Packages

Libreoffice contains Google API keys which affects privacy.

The aarch64-linux-gnu-linux-api-headers from [community] is compiled using the blobbed Linux kernel sources[0], and in Parabola it has been replaced with aarch64-linux-gnu-linux-libre-api-headers[1].
This issue is exactly the same as linux-api-headers, so it should be blacklisted and replaced using the Linux-libre source.

[0] https://git.archlinux.org/svntogit/community.git/plain/aarch64-linux-gnu-linux-api-headers/trunk/PKGBUILD

[1]https://git.parabola.nu/abslibre.git/commit/?id=acaa4ba9c0bc77deb6b77e4dad815f66c673d662

Package information

$ pacman -Ql php-fpm
php-fpm /etc/
php-fpm /etc/init.d/
php-fpm /etc/init.d/php-fpm
php-fpm /etc/php/
php-fpm /etc/php/php-fpm.conf
php-fpm /etc/php/php-fpm.d/
php-fpm /etc/php/php-fpm.d/www.conf
php-fpm /usr/
php-fpm /usr/bin/
php-fpm /usr/bin/php-fpm
php-fpm /usr/lib/
php-fpm /usr/lib/tmpfiles.d/
php-fpm /usr/lib/tmpfiles.d/php-fpm.conf
php-fpm /usr/share/
php-fpm /usr/share/man/
php-fpm /usr/share/man/man8/
php-fpm /usr/share/man/man8/php-fpm.8.gz
php-fpm /usr/share/php/
php-fpm /usr/share/php/fpm/
php-fpm /usr/share/php/fpm/status.html

Bug information

$ sudo service php-fpm start
 * Starting PHP FastCGI Process Manager ...
[ERROR] unable to bind listening socket for address '/run/php-fpm/php-fpm.sock': No such file or directory (2)
[ERROR] FPM initialization failed
 * start-stop-daemon: failed to start `/usr/bin/php-fpm'

                                                                                    [ !! ]
 * ERROR: php-fpm failed to start

Please package update to version 3.7.9 of youtube-viewer.

libre.patch attached :)

Multiple CVEs. Unprivileged programs can gain access to a hardware bug in the CPU, and thereby initiate memory dumps and other low-level attacks.

Users trying to use firejail against mpv experience errors such as:

[ytdl_hook] AVideo failed, trying to play URL directly ...
[ffmpeg] tls: The TLS connection was non-properly terminated.
Failed to recognize file format.

The error is caused by not having avideo whitelisted in firejail.

LibreSSL is a version of the TLS/crypto stack forked from OpenSSL in 2014, with goals of modernizing the codebase, improving security, and applying best practice development processes.

It was forked from the OpenSSL in April 2014 as a response by OpenBSD developers to the Heartbleed security vulnerability in OpenSSL, [4] [5] [6] [7] with the aim of refactoring the OpenSSL code so as to provide a more secure implementation. [8]

As LibreSSL follow the same goals than Hyperbola Packaging Guidelines in stability and security concerns, it should be the default provider of SSL and TLS protocols for Hyperbola Project.

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si apache
Repository      : extra
Name            : apache
Version         : 2.4.25-2.hyperbola2
Description     : A high performance Unix-based HTTP server, with OpenRC support
Architecture    : x86_64
URL             : https://www.apache.org/dist/httpd
Licenses        : APACHE
Groups          : None
Provides        : None
Depends On      : zlib  apr-util  pcre  libnghttp2  openssl
Optional Deps   : lua: for mod_lua module
                  libxml2: for mod_proxy_html, mod_xml2enc modules
                  lynx: apachectl status
Conflicts With  : None
Replaces        : None
Download Size   : 1436.89 KiB
Installed Size  : 5678.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Mon 25 Sep 2017 09:13:27 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si bigloo
Repository      : extra
Name            : bigloo
Version         : 4.3a-1
Description     : Fast scheme compiler
Architecture    : x86_64
URL             : http://www-sop.inria.fr/mimosa/fp/Bigloo/
Licenses        : GPL  LGPL
Groups          : None
Provides        : None
Depends On      : gmp  openssl  libunistring
Optional Deps   : java-environment
                  emacs
                  zip
                  sqlite
                  alsa-lib
                  flac
                  avahi
Conflicts With  : None
Replaces        : None
Download Size   : 13.46 MiB
Installed Size  : 78.14 MiB
Packager        : Juergen Hoetzel <juergen@archlinux.org>
Build Date      : Wed 03 May 2017 03:03:54 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si bind
Repository      : extra
Name            : bind
Version         : 9.11.1-1.hyperbola1
Description     : The ISC DNS Server, with OpenRC support
Architecture    : x86_64
URL             : https://www.isc.org/software/bind/
Licenses        : custom:ISC
Groups          : None
Provides        : dns-server
Depends On      : glibc  libxml2  libcap  libseccomp  openssl  geoip  json-c  bind-tools
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 316.55 KiB
Installed Size  : 1024.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Wed 16 Aug 2017 11:28:56 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si bind-tools
Repository      : extra
Name            : bind-tools
Version         : 9.11.1-1.hyperbola1
Description     : The ISC DNS tools
Architecture    : x86_64
URL             : https://www.isc.org/software/bind/
Licenses        : custom:ISC
Groups          : None
Provides        : dnsutils=9.11.1
Depends On      : glibc  libcap  libseccomp  libxml2  zlib  krb5  e2fsprogs  openssl  readline  geoip  idnkit  dnssec-anchors  json-c
Optional Deps   : python: for python scripts
Conflicts With  : dnsutils
Replaces        : dnsutils  host
Download Size   : 1645.52 KiB
Installed Size  : 6122.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Wed 16 Aug 2017 11:29:07 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si coreutils
Repository      : core
Name            : coreutils
Version         : 8.27-1
Description     : The basic file, shell and text manipulation utilities of the GNU operating system
Architecture    : x86_64
URL             : https://www.gnu.org/software/coreutils/
Licenses        : GPL3
Groups          : base
Provides        : None
Depends On      : glibc  acl  attr  gmp  libcap  openssl
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 2.18 MiB
Installed Size  : 13.76 MiB
Packager        : Sébastien Luttringer <seblu@seblu.net>
Build Date      : Sun 12 Mar 2017 11:09:38 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si curl
Repository      : core
Name            : curl
Version         : 7.54.0-3
Description     : An URL retrieval utility and library
Architecture    : x86_64
URL             : https://curl.haxx.se
Licenses        : MIT
Groups          : None
Provides        : libcurl.so=4-64
Depends On      : ca-certificates  krb5  libssh2  openssl  zlib  libpsl  libnghttp2
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 872.36 KiB
Installed Size  : 1419.00 KiB
Packager        : Jan de Groot <jgc@archlinux.org>
Build Date      : Thu 04 May 2017 06:44:15 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si efitools
Repository      : extra
Name            : efitools
Version         : 1.7.0.5.g0649468-1
Description     : Tools for manipulating UEFI secure boot platforms
Architecture    : x86_64
URL             : http://git.kernel.org/cgit/linux/kernel/git/jejb/efitools.git
Licenses        : GPL  LGPL2.1
Groups          : None
Provides        : None
Depends On      : openssl
Optional Deps   : None
Conflicts With  : None
Replaces        : prebootloader
Download Size   : 145.71 KiB
Installed Size  : 1081.00 KiB
Packager        : Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
Build Date      : Fri 24 Mar 2017 03:39:39 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/etc/init.d/dhcpd failed to run and use chroot by default

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si freetds
Repository      : extra
Name            : freetds
Version         : 1.00.27-1
Description     : Library for accessing Sybase and MS SQL Server databases
Architecture    : x86_64
URL             : http://www.freetds.org
Licenses        : LGPL
Groups          : None
Provides        : None
Depends On      : openssl  unixodbc
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 2.07 MiB
Installed Size  : 20.12 MiB
Packager        : Antonio Rojas <arojas@archlinux.org>
Build Date      : Sat 18 Feb 2017 07:40:34 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si git
Repository      : extra
Name            : git
Version         : 2.12.2-4.hyperbola3
Description     : the fast distributed version control system, with OpenRC support
Architecture    : x86_64
URL             : http://git-scm.com/
Licenses        : GPL2
Groups          : None
Provides        : git-core
Depends On      : curl  expat>=2.0  perl-error  perl>=5.14.0  openssl  pcre
Optional Deps   : tk: gitk and git gui
                  perl-libwww: git svn
                  perl-term-readkey: git svn
                  perl-mime-tools: git send-email
                  perl-net-smtp-ssl: git send-email TLS support
                  perl-authen-sasl: git send-email TLS support
                  python2: various helper scripts
                  subversion: git svn
                  cvsps2: git cvsimport
                  gnome-keyring: GNOME keyring credential helper
Conflicts With  : None
Replaces        : git-core
Download Size   : 4.97 MiB
Installed Size  : 31.06 MiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Sat 12 Aug 2017 03:15:32 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si iputils
Repository      : core
Name            : iputils
Version         : 20161105.1f2bb12-2
Description     : Network monitoring tools, including ping
Architecture    : x86_64
URL             : http://www.skbuff.net/iputils/
Licenses        : GPL
Groups          : base
Provides        : None
Depends On      : openssl  sysfsutils  libcap  libidn
Optional Deps   : xinetd: for tftpd
Conflicts With  : netkit-base  arping  netkit-tftpd
Replaces        : netkit-base
Download Size   : 71.17 KiB
Installed Size  : 172.00 KiB
Packager        : Pierre Schmitz <pierre@archlinux.de>
Build Date      : Sat 11 Feb 2017 09:06:45 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si irssi
Repository      : extra
Name            : irssi
Version         : 1.0.2-2
Description     : Modular text mode IRC client with Perl scripting
Architecture    : x86_64
URL             : https://irssi.org/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : glib2  openssl
Optional Deps   : perl-libwww: for the scriptassist script
Conflicts With  : None
Replaces        : None
Download Size   : 537.57 KiB
Installed Size  : 1902.00 KiB
Packager        : Levente Polyak <anthraxx@archlinux.org>
Build Date      : Wed 15 Mar 2017 02:43:20 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si ldns
Repository      : core
Name            : ldns
Version         : 1.7.0-3
Description     : Fast DNS library supporting recent RFCs
Architecture    : x86_64
URL             : https://www.nlnetlabs.nl/projects/ldns/
Licenses        : custom:BSD
Groups          : None
Provides        : None
Depends On      : openssl  dnssec-anchors
Optional Deps   : libpcap: ldns-dpa tool
Conflicts With  : None
Replaces        : None
Download Size   : 435.63 KiB
Installed Size  : 1767.00 KiB
Packager        : Pierre Schmitz <pierre@archlinux.de>
Build Date      : Sat 11 Feb 2017 09:08:07 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si libarchive
Repository      : core
Name            : libarchive
Version         : 3.3.1-5
Description     : library that can create and read several streaming archive formats
Architecture    : x86_64
URL             : http://libarchive.org/
Licenses        : BSD
Groups          : None
Provides        : libarchive.so=13-64
Depends On      : acl  attr  bzip2  expat  lz4  openssl  xz  zlib
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 448.95 KiB
Installed Size  : 1031.00 KiB
Packager        : Christian Hesse <arch@eworm.de>
Build Date      : Mon 27 Feb 2017 06:11:02 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si libevent
Repository      : core
Name            : libevent
Version         : 2.0.22-4
Description     : An event notification library
Architecture    : x86_64
URL             : http://libevent.org/
Licenses        : BSD
Groups          : None
Provides        : None
Depends On      : openssl
Optional Deps   : python2: to use event_rpcgen.py
Conflicts With  : None
Replaces        : None
Download Size   : 220.07 KiB
Installed Size  : 1002.00 KiB
Packager        : Jan de Groot <jgc@archlinux.org>
Build Date      : Fri 03 Mar 2017 06:25:04 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends and makedepends on openssl.

$ pacman -Si libmariadbclient
Repository      : extra
Name            : libmariadbclient
Version         : 10.1.26-1.hyperbola1
Description     : MariaDB client libraries, with eudev support
Architecture    : x86_64
URL             : https://mariadb.org/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : openssl  libaio  zlib  pcre  lz4  lzo  xz
Optional Deps   : None
Conflicts With  : libmysqlclient
Replaces        : None
Download Size   : 4.18 MiB
Installed Size  : 20.18 MiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Mon 04 Sep 2017 02:04:58 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends and makedepends on openssl.

$ pacman -Si libsasl
Repository      : core
Name            : libsasl
Version         : 2.1.26-11
Description     : Cyrus Simple Authentication Service Layer (SASL) Library
Architecture    : x86_64
URL             : http://cyrusimap.web.cmu.edu/
Licenses        : custom
Groups          : None
Provides        : None
Depends On      : openssl
Optional Deps   : None
Conflicts With  : cyrus-sasl-plugins
Replaces        : None
Download Size   : 137.27 KiB
Installed Size  : 502.00 KiB
Packager        : Jan de Groot <jgc@archlinux.org>
Build Date      : Wed 05 Apr 2017 06:00:24 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si libssh2
Repository      : core
Name            : libssh2
Version         : 1.8.0-2
Description     : A library implementing the SSH2 protocol as defined by Internet Drafts
Architecture    : x86_64
URL             : https://www.libssh2.org/
Licenses        : BSD
Groups          : None
Provides        : libssh2.so=1-64
Depends On      : openssl
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 180.22 KiB
Installed Size  : 346.00 KiB
Packager        : Pierre Schmitz <pierre@archlinux.de>
Build Date      : Sat 11 Feb 2017 06:05:18 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature