Packages

This package contains vague terminology “Open Source”:

community/ttf-overpass 2.1-2
    An open source font family inspired by Highway Gothic esp. suited for signs, lettering and web sites

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

A free software font family inspired by Highway Gothic esp. suited for signs, lettering and web sites

$ pacman -Si tuntox
Repository : community
Name : tuntox
Version : 0.0.6-3
Description : Tunnel TCP connections over the Tox protocol
Architecture : x86_64
URL : https://github.com/gjedeer/tuntox Licenses : GPL3
Groups : None
Provides : None
Depends On : toxcore
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 20.63 KiB
Installed Size : 63.00 KiB
Packager : Jiachen Yang farseerfc@gmail.com Build Date : Fri 21 Apr 2017 01:19:36 PM -03
Validated By : MD5 Sum SHA-256 Sum Signature

$ pacman -Ql tuntox
tuntox /usr/
tuntox /usr/bin/
tuntox /usr/bin/tokssh
tuntox /usr/bin/tuntox
tuntox /usr/lib/
tuntox /usr/lib/systemd/
tuntox /usr/lib/systemd/system/
tuntox /usr/lib/systemd/system/tuntox.service

Description:

Tuxcards is seemingly published under some GPL license, on the splash screen I did not see which one.

The splash screen claims it is Donationware, which is bringing confusion.

Picture: https://gnu.support/images/issues/2018-06-17-21:35:41.png

Reference: https://en.wikipedia.org/wiki/Donationware

So either the splash screen shall be removed, as it is donationware, or author contacted, or package removed as it is unclear if it is free software or donationware. Free software can be sold, and if it is sold, then such software shall not ask for donations again in my opinion.

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si uboot-tools
Repository      : community
Name            : uboot-tools
Version         : 2017.03-2
Description     : U-Boot bootloader utility tools
Architecture    : x86_64
URL             : http://www.denx.de/wiki/U-Boot/WebHome
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : openssl
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 100.32 KiB
Installed Size  : 379.00 KiB
Packager        : Jelle van der Waa <jelle@archlinux.org>
Build Date      : Mon 13 Mar 2017 03:50:20 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

When I try to mount an ISO file or IMG file (with right-click, “open with disk image mounter” on XFCE4) it fails, the following error message appears :

GDBus.Error.org.freedesktop.UDisks2.Error.Failed: Error opening /dev/loop-control: No such file or directory (udisks-error-quark, 0)

Thanks for your help

Description:

• needs OpenRC init script and contains systemd file

Additional info:

• umurmur 0.2.16_a-6

umurmur /usr/lib/systemd/system/umurmur.service

Steps to reproduce:

• none

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si unar
Repository      : extra
Name            : unar
Version         : 1.10.1-4
Description     : An Objective-C application for uncompressing archive files
Architecture    : x86_64
URL             : https://unarchiver.c3.cx/
Licenses        : LGPL2.1
Groups          : None
Provides        : unarchiver  unrar
Depends On      : gnustep-base  openssl  bzip2  icu=59.1  gcc-libs  zlib  wavpack
Optional Deps   : None
Conflicts With  : unarchiver  unrar
Replaces        : unarchiver  unrar
Download Size   : 1032.70 KiB
Installed Size  : 4441.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Tue 09 May 2017 10:33:59 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/

[Critical] https://security-tracker.debian.org/tracker/CVE-2019-18934

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si unbound
Repository      : community
Name            : unbound
Version         : 1.6.5-1.hyperbola2
Description     : Validating, recursive, and caching DNS resolver, with OpenRC support
Architecture    : x86_64
URL             : https://unbound.net/
Licenses        : custom:BSD
Groups          : None
Provides        : None
Depends On      : openssl  ldns  libevent  dnssec-anchors
Optional Deps   : expat: unbound-anchor
Conflicts With  : None
Replaces        : None
Download Size   : 573.86 KiB
Installed Size  : 2467.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Tue 05 Sep 2017 09:49:52 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

This package contains vague terminology “Open Source”:

extra/unixodbc 2.3.4-2
    ODBC is an open specification for providing application developers with a predictable API with which to access Data Sources

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

ODBC is a free specification for providing application developers with a predictable API with which to access Data Sources

Description:

• needs OpenRC init script and contains systemd files

Additional info:

• unrealircd 4.0.11-2

unrealircd /usr/lib/systemd/system/unrealircd.service
unrealircd /usr/lib/tmpfiles.d/unrealircd.conf

Steps to reproduce:

• none

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si unrealircd
Repository      : community
Name            : unrealircd
Version         : 4.0.11-2
Description     : Open Source IRC Server
Architecture    : x86_64
URL             : http://unrealircd.com
Licenses        : GPL2
Groups          : None
Provides        : ircd
Depends On      : openssl  curl  c-ares  tre  pcre2
Optional Deps   : None
Conflicts With  : ircd
Replaces        : None
Download Size   : 697.57 KiB
Installed Size  : 3111.00 KiB
Packager        : Sergej Pupykin <pupykin.s+arch@gmail.com>
Build Date      : Fri 17 Feb 2017 03:41:55 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

This package contains vague terminology “Open Source”:

community/unrealircd 4.0.11-2
    Open Source IRC Server

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

Free Software IRC Server

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si unshield
Repository      : community
Name            : unshield
Version         : 1.3-2
Description     : Extracts CAB files from InstallShield installers
Architecture    : x86_64
URL             : https://github.com/twogood/unshield
Licenses        : custom
Groups          : None
Provides        : None
Depends On      : zlib  openssl
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 24.25 KiB
Installed Size  : 58.00 KiB
Packager        : Jelle van der Waa <jelle@archlinux.org>
Build Date      : Mon 13 Feb 2017 05:34:05 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Description:

community/usb_modeswitch 2.5.0-1
     Activating switchable USB devices on Linux.

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

$ pacman -Si usbmuxd
Repository : extra
Name : usbmuxd
Version : 1.1.0-2
Description : USB Multiplex Daemon
Architecture : x86_64
URL : http://marcansoft.com/blog/iphonelinux/usbmuxd/ Licenses : GPL2 GPL3
Groups : None
Provides : None
Depends On : libimobiledevice
Optional Deps : None
Conflicts With : None
Replaces : None
Download Size : 28.93 KiB
Installed Size : 70.00 KiB
Packager : Jan de Groot jgc@archlinux.org Build Date : Tue 03 Mar 2015 06:35:18 AM -02
Validated By : MD5 Sum SHA-256 Sum Signature

$ pacman -Ql usbmuxd
usbmuxd /usr/
usbmuxd /usr/bin/
usbmuxd /usr/bin/usbmuxd
usbmuxd /usr/lib/
usbmuxd /usr/lib/systemd/
usbmuxd /usr/lib/systemd/system/
usbmuxd /usr/lib/systemd/system/usbmuxd.service
usbmuxd /usr/lib/udev/
usbmuxd /usr/lib/udev/rules.d/
usbmuxd /usr/lib/udev/rules.d/39-usbmuxd.rules
usbmuxd /usr/share/
usbmuxd /usr/share/man/
usbmuxd /usr/share/man/man1/
usbmuxd /usr/share/man/man1/usbmuxd.1.gz

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Description:

lsusb does not resolve device names from /var/lib/usbutils/usb.ids

The same thing as described here: https://unix.stackexchange.com/questions/220759/lsusb-doesnt-list-device-names

Description:

community/ussp-push 0.11-6
     OBEX object pusher for Linux

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Description:
In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command (within Bash) by a different user, as demonstrated by logging in as root and entering umount followed by a tab character for autocompletion.

https://blog.grimm-co.com/post/malicious-command-execution-via-bash-completion-cve-2018-7738/