-
Search Results
-
Brian Masinick
I received an Email with the following update:
-
Updated Debian 11: 11.4 released
————————————————————————
The Debian Project https://www.debian.org/
Updated Debian 11: 11.4 released press@debian.org
July 9th, 2022 https://www.debian.org/News/2022/20220709
————————————————————————The Debian project is pleased to announce the fourth update of its
stable distribution Debian 11 (codename “bullseye”). This point release
mainly adds corrections for security issues, along with a few
adjustments for serious problems. Security advisories have already been
published separately and are referenced where available.Please note that the point release does not constitute a new version of
Debian 11 but only updates some of the packages included. There is no
need to throw away old “bullseye” media. After installation, packages
can be upgraded to the current versions using an up-to-date Debian
mirror.Those who frequently install updates from security.debian.org won’t have
to update many packages, and most such updates are included in the point
release.New installation images will be available soon at the regular locations.
Upgrading an existing installation to this revision can be achieved by
pointing the package management system at one of Debian’s many HTTP
mirrors. A comprehensive list of mirrors is available at:https://www.debian.org/mirror/list
Miscellaneous Bugfixes
———————-This stable update adds a few important corrections to the following
packages:+—————————+—————————————–+
| Package | Reason |
+—————————+—————————————–+
| apache2 [1] | New upstream stable release; fix HTTP |
| | request smuggling issue [CVE-2022- |
| | 26377], out-of-bounds read issues |
| | [CVE-2022-28330 CVE-2022-28614 |
| | CVE-2022-28615], denial of service |
| | issues [CVE-2022-29404 CVE-2022-30522], |
| | possible out-of-bounds read issue |
| | [CVE-2022-30556], possible IP-based |
| | authentication bypass issue [CVE-2022- |
| | 31813] |
| | |
| base-files [2] | Update /etc/debian_version for the 11.4 |
| | point release |
| | |
| bash [3] | Fix 1-byte buffer overflow read, |
| | causing corrupted multibyte characters |
| | in command substitutions |
| | |
| clamav [4] | New upstream stable release; security |
| | fixes [CVE-2022-20770 CVE-2022-20771 |
| | CVE-2022-20785 CVE-2022-20792 CVE-2022- |
| | 20796] |
| | |
| clementine [5] | Add missing dependency on libqt5sql5- |
| | sqlite |
| | |
| composer [6] | Fix code injection issue [CVE-2022- |
| | 24828]; update GitHub token pattern |
| | |
| cyrus-imapd [7] | Ensure that all mailboxes have a |
| | “uniqueid” field, fixing upgrades to |
| | version 3.6 |
| | |
| dbus-broker [8] | Fix buffer overflow issue [CVE-2022- |
| | 31212] |
| | |
| debian-edu-config [9] | Accept mail from the local network sent |
| | to root@; only create |
| | Kerberos host and service principals if |
| | they don’t yet exist; ensure libsss- |
| | sudo is installed on Roaming |
| | Workstations; fix naming and visibility |
| | of print queues; support krb5i on |
| | Diskless Workstations; squid: prefer |
| | DNSv4 lookups over DNSv6 |
| | |
| debian-installer [10] | Rebuild against proposed-updates; |
| | increase Linux kernel ABI to 16; |
| | reinstate some armel netboot targets |
| | (openrd) |
| | |
| debian-installer-netboot- | Rebuild against proposed-updates; |
| images [11] | increase Linux kernel ABI to 16; |
| | reinstate some armel netboot targets |
| | (openrd) |
| | |
| distro-info-data [12] | Add Ubuntu 22.10, Kinetic Kudu |
| | |
| docker.io [13] | Order docker.service after |
| | containerd.service to fix shutdown of |
| | containers; explicitly pass the |
| | containerd socket path to dockerd to |
| | make sure it doesn’t start containerd |
| | on its own |
| | |
| dpkg [14] | dpkg-deb: Fix unexpected end of file |
| | conditions on .deb extract; libdpkg: Do |
| | not restrict source:* virtual fields to |
| | installed packages; |
| | Dpkg::Source::Package::V2: Always fix |
| | the permissions for upstream tarballs |
| | (regression from DSA-5147-1] |
| | |
| freetype [15] | Fix buffer overflow issue [CVE-2022- |
| | 27404]; fix crashes [CVE-2022-27405 |
| | CVE-2022-27406] |
| | |
| fribidi [16] | Fix buffer overflow issues [CVE-2022- |
| | 25308 CVE-2022-25309]; fix crash |
| | [CVE-2022-25310] |
| | |
| ganeti [17] | New upstream release; fix several |
| | upgrade issues; fix live migration with |
| | QEMU 4 and “security_model” of |
| | “user” or “pool” |
| | |
| geeqie [18] | Fix Ctrl click inside of a block |
| | selection |
| | |
| gnutls28 [19] | Fix SSSE3 SHA384 miscalculation; fix |
| | null pointer deference issue [CVE-2021- |
| | 4209] |
| | |
| golang-github- | Fix null pointer dereference caused by |
| russellhaering- | crafted XML signatures [CVE-2020-7711] |
| goxmldsig [20] | |
| | |
| grunt [21] | Fix path traversal issue [CVE-2022- |
| | 0436] |
| | |
| hdmi2usb-mode-switch [22] | udev: Add a suffix to /dev/video device |
| | nodes to disambiguate them; move udev |
| | rules to priority 70, to come after 60- |
| | persistent-v4l.rules |
| | |
| hexchat [23] | Add missing dependency on python3-cffi- |
| | backend |
| | |
| htmldoc [24] | Fix infinite loop [CVE-2022-24191], |
| | integer overflow issues [CVE-2022- |
| | 27114] and heap buffer overflow issue |
| | [CVE-2022-28085] |
| | |
| knot-resolver [25] | Fix possible assertion failure in NSEC3 |
| | edge-case [CVE-2021-40083] |
| | |
| libapache2-mod-auth- | New upstream stable release; fix open |
| openidc [26] | redirect issue [CVE-2021-39191]; fix |
| | crash on reload / restart |
| | |
| libintl-perl [27] | Really install gettext_xs.pm |
| | |
| libsdl2 [28] | Avoid out-of-bounds read while loading |
| | malformed BMP file [CVE-2021-33657], |
| | and during YUV to RGB conversion |
| | |
| libtgowt [29] | New upstream stable release, to support |
| | newer telegram-desktop |
| | |
| linux [30] | New upstream stable release; increase |
| | ABI to 16 |
| | |
| linux-signed-amd64 [31] | New upstream stable release; increase |
| | ABI to 16 |
| | |
| linux-signed-arm64 [32] | New upstream stable release; increase |
| | ABI to 16 |
| | |
| linux-signed-i386 [33] | New upstream stable release; increase |
| | ABI to 16 |
| | |
| logrotate [34] | Skip locking if state file is world- |
| | readable [CVE-2022-1348]; make |
| | configuration parsing stricter in order |
| | to avoid parsing foreign files such as |
| | core dumps |
| | |
| lxc [35] | Update default GPG key server, fixing |
| | creating of containers using the |
| | “download” template |
| | |
| minidlna [36] | Validate HTTP requests to protect |
| | against DNS rebinding attacks |
| | [CVE-2022-26505] |
| | |
| mutt [37] | Fix uudecode buffer overflow issue |
| | [CVE-2022-1328] |
| | |
| nano [38] | Several bug fixes, including fixes for |
| | crashes |
| | |
| needrestart [39] | Make cgroup detection for services and |
| | user sessions cgroup v2 aware |
| | |
| network-manager [40] | New upstream stable release |
| | |
| nginx [41] | Fix crash when libnginx-mod-http-lua is |
| | loaded and init_worker_by_lua* is used; |
| | mitigate application layer protocol |
| | content confusion attack in the Mail |
| | module [CVE-2021-3618] |
| | |
| node-ejs [42] | Fix server-side template injection |
| | issue [CVE-2022-29078] |
| | |
| node-eventsource [43] | Strip sensitive headers on redirect to |
| | different origin [CVE-2022-1650] |
| | |
| node-got [44] | Don’t allow redirection to Unix socket |
| | [CVE-2022-33987] |
| | |
| node-mermaid [45] | Fix cross-site scripting issues |
| | [CVE-2021-23648 CVE-2021-43861] |
| | |
| node-minimist [46] | Fix prototype pollution issue |
| | [CVE-2021-44906] |
| | |
| node-moment [47] | Fix path traversal issue [CVE-2022- |
| | 24785] |
| | |
| node-node-forge [48] | Fix signature verification issues |
| | [CVE-2022-24771 CVE-2022-24772 |
| | CVE-2022-24773] |
| | |
| node-raw-body [49] | Fix potential denial of service issue |
| | in node-express, by using node-iconv- |
| | lite rather than node-iconv |
| | |
| node-sqlite3 [50] | Fix denial of service issue [CVE-2022- |
| | 21227] |
| | |
| node-url-parse [51] | Fix authentication bypass issues |
| | [CVE-2022-0686 CVE-2022-0691] |
| | |
| nvidia-cuda-toolkit [52] | Use OpenJDK8 snapshots for amd64 and |
| | ppc64el; check usability of the java |
| | binary; nsight-compute: Move the |
| | ‘sections’ folder to a multiarch |
| | location; fix nvidia-openjdk-8-jre |
| | version ordering |
| | |
| nvidia-graphics- | New upstream release; switch to |
| drivers [53] | upstream 470 tree; fix denial of |
| | service issues [CVE-2022-21813 |
| | CVE-2022-21814]; fix out-of-bounds |
| | write issue [CVE-2022-28181], out-of- |
| | bounds read issue [CVE-2022-28183], |
| | denial of service issues [CVE-2022- |
| | 28184 CVE-2022-28191 CVE-2022-28192] |
| | |
| nvidia-graphics-drivers- | New upstream release; fix out-of-bound |
| legacy-390xx [54] | write issues [CVE-2022-28181 CVE-2022- |
| | 28185] |
| | |
| nvidia-graphics-drivers- | New upstream stable release |
| tesla-418 [55] | |
| | |
| nvidia-graphics-drivers- | New upstream stable release; fix out- |
| tesla-450 [56] | of-bounds write issues [CVE-2022-28181 |
| | CVE-2022-28185], denial of service |
| | issue [CVE-2022-28192] |
| | |
| nvidia-graphics-drivers- | New upstream stable release |
| tesla-460 [57] | |
| | |
| nvidia-graphics-drivers- | New package, switching Tesla support to |
| tesla-470 [58] | upstream 470 tree; fix out-of-bounds |
| | write issue [CVE-2022-28181], out-of- |
| | bounds read issue [CVE-2022-28183], |
| | denial of service issues [CVE-2022- |
| | 28184 CVE-2022-28191 CVE-2022-28192] |
| | |
| nvidia-persistenced [59] | New upstream release; switch to |
| | upstream 470 tree |
| | |
| nvidia-settings [60] | New upstream release; switch to |
| | upstream 470 tree |
| | |
| nvidia-settings- | New package, switching Tesla support to |
| tesla-470 [61] | upstream 470 tree |
| | |
| nvidia-xconfig [62] | New upstream release |
| | |
| openssh [63] | seccomp: add pselect6_time64 syscall on |
| | 32-bit architectures |
| | |
| orca [64] | Fix usage with webkitgtk 2.36 |
| | |
| php-guzzlehttp-psr7 [65] | Fix improper header parsing [CVE-2022- |
| | 24775] |
| | |
| phpmyadmin [66] | Fix some SQL queries generating a |
| | server error |
| | |
| postfix [67] | New upstream stable release; do not |
| | override user set default_transport in |
| | postinst; if-up.d: do not error out if |
| | postfix can’t send mail yet |
| | |
| procmail [68] | Fix null pointer dereference |
| | |
| python-scrapy [69] | Don’t send authentication data with all |
| | requests [CVE-2021-41125]; don’t expose |
| | cookies cross-domain when redirecting |
| | [CVE-2022-0577] |
| | |
| ruby-net-ssh [70] | Fix authentication against systems |
| | using OpenSSH 8.8 |
| | |
| runc [71] | Honour seccomp defaultErrnoRet; do not |
| | set inheritable capabilities [CVE-2022- |
| | 29162] |
| | |
| samba [72] | Fix winbind start failure when “allow |
| | trusted domains = no” is used; fix MIT |
| | Kerberos authentication; fix share |
| | escape issue via mkdir race condition |
| | [CVE-2021-43566]; fix possible serious |
| | data corruption issue due to Windows |
| | client cache poisoning; fix |
| | installation on non-systemd systems |
| | |
| tcpdump [73] | Update AppArmor profile to allow access |
| | to *.cap files, and handle numerical |
| | suffix in filenames added by -W |
| | |
| telegram-desktop [74] | New upstream stable release, restoring |
| | functionality |
| | |
| tigervnc [75] | Fix GNOME desktop start up when using |
| | tigervncserver@.service; fix colour |
| | display when vncviewer and X11 server |
| | use different endianness |
| | |
| twisted [76] | Fix information disclosure issue with |
| | cross-domain redirects [CVE-2022- |
| | 21712], denial of service issue during |
| | SSH handshakes [CVE-2022-21716], HTTP |
| | request smuggling issues [CVE-2022- |
| | 24801] |
| | |
| tzdata [77] | Update timezone data for Palestine; |
| | update leap second list |
| | |
| ublock-origin [78] | New upstream stable release |
| | |
| unrar-nonfree [79] | Fix directory traversal issue |
| | [CVE-2022-30333] |
| | |
| usb.ids [80] | New upstream release; update included |
| | data |
| | |
| wireless-regdb [81] | New upstream release; remove diversion |
| | added by the installer, ensuring that |
| | files from the package are used |
| | |
+—————————+—————————————–+1: https://packages.debian.org/src:apache2
2: https://packages.debian.org/src:base-files
3: https://packages.debian.org/src:bash
4: https://packages.debian.org/src:clamav
5: https://packages.debian.org/src:clementine
6: https://packages.debian.org/src:composer
7: https://packages.debian.org/src:cyrus-imapd
8: https://packages.debian.org/src:dbus-broker
9: https://packages.debian.org/src:debian-edu-config
10: https://packages.debian.org/src:debian-installer
11: https://packages.debian.org/src:debian-installer-netboot-images
12: https://packages.debian.org/src:distro-info-data
13: https://packages.debian.org/src:docker.io
14: https://packages.debian.org/src:dpkg
15: https://packages.debian.org/src:freetype
16: https://packages.debian.org/src:fribidi
17: https://packages.debian.org/src:ganeti
18: https://packages.debian.org/src:geeqie
19: https://packages.debian.org/src:gnutls28
20: https://packages.debian.org/src:golang-github-russellhaering-goxmldsig
21: https://packages.debian.org/src:grunt
22: https://packages.debian.org/src:hdmi2usb-mode-switch
23: https://packages.debian.org/src:hexchat
24: https://packages.debian.org/src:htmldoc
25: https://packages.debian.org/src:knot-resolver
26: https://packages.debian.org/src:libapache2-mod-auth-openidc
27: https://packages.debian.org/src:libintl-perl
28: https://packages.debian.org/src:libsdl2
29: https://packages.debian.org/src:libtgowt
30: https://packages.debian.org/src:linux
31: https://packages.debian.org/src:linux-signed-amd64
32: https://packages.debian.org/src:linux-signed-arm64
33: https://packages.debian.org/src:linux-signed-i386
34: https://packages.debian.org/src:logrotate
35: https://packages.debian.org/src:lxc
36: https://packages.debian.org/src:minidlna
37: https://packages.debian.org/src:mutt
38: https://packages.debian.org/src:nano
39: https://packages.debian.org/src:needrestart
40: https://packages.debian.org/src:network-manager
41: https://packages.debian.org/src:nginx
42: https://packages.debian.org/src:node-ejs
43: https://packages.debian.org/src:node-eventsource
44: https://packages.debian.org/src:node-got
45: https://packages.debian.org/src:node-mermaid
46: https://packages.debian.org/src:node-minimist
47: https://packages.debian.org/src:node-moment
48: https://packages.debian.org/src:node-node-forge
49: https://packages.debian.org/src:node-raw-body
50: https://packages.debian.org/src:node-sqlite3
51: https://packages.debian.org/src:node-url-parse
52: https://packages.debian.org/src:nvidia-cuda-toolkit
53: https://packages.debian.org/src:nvidia-graphics-drivers
54: https://packages.debian.org/src:nvidia-graphics-drivers-legacy-390xx
55: https://packages.debian.org/src:nvidia-graphics-drivers-tesla-418
56: https://packages.debian.org/src:nvidia-graphics-drivers-tesla-450
57: https://packages.debian.org/src:nvidia-graphics-drivers-tesla-460
58: https://packages.debian.org/src:nvidia-graphics-drivers-tesla-470
59: https://packages.debian.org/src:nvidia-persistenced
60: https://packages.debian.org/src:nvidia-settings
61: https://packages.debian.org/src:nvidia-settings-tesla-470
62: https://packages.debian.org/src:nvidia-xconfig
63: https://packages.debian.org/src:openssh
64: https://packages.debian.org/src:orca
65: https://packages.debian.org/src:php-guzzlehttp-psr7
66: https://packages.debian.org/src:phpmyadmin
67: https://packages.debian.org/src:postfix
68: https://packages.debian.org/src:procmail
69: https://packages.debian.org/src:python-scrapy
70: https://packages.debian.org/src:ruby-net-ssh
71: https://packages.debian.org/src:runc
72: https://packages.debian.org/src:samba
73: https://packages.debian.org/src:tcpdump
74: https://packages.debian.org/src:telegram-desktop
75: https://packages.debian.org/src:tigervnc
76: https://packages.debian.org/src:twisted
77: https://packages.debian.org/src:tzdata
78: https://packages.debian.org/src:ublock-origin
79: https://packages.debian.org/src:unrar-nonfree
80: https://packages.debian.org/src:usb.ids
81: https://packages.debian.org/src:wireless-regdbSecurity Updates
—————-This revision adds the following security updates to the stable release.
The Security Team has already released an advisory for each of these
updates:+—————-+————————–+
| Advisory ID | Package |
+—————-+————————–+
| DSA-4999 [82] | asterisk [83] |
| | |
| DSA-5026 [84] | firefox-esr [85] |
| | |
| DSA-5034 [86] | thunderbird [87] |
| | |
| DSA-5044 [88] | firefox-esr [89] |
| | |
| DSA-5045 [90] | thunderbird [91] |
| | |
| DSA-5069 [92] | firefox-esr [93] |
| | |
| DSA-5074 [94] | thunderbird [95] |
| | |
| DSA-5086 [96] | thunderbird [97] |
| | |
| DSA-5090 [98] | firefox-esr [99] |
| | |
| DSA-5094 [100] | thunderbird [101] |
| | |
| DSA-5097 [102] | firefox-esr [103] |
| | |
| DSA-5106 [104] | thunderbird [105] |
| | |
| DSA-5107 [106] | php-twig [107] |
| | |
| DSA-5108 [108] | tiff [109] |
| | |
| DSA-5110 [110] | chromium [111] |
| | |
| DSA-5111 [112] | zlib [113] |
| | |
| DSA-5112 [114] | chromium [115] |
| | |
| DSA-5113 [116] | firefox-esr [117] |
| | |
| DSA-5114 [118] | chromium [119] |
| | |
| DSA-5115 [120] | webkit2gtk [121] |
| | |
| DSA-5116 [122] | wpewebkit [123] |
| | |
| DSA-5117 [124] | xen [125] |
| | |
| DSA-5118 [126] | thunderbird [127] |
| | |
| DSA-5119 [128] | subversion [129] |
| | |
| DSA-5120 [130] | chromium [131] |
| | |
| DSA-5121 [132] | chromium [133] |
| | |
| DSA-5122 [134] | gzip [135] |
| | |
| DSA-5123 [136] | xz-utils [137] |
| | |
| DSA-5124 [138] | ffmpeg [139] |
| | |
| DSA-5125 [140] | chromium [141] |
| | |
| DSA-5127 [142] | linux-signed-amd64 [143] |
| | |
| DSA-5127 [144] | linux-signed-arm64 [145] |
| | |
| DSA-5127 [146] | linux-signed-i386 [147] |
| | |
| DSA-5127 [148] | linux [149] |
| | |
| DSA-5128 [150] | openjdk-17 [151] |
| | |
| DSA-5129 [152] | firefox-esr [153] |
| | |
| DSA-5130 [154] | dpdk [155] |
| | |
| DSA-5131 [156] | openjdk-11 [157] |
| | |
| DSA-5132 [158] | ecdsautils [159] |
| | |
| DSA-5133 [160] | qemu [161] |
| | |
| DSA-5134 [162] | chromium [163] |
| | |
| DSA-5136 [164] | postgresql-13 [165] |
| | |
| DSA-5137 [166] | needrestart [167] |
| | |
| DSA-5138 [168] | waitress [169] |
| | |
| DSA-5139 [170] | openssl [171] |
| | |
| DSA-5140 [172] | openldap [173] |
| | |
| DSA-5141 [174] | thunderbird [175] |
| | |
| DSA-5142 [176] | libxml2 [177] |
| | |
| DSA-5143 [178] | firefox-esr [179] |
| | |
| DSA-5145 [180] | lrzip [181] |
| | |
| DSA-5147 [182] | dpkg [183] |
| | |
| DSA-5148 [184] | chromium [185] |
| | |
| DSA-5149 [186] | cups [187] |
| | |
| DSA-5150 [188] | rsyslog [189] |
| | |
| DSA-5151 [190] | smarty3 [191] |
| | |
| DSA-5152 [192] | spip [193] |
| | |
| DSA-5153 [194] | trafficserver [195] |
| | |
| DSA-5154 [196] | webkit2gtk [197] |
| | |
| DSA-5155 [198] | wpewebkit [199] |
| | |
| DSA-5156 [200] | firefox-esr [201] |
| | |
| DSA-5157 [202] | cifs-utils [203] |
| | |
| DSA-5158 [204] | thunderbird [205] |
| | |
| DSA-5159 [206] | python-bottle [207] |
| | |
| DSA-5160 [208] | ntfs-3g [209] |
| | |
| DSA-5161 [210] | linux-signed-amd64 [211] |
| | |
| DSA-5161 [212] | linux-signed-arm64 [213] |
| | |
| DSA-5161 [214] | linux-signed-i386 [215] |
| | |
| DSA-5161 [216] | linux [217] |
| | |
| DSA-5162 [218] | containerd [219] |
| | |
| DSA-5163 [220] | chromium [221] |
| | |
| DSA-5164 [222] | exo [223] |
| | |
| DSA-5165 [224] | vlc [225] |
| | |
| DSA-5166 [226] | slurm-wlm [227] |
| | |
| DSA-5167 [228] | firejail [229] |
| | |
| DSA-5168 [230] | chromium [231] |
| | |
| DSA-5169 [232] | openssl [233] |
| | |
| DSA-5171 [234] | squid [235] |
| | |
| DSA-5172 [236] | firefox-esr [237] |
| | |
| DSA-5174 [238] | gnupg2 [239] |
| | |
+—————-+————————–+82: https://www.debian.org/security/2021/dsa-4999
83: https://packages.debian.org/src:asterisk
84: https://www.debian.org/security/2021/dsa-5026
85: https://packages.debian.org/src:firefox-esr
86: https://www.debian.org/security/2022/dsa-5034
87: https://packages.debian.org/src:thunderbird
88: https://www.debian.org/security/2022/dsa-5044
89: https://packages.debian.org/src:firefox-esr
90: https://www.debian.org/security/2022/dsa-5045
91: https://packages.debian.org/src:thunderbird
92: https://www.debian.org/security/2022/dsa-5069
93: https://packages.debian.org/src:firefox-esr
94: https://www.debian.org/security/2022/dsa-5074
95: https://packages.debian.org/src:thunderbird
96: https://www.debian.org/security/2022/dsa-5086
97: https://packages.debian.org/src:thunderbird
98: https://www.debian.org/security/2022/dsa-5090
99: https://packages.debian.org/src:firefox-esr
100: https://www.debian.org/security/2022/dsa-5094
101: https://packages.debian.org/src:thunderbird
102: https://www.debian.org/security/2022/dsa-5097
103: https://packages.debian.org/src:firefox-esr
104: https://www.debian.org/security/2022/dsa-5106
105: https://packages.debian.org/src:thunderbird
106: https://www.debian.org/security/2022/dsa-5107
107: https://packages.debian.org/src:php-twig
108: https://www.debian.org/security/2022/dsa-5108
109: https://packages.debian.org/src:tiff
110: https://www.debian.org/security/2022/dsa-5110
111: https://packages.debian.org/src:chromium
112: https://www.debian.org/security/2022/dsa-5111
113: https://packages.debian.org/src:zlib
114: https://www.debian.org/security/2022/dsa-5112
115: https://packages.debian.org/src:chromium
116: https://www.debian.org/security/2022/dsa-5113
117: https://packages.debian.org/src:firefox-esr
118: https://www.debian.org/security/2022/dsa-5114
119: https://packages.debian.org/src:chromium
120: https://www.debian.org/security/2022/dsa-5115
121: https://packages.debian.org/src:webkit2gtk
122: https://www.debian.org/security/2022/dsa-5116
123: https://packages.debian.org/src:wpewebkit
124: https://www.debian.org/security/2022/dsa-5117
125: https://packages.debian.org/src:xen
126: https://www.debian.org/security/2022/dsa-5118
127: https://packages.debian.org/src:thunderbird
128: https://www.debian.org/security/2022/dsa-5119
129: https://packages.debian.org/src:subversion
130: https://www.debian.org/security/2022/dsa-5120
131: https://packages.debian.org/src:chromium
132: https://www.debian.org/security/2022/dsa-5121
133: https://packages.debian.org/src:chromium
134: https://www.debian.org/security/2022/dsa-5122
135: https://packages.debian.org/src:gzip
136: https://www.debian.org/security/2022/dsa-5123
137: https://packages.debian.org/src:xz-utils
138: https://www.debian.org/security/2022/dsa-5124
139: https://packages.debian.org/src:ffmpeg
140: https://www.debian.org/security/2022/dsa-5125
141: https://packages.debian.org/src:chromium
142: https://www.debian.org/security/2022/dsa-5127
143: https://packages.debian.org/src:linux-signed-amd64
144: https://www.debian.org/security/2022/dsa-5127
145: https://packages.debian.org/src:linux-signed-arm64
146: https://www.debian.org/security/2022/dsa-5127
147: https://packages.debian.org/src:linux-signed-i386
148: https://www.debian.org/security/2022/dsa-5127
149: https://packages.debian.org/src:linux
150: https://www.debian.org/security/2022/dsa-5128
151: https://packages.debian.org/src:openjdk-17
152: https://www.debian.org/security/2022/dsa-5129
153: https://packages.debian.org/src:firefox-esr
154: https://www.debian.org/security/2022/dsa-5130
155: https://packages.debian.org/src:dpdk
156: https://www.debian.org/security/2022/dsa-5131
157: https://packages.debian.org/src:openjdk-11
158: https://www.debian.org/security/2022/dsa-5132
159: https://packages.debian.org/src:ecdsautils
160: https://www.debian.org/security/2022/dsa-5133
161: https://packages.debian.org/src:qemu
162: https://www.debian.org/security/2022/dsa-5134
163: https://packages.debian.org/src:chromium
164: https://www.debian.org/security/2022/dsa-5136
165: https://packages.debian.org/src:postgresql-13
166: https://www.debian.org/security/2022/dsa-5137
167: https://packages.debian.org/src:needrestart
168: https://www.debian.org/security/2022/dsa-5138
169: https://packages.debian.org/src:waitress
170: https://www.debian.org/security/2022/dsa-5139
171: https://packages.debian.org/src:openssl
172: https://www.debian.org/security/2022/dsa-5140
173: https://packages.debian.org/src:openldap
174: https://www.debian.org/security/2022/dsa-5141
175: https://packages.debian.org/src:thunderbird
176: https://www.debian.org/security/2022/dsa-5142
177: https://packages.debian.org/src:libxml2
178: https://www.debian.org/security/2022/dsa-5143
179: https://packages.debian.org/src:firefox-esr
180: https://www.debian.org/security/2022/dsa-5145
181: https://packages.debian.org/src:lrzip
182: https://www.debian.org/security/2022/dsa-5147
183: https://packages.debian.org/src:dpkg
184: https://www.debian.org/security/2022/dsa-5148
185: https://packages.debian.org/src:chromium
186: https://www.debian.org/security/2022/dsa-5149
187: https://packages.debian.org/src:cups
188: https://www.debian.org/security/2022/dsa-5150
189: https://packages.debian.org/src:rsyslog
190: https://www.debian.org/security/2022/dsa-5151
191: https://packages.debian.org/src:smarty3
192: https://www.debian.org/security/2022/dsa-5152
193: https://packages.debian.org/src:spip
194: https://www.debian.org/security/2022/dsa-5153
195: https://packages.debian.org/src:trafficserver
196: https://www.debian.org/security/2022/dsa-5154
197: https://packages.debian.org/src:webkit2gtk
198: https://www.debian.org/security/2022/dsa-5155
199: https://packages.debian.org/src:wpewebkit
200: https://www.debian.org/security/2022/dsa-5156
201: https://packages.debian.org/src:firefox-esr
202: https://www.debian.org/security/2022/dsa-5157
203: https://packages.debian.org/src:cifs-utils
204: https://www.debian.org/security/2022/dsa-5158
205: https://packages.debian.org/src:thunderbird
206: https://www.debian.org/security/2022/dsa-5159
207: https://packages.debian.org/src:python-bottle
208: https://www.debian.org/security/2022/dsa-5160
209: https://packages.debian.org/src:ntfs-3g
210: https://www.debian.org/security/2022/dsa-5161
211: https://packages.debian.org/src:linux-signed-amd64
212: https://www.debian.org/security/2022/dsa-5161
213: https://packages.debian.org/src:linux-signed-arm64
214: https://www.debian.org/security/2022/dsa-5161
215: https://packages.debian.org/src:linux-signed-i386
216: https://www.debian.org/security/2022/dsa-5161
217: https://packages.debian.org/src:linux
218: https://www.debian.org/security/2022/dsa-5162
219: https://packages.debian.org/src:containerd
220: https://www.debian.org/security/2022/dsa-5163
221: https://packages.debian.org/src:chromium
222: https://www.debian.org/security/2022/dsa-5164
223: https://packages.debian.org/src:exo
224: https://www.debian.org/security/2022/dsa-5165
225: https://packages.debian.org/src:vlc
226: https://www.debian.org/security/2022/dsa-5166
227: https://packages.debian.org/src:slurm-wlm
228: https://www.debian.org/security/2022/dsa-5167
229: https://packages.debian.org/src:firejail
230: https://www.debian.org/security/2022/dsa-5168
231: https://packages.debian.org/src:chromium
232: https://www.debian.org/security/2022/dsa-5169
233: https://packages.debian.org/src:openssl
234: https://www.debian.org/security/2022/dsa-5171
235: https://packages.debian.org/src:squid
236: https://www.debian.org/security/2022/dsa-5172
237: https://packages.debian.org/src:firefox-esr
238: https://www.debian.org/security/2022/dsa-5174
239: https://packages.debian.org/src:gnupg2Removed packages
—————-The following packages were removed due to circumstances beyond our
control:+———————+——————————-+
| Package | Reason |
+———————+——————————-+
| elog [240] | Unmaintained; security issues |
| | |
| python-hbmqtt [241] | Unamintained and broken |
| | |
+———————+——————————-+240: https://packages.debian.org/src:elog
241: https://packages.debian.org/src:python-hbmqttDebian Installer
—————-The installer has been updated to include the fixes incorporated into
stable by the point release.URLs
—-The complete lists of packages that have changed with this revision:
https://deb.debian.org/debian/dists/bullseye/ChangeLog
The current stable distribution:
https://deb.debian.org/debian/dists/stable/
Proposed updates to the stable distribution:
https://deb.debian.org/debian/dists/proposed-updates
stable distribution information (release notes, errata etc.):
https://www.debian.org/releases/stable/
Security announcements and information:
https://www.debian.org/security/
About Debian
————The Debian Project is an association of Free Software developers who
volunteer their time and effort in order to produce the completely free
operating system Debian.Contact Information
——————-For further information, please visit the Debian web pages at
https://www.debian.org/, send mail to
stable release team at--
Brian MasinickIn reply to: Autostart do not work, antiX-21
Pelucia Siffred
greevous, I don’t know why but my ~/.desktop-session/startup file doesn’t run at login time. File permissions are correct (0755). I added the following line to the ~/.desktop-session/startup file for testing:
touch /home/demo/Downloads/TESTING.txtThe ~/.desktop-session/startup file does not run and does not create the TESTING.txt file.
Here is the contents of the ~/.desktop-session/startup file:#!/bin/bash touch /home/demo/Downloads/TESTING.txt xmodmap -e "pointer = 3 2 1 4 5 6 7 8 9 10" & setxkbmap br & ## fix HiDPI screen if necessary. ## Not needed if there is no HiDPI screen autoscale-antix ## Only use ONE (or neither) ## Simple script to check for connectivity (NCA). ## If no network connection is detected, activate wi-fi networks, open connman and go straight to the wi-fi connections tab. network-check-antix & ## OR More comples tool (NCR) that provides on screen info while waiting for a network connection to be established. ## NRS reports in both GUI and non-GUI environments. #network-readiness-state & ## Puts connman gui monitor icon on the taskbar #cmst -m & ## Uncomment if using pulseaudio (you need to install it). Make sure it starts before volumeicon. pulseaudio -D & ## Puts a volume icon on the taskbar volumeicon & ## Enable/Disable automounting automount-antix & ## Puts a flag on the taskbar to show which keyboard is being used if more than 1 keyboard layout is detected fbxkb-start & ## Uncomment for easy search from the taskbar #search-bar-icon & ## Uncomment the following line to mount Samba and/or NFS shares #connectshares & ## Uncomment to show the configuration gui of a running ssh-conduit-x11vnc server (you need to install ssh-conduit-antix) #ssh-conduit-x11vnc.sh gui & ## Uncomment to use clipboard manager #clipit & ## Use pkexec (you need to install policykit-1-gnome) #/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1 & ## Uncomment both to show wicd networking monitor (you need to install wicd). #wicd-client -t & #grep -q "START_DAEMON=no" /etc/default/wicd || wicd-client -t & ## Uncomment after installing apt-notifier #apt-notifier & ## Enable Mouse Configuration at Startup #ds-mouse -all & ## Uncomment if using network-manager (you need to install it) #nm-applet & ## Create a bootchart image if bootchart was run test -e /etc/live/config/bootchart \ && (sleep 6 && test -e /var/log/bootchart.tgz \ && ! test -e ~/bootchart.png \ && pybootchartgui)& ## Used on live system only (sleep 5 && toram-eject) &- This reply was modified 10 months, 1 week ago by Pelucia Siffred.
- This reply was modified 10 months, 1 week ago by Pelucia Siffred.
- This reply was modified 10 months, 1 week ago by Pelucia Siffred.
In reply to: antiX-22 being worked on
olsztyn
@ olsztyn
I am very happy, that we have iso-snapshot. The snapsshots are bootable and installable.
Does any other distro offer that? To my very delight iso-snapshot even works with runit.Again, needless to say for me that I consider ISO-Snapshot, Live-USB-Maker and Remaster the great assets of antiX that have no comparison out there. As I previously mentioned, I experimented a bit in the past with leveraging ISO-Snapshot going beyond antiX, to make it a more general tool, so it could be used for other distros as well. My experiments were working but the process was not quite straightforward.
As I mentioned over a year ago, Q4OS announced plans that working with MX team, ISO-Snapshot would be implemented for Q4OS as well. However, I have not seen that it actually materialized yet. It must be still worked on…Back to the antiX 22 context though:
Aside from antiX 22 being completely *elogind*-free right from start, I would like to see also some additional enhancements in these areas:Further enhancements to ISO-Snapshot:
– Great as it is, it appears to not work with network shares. Although it initially accepts network share as target for saving the snapshot, after start it comes back with a message on insufficient space on Home. In Live, it works though with Live-USB-Storage.
– In antiX Live scenario (at least) it misses to faithfully copy the content of fstab. Any manual, hard added entries are not carried over into the snapshot. I am not sure if the same issue is with the traditionally installed antiX as well. When I mentioned some issues with ISO-Snapshot in this forum almost two years ago, anticapitalista mentioned that ISO-Snapshot was meant to be for traditionally installed antiX only, not for antiX Live installations. Do we need to make such distinction anymore?…
antiX installed on the internal SATA HD is the best thing that exemplifies existing flexibility of antiX and the best of two worlds… Thanks to Xecure and Christophe for highlighting this feature in those times…Further enhancements to antiX Live boot architecture:
Much has been done in terms of these enhancements in antiX 21. Thank you… However, looking at antiX 22 around the corner, can we please pursue further evolution of these enhancements, such as:
– Clearer and more standing out discovery and ad-hoc built menu for any Frugal antiX installations
– To confirm: Do we still need a separate UEFI boot partition? It appears to me that the current version of syslinux do support UEFI booting. I was able to construct an antiX Live instance with all in just one EXT4 partition, no separate UEFI partition, and the resulting antiX booted both legacy and UEFI laptops just fine….Live-USB-Maker possible enhancement:
Just want to stress that Live-USB-Maker is so good already… Just these, if it is not too much to ask though:
– Cloning of encrypted Live antiX instance. This was mentioned about two years ago and BitJam had started a project at that time…
– Adding an option to create an ISO image of Live antiX, in addition to USB, as target destination of Live-USB-Maker operation. I know, that this would mean the same process as the ISO-Snapshot, so at first it appears to be duplicating ISO-Snapshot process. However, I believe this would not be the same. Looking at boot process and boot log messages appear to differ between using Live USB clone using Live-USB-Maker and Live USB created from image of ISO-Snapshot. This might be what anticapitalista mentioned in the past that ISO-Snapshot was not intended to use on Live antiX. It appears to me that the snapshot seems to remember the specific hardware configuration of the host, while Live-USB-Maker makes target completely dynamic, regardless where it would be booted…
Please correct me if I am mistaken…In any case, thank you for continued evolution of antiX to the new heights…
- This reply was modified 10 months, 2 weeks ago by olsztyn.
- This reply was modified 10 months, 2 weeks ago by olsztyn.
Live antiX Boot Options (Previously posted by Xecure):
https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_ParametersIn reply to: antiX-22 being worked on
I am very happy, that we have iso-snapshot. The snapsshots are bootable and installable.
Does any other distro offer that? To my very delight iso-snapshot even works with runit.Yes, indeed. ISO Snapshot plus Live-usb-maker are some of the greatest assets of antiX. My pointing to some bugs does not mean I do not fully recognize the overall value. It was just for further enhancement to consider.
By the way, ISO Snapshot can also be installed on distros other than antiX or MX, to create snapshots of other distros. It creates squashfs snapshot files the same way and Live snapshots of such distros are bootable, although with ‘MX 19’ splash screen… Therefore its value goes beyond just antiX.Live antiX Boot Options (Previously posted by Xecure):
https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_ParametersIn reply to: antiX-22 being worked on
Xaver
@ olsztyn
I am very happy, that we have iso-snapshot. The snapsshots are bootable and installable.
Does any other distro offer that? To my very delight iso-snapshot even works with runit.@ iznit
No, I do not desire to remove anything and fortunately I must not decide that. I am quite ignorant concerning policykit. From my limited experience with xfce4-power-manager I just wonder, if policykit without elogind makes sense.
The system I have built does work without policykit and yes, that narrows your choice of software. In some cases the dependencies are not neccassary (i.e. BackInTime) and should better be recomendations instead. In such cases a dummy package, which catches the dependencies, would help.In reply to: Gitlab needs SSH keys
sybok
Hi, you can use ‘ssh-keygen’ to generate the key, see e.g.
https://www.ssh.com/academy/ssh/keygen#adding-the-key-to-ssh-agent
If you have no key ‘~/.ssh/id_rsa’ stored on your PC, you may simply use ‘ssh-keygen’, use the default file-name (or change it as you wish) and empty passphrase.
The people at GitLab were kind enough to provide information for you:
https://docs.gitlab.com/ee/user/ssh.htmlOnce you generate the key, you should make it “more secure” by removing unnecessary rights, namely ‘chmod go-rw <key-file>’ so that no one other than you may read/modify the key.
Topic: Gitlab needs SSH keys
BobC
I can login to Gitlab, but they now require SSH keys.
I can’t fork a project without it, from the looks of it.
I don’t understand SSH (I thought it was a cryptic remote access program) or how to create the keys.
Can anyone point me to a tutorial designed for someone unfamiliar that gives a layman’s explanation?
In reply to: Remote Access software
SamK
In addition to the FAQ links above the following links provide an at-a-glance overview of each of the antiX in-house app suites.
1-to-1 Assistance & Voice
https://www.antixforum.com/forums/topic/1-to-1-suite-of-apps-2/SSH-Conduit
https://www.antixforum.com/forums/topic/ssh-conduit-suite/entropyagent
Trying antiX21 runit 32bit on another pentium 3 – I compared it to a devuan4 runit 64bit machine.
There do not seem to be ssh logs on the antiX21 machine, but there are on the devuan4 machine
Could this be a sign that the _runit-log id is needed for ssh to create logfiles?on devuan4runit 64-bit machine:
--:/etc/sv/ssh/log$ grep -i runit-log /etc/passwd runit-log:x:999:999:Created by dh-sysuser for runit:/nonexistent:/usr/sbin/nologin _runit-log:x:998:998:Created by dh-sysuser for runit:/nonexistent:/usr/sbin/nologin --:/etc/sv/ssh/log$ --:/etc/sv/ssh/log$ cat /etc/sv/ssh/log/run; #!/bin/sh chown _runit-log:adm '/var/log/runit/ssh' chmod 750 '/var/log/runit/ssh' exec chpst -u _runit-log svlogd -tt '/var/log/runit/ssh' --:/etc/sv/ssh/log$ ls -ld /var/log/runit/ssh drwxr-x--- 2 _runit-log adm 4096 Jun 11 19:20 /var/log/runit/ssh <---logfolder owned by _runit-log:adm --:/etc/sv/ssh/log$ sudo ls -lrt /var/log/runit/ssh/ | tail -4 -rw-r--r-- 1 _runit-log _runit-log 363 Jun 3 08:05 @400000006299a691227c50d4.u <---logfiles owned by _runit-log:_runit-log -rw-r--r-- 1 _runit-log _runit-log 4051 Jun 5 17:09 @40000000629ce3982e74632c.u -rw-r--r-- 1 _runit-log _runit-log 5895 Jun 11 09:57 @4000000062a4cee6247fae6c.u -rw-r--r-- 1 _runit-log _runit-log 2207 Jun 14 09:48 current --:/etc/sv/ssh/log$on antix21runit machine
--:/etc/sv/ssh/log $ grep -i runit-log /etc/passwd <---- No sign of runit-log in passwd --:/etc/sv/ssh/log --:/etc/sv/ssh/log $ cat /etc/sv/ssh/log/run #!/bin/sh chown _runit-log:adm '/var/log/runit/ssh' chmod 750 '/var/log/runit/ssh' exec chpst -u _runit-log svlogd -tt '/var/log/runit/ssh' --:/etc/sv/ssh/log $ ls -ld /var/log/runit/ssh drwxr-x--- 2 root root 4096 Nov 10 2021 /var/log/runit/ssh <---logfolder owned by root:root --:/etc/sv/ssh/log $ sudo ls -lrt /var/log/runit/ssh/ | tail -4 total 0 <---no sign of logfiles --:/etc/sv/ssh/log $In reply to: Remote Access software
anticapitalista
3 ‘Native apps might be what you want
http://download.tuxfamily.org/antix/docs-antiX-19/FAQ/1-to-1_assistance.html
http://download.tuxfamily.org/antix/docs-antiX-19/FAQ/1-to-1_voice.html
http://download.tuxfamily.org/antix/docs-antiX-19/FAQ/ssh-conduit.html
Philosophers have interpreted the world in many ways; the point is to change it.
antiX with runit - leaner and meaner.
Hi antiXers
Last year while fumbling though an install of antiX21 64bit runit edition, I encountered this status messages in the output of ps command:
$ ps -feww| grep -i log root 1505 1 0 21:29 ? 00:00:02 runsvdir -P /etc/service log: log/./run: file does not exist chown: invalid user: ‘_runit-log:adm’ chpst: fatal: unknown user/group: _runit-logI still have this error in the antiX21 install from that time:
$ ps -feww|grep -i log root 1515 1 0 21:07 ? 00:00:01 runsvdir -P /etc/service log: '_runit-log:adm' chpst: fatal: unknown user/group: _runit-log runsv ssh: fatal: unable to start log/./run: file does not exist runsv acpi-support: fatal: unable to start ./run: file does not exist runsv sudo: fatal: unable to start ./run: file does not exist *** debug [daemon/old_main.c(156)]: selected 0 times chown: invalid user: '_runit-log:adm' chpst: fatal: unknown user/group: _runit-logI see this seems to have been mentioned during testing of one of the alphas?:
Reply To: antiX-bullseye-a2-runit_x64-full.iso availableI am busy tidying up an install of antiX21 386 runit on a Thinkpad a22m with Pentium 3, and it seems to have the same output in the ps – I am too lazy to try and copy it over, but it also complains about the unknown user/group in the chpst command.
I am wondering if this could be because runit is expecting to be able to change a process owner to id “_runit-log” ?
This id seems to be mentioned in this debian bug report: dh-runit: Change in runit loguser need transition code
Sample text “Runit recently changed the loguser from runit-log to _runit-log”Could this be a concern?
- This topic was modified 11 months ago by entropyagent.
- This topic was modified 11 months ago by entropyagent.
In reply to: Remote Access software
sybok
Hi,
I usually work with ‘ssh -X’ (‘ssh -XC’).
Though I have considered to use some GUI akin to some of the VNC variants.
You may try search the packages (and analyze the output), e.g.:
apt-cache search remote | grep -i connect
or more specific for the VNC
apt-cache search vnc | grep -i vncI suspect that not all of them may be installable due to systemd-related dependencies.
In reply to: mpv –hwdec=auto
subluminal
If you want max performance/best video quality, use height-profiles.lua. In your desktop I mean since it can handle stuff like ewa_lanczossharp.
I’m obsessed with quality and don’t particularly care if GPU uses high wattage so my github repo’s mpv.conf files reflect that. 😀 Change according to your own needs.
I also view a lot of old SD (480p) content so I like the HQ settings. Currently for 480p > 768p, I’m using FSR.glsl + (sometimes) LumaSharpenHook.glsl with cscale=bicubic_fast or (sometimes) ewa_lanczossharp/soft. FSR is fractional luma upscaler so no downscaling needed. Debanding is off with a keybinding setup to load/unload profile for debanding as I mentioned earlier.
I was thinking of buying a passively cooled GT 730 2Gb GDDR5 that’s on sale in amazon. About 60$. Do you still have screen-tearing with GT 710?
- This reply was modified 1 year, 1 month ago by subluminal.
- This reply was modified 1 year, 1 month ago by subluminal.
- This reply was modified 1 year, 1 month ago by subluminal.
In reply to: mpv –hwdec=auto
Use vo=gpu.
Also, forgot to add, IF you intend to view 2K/4K videos from youtube, youtube may not have avc1 for those content since vp9/av1 take much less space in their servers.
And for other sites, vcodecs may vary. avc1 may not be available. Change ytdl-format accordingly. GT 710 should be able handle vp9 even without hw decoding enabled. Also, 2K/4K content on 1080p monitor would require downscaling. Bilinear is worst and fastest. ewa_lanczossharp/soft very sharp. Too sharp for me. I use mitchell/catmull_rom.
- This reply was modified 1 year, 1 month ago by subluminal.
In reply to: mpv –hwdec=auto
@calciumsodium. Nice name btw. And yes, mpv checks vo=gpu 1st, if it’s available, mpv will use that by default (unless you specifically use vo=something else in mpv.conf. Not recommended though. In my experience, vo=gpu works best. When I had a Pentium IV cpu, in my previous ancient machine, mpv used vo=xv. Anything in the past 10-15 years (for instance, in my current ancient machine), mpv uses vo=gpu.
@moddit I left some rudimentary instructions in my github repo that I linked earlier. For someone completely new to mpv, it might be a touch harder to follow. I left out quite a few explanations because mpv is vast, not to mention youtube-dl and especially ffmpeg(filters). I use all 3 although I’m not as familiar with ffmpeg. It is even more vast. 🙂
It is also very hard to write a guide of sorts because most if not all the settings are hardware-dependent. So if someone has a RTX 3070 (laptop) GPU, he/she can go berserk and apply the highest quality settings. If someone has say a GTX 1650 (laptop) GPU he can still probably get the best quality settings IF used with height-profiles.lua which sets up conditional profiles based on video height. I used laptop GPU example because laptop GPUs are typically much less powerful than the desktop counterpart of the same model(because of heat constraints I guess). If someone has say i5 6th gen, FSRCNNX with ewa_lanczossharp+motion interpolation+debanding+KrigBilateral+SSimDownScaler+mitchell – this high quality combo might stretch the GPU too much. Also depends on video codec and Monitor/TV resolution of course.
If you have to compromise, use an average cscaler (say bicubic_fast). This is because Human eye cannot distinguish as well between crappy quality image containing chrome(color). Human eye is far more sensitive to Luma(greyscale). It probably points to our evolution. Most animals cannot see color. We also have far more rod cells(used to see luma) than cone cells(used for color detection). 20 times as many on average.
So use a crappy cscaler, and as good a scaler(luma) as your GPU can manage. The inbuilt deband option of mpv is great and versatile but eats a lot of resource. If not required, turn off debanding although depending on the source, it will reduce quality. I always use debanding myself.
mpv also has decent tscalers, fast but nowhere near as good as SVP. oversample or box(with sphinx tscale-window) is a good option.
hwdec=auto-copy is ok if your GPU is old-ish(or iGPU which isn’t vega). The vega iGPUs are awesome. Keep in mind, if you do hardware decoding, say vaapi, some ffmpeg filters won’t work. Like hue(use mpv’s –hue option then, it works). SVP won’t work.
If video is 480p and Monitor 1080p, 2X luma upscaling( ravu, FSRCNN, SSimSuperRes are all 2X luma upscaler) won’t be enoguh as 2*480=960. So either use luma upscalers twice(gpu intensive) or let mpv do upscaling from 960p to 1080p using scale=something option. I use ewa_lanczossharp but it’s also GPU intensive. spline64 is another less resource-hungry option. If you do use 2*2X glsl shaders, you then need to downscale using dscale=mitchell(best dscaler) or using SSimDownScaler(which also sharpens a little). Unless of course video is exactly 1080/4=270p.
Post is getting too long. As I said, too many things to explain. Ask me if you have questions.
Sorry, you said basic usage. To get started. Change if and when necessary:
vo=gpu
hwdec=auto-safe
fullscreen=yes
ytdl-format=bv*+ba/best # For yt-dlp
ytdl-raw-options=no-playlist=
script-opts-append=ytdl_hook-ytdl_path=/usr/local/bin/yt-dlp
video-sync=display-resample
scale=spline64
cscale=bilinear
deband=yes
interpolation=yes
tscale=oversample
dscale=mitchell
volume-max=150Also, add this in input.conf for voice clarity.
n cycle_values af loudnorm=I=-15 anull
- This reply was modified 1 year, 1 month ago by subluminal.
- This reply was modified 1 year, 1 month ago by subluminal.
- This reply was modified 1 year, 1 month ago by subluminal.
Forum for users of antiX Linux. Mean and Lean and Proudly anti-fascist.
