Packages

Description:

• The Arch version of Deluge from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : deluge
Version         : 1.3.14-1
Description     : A BitTorrent client with multiple user interfaces in a client/server model
Architecture    : any
URL             : http://deluge-torrent.org/
Licenses        : GPL3
Groups          : None
Provides        : None
Depends On      : python2-xdg  libtorrent-rasterbar  python2-twisted  python2-pyopenssl  python2-chardet  python2-setuptools
Optional Deps   : python2-notify: libnotify notifications
                  pygtk: needed for gtk ui
                  librsvg: needed for gtk ui
                  python2-mako: needed for web ui
Conflicts With  : None
Replaces        : None
Download Size   : 2.26 MiB
Installed Size  : 12.20 MiB
Packager        : Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
Build Date      : Tue 07 Mar 2017 12:26:40 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/deluged.service is owned by deluge 1.3.14-1
/usr/lib/systemd/system/deluge-web.service is owned by deluge 1.3.14-1

Steps to reproduce:

• Install package.

Description:

• The Arch version of GNUnet from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : community
Name            : gnunet
Version         : 0.10.1-9
Description     : A framework for secure peer-to-peer networking
Architecture    : x86_64
URL             : http://gnunet.org
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : gmp  libgcrypt  libextractor  sqlite  gnurl  libmicrohttpd  libunistring  libidn
Optional Deps   : bluez-libs
                  python
                  glpk
                  libpulse
                  opus
Conflicts With  : None
Replaces        : None
Download Size   : 1744.61 KiB
Installed Size  : 7046.00 KiB
Packager        : Antonio Rojas <arojas@archlinux.org>
Build Date      : Mon 04 Apr 2016 02:33:05 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/gnunet.service is owned by gnunet 0.10.1-9

Steps to reproduce:

• Install package.

Description:

• The Arch version of MLdonkey from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : community
Name            : mldonkey
Version         : 3.1.6-1
Description     : A multi-network P2P client
Architecture    : x86_64
URL             : http://mldonkey.sourceforge.net/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : file  gd  miniupnpc  libnatpmp
Optional Deps   : librsvg: GUI support
                  gtk2: GUI support
Conflicts With  : None
Replaces        : None
Download Size   : 4.01 MiB
Installed Size  : 21.11 MiB
Packager        : Anatol Pomozov <anatol.pomozov@gmail.com>
Build Date      : Wed 25 Jan 2017 04:13:10 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/mldonkey.service is owned by mldonkey 3.1.6-1
/usr/lib/sysusers.d/mldonkey.conf is owned by mldonkey 3.1.6-1
/usr/lib/tmpfiles.d/mldonkey.conf is owned by mldonkey 3.1.6-1

Steps to reproduce:

• Install package.

Description:

• The Arch version of TiMidity++ from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : timidity++
Version         : 2.14.0-7
Description     : A MIDI to WAVE converter and player
Architecture    : x86_64
URL             : http://timidity.sourceforge.net
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : libao  jack
Optional Deps   : gtk2: for using the GTK+ interface
                  tk: for using the Tk interface
                  xaw3d: for using the Xaw interface
Conflicts With  : None
Replaces        : None
Download Size   : 530.60 KiB
Installed Size  : 1431.00 KiB
Packager        : Evangelos Foutras <evangelos@foutrelis.com>
Build Date      : Thu 10 Sep 2015 12:55:38 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/timidity.service is owned by timidity++ 2.14.0-7

Steps to reproduce:

• Install package.

Description:

• The Arch version of Wesnoth from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : community
Name            : wesnoth
Version         : 1.12.6-4
Description     : A turn-based strategy game on a fantasy world
Architecture    : x86_64
URL             : http://www.wesnoth.org/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : sdl_ttf  sdl_net  sdl_mixer  sdl_image  fribidi  boost-libs  pango  lua52  wesnoth-data  dbus  python2
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 4.97 MiB
Installed Size  : 22.86 MiB
Packager        : Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
Build Date      : Mon 02 Jan 2017 07:52:21 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/wesnothd.service is owned by wesnoth 1.12.6-4
/usr/lib/tmpfiles.d/wesnothd.conf is owned by wesnoth 1.12.6-4

Steps to reproduce:

• Install package.

Description:

• The Arch version of Evolution from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required. OpenRC init script replacement isn’t possible here because Evolution is using a systemd unit file adapted for users instead of system users.

Additional info:

• evolution-data-server 3.24.1-3.hyperbola1

$ pacman -Si evolution-data-server
Repository      : extra
Name            : evolution-data-server
Version         : 3.24.1-3.hyperbola1
Description     : Centralized access to appointments and contacts, without libgdata support
Architecture    : x86_64
URL             : https://wiki.gnome.org/Apps/Evolution
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : gnome-online-accounts  nss  krb5  libgweather  libical  db  libphonenumber
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 3.56 MiB
Installed Size  : 33.38 MiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Fri 12 May 2017 06:28:24 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/user/evolution-addressbook-factory.service is owned by evolution-data-server 3.24.1-3.hyperbola1
/usr/lib/systemd/user/evolution-calendar-factory.service is owned by evolution-data-server 3.24.1-3.hyperbola1
/usr/lib/systemd/user/evolution-source-registry.service is owned by evolution-data-server 3.24.1-3.hyperbola1
/usr/lib/systemd/user/evolution-user-prompter.service is owned by evolution-data-server 3.24.1-3.hyperbola1

Steps to reproduce:

• Install package.

Description:

• The Arch version of GNOME Terminal Emulator from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required. OpenRC init script replacement isn’t possible here because GNOME Terminal Emulator is using a systemd unit file adapted for users instead of system users.

Additional info:

• gnome-terminal 3.24.1-1.hyperbola1

$ pacman -Si gnome-terminal
Repository      : extra
Name            : gnome-terminal
Version         : 3.24.1-1.hyperbola1
Description     : The GNOME Terminal Emulator
Architecture    : x86_64
URL             : https://wiki.gnome.org/Apps/Terminal
Licenses        : GPL
Groups          : gnome
Provides        : None
Depends On      : vte3  gsettings-desktop-schemas  dconf
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 1012.67 KiB
Installed Size  : 7811.00 KiB
Packager        : Scott Adams <haricot@hyperbola.info>
Build Date      : Tue 06 Jun 2017 01:36:13 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/user/gnome-terminal-server.service is owned by gnome-terminal 3.24.1-1.hyperbola1

Steps to reproduce:

• Install package.

Description:

• The Arch version of Tracker from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required. OpenRC init script replacement isn’t possible here because Tracker is using a systemd unit file adapted for users instead of system users.

Additional info:

• tracker 1.12.0-2.hyperbola1

$ pacman -Si tracker
Repository      : extra
Name            : tracker
Version         : 1.12.0-2.hyperbola1
Description     : Desktop-neutral user information store, search tool and indexer
Architecture    : x86_64
URL             : https://wiki.gnome.org/Projects/Tracker
Licenses        : GPL
Groups          : gnome
Provides        : None
Depends On      : libtracker-sparql=1.12.0-2.hyperbola1  libsecret  upower  libexif  exempi  poppler-glib  libgsf  enca  libiptcdata  libcue  libosinfo  libnm-glib
                  gtk3  libgxps  taglib  flac  libvorbis  totem-plparser  gst-plugins-base-libs  giflib  libgrss  gvfs
Optional Deps   : nautilus: edit files' tracker tags
Conflicts With  : None
Replaces        : None
Download Size   : 1142.60 KiB
Installed Size  : 8459.00 KiB
Packager        : Scott Adams <haricot@hyperbola.info>
Build Date      : Thu 08 Jun 2017 03:57:24 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/user/tracker-extract.service is owned by tracker 1.12.0-2.hyperbola1
/usr/lib/systemd/user/tracker-miner-apps.service is owned by tracker 1.12.0-2.hyperbola1
/usr/lib/systemd/user/tracker-miner-fs.service is owned by tracker 1.12.0-2.hyperbola1
/usr/lib/systemd/user/tracker-miner-rss.service is owned by tracker 1.12.0-2.hyperbola1
/usr/lib/systemd/user/tracker-store.service is owned by tracker 1.12.0-2.hyperbola1
/usr/lib/systemd/user/tracker-writeback.service is owned by tracker 1.12.0-2.hyperbola1

Steps to reproduce:

• Install package.

Description:

• The Arch version of Vino from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required. OpenRC init script replacement isn’t possible here because Vino is using a systemd unit file adapted for users instead of system users.

Additional info:

• vino 3.22.0-1.hyperbola1

$ pacman -Si vino
Repository      : extra
Name            : vino
Version         : 3.22.0-1.hyperbola1
Description     : A VNC server for the GNOME desktop
Architecture    : x86_64
URL             : https://wiki.gnome.org/Projects/Vino
Licenses        : GPL
Groups          : gnome
Provides        : None
Depends On      : libnotify  libxtst  libsm  telepathy-glib  gtk3  libsecret  avahi  gnutls
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 368.24 KiB
Installed Size  : 2723.00 KiB
Packager        : Scott Adams <haricot@hyperbola.info>
Build Date      : Fri 09 Jun 2017 02:01:33 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/user/vino-server.service is owned by vino 3.22.0-1.hyperbola1

Steps to reproduce:

• Install package.

Description:

• Enable “hidepid” support in /proc filesystem

Additional info:

• mkinitcpio 23-1.hyperbola2

/usr/lib/initcpio/init_functions
----
 mount_setup() {
     mount -t proc proc /proc -o nosuid,noexec,nodev
+    mount /proc -o remount,gid=26,hidepid=2
     mount -t sysfs sys /sys -o nosuid,noexec,nodev
     mount -t devtmpfs dev /dev -o mode=0755,nosuid
     mount -t tmpfs run /run -o nosuid,nodev,mode=0755
     mkdir -m755 /run/initramfs

$ pacman -Si mkinitcpio
Repository      : core
Name            : mkinitcpio
Version         : 23-1.hyperbola2
Description     : Modular initramfs image creation utility, with eudev support
Architecture    : any
URL             : https://projects.archlinux.org/mkinitcpio.git/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : awk  mkinitcpio-busybox>=1.19.4-2  kmod  util-linux>=2.23  libarchive  coreutils  bash  findutils  grep  filesystem>=2011.10-1  gzip  eudev
Optional Deps   : xz: Use lzma or xz compression for the initramfs image
                  bzip2: Use bzip2 compression for the initramfs image
                  lzop: Use lzo compression for the initramfs image
                  lz4: Use lz4 compression for the initramfs image
                  mkinitcpio-nfs-utils: Support for root filesystem on NFS
Conflicts With  : None
Replaces        : None
Download Size   : 38.60 KiB
Installed Size  : 194.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Tue 27 Feb 2018 12:00:17 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Steps to reproduce:

• On booting.

Description:

• Remove dangerous “local” init script, is a bad idea to use it, see:

“https://wiki.gentoo.org/wiki//etc/local.d”

Additional info:

• openrc 0.28-17

• remove:
  • “/etc/init.d/local”
  • “/etc/local.d/README”
  • “/etc/local.d/”

/etc/init.d/agetty
----
-        after local
+        after *

$ pacman -Si openrc
Repository      : core
Name            : openrc
Version         : 0.28-17
Description     : A dependency based init system that works with the system provided init program
Architecture    : x86_64
URL             : https://wiki.gentoo.org/wiki/Project:OpenRC
Licenses        : BSD2
Groups          : None
Provides        : None
Depends On      : psmisc  pam
Optional Deps   : netifrc: network interface management scripts
                  networkmanager: network connection manager and user applications
Conflicts With  : None
Replaces        : None
Download Size   : 194.10 KiB
Installed Size  : 1727.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Thu 05 Jul 2018 01:37:37 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Steps to reproduce:

• On boot.

Description:

• Change the “/proc” filesystem option, reverting FS#1038 .

Additional info:

• openrc 0.28-17

/usr/lib/rc/sh/init.sh
----
-                mount -n -t proc -o noexec,nosuid,nodev,hidepid=2,gid=proc proc /proc
+                mount -n -t proc -o noexec,nosuid,nodev,gid=26,hidepid=2 proc /proc

$ pacman -Si openrc
Repository      : core
Name            : openrc
Version         : 0.28-17
Description     : A dependency based init system that works with the system provided init program
Architecture    : x86_64
URL             : https://wiki.gentoo.org/wiki/Project:OpenRC
Licenses        : BSD2
Groups          : None
Provides        : None
Depends On      : psmisc  pam
Optional Deps   : netifrc: network interface management scripts
                  networkmanager: network connection manager and user applications
Conflicts With  : None
Replaces        : None
Download Size   : 194.10 KiB
Installed Size  : 1727.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Thu 05 Jul 2018 01:37:37 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Steps to reproduce:

• none.

Description:

• The Arch version of system-config-printer from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : system-config-printer
Version         : 1.5.9-2
Description     : A CUPS printer configuration tool and status applet
Architecture    : x86_64
URL             : https://github.com/zdohnal/system-config-printer
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : python-pycups  python-dbus  python-pycurl  libnotify  python-requests  python-gobject  gtk3  python-cairo
Optional Deps   : python-pysmbc: SMB browser support
                  python-packagekit: to install drivers with PackageKit
                  cups-pk-helper: PolicyKit helper to configure cups with fine-grained privileges
Conflicts With  : None
Replaces        : None
Download Size   : 908.59 KiB
Installed Size  : 7159.00 KiB
Packager        : Andreas Radke <andyrtr@archlinux.org>
Build Date      : Fri 27 Jan 2017 04:18:24 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/configure-printer@.service is owned by system-config-printer 1.5.9-2

Steps to reproduce:

• Install package.

Description:

• The Arch version of pkgfile from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : pkgfile
Version         : 17-1
Description     : a pacman .files metadata explorer
Architecture    : x86_64
URL             : http://github.com/falconindy/pkgfile
Licenses        : MIT
Groups          : None
Provides        : None
Depends On      : libarchive  curl  pcre  pacman
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 23.16 KiB
Installed Size  : 47.00 KiB
Packager        : Dave Reisner <dreisner@archlinux.org>
Build Date      : Tue 18 Apr 2017 05:30:59 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/pkgfile-update.service is owned by pkgfile 17-1
/usr/lib/systemd/system/pkgfile-update.timer is owned by pkgfile 17-1

Steps to reproduce:

• Install package.

Firetools sandbox list shows nothing whenever I use icedove-hardened or iceweasel-uxp-hardened. or vlc, or anything at this point.

Firejail still works, but the sandbox list on the applet, shows nothing.

I don’t really know why though. may need to updated.

dunno. I can wait on this one if need be, but it is kind of annoying.

Description:

In External Linkhttps://git.hyperbola.info:50100/packages/community.git/tree/hostapd/config an option is missing to support 802.11r:

Adding “CONFIG_IEEE80211R=y”

Additional info:
* hostapd 2.6

Hello,

With iceweasel-uxp, some info boxes are not translated, for now I noticed that when the mouse cursor hovers “add tab” element, the info box showing up is still using english (although I’m using French and the rest is ok), this is very, very minor issue I know.. :o)

See picture attached

Description:

During openrc boot, ‘net’ starts before ‘ovs-vswitchd’ and result to an error and not attributing IP to the openvswitch interface:

ERROR: interface vswitch does not exist
Ensure that you have loaded the correct kernel module for your hardware
ERROR: net.vswitch failed to start
/run/openvswitch: creating directory
Starting ovsdb-server ...
Starting ovs-vswitchd ..

Additional info:

As a workaround I have added
after modules ovs-vswitchd line #39 to /etc/init.d/net.lo and it solves the issue.

I think it would require an if statement to append ovs-vsitchd to line #39 in case openvswitch is installed and activated.

After my change, rc.log:

/run/openvswitch: creating directory
Starting ovsdb-server ...
Starting ovs-vswitchd ...
Bringing up interface vswitch
Caching network module dependencies
need dbus
10.XX.XX.XX/24 ...
Adding routes
default via 10.XX.XX.XX

Steps to reproduce:

Severity: high

Versions affected:
1.6.0 through 1.7.0
Potentially, all earlier versions too, but there is no known way to
trigger this before 1.6.0

Mitigation:
upgrade to 1.7.1

Description:
ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming
from the network, allowing a non-admin user to escalate privilege,
inject rogue values into znc.conf, and gain shell access.

Upstream patches:
https://github.com/znc/znc/commit/a7bfbd93812950b7444841431e8e297e62cb524e https://github.com/znc/znc/commit/d22fef8620cdd87490754f607e7153979731c69d

—

Severity: medium

Versions affected:
0.045 through 1.7.0

Mitigation:
upgrade to 1.7.1, or disable HTTP via `/msg *status AddPort`, `/msg
*status DelPort` commands.

Description:
ZNC before 1.7.1-rc1 is prone to a path traversal flaw. A non-admin user
can set web skin name to ../ to access files outside of the intended
skins directories and to cause DoS.

Upstream patch:
https://github.com/znc/znc/commit/a4a5aeeb17d32937d8c7d743dae9a4cc755ce773

The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and player content.

https://security-tracker.debian.org/tracker/CVE-2018-1999023

Upstream patch: https://github.com/wesnoth/wesnoth/commit/d911268a783467842d38eae7ac1630f1fea41318

Hostapd is failing at boot with :

Starting hostapd ...
Configuration file: /etc/hostapd/hostapd.conf
ovs-vsctl: unix:/run/openvswitch/db.sock: database connection failed (No such file or directory)

Hostapd should start “after ovs-vswitchd”

If I add it to /etc/init.d/hostapd, I don’t have the issue anymore

Description:

Hi guys, there have been minor changes in firejail, we have also published iceweasel-uxp. Given this case, here I publish the relevant updates of the files.

Description:

Hi guys, there have been minor changes in firetools GUI, we have also published iceweasel-uxp. Given this case, here I publish the relevant updates of the files.

Description:
Add Brazilian Portuguese grammar, spelling and hyphenation checker to hunspell.

Description:
Add Brazilian Portuguese hyphenation to hunspell.