From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:38519) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1e75wh-0000QI-Cs for guix-patches@gnu.org; Tue, 24 Oct 2017 16:37:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1e75wd-0002Ig-FY for guix-patches@gnu.org; Tue, 24 Oct 2017 16:37:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:51598) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1e75wd-0002Ia-AT for guix-patches@gnu.org; Tue, 24 Oct 2017 16:37:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1e75wb-0002v8-Sb for guix-patches@gnu.org; Tue, 24 Oct 2017 16:37:03 -0400 Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-Message-ID: Date: Tue, 24 Oct 2017 20:36:16 +0000 From: ng0 Message-ID: <20171024203616.6jvvi2srk7dj3yhf@abyayala> References: <20171024190743.t7yhrfcrltrjlbt4@abyayala> <8be5d04d-4ce1-3b8b-31df-a68bdff4da4e@cock.li> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="auqi4w3z3u5mkj3s" Content-Disposition: inline In-Reply-To: <8be5d04d-4ce1-3b8b-31df-a68bdff4da4e@cock.li> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: nee Cc: 28972@debbugs.gnu.org --auqi4w3z3u5mkj3s Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable nee transcribed 1.0K bytes: > Am 24.10.2017 um 21:07 schrieb ng0: > > Leo Famulari transcribed 1.4K bytes: > >> This package is abandoned upstream and contains serious bugs: > >> > >> http://seclists.org/oss-sec/2017/q3/329 > >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14120 > >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14121 > >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14122 > >=20 > > Oh oh. Do we have another package providing the binar(ies) and function > > unrar has? > >=20 > Is anything actually using unrar? >=20 > grep -r unrar in guix-git/gnu/ gives me no relevant hits There is a using and using. Some applications make use of unrar without us rewriting every occurence of "unrar" in them (for example 'mc'). > I tried to add it as input for the mcomix package when I packaged > mcomix, but it was unusable and couldn't open a single file. > I remember that it behaved weird and unexpected and sometimes asked for > passwords on stdin when the file wasn't encrypted. >=20 > It is very outdated and the rar standard it supports has been replaced > around 15 years ago. >=20 > The closest replacement that I know is libarchive, it's not a > commandline utility like unrar, but it is used in file-roller which can > open some rars. >=20 --=20 ng0 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://dist.ng0.infotropique.org/dist/keys/ https://www.infotropique.org https://ng0.infotropique.org --auqi4w3z3u5mkj3s Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAlnvpEAACgkQ4i+bv+40 hYhvixAAudJZMAEPXYMZ60cF+dC2cXj4Q7HA2ht0zV4kbF6pmSMJeU44fMbuM3wD jkUWiXKrO2hvsdbNy93kSzaLx3R6vCjAh+r3SJBsoFK3lypiUZzx9NCqM6RbLtep k4yEGBMEjzADk6RQG0b0Nwb1tTFlktIiYANhKNBgcSXPBp7bZu4VBb9R0Cf73vyi WPar6eSI226eJIjtzMof3in4qRkfCBOqjf5XweKs+Z0JszwMd/BM94q4n5HWJxhp IglfmMKoEBknuOqCLfVpQesclZ787FHJEEIiFb2e3M+VutHawLTnDdo6KCe81lRu ZXgVCPyt1B4L/ZFi1LDEF/PthXYriM8jyiVnmK206Yh3S0VPfmbBK6/t0ZLLyWii nEpijzUQWj2SNCeMLKThRPDQkXi6uEVop+BJPuXzipM9usXhubVbQ/qzPDKost+m 7YrYtZ6oNakqgApKEAyINfVBCUkiMVxzvHplv5ooS7qNttgDHm65M4Mrcll7n49M z//dlzau+Wq2zAtgbYW9vZ73uM9+OvsY+YjkVZrI2JtDeAT/IUyBXPUdOhcNt0Bx Ftmv6dfnaTnFXoBf/ILxyOPxHkNfNtIVZQd0HMIBp7njCiCVJPEGCG5YHnKMiWlb R5lBayew27ao67W7IzseHmcbNQ/PAljAlh/uwJFURtVW+VmyDYw= =Js9z -----END PGP SIGNATURE----- --auqi4w3z3u5mkj3s--