|
Any | Feature Request | Very Low | Low | [bash] add rbash executable symlink | Closed | |
Task Description
Add “rbash” executable symlink in “bash” package:
$ ln -s bash /usr/bin/rbash
See: $ man 1 bash
|
|
Any | Security Issue | Very High | Critical | [midori] unmaintained and unsupportable | Closed | |
Task Description
The developer team is discussing the removal of Midori from Debian repositories.
Jeremy Bicha says:
> The final stable release of Midori still uses the unmaintained WebKit1 > instead of webkit2gtk and therefore the browser suffers from numerous > known security vulnerabilities. Midori now fails to build with vala > 0.36 which is in Ubuntu 17.10 Alpha and will be in Debian unstable > once it clears the Debian new queue. > https://launchpad.net/bugs/1698483 .
See a complete discussion here.
|
|
Any | Security Issue | Very High | Critical | [w3m] unmaintained and unsupportable | Closed | |
Task Description
w3m is an unmaintained and unsuportable software, the latest release was 0.5.3 (2011)[0][1][2][3]
$ pacman -Qi w3m Name : w3m Version : 0.5.3.git20170102-2 Description : Text-based Web browser, as well as pager Architecture : x86_64 URL : http://w3m.sourceforge.net/ Licenses : custom Groups : None Provides : None Depends On : openssl gc ncurses gpm Optional Deps : imlib2: for graphics support [installed] Required By : None Optional For : None Conflicts With : None Replaces : None Installed Size : 1784.00 KiB Packager : Jan de Groot jgc@archlinux.org Build Date : Sat 04 Mar 2017 07:12:38 PM -03 Install Date : Tue 12 Sep 2017 03:43:25 AM -03 Install Reason : Explicitly installed Install Script : No Validated By : Signature
[0]:https://sourceforge.net/projects/w3m/files/w3m/ [1]:https://security.archlinux.org/package/w3m [2]:https://tracker.debian.org/pkg/w3m [3]:https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/w3m
|
|
Any | Security Issue | Very High | Critical | [pam] pam_unix2 is orphaned and dead upstream | Closed | |
Task Description
pam_unix2 was removed from Debian Jessie because it’s buggy and unmaintained [0]
It’s included inside pam package and should be removed since it doesn’t comes from official source. Also the original upstream FTP directory (ftp://ftp.suse.com/people/kukuk/pam/pam_unix2) has disappeared.
[0]:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628848
$ pacman -Si pam Repository : core Name : pam Version : 1.3.0-1 Description : PAM (Pluggable Authentication Modules) library Architecture : x86_64 URL : http://linux-pam.org Licenses : GPL2 Groups : None Provides : None Depends On : glibc cracklib libtirpc pambase Optional Deps : None Conflicts With : None Replaces : None Download Size : 609.71 KiB Installed Size : 2980.00 KiB Packager : Tobias Powalowski tpowa@archlinux.org Build Date : Thu 09 Jun 2016 02:44:03 PM -03 Validated By : MD5 Sum SHA-256 Sum Signature
$ pacman -Ql pam > pam_fileslist.txt
|
|
Any | Drop Request | High | High | [devtools] remove this package | Closed | |
Task Description
“devtools” is not a “libretools” and “hyperiso” replacement.
$ pacman -Si devtools Repository : extra Name : devtools Version : 20170320-2 Description : Tools for Arch Linux package maintainers Architecture : any URL : http://projects.archlinux.org/devtools.git/ Licenses : GPL Groups : None Provides : None Depends On : namcap openssh subversion rsync arch-install-scripts Optional Deps : None Conflicts With : None Replaces : None Download Size : 21.81 KiB Installed Size : 143.00 KiB Packager : Evangelos Foutras evangelos@foutrelis.com Build Date : Thu 27 Apr 2017 01:32:21 AM -03 Validated By : MD5 Sum SHA-256 Sum Signature
|
|
Any | Privacy Issue | High | High | [redshift] remove geoclue2 support | Closed | |
Task Description
Bug Report
Tratando proveedor ubicación `geoclue2'...
Usando el proveedor `geoclue2'.
Unable to connect to GeoClue.
Incapaz de obtener localización desde el proveedor.
Package information:
$ pacman -S redshift Repositorio : community Nombre : redshift Versión : 1.11-4.hyperbola1 Descripción : Adjusts the color temperature of your screen according to your surroundings, without geoclue2 support Arquitectura : x86_64 URL : http://jonls.dk/redshift/ Licencias : GPL3 Grupos : Nada Provee : Nada Depende de : libdrm libxcb libxxf86vm Dependencias opcionales : python-gobject: for redshift-gtk python-xdg: for redshift-gtk librsvg: for redshift-gtk En conflicto con : Nada Remplaza a : Nada Tamaño de la descarga : 107,66 KiB Tamaño de la instalación : 1004,00 KiB Encargado : André Silva emulatorman@hyperbola.info Fecha de creación : sáb 17 jun 2017 14:03:43 -05 Validado por : Suma MD5 Suma SHA-256 Firma
|
|
Any | Privacy Issue | High | High | [epiphany] would be more private if not for Hyperbola p ... | Closed | |
Task Description
(in Spanish) Copio lo que puse en irc:
<isacdaavid>: este parche de epiphany está removiendo cosas de más. Si te fijas aca verás que lo que ese código hace es proteger la privacidad contra google y facebook.
<isacdaavid>: https://git.parabola.nu/abslibre.git/tree/libre/epiphany/privacy.patch#n162 sólo está probando si el spyware está siendo removido efectivamente. Tampoco veo necesidad de mantener lo de la línea #122 (lo único que hace es cambiar el título de la ventana), ni lo de la línea #139 (sólo está probando que el parser de URLs funciona, no hace conexiones), y mucho menos quitar referencias a “google.com” en los comentarios.
<isacdaavid>: subiré mis cambios a parabola, por si te interesa usarlos.
|
|
Any | Bug Report | High | High | [tlp] remove systemd support | Closed | |
Task Description
systemd support should be removed from tlp. I understand that it should start automatically under OpenRC.
|
|
Any | Bug Report | High | High | [sway] relies on systemd libraries | Closed | |
Task Description
impossible to start sway as it relies on libsystemd.so.0
error:
sway: error while loading shared libraries: libsystemd.so.0: cannot open shared object file: No such file or directory
|
|
Any | Feature Request | Medium | Medium | [offlineimap] needs OpenRC init script | Closed | |
Task Description
Would be nice to have a rc-service to start and manage offlineimap automatically during system startup
|
|
Any | Security Issue | Very High | Critical | [wpa_supplicant] vulnerable to KRAK attack | Closed | |
Task Description
https://arstechnica.com/information-technology/2017/10/severe-flaw-in-wpa2-protocol-leaves-wi-fi-traffic-open-to-eavesdropping/
https://w1.fi/security/2017-1/
Arch just patched: https://www.archlinux.org/packages/core/i686/wpa_supplicant/
|
|
Any | Security Issue | High | High | [podofo] vulnerable allows remote attackers to cause a ... | Closed | |
Task Description
https://icepng.github.io/2017/04/21/PoDoFo-1/
https://blogs.gentoo.org/ago/2017/03/31/podofo-four-null-pointer-dereference
http://www.securityfocus.com/bid/97296/info
Package information
Repositorio : community Nombre : podofo Versión : 0.9.5-2 Descripción : A C++ library to work with the PDF file format Arquitectura : x86_64 URL : http://podofo.sourceforge.net Licencias : GPL Grupos : Nada Provee : Nada Depende de : lua openssl fontconfig libtiff libidn libjpeg-turbo Dependencias opcionales : Nada En conflicto con : Nada Remplaza a : Nada Tamaño de la descarga : 785,18 KiB Tamaño de la instalación : 4492,00 KiB Encargado : Antonio Rojas arojas@archlinux.org Fecha de creación : sáb 18 feb 2017 06:52:31 -05 Validado por : Suma MD5 Suma SHA-256 Firma
Debian just patched for v0.9.5-6
https://sources.debian.net/src/libpodofo/0.9.5-6/debian/patches/CVE-2017-738%5B0123%5D.patch/
https://sources.debian.net/src/libpodofo/0.9.5-6/debian/patches/
|
|
Any | Security Issue | High | High | [isync] needs update | Closed | |
Task Description
isync is currently on 1.2.1-3, the versions is 2 years old and a lot of security/features have been implemented to the version 1.3.0
isync needs be upgraded from 1.2.1 to 1.2.3 since it is a bugfix adapted for our current snapshot in Milky Way (2017-05-08) which is using isync 1.2.x series.
|
|
Any | Drop Request | High | High | [ssmtp] remove obsolete package | Closed | |
Task Description
Package ssmtp is unmaintained:
ssmtp is unmaintained. Consider using something like msmtp instead. (source)
So it violates point 4 of our packaging guidelines “Anti-abandonware”, because it’s abandoned and has a replacement (msmtp)
|
|
Any | Feature Request | Medium | Medium | [pcsclite] needs OpenRC init script | Closed | |
Task Description
$ pacman -Si pcsclite Repository : community Name : pcsclite Version : 1.8.20-1.hyperbola1 Description : PC/SC Architecture smartcard middleware library, without systemd support Architecture : x86_64 URL : https://alioth.debian.org/projects/pcsclite/ Licenses : BSD Groups : None Provides : None Depends On : python2 Optional Deps : None Conflicts With : None Replaces : None Download Size : 91.46 KiB Installed Size : 362.00 KiB Packager : André Silva emulatorman@hyperbola.info Build Date : Tue 29 Aug 2017 03:18:32 PM CEST Validated By : MD5 Sum SHA-256 Sum Signature
$ pacman -Ql pcsclite pcsclite /usr/ pcsclite /usr/bin/ pcsclite /usr/bin/pcsc-spy pcsclite /usr/bin/pcscd pcsclite /usr/include/ pcsclite /usr/include/PCSC/ pcsclite /usr/include/PCSC/debuglog.h pcsclite /usr/include/PCSC/ifdhandler.h pcsclite /usr/include/PCSC/pcsclite.h pcsclite /usr/include/PCSC/reader.h pcsclite /usr/include/PCSC/winscard.h pcsclite /usr/include/PCSC/wintypes.h pcsclite /usr/lib/ pcsclite /usr/lib/libpcsclite.so pcsclite /usr/lib/libpcsclite.so.1 pcsclite /usr/lib/libpcsclite.so.1.0.0 pcsclite /usr/lib/libpcscspy.so pcsclite /usr/lib/libpcscspy.so.0 pcsclite /usr/lib/libpcscspy.so.0.0.0 pcsclite /usr/lib/pcsc/ pcsclite /usr/lib/pcsc/drivers/ pcsclite /usr/lib/pkgconfig/ pcsclite /usr/lib/pkgconfig/libpcsclite.pc pcsclite /usr/lib/systemd/ pcsclite /usr/lib/systemd/system/ pcsclite /usr/lib/systemd/system/pcscd.service pcsclite /usr/lib/systemd/system/pcscd.socket pcsclite /usr/share/ pcsclite /usr/share/licenses/ pcsclite /usr/share/licenses/pcsclite/ pcsclite /usr/share/licenses/pcsclite/LICENSE pcsclite /usr/share/man/ pcsclite /usr/share/man/man1/ pcsclite /usr/share/man/man1/pcsc-spy.1.gz pcsclite /usr/share/man/man5/ pcsclite /usr/share/man/man5/reader.conf.5.gz pcsclite /usr/share/man/man8/ pcsclite /usr/share/man/man8/pcscd.8.gz
|
|
Any | Feature Request | High | High | [icedove-enigmail] add package | Closed | |
Task Description
Hello,
Would it be possible to add this package :
icedove-enigmail
to the repo ?
Thank you
|
|
Any | Bug Report | Medium | High | [brasero] could not establish a connection to Tracker | Closed | |
Task Description
# Bug
(brasero:1402): WARNING : Could not establish a connection to Tracker: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.Tracker1 was not provided by any .service files Gtk-Message: GtkDialog mapped without a transient parent. This is discouraged.
# Package information
$ sudo pacman -Si brasero
[sudo] password for heckyel:
Repositorio : extra
Nombre : brasero
Versión : 3.12.1-2.hyperbola1
Descripción : CD/DVD mastering tool
Arquitectura : x86_64
URL : https://wiki.gnome.org/Apps/Brasero
Licencias : GPL
Grupos : gnome-extra
Provee : Nada
Depende de : gtk3 gst-plugins-good totem-plparser cdrkit cdrdao
shared-mime-info libcanberra dvd+rw-tools dconf libsm
libtracker-sparql libnotify gvfs
Dependencias opcionales : libburn: alternative back-end
libisofs: libburn back-end
dvdauthor: video project
vcdimager: video project
En conflicto con : Nada
Remplaza a : nautilus-cd-burner
Tamaño de la descarga : 2,58 MiB
Tamaño de la instalación : 14,46 MiB
Encargado : Scott Adams <haricot@hyperbola.info>
Fecha de creación : lun 29 may 2017 00:24:19 -05
Validado por : Suma MD5 Suma SHA-256 Firma
# File attached pacman -Ql brasero > brasero.txt
|
|
Any | Bug Report | Medium | Medium | [minicom][openrc] error: failed to commit transaction ( ... | Closed | |
Task Description
minicom conflicts against openrc package since both contains a file with the same name (/usr/bin/runscript)
# pacman -S minicom
resolving dependencies...
looking for conflicting packages...
Packages (1) minicom-2.7.1-1
Total Download Size: 0.18 MiB
Total Installed Size: 0.71 MiB
:: Proceed with installation? [Y/n]
:: Retrieving packages...
minicom-2.7.1-1-x86_64 186.7 KiB 170K/s 00:01 [########################################################] 100%
(1/1) checking keys in keyring [########################################################] 100%
(1/1) checking package integrity [########################################################] 100%
(1/1) loading package files [########################################################] 100%
(1/1) checking for file conflicts [########################################################] 100%
error: failed to commit transaction (conflicting files)
minicom: /usr/bin/runscript exists in filesystem
Errors occurred, no packages were upgraded.
$ pacman -Qo /usr/bin/runscript
/usr/bin/runscript is owned by openrc 0.28-8
|
|
Any | Bug Report | Medium | Medium | [cdemu-daemon] error: failed to prepare transaction (co ... | Closed | |
Task Description
cdemu-daemon requires a specific version of vhba-module. Since we are using vhba-module-lts with vhba-module in provides array but without a specific version, it generates the issue. Removing that specific version solves it.
# pacman -S cdemu-daemon
resolving dependencies...
warning: cannot resolve "vhba-module>=20140629", a dependency of "cdemu-daemon"
:: The following package cannot be upgraded due to unresolvable dependencies:
cdemu-daemon
:: Do you want to skip the above package for this upgrade? [y/N]
error: failed to prepare transaction (could not satisfy dependencies)
:: cdemu-daemon: requires vhba-module>=20140629
|
|
Any | Bug Report | Medium | High | [mutt] error message: mailbox closed | Closed | |
Task Description
Mutt is unstable. While in Mutt, the message ‘mailbox closed’ emerges.
|
|
Any | Security Issue | Medium | High | [blender] error invalid PGP keys | Closed | |
Task Description
$ sudo pacman -S blender
resolviendo dependencias…
buscando conflictos entre paquetes…
Paquetes (20) alembic-1.7.1-1 blender-common-2.78.c-1.hyperbola4 blosc-1.11.3-1 ilmbase-2.2.0-2 intel-tbb-2017_20170226-1 libraw-0.18.2-1 libspnav-0.2.3-1 llvm-4.0.0-2
log4cplus-1.2.0-3 opencollada-1.6.45-1.hyperbola1 opencolorio-1.0.9-5 openexr-2.2.0-3.hyperbola2 openimageio-1.6.18-1.hyperbola1 openshadinglanguage-1.7.5-1.hyperbola1
opensubdiv-3.1.1-1 openvdb-3.2.0-2 ptex-2.1.28-1.hyperbola1 valgrind-3.12.0-2 zstd-1.1.4-1 blender-2.78.c-1.hyperbola4
Tamaño total de la descarga: 0,33 MiB
Tamaño total de la instalación: 567,26 MiB
:: ¿Continuar con la instalación? [S/n] s
:: Recibiendo los paquetes…
libspnav-0.2.3-1-x86_64 8,5 KiB 849K/s 00:00 [######################################################################] 100%
zstd-1.1.4-1-x86_64 283,3 KiB 199K/s 00:01 [######################################################################] 100%
blosc-1.11.3-1-x86_64 43,0 KiB 331K/s 00:00 [######################################################################] 100%
(20/20) comprobando las claves del depósito [######################################################################] 100%
(20/20) verificando la integridad de los paquetes [######################################################################] 100%
error: libspnav: signature from "Andrea Scarpino <me@andreascarpino.it>" is marginal trust
:: El archivo /var/cache/pacman/pkg/libspnav-0.2.3-1-x86_64.pkg.tar.xz está dañado (paquete no válido o dañado (firma PGP)).
¿Quiere eliminarlo? [S/n] s
error: zstd: signature from "Andrzej Giniewicz (giniu) <gginiu@gmail.com>" is marginal trust
:: El archivo /var/cache/pacman/pkg/zstd-1.1.4-1-x86_64.pkg.tar.xz está dañado (paquete no válido o dañado (firma PGP)).
¿Quiere eliminarlo? [S/n] s
error: blosc: signature from "Andrzej Giniewicz (giniu) <gginiu@gmail.com>" is marginal trust
:: El archivo /var/cache/pacman/pkg/blosc-1.11.3-1-x86_64.pkg.tar.xz está dañado (paquete no válido o dañado (firma PGP)).
¿Quiere eliminarlo? [S/n] s
error: no se pudo realizar la operación (paquete no válido o dañado)
Ocurrieron errores, por lo que no se actualizaron los paquetes
|
|
Any | Implementation Request | Very Low | Low | [thinkfan] add package | Closed | |
Task Description
Could it be possible to add this package :
thinkfan
“A minimalist fan control program. Supports the sysfs hwmon interface and thinkpad_acpi”
License : GPL
to the repo ?
Thanks
|
|
Any | Implementation Request | High | High | [onioncat]: add package | Closed | |
Task Description
Add “onioncat”[0][1] package
[0]:https://www.onioncat.org/ [1]:https://www.onioncat.org/download/ https://www.cypherpunk.at/ocat/download/Source/current/
|
|
Any | Implementation Request | High | High | [xen] add Xen 4.8.x split packages | Closed | |
Task Description
Add Xen 4.8.x split packages (”xen” and “xen-docs”).
|
|
Any | Security Issue | Very High | Critical | [dillo] enable IPv6, SSL/TLS and threaded DNS support | Closed | |
Task Description
Please move dillo to blacklist. Please enable IPv6, SSL/TLS and threaded DNS support.
1- Arch PKGBUILD problems:
a- not obtain source via https
b- not compiled with support --enable-ipv6 --enable-threaded-dns --enable-ssl
My correction is committed in NAB-packages-community
|
|
Any | Security Issue | High | High | [busybox] CVE-2017-16544: autocompletion vulnerability | Closed | |
|
|
Any | Feature Request | Very High | High | [linux-libre-*] add missing installed kernel configurat ... | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [mat] add package | Closed | |
|
|
Any | Bug Report | High | High | [gnome-disk-utility] error while loading shared librari ... | Closed | |
|
|
Any | Feature Request | Medium | Medium | [gdm] needs OpenRC init script | Closed | |
|
|
Any | Implementation Request | Very Low | Low | [mednaffe] add package | Closed | |
|
|
Any | Bug Report | High | High | [filesystem] remove /etc/crypttab file | Closed | |
|
|
Any | Feature Request | Medium | Medium | [openconnect] needs OpenRC init scripts | Closed | |
|
|
Any | Bug Report | Medium | Medium | [wine] doesn't allow sound. + all wine versions =2.7 | Closed | |
|
|
Any | Drop Request | Low | Low | [wine*] remove unstable and staging packages | Closed | |
|
|
Any | Implementation Request | Medium | Medium | [wine-stable] add package | Closed | |
|
|
Any | Privacy Issue | Very High | Critical | [libreoffice*] contains Google API keys | Closed | |
|
|
Any | Freedom Issue | Very High | Critical | [aarch64-linux-gnu-linux-api-headers] compiles using b ... | Closed | |
|
|
Any | Bug Report | Low | High | [php-fpm] service fails to start | Closed | |
|
|
Any | Update Request | Medium | Medium | [youtube-viewer] update request to v3.7.9 | Closed | |
|
|
Any | Security Issue | Very High | Critical | [linux-libre-lts*] Meltdown & Spectre Vulnerability | Closed | |
|
|
Any | Bug Report | Medium | Low | firejail: mpv.profile fails to work | Closed | |
|
|
Any | Security Issue | Very High | Critical | [libressl] add package as OpenSSL replacement and defau ... | Closed | |
|
|
Any | Feature Request | High | High | [apache] rebuild package against libressl | Closed | |
|
|
Any | Feature Request | High | High | [bigloo] rebuild package against libressl | Closed | |
|
|
Any | Feature Request | High | High | [bind] rebuild package against libressl | Closed | |
|
|
Any | Feature Request | High | High | [bind-tools] rebuild package against libressl | Closed | |
|
|
Any | Feature Request | High | High | [coreutils] rebuild package against libressl | Closed | |
|
|
Any | Feature Request | High | High | [curl] rebuild package against libressl | Closed | |
|
|
Any | Feature Request | High | High | [efitools] rebuild package against libressl | Closed | |
|