From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:60427) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1e74ZW-0003VT-G5 for guix-patches@gnu.org; Tue, 24 Oct 2017 15:09:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1e74ZS-0004A5-FQ for guix-patches@gnu.org; Tue, 24 Oct 2017 15:09:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:51507) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1e74ZS-00049s-BB for guix-patches@gnu.org; Tue, 24 Oct 2017 15:09:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1e74ZR-0000TK-Sx for guix-patches@gnu.org; Tue, 24 Oct 2017 15:09:01 -0400 Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-Message-ID: Date: Tue, 24 Oct 2017 19:07:43 +0000 From: ng0 Message-ID: <20171024190743.t7yhrfcrltrjlbt4@abyayala> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="mcc2p674qkrupqk4" Content-Disposition: inline In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Leo Famulari Cc: 28972@debbugs.gnu.org --mcc2p674qkrupqk4 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Leo Famulari transcribed 1.4K bytes: > This package is abandoned upstream and contains serious bugs: >=20 > http://seclists.org/oss-sec/2017/q3/329 > https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14120 > https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14121 > https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14122 Oh oh. Do we have another package providing the binar(ies) and function unrar has? > * gnu/packages/compression.scm (unrar): Remove variable. > --- > gnu/packages/compression.scm | 18 ------------------ > 1 file changed, 18 deletions(-) >=20 > diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm > index a2bf3a186..c06c3c52e 100644 > --- a/gnu/packages/compression.scm > +++ b/gnu/packages/compression.scm > @@ -1285,24 +1285,6 @@ or junctions, and always follows hard links.") > archives from InstallShield installers.") > (license license:expat))) > =20 > -(define-public unrar > - (package > - (name "unrar") > - (version "0.0.1") > - (source (origin > - (method url-fetch) > - (uri (string-append > - "http://download.gna.org/unrar/unrar-" version ".tar= =2Egz")) > - (sha256 > - (base32 > - "1fgmjaxffj3shyxgy765jhxwz1cq88hk0fih1bsdzyvymyyz6mz7"))= )) > - (build-system gnu-build-system) > - (home-page "http://download.gna.org/unrar") > - (synopsis "RAR archive extraction tool") > - (description "Unrar is a simple command-line program to list and ext= ract > -RAR archives.") > - (license license:gpl2+))) > - > (define-public zstd > (package > (name "zstd") > --=20 > 2.14.3 >=20 >=20 >=20 >=20 >=20 --=20 ng0 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://dist.ng0.infotropique.org/dist/keys/ https://www.infotropique.org https://ng0.infotropique.org --mcc2p674qkrupqk4 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAlnvj38ACgkQ4i+bv+40 hYj75hAAmCTTVjSEVwd6/hmVLFm2UfvArG0oVAGHzdwvSV7xndlDemfK3P2zhU6L rWYydCpEv5zspnRY8ZCTs+jZmGjN4CUl3fOwwOAQ9VlTR6Y6ECGpGl2PaoiJtNbb 9x9OFfAbTkgnlOZgyepJ7UwHaRX3QQendrWymBTsTqDChluXxlLPJD4nT9Y8BfvH 1O6qZVcM2wOnnkvSZ1CDxaBHI/7FMUwS5+xW8E4umydj+aT+v+sqQERTXX4rHbmz U0WhpI+WBDVEWV+JyfzNwnPhlwogVJ27fPxwwWL+K3ZlJR67tofqjhEEf6wn4fnZ GH12E/8lvL/DjGvZgcmOKATZyDiMKebg0k/HND04V718keVL9vrSWlmFYuV4iE09 AfvvztFf+yFhl0BApuhFzwQHz2qqj2L9W6K6Y/lJrH/gQlry9zP95x5nnhIsAZE5 rer6yfLx/W2XSplQwaQul4kUS1sgBV9cfXLs4yDEK6YJP/1NKBZTWLZsWFqFex60 HU+ZB0MHPOoXx0EnNHHnzy8YEXBFGY4iNEEsykt9CRmw8XpBnfo/8rYgKNwkKAbm OmEltZ8i/ybVEQCm7lKzUsHdghkqC+Xym6drqOc+gw5MSkQSPJUeocCyyzqSLBp5 DxCaRzLMCEXmXVIngBl4rLomm8grbLYh+opiANwxqYoVjft/Sh0= =CX7k -----END PGP SIGNATURE----- --mcc2p674qkrupqk4--