alpine issueshttps://gitlab.alpinelinux.org/groups/alpine/-/issues2021-11-15T22:32:11Zhttps://gitlab.alpinelinux.org/alpine/aports/-/issues/12430xf86-video-sis does not work2021-11-15T22:32:11ZVolker Voßkämperxf86-video-sis does not workI have a very old manufacturing machine control system running SuSe Linux 7.3.
I successfully installed Alpine Linux 3.13 on a spare machine but I could not get the video driver running. Only Vesa with 640x480 is working.
## original s...I have a very old manufacturing machine control system running SuSe Linux 7.3.
I successfully installed Alpine Linux 3.13 on a spare machine but I could not get the video driver running. Only Vesa with 640x480 is working.
## original system
running:
- SuSE Linux 7.3 (i386)
- Kernel: 2.4.10-4GB
- xmodules-4.1.0-45:
`/usr/X11R6/lib/modules/drivers/sis_drv.o`
## tried Alpine versions:
- Alpine 3.8
- sis 0.10.9-r1
- Alpine 3.13
- sis 0.12.0-r0
## Hardware
- Motherboard: Rocky - 058HV - V3.0
- Processor: AMD K6 / 450 MHz / 32 Bit i586
- Video: SIS 5597
```bash
$ lspci -vv
00:00.0 Host bridge: Silicon Integrated Systems [SiS] 5597 [SiS5582] (rev 10)
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort+ >SERR- <PERR- INTx-
Latency: 255
00:01.0 ISA bridge: Silicon Integrated Systems [SiS] SiS85C503/5513 (LPC Bridge) (rev 01)
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
00:01.1 IDE interface: Silicon Integrated Systems [SiS] 5513 IDE Controller (rev d0) (prog-if 8a [Master SecP PriP])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32
Interrupt: pin A routed to IRQ 11
Region 0: I/O ports at 01f0 [size=8]
Region 1: I/O ports at 03f4
Region 2: I/O ports at 0170 [size=8]
Region 3: I/O ports at 0374
Region 4: I/O ports at 4000 [size=16]
Kernel driver in use: pata_sis
00:01.2 USB controller: Silicon Integrated Systems [SiS] USB 1.1 Controller (rev 10) (prog-if 10 [OHCI])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR+ INTx-
Latency: 32, Cache Line Size: 32 bytes
Interrupt: pin A routed to IRQ 11
Region 0: Memory at d1410000 (32-bit, non-prefetchable) [size=4K]
Kernel driver in use: ohci-pci
00:14.0 VGA compatible controller: Silicon Integrated Systems [SiS] 5597/5598/6326 VGA (rev 68) (prog-if 00 [VGA controller])
Subsystem: Silicon Integrated Systems [SiS] 5597/5598/6326 VGA
Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Interrupt: pin A routed to IRQ 0
Region 0: Memory at d1000000 (32-bit, prefetchable) [size=4M]
Region 1: Memory at d1400000 (32-bit, non-prefetchable) [size=64K]
Region 2: I/O ports at e400 [size=128]
[virtual] Expansion ROM at 08000000 [disabled] [size=32K]
```
## Alpine Xorg.0.log:
```
[ 14271.979] (WW) Failed to open protocol names file lib/xorg/protocol.txt
[ 14271.986]
X.Org X Server 1.20.10
X Protocol Version 11, Revision 0
[ 14271.987] Build Operating System: Linux Alpine Linux
[ 14271.988] Current Operating System: Linux armastrg 4.14.167-0-vanilla #1-Alpine SMP Thu Jan 23 10:13:36 UTC 2020 i586
[ 14271.988] Kernel command line: BOOT_IMAGE=vmlinuz-vanilla root=/dev/vg0/lv_root modules=sd-mod,usb-storage,ext4 nomodeset quiet rootfstype=ext4 initrd=initramfs-vanilla
[ 14271.990] Build Date: 02 December 2020 12:20:39AM
[ 14271.990]
[ 14271.991] Current version of pixman: 0.40.0
[ 14271.991] Before reporting problems, check http://wiki.x.org
to make sure that you have the latest version.
[ 14271.992] Markers: (--) probed, (**) from config file, (==) default setting,
(++) from command line, (!!) notice, (II) informational,
(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
[ 14271.995] (==) Log file: "/var/log/Xorg.0.log", Time: Sun Feb 14 17:18:50 2021
[ 14271.995] (II) Module ABI versions:
[ 14271.995] X.Org ANSI C Emulation: 0.4
[ 14271.995] X.Org Video Driver: 24.1
[ 14271.996] X.Org XInput driver : 24.1
[ 14271.996] X.Org Server Extension : 10.0
[ 14272.020] (--) PCI:*(0@0:20:0) 1039:0200:1039:0200 rev 104, Mem @ 0xd1000000/4194304, 0xd1400000/65536, I/O @ 0x0000e400/128, BIOS @ 0x????????/131072
[ 14272.027] List of video drivers:
[ 14272.027] sis
[ 14272.028] modesetting
[ 14272.028] (II) LoadModule: "sis"
[ 14272.030] (II) Loading /usr/lib/xorg/modules/drivers/sis_drv.so
[ 14272.037] (II) Module sis: vendor="X.Org Foundation"
[ 14272.037] compiled for 1.20.10, module version = 0.12.0
[ 14272.037] Module class: X.Org Video Driver
[ 14272.038] ABI class: X.Org Video Driver, version 24.1
[ 14272.038] (II) LoadModule: "modesetting"
[ 14272.040] (II) Loading /usr/lib/xorg/modules/drivers/modesetting_drv.so
[ 14272.056] (II) Module modesetting: vendor="X.Org Foundation"
[ 14272.057] compiled for 1.20.10, module version = 1.20.10
[ 14272.057] Module class: X.Org Video Driver
[ 14272.058] ABI class: X.Org Video Driver, version 24.1
[ 14272.058] (WW) Falling back to old probe method for sis
[ 14272.059] (II) modesetting: Driver for Modesetting Kernel Drivers: kms
[ 14272.072] (++) Using config file: "/root/xorg.conf.new"
[ 14272.073] (==) Using system config directory "/usr/share/X11/xorg.conf.d"
[ 14272.077] (==) ServerLayout "X.org Configured"
[ 14272.078] (**) |-->Screen "Screen0" (0)
[ 14272.079] (**) | |-->Monitor "Monitor0"
[ 14272.086] (**) | |-->Device "Card0"
[ 14272.087] (**) |-->Input Device "Mouse0"
[ 14272.087] (**) |-->Input Device "Keyboard0"
[ 14272.088] (==) Automatically adding devices
[ 14272.088] (==) Automatically enabling devices
[ 14272.088] (==) Automatically adding GPU devices
[ 14272.089] (==) Max clients allowed: 256, resource mask: 0x1fffff
[ 14272.090] (WW) The directory "/usr/share/fonts/TTF" does not exist.
[ 14272.090] Entry deleted from font path.
[ 14272.090] (WW) The directory "/usr/share/fonts/Type1" does not exist.
[ 14272.091] Entry deleted from font path.
[ 14272.091] (WW) The directory "/usr/share/fonts/TTF" does not exist.
[ 14272.092] Entry deleted from font path.
[ 14272.092] (WW) The directory "/usr/share/fonts/Type1" does not exist.
[ 14272.092] Entry deleted from font path.
[ 14272.093] (**) FontPath set to:
/usr/share/fonts/misc,
/usr/share/fonts/100dpi:unscaled,
/usr/share/fonts/75dpi:unscaled,
/usr/share/fonts/misc,
/usr/share/fonts/100dpi:unscaled,
/usr/share/fonts/75dpi:unscaled
[ 14272.093] (**) ModulePath set to "/usr/lib/xorg/modules"
[ 14272.094] (WW) Hotplugging is on, devices using drivers 'kbd', 'mouse' or 'vmmouse' will be disabled.
[ 14272.094] (WW) Disabling Mouse0
[ 14272.094] (WW) Disabling Keyboard0
[ 14272.094] (EE) open /dev/dri/card0: No such file or directory
[ 14272.095] (WW) Falling back to old probe method for modesetting
[ 14272.095] (EE) open /dev/dri/card0: No such file or directory
[ 14272.101]
[ 14272.102]
Xorg detected your mouse at device /dev/input/mice.
Please check your config if the mouse is still not
operational, as by default Xorg tries to autodetect
the protocol.
[ 14272.102]
Your xorg.conf file is /root/xorg.conf.new
[ 14272.103] To test the server, run 'X -config /root/xorg.conf.new'
[ 14272.105] (EE) Server terminated with error (2). Closing log file.
```https://gitlab.alpinelinux.org/alpine/aports/-/issues/12431mblaze should have file as a dependency2021-02-15T19:05:21ZCharlie Stantonmblaze should have file as a dependency[mblaze](https://pkgs.alpinelinux.org/package/edge/community/aarch64/mblaze) should have [file](https://pkgs.alpinelinux.org/package/edge/main/x86_64/file) as a dependency
https://github.com/leahneukirchen/mblaze/blob/master/mcom#L88
I...[mblaze](https://pkgs.alpinelinux.org/package/edge/community/aarch64/mblaze) should have [file](https://pkgs.alpinelinux.org/package/edge/main/x86_64/file) as a dependency
https://github.com/leahneukirchen/mblaze/blob/master/mcom#L88
If this is easy to add I can send a patch as my first contribution to aports :)https://gitlab.alpinelinux.org/alpine/aports/-/issues/12432Missing a monospace font for a telegram-desktop package2022-02-20T21:48:57ZVlad CohenMissing a monospace font for a telegram-desktop packageI use a telegram-desktop package for a docker image based on the "alpine linux". In the last builds of the telegram-desktop package is the package ttf-opensans for a general fonts as a dependency defined, but a font for monospace format...I use a telegram-desktop package for a docker image based on the "alpine linux". In the last builds of the telegram-desktop package is the package ttf-opensans for a general fonts as a dependency defined, but a font for monospace formating is still missing.
You could add ttf-inconsolata as a dependency too:
depends="qt5-qtimageformats ttf-opensans ttf-inconsolata"
The ttf-inconsolata doesn't look as nice as dejavu fonts (mainly smaller than opensans), but it takes only 228 kB of disk space. And it would be a waste to install the entire ttf-dejavu package with 17.85 MB because of a single required monospace font (e.g. /usr/share/fonts/ttf-dejavu/DejaVuSansMono.ttf).https://gitlab.alpinelinux.org/alpine/aports/-/issues/12433rabbitmq-server: chown: unknown user/group @RABBITMQ_USER@:@RABBITMQ_GROUP@2021-02-15T14:04:18ZAlos Papaxristosrabbitmq-server: chown: unknown user/group @RABBITMQ_USER@:@RABBITMQ_GROUP@When enabling the management plugin, there is an error that chown can't find the user/group.
```
# rabbitmq-plugins enable rabbitmq_management
Enabling plugins on node rabbit@tbrabbit:
rabbitmq_management
The following plugins have been...When enabling the management plugin, there is an error that chown can't find the user/group.
```
# rabbitmq-plugins enable rabbitmq_management
Enabling plugins on node rabbit@tbrabbit:
rabbitmq_management
The following plugins have been configured:
rabbitmq_management
rabbitmq_management_agent
rabbitmq_web_dispatch
Applying plugin configuration to rabbit@tbrabbit...
The following plugins have been enabled:
rabbitmq_management
rabbitmq_management_agent
rabbitmq_web_dispatch
started 3 plugins.
chown: unknown user/group @RABBITMQ_USER@:@RABBITMQ_GROUP@
```
Apparently, the shell script `rabbitmq-plugins` at line 40 is trying to chown the erlang cookie, but the variables for user/group are not set properly:
```sh
maybe_fixup_erlang_cookie() {
# rabbitmq/rabbitmq-server-release#85
_rabbitmq_home="$(cd ~rabbitmq && pwd)"
_erlang_cookie="$_rabbitmq_home/.erlang.cookie"
if [ -f "$_erlang_cookie" ]
then
chown @RABBITMQ_USER@:@RABBITMQ_GROUP@ "$_erlang_cookie"
chmod 400 "$_erlang_cookie"
fi
}
```
A quick grep shows the same variables under the following files:
```
# grep -ri '@RABBITMQ_USER@' /usr/sbin
/usr/sbin/rabbitmq-server: chown @RABBITMQ_USER@:@RABBITMQ_GROUP@ "$_erlang_cookie"
/usr/sbin/rabbitmq-plugins: chown @RABBITMQ_USER@:@RABBITMQ_GROUP@ "$_erlang_cookie"
/usr/sbin/rabbitmqctl: chown @RABBITMQ_USER@:@RABBITMQ_GROUP@ "$_erlang_cookie"
```
Thank you.https://gitlab.alpinelinux.org/alpine/aports/-/issues/12434Add ManticoreSearch to Alpine2022-03-22T15:46:08ZZama Nu HinaAdd ManticoreSearch to AlpineHello.
Could you help me add Manticore to Alpine.
Compiling Manticore from source:
https://manual.manticoresearch.com/Installation/Compiling_from_sources
This is a fork of Sphinx that is actively developing.
https://git.alpinelinux.or...Hello.
Could you help me add Manticore to Alpine.
Compiling Manticore from source:
https://manual.manticoresearch.com/Installation/Compiling_from_sources
This is a fork of Sphinx that is actively developing.
https://git.alpinelinux.org/aports/tree/community/sphinx
Thanks for your time.https://gitlab.alpinelinux.org/alpine/aports/-/issues/12435community/neochat: Doesn't start - probably missing dependency2021-02-17T12:28:20ZAlexander Brzoskacommunity/neochat: Doesn't start - probably missing dependency### Issue description
KDE Neochat from the `community` repository doesn't start and crashes with following output:
<pre>
QQmlApplicationEngine failed to load component
qrc:/qml/main.qml:286:9: Type RoomPage unavailable
qrc:/imports/NeoCh...### Issue description
KDE Neochat from the `community` repository doesn't start and crashes with following output:
<pre>
QQmlApplicationEngine failed to load component
qrc:/qml/main.qml:286:9: Type RoomPage unavailable
qrc:/imports/NeoChat/Page/RoomPage.qml:564:13: Type ChatTextInput unavailable
qrc:/imports/NeoChat/Component/ChatTextInput.qml:207:25: Type ImageEditorPage unavailable
qrc:/imports/NeoChat/Page/ImageEditorPage.qml:11:1: module "QtQuick.Dialogs" is not installed
</pre>
### Observed environments
* QEMU Alpine edge install w/ Xorg and Xfce4
* [probably not relevant] postmarketOS edge phosh (on the PinePhone)
### Notes
Installing `qt5-qtquickcontrols` fixes the issue. Since `neochat` already depends on `qt5-qtquickcontrols2` which seems like some alternative version, is it maybe an issue with that package? I know nothing about Qt, just speculating.Bart RibbersBart Ribbershttps://gitlab.alpinelinux.org/alpine/aports/-/issues/12437webkit2gtk: use-after-free may lead to arbitrary code execution via crafted w...2021-02-16T18:35:23ZAlicha CHwebkit2gtk: use-after-free may lead to arbitrary code execution via crafted web content (CVE-2020-13558)* Processing maliciously crafted web content may lead to arbitrary code execution.
* A use after free issue in the AudioSourceProviderGStreamer class was addressed with improved memory management.
* Versions affected: WebKitGTK before 2...* Processing maliciously crafted web content may lead to arbitrary code execution.
* A use after free issue in the AudioSourceProviderGStreamer class was addressed with improved memory management.
* Versions affected: WebKitGTK before 2.30.5 and WPE WebKit before 2.30.5.
#### Reference:
https://webkitgtk.org/security/WSA-2021-0001.html
### Affected branches:
* [x] master
* [x] 3.13-stableRasmus Thomsenoss@cogitri.devRasmus Thomsenoss@cogitri.devhttps://gitlab.alpinelinux.org/alpine/aports/-/issues/12438wireless-regdb fails when creating ISO image2023-02-07T17:52:48Zfreshwireless-regdb fails when creating ISO imageHello, I was doing tests with the image creation scripts of the aports repository, but the creation of the iso images failed, since the image that the mkimage.sh script generated was an ISO image without the kernel components, and the pa...Hello, I was doing tests with the image creation scripts of the aports repository, but the creation of the iso images failed, since the image that the mkimage.sh script generated was an ISO image without the kernel components, and the packages For the architecture that I am using (x86_64) they were compiled, so after verifying I found that the wireless-regdb was causing an error, I eliminated it and it worked, I would like to know what wireless-regdb is for and how I can make that functionality of the kernel, thanks![Screenshot_from_2021-02-16_11-56-14](/uploads/14905696b1b757cf37d8616183ec52db/Screenshot_from_2021-02-16_11-56-14.png)https://gitlab.alpinelinux.org/alpine/aports/-/issues/12439openrc: please add ability to skip modloop verification2021-02-18T07:34:11ZAriadne Conillariadne@ariadne.spaceopenrc: please add ability to skip modloop verificationI am installing Alpine on some machines over IPMI.
The IPMI latency (~50msec to fetch every CD sector) makes the modloop verification step take forever, and is largely pointless in this case.
It would be nice to have a boot commandline...I am installing Alpine on some machines over IPMI.
The IPMI latency (~50msec to fetch every CD sector) makes the modloop verification step take forever, and is largely pointless in this case.
It would be nice to have a boot commandline parameter to allow us to bypass this verification step.https://gitlab.alpinelinux.org/alpine/aports/-/issues/12440testing/signal-cli 0.8.0 fails on aarch64 on the builder2022-02-19T21:56:29ZBart Ribberstesting/signal-cli 0.8.0 fails on aarch64 on the builderhttps://build.alpinelinux.org/buildlogs/build-edge-aarch64/testing/signal-cli/signal-cli-0.8.0-r0.log
CC @Leo you merged this in !18265https://build.alpinelinux.org/buildlogs/build-edge-aarch64/testing/signal-cli/signal-cli-0.8.0-r0.log
CC @Leo you merged this in !18265https://gitlab.alpinelinux.org/alpine/aports/-/issues/12442main/chrony: please add NTS support2021-03-14T18:27:07ZMY-Rmain/chrony: please add NTS supportWould be nice to have NTS support in chrony. Adding ``gnutls-dev`` to ``makedepends`` should be enough I guess. \
Here are some references: \
https://fedoraproject.org/wiki/Changes/NetworkTimeSecurity \
https://tools.ietf.org/html/rfc8915Would be nice to have NTS support in chrony. Adding ``gnutls-dev`` to ``makedepends`` should be enough I guess. \
Here are some references: \
https://fedoraproject.org/wiki/Changes/NetworkTimeSecurity \
https://tools.ietf.org/html/rfc8915https://gitlab.alpinelinux.org/alpine/aports/-/issues/12443main/postfix: missing lmdb support in 3.13 & edge2021-02-18T11:55:47ZSimon Rupfmain/postfix: missing lmdb support in 3.13 & edgeAs per the [alpine 3.13 release notes](https://wiki.alpinelinux.org/wiki/Release_Notes_for_Alpine_3.13.0#Deprecation_of_Berkeley_DB_.28BDB.29), I tried switching my postfix instance to use lmdb instead of (berkeley) hash/btree type maps ...As per the [alpine 3.13 release notes](https://wiki.alpinelinux.org/wiki/Release_Notes_for_Alpine_3.13.0#Deprecation_of_Berkeley_DB_.28BDB.29), I tried switching my postfix instance to use lmdb instead of (berkeley) hash/btree type maps for my aliases and TLS session cache. Unfortunately, postfix and the newaliases commands tell me that:
```
[from the log output of the postfix instance upon startup:]
Feb 18 07:00:32 carolyn postfix/smtpd[89]: error: unsupported dictionary type: lmdb
Feb 18 07:00:32 carolyn postfix/tlsmgr[91]: error: unsupported dictionary type: lmdb
Feb 18 07:00:32 carolyn postfix/tlsmgr[91]: error: unsupported dictionary type: lmdb
Feb 18 07:00:32 carolyn postfix/tlsmgr[91]: warning: lmdb:/var/lib/postfix/smtpd_scache is unavailable. unsupported dictionary type: lmdb
Feb 18 07:00:32 carolyn postfix/tlsmgr[91]: warning: lmdb:/var/lib/postfix/smtp_scache is unavailable. unsupported dictionary type: lmdb
[when running newaliases -oA/etc/postfix/aliases:]
postalias: fatal: unsupported dictionary type: lmdb. Is the postfix-lmdb package installed?
```
You can find my setup in this [Dockerfile](https://github.com/simonrupf/docker-postfix/blob/master/Dockerfile) and I can provide full main.cf and master.cf upon request, the relevant lines from main.cf, triggering the above messages are (my other maps are living in a MariaDB):
```
smtpd_tls_session_cache_database = lmdb:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = lmdb:${data_directory}/smtp_scache
alias_maps = lmdb:/etc/postfix/aliases
alias_database = lmdb:/etc/postfix/aliases
```
As per the newaliases error, I did try to install the postfix-lmdb package, but that is no longer produced in 3.13/edge, maybe due to the change in cefc8415715c247a8d424a46a05ccb9be8ca091d ? I am not familiar enough with the postfix packaging, but assume the lmdb library still gets built, but is not included in the main postfix package.https://gitlab.alpinelinux.org/alpine/aports/-/issues/12444testing/traefik-2.4.3: 2 test failures with go 1.162021-03-08T21:22:20ZKevin Daudttesting/traefik-2.4.3: 2 test failures with go 1.16I've reported it upstream: https://github.com/traefik/traefik/issues/7907
On most arches, traefik-2.4.3 was built with go 1.15, but because aarch64 was lagging, it was built with go 1.16 which was pushed in the mean time.
```
--- FAIL:...I've reported it upstream: https://github.com/traefik/traefik/issues/7907
On most arches, traefik-2.4.3 was built with go 1.15, but because aarch64 was lagging, it was built with go 1.16 which was pushed in the mean time.
```
--- FAIL: TestRetry (0.00s)
--- FAIL: TestRetry/max_attempts_exhausted_delivers_the_5xx_response_with_backoff (0.00s)
retry_test.go:148:
Error Trace: retry_test.go:148
Error: Not equal:
expected: 502
actual : 200
Test: TestRetry/max_attempts_exhausted_delivers_the_5xx_response_with_backoff
--- FAIL: TestRetry/max_attempts_exhausted_delivers_the_5xx_response (0.00s)
retry_test.go:148:
Error Trace: retry_test.go:148
Error: Not equal:
expected: 502
actual : 200
Test: TestRetry/max_attempts_exhausted_delivers_the_5xx_response
FAIL
FAIL github.com/traefik/traefik/v2/pkg/middlewares/retry 0.051s
```Michał PolańskiMichał Polańskihttps://gitlab.alpinelinux.org/alpine/aports/-/issues/12446testing/amfora fail on aarch64 builder2021-02-18T18:44:56Zomniomni+alpine@hack.orgtesting/amfora fail on aarch64 builderhttps://build.alpinelinux.org/buildlogs/build-edge-aarch64/testing/amfora/amfora-1.8.0-r0.log
CI passed just fine.https://build.alpinelinux.org/buildlogs/build-edge-aarch64/testing/amfora/amfora-1.8.0-r0.log
CI passed just fine.https://gitlab.alpinelinux.org/alpine/aports/-/issues/12447nodejs, nodejs-current: security release on February 23th, 20212021-03-31T18:38:02ZMichał Polańskinodejs, nodejs-current: security release on February 23th, 2021Source: https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/
# Summary
The Node.js project will release new versions of all supported release lines on or shortly after Tuesday, February 23th, 2021.
One Critica...Source: https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/
# Summary
The Node.js project will release new versions of all supported release lines on or shortly after Tuesday, February 23th, 2021.
One Critical severity issue
One High severity issue
One Low severity issue
# Impact
The 15.x release line of Node.js is vulnerable to one critical severity issue, one high severity issue, and one low severity issue.
The 14.x release line of Node.js is vulnerable to one critical severity issue, one high severity issue, and one low severity issue.
The 12.x release line of Node.js is vulnerable to one critical severity issue, one high severity issue, and one low severity issue.
The 10.x release line of Node.js is vulnerable to one critical severity issue, one high severity issue, and one low severity issue.
# Affected aports with active support
* [x] master: nodejs 14.15.5-r0 (main)
* [x] master: nodejs-current 15.8.0-r1 (community)
* [x] 3.13-stable: nodejs 14.15.5-r0 (main)
* [x] 3.13-stable: nodejs-current 15.5.1-r0 (community)
* [x] 3.12-stable: nodejs 12.20.1-r0 (main)
* [x] 3.11-stable: nodejs 12.20.1-r0 (main)
* [x] 3.10-stable: nodejs 10.19.0-r0 (main)2021-02-23https://gitlab.alpinelinux.org/alpine/aports/-/issues/12448python3: ctypes double representation BoF (CVE-2021-3177)2021-02-19T15:33:23ZMichał Polańskipython3: ctypes double representation BoF (CVE-2021-3177)sources:
* https://nvd.nist.gov/vuln/detail/CVE-2021-3177
* https://bugs.python.org/issue42938
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Pytho...sources:
* https://nvd.nist.gov/vuln/detail/CVE-2021-3177
* https://bugs.python.org/issue42938
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
# Affected aports with active support
* [x] master: python3 3.8.7-r1
* [x] 3.13-stable: python3 3.8.7-r0
* [x] 3.12-stable: python3 3.8.5-r0
* [x] 3.11-stable: python3 3.8.2-r1
* [x] 3.10-stable: python3 3.7.7-r1Natanael CopaNatanael Copahttps://gitlab.alpinelinux.org/alpine/aports/-/issues/12449community/ntpsec: python based client tools not working2021-02-21T15:34:52ZMY-Rcommunity/ntpsec: python based client tools not working```
# ntpq -p
Traceback (most recent call last):
File "/usr/bin/ntpq", line 26, in <module>
import ntp.ntpc
File "/usr/lib/python3.8/site-packages/ntp/ntpc.py", line 52, in <module>
_ntpc = _importado()
File "/usr/lib/pytho...```
# ntpq -p
Traceback (most recent call last):
File "/usr/bin/ntpq", line 26, in <module>
import ntp.ntpc
File "/usr/lib/python3.8/site-packages/ntp/ntpc.py", line 52, in <module>
_ntpc = _importado()
File "/usr/lib/python3.8/site-packages/ntp/ntpc.py", line 38, in _importado
return _dlo(ntpc_paths)
File "/usr/lib/python3.8/site-packages/ntp/ntpc.py", line 49, in _dlo
raise OSError("Can't find %s library" % LIB)
OSError: Can't find ntpc library
# ntpdig
Traceback (most recent call last):
File "/usr/bin/ntpdig", line 19, in <module>
import ntp.packet
File "/usr/lib/python3.8/site-packages/ntp/packet.py", line 219, in <module>
import ntp.ntpc
File "/usr/lib/python3.8/site-packages/ntp/ntpc.py", line 52, in <module>
_ntpc = _importado()
File "/usr/lib/python3.8/site-packages/ntp/ntpc.py", line 38, in _importado
return _dlo(ntpc_paths)
File "/usr/lib/python3.8/site-packages/ntp/ntpc.py", line 49, in _dlo
raise OSError("Can't find %s library" % LIB)
OSError: Can't find ntpc library
```
Above commands started to work after moving these files from default ``/usr/lib/ntp`` to ``/usr/lib``:
```
# ls -l /usr/lib/ntp
total 48
lrwxrwxrwx 1 root root 16 Feb 18 23:17 libntpc.so -> libntpc.so.1.1.0
lrwxrwxrwx 1 root root 16 Feb 18 23:17 libntpc.so.1 -> libntpc.so.1.1.0
-rwxr-xr-x 1 root root 46928 Oct 12 01:12 libntpc.so.1.1.0
```
Affected are at least Alpine ``edge`` and ``3.13-stable``https://gitlab.alpinelinux.org/alpine/aports/-/issues/12450community/netdata: Netdata fails to create /var/lib/netdata/registry2021-02-21T04:34:06ZJustin Evankovichcommunity/netdata: Netdata fails to create /var/lib/netdata/registryWhile attempting to launch netdata on a Raspberry Pi 3B+ (running alpine 3.13.2 aarch64), netdata dies while trying to create the directory /var/lib/netdata/registry. The problem exists on netdata 1.28.0-r0 and 1.29.2-r0. The problem per...While attempting to launch netdata on a Raspberry Pi 3B+ (running alpine 3.13.2 aarch64), netdata dies while trying to create the directory /var/lib/netdata/registry. The problem exists on netdata 1.28.0-r0 and 1.29.2-r0. The problem persists whether the path exists or not.
/var is mounted on an ext4 partition on the SD card and *is* rw.
It seems that mkdir is failing with error code EINVAL. I would expect the error code to indicate a permissions error if that was the cause.
The error.log from one of the netdata runs is attached below. Every run is virtually identical, save for the timestamps and pid.
[error.log](/uploads/6a61df44afcc070f2bb380533d94bc54/error.log)https://gitlab.alpinelinux.org/alpine/aports/-/issues/12451Vifm (vim file manager) breaks after hitting W (quickview)2021-02-19T11:17:25ZGabesVifm (vim file manager) breaks after hitting W (quickview)
Right after hitting "w" (quickview) i am getting an error msg "sh: file: not found" and the app screen rendering gets broken, making the app unusable.
Expected behavior is to toggle on and off the quick file view (preview of file's con...
Right after hitting "w" (quickview) i am getting an error msg "sh: file: not found" and the app screen rendering gets broken, making the app unusable.
Expected behavior is to toggle on and off the quick file view (preview of file's contents)
Related command is [vie(w)](https://vifm.info/manual.shtml#Commands)
Tested on Alpine Virtual x86_64.
I am using vifm on many different linux distros, never seen this bug anywhere before.https://gitlab.alpinelinux.org/alpine/aports/-/issues/12452main/iperf > buggy number over 10G2021-03-10T17:21:36ZPICCORO Lenz McKAYmain/iperf > buggy number over 10Gwe are under !G connectinos and checks seems are confirmed this are happened>
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965974
patch are available in debian and could be merged! i modified and i prefers to use long
```
Index: ...we are under !G connectinos and checks seems are confirmed this are happened>
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965974
patch are available in debian and could be merged! i modified and i prefers to use long
```
Index: iperf2/src/Client.cpp
===================================================================
--- iperf2.orig/src/Client.cpp
+++ iperf2/src/Client.cpp
@@ -396,7 +396,7 @@ void Client::RunRateLimitedTCP ( void )
double tokens = 0;
Timestamp time1, time2;
- int var_rate = mSettings->mUDPRate;
+ long var_rate = mSettings->mUDPRate;
while (InProgress()) {
// Add tokens per the loop time
// clock_gettime is much cheaper than gettimeofday() so
@@ -504,7 +504,7 @@ void Client::RunUDP( void ) {
if (isVaryLoad(mSettings) && mSettings->mUDPRateUnits == kRate_BW) {
static Timestamp time3;
if (now.subSec(time3) >= VARYLOAD_PERIOD) {
- int var_rate = lognormal(mSettings->mUDPRate,variance);
+ long var_rate = lognormal(mSettings->mUDPRate,variance);
if (var_rate < 0)
var_rate = 0;
```