|
Stable | Bug Report | Very Low | Medium | [sshguard] violates Hyperbola packaging standards | Closed | |
Task Description
Description: The sshguard package should have its /usr/bin/sshguard executable in /usr/sbin, has systemd service files and no OpenRC init script
Additional info: * sshguard-2.0.0-4 * when I run `sshguard`:
# sshguard
/usr/bin/sshguard: line 87: /usr/bin/journalctl: No such file or directory
* default /etc/sshguard.conf
LOGREADER="LANG=C /usr/bin/journalctl -afb -p info -n1 -t sshd -o cat"
BLACKLIST_FILE=120:/var/db/sshguard/blacklist.db
BACKEND="/usr/lib/sshguard/sshg-fw-iptables"
(commenting the first line temporally solves the issue)
|
|
Stable | Bug Report | Very Low | Medium | [fail2ban] remove systemd integration | Closed | |
Task Description
Description: This package has a strong systemd integration. It has a systemd backend to get files modifications:
(from /etc/fail2ban/jail.conf)
# systemd: uses systemd python library to access the systemd journal.
# Specifying "logpath" is not valid for this backend.
# See "journalmatch" in the jails associated filter config
and many files at /etc/fail2ban/filter.d have systemd stuff
[/etc/fail2ban/filter.d] [0]
$ grep -i systemd *
dovecot.conf:#journalmatch = _SYSTEMD_UNIT=dovecot.service
ejabberd-auth.conf:# Notes.: systemd journalctl style match filter for journal based backend
postfix.conf:journalmatch = _SYSTEMD_UNIT=postfix.service
postfix-sasl.conf:#journalmatch = _SYSTEMD_UNIT=postfix.service
pure-ftpd.conf:journalmatch = _SYSTEMD_UNIT=pure-ftpd.service + _COMM=pure-ftpd
recidive.conf:journalmatch = _SYSTEMD_UNIT=fail2ban.service PRIORITY=5
sshd.conf:journalmatch = _SYSTEMD_UNIT=sshd.service + _COMM=sshd
sshd-ddos.conf:journalmatch = _SYSTEMD_UNIT=sshd.service + _COMM=sshd
Additional info: * fail2ban-0.9.6-2.hyperbola3
|
|
Stable | Bug Report | Very Low | Very Low | [fail2ban] update dovecot failregex to support verbose ... | Unconfirmed | |
Task Description
Description: The /etc/fail2ban/filter.d/dovecot.conf file has a failregex with the following:
^%(__prefix_line)s(?:auth|auth-worker\(\d+\)): (?:pam|passwd-file)\(\S+,<HOST>\): unknown user\s*$
and works with things like:
Month day time hostname dovecot: auth: passwd-file(user@domain.com,IP): unknown user
but with verbosity enabled in Dovecot, this output looks like this:
Month day time hostname dovecot: auth: passwd-file(user@domain.com,IP): unknown user (given password: password)
and in this case it doesn’t work, but it does if we fix the failregex if we replace it with:
^%(__prefix_line)s(?:auth|auth-worker\(\d+\)): (?:pam|passwd-file)\(\S+,<HOST>\): unknown user( \(given password: \S*\))?\s*$
with this new expression, it works with and without verbosity
And regarding postfix, to make it work correctly I “backported” some pieces from newest failregex:
/etc/fail2ban/postfixr-rbl.conf:
^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: [45]54 [45]\.7\.1 Service unavailable; Client host \[\S+\] blocked using .* from=<\S*> to=<\S+> proto=ESMTP helo=<\S*>$
/etc/fail2ban/postfix.conf: (second failregex)
^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: 45[04] 4\.7\.1 Client host rejected: cannot find your (reverse )?hostname, (\[\S*\]); from=<\S*> to=<\S+> proto=ESMTP helo=<\S*>$
I can create a patch if you want. Note that I haven’t tested all filters, some others may also need some rework
Additional info: * fail2ban-0.9.6-2.hyperbola3
|
|
Stable | Bug Report | Very Low | Medium | [fail2ban] uses old /usr/bin/sendmail location when it ... | Closed | |
Task Description
Description:
I saw errors in logs because fail2ban couldn’t find /usr/bin/sendmail, and discovered this:
[/etc/fail2ban] [0]
$ grep /usr/bin/sendmail */*
action.d/sendmail-buffered.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-buffered.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-buffered.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-buffered.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-common.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-common.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-geoip-lines.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-whois.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-whois-ipjailmatches.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-whois-ipmatches.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-whois-lines.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
action.d/sendmail-whois-matches.conf: Fail2Ban" | /usr/bin/sendmail -f <sender> <dest>
Please, also check for other binaries with wrong locations
As of now, the solution is as simple as removing this line → https://git.hyperbola.info:50100/packages/community.git/tree/fail2ban/PKGBUILD#n79
Additional info: * fail2ban-0.9.6-2.hyperbola3
|
|
Stable | Bug Report | Very Low | High | [nftables] init service ERROR: nftables failed to start | Closed | |
Task Description
Error: conflicting protocols specified: inet-service vs. icmp
when using
ip protocol icmp icmp type echo-request counter accept comment “accept ICMP echo-request type” ip6 nexthdr icmpv6 icmpv6 type { destination-unreachable, packet-too-big, time-exceeded, parameter-problem, mld-listener-query, mld-listener-report, mld-listener-reduction, nd-router-solicit, nd-router-advert, nd-neighbor-solicit, nd-neighbor-advert } accept comment “Accept ICMPv6”
It is a known bug on 0.7 and solved on 0.9
https://bugzilla.netfilter.org/show_bug.cgi?id=1073 commit 0011985554e269e1cc8f8e5b41eb9dcd795ebe8c fixes this problem upstream.
|
|
Stable | Bug Report | Very Low | High | [apache][module] mod_wsgi returns "undefined symbol: Py ... | Closed | |
Task Description
Description: I updated mod_wsgi, restarted httpd service and got this error:
$ sudo rc-service httpd restart
* httpd has detected an error in your setup:
httpd: Syntax error on line 183 of /etc/httpd/conf/httpd.conf: Cannot load modules/mod_wsgi.so into server: /etc/httpd/modules/mod_wsgi.so: undefined symbol: PyObject_SetItem
* ERROR: httpd failed to stop
Additional info: * mod_wsgi-4.4.22-1.hyperbola1
|
|
Stable | Bug Report | Very Low | Medium | [postgrey] has systemd service and no OpenRC init scrip ... | Closed | |
Task Description
Description: The title says everything
Also, it doesn’t follow the FHS (/usr/bin/postgrey should be in /usr/sbin)
Additional info: * postgrey-1.37-1
|
|
Stable | Implementation Request | Very Low | Low | [xfe] Add Opus audio file type support | Closed | |
Task Description
A format is not known or recognized in the original code base. To add a string into at the audio section in xferc.in:
opus = "<audioplayer>,<audioplayer>,audacity;Opus Audio;mp3_32x32.png;mp3_16x16.png;;"
|
|
Stable | Freedom Issue | Very Low | Medium | [xfe] Replace with Hyperbola Iceweasel-UXP for HTML and ... | Closed | |
Task Description
Two formats (including HTML and PHP) are provided to run semi-libre/free web browser Mozilla Firefox in the original code base, but it currently got blacklisted due to numerous branding, security and privacy issues, and replaced by the Hyperbola Iceweasel-UXP. To replace existing strings at the web section in xferc.in:
html = "iceweasel-uxp,iceweasel-uxp,<txteditor>;Hyper Text;html_32x32.png;html_16x16.png;;"
htm = "iceweasel-uxp,iceweasel-uxp,<txteditor>;Hyper Text;html_32x32.png;html_16x16.png;;"
php = "iceweasel-uxp,iceweasel-uxp,<txteditor>;PHP Source;html_32x32.png;html_16x16.png;;"
|
|
Stable | Freedom Issue | Very Low | Critical | [elementary-icon-theme] Contains non-FSDG compliant dis ... | Closed | |
Task Description
About that distro, Elementary OS is semi-libre/free, Ubuntu based, long term support, but does not comply with the GNU Free System Distributibution Guidelines (FSDG). To either rebrand or remove existing non-FSDG compliant distro icon files.
The following affected files are present in this list:
/usr/share/icons/elementary/places/16/distributor-logo.svg
/usr/share/icons/elementary/places/24/distributor-logo.svg
/usr/share/icons/elementary/places/32/distributor-logo.svg
/usr/share/icons/elementary/places/48/distributor-logo.svg
/usr/share/icons/elementary/places/64/distributor-logo.svg
/usr/share/icons/elementary/places/128/distributor-logo.svg
/usr/share/icons/elementary/places/symbolic/distributor-logo-symbolic.svg
|
|
Stable | Implementation Request | Very Low | High | [simplescreenrecorder] Malfunctional when not removing ... | Closed | |
Task Description
Within the last commit regarding the package simplescreenrecorder the interface for pulseaudio was removed. So far, so good. But without the complete removal of pulseaudio the application is enforced to use ALSA emulation for PulseAudio on systems with libpulse installed and that usually only makes things worse.
Please undo this for version 0.3 until the removal of pulseaudio is complete.
|
|
Stable | Bug Report | Very Low | Low | [autofs]: default configuration is /etc/auto.master ins ... | Closed | |
Task Description
Description:
default configuration is /etc/auto.master instead of /etc/autofs/auto.master
admin→ sudo /usr/bin/automount -v -f -p /run/autofs.pid Starting automounter version 5.1.2, master map /etc/auto.master using kernel protocol version 5.02 lookup(file): file map /etc/auto.master missing or not readable no mounts in table
|
|
Stable | Drop Request | Very Low | Critical | [osdbattery] Unmaintained and unsupportable | Closed | |
Task Description
osdbattery is (probably) useless and broken so Conky did compete because It is still unmaintained and unsupported over 14 years ago (last released version 1.4 on August 23, 2005), and should be removed per anti-abandonware rule at the packaging guidelines.
Also, the default config file contains non-libre/free Microsoft font Verdana as X11 font format property in font variable.
|
|
Stable | Update Request | Very Low | Critical | [qt5] request for upgrade | Closed | |
Task Description
I know that upgrading Qt is not a trivial task, but would it be possible to do this anyway? Qt 5.8 has issues that other versions do not have. See for example the discussion here about Projecteur, a very useful tool. Hyperbola seems to be the only Linux distribution unable to run it, just because of Qt 5.8:
https://github.com/jahnf/Projecteur/issues/26
|
|
Stable | Implementation Request | Very Low | Medium | [gcc] Renew to version 8 or 9, including multilib | Closed | |
Task Description
As even the support for GCC 7 is now ending with the release of version 7.5 (https://gcc.gnu.org/ml/gcc/2019-11/msg00099.html) I’d like to propose a renewal of the building-stack - which I think is also needed in time. Also a renewal of the glibc would be good at all!
|
|
Stable | Implementation Request | Very Low | Low | [codelite] Adding new package | Closed | |
Task Description
The IDE codelite is an excellent development environment, continuously updated, has a clear vision and active support. Would be nice to have this one within the repositories in upcoming releases, perhaps 0.5?
|
|
Stable | Bug Report | Very Low | Medium | linphonec error (cli version) | Closed | |
Task Description
Description: linphonec is unusable because a error produce a continuous log
Additional info: linphone 3.11.1-1.hyperbola1
Steps to reproduce: linphonec
Log: linphonec> 2019-12-15 19:25:58:010 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:03:012 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:08:018 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:13:013 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:18:016 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:23:014 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:28:010 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:33:010 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:38:012 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:43:015 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:48:010 ortp-error-Error in connect: Network is unreachable 2019-12-15 19:26:53:010 ortp-error-Error in connect: Network is unreachable
|
|
Stable | Update Request | Very Low | Low | [icewm] Upgrade package version | Closed | |
Task Description
The current version of the package icewm within the Hyperbola-repositories is 1.3.8. The latest version is 1.6.3! An update would be helpful as this window-manager follows absolutely the principles of the distribution Hyperbola itself, being simple and fast.
|
|
Stable | Bug Report | Very Low | Critical | [smartmontools] update-smart-drivedb fails to update | Closed | |
Task Description
smartmontools 6.5-1.hyperbola1
Error while trying to update smart-drivedb :
anon@test[~] update-smart-drivedb
External Link/usr/bin/update-smart-drivedb: download from branches/RELEASE_6_5_DRIVEDB failed (curl: exit 23)
/usr/bin/update-smart-drivedb: download from trunk failed (curl: exit 23)
|
|
Stable | Security Issue | Very Low | Critical | [lts-kernel][sec] filter /dev/mem access & restrict acc ... | Closed | |
Task Description
These two options could be enabled :
Kernel hacking → [*] Filter access to /dev/mem [*] Filter I/O access to /dev/mem
Security options → [*] Restrict unprivileged access to the kernel syslog
|
|
Stable | Bug Report | Very Low | Low | [dhcpcd-ui] Adding icons from "Network-Manager Applet" | Closed | |
Task Description
When using the package for wireless connections no further icon is displayed without having the package [b]network-manager-applet[/b] installed.
|
|
Stable | Bug Report | Very Low | High | [ispell] require FHS | Closed | |
Task Description
Description:
cant open /usr/local/lib/english.hash
Additional info:
Repository : extra
Name : ispell
Version : 3.3.02-7
Description : An interactive spell-checking program for Unix
Architecture : x86_64
URL : http://ficus-www.cs.ucla.edu/geoff/ispell.html
Licenses : BSD
Groups : None
Provides : None
Depends On : ncurses
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 321.26 KiB
Installed Size : 1336.00 KiB
Packager : Evangelos Foutras <evangelos@foutrelis.com>
Build Date : Sun Sep 6 12:07:06 2015
Validated By : MD5 Sum SHA-256 Sum Signature
Steps to reproduce:
- Install package
|
|
Stable | Security Issue | Very Low | Medium | [git] Multiple CVEs | Closed | |
Task Description
CVE-2020-5260 has been fixed very recently in Debian, so I thought I would apply this patch. However, I found out that security patches have not been applied for quite a while (I could account for at least 6 CVEs).
Considering that the version in Debian stretch (2.11.0) is the nearest version with security patches released by Debian and that git project oldest supported version is 2.17, I have used patches from Debian stretch to apply on 2.12.2 currently in Milky Way.
But I have the following error on check():
| *** prove ***
|
| Test Summary Report
| -------------------
| t5570-git-daemon.sh (Wstat: 256 Tests: 20 Failed: 10)
| Failed tests: 3-7, 15-19
| Non-zero exit status: 1
| t5811-proto-disable-git.sh (Wstat: 256 Tests: 26 Failed: 16)
| Failed tests: 2-6, 9-11, 15-19, 21-23
| Non-zero exit status: 1
| Files=769, Tests=14137, 1101 wallclock secs ( 8.08 usr 1.12 sys + 144.48 cusr 63.42 csys = 217.10 CPU)
| Result: FAIL
| make[1]: *** [Makefile:45: prove] Error 1
| make[1]: Leaving directory '/build/git/src/git-2.12.2/t'
| make: *** [Makefile:2291: test] Error 2
| ==> ERROR: A failure occurred in check().
| Aborting...
This does not seem to be related to my change as the current version in Milky Way produces the same error (IOW the package currently in Milky Way is not rebuidable).
|
|
Stable | Bug Report | Very Low | Critical | [gtk-2] Severe problems with GTK2-applications | Closed | |
Task Description
Description: Since the migration to xenocara there seems to be a bug with applications using GTK-2. From time to time there are crashes with assertion `!xcb_xlib_threads_sequence_lost’.
Looking into this a little bit more deep there are also other distributions affected and this is an upstream-bug. But the concrete situation is not that easy, while it could be also part of the library libX11 itself. Looking therefore here: https://bugs.launchpad.net/ubuntu/+source/pcmanfm/+bug/1782984
Affected are for example LXDE in general, icedove, iceweasel and many more!
|
|
Stable | Freedom Issue | Very Low | Critical | [keybase] Complete removal of tool | Closed | |
Task Description
There is only the source code of the client available and since years nothing more happened. With keybase joining “Zoom” nothing more seems to happen. Look also here in the forum: https://forums.hyperbola.info/viewtopic.php?id=368
|
|
Stable | Bug Report | Very Low | Medium | Untrsuted gpg key | Closed | |
|
|
Stable | Update Request | Very Low | Medium | [varnish] Missing init script | Closed | |
|
|
Stable | Bug Report | Very Low | Medium | nouveau_drv.so: undefined symbol: exaDriverAlloc | Closed | |
|
|
Stable | Implementation Request | Very Low | Medium | [djview] Add new package | Closed | |
|
|
Stable | Bug Report | Very Low | Medium | [yeahwm] has crashed that refused to initialize. | Closed | |
|
|
Stable | Bug Report | Very Low | Medium | hypervideo have a bug now | Closed | |
|
|
Testing | Implementation Request | Very Low | Medium | [yaics] add package | Closed | |
|
|
Testing | Implementation Request | Very Low | Low | [sirikata] add package | Closed | |
|
|
Testing | Bug Report | Very Low | Low | [iceweasel-uxp] minor issues in "About Iceweasel-UXP" w ... | Closed | |
|
|
Testing | Bug Report | Very Low | High | [iceweasel-uxp] Advanced font option dialogue not appea ... | Closed | |
|
|
Testing | Bug Report | Very Low | High | [iceweasel-uxp] recaptcha issue (webchat.freenode.net) | Closed | |
|
|
Testing | Bug Report | Very Low | Critical | [iceweasel-uxp] missing extensions | Closed | |
|
|
Testing | Bug Report | Very Low | Medium | [iceweasel-uxp] Edit and zoom control button icons gone ... | Closed | |
|
|
Testing | Bug Report | Very Low | Medium | [iceweasel-uxp] Themes are applied but lost after closi ... | Closed | |
|
|
Testing | Bug Report | Very Low | High | [cronie] /bin/sh: /usr/bin/nano: No existe el fichero o ... | Closed | |
|
|
Testing | Replace Request | Very Low | Medium | replace request: NetworkManager with wpa_cute | Closed | |
|
|
Testing | Bug Report | Very Low | Critical | [msmtp] needs libressl | Closed | |
|
|
Testing | Update Request | Very Low | Medium | [lmms] update package version to 1.2.0 | Closed | |
|
|
Testing | Bug Report | Very Low | Critical | [Hyperbola GNU/Linux-libre 0.4] Installation issue for ... | Closed | |
|
|
Testing | Feature Request | Very Low | Medium | [Hyperbola GNU/Linux-Libre 0.4] [lumina-core] Replace t ... | Closed | |
|
|
Testing | Freedom Issue | Very Low | Critical | [Hyperbola GNU/Linux-libre 0.4] [lumina-core] has some ... | Closed | |
|
|
Testing | Implementation Request | Very Low | Low | [Hyperbola GNU/Linux-libre 0.4] [polygen{,-data}] Add p ... | Closed | |
|
|
Testing | Bug Report | Very Low | Medium | [Hyperbola GNU/Linux-libre 0.4] [opensurge] has refused ... | Closed | |
|
|
Testing | Implementation Request | Very Low | High | Hplip for printing, | Closed | |
|
|
Testing | Bug Report | Very Low | High | [xenocara-xkbcomp] Could not resolve keysym XF86FullScr ... | Closed | |
|