Packages

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si iputils
Repository      : core
Name            : iputils
Version         : 20161105.1f2bb12-2
Description     : Network monitoring tools, including ping
Architecture    : x86_64
URL             : http://www.skbuff.net/iputils/
Licenses        : GPL
Groups          : base
Provides        : None
Depends On      : openssl  sysfsutils  libcap  libidn
Optional Deps   : xinetd: for tftpd
Conflicts With  : netkit-base  arping  netkit-tftpd
Replaces        : netkit-base
Download Size   : 71.17 KiB
Installed Size  : 172.00 KiB
Packager        : Pierre Schmitz <pierre@archlinux.de>
Build Date      : Sat 11 Feb 2017 09:06:45 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

This package contains vague terminology “Open Source”:

community/irrlicht-docs 1.8.4-1
    An open source high performance realtime 3D graphics engine.

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

A free software high performance realtime 3D graphics engine.

This package contains vague terminology “Open Source”:

community/irrlicht 1.8.4-1
    An open source high performance realtime 3D graphics engine.

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

A free software high performance realtime 3D graphics engine.

Multiple vulnerabilities have been located in Irssi.

Access remote: yes

References links:

• https://irssi.org/security/irssi_sa_2018_02.txt

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si irssi
Repository      : extra
Name            : irssi
Version         : 1.0.2-2
Description     : Modular text mode IRC client with Perl scripting
Architecture    : x86_64
URL             : https://irssi.org/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : glib2  openssl
Optional Deps   : perl-libwww: for the scriptassist script
Conflicts With  : None
Replaces        : None
Download Size   : 537.57 KiB
Installed Size  : 1902.00 KiB
Packager        : Levente Polyak <anthraxx@archlinux.org>
Build Date      : Wed 15 Mar 2017 02:43:20 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Description:

community/isapnptools 1.27-4
     Allow ISA Plug-And-Play devices to be configured on a Linux machine

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Description:

community/isatapd 0.9.7-4
     Creates and maintains an ISATAP tunnel (rfc5214) in Linux

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

isync is currently on 1.2.1-3, the versions is 2 years old and a lot of security/features have been implemented to the version 1.3.0

isync needs be upgraded from 1.2.1 to 1.2.3 since it is a bugfix adapted for our current snapshot in Milky Way (2017-05-08) which is using isync 1.2.x series.

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si isync
Repository      : community
Name            : isync
Version         : 1.2.3-1.hyperbola1
Description     : IMAP and MailDir mailbox synchronizer
Architecture    : x86_64
URL             : http://isync.sourceforge.net
Licenses        : GPL2
Groups          : None
Provides        : None
Depends On      : openssl  libsasl
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 137.46 KiB
Installed Size  : 415.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Thu 09 Nov 2017 01:47:02 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

This package contains vague terminology “Open Source”:

extra/java-openjfx-doc 8.u121-1
    Java OpenJFX 8 client application platform (open-source implementation of JavaFX) - documentation

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

Java OpenJFX 8 client application platform (free-software implementation of JavaFX) - documentation

This package contains vague terminology “Open Source”:

extra/java-openjfx-src 8.u121-1
    Java OpenJFX 8 client application platform (open-source implementation of JavaFX) - sources

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

Java OpenJFX 8 client application platform (free-software implementation of JavaFX) - sources

This package contains vague terminology “Open Source”:

extra/java-openjfx 8.u121-1
    Java OpenJFX 8 client application platform (open-source implementation of JavaFX)

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

Java OpenJFX 8 client application platform (free-software implementation of JavaFX)

This package contains vague terminology “Open Source”:

extra/java-rhino 1.7.7.1-1.hyperbola1
    Open-source implementation of JavaScript written entirely in Java - JAR

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

Free-software implementation of JavaScript written entirely in Java - JAR

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Rebuild package against libressl, since it depends on openssl-1.0.

$ pacman -Si john
Repository      : community
Name            : john
Version         : 1.8.0.jumbo1-6
Description     : John the Ripper password cracker
Architecture    : x86_64
URL             : http://www.openwall.com/john
Licenses        : GPL2  custom
Groups          : None
Provides        : None
Depends On      : openssl-1.0  gmp  libpcap  openmpi  gcc-libs  opencl-icd-loader
Optional Deps   : bash-completion: completion for bash
                  perl: perl based john scripts
                  ruby: ruby based john scripts
                  python2: python based john scripts
Conflicts With  : None
Replaces        : None
Download Size   : 21.24 MiB
Installed Size  : 55.47 MiB
Packager        : Antonio Rojas <arojas@archlinux.org>
Build Date      : Wed 05 Apr 2017 07:33:57 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Description:

community/joyutils 1.2.15-8
     jscal, jstest, and jsattach utilities for the Linux joystick driver

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Rebuild package against libressl, since it makedepends on openssl.

$ pacman -Si julia
Repository      : community
Name            : julia
Version         : 2:0.5.1-7
Description     : High-level, high-performance, dynamic programming language
Architecture    : x86_64
URL             : http://julialang.org/
Licenses        : MIT
Groups          : None
Provides        : None
Depends On      : arpack  fftw  libunwind  mpfr  suitesparse  pcre2  libgit2  llvm39-libs  patchelf  hicolor-icon-theme
Optional Deps   : gnuplot: If using the Gaston Package from julia
Conflicts With  : None
Replaces        : None
Download Size   : 11.37 MiB
Installed Size  : 73.80 MiB
Packager        : Antonio Rojas <arojas@archlinux.org>
Build Date      : Wed 26 Apr 2017 12:28:07 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Description:

• Option to add NextCloud/OwnCloud accounts in ‘Online Accounts’ section of System Settings not appearing.

Additional info:
* package version(s)

• 17.04.0-1

* config and/or log files etc.

• N/A

Steps to reproduce:

• Run application
• Go to ‘Online Accounts’ section of System Settings

Description:

In my opinion, this software shall be either removed, or features disabled to access either Google or Facebook, as those are proprietary networks.

Further, using those proprietary networks is steering users towards non-free software, directly, or indirectly, as many times Javascript need to be handled that is proprietary.

extra/kaccounts-integration 17.04.0-1 (kde-applications kdenetwork)
    Small system to administer web accounts for the sites and services across the KDE desktop, including: Google, Facebook, Owncloud, IMAP, Jabber and others

See:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

A free system distribution must not steer users towards obtaining any nonfree information for practical use, or encourage them to do so.

extra/kaccounts-providers 17.04.0-1 (kde-applications kdenetwork)
    Small system to administer web accounts for the sites and services across the KDE desktop, including: Google, Facebook, Owncloud, IMAP, Jabber and others

I do not see why would “Google” and “Facebook” be there on the first place. This software shall be either removed, or features to access proprietary networks disabled.

Another point is that often such access would required handling the proprietary javascript. I do not know if that is the case here.

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .