all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: ng0 <ng0@infotropique.org>
To: Leo Famulari <leo@famulari.name>
Cc: 28972@debbugs.gnu.org
Subject: [bug#28972] [PATCH] gnu: Remove unrar.
Date: Tue, 24 Oct 2017 19:07:43 +0000	[thread overview]
Message-ID: <20171024190743.t7yhrfcrltrjlbt4@abyayala> (raw)
In-Reply-To: <ee17f8e416f4697c68db5c49e53ecfb8c3271016.1508871154.git.leo@famulari.name>

[-- Attachment #1: Type: text/plain, Size: 1901 bytes --]

Leo Famulari transcribed 1.4K bytes:
> This package is abandoned upstream and contains serious bugs:
> 
> http://seclists.org/oss-sec/2017/q3/329
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14120
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14121
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14122

Oh oh. Do we have another package providing the binar(ies) and function
unrar has?

> * gnu/packages/compression.scm (unrar): Remove variable.
> ---
>  gnu/packages/compression.scm | 18 ------------------
>  1 file changed, 18 deletions(-)
> 
> diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm
> index a2bf3a186..c06c3c52e 100644
> --- a/gnu/packages/compression.scm
> +++ b/gnu/packages/compression.scm
> @@ -1285,24 +1285,6 @@ or junctions, and always follows hard links.")
>   archives from InstallShield installers.")
>      (license license:expat)))
>  
> -(define-public unrar
> -  (package
> -    (name "unrar")
> -    (version "0.0.1")
> -    (source (origin
> -              (method url-fetch)
> -              (uri (string-append
> -                    "http://download.gna.org/unrar/unrar-" version ".tar.gz"))
> -              (sha256
> -               (base32
> -                "1fgmjaxffj3shyxgy765jhxwz1cq88hk0fih1bsdzyvymyyz6mz7"))))
> -    (build-system gnu-build-system)
> -    (home-page "http://download.gna.org/unrar")
> -    (synopsis "RAR archive extraction tool")
> -    (description "Unrar is a simple command-line program to list and extract
> -RAR archives.")
> -    (license license:gpl2+)))
> -
>  (define-public zstd
>    (package
>      (name "zstd")
> -- 
> 2.14.3
> 
> 
> 
> 
> 

-- 
ng0
GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588
GnuPG: https://dist.ng0.infotropique.org/dist/keys/
https://www.infotropique.org https://ng0.infotropique.org

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

  reply	other threads:[~2017-10-24 19:09 UTC|newest]

Thread overview: 11+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-10-24 18:52 [bug#28972] [PATCH] gnu: Remove unrar Leo Famulari
2017-10-24 19:07 ` ng0 [this message]
2017-10-24 19:22   ` Adonay Felipe Nogueira
2017-10-24 19:29     ` ng0
2017-10-25 14:30     ` Ricardo Wurmus
2017-11-12 21:20       ` bug#28972: " Leo Famulari
2017-10-24 20:09   ` [bug#28972] " nee
2017-10-24 20:25     ` Leo Famulari
2017-10-24 20:40       ` ng0
2017-10-24 21:14         ` Leo Famulari
2017-10-24 20:36     ` ng0

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20171024190743.t7yhrfcrltrjlbt4@abyayala \
    --to=ng0@infotropique.org \
    --cc=28972@debbugs.gnu.org \
    --cc=leo@famulari.name \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.