Packages

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

This package contains vague terminology “Open Source”:

community/bzrtp 1.0.5-1
    Opensource implementation of ZRTP keys exchange protocol

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

Free software implementation of ZRTP keys exchange protocol

Description:

• replace deprecated GNU Bazaar to Brezy for Canis Major

Additional info:

• bzr 2.7.0-2
• GNU Bazaar will be unmaintained (for now, there are only bug fixes)
• GNU Bazaar only supports Python 2.
• Python 2.7 is the end of the Python 2 line of development. [0]
• There never will be an official Python 2.8 release.
• Or use Tauthon (fork of Python 2.7) as dependency.

Note: It needs a provide: bazaar and brezy

Steps to reproduce:

• broken package

Description:

• needs OpenRC init script (bzr serve), like [git] (git-daemon) and [subversion] (svnserve)

Additional info:

• bzr 2.7.0-2

Note: needs a provide: bazaar

Steps to reproduce:

• none

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Package: https://www.hyperbola.info/packages/community/x86_64/busybox/

https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/

In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.

Patch: https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8

]$ pacman -Si btrfs-progs
Repository : core
Name : btrfs-progs
Version : 4.10.2-1
Description : Btrfs filesystem utilities
Architecture : x86_64
URL : https://btrfs.wiki.kernel.org Licenses : GPL2
Groups : None
Provides : btrfs-progs-unstable
Depends On : glibc libutil-linux e2fsprogs lzo zlib
Optional Deps : None
Conflicts With : btrfs-progs-unstable
Replaces : btrfs-progs-unstable
Download Size : 603.00 KiB
Installed Size : 4022.00 KiB
Packager : Sébastien Luttringer seblu@seblu.net Build Date : Fri 31 Mar 2017 08:20:32 PM -03
Validated By : MD5 Sum SHA-256 Sum Signature

$ pacman -Ql btrfs-progs
btrfs-progs /usr/
btrfs-progs /usr/bin/
btrfs-progs /usr/bin/btrfs
btrfs-progs /usr/bin/btrfs-convert
btrfs-progs /usr/bin/btrfs-debug-tree
btrfs-progs /usr/bin/btrfs-find-root
btrfs-progs /usr/bin/btrfs-image
btrfs-progs /usr/bin/btrfs-map-logical
btrfs-progs /usr/bin/btrfs-select-super
btrfs-progs /usr/bin/btrfs-zero-log
btrfs-progs /usr/bin/btrfsck
btrfs-progs /usr/bin/btrfstune
btrfs-progs /usr/bin/fsck.btrfs
btrfs-progs /usr/bin/mkfs.btrfs
btrfs-progs /usr/include/
btrfs-progs /usr/include/btrfs/
btrfs-progs /usr/include/btrfs/btrfs-list.h
btrfs-progs /usr/include/btrfs/btrfsck.h
btrfs-progs /usr/include/btrfs/crc32c.h
btrfs-progs /usr/include/btrfs/ctree.h
btrfs-progs /usr/include/btrfs/extent-cache.h
btrfs-progs /usr/include/btrfs/extent_io.h
btrfs-progs /usr/include/btrfs/ioctl.h
btrfs-progs /usr/include/btrfs/kerncompat.h
btrfs-progs /usr/include/btrfs/list.h
btrfs-progs /usr/include/btrfs/radix-tree.h
btrfs-progs /usr/include/btrfs/rbtree.h
btrfs-progs /usr/include/btrfs/send-stream.h
btrfs-progs /usr/include/btrfs/send-utils.h
btrfs-progs /usr/include/btrfs/send.h
btrfs-progs /usr/include/btrfs/sizes.h
btrfs-progs /usr/include/btrfs/version.h
btrfs-progs /usr/lib/
btrfs-progs /usr/lib/initcpio/
btrfs-progs /usr/lib/initcpio/hooks/
btrfs-progs /usr/lib/initcpio/hooks/btrfs
btrfs-progs /usr/lib/initcpio/install/
btrfs-progs /usr/lib/initcpio/install/btrfs
btrfs-progs /usr/lib/libbtrfs.so
btrfs-progs /usr/lib/libbtrfs.so.0
btrfs-progs /usr/lib/libbtrfs.so.0.1
btrfs-progs /usr/lib/systemd/
btrfs-progs /usr/lib/systemd/system/
btrfs-progs /usr/lib/systemd/system/btrfs-scrub@.service
btrfs-progs /usr/lib/systemd/system/btrfs-scrub@.timer
btrfs-progs /usr/lib/udev/
btrfs-progs /usr/lib/udev/rules.d/
btrfs-progs /usr/lib/udev/rules.d/64-btrfs-dm.rules
btrfs-progs /usr/share/
btrfs-progs /usr/share/bash-completion/
btrfs-progs /usr/share/bash-completion/completions/
btrfs-progs /usr/share/bash-completion/completions/btrfs
btrfs-progs /usr/share/man/
btrfs-progs /usr/share/man/man5/
btrfs-progs /usr/share/man/man5/btrfs.5.gz
btrfs-progs /usr/share/man/man8/
btrfs-progs /usr/share/man/man8/btrfs-balance.8.gz
btrfs-progs /usr/share/man/man8/btrfs-check.8.gz
btrfs-progs /usr/share/man/man8/btrfs-convert.8.gz
btrfs-progs /usr/share/man/man8/btrfs-debug-tree.8.gz
btrfs-progs /usr/share/man/man8/btrfs-device.8.gz
btrfs-progs /usr/share/man/man8/btrfs-filesystem.8.gz
btrfs-progs /usr/share/man/man8/btrfs-find-root.8.gz
btrfs-progs /usr/share/man/man8/btrfs-image.8.gz
btrfs-progs /usr/share/man/man8/btrfs-inspect-internal.8.gz
btrfs-progs /usr/share/man/man8/btrfs-map-logical.8.gz
btrfs-progs /usr/share/man/man8/btrfs-property.8.gz
btrfs-progs /usr/share/man/man8/btrfs-qgroup.8.gz
btrfs-progs /usr/share/man/man8/btrfs-quota.8.gz
btrfs-progs /usr/share/man/man8/btrfs-receive.8.gz
btrfs-progs /usr/share/man/man8/btrfs-replace.8.gz
btrfs-progs /usr/share/man/man8/btrfs-rescue.8.gz
btrfs-progs /usr/share/man/man8/btrfs-restore.8.gz
btrfs-progs /usr/share/man/man8/btrfs-scrub.8.gz
btrfs-progs /usr/share/man/man8/btrfs-select-super.8.gz
btrfs-progs /usr/share/man/man8/btrfs-send.8.gz
btrfs-progs /usr/share/man/man8/btrfs-show-super.8.gz
btrfs-progs /usr/share/man/man8/btrfs-subvolume.8.gz
btrfs-progs /usr/share/man/man8/btrfs-zero-log.8.gz
btrfs-progs /usr/share/man/man8/btrfs.8.gz
btrfs-progs /usr/share/man/man8/btrfsck.8.gz
btrfs-progs /usr/share/man/man8/btrfstune.8.gz
btrfs-progs /usr/share/man/man8/fsck.btrfs.8.gz
btrfs-progs /usr/share/man/man8/mkfs.btrfs.8.gz

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

community/btchip-udev 2-1
*    Udev rules to connect BTChip wallet to your linux box

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Description is referring to operating system, and not to the kernel itself (Linux). It shall be amended.

community/bsd-games 2.17-17
     Linux port of the collection of BSD command line games

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Description is referring to operating system, and not to the kernel itself (Linux). It shall be amended.

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Description:

The description of the package need to be changed to accommodate:
https://www.gnu.org/philosophy/words-to-avoid.html

To refer to published works as “assets”, or “digital assets”, is even worse than calling them “content” — it presumes they have no value to society except commercial value.

extra/breeze 5.9.5-1 (plasma)
    Artwork, styles and assets for the Breeze visual style for the Plasma Desktop

# Bug

(brasero:1402): WARNING : Could not establish a connection to Tracker: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.Tracker1 was not provided by any .service files
Gtk-Message: GtkDialog mapped without a transient parent. This is discouraged.

# Package information

$ sudo pacman -Si brasero
[sudo] password for heckyel: 
Repositorio               : extra
Nombre                    : brasero
Versión                   : 3.12.1-2.hyperbola1
Descripción               : CD/DVD mastering tool
Arquitectura              : x86_64
URL                       : https://wiki.gnome.org/Apps/Brasero
Licencias                 : GPL
Grupos                    : gnome-extra
Provee                    : Nada
Depende de                : gtk3  gst-plugins-good  totem-plparser  cdrkit  cdrdao
                            shared-mime-info  libcanberra  dvd+rw-tools  dconf  libsm
                            libtracker-sparql  libnotify  gvfs
Dependencias opcionales   : libburn: alternative back-end
                            libisofs: libburn back-end
                            dvdauthor: video project
                            vcdimager: video project
En conflicto con          : Nada
Remplaza a                : nautilus-cd-burner
Tamaño de la descarga     : 2,58 MiB
Tamaño de la instalación  : 14,46 MiB
Encargado                 : Scott Adams <haricot@hyperbola.info>
Fecha de creación         : lun 29 may 2017 00:24:19 -05
Validado por              : Suma MD5  Suma SHA-256  Firma

# File attached
pacman -Ql brasero > brasero.txt

Remove unstable “botan” and rename “botan1.10” to “botan-old-stable”[0]

$ pacman -Si botan
Repository      : community
Name            : botan
Version         : 2.1.0-1
Description     : Crypto library written in C++
Architecture    : x86_64
URL             : https://botan.randombit.net/
Licenses        : BSD
Groups          : None
Provides        : None
Depends On      : gcc-libs  sh
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 1816.44 KiB
Installed Size  : 7040.00 KiB
Packager        : Alexander Rødseth <rodseth@gmail.com>
Build Date      : Fri 21 Apr 2017 09:19:27 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

$ pacman -Si botan1.10
Repository      : community
Name            : botan1.10
Version         : 1.10.13-1
Description     : Crypto library written in C++ - old stable branch
Architecture    : x86_64
URL             : http://botan.randombit.net/
Licenses        : BSD
Groups          : None
Provides        : None
Depends On      : gcc-libs  sh
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 1014.98 KiB
Installed Size  : 3734.00 KiB
Packager        : Felix Yan <felixonmars@archlinux.org>
Build Date      : Fri 06 Jan 2017 06:48:59 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

[0]:https://botan.randombit.net/

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si borg
Repository      : community
Name            : borg
Version         : 1.0.10-2
Description     : Deduplicating backup program with compression and authenticated encryption
Architecture    : x86_64
URL             : https://borgbackup.github.io/
Licenses        : BSD
Groups          : None
Provides        : borgbackup
Depends On      : acl  lz4  openssl  python-msgpack  python-setuptools  xz
Optional Deps   : openssh: repositories on remote hosts
                  python-llfuse: mounting backups as a FUSE file system
Conflicts With  : None
Replaces        : borgbackup
Download Size   : 476.14 KiB
Installed Size  : 2444.00 KiB
Packager        : Lukas Fleischer <lfleischer@archlinux.org>
Build Date      : Wed 01 Mar 2017 02:20:10 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si boinctui
Repository      : community
Name            : boinctui
Version         : 2.4.4-2
Description     : Curses based fullscreen BOINC manager
Architecture    : x86_64
URL             : https://sourceforge.net/projects/boinctui/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : expat  gcc-libs  openssl
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 80.99 KiB
Installed Size  : 225.00 KiB
Packager        : Felix Yan <felixonmars@archlinux.org>
Build Date      : Tue 14 Feb 2017 03:06:12 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Description:

extra/bogofilter 1.2.4-2.hyperbola2
    A fast Bayesian spam filtering tool, without noncommercial files

That shall be clarified better in description.

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Commercial

Please don’t use “commercial” as a synonym for “nonfree.” That confuses two entirely different issues.

This package contains vague terminology “Commercial”:

extra/bogofilter 1.2.4-2.hyperbola2
    A fast Bayesian spam filtering tool, without noncommercial files

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Commercial”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Commercial”.

eg.

A fast Bayesian spam filtering tool, without nonfree files

community/bluez-tools 0.2.0-1
     A set of tools to manage Bluetooth devices for Linux

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Description is referring to operating system, and not to the kernel itself (Linux). It shall be amended.

Description:

org.freedesktop.DBus.Error.NameHasNoOwner: Could not get owner of name ‘org.bluez.obex’: no such name

Additional info:
* package version(s)

$ pacman -Si blueman
Repositorio               : community
Nombre                    : blueman
Versión                   : 2.0.4-3
Descripción               : GTK+ Bluetooth Manager
Arquitectura              : x86_64
URL                       : https://github.com/blueman-project/blueman
Licencias                 : GPL
Grupos                    : Nada
Provee                    : Nada
Depende de                : bluez  bluez-libs  gtk3  libnotify  python-cairo  python-dbus
                            python-gobject
Dependencias opcionales   : dnsmasq: Network Access Point (NAP) support
                            networkmanager: Dial Up Networking (DUN) and Personal Area
                            Networking (PAN) support
                            pulseaudio-bluetooth: audio devices support
En conflicto con          : Nada
Remplaza a                : Nada
Tamaño de la descarga     : 1814,18 KiB
Tamaño de la instalación  : 5345,00 KiB
Encargado                 : Felix Yan <felixonmars@archlinux.org>
Fecha de creación         : dom 25 dic 2016 12:00:42 -05
Validado por              : Suma MD5  Suma SHA-256  Firma

* config and/or log files etc.

(blueman-applet | ccze -A):
- https://paste.debian.net/plain/1049476

(pkgfile -l blueman):
- https://paste.debian.net/plain/1049477

Steps to reproduce:

- Install blueman

BlueGriffon contains support to nonfree “Extended Features”

$ pacman -Qi bluegriffon
Name            : bluegriffon
Version         : 2.3.1-2
Description     : The next-generation Web Editor based on the rendering engine of Firefox
Architecture    : x86_64
URL             : http://bluegriffon.org/
Licenses        : MPL  GPL  LGPL
Groups          : None
Provides        : None
Depends On      : alsa-lib  desktop-file-utils  dbus-glib  gtk2  gtk3  hunspell  mozilla-common  nss  libevent  libvpx  libxt  python2  startup-notification
Optional Deps   : None
Required By     : None
Optional For    : None
Conflicts With  : None
Replaces        : None
Installed Size  : 120.72 MiB
Packager        : Evangelos Foutras <evangelos@foutrelis.com>
Build Date      : Tue 25 Apr 2017 12:22:30 PM -03
Install Date    : Wed 08 Nov 2017 12:46:24 AM -03
Install Reason  : Explicitly installed
Install Script  : No
Validated By    : Signature

$ sudo pacman -S blender
resolviendo dependencias…
buscando conflictos entre paquetes…

Paquetes (20) alembic-1.7.1-1  blender-common-2.78.c-1.hyperbola4  blosc-1.11.3-1  ilmbase-2.2.0-2  intel-tbb-2017_20170226-1  libraw-0.18.2-1  libspnav-0.2.3-1  llvm-4.0.0-2
              log4cplus-1.2.0-3  opencollada-1.6.45-1.hyperbola1  opencolorio-1.0.9-5  openexr-2.2.0-3.hyperbola2  openimageio-1.6.18-1.hyperbola1  openshadinglanguage-1.7.5-1.hyperbola1
              opensubdiv-3.1.1-1  openvdb-3.2.0-2  ptex-2.1.28-1.hyperbola1  valgrind-3.12.0-2  zstd-1.1.4-1  blender-2.78.c-1.hyperbola4

Tamaño total de la descarga:      0,33 MiB
Tamaño total de la instalación:  567,26 MiB

:: ¿Continuar con la instalación? [S/n] s
:: Recibiendo los paquetes…
 libspnav-0.2.3-1-x86_64                                                                     8,5 KiB   849K/s 00:00 [######################################################################] 100%
 zstd-1.1.4-1-x86_64                                                                       283,3 KiB   199K/s 00:01 [######################################################################] 100%
 blosc-1.11.3-1-x86_64                                                                      43,0 KiB   331K/s 00:00 [######################################################################] 100%
(20/20) comprobando las claves del depósito                                                                         [######################################################################] 100%
(20/20) verificando la integridad de los paquetes                                                                   [######################################################################] 100%
error: libspnav: signature from "Andrea Scarpino <me@andreascarpino.it>" is marginal trust
:: El archivo /var/cache/pacman/pkg/libspnav-0.2.3-1-x86_64.pkg.tar.xz está dañado (paquete no válido o dañado (firma PGP)).
¿Quiere eliminarlo? [S/n] s
error: zstd: signature from "Andrzej Giniewicz (giniu) <gginiu@gmail.com>" is marginal trust
:: El archivo /var/cache/pacman/pkg/zstd-1.1.4-1-x86_64.pkg.tar.xz está dañado (paquete no válido o dañado (firma PGP)).
¿Quiere eliminarlo? [S/n] s
error: blosc: signature from "Andrzej Giniewicz (giniu) <gginiu@gmail.com>" is marginal trust
:: El archivo /var/cache/pacman/pkg/blosc-1.11.3-1-x86_64.pkg.tar.xz está dañado (paquete no válido o dañado (firma PGP)).
¿Quiere eliminarlo? [S/n] s
error: no se pudo realizar la operación (paquete no válido o dañado)
Ocurrieron errores, por lo que no se actualizaron los paquetes

The current version of BleachBit needs to be adapted so it can clean the new .cache/hyperbola/ directory.