July 2017 - Aur-general - lists.archlinux.org

[aur-general] Suggestion to add a pinned comment to PKGBUILDs of high risk vulnerable software
by Ralf Mardorf 05 Jul '17

05 Jul '17

Hi, I understand that users should decide on their own, if they wish to install high risk vulnerable software, so I'm not writing because a deletion request was rejected. I want to make a suggestion. A pinned comment could warn about the high security risk and assuming that upstream of the original software shouldn't fix vulnerabilities, at least recommend to ask upstream of software that requires such software as a dependency, to get rid of this dependency, instead of installing the vulnerable software. I'm not sure if everybody is aware of the risks a package like https://aur.archlinux.org/pkgbase/webkitgtk/ https://aur.archlinux.org/packages/webkitgtk2/ does cause. When providing such a PKGBUILD, is speaking anything against a short pinned comment? Regards, Ralf -- Vote for apulse! echo $(w3m https://aur.archlinux.org/packages/apulse |grep 'Votes: ') Votes: 81 Updated: Sun Jul 2 09:03:52 CEST 2017

5 9

[aur-general] Removal of two packages of mine.
by Jannik Hauptvogel 03 Jul '17

03 Jul '17

Hello Arch fellas, I just got into submitting packages to the AUR and made a mistake, two to be exact. I want to have the following two packages removed: https://aur.archlinux.org/packages/tictactoe-gtk/ https://aur.archlinux.org/packages/connect-four-gtk/ How can i accomplish that? Kind regards, Jannik Hauptvogel.

2 1

[aur-general] gopro package check
by mickael foucaux 02 Jul '17

02 Jul '17

Hi ! I just realized my first PKGBUILD for gopro tool which is available here for now: https://github.com/mickro/gopro-tools-arch-package Gopro tools are made by https://github.com/KonradIT. That gives some useful tools for GoPro post production. And I think that can be usefull for many. I'm asking here for a PKGBUILD review, as suggested on https://wiki.archlinux.org/index.php/Arch_User_Repository#Submitting_packag… . cheers, Mickael

2 4