Packages

Category Task Type Priority Severity Summary Status  desc Progress
AnyFeature RequestVery LowLow [bash] add rbash executable symlink Closed
100%
Task Description

Add “rbash” executable symlink in “bash” package:

$ ln -s bash /usr/bin/rbash

See:
$ man 1 bash

AnySecurity IssueVery HighCritical [midori] unmaintained and unsupportable Closed
100%
Task Description

The developer team is discussing the removal of Midori from Debian repositories.

Jeremy Bicha says:


> The final stable release of Midori still uses the unmaintained WebKit1
> instead of webkit2gtk and therefore the browser suffers from numerous
> known security vulnerabilities. Midori now fails to build with vala
> 0.36 which is in Ubuntu 17.10 Alpha and will be in Debian unstable
> once it clears the Debian new queue.
> https://launchpad.net/bugs/1698483 .

See a complete discussion here.

AnySecurity IssueVery HighCritical [w3m] unmaintained and unsupportable Closed
100%
Task Description

w3m is an unmaintained and unsuportable software, the latest release was 0.5.3 (2011)[0][1][2][3]

$ pacman -Qi w3m
Name : w3m
Version : 0.5.3.git20170102-2
Description : Text-based Web browser, as well as pager
Architecture : x86_64
URL : http://w3m.sourceforge.net/ Licenses : custom
Groups : None
Provides : None
Depends On : openssl gc ncurses gpm
Optional Deps : imlib2: for graphics support [installed]
Required By : None
Optional For : None
Conflicts With : None
Replaces : None
Installed Size : 1784.00 KiB
Packager : Jan de Groot jgc@archlinux.org Build Date : Sat 04 Mar 2017 07:12:38 PM -03
Install Date : Tue 12 Sep 2017 03:43:25 AM -03
Install Reason : Explicitly installed
Install Script : No
Validated By : Signature

[0]:https://sourceforge.net/projects/w3m/files/w3m/ [1]:https://security.archlinux.org/package/w3m [2]:https://tracker.debian.org/pkg/w3m [3]:https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/w3m

AnySecurity IssueVery HighCritical [pam] pam_unix2 is orphaned and dead upstream Closed
100%
Task Description

pam_unix2 was removed from Debian Jessie because it’s buggy and unmaintained [0]

It’s included inside pam package and should be removed since it doesn’t comes from official source. Also the original upstream FTP directory (ftp://ftp.suse.com/people/kukuk/pam/pam_unix2) has disappeared.

[0]:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628848

$ pacman -Si pam
Repository : core
Name : pam
Version : 1.3.0-1
Description : PAM (Pluggable Authentication Modules) library
Architecture : x86_64
URL : http://linux-pam.org Licenses : GPL2
Groups : None
Provides : None
Depends On : glibc cracklib libtirpc pambase
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 609.71 KiB
Installed Size : 2980.00 KiB
Packager : Tobias Powalowski tpowa@archlinux.org Build Date : Thu 09 Jun 2016 02:44:03 PM -03
Validated By : MD5 Sum SHA-256 Sum Signature

$ pacman -Ql pam > pam_fileslist.txt

AnyDrop RequestHighHigh [devtools] remove this package Closed
100%
Task Description

“devtools” is not a “libretools” and “hyperiso” replacement.

$ pacman -Si devtools
Repository : extra
Name : devtools
Version : 20170320-2
Description : Tools for Arch Linux package maintainers
Architecture : any
URL : http://projects.archlinux.org/devtools.git/ Licenses : GPL Groups : None
Provides : None
Depends On : namcap openssh subversion rsync arch-install-scripts
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 21.81 KiB
Installed Size : 143.00 KiB
Packager : Evangelos Foutras evangelos@foutrelis.com Build Date : Thu 27 Apr 2017 01:32:21 AM -03
Validated By : MD5 Sum SHA-256 Sum Signature

AnyPrivacy IssueHighHigh [redshift] remove geoclue2 support Closed
100%
Task Description

Bug Report

Tratando proveedor ubicación `geoclue2'...
Usando el proveedor `geoclue2'.
Unable to connect to GeoClue.
Incapaz de obtener localización desde el proveedor.

Package information:

$ pacman -S redshift
Repositorio : community
Nombre : redshift
Versión : 1.11-4.hyperbola1
Descripción : Adjusts the color temperature of your screen according to your surroundings, without geoclue2 support
Arquitectura : x86_64
URL : http://jonls.dk/redshift/ Licencias : GPL3
Grupos : Nada
Provee : Nada
Depende de : libdrm libxcb libxxf86vm
Dependencias opcionales : python-gobject: for redshift-gtk python-xdg: for redshift-gtk librsvg: for redshift-gtk
En conflicto con : Nada
Remplaza a : Nada
Tamaño de la descarga : 107,66 KiB
Tamaño de la instalación : 1004,00 KiB
Encargado : André Silva emulatorman@hyperbola.info Fecha de creación : sáb 17 jun 2017 14:03:43 -05
Validado por : Suma MD5 Suma SHA-256 Firma

AnyPrivacy IssueHighHigh [epiphany] would be more private if not for Hyperbola p ...Closed
100%
Task Description

(in Spanish)
Copio lo que puse en irc:

<isacdaavid>: este parche de epiphany está removiendo cosas de más. Si te fijas aca verás que lo que ese código hace es proteger la privacidad contra google y facebook.

<isacdaavid>: https://git.parabola.nu/abslibre.git/tree/libre/epiphany/privacy.patch#n162 sólo está probando si el spyware está siendo removido efectivamente. Tampoco veo necesidad de mantener lo de la línea #122 (lo único que hace es cambiar el título de la ventana), ni lo de la línea #139 (sólo está probando que el parser de URLs funciona, no hace conexiones), y mucho menos quitar referencias a “google.com” en los comentarios.

<isacdaavid>: subiré mis cambios a parabola, por si te interesa usarlos.

AnyBug ReportHighHigh [tlp] remove systemd support Closed
100%
Task Description

systemd support should be removed from tlp. I understand that it should start automatically under OpenRC.

AnyBug ReportHighHigh [sway] relies on systemd libraries Closed
100%
Task Description

impossible to start sway as it relies on libsystemd.so.0

error:

sway: error while loading shared libraries: libsystemd.so.0: cannot open shared object file: No such file or directory

AnyFeature RequestMediumMedium [offlineimap] needs OpenRC init script Closed
100%
Task Description

Would be nice to have a rc-service to start and manage offlineimap automatically during system startup

AnySecurity IssueVery HighCritical [wpa_supplicant] vulnerable to KRAK attack Closed
100%
Task Description

https://arstechnica.com/information-technology/2017/10/severe-flaw-in-wpa2-protocol-leaves-wi-fi-traffic-open-to-eavesdropping/

https://w1.fi/security/2017-1/

Arch just patched: https://www.archlinux.org/packages/core/i686/wpa_supplicant/

AnySecurity IssueHighHigh [podofo] vulnerable allows remote attackers to cause a  ...Closed
100%
Task Description

https://icepng.github.io/2017/04/21/PoDoFo-1/

https://blogs.gentoo.org/ago/2017/03/31/podofo-four-null-pointer-dereference

http://www.securityfocus.com/bid/97296/info

Package information

Repositorio : community
Nombre : podofo
Versión : 0.9.5-2 Descripción : A C++ library to work with the PDF file format
Arquitectura : x86_64
URL : http://podofo.sourceforge.net Licencias : GPL Grupos : Nada
Provee : Nada
Depende de : lua openssl fontconfig libtiff libidn libjpeg-turbo
Dependencias opcionales : Nada
En conflicto con : Nada
Remplaza a : Nada
Tamaño de la descarga : 785,18 KiB
Tamaño de la instalación : 4492,00 KiB
Encargado : Antonio Rojas arojas@archlinux.org Fecha de creación : sáb 18 feb 2017 06:52:31 -05
Validado por : Suma MD5 Suma SHA-256 Firma

Debian just patched for v0.9.5-6

https://sources.debian.net/src/libpodofo/0.9.5-6/debian/patches/CVE-2017-738%5B0123%5D.patch/

https://sources.debian.net/src/libpodofo/0.9.5-6/debian/patches/

AnySecurity IssueHighHigh [isync] needs update Closed
100%
Task Description

isync is currently on 1.2.1-3, the versions is 2 years old and a lot of security/features have been implemented to the version 1.3.0

isync needs be upgraded from 1.2.1 to 1.2.3 since it is a bugfix adapted for our current snapshot in Milky Way (2017-05-08) which is using isync 1.2.x series.

AnyDrop RequestHighHigh [ssmtp] remove obsolete package Closed
100%
Task Description

Package ssmtp is unmaintained:

ssmtp is unmaintained. Consider using something like msmtp instead. (source)

So it violates point 4 of our packaging guidelines “Anti-abandonware”, because it’s abandoned and has a replacement (msmtp)

AnyFeature RequestMediumMedium [pcsclite] needs OpenRC init script Closed
100%
Task Description

$ pacman -Si pcsclite
Repository : community
Name : pcsclite
Version : 1.8.20-1.hyperbola1
Description : PC/SC Architecture smartcard middleware library, without systemd support
Architecture : x86_64
URL : https://alioth.debian.org/projects/pcsclite/ Licenses : BSD
Groups : None
Provides : None
Depends On : python2
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 91.46 KiB
Installed Size : 362.00 KiB
Packager : André Silva emulatorman@hyperbola.info Build Date : Tue 29 Aug 2017 03:18:32 PM CEST
Validated By : MD5 Sum SHA-256 Sum Signature

$ pacman -Ql pcsclite
pcsclite /usr/
pcsclite /usr/bin/
pcsclite /usr/bin/pcsc-spy
pcsclite /usr/bin/pcscd
pcsclite /usr/include/
pcsclite /usr/include/PCSC/
pcsclite /usr/include/PCSC/debuglog.h
pcsclite /usr/include/PCSC/ifdhandler.h
pcsclite /usr/include/PCSC/pcsclite.h
pcsclite /usr/include/PCSC/reader.h
pcsclite /usr/include/PCSC/winscard.h
pcsclite /usr/include/PCSC/wintypes.h
pcsclite /usr/lib/
pcsclite /usr/lib/libpcsclite.so
pcsclite /usr/lib/libpcsclite.so.1
pcsclite /usr/lib/libpcsclite.so.1.0.0
pcsclite /usr/lib/libpcscspy.so
pcsclite /usr/lib/libpcscspy.so.0
pcsclite /usr/lib/libpcscspy.so.0.0.0
pcsclite /usr/lib/pcsc/
pcsclite /usr/lib/pcsc/drivers/
pcsclite /usr/lib/pkgconfig/
pcsclite /usr/lib/pkgconfig/libpcsclite.pc
pcsclite /usr/lib/systemd/
pcsclite /usr/lib/systemd/system/
pcsclite /usr/lib/systemd/system/pcscd.service
pcsclite /usr/lib/systemd/system/pcscd.socket
pcsclite /usr/share/
pcsclite /usr/share/licenses/
pcsclite /usr/share/licenses/pcsclite/
pcsclite /usr/share/licenses/pcsclite/LICENSE
pcsclite /usr/share/man/
pcsclite /usr/share/man/man1/
pcsclite /usr/share/man/man1/pcsc-spy.1.gz
pcsclite /usr/share/man/man5/
pcsclite /usr/share/man/man5/reader.conf.5.gz
pcsclite /usr/share/man/man8/
pcsclite /usr/share/man/man8/pcscd.8.gz

AnyFeature RequestHighHigh [icedove-enigmail] add package Closed
100%
Task Description

Hello,

Would it be possible to add this package :

icedove-enigmail

to the repo ?

Thank you

AnyBug ReportMediumHigh [brasero] could not establish a connection to Tracker Closed
100%
Task Description

# Bug

(brasero:1402): WARNING : Could not establish a connection to Tracker: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.Tracker1 was not provided by any .service files
Gtk-Message: GtkDialog mapped without a transient parent. This is discouraged.

# Package information

$ sudo pacman -Si brasero
[sudo] password for heckyel: 
Repositorio               : extra
Nombre                    : brasero
Versión                   : 3.12.1-2.hyperbola1
Descripción               : CD/DVD mastering tool
Arquitectura              : x86_64
URL                       : https://wiki.gnome.org/Apps/Brasero
Licencias                 : GPL
Grupos                    : gnome-extra
Provee                    : Nada
Depende de                : gtk3  gst-plugins-good  totem-plparser  cdrkit  cdrdao
                            shared-mime-info  libcanberra  dvd+rw-tools  dconf  libsm
                            libtracker-sparql  libnotify  gvfs
Dependencias opcionales   : libburn: alternative back-end
                            libisofs: libburn back-end
                            dvdauthor: video project
                            vcdimager: video project
En conflicto con          : Nada
Remplaza a                : nautilus-cd-burner
Tamaño de la descarga     : 2,58 MiB
Tamaño de la instalación  : 14,46 MiB
Encargado                 : Scott Adams <haricot@hyperbola.info>
Fecha de creación         : lun 29 may 2017 00:24:19 -05
Validado por              : Suma MD5  Suma SHA-256  Firma

# File attached
pacman -Ql brasero > brasero.txt

AnyBug ReportMediumMedium [minicom][openrc] error: failed to commit transaction ( ...Closed
100%
Task Description

minicom conflicts against openrc package since both contains a file with the same name (/usr/bin/runscript)

# pacman -S minicom
resolving dependencies...
looking for conflicting packages...

Packages (1) minicom-2.7.1-1

Total Download Size:   0.18 MiB
Total Installed Size:  0.71 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 minicom-2.7.1-1-x86_64                                                186.7 KiB   170K/s 00:01 [########################################################] 100%
(1/1) checking keys in keyring                                                                  [########################################################] 100%
(1/1) checking package integrity                                                                [########################################################] 100%
(1/1) loading package files                                                                     [########################################################] 100%
(1/1) checking for file conflicts                                                               [########################################################] 100%
error: failed to commit transaction (conflicting files)
minicom: /usr/bin/runscript exists in filesystem
Errors occurred, no packages were upgraded.
$ pacman -Qo /usr/bin/runscript
/usr/bin/runscript is owned by openrc 0.28-8
AnyBug ReportMediumMedium [cdemu-daemon] error: failed to prepare transaction (co ...Closed
100%
Task Description

cdemu-daemon requires a specific version of vhba-module. Since we are using vhba-module-lts with vhba-module in provides array but without a specific version, it generates the issue. Removing that specific version solves it.

# pacman -S cdemu-daemon
resolving dependencies...
warning: cannot resolve "vhba-module>=20140629", a dependency of "cdemu-daemon"
:: The following package cannot be upgraded due to unresolvable dependencies:
      cdemu-daemon

:: Do you want to skip the above package for this upgrade? [y/N] 
error: failed to prepare transaction (could not satisfy dependencies)
:: cdemu-daemon: requires vhba-module>=20140629
AnyBug ReportMediumHigh [mutt] error message: mailbox closed Closed
100%
Task Description

Mutt is unstable. While in Mutt, the message ‘mailbox closed’ emerges.

AnySecurity IssueMediumHigh [blender] error invalid PGP keys Closed
100%
Task Description
$ sudo pacman -S blender
resolviendo dependencias…
buscando conflictos entre paquetes…

Paquetes (20) alembic-1.7.1-1  blender-common-2.78.c-1.hyperbola4  blosc-1.11.3-1  ilmbase-2.2.0-2  intel-tbb-2017_20170226-1  libraw-0.18.2-1  libspnav-0.2.3-1  llvm-4.0.0-2
              log4cplus-1.2.0-3  opencollada-1.6.45-1.hyperbola1  opencolorio-1.0.9-5  openexr-2.2.0-3.hyperbola2  openimageio-1.6.18-1.hyperbola1  openshadinglanguage-1.7.5-1.hyperbola1
              opensubdiv-3.1.1-1  openvdb-3.2.0-2  ptex-2.1.28-1.hyperbola1  valgrind-3.12.0-2  zstd-1.1.4-1  blender-2.78.c-1.hyperbola4

Tamaño total de la descarga:      0,33 MiB
Tamaño total de la instalación:  567,26 MiB

:: ¿Continuar con la instalación? [S/n] s
:: Recibiendo los paquetes…
 libspnav-0.2.3-1-x86_64                                                                     8,5 KiB   849K/s 00:00 [######################################################################] 100%
 zstd-1.1.4-1-x86_64                                                                       283,3 KiB   199K/s 00:01 [######################################################################] 100%
 blosc-1.11.3-1-x86_64                                                                      43,0 KiB   331K/s 00:00 [######################################################################] 100%
(20/20) comprobando las claves del depósito                                                                         [######################################################################] 100%
(20/20) verificando la integridad de los paquetes                                                                   [######################################################################] 100%
error: libspnav: signature from "Andrea Scarpino <me@andreascarpino.it>" is marginal trust
:: El archivo /var/cache/pacman/pkg/libspnav-0.2.3-1-x86_64.pkg.tar.xz está dañado (paquete no válido o dañado (firma PGP)).
¿Quiere eliminarlo? [S/n] s
error: zstd: signature from "Andrzej Giniewicz (giniu) <gginiu@gmail.com>" is marginal trust
:: El archivo /var/cache/pacman/pkg/zstd-1.1.4-1-x86_64.pkg.tar.xz está dañado (paquete no válido o dañado (firma PGP)).
¿Quiere eliminarlo? [S/n] s
error: blosc: signature from "Andrzej Giniewicz (giniu) <gginiu@gmail.com>" is marginal trust
:: El archivo /var/cache/pacman/pkg/blosc-1.11.3-1-x86_64.pkg.tar.xz está dañado (paquete no válido o dañado (firma PGP)).
¿Quiere eliminarlo? [S/n] s
error: no se pudo realizar la operación (paquete no válido o dañado)
Ocurrieron errores, por lo que no se actualizaron los paquetes
AnyImplementation RequestVery LowLow [thinkfan] add package Closed
100%
Task Description

Could it be possible to add this package :

thinkfan

“A minimalist fan control program. Supports the sysfs hwmon interface and thinkpad_acpi”

License : GPL

to the repo ?

Thanks

AnyImplementation RequestHighHigh [onioncat]: add package Closed
100%
Task Description

Add “onioncat”[0][1] package

[0]:https://www.onioncat.org/ [1]:https://www.onioncat.org/download/ https://www.cypherpunk.at/ocat/download/Source/current/

AnyImplementation RequestHighHigh [xen] add Xen 4.8.x split packages Closed
100%
Task Description

Add Xen 4.8.x split packages (”xen” and “xen-docs”).

AnySecurity IssueVery HighCritical [dillo] enable IPv6, SSL/TLS and threaded DNS support Closed
100%
Task Description

Please move dillo to blacklist. Please enable IPv6, SSL/TLS and threaded DNS support.

1- Arch PKGBUILD problems:

 a- not obtain source via https
 b- not compiled with support --enable-ipv6 --enable-threaded-dns --enable-ssl 

My correction is committed in NAB-packages-community

AnySecurity IssueHighHigh [busybox] CVE-2017-16544: autocompletion vulnerability Closed
100%
AnyFeature RequestVery HighHigh [linux-libre-*] add missing installed kernel configurat ...Closed
100%
AnyImplementation RequestVery LowLow [mat] add package  Closed
100%
AnyBug ReportHighHigh [gnome-disk-utility] error while loading shared librari ...Closed
100%
AnyFeature RequestMediumMedium [gdm] needs OpenRC init script Closed
100%
AnyImplementation RequestVery LowLow [mednaffe] add package Closed
100%
AnyBug ReportHighHigh [filesystem] remove /etc/crypttab file Closed
100%
AnyFeature RequestMediumMedium [openconnect] needs OpenRC init scripts  Closed
100%
AnyBug ReportMediumMedium [wine] doesn't allow sound. + all wine versions =2.7 Closed
100%
AnyDrop RequestLowLow [wine*] remove unstable and staging packages Closed
100%
AnyImplementation RequestMediumMedium [wine-stable] add package Closed
100%
AnyPrivacy IssueVery HighCritical [libreoffice*] contains Google API keys Closed
100%
AnyFreedom IssueVery HighCritical  [aarch64-linux-gnu-linux-api-headers] compiles using b ...Closed
100%
AnyBug ReportLowHigh [php-fpm] service fails to start Closed
100%
AnyUpdate RequestMediumMedium [youtube-viewer] update request to v3.7.9 Closed
100%
AnySecurity IssueVery HighCritical [linux-libre-lts*] Meltdown & Spectre Vulnerability Closed
100%
AnyBug ReportMediumLow firejail: mpv.profile fails to work  Closed
100%
AnySecurity IssueVery HighCritical [libressl] add package as OpenSSL replacement and defau ...Closed
100%
AnyFeature RequestHighHigh [apache] rebuild package against libressl Closed
100%
AnyFeature RequestHighHigh [bigloo] rebuild package against libressl Closed
100%
AnyFeature RequestHighHigh [bind] rebuild package against libressl Closed
100%
AnyFeature RequestHighHigh [bind-tools] rebuild package against libressl Closed
100%
AnyFeature RequestHighHigh [coreutils] rebuild package against libressl Closed
100%
AnyFeature RequestHighHigh [curl] rebuild package against libressl Closed
100%
AnyFeature RequestHighHigh [efitools] rebuild package against libressl Closed
100%
Showing tasks 501 - 550 of 1517 Page 11 of 31

Available keyboard shortcuts

Tasklist

Task Details

Task Editing