Packages

The daemon is not working and the following error-message occurs when trying to starting up:

cdemu: Daemon: D-Bus: failed to get proxy for 'org.freedesktop.DBus' on session bus: Cannot autolaunch D-Bus without X11 $DISPLAY!
Daemon initialization and start failed!

Cataclysm-DDA contains a problematic license[0][1][2] for software.
Uses “Creative Commons Attribution-ShareAlike 3.0 Unported License”.

$ pacman -Si cataclysm-dda
Repository : community
Name : cataclysm-dda
Version : 0.C-3
Description : A post-apocalyptic roguelike.
Architecture : x86_64
URL : http://en.cataclysmdda.com/ Licenses : CCPL:by-sa
Groups : None
Provides : None
Depends On : ncurses lua
Optional Deps : sdl2_image: for tiles

                sdl2_ttf: for tiles
                freetype2: for tiles
                sdl2_mixer: for tiles

Conflicts With : None
Replaces : None
Download Size : 19.33 MiB
Installed Size : 53.32 MiB
Packager : Felix Yan felixonmars@archlinux.org Build Date : Mon 07 Dec 2015 03:14:02 AM -03
Validated By : MD5 Sum SHA-256 Sum Signature

[0]:https://github.com/CleverRaven/Cataclysm-DDA/blob/master/LICENSE.txt [1]:https://creativecommons.org/faq/#can-i-apply-a-creative-commons-license-to-software [2]:https://www.gnu.org/licenses/license-list.html#ccbysa

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Prior version 0.0.25 and below are outdated.

Since version 0.100 and later, there are some changes being redesigned from scratch, added three new weights (including extra bold, light and thin) but not italic or oblique styles, AppStream metadata translations from contributors, and more.

See the version history releases for more details: https://gitlab.gnome.org/GNOME/cantarell-fonts/raw/master/NEWS

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

This package contains vague terminology “Open Source”:

community/bzrtp 1.0.5-1
    Opensource implementation of ZRTP keys exchange protocol

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

Free software implementation of ZRTP keys exchange protocol

Description:

• replace deprecated GNU Bazaar to Brezy for Canis Major

Additional info:

• bzr 2.7.0-2
• GNU Bazaar will be unmaintained (for now, there are only bug fixes)
• GNU Bazaar only supports Python 2.
• Python 2.7 is the end of the Python 2 line of development. [0]
• There never will be an official Python 2.8 release.
• Or use Tauthon (fork of Python 2.7) as dependency.

Note: It needs a provide: bazaar and brezy

Steps to reproduce:

• broken package

Description:

• needs OpenRC init script (bzr serve), like [git] (git-daemon) and [subversion] (svnserve)

Additional info:

• bzr 2.7.0-2

Note: needs a provide: bazaar

Steps to reproduce:

• none

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Package: https://www.hyperbola.info/packages/community/x86_64/busybox/

https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/

In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.

Patch: https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8

]$ pacman -Si btrfs-progs
Repository : core
Name : btrfs-progs
Version : 4.10.2-1
Description : Btrfs filesystem utilities
Architecture : x86_64
URL : https://btrfs.wiki.kernel.org Licenses : GPL2
Groups : None
Provides : btrfs-progs-unstable
Depends On : glibc libutil-linux e2fsprogs lzo zlib
Optional Deps : None
Conflicts With : btrfs-progs-unstable
Replaces : btrfs-progs-unstable
Download Size : 603.00 KiB
Installed Size : 4022.00 KiB
Packager : Sébastien Luttringer seblu@seblu.net Build Date : Fri 31 Mar 2017 08:20:32 PM -03
Validated By : MD5 Sum SHA-256 Sum Signature

$ pacman -Ql btrfs-progs
btrfs-progs /usr/
btrfs-progs /usr/bin/
btrfs-progs /usr/bin/btrfs
btrfs-progs /usr/bin/btrfs-convert
btrfs-progs /usr/bin/btrfs-debug-tree
btrfs-progs /usr/bin/btrfs-find-root
btrfs-progs /usr/bin/btrfs-image
btrfs-progs /usr/bin/btrfs-map-logical
btrfs-progs /usr/bin/btrfs-select-super
btrfs-progs /usr/bin/btrfs-zero-log
btrfs-progs /usr/bin/btrfsck
btrfs-progs /usr/bin/btrfstune
btrfs-progs /usr/bin/fsck.btrfs
btrfs-progs /usr/bin/mkfs.btrfs
btrfs-progs /usr/include/
btrfs-progs /usr/include/btrfs/
btrfs-progs /usr/include/btrfs/btrfs-list.h
btrfs-progs /usr/include/btrfs/btrfsck.h
btrfs-progs /usr/include/btrfs/crc32c.h
btrfs-progs /usr/include/btrfs/ctree.h
btrfs-progs /usr/include/btrfs/extent-cache.h
btrfs-progs /usr/include/btrfs/extent_io.h
btrfs-progs /usr/include/btrfs/ioctl.h
btrfs-progs /usr/include/btrfs/kerncompat.h
btrfs-progs /usr/include/btrfs/list.h
btrfs-progs /usr/include/btrfs/radix-tree.h
btrfs-progs /usr/include/btrfs/rbtree.h
btrfs-progs /usr/include/btrfs/send-stream.h
btrfs-progs /usr/include/btrfs/send-utils.h
btrfs-progs /usr/include/btrfs/send.h
btrfs-progs /usr/include/btrfs/sizes.h
btrfs-progs /usr/include/btrfs/version.h
btrfs-progs /usr/lib/
btrfs-progs /usr/lib/initcpio/
btrfs-progs /usr/lib/initcpio/hooks/
btrfs-progs /usr/lib/initcpio/hooks/btrfs
btrfs-progs /usr/lib/initcpio/install/
btrfs-progs /usr/lib/initcpio/install/btrfs
btrfs-progs /usr/lib/libbtrfs.so
btrfs-progs /usr/lib/libbtrfs.so.0
btrfs-progs /usr/lib/libbtrfs.so.0.1
btrfs-progs /usr/lib/systemd/
btrfs-progs /usr/lib/systemd/system/
btrfs-progs /usr/lib/systemd/system/btrfs-scrub@.service
btrfs-progs /usr/lib/systemd/system/btrfs-scrub@.timer
btrfs-progs /usr/lib/udev/
btrfs-progs /usr/lib/udev/rules.d/
btrfs-progs /usr/lib/udev/rules.d/64-btrfs-dm.rules
btrfs-progs /usr/share/
btrfs-progs /usr/share/bash-completion/
btrfs-progs /usr/share/bash-completion/completions/
btrfs-progs /usr/share/bash-completion/completions/btrfs
btrfs-progs /usr/share/man/
btrfs-progs /usr/share/man/man5/
btrfs-progs /usr/share/man/man5/btrfs.5.gz
btrfs-progs /usr/share/man/man8/
btrfs-progs /usr/share/man/man8/btrfs-balance.8.gz
btrfs-progs /usr/share/man/man8/btrfs-check.8.gz
btrfs-progs /usr/share/man/man8/btrfs-convert.8.gz
btrfs-progs /usr/share/man/man8/btrfs-debug-tree.8.gz
btrfs-progs /usr/share/man/man8/btrfs-device.8.gz
btrfs-progs /usr/share/man/man8/btrfs-filesystem.8.gz
btrfs-progs /usr/share/man/man8/btrfs-find-root.8.gz
btrfs-progs /usr/share/man/man8/btrfs-image.8.gz
btrfs-progs /usr/share/man/man8/btrfs-inspect-internal.8.gz
btrfs-progs /usr/share/man/man8/btrfs-map-logical.8.gz
btrfs-progs /usr/share/man/man8/btrfs-property.8.gz
btrfs-progs /usr/share/man/man8/btrfs-qgroup.8.gz
btrfs-progs /usr/share/man/man8/btrfs-quota.8.gz
btrfs-progs /usr/share/man/man8/btrfs-receive.8.gz
btrfs-progs /usr/share/man/man8/btrfs-replace.8.gz
btrfs-progs /usr/share/man/man8/btrfs-rescue.8.gz
btrfs-progs /usr/share/man/man8/btrfs-restore.8.gz
btrfs-progs /usr/share/man/man8/btrfs-scrub.8.gz
btrfs-progs /usr/share/man/man8/btrfs-select-super.8.gz
btrfs-progs /usr/share/man/man8/btrfs-send.8.gz
btrfs-progs /usr/share/man/man8/btrfs-show-super.8.gz
btrfs-progs /usr/share/man/man8/btrfs-subvolume.8.gz
btrfs-progs /usr/share/man/man8/btrfs-zero-log.8.gz
btrfs-progs /usr/share/man/man8/btrfs.8.gz
btrfs-progs /usr/share/man/man8/btrfsck.8.gz
btrfs-progs /usr/share/man/man8/btrfstune.8.gz
btrfs-progs /usr/share/man/man8/fsck.btrfs.8.gz
btrfs-progs /usr/share/man/man8/mkfs.btrfs.8.gz

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

community/btchip-udev 2-1
*    Udev rules to connect BTChip wallet to your linux box

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Description is referring to operating system, and not to the kernel itself (Linux). It shall be amended.

community/bsd-games 2.17-17
     Linux port of the collection of BSD command line games

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Description is referring to operating system, and not to the kernel itself (Linux). It shall be amended.

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Description:

The description of the package need to be changed to accommodate:
https://www.gnu.org/philosophy/words-to-avoid.html

To refer to published works as “assets”, or “digital assets”, is even worse than calling them “content” — it presumes they have no value to society except commercial value.

extra/breeze 5.9.5-1 (plasma)
    Artwork, styles and assets for the Breeze visual style for the Plasma Desktop

# Bug

(brasero:1402): WARNING : Could not establish a connection to Tracker: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.Tracker1 was not provided by any .service files
Gtk-Message: GtkDialog mapped without a transient parent. This is discouraged.

# Package information

$ sudo pacman -Si brasero
[sudo] password for heckyel: 
Repositorio               : extra
Nombre                    : brasero
Versión                   : 3.12.1-2.hyperbola1
Descripción               : CD/DVD mastering tool
Arquitectura              : x86_64
URL                       : https://wiki.gnome.org/Apps/Brasero
Licencias                 : GPL
Grupos                    : gnome-extra
Provee                    : Nada
Depende de                : gtk3  gst-plugins-good  totem-plparser  cdrkit  cdrdao
                            shared-mime-info  libcanberra  dvd+rw-tools  dconf  libsm
                            libtracker-sparql  libnotify  gvfs
Dependencias opcionales   : libburn: alternative back-end
                            libisofs: libburn back-end
                            dvdauthor: video project
                            vcdimager: video project
En conflicto con          : Nada
Remplaza a                : nautilus-cd-burner
Tamaño de la descarga     : 2,58 MiB
Tamaño de la instalación  : 14,46 MiB
Encargado                 : Scott Adams <haricot@hyperbola.info>
Fecha de creación         : lun 29 may 2017 00:24:19 -05
Validado por              : Suma MD5  Suma SHA-256  Firma

# File attached
pacman -Ql brasero > brasero.txt

Remove unstable “botan” and rename “botan1.10” to “botan-old-stable”[0]

$ pacman -Si botan
Repository      : community
Name            : botan
Version         : 2.1.0-1
Description     : Crypto library written in C++
Architecture    : x86_64
URL             : https://botan.randombit.net/
Licenses        : BSD
Groups          : None
Provides        : None
Depends On      : gcc-libs  sh
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 1816.44 KiB
Installed Size  : 7040.00 KiB
Packager        : Alexander Rødseth <rodseth@gmail.com>
Build Date      : Fri 21 Apr 2017 09:19:27 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

$ pacman -Si botan1.10
Repository      : community
Name            : botan1.10
Version         : 1.10.13-1
Description     : Crypto library written in C++ - old stable branch
Architecture    : x86_64
URL             : http://botan.randombit.net/
Licenses        : BSD
Groups          : None
Provides        : None
Depends On      : gcc-libs  sh
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 1014.98 KiB
Installed Size  : 3734.00 KiB
Packager        : Felix Yan <felixonmars@archlinux.org>
Build Date      : Fri 06 Jan 2017 06:48:59 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

[0]:https://botan.randombit.net/

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si borg
Repository      : community
Name            : borg
Version         : 1.0.10-2
Description     : Deduplicating backup program with compression and authenticated encryption
Architecture    : x86_64
URL             : https://borgbackup.github.io/
Licenses        : BSD
Groups          : None
Provides        : borgbackup
Depends On      : acl  lz4  openssl  python-msgpack  python-setuptools  xz
Optional Deps   : openssh: repositories on remote hosts
                  python-llfuse: mounting backups as a FUSE file system
Conflicts With  : None
Replaces        : borgbackup
Download Size   : 476.14 KiB
Installed Size  : 2444.00 KiB
Packager        : Lukas Fleischer <lfleischer@archlinux.org>
Build Date      : Wed 01 Mar 2017 02:20:10 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si boinctui
Repository      : community
Name            : boinctui
Version         : 2.4.4-2
Description     : Curses based fullscreen BOINC manager
Architecture    : x86_64
URL             : https://sourceforge.net/projects/boinctui/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : expat  gcc-libs  openssl
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 80.99 KiB
Installed Size  : 225.00 KiB
Packager        : Felix Yan <felixonmars@archlinux.org>
Build Date      : Tue 14 Feb 2017 03:06:12 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Description:

extra/bogofilter 1.2.4-2.hyperbola2
    A fast Bayesian spam filtering tool, without noncommercial files

That shall be clarified better in description.

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Commercial

Please don’t use “commercial” as a synonym for “nonfree.” That confuses two entirely different issues.

This package contains vague terminology “Commercial”:

extra/bogofilter 1.2.4-2.hyperbola2
    A fast Bayesian spam filtering tool, without noncommercial files

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Commercial”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Commercial”.

eg.

A fast Bayesian spam filtering tool, without nonfree files