* And system-config-printer returned the following error (see capture) :
Printer "EPSON XP-620-Series" requires the '/usr/lib/cups/filters/epson-escpr-wrapper' but it is not currently installed.
Currently, “epson-escpr-wrapper” is installed but it is in :
/usr/libexec/cups/filters/epson-escpr-wrapper
Looking at source code of system-config-printer, it expects that wrapper to be installed in “/usr/lib/” so I tried to symlink that “epson-escpr-wrapper” to “/usr/lib/cups/filters” but it doesn’t work..
*With a Debian system and the exact same configuration, the “problematic” pdf prints just fine so it is not an issue with the pdf.
|
|
Packages | Any | Update Request | Very Low | Medium | [lmms] update package version to 1.2.0 | Unconfirmed | |
Task Description
In the latest version, it has many more changes with new and improvement features, and fixes function issues since released as preview stage in every eight times per three years ago[1]. And also it is possible to rebuild package with sndio.
[1]: https://github.com/LMMS/lmms/releases/ (see all sections below from 1.2.0-RC1 to 1.2.0 in the version history releases)
|
|
Packages | Any | Bug Report | Very Low | High | [rubyripper] GUI doesn't work | Unconfirmed | |
Task Description
rrip_gui does not work. The fix is to install cairo-gobject which is not in the repos. Attached is a working PKGBUILD adapted from the official one.
|
|
Packages | Stable | Bug Report | Very Low | Very Low | [spamassassin] has different directory permissions than... | Deferred | |
Task Description
Description: The /usr/sbin directory in spamassassin has permissions 755 https://git.hyperbola.info:50100/packages/extra.git/tree/spamassassin/PKGBUILD#n88
And ‘filesystem’ sets it to 750 https://git.hyperbola.info:50100/packages/core.git/tree/filesystem/PKGBUILD#n135
So when installing spamassassin, pacman throws a warning
warning: directory permissions differ on /usr/sbin/
filesystem: 750 package: 755
Additional info: * spamassassin 3.4.2-1.hyperbola2
|
|
Packages | Stable | Bug Report | Very Low | Low | Chemical uknown media types | Researching | |
Task Description
I do not know how to solve this. Some of packages is causing this problem. I do not know which one.
Description:
(4/4) Updating the MIME type database... Unknown media type in type ‘chemical/x-alchemy’ Unknown media type in type ‘chemical/x-cache’ Unknown media type in type ‘chemical/x-cactvs-ascii’ Unknown media type in type ‘chemical/x-cactvs-binary’ Unknown media type in type ‘chemical/x-cactvs-table’ Unknown media type in type ‘chemical/x-cdx’ Unknown media type in type ‘chemical/x-cdxml’ Unknown media type in type ‘chemical/x-chem3d’ Unknown media type in type ‘chemical/x-cif’ Unknown media type in type ‘chemical/x-cml’ Unknown media type in type ‘chemical/x-daylight-smiles’ Unknown media type in type ‘chemical/x-dmol’ Unknown media type in type ‘chemical/x-gamess-input’ Unknown media type in type ‘chemical/x-gamess-output’ Unknown media type in type ‘chemical/x-gaussian-input’ Unknown media type in type ‘chemical/x-gaussian-log’ Unknown media type in type ‘chemical/x-genbank’ Unknown media type in type ‘chemical/x-gulp’ Unknown media type in type ‘chemical/x-hin’ Unknown media type in type ‘chemical/x-inchi’ Unknown media type in type ‘chemical/x-inchi-xml’ Unknown media type in type ‘chemical/x-jcamp-dx’ Unknown media type in type ‘chemical/x-macromodel-input’ Unknown media type in type ‘chemical/x-mdl-molfile’ Unknown media type in type ‘chemical/x-mdl-rdfile’ Unknown media type in type ‘chemical/x-mdl-rxnfile’ Unknown media type in type ‘chemical/x-mdl-sdfile’ Unknown media type in type ‘chemical/x-mdl-tgf’ Unknown media type in type ‘chemical/x-mmcif’ Unknown media type in type ‘chemical/x-mol2’ Unknown media type in type ‘chemical/x-mopac-graph’ Unknown media type in type ‘chemical/x-mopac-input’ Unknown media type in type ‘chemical/x-mopac-out’ Unknown media type in type ‘chemical/x-msi-car’ Unknown media type in type ‘chemical/x-msi-hessian’ Unknown media type in type ‘chemical/x-msi-mdf’ Unknown media type in type ‘chemical/x-msi-msi’ Unknown media type in type ‘chemical/x-ncbi-asn1’ Unknown media type in type ‘chemical/x-ncbi-asn1-binary’ Unknown media type in type ‘chemical/x-ncbi-asn1-xml’ Unknown media type in type ‘chemical/x-pdb’ Unknown media type in type ‘chemical/x-shelx’ Unknown media type in type ‘chemical/x-vmd’ Unknown media type in type ‘chemical/x-xyz’ Unknown media type in type ‘all/all’ Unknown media type in type ‘all/allfiles’
|
|
Packages | Stable | Bug Report | Very Low | Very Low | [postfix] has different directory permissions than 'fil... | Deferred | |
Task Description
Description: The /usr/sbin directory in postfix has permissions 755 https://git.hyperbola.info:50100/packages/extra.git/tree/postfix/PKGBUILD#n115
And ‘filesystem’ sets it to 750 https://git.hyperbola.info:50100/packages/core.git/tree/filesystem/PKGBUILD#n135
So when installing postfix, pacman throws a warning
warning: directory permissions differ on /usr/sbin/
filesystem: 750 package: 755
Additional info: * postfix-3.2.2-1.hyperbola6
|
|
Packages | Stable | Bug Report | Very Low | Medium | [sshguard] violates Hyperbola packaging standards | Unconfirmed | |
Task Description
Description: The sshguard package should have its /usr/bin/sshguard executable in /usr/sbin, has systemd service files and no OpenRC init script
Additional info: * sshguard-2.0.0-4 * when I run `sshguard`:
# sshguard
/usr/bin/sshguard: line 87: /usr/bin/journalctl: No such file or directory
* default /etc/sshguard.conf
LOGREADER="LANG=C /usr/bin/journalctl -afb -p info -n1 -t sshd -o cat"
BLACKLIST_FILE=120:/var/db/sshguard/blacklist.db
BACKEND="/usr/lib/sshguard/sshg-fw-iptables"
(commenting the first line temporally solves the issue)
|
|
Packages | Stable | Bug Report | Very Low | Medium | [fail2ban] remove systemd integration | Unconfirmed | |
Task Description
Description: This package has a strong systemd integration. It has a systemd backend to get files modifications:
(from /etc/fail2ban/jail.conf)
# systemd: uses systemd python library to access the systemd journal.
# Specifying "logpath" is not valid for this backend.
# See "journalmatch" in the jails associated filter config
and many files at /etc/fail2ban/filter.d have systemd stuff
[/etc/fail2ban/filter.d] [0]
$ grep -i systemd *
dovecot.conf:#journalmatch = _SYSTEMD_UNIT=dovecot.service
ejabberd-auth.conf:# Notes.: systemd journalctl style match filter for journal based backend
postfix.conf:journalmatch = _SYSTEMD_UNIT=postfix.service
postfix-sasl.conf:#journalmatch = _SYSTEMD_UNIT=postfix.service
pure-ftpd.conf:journalmatch = _SYSTEMD_UNIT=pure-ftpd.service + _COMM=pure-ftpd
recidive.conf:journalmatch = _SYSTEMD_UNIT=fail2ban.service PRIORITY=5
sshd.conf:journalmatch = _SYSTEMD_UNIT=sshd.service + _COMM=sshd
sshd-ddos.conf:journalmatch = _SYSTEMD_UNIT=sshd.service + _COMM=sshd
Additional info: * fail2ban-0.9.6-2.hyperbola3
|
|
Packages | Stable | Bug Report | Very Low | Very Low | [fail2ban] update dovecot failregex to support verbose ... | Unconfirmed | |
Task Description
Description: The /etc/fail2ban/filter.d/dovecot.conf file has a failregex with the following:
^%(__prefix_line)s(?:auth|auth-worker\(\d+\)): (?:pam|passwd-file)\(\S+,<HOST>\): unknown user\s*$
and works with things like:
Month day time hostname dovecot: auth: passwd-file(user@domain.com,IP): unknown user
but with verbosity enabled in Dovecot, this output looks like this:
Month day time hostname dovecot: auth: passwd-file(user@domain.com,IP): unknown user (given password: password)
and in this case it doesn’t work, but it does if we fix the failregex if we replace it with:
^%(__prefix_line)s(?:auth|auth-worker\(\d+\)): (?:pam|passwd-file)\(\S+,<HOST>\): unknown user( \(given password: \S*\))?\s*$
with this new expression, it works with and without verbosity
And regarding postfix, to make it work correctly I “backported” some pieces from newest failregex:
/etc/fail2ban/postfixr-rbl.conf:
^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: [45]54 [45]\.7\.1 Service unavailable; Client host \[\S+\] blocked using .* from=<\S*> to=<\S+> proto=ESMTP helo=<\S*>$
/etc/fail2ban/postfix.conf: (second failregex)
^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: 45[04] 4\.7\.1 Client host rejected: cannot find your (reverse )?hostname, (\[\S*\]); from=<\S*> to=<\S+> proto=ESMTP helo=<\S*>$
I can create a patch if you want. Note that I haven’t tested all filters, some others may also need some rework
Additional info: * fail2ban-0.9.6-2.hyperbola3
|
|
Packages | Stable | Bug Report | Very Low | Medium | [fail2ban] uses old /usr/bin/sendmail location when it ... | Unconfirmed | |
Task Description
Description:
I saw errors in logs because fail2ban couldn’t find /usr/bin/sendmail, and discovered this:
[/etc/fail2ban] [0]
$ grep /usr/bin/sendmail */*
action.d/sendmail-buffered.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-buffered.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-buffered.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-buffered.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-common.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-common.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-geoip-lines.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-whois.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-whois-ipjailmatches.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-whois-ipmatches.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-whois-lines.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-whois-matches.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
Please, also check for other binaries with wrong locations
As of now, the solution is as simple as removing this line → https://git.hyperbola.info:50100/packages/community.git/tree/fail2ban/PKGBUILD#n79
Additional info: * fail2ban-0.9.6-2.hyperbola3
|
|
Packages | Stable | Bug Report | Very Low | High | [nftables] init service ERROR: nftables failed to start | Unconfirmed | |
Task Description
Error: conflicting protocols specified: inet-service vs. icmp
when using
ip protocol icmp icmp type echo-request counter accept comment “accept ICMP echo-request type” ip6 nexthdr icmpv6 icmpv6 type { destination-unreachable, packet-too-big, time-exceeded, parameter-problem, mld-listener-query, mld-listener-report, mld-listener-reduction, nd-router-solicit, nd-router-advert, nd-neighbor-solicit, nd-neighbor-advert } accept comment “Accept ICMPv6”
It is a known bug on 0.7 and solved on 0.9
https://bugzilla.netfilter.org/show_bug.cgi?id=1073 commit 0011985554e269e1cc8f8e5b41eb9dcd795ebe8c fixes this problem upstream.
|
|
Packages | Any | Implementation Request | Very Low | Medium | [SPF][postfix] implement pypolicyd-spf and postfix-poli... | Unconfirmed | |
Task Description
Description: Hyperbola has the following SPF implementations: * libspf2 * perl-mail-spf * perl-mail-spf-query
However, none of them work out of the box with postfix. There’s postfix-policyd-spf-perl, which uses one the current perl implementations (perl-mail-spf), takes no time to build and all the dependencies are already satisfied with Hyperbola’s packages
Here I made a PKGBUILD that’s compliant with the packaging standards:
pkgname=postfix-policyd-spf-perl
pkgver=2.011
pkgrel=1
pkgdesc='Postfix SPF policy engine, written in Perl'
arch=(i686 x86_64)
url='https://launchpad.net/postfix-policyd-spf-perl/'
license=(GPL)
depends=(perl-mail-spf perl-netaddr-ip perl-sys-hostname-long)
source=("https://launchpad.net/postfix-policyd-spf-perl/trunk/${pkgver}/+download/${pkgname}-${pkgver}.tar.gz"{,.asc})
sha512sums=('22fc00bf74912056a67e937a460ac1fd878f1cb1a3bfa7b19bc5f1e6bc1c36d815dcf8c945e818d242ed5e72a6295bb0e1569446e06b09aefb2842993b8016ba'
'SKIP')
validpgpkeys=(E7729BFFBE85400FEEEE23B178D7DEFB9AD59AF1) # Scott Kitterman
package() {
cd "${pkgname}-${pkgver}"
install -Dm755 "${pkgname}" "${pkgdir}/usr/libexec/postfix/${pkgname}"
install -Dm644 CHANGES INSTALL README -t "${pkgdir}/usr/share/doc/${pkgname}"
install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
in the other hand, to give users the possibility of having more options, we could add pypolicyd-spf (AUR), which depends in pyspf (AUR) and other packages that Hyperbola has. In fact, ArchWiki talks about this implementation, but this might not be relevant.
|
|
Packages | Stable | Bug Report | Very Low | Medium | [postgrey] has systemd service and no OpenRC init scrip... | Unconfirmed | |
Task Description
Description: The title says everything
Also, it doesn’t follow the FHS (/usr/bin/postgrey should be in /usr/sbin)
Additional info: * postgrey-1.37-1
|
|
Packages | Stable | Implementation Request | Very Low | Low | [xfe] Add Opus audio file type support | Unconfirmed | |
Task Description
A format is not known or recognized in the original code base. To add a string into at the audio section in xferc.in:
opus = "<audioplayer>,<audioplayer>,audacity;Opus Audio;mp3_32x32.png;mp3_16x16.png;;"
|
|
Packages | Stable | Freedom Issue | Very Low | Medium | [xfe] Replace with Hyperbola Iceweasel-UXP for HTML and... | Unconfirmed | |
Task Description
Two formats (including HTML and PHP) are provided to run semi-libre/free web browser Mozilla Firefox in the original code base, but it currently got blacklisted due to numerous branding, security and privacy issues, and replaced by the Hyperbola Iceweasel-UXP. To replace existing strings at the web section in xferc.in:
html = "iceweasel-uxp,iceweasel-uxp,<txteditor>;Hyper Text;html_32x32.png;html_16x16.png;;"
htm = "iceweasel-uxp,iceweasel-uxp,<txteditor>;Hyper Text;html_32x32.png;html_16x16.png;;"
php = "iceweasel-uxp,iceweasel-uxp,<txteditor>;PHP Source;html_32x32.png;html_16x16.png;;"
|
|
Packages | Stable | Freedom Issue | Very Low | Critical | [elementary-icon-theme] Contains non-FSDG compliant dis... | Assigned | |
Task Description
About that distro, Elementary OS is semi-libre/free, Ubuntu based, long term support, but does not comply with the GNU Free System Distributibution Guidelines (FSDG). To either rebrand or remove existing non-FSDG compliant distro icon files.
The following affected files are present in this list:
/usr/share/icons/elementary/places/16/distributor-logo.svg
/usr/share/icons/elementary/places/24/distributor-logo.svg
/usr/share/icons/elementary/places/32/distributor-logo.svg
/usr/share/icons/elementary/places/48/distributor-logo.svg
/usr/share/icons/elementary/places/64/distributor-logo.svg
/usr/share/icons/elementary/places/128/distributor-logo.svg
/usr/share/icons/elementary/places/symbolic/distributor-logo-symbolic.svg
|
|
Packages | Stable | Freedom Issue | Very Low | Critical | [conky] Some serious issues | Assigned | |
Task Description
I’m writing here about the package Conky. It is the useful widget of system monitor into your desktop, but there are some serious issues:
Config variables
distribution outputs the string “Arch Linux” instead of “Hyperbola GNU/Linux-libre”.
eve requires users to use API for non-libre/free video game EVE Online, and should be removed.
All Beep Media Player (BMPx) related variables (including bmpx_album, bmpx_artist, bmpx_bitrate, bmpx_title, bmpx_track and bmpx_uri) are obselete and useless, and should be removed because the package BMPx isn’t present on Arch and Hyperbola official repositories but Arch User Repository (AUR).
[For Milky Way version 0.4.x only] All PulseAudio related variables (including if_pa_sink_muted, pa_sink_volume, pa_sink_volumebar, pa_sink_description, pa_card_name and pa_card_active_profile) are no longer used, and should be removed due replaced the default audio server with sndio.
Manual
|
|
Packages | Stable | Bug Report | Very Low | Low | [autofs]: default configuration is /etc/auto.master ins... | Unconfirmed | |
Task Description
Description:
default configuration is /etc/auto.master instead of /etc/autofs/auto.master
admin→ sudo /usr/bin/automount -v -f -p /run/autofs.pid Starting automounter version 5.1.2, master map /etc/auto.master using kernel protocol version 5.02 lookup(file): file map /etc/auto.master missing or not readable no mounts in table
|
|
Packages | Any | Implementation Request | Very Low | Low | [emacs-exwm] add package | Assigned | |
Task Description
Some users use emacs as a tiling window manager. Please add EXWM[0]
[0]: https://github.com/ch11ng/exwm
|
|
Packages | Stable | Drop Request | Very Low | Critical | [osdbattery] Unmaintained and unsupportable | Unconfirmed | |
Task Description
osdbattery is (probably) useless and broken so Conky did compete because It is still unmaintained and unsupported over 14 years ago (last released version 1.4 on August 23, 2005), and should be removed per anti-abandonware rule at the packaging guidelines.
Also, the default config file contains non-libre/free Microsoft font Verdana as X11 font format property in font variable.
|
|
Packages | Any | Implementation Request | Very Low | Low | [SafeEyes] add new package | Assigned | |
Task Description
Safe Eyes is a program to manage breaks in front of the computer. It has many features that help us adapt it to our needs.
|
|
Packages | Stable | Implementation Request | Very Low | Medium | [gcc] Renew to version 8 or 9, including multilib | Deferred | |
Task Description
As even the support for GCC 7 is now ending with the release of version 7.5 (https://gcc.gnu.org/ml/gcc/2019-11/msg00099.html) I’d like to propose a renewal of the building-stack - which I think is also needed in time. Also a renewal of the glibc would be good at all!
|
|
Packages | Any | Update Request | Very Low | High | [mpv] request for package bump | Unconfirmed | |
Task Description
Hello,
Would it be possible to get a package bump for mpv ?
Currently, Debian Buster (stable) uses 0.29.1-1. This would be great as it introduces many fixes and support for lua scripts I heavily use. 0.29.* requires a ffmpeg to 4.x series as well.
Thanks.
|
|
Packages | Stable | Implementation Request | Very Low | Low | [codelite] Adding new package | Unconfirmed | |
Task Description
The IDE codelite is an excellent development environment, continuously updated, has a clear vision and active support. Would be nice to have this one within the repositories in upcoming releases, perhaps 0.5?
|
|
Packages | Any | Freedom Issue | Very Low | Low | [gnome] Complete remval of desktop-environment | Unconfirmed | |
Task Description
Description: As Gnome has decided against following libre, free principles the desktop-environment has becoming a risk for the privacy and freedom for users. Meaning that the desktop-environment with all basic packages should be removed. Of course the final decision is up to the community and the development-team. Followed up are more reasons for the insights:
* Bloated with questionable dependencies (including mandatory systemd) * Using proprietary services as high risk for freedom and privacy for users (https://i.stack.imgur.com/yZcyV.png) * Coming up with questionable and vague principles, against software-freedom in a whole (inclusion of flatpak and flathub as so-called standardization for distributions, discussions about proprietary software included within the software-center)
Additional info for packages:
gnome-backgrounds gnome-calculator gnome-contacts gnome-control-center gnome-dictionary gnome-disk-utility gnome-font-viewer gnome-keyring gnome-screenshot gnome-session gnome-settings-daemon gnome-shell gnome-shell-extensions gnome-system-monitor gnome-terminal gnome-themes-standard gnome-user-docs gnome-user-share grilo-plugins
|
|
Packages | Any | Security Issue | Very Low | Medium | Download debian-fixes instead of relying on external so... | Unconfirmed | |
Task Description
It happened already with minetest and again with prosody: When trying to build own packages with makepkg there are patches downloaded from the Debian-project. But the given HTTP(S)-sources are no longer available, concrete example within prosody to be found: https://deb.debian.org/debian/pool/main/p/prosody/prosody_0.10.2-1~bpo9+1.debian.tar.xz (not available)
Please don’t rely on those external sources when creating PKGBUILD-files or just give users the possibility for a secure and granted download. Therefore I cannot build prosody on my own now!
|
|
Packages | Any | Privacy Issue | Very Low | Critical | [bleachbit] needs to be adapted to UXP applications | Assigned | |
Task Description
The current version of BleachBit needs to be adapted so it can clean the new .cache/hyperbola/ directory.
|
|
Packages | Any | Security Issue | Very Low | Critical | [unbound] Multiple CVEs | Assigned | |
Task Description
https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/
[Critical] https://security-tracker.debian.org/tracker/CVE-2019-18934
|
|
Packages | Stable | Bug Report | Very Low | Medium | linphonec error (cli version) | Unconfirmed | |
Task Description
Description: linphonec is unusable because a error produce a continuous log
Additional info: linphone 3.11.1-1.hyperbola1
Steps to reproduce: linphonec
Log: linphonec> 2019-12-15 19:25:58:010 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:03:012 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:08:018 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:13:013 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:18:016 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:23:014 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:28:010 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:33:010 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:38:012 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:43:015 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:48:010 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:53:010 ortp-error-Error in connect: Network is unreachable
|
|
Packages | Any | Bug Report | Very Low | Low | Xenocara xbacklight bug | Unconfirmed | |
Task Description
When i try to set the brightness on my screen, with xbacklight -set 100,
it does this:
No outputs have backlight property
and it doesn’t really matter if I set it lower than 100 or what it currently is at.
Fix when you can please!
|
|
Packages | Stable | Update Request | Very Low | Low | [icewm] Upgrade package version | Unconfirmed | |
Task Description
The current version of the package icewm within the Hyperbola-repositories is 1.3.8. The latest version is 1.6.3! An update would be helpful as this window-manager follows absolutely the principles of the distribution Hyperbola itself, being simple and fast.
|
|
Packages | Any | Bug Report | Very Low | Low | lightdm/lxdm bug | Unconfirmed | |
Task Description
It appears when I plug in my libreboot laptop x200 in, it appears to dim the screen and when its unplugged, the screen is bright again. Something peculiar is at work, I wondered if this could be fixed.
My assumption is it is related to lxdm or lightdm. Any thoughts?
I am currently using 0.4, so I don’t expect this to be a fast process, just when you get a chance okay?
|
|
Packages | Stable | Bug Report | Very Low | Critical | [smartmontools] update-smart-drivedb fails to update | Assigned | |
Task Description
smartmontools 6.5-1.hyperbola1
Error while trying to update smart-drivedb :
anon@test[~] update-smart-drivedb
External Link/usr/bin/update-smart-drivedb: download from branches/RELEASE_6_5_DRIVEDB failed (curl: exit 23)
/usr/bin/update-smart-drivedb: download from trunk failed (curl: exit 23)
|
|
Packages | Stable | Security Issue | Very Low | Critical | [lts-kernel][sec] filter /dev/mem access & restrict acc... | Unconfirmed | |
Task Description
These two options could be enabled :
Kernel hacking → [*] Filter access to /dev/mem [*] Filter I/O access to /dev/mem
Security options → [*] Restrict unprivileged access to the kernel syslog
|
|
Packages | Any | Freedom Issue | Very Low | Low | [hedgewars] Crash when starting a new singleplayer-camp... | Unconfirmed | |
Task Description
When trying to start a new campaign the complete game-engine is crashing with the following message:
Object::disconnect: Unexpected null parameter QCoreApplication::postEvent: Unexpected null receiver
As ghc and fpc should be removed in the near future it would be good to validate this or otherwise remove the game-package itself also.
|
|
Packages | Stable | Bug Report | Very Low | Low | [dhcpcd-ui] Adding icons from "Network-Manager Applet" | Unconfirmed | |
Task Description
When using the package for wireless connections no further icon is displayed without having the package [b]network-manager-applet[/b] installed.
|
|
Packages | Any | Security Issue | Very Low | High | [tigervnc] Multiple CVE | Researching | |
Task Description
https://www.openwall.com/lists/oss-security/2019/12/20/2
“This is a security release to fix a number of issues that were found by Kaspersky Lab. These issues affect both the client and server and could theoretically allow an malicious peer to take control over the software on the other side.”
|
|
Packages | Any | Security Issue | Very Low | Critical | [opensmtpd] CVE-2020-8794 | Unconfirmed | |
Task Description
Description: https://www.openwall.com/lists/oss-security/2020/02/24/5 https://www.bleepingcomputer.com/news/security/new-critical-rce-bug-in-openbsd-smtp-server-threatens-linux-distros/
Qualys Security Advisory
LPE and RCE in OpenSMTPD’s default install (CVE-2020-8794)
Summary Analysis ... Acknowledgments
We discovered a vulnerability in OpenSMTPD, OpenBSD’s mail server. This vulnerability, an out-of-bounds read introduced in December 2015 (commit 80c6a60c, “when peer outputs a multi-line response ...”), is exploitable remotely and leads to the execution of arbitrary shell commands: either as root, after May 2018 (commit a8e22235, “switch smtpd to new grammar”); or as any non-root user, before May 2018.
Because this vulnerability resides in OpenSMTPD’s client-side code (which delivers mail to remote SMTP servers), we must consider two different scenarios:
- Client-side exploitation: This vulnerability is remotely exploitable
in OpenSMTPD's (and hence OpenBSD's) default configuration. Although
OpenSMTPD listens on localhost only, by default, it does accept mail
from local users and delivers it to remote servers. If such a remote
server is controlled by an attacker (either because it is malicious or
compromised, or because of a man-in-the-middle, DNS, or BGP attack --
SMTP is not TLS-encrypted by default), then the attacker can execute
arbitrary shell commands on the vulnerable OpenSMTPD installation.
- Server-side exploitation: First, the attacker must connect to the
OpenSMTPD server (which accepts external mail) and send a mail that
creates a bounce. Next, when OpenSMTPD connects back to their mail
server to deliver this bounce, the attacker can exploit OpenSMTPD's
client-side vulnerability. Last, for their shell commands to be
executed, the attacker must (to the best of our knowledge) crash
OpenSMTPD and wait until it is restarted (either manually by an
administrator, or automatically by a system update or reboot).
We developed a simple exploit for this vulnerability and successfully tested it against OpenBSD 6.6 (the current release), OpenBSD 5.9 (the first vulnerable release), Debian 10 (stable), Debian 11 (testing), and Fedora 31.
The fix is delivered in OpenSMTPD 6.6.4p1, available here, which the developer recommends installing “AS SOON AS POSSIBLE.”
|
|
Packages | Any | Implementation Request | Very Low | Medium | [chdkptp] please add package to control Canon cameras | Unconfirmed | |
Task Description
CHDKPTP is part of CHDK project - a free software firmware add-on for Canon cameras. It enables controlling Canon cameras via the computer.
Attached is a modified iup PKGBUILD (Lua 5.3 build was removed as it failed to compile) and configuration files for chdkptp.
Code is available via svn:
$ svn co http://subversion.assembla.com/svn/chdkptp/trunk chdkptp
Copy chdkptp.sh and config.mk files to source tree then compile via make. chdkptp requires root privileges to connect to a camera.
|
|
Packages | Any | Implementation Request | Very Low | Low | [chdkptp] please add package to repos | Unconfirmed | |
Task Description
CHDKPTP is part of CHDK project - a free software firmware add-on for Canon cameras. It enables controlling Canon cameras via the computer.
Attached is a modified iup PKGBUILD (Lua 5.3 build was removed as it failed to compile) and configuration files for chdkptp.
Code is available via svn:
$ svn co http://subversion.assembla.com/svn/chdkptp/trunk chdkptp
Copy chdkptp.sh and config.mk files to source tree then compile via make. Requires root privileges to connect to a camera.
|
|
Packages | Stable | Bug Report | Very Low | High | [ispell] require FHS | Requires Testing | |
Task Description
Description:
cant open /usr/local/lib/english.hash
Additional info:
Repository : extra
Name : ispell
Version : 3.3.02-7
Description : An interactive spell-checking program for Unix
Architecture : x86_64
URL : http://ficus-www.cs.ucla.edu/geoff/ispell.html
Licenses : BSD
Groups : None
Provides : None
Depends On : ncurses
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 321.26 KiB
Installed Size : 1336.00 KiB
Packager : Evangelos Foutras <evangelos@foutrelis.com>
Build Date : Sun Sep 6 12:07:06 2015
Validated By : MD5 Sum SHA-256 Sum Signature
Steps to reproduce:
- Install package
|
|
Packages | Stable | Security Issue | Very Low | Medium | [git] Multiple CVEs | Unconfirmed | |
Task Description
CVE-2020-5260 has been fixed very recently in Debian, so I thought I would apply this patch. However, I found out that security patches have not been applied for quite a while (I could account for at least 6 CVEs).
Considering that the version in Debian stretch (2.11.0) is the nearest version with security patches released by Debian and that git project oldest supported version is 2.17, I have used patches from Debian stretch to apply on 2.12.2 currently in Milky Way.
But I have the following error on check():
| *** prove ***
|
| Test Summary Report
| -------------------
| t5570-git-daemon.sh (Wstat: 256 Tests: 20 Failed: 10)
| Failed tests: 3-7, 15-19
| Non-zero exit status: 1
| t5811-proto-disable-git.sh (Wstat: 256 Tests: 26 Failed: 16)
| Failed tests: 2-6, 9-11, 15-19, 21-23
| Non-zero exit status: 1
| Files=769, Tests=14137, 1101 wallclock secs ( 8.08 usr 1.12 sys + 144.48 cusr 63.42 csys = 217.10 CPU)
| Result: FAIL
| make[1]: *** [Makefile:45: prove] Error 1
| make[1]: Leaving directory '/build/git/src/git-2.12.2/t'
| make: *** [Makefile:2291: test] Error 2
| ==> ERROR: A failure occurred in check().
| Aborting...
This does not seem to be related to my change as the current version in Milky Way produces the same error (IOW the package currently in Milky Way is not rebuidable).
|
|
Packages | Stable | Bug Report | Very Low | Critical | [gtk-2] Severe problems with GTK2-applications | Unconfirmed | |
Task Description
Description: Since the migration to xenocara there seems to be a bug with applications using GTK-2. From time to time there are crashes with assertion `!xcb_xlib_threads_sequence_lost’.
Looking into this a little bit more deep there are also other distributions affected and this is an upstream-bug. But the concrete situation is not that easy, while it could be also part of the library libX11 itself. Looking therefore here: https://bugs.launchpad.net/ubuntu/+source/pcmanfm/+bug/1782984
Affected are for example LXDE in general, icedove, iceweasel and many more!
|
|
Packages | Stable | Freedom Issue | Very Low | Critical | [keybase] Complete removal of tool | Unconfirmed | |
Task Description
There is only the source code of the client available and since years nothing more happened. With keybase joining “Zoom” nothing more seems to happen. Look also here in the forum: https://forums.hyperbola.info/viewtopic.php?id=368
|
|
Packages | Any | Freedom Issue | Very Low | High | Synergy en teclado en español no tiene tildes ni ñ | Unconfirmed | |
Task Description
Description: Share a single mouse and keyboard between multiple computers, with libressl and OpenRC support
Issue: Synergy no es capas de trasmitir tildes ni eñes y demás caracteres del español españa
Additional info: * package version(s): community/synergy 1.8.8-2.hyperbola1 * config and/or log files etc.
Steps to reproduce: instalarar synergy en 2 PCs con hyperbola 0.3, he intentar escribir tildes, no funcionará...
|
|
Packages | Any | Backport Request | Very Low | Low | elogind package | Unconfirmed | |
Task Description
Description: Was wondering if there is any issue in terms of freedom andor privacy for the inclusion of elogind? Feedback will be apreciated Cheers.
this was recently implemented in gentoo.
source: https://libregit.org/i3_relativism/elogind
references: https://blogs.gentoo.org/leio/2019/03/26/gnome-3-30/#comment-9555 https://forums.gentoo.org/viewtopic-t-1094796.html
contact gentoo developer for help in implementation: https://wiki.gentoo.org/wiki/User:Leio/TODO
|