From unknown Fri Aug 15 16:22:25 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 24 Oct 2017 18:53:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 28972 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 28972@debbugs.gnu.org X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.150887117432431 (code B ref -1); Tue, 24 Oct 2017 18:53:02 +0000 Received: (at submit) by debbugs.gnu.org; 24 Oct 2017 18:52:54 +0000 Received: from localhost ([127.0.0.1]:60171 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e74Jq-0008R0-8I for submit@debbugs.gnu.org; Tue, 24 Oct 2017 14:52:54 -0400 Received: from eggs.gnu.org ([208.118.235.92]:37007) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e74Jn-0008Qh-FN for submit@debbugs.gnu.org; Tue, 24 Oct 2017 14:52:52 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1e74Jh-0004dF-0x for submit@debbugs.gnu.org; Tue, 24 Oct 2017 14:52:46 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:43486) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1e74Jg-0004d7-Tv for submit@debbugs.gnu.org; Tue, 24 Oct 2017 14:52:44 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:56206) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1e74Jf-000157-IQ for guix-patches@gnu.org; Tue, 24 Oct 2017 14:52:44 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1e74Jb-0004bF-7G for guix-patches@gnu.org; Tue, 24 Oct 2017 14:52:43 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:56445) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1e74Ja-0004as-Ve for guix-patches@gnu.org; Tue, 24 Oct 2017 14:52:39 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 208CF20DC6; Tue, 24 Oct 2017 14:52:38 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Tue, 24 Oct 2017 14:52:38 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:message-id:subject:to:x-me-sender:x-me-sender :x-sasl-enc; s=mesmtp; bh=33VsrYTtdoQgX7t4Nkdy4H4tkf1M0iaBMr9U50 lJfOc=; b=riu97SBssHFwNCD1/OE6FfE1tW0EuiOG2IxDoIgM8aiGbcv9USbXu1 R35Cwg8caiNzR/cnNNj7w6Ciijgl5fDcVfRr8jExTKifhYqRMfeCMZkHqv0BFnvh eekO8SHueP0xq7HXbg+RlAlMeL3t0hyhu6S3T5G2L6ghDHxYS43uM= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=date:from:message-id:subject:to :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=33VsrYTtdoQgX7t4N kdy4H4tkf1M0iaBMr9U50lJfOc=; b=V70g64Z6Wp/R6q17ow9OGV/kBtXWNyO0i mY6xJqsuHxx4MhUyFvxPGg8qUZ1xtoDaPBTWX0/ul5KA4mJdIbOsayyHcjJleweQ yuFtUOTJBmIQBVVm/8O+laV6Wy+EOVADngi78F19K+nDP0pP0O2jhIEs497f+c+Y Lz2BUNMBzM/QYuhZN1/rcrA1yNRrcYP589UvWAorIf61ATIVSwcaQPofLloh2RQI Svp+k7s7bRJmCRTUUHtjv225c0wcoNYDmAVbSPT2u5EAU5nS/bBL/5SRdaxFOA8g uDv42tWIF9svpzBjmcir+9bMFGaa1zd33p2LEIqi/BAuBqQo0Rhyw== X-ME-Sender: Received: from jasmine.lan (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id 967777F9A9 for ; Tue, 24 Oct 2017 14:52:37 -0400 (EDT) From: Leo Famulari Date: Tue, 24 Oct 2017 14:52:34 -0400 Message-Id: X-Mailer: git-send-email 2.14.3 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.1 (----) This package is abandoned upstream and contains serious bugs: http://seclists.org/oss-sec/2017/q3/329 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14120 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14121 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14122 * gnu/packages/compression.scm (unrar): Remove variable. --- gnu/packages/compression.scm | 18 ------------------ 1 file changed, 18 deletions(-) diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm index a2bf3a186..c06c3c52e 100644 --- a/gnu/packages/compression.scm +++ b/gnu/packages/compression.scm @@ -1285,24 +1285,6 @@ or junctions, and always follows hard links.") archives from InstallShield installers.") (license license:expat))) -(define-public unrar - (package - (name "unrar") - (version "0.0.1") - (source (origin - (method url-fetch) - (uri (string-append - "http://download.gna.org/unrar/unrar-" version ".tar.gz")) - (sha256 - (base32 - "1fgmjaxffj3shyxgy765jhxwz1cq88hk0fih1bsdzyvymyyz6mz7")))) - (build-system gnu-build-system) - (home-page "http://download.gna.org/unrar") - (synopsis "RAR archive extraction tool") - (description "Unrar is a simple command-line program to list and extract -RAR archives.") - (license license:gpl2+))) - (define-public zstd (package (name "zstd") -- 2.14.3 From unknown Fri Aug 15 16:22:25 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-From: ng0 Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 24 Oct 2017 19:09:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28972 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Leo Famulari Cc: 28972@debbugs.gnu.org Received: via spool by 28972-submit@debbugs.gnu.org id=B28972.15088720811715 (code B ref 28972); Tue, 24 Oct 2017 19:09:01 +0000 Received: (at 28972) by debbugs.gnu.org; 24 Oct 2017 19:08:01 +0000 Received: from localhost ([127.0.0.1]:60188 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e74YR-0000RU-FM for submit@debbugs.gnu.org; Tue, 24 Oct 2017 15:08:01 -0400 Received: from aibo.runbox.com ([91.220.196.211]:52978) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e74YO-0000RI-PA for 28972@debbugs.gnu.org; Tue, 24 Oct 2017 15:07:57 -0400 Received: from [10.9.9.211] (helo=mailfront11.runbox.com) by mailtransmit03.runbox with esmtp (Exim 4.86_2) (envelope-from ) id 1e74YM-0001Nn-65; Tue, 24 Oct 2017 21:07:54 +0200 Received: from 62-210-37-82.rev.poneytelecom.eu ([62.210.37.82] helo=localhost) by mailfront11.runbox.com with esmtpsa (uid:892961 ) (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) id 1e74YH-0003KW-7W; Tue, 24 Oct 2017 21:07:50 +0200 Date: Tue, 24 Oct 2017 19:07:43 +0000 From: ng0 Message-ID: <20171024190743.t7yhrfcrltrjlbt4@abyayala> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="mcc2p674qkrupqk4" Content-Disposition: inline In-Reply-To: X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --mcc2p674qkrupqk4 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Leo Famulari transcribed 1.4K bytes: > This package is abandoned upstream and contains serious bugs: >=20 > http://seclists.org/oss-sec/2017/q3/329 > https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14120 > https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14121 > https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14122 Oh oh. Do we have another package providing the binar(ies) and function unrar has? > * gnu/packages/compression.scm (unrar): Remove variable. > --- > gnu/packages/compression.scm | 18 ------------------ > 1 file changed, 18 deletions(-) >=20 > diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm > index a2bf3a186..c06c3c52e 100644 > --- a/gnu/packages/compression.scm > +++ b/gnu/packages/compression.scm > @@ -1285,24 +1285,6 @@ or junctions, and always follows hard links.") > archives from InstallShield installers.") > (license license:expat))) > =20 > -(define-public unrar > - (package > - (name "unrar") > - (version "0.0.1") > - (source (origin > - (method url-fetch) > - (uri (string-append > - "http://download.gna.org/unrar/unrar-" version ".tar= =2Egz")) > - (sha256 > - (base32 > - "1fgmjaxffj3shyxgy765jhxwz1cq88hk0fih1bsdzyvymyyz6mz7"))= )) > - (build-system gnu-build-system) > - (home-page "http://download.gna.org/unrar") > - (synopsis "RAR archive extraction tool") > - (description "Unrar is a simple command-line program to list and ext= ract > -RAR archives.") > - (license license:gpl2+))) > - > (define-public zstd > (package > (name "zstd") > --=20 > 2.14.3 >=20 >=20 >=20 >=20 >=20 --=20 ng0 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://dist.ng0.infotropique.org/dist/keys/ https://www.infotropique.org https://ng0.infotropique.org --mcc2p674qkrupqk4 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAlnvj38ACgkQ4i+bv+40 hYj75hAAmCTTVjSEVwd6/hmVLFm2UfvArG0oVAGHzdwvSV7xndlDemfK3P2zhU6L rWYydCpEv5zspnRY8ZCTs+jZmGjN4CUl3fOwwOAQ9VlTR6Y6ECGpGl2PaoiJtNbb 9x9OFfAbTkgnlOZgyepJ7UwHaRX3QQendrWymBTsTqDChluXxlLPJD4nT9Y8BfvH 1O6qZVcM2wOnnkvSZ1CDxaBHI/7FMUwS5+xW8E4umydj+aT+v+sqQERTXX4rHbmz U0WhpI+WBDVEWV+JyfzNwnPhlwogVJ27fPxwwWL+K3ZlJR67tofqjhEEf6wn4fnZ GH12E/8lvL/DjGvZgcmOKATZyDiMKebg0k/HND04V718keVL9vrSWlmFYuV4iE09 AfvvztFf+yFhl0BApuhFzwQHz2qqj2L9W6K6Y/lJrH/gQlry9zP95x5nnhIsAZE5 rer6yfLx/W2XSplQwaQul4kUS1sgBV9cfXLs4yDEK6YJP/1NKBZTWLZsWFqFex60 HU+ZB0MHPOoXx0EnNHHnzy8YEXBFGY4iNEEsykt9CRmw8XpBnfo/8rYgKNwkKAbm OmEltZ8i/ybVEQCm7lKzUsHdghkqC+Xym6drqOc+gw5MSkQSPJUeocCyyzqSLBp5 DxCaRzLMCEXmXVIngBl4rLomm8grbLYh+opiANwxqYoVjft/Sh0= =CX7k -----END PGP SIGNATURE----- --mcc2p674qkrupqk4-- From unknown Fri Aug 15 16:22:25 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-From: Adonay Felipe Nogueira Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 24 Oct 2017 19:23:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28972 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 28972@debbugs.gnu.org X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.15088729723226 (code B ref -1); Tue, 24 Oct 2017 19:23:02 +0000 Received: (at submit) by debbugs.gnu.org; 24 Oct 2017 19:22:52 +0000 Received: from localhost ([127.0.0.1]:60196 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e74mk-0000pq-Jt for submit@debbugs.gnu.org; Tue, 24 Oct 2017 15:22:52 -0400 Received: from eggs.gnu.org ([208.118.235.92]:46149) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e74mi-0000pb-DC for submit@debbugs.gnu.org; Tue, 24 Oct 2017 15:22:44 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1e74mc-0008I7-19 for submit@debbugs.gnu.org; Tue, 24 Oct 2017 15:22:39 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50 autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:51479) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1e74mb-0008Ht-Tk for submit@debbugs.gnu.org; Tue, 24 Oct 2017 15:22:37 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:37101) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1e74ma-0005nw-FG for guix-patches@gnu.org; Tue, 24 Oct 2017 15:22:37 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1e74mX-0008Ev-8Q for guix-patches@gnu.org; Tue, 24 Oct 2017 15:22:36 -0400 Received: from relay4-d.mail.gandi.net ([217.70.183.196]:48097) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1e74mX-0008DZ-2c for guix-patches@gnu.org; Tue, 24 Oct 2017 15:22:33 -0400 X-Originating-IP: 181.221.150.51 Received: from adfeno-pc1 (unknown [181.221.150.51]) (Authenticated sender: adfeno@hyperbola.info) by relay4-d.mail.gandi.net (Postfix) with ESMTPSA id 5E9F51720A4 for ; Tue, 24 Oct 2017 21:22:29 +0200 (CEST) From: Adonay Felipe Nogueira References: <20171024190743.t7yhrfcrltrjlbt4@abyayala> Date: Tue, 24 Oct 2017 17:22:27 -0200 In-Reply-To: <20171024190743.t7yhrfcrltrjlbt4@abyayala> (ng0@infotropique.org's message of "Tue, 24 Oct 2017 19:07:43 +0000") Message-ID: <874lqouz9o.fsf@hyperbola.info> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.9 (/) Perhaps The Unarchiver (unar, no R in the middle)? See ng0 writes: > Leo Famulari transcribed 1.4K bytes: >> This package is abandoned upstream and contains serious bugs: >>=20 >> http://seclists.org/oss-sec/2017/q3/329 >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14120 >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14121 >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14122 > > Oh oh. Do we have another package providing the binar(ies) and function > unrar has? > >> * gnu/packages/compression.scm (unrar): Remove variable. >> --- >> gnu/packages/compression.scm | 18 ------------------ >> 1 file changed, 18 deletions(-) >>=20 >> diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm >> index a2bf3a186..c06c3c52e 100644 >> --- a/gnu/packages/compression.scm >> +++ b/gnu/packages/compression.scm >> @@ -1285,24 +1285,6 @@ or junctions, and always follows hard links.") >> archives from InstallShield installers.") >> (license license:expat))) >>=20=20 >> -(define-public unrar >> - (package >> - (name "unrar") >> - (version "0.0.1") >> - (source (origin >> - (method url-fetch) >> - (uri (string-append >> - "http://download.gna.org/unrar/unrar-" version ".ta= r.gz")) >> - (sha256 >> - (base32 >> - "1fgmjaxffj3shyxgy765jhxwz1cq88hk0fih1bsdzyvymyyz6mz7")= ))) >> - (build-system gnu-build-system) >> - (home-page "http://download.gna.org/unrar") >> - (synopsis "RAR archive extraction tool") >> - (description "Unrar is a simple command-line program to list and ex= tract >> -RAR archives.") >> - (license license:gpl2+))) >> - >> (define-public zstd >> (package >> (name "zstd") >> --=20 >> 2.14.3 >>=20 >>=20 >>=20 >>=20 >>=20 --=20 - https://libreplanet.org/wiki/User:Adfeno - Palestrante e consultor sobre /software/ livre (n=C3=A3o confundir com gratis). - "WhatsApp"? Ele n=C3=A3o =C3=A9 livre. Por favor, veja formas de se comun= icar instantaneamente comigo no endere=C3=A7o abaixo. - Contato: https://libreplanet.org/wiki/User:Adfeno#vCard - Arquivos comuns aceitos (apenas sem DRM): Corel Draw, Microsoft Office, MP3, MP4, WMA, WMV. - Arquivos comuns aceitos e enviados: CSV, GNU Dia, GNU Emacs Org, GNU GIMP, Inkscape SVG, JPG, LibreOffice (padr=C3=A3o ODF), OGG, OPUS, PDF (apenas sem DRM), PNG, TXT, WEBM. From unknown Fri Aug 15 16:22:25 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-From: ng0 Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 24 Oct 2017 19:31:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28972 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Adonay Felipe Nogueira Cc: 28972@debbugs.gnu.org Received: via spool by 28972-submit@debbugs.gnu.org id=B28972.15088734024018 (code B ref 28972); Tue, 24 Oct 2017 19:31:02 +0000 Received: (at 28972) by debbugs.gnu.org; 24 Oct 2017 19:30:02 +0000 Received: from localhost ([127.0.0.1]:60205 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e74tg-00012N-KY for submit@debbugs.gnu.org; Tue, 24 Oct 2017 15:30:01 -0400 Received: from aibo.runbox.com ([91.220.196.211]:44138) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e74td-00012E-JV for 28972@debbugs.gnu.org; Tue, 24 Oct 2017 15:29:54 -0400 Received: from [10.9.9.212] (helo=mailfront12.runbox.com) by mailtransmit02.runbox with esmtp (Exim 4.86_2) (envelope-from ) id 1e74tc-0004vp-Bf; Tue, 24 Oct 2017 21:29:52 +0200 Received: from dslb-092-073-191-082.092.073.pools.vodafone-ip.de ([92.73.191.82] helo=localhost) by mailfront12.runbox.com with esmtpsa (uid:892961 ) (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) id 1e74tT-0001xE-Bu; Tue, 24 Oct 2017 21:29:43 +0200 Date: Tue, 24 Oct 2017 19:29:41 +0000 From: ng0 Message-ID: <20171024192941.4vhdyih3hwrbkifp@abyayala> References: <20171024190743.t7yhrfcrltrjlbt4@abyayala> <874lqouz9o.fsf@hyperbola.info> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="kpk6d3fkc43frehn" Content-Disposition: inline In-Reply-To: <874lqouz9o.fsf@hyperbola.info> X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) --kpk6d3fkc43frehn Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Adonay Felipe Nogueira transcribed 2.4K bytes: > Perhaps The Unarchiver (unar, no R in the middle)? >=20 > See Well it exists, but we certainly don't have it in Guix. I want to have this packaged first before we drop unrar to avoid any sudden surprises. > ng0 writes: >=20 > > Leo Famulari transcribed 1.4K bytes: > >> This package is abandoned upstream and contains serious bugs: > >>=20 > >> http://seclists.org/oss-sec/2017/q3/329 > >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14120 > >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14121 > >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14122 > > > > Oh oh. Do we have another package providing the binar(ies) and function > > unrar has? > > > >> * gnu/packages/compression.scm (unrar): Remove variable. > >> --- > >> gnu/packages/compression.scm | 18 ------------------ > >> 1 file changed, 18 deletions(-) > >>=20 > >> diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.s= cm > >> index a2bf3a186..c06c3c52e 100644 > >> --- a/gnu/packages/compression.scm > >> +++ b/gnu/packages/compression.scm > >> @@ -1285,24 +1285,6 @@ or junctions, and always follows hard links.") > >> archives from InstallShield installers.") > >> (license license:expat))) > >> =20 > >> -(define-public unrar > >> - (package > >> - (name "unrar") > >> - (version "0.0.1") > >> - (source (origin > >> - (method url-fetch) > >> - (uri (string-append > >> - "http://download.gna.org/unrar/unrar-" version ".= tar.gz")) > >> - (sha256 > >> - (base32 > >> - "1fgmjaxffj3shyxgy765jhxwz1cq88hk0fih1bsdzyvymyyz6mz7= ")))) > >> - (build-system gnu-build-system) > >> - (home-page "http://download.gna.org/unrar") > >> - (synopsis "RAR archive extraction tool") > >> - (description "Unrar is a simple command-line program to list and = extract > >> -RAR archives.") > >> - (license license:gpl2+))) > >> - > >> (define-public zstd > >> (package > >> (name "zstd") > >> --=20 > >> 2.14.3 > >>=20 > >>=20 > >>=20 > >>=20 > >>=20 >=20 > --=20 > - https://libreplanet.org/wiki/User:Adfeno > - Palestrante e consultor sobre /software/ livre (n=C3=A3o confundir com > gratis). > - "WhatsApp"? Ele n=C3=A3o =C3=A9 livre. Por favor, veja formas de se com= unicar > instantaneamente comigo no endere=C3=A7o abaixo. > - Contato: https://libreplanet.org/wiki/User:Adfeno#vCard > - Arquivos comuns aceitos (apenas sem DRM): Corel Draw, Microsoft > Office, MP3, MP4, WMA, WMV. > - Arquivos comuns aceitos e enviados: CSV, GNU Dia, GNU Emacs Org, GNU > GIMP, Inkscape SVG, JPG, LibreOffice (padr=C3=A3o ODF), OGG, OPUS, PDF > (apenas sem DRM), PNG, TXT, WEBM. >=20 >=20 >=20 >=20 --=20 ng0 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://dist.ng0.infotropique.org/dist/keys/ https://www.infotropique.org https://ng0.infotropique.org --kpk6d3fkc43frehn Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAlnvlKUACgkQ4i+bv+40 hYj29RAAqiU8yGyT1GzcbUj8OKD4LfJBSb91kViUSVloke4BtcJKn00OL5eDIYau CnMXqKGLq1Gqx0sGjY9fNl0/yhBbWQWNu3nj7j89FMBJDkZBHYl1K9TWep9A2Op0 v+qYHKKc8kgqisTxEm32u7AuNh/hmbrNd6N6T5zskYB5qmvkCGHAkOD2hk1lCGJs QycPp58XA2giUMQuZOKhAwtnfbrGxGN4xvNZKc2gIK1TlonvLoJfOPAdj6wZ0/k7 jtBMzUJjdZk5WWmWHxLifL3BpnqdbbD9hoR35yl1xBqqhnOXgLuEfH7HjoBE7UDu voaDJNcDEfLmv7nOAm7IETz5u2A45lAHuUTZa78eXXyupMUy3FcnJladqPY8yklE 1zT/5WUqRSU/vXsD5h+bVSOJPgEYDcxp8tOaENQg9yrgaspCbsHv3STmmfxw/muC X+0L0FbejUvZE+xpYY66rQtLq443xSoLKPXAEi7nP+SXjJqjaxdFIWEitWZ4wvBE 9EVZm+dS0t0vr5mb4copxurbsvZmGH8Q7Z+rXeRKl5uyl/pctTHJBRfKL5CRgg3L ROp39GtRK8103i0GkS334tI2SGzFepIm0dK+R772pZq/XQXs6naUoxYzE7EDYZNH LLYGcPWVBs1eWQJ0MfmrO8f1SZCS937CIXUPqY+xGCm3TPGfkzk= =eW0e -----END PGP SIGNATURE----- --kpk6d3fkc43frehn-- From unknown Fri Aug 15 16:22:25 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-From: nee Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 24 Oct 2017 20:10:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28972 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: ng0 Cc: 28972@debbugs.gnu.org Received: via spool by 28972-submit@debbugs.gnu.org id=B28972.15088757488123 (code B ref 28972); Tue, 24 Oct 2017 20:10:01 +0000 Received: (at 28972) by debbugs.gnu.org; 24 Oct 2017 20:09:08 +0000 Received: from localhost ([127.0.0.1]:60233 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e75Vc-00026x-8H for submit@debbugs.gnu.org; Tue, 24 Oct 2017 16:09:08 -0400 Received: from cock.li ([185.100.85.212]:60998) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e75Va-00026J-L9 for 28972@debbugs.gnu.org; Tue, 24 Oct 2017 16:09:07 -0400 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on cock.li X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05 shortcircuit=_SCTYPE_ autolearn=disabled version=3.4.1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cock.li; s=mail; t=1508875739; bh=yByTdnaQnhL086984yRMAnsT0zETZi34vdC/RONpcR4=; h=Subject:To:References:From:Cc:Date:In-Reply-To:From; b=UwGSJPrcaSDzjBbEm5OC+1KumdVbtf+UWimgwBqBrSYk8M8AsielkzlC+fLVIUsMF beAl810QwDwMpBngIFVMbZwsOHQne5N89c/sXg0uJJXmPYm2ygjw+A72WaKAg30CA2 LrwJPAq5YtFDMgCr0CZc7MKB6MuD8fPhDW4mUbOzQ3JsR5w/SBKEH2RyROy5zIJVdW bZyLivzFgWdK7T4SdRHAp0T1/ig2BhLwoBjsBHErxwjc+FoXFQMqPOMoAJD7HM7jRy qUSdYjDjcZuvSOY9l59JDf9qCu+XY86HnbWV9MgwO06uDjBX/0g2eyOMjkOdWEVl5e yh//FBfmMTRAQ== References: <20171024190743.t7yhrfcrltrjlbt4@abyayala> From: nee Message-ID: <8be5d04d-4ce1-3b8b-31df-a68bdff4da4e@cock.li> Date: Tue, 24 Oct 2017 22:09:00 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <20171024190743.t7yhrfcrltrjlbt4@abyayala> Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: 8bit X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) Am 24.10.2017 um 21:07 schrieb ng0: > Leo Famulari transcribed 1.4K bytes: >> This package is abandoned upstream and contains serious bugs: >> >> http://seclists.org/oss-sec/2017/q3/329 >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14120 >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14121 >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14122 > > Oh oh. Do we have another package providing the binar(ies) and function > unrar has? > Is anything actually using unrar? grep -r unrar in guix-git/gnu/ gives me no relevant hits I tried to add it as input for the mcomix package when I packaged mcomix, but it was unusable and couldn't open a single file. I remember that it behaved weird and unexpected and sometimes asked for passwords on stdin when the file wasn't encrypted. It is very outdated and the rar standard it supports has been replaced around 15 years ago. The closest replacement that I know is libarchive, it's not a commandline utility like unrar, but it is used in file-roller which can open some rars. From unknown Fri Aug 15 16:22:25 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 24 Oct 2017 20:26:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28972 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: nee Cc: ng0 , 28972@debbugs.gnu.org Received: via spool by 28972-submit@debbugs.gnu.org id=B28972.150887675710012 (code B ref 28972); Tue, 24 Oct 2017 20:26:01 +0000 Received: (at 28972) by debbugs.gnu.org; 24 Oct 2017 20:25:57 +0000 Received: from localhost ([127.0.0.1]:60263 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e75lt-0002bP-1B for submit@debbugs.gnu.org; Tue, 24 Oct 2017 16:25:57 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:45645) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e75lq-0002bH-Ki for 28972@debbugs.gnu.org; Tue, 24 Oct 2017 16:25:55 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 2213120CD1; Tue, 24 Oct 2017 16:25:54 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute4.internal (MEProxy); Tue, 24 Oct 2017 16:25:54 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc; s= mesmtp; bh=uPbxG+3Ap+7CF+uVbFrulhaODNqfpB+qIq7qQ9aE0OQ=; b=UicOQ D0ViCXakT/fE47NC1QaNTV6ukHK3OZmQrZ/DUgC/mx+tmIAtqHHGUSctl7DVkap8 bYJrDeAXp4CjmiVlLhJE6gFRRhfHSoYZDpwe5UP0En/06f3+1uwSZqH3EnlinBCF Nh3FmeJQuGN3PvsQU5h3VNMQv/ZfWTtlNA1V78= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; bh=uPbxG+3Ap+7CF+uVbFrulhaODNqfp B+qIq7qQ9aE0OQ=; b=Pxo1EItov5vwQpIK4itF4ctqR9CY8Xa0hFG0G90BksxNY j2YdPfslUlB9EtsUFzYE52eXVvQ1xt8detwh1No9sNkd/G6NaLxF3I+4XR4nXYQ+ SQV5RuqFUNre/tPHa2DL7uG6+YOQ96Yv8itw4U7K8q+NIqkHIaF+Vd8gWcF2Lh7B KNMM0hri2y2/b9DVmcQniWIvgXT9vs8GVZp00hiyv5gbmIPOiwSKcAfzaUsB8Tg8 9fLhQnKnIOvjkbwgKSFPttvoDRqHitKw23pstz4DJe6qYm6+zaTvxRae2PZrjFl6 /Pbb0uMdQvKVQXn3NuUTqt091mo7g23ZZx1GDUECg== X-ME-Sender: Received: from localhost (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id CB643247AD; Tue, 24 Oct 2017 16:25:53 -0400 (EDT) Date: Tue, 24 Oct 2017 16:25:52 -0400 From: Leo Famulari Message-ID: <20171024202552.GA4719@jasmine.lan> References: <20171024190743.t7yhrfcrltrjlbt4@abyayala> <8be5d04d-4ce1-3b8b-31df-a68bdff4da4e@cock.li> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="9jxsPFA5p3P2qPhR" Content-Disposition: inline In-Reply-To: <8be5d04d-4ce1-3b8b-31df-a68bdff4da4e@cock.li> User-Agent: Mutt/1.9.1 (2017-09-22) X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --9jxsPFA5p3P2qPhR Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Oct 24, 2017 at 10:09:00PM +0200, nee wrote: > Am 24.10.2017 um 21:07 schrieb ng0: > > Leo Famulari transcribed 1.4K bytes: > >> This package is abandoned upstream and contains serious bugs: > >=20 > > Oh oh. Do we have another package providing the binar(ies) and function > > unrar has? > >=20 > Is anything actually using unrar? >=20 > grep -r unrar in guix-git/gnu/ gives me no relevant hits >=20 > I tried to add it as input for the mcomix package when I packaged > mcomix, but it was unusable and couldn't open a single file. > I remember that it behaved weird and unexpected and sometimes asked for > passwords on stdin when the file wasn't encrypted. >=20 > It is very outdated and the rar standard it supports has been replaced > around 15 years ago. Agreed, I don't know if this software is useful anymore, and it isn't used by any of our packages. > The closest replacement that I know is libarchive, it's not a > commandline utility like unrar, but it is used in file-roller which can > open some rars. There is also the Python module packaged in Guix as python-rarfile. Is anyone using this unrar package? Please speak up. And, please check if file-roller will work for you. --9jxsPFA5p3P2qPhR Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlnvodAACgkQJkb6MLrK fwgrvQ//TErt/q4D9FNbeVhz1ax7f8duBQy3+8aBjCJlUpYcTQqsG4xXwcXJsO/x LKJAGxBT2lQyTHZn0QXgkyjcuZFhDLUWkljYXUvEu+5Sdl/jIOgQoiLO6a2n+pLP f2UUNkcB7NWgzgp9CfasJXBE6n0Iaraq4g9vXMvkbNxpT2KhrOiyZA9e5xxM3kPo obS1q6nQjYErsFdOQrL68BRRr3ih2+gPIwcuaBbI5eqtdvoAr9qBrD5fmod5EKr8 aLVAlOAY5y6cJTJlQeDNCO55KqAqnuB2hk2iFOUYfOG6LxrffuoF2c/q63vfOfRb Wl5SkwENpbqqO6mPCYfahJWJbiWIKJWgo1D5cKedBcJGsVUB7pUKycAznzb5/v5K Ha1F7u/aekMmq1bnEcZUAkI4n+q/ewNDmNcMGa25k2TlfE2nc8EuZxl/WQ7pOiqY TKhaGWEluoUtllrHa+9VJ/fKK6xLoxZ7tLw62Rrmsz3i8TFDdKWXrvwGSU2ayDa2 MOqIhQLvyq0ptLiQqF1s5pNt5esOHZ+uCMpLUDutrK9x761FtdJyx4ZnrbyE1sjv IETnuukl7Qgep4f7voaR5MNW1lzsUS3I5upce5vABQ+cP5mHl2+9hMsiCcwSO7II /SrtBNOHArnWBNIAbv+65CuZpTb2Wq2jAlCRjE1F0GzAxFcAlZU= =bEBZ -----END PGP SIGNATURE----- --9jxsPFA5p3P2qPhR-- From unknown Fri Aug 15 16:22:25 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-From: ng0 Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 24 Oct 2017 20:37:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28972 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: nee Cc: ng0 , 28972@debbugs.gnu.org Received: via spool by 28972-submit@debbugs.gnu.org id=B28972.150887739611189 (code B ref 28972); Tue, 24 Oct 2017 20:37:01 +0000 Received: (at 28972) by debbugs.gnu.org; 24 Oct 2017 20:36:36 +0000 Received: from localhost ([127.0.0.1]:60279 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e75w9-0002uI-G8 for submit@debbugs.gnu.org; Tue, 24 Oct 2017 16:36:33 -0400 Received: from aibo.runbox.com ([91.220.196.211]:48370) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e75w8-0002u8-9f for 28972@debbugs.gnu.org; Tue, 24 Oct 2017 16:36:32 -0400 Received: from [10.9.9.212] (helo=mailfront12.runbox.com) by mailtransmit02.runbox with esmtp (Exim 4.86_2) (envelope-from ) id 1e75w6-0002AW-Lz; Tue, 24 Oct 2017 22:36:30 +0200 Received: from tor3.digineo.de ([185.117.215.9] helo=localhost) by mailfront12.runbox.com with esmtpsa (uid:892961 ) (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) id 1e75vy-0001br-1h; Tue, 24 Oct 2017 22:36:22 +0200 Date: Tue, 24 Oct 2017 20:36:16 +0000 From: ng0 Message-ID: <20171024203616.6jvvi2srk7dj3yhf@abyayala> References: <20171024190743.t7yhrfcrltrjlbt4@abyayala> <8be5d04d-4ce1-3b8b-31df-a68bdff4da4e@cock.li> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="auqi4w3z3u5mkj3s" Content-Disposition: inline In-Reply-To: <8be5d04d-4ce1-3b8b-31df-a68bdff4da4e@cock.li> X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --auqi4w3z3u5mkj3s Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable nee transcribed 1.0K bytes: > Am 24.10.2017 um 21:07 schrieb ng0: > > Leo Famulari transcribed 1.4K bytes: > >> This package is abandoned upstream and contains serious bugs: > >> > >> http://seclists.org/oss-sec/2017/q3/329 > >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14120 > >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14121 > >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14122 > >=20 > > Oh oh. Do we have another package providing the binar(ies) and function > > unrar has? > >=20 > Is anything actually using unrar? >=20 > grep -r unrar in guix-git/gnu/ gives me no relevant hits There is a using and using. Some applications make use of unrar without us rewriting every occurence of "unrar" in them (for example 'mc'). > I tried to add it as input for the mcomix package when I packaged > mcomix, but it was unusable and couldn't open a single file. > I remember that it behaved weird and unexpected and sometimes asked for > passwords on stdin when the file wasn't encrypted. >=20 > It is very outdated and the rar standard it supports has been replaced > around 15 years ago. >=20 > The closest replacement that I know is libarchive, it's not a > commandline utility like unrar, but it is used in file-roller which can > open some rars. >=20 --=20 ng0 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://dist.ng0.infotropique.org/dist/keys/ https://www.infotropique.org https://ng0.infotropique.org --auqi4w3z3u5mkj3s Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAlnvpEAACgkQ4i+bv+40 hYhvixAAudJZMAEPXYMZ60cF+dC2cXj4Q7HA2ht0zV4kbF6pmSMJeU44fMbuM3wD jkUWiXKrO2hvsdbNy93kSzaLx3R6vCjAh+r3SJBsoFK3lypiUZzx9NCqM6RbLtep k4yEGBMEjzADk6RQG0b0Nwb1tTFlktIiYANhKNBgcSXPBp7bZu4VBb9R0Cf73vyi WPar6eSI226eJIjtzMof3in4qRkfCBOqjf5XweKs+Z0JszwMd/BM94q4n5HWJxhp IglfmMKoEBknuOqCLfVpQesclZ787FHJEEIiFb2e3M+VutHawLTnDdo6KCe81lRu ZXgVCPyt1B4L/ZFi1LDEF/PthXYriM8jyiVnmK206Yh3S0VPfmbBK6/t0ZLLyWii nEpijzUQWj2SNCeMLKThRPDQkXi6uEVop+BJPuXzipM9usXhubVbQ/qzPDKost+m 7YrYtZ6oNakqgApKEAyINfVBCUkiMVxzvHplv5ooS7qNttgDHm65M4Mrcll7n49M z//dlzau+Wq2zAtgbYW9vZ73uM9+OvsY+YjkVZrI2JtDeAT/IUyBXPUdOhcNt0Bx Ftmv6dfnaTnFXoBf/ILxyOPxHkNfNtIVZQd0HMIBp7njCiCVJPEGCG5YHnKMiWlb R5lBayew27ao67W7IzseHmcbNQ/PAljAlh/uwJFURtVW+VmyDYw= =Js9z -----END PGP SIGNATURE----- --auqi4w3z3u5mkj3s-- From unknown Fri Aug 15 16:22:25 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-From: ng0 Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 24 Oct 2017 20:41:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28972 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Leo Famulari Cc: nee , ng0 , 28972@debbugs.gnu.org Received: via spool by 28972-submit@debbugs.gnu.org id=B28972.150887764211625 (code B ref 28972); Tue, 24 Oct 2017 20:41:02 +0000 Received: (at 28972) by debbugs.gnu.org; 24 Oct 2017 20:40:42 +0000 Received: from localhost ([127.0.0.1]:60288 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e760A-00031Q-0w for submit@debbugs.gnu.org; Tue, 24 Oct 2017 16:40:42 -0400 Received: from aibo.runbox.com ([91.220.196.211]:59600) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e7608-00031J-Jb for 28972@debbugs.gnu.org; Tue, 24 Oct 2017 16:40:40 -0400 Received: from [10.9.9.210] (helo=mailfront10.runbox.com) by mailtransmit03.runbox with esmtp (Exim 4.86_2) (envelope-from ) id 1e7605-0000Hi-Jj; Tue, 24 Oct 2017 22:40:37 +0200 Received: from tor3.digineo.de ([185.117.215.9] helo=localhost) by mailfront10.runbox.com with esmtpsa (uid:892961 ) (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) id 1e7603-0008Kd-E3; Tue, 24 Oct 2017 22:40:35 +0200 Date: Tue, 24 Oct 2017 20:40:32 +0000 From: ng0 Message-ID: <20171024204032.ouumwcg6dyr2lvgo@abyayala> References: <20171024190743.t7yhrfcrltrjlbt4@abyayala> <8be5d04d-4ce1-3b8b-31df-a68bdff4da4e@cock.li> <20171024202552.GA4719@jasmine.lan> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="2qc3q4ofy4assd5t" Content-Disposition: inline In-Reply-To: <20171024202552.GA4719@jasmine.lan> X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --2qc3q4ofy4assd5t Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Leo Famulari transcribed 2.2K bytes: > On Tue, Oct 24, 2017 at 10:09:00PM +0200, nee wrote: > > Am 24.10.2017 um 21:07 schrieb ng0: > > > Leo Famulari transcribed 1.4K bytes: > > >> This package is abandoned upstream and contains serious bugs: > > >=20 > > > Oh oh. Do we have another package providing the binar(ies) and functi= on > > > unrar has? > > >=20 > > Is anything actually using unrar? > >=20 > > grep -r unrar in guix-git/gnu/ gives me no relevant hits > >=20 > > I tried to add it as input for the mcomix package when I packaged > > mcomix, but it was unusable and couldn't open a single file. > > I remember that it behaved weird and unexpected and sometimes asked for > > passwords on stdin when the file wasn't encrypted. > >=20 > > It is very outdated and the rar standard it supports has been replaced > > around 15 years ago. >=20 > Agreed, I don't know if this software is useful anymore, and it isn't > used by any of our packages. >=20 > > The closest replacement that I know is libarchive, it's not a > > commandline utility like unrar, but it is used in file-roller which can > > open some rars. The problem is "some". > There is also the Python module packaged in Guix as python-rarfile. >=20 > Is anyone using this unrar package? Please speak up. And, please check > if file-roller will work for you. As I pointed out in the previous email, mc uses it. I personally use unrar for some files which are older than 15 years, but I'm okay with just taking our unrar and maintain it in my repository. The reason why I'm asking to reconsider until we have a replament is software such as mc. We can not[*] search every line of sourcecode of packages we have to see where unrar is implicitly used without a store reference. *: We could, but that's a good way to waste resources. --=20 ng0 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://dist.ng0.infotropique.org/dist/keys/ https://www.infotropique.org https://ng0.infotropique.org --2qc3q4ofy4assd5t Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAlnvpUAACgkQ4i+bv+40 hYgYGw//ZXpmhp7VB5NGDk1CEpO2YclzFPQX+Oyp7yiBqPV/1qaZebVijZu+D543 YR6ye1JWgOukaa7/NxVePjG8L+sR+Om/A3D+/hH6x3zU01fbYsAh7/xwaWOMQrVq JJIqLl0RisoGqkwSfWugZGKwQpcv8eh+AMPMBjSRWmVjYI3DD/K/iZp5Dxqi3wnu /XhN4D0YZti67pNzAQDVr8xK9fE/U99pYO9x3zT8PRpMprtSqE//o+nMR7qC4xEt LDnPh/zhRcW1EIqnD5rgXIOLmbWk6Kg5m7Waf8kcC56eyIofKajiWeX+n2dGShsX appgED/XYztTO2lQ9w6LJ7k8E8ZH0PE95lLV+xfm354oy5lLvsdgyXNNqHdrfVQE WZYJht3l2Yjiy1BRsGDj4jbuc0dAfkYProcyjzM8+Ohk8nIXDSWtPmct8y/8B6p7 tLdmUl7fb739Ycso+Zs/nJlLTQAcNrsrD/K/GfeuqNPyOmzyt/v7KYARy6tDsEap C9PjwDY56KjHoFjfh83GALNRrCrXt+Me1LFEgaLOaVUzHyQkSPuhajvmbt5SkSfD D020xaj3X3UM8PMKHVU3QvWGefffb+IU0G6LOZSyalsCvbhDclLFedaJMMMwEJ9K We4Qq33ZvAKUpdEmHYB8vKdMc68kRp3LetX2keUpmAX08RwxbRA= =M18t -----END PGP SIGNATURE----- --2qc3q4ofy4assd5t-- From unknown Fri Aug 15 16:22:25 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 24 Oct 2017 21:15:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28972 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: ng0 Cc: nee , 28972@debbugs.gnu.org Received: via spool by 28972-submit@debbugs.gnu.org id=B28972.150887969515158 (code B ref 28972); Tue, 24 Oct 2017 21:15:02 +0000 Received: (at 28972) by debbugs.gnu.org; 24 Oct 2017 21:14:55 +0000 Received: from localhost ([127.0.0.1]:60316 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e76XH-0003wQ-IX for submit@debbugs.gnu.org; Tue, 24 Oct 2017 17:14:55 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:45297) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e76XG-0003wI-4z for 28972@debbugs.gnu.org; Tue, 24 Oct 2017 17:14:54 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 1707A20D4D; Tue, 24 Oct 2017 17:14:54 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute4.internal (MEProxy); Tue, 24 Oct 2017 17:14:54 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc; s= mesmtp; bh=mHm8yXUzAsMlYI+COwrF5clbgd02ctayFHNjAxMR4zA=; b=wYV+T Kurg8m78U3l9TUqnhhsNakhjf2ggbiZ64wyvmP7DzIwoF52sNWHKMuNlAzEItQod syon2hMR8dlYg+gpEXw24nPf8Lhkod/U+dUnP9gqDKzXdkPYfEYPcGzQsKQHRENE +dWdSd+MmuBYWKXcVOFLTy1okpm+4raUlfY5i4= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; bh=mHm8yXUzAsMlYI+COwrF5clbgd02c tayFHNjAxMR4zA=; b=GzMLJRnBX6MvLN+JjggHUFhoHFIkUCyoSw9F3t7C8BYPl X2SGo7o3H2JgegVvU+st6UM6q1vS6rNTMKutxBK3GV5Xby0kaL2tr+jOgo78HrNJ 0bL3kBJqOCKE9HZJ9uv4bDMJCVeKGd9RadHugmO9Pyjp6UwgOqsut5k/jLOCUsJN KroXopAVh5N/uT39wMKu+VVwJOi6dXqvJu5AhpLeM8OijAzYufSMKLP0ynXvOJO2 EYr1OPtuSRO98Nfh3KIyuH3MVYW2GMwhCk3dx3TmCq/xLYF7tnZQEAwjVkMuS3sE nLkNtYL1vI7usXePA4skE9kjNUheJygziwfjzURoQ== X-ME-Sender: Received: from localhost (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id CD3D224772; Tue, 24 Oct 2017 17:14:53 -0400 (EDT) Date: Tue, 24 Oct 2017 17:14:52 -0400 From: Leo Famulari Message-ID: <20171024211452.GB8739@jasmine.lan> References: <20171024190743.t7yhrfcrltrjlbt4@abyayala> <8be5d04d-4ce1-3b8b-31df-a68bdff4da4e@cock.li> <20171024202552.GA4719@jasmine.lan> <20171024204032.ouumwcg6dyr2lvgo@abyayala> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="mojUlQ0s9EVzWg2t" Content-Disposition: inline In-Reply-To: <20171024204032.ouumwcg6dyr2lvgo@abyayala> User-Agent: Mutt/1.9.1 (2017-09-22) X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --mojUlQ0s9EVzWg2t Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Oct 24, 2017 at 08:40:32PM +0000, ng0 wrote: > > On Tue, Oct 24, 2017 at 10:09:00PM +0200, nee wrote: > > > The closest replacement that I know is libarchive, it's not a > > > commandline utility like unrar, but it is used in file-roller which = can > > > open some rars. >=20 > The problem is "some". Does anyone know what the problem is that prevents "some" from becoming "all"? File-roller is a graphical application, so it's not really a replacement for unrar anyways, even if it could handle all the same files. Is there really no command-line alternative to our buggy unrar? > As I pointed out in the previous email, mc uses it. > I personally use unrar for some files which are older than 15 years, > but I'm okay with just taking our unrar and maintain it in my repository. >=20 > The reason why I'm asking to reconsider until we have a replament is > software such as mc. We can not[*] search every line of sourcecode > of packages we have to see where unrar is implicitly used without > a store reference. Okay, thanks for this information. It's true that we can't effectively search for this kind of command-line use. We had mc packaged for a few years before unrar was added, so the fact that mc can use unrar does not mean that we must keep unrar. My opinion is that keeping unrar packaged even though it can be exploited by attackers who can provide a crafted RAR file does not help Guix users. --mojUlQ0s9EVzWg2t Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlnvrUwACgkQJkb6MLrK fwh4cg/+Mt8QpG8tphYMvHoUIwDuz/8GIRYxuFqMzt+uILj6uskkbmGzvAaRZowR uBk+vDYJWg0GWOPzrv8Zx91djEEU3hqWDaIdGh86AEMzFzkWhtB0ouDHc4WdDiA7 4TOwW/G/19CsTS3LksA16GXcUzgygx3YYRRCZrOTYRSfFyIYd3vwhkyMRzW2MNPP x38Hji1i3JwCpvLd5/4niPhO9TtgpWyX7IvioowR08/RIBlxuFnfzAEf+gTiDytc pjy2+/kJ4XoS4+vCjhiit96rSJB62DT9rAfYNVLLXe3qd/ua3CCSE963jP0wauRl +TXl+mBwcXuWcXfv0yieViNxmWlAMWDgIiiBGo9yPC29LOxQJHp8Cg9u13Ciwb0v Jo+xb9lstTsdKRdY8ExhbfDIpfrtNl1BH7C2fZ1Nuk3S7aDvDU5oOStDEoRx9iw8 IqmRUdqctBN/pJiyZ3Z1/1URW+K7kcYxKO8Iy0yj5nRXkZE8K8eTtYgpSjotg/cV n8F7Lg5yGe4yWnCKyATaBjL/bk9TzHZ2jtVDtV6F0SpUQJf9rZu4CSjtTYX5QTk1 GVj6VkL6zCVglNsskpK6E+0QTkCHem0ZxC5LEvrmxdII8wgegyuiVNnwBlWJpPa+ AtHT43D4es33e360cc3H7IjBNu6lBx5+Kh8ctt/W2eMIU6UK6CY= =DKsq -----END PGP SIGNATURE----- --mojUlQ0s9EVzWg2t-- From unknown Fri Aug 15 16:22:25 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#28972] [PATCH] gnu: Remove unrar. Resent-From: Ricardo Wurmus Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 25 Oct 2017 14:47:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28972 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Adonay Felipe Nogueira Cc: 28972@debbugs.gnu.org, ng0 , Leo Famulari Received: via spool by 28972-submit@debbugs.gnu.org id=B28972.15089428077067 (code B ref 28972); Wed, 25 Oct 2017 14:47:02 +0000 Received: (at 28972) by debbugs.gnu.org; 25 Oct 2017 14:46:47 +0000 Received: from localhost ([127.0.0.1]:33442 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e7MxD-0001pZ-9q for submit@debbugs.gnu.org; Wed, 25 Oct 2017 10:46:47 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21142) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e7MxB-0001nh-Q5 for 28972@debbugs.gnu.org; Wed, 25 Oct 2017 10:46:46 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1508941845; s=zoho; d=elephly.net; i=rekado@elephly.net; h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding; l=638; bh=s3c0jsbzlPXM/zt4sytFt+nQ9Cs38U/+pbt9YHKDW6g=; b=VfeEgWtosvE98PBj+FGS16TsWlqPjYwIYE/N+xOuxO6E48VgAuTFvoOypFtfYFkF O9aY+r/NX6rv8/u86miOaahmfIJlkl3TngGU+c27luPl7y34twd5Gtm9F1eMvsiHHVi vWXIZaY3ZpIkod5MQ4UjNvqKYP1N9mJrupsJVLXE= Received: from localhost (141.80.247.119 [141.80.247.119]) by mx.zohomail.com with SMTPS id 1508941845917497.3914589192243; Wed, 25 Oct 2017 07:30:45 -0700 (PDT) References: <20171024190743.t7yhrfcrltrjlbt4@abyayala> <874lqouz9o.fsf@hyperbola.info> User-agent: mu4e 0.9.18; emacs 25.3.1 From: Ricardo Wurmus In-reply-to: <874lqouz9o.fsf@hyperbola.info> X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Wed, 25 Oct 2017 16:30:43 +0200 Message-ID: <87zi8fb8q4.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-ZohoMailClient: External X-Spam-Score: -2.8 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.8 (--) Adonay Felipe Nogueira writes: > Perhaps The Unarchiver (unar, no R in the middle)? > > See I tried packaging this once, but it is quite difficult as it depends on an Objective C compiler (which is currently broken in Guix due to the fact that GCC doesn’t find it) and GNUstep (which is not fully packaged yet). I agree with Leo to remove the outdated unrar package. Waiting for the alternative to be packaged would not be reasonable, given the size of the task. -- Ricardo GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC https://elephly.net From unknown Fri Aug 15 16:22:25 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Leo Famulari Subject: bug#28972: closed (Re: [bug#28972] [PATCH] gnu: Remove unrar.) Message-ID: References: <20171112212035.GF10629@jasmine.lan> X-Gnu-PR-Message: they-closed 28972 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 28972@debbugs.gnu.org Date: Sun, 12 Nov 2017 21:21:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1510521662-1749-1" This is a multi-part message in MIME format... ------------=_1510521662-1749-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #28972: [PATCH] gnu: Remove unrar. which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 28972@debbugs.gnu.org. --=20 28972: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D28972 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1510521662-1749-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 28972-done) by debbugs.gnu.org; 12 Nov 2017 21:20:38 +0000 Received: from localhost ([127.0.0.1]:37280 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eDzgE-0000RG-4u for submit@debbugs.gnu.org; Sun, 12 Nov 2017 16:20:38 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:34473) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eDzgD-0000R9-1h for 28972-done@debbugs.gnu.org; Sun, 12 Nov 2017 16:20:37 -0500 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 30F56206CC; Sun, 12 Nov 2017 16:20:36 -0500 (EST) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Sun, 12 Nov 2017 16:20:36 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc; s= mesmtp; bh=FVil0nXfXy4fpIlsKu6FWxzdyfZcnW94wKyMBj0l+VM=; b=sOdAe j1ftIkvwBhKQj+Fdz9JjifQCA1CYoXI3a+d6koURo+A5zPyBdLBTFblEVOj7tHcA y6F0xQNnE2XoUovf70ErwlKSrU18zUV5irHlANryC2zWNBbeKnO7VRq2Mtjnzi/k VZ/H5KG4qwbKkCQLIJ6J31q2v1sq7ASr2VxSpI= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; bh=FVil0nXfXy4fpIlsKu6FWxzdyfZcn W94wKyMBj0l+VM=; b=rimJ3Xv/Lj52qL1qJrlWeHkhBl9aTUCcm84UPjJ8zuHCv mJChGc1IQpXxbQDmjSoFmrCBprFTixCL8dTNof+ZUqhkuE/D+B5cc6f0vhJB33VP ZZvuantBI8PGW0ujXG2rdTA0VRnk1Mgk0CEbIxezGfG2POUILE3z2pXkoTu71tmH QQwuu4OKJFuaqi0wd2aY/0qVuTsCpQu71f5Xd4UcyFJpqEXfCeTCSIsLqMy3QgOw SFlJYNHcR92sD0PPm8uIC9TNVWLjffRaiAD/g8i898x7F050uYmwGrJj1vbCnesP mSHTksUYPC0h28+Tvqo2jx45Kvu9ALmChCGh4ylBA== X-ME-Sender: Received: from localhost (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id E103D7F8DB; Sun, 12 Nov 2017 16:20:35 -0500 (EST) Date: Sun, 12 Nov 2017 16:20:35 -0500 From: Leo Famulari To: Ricardo Wurmus Subject: Re: [bug#28972] [PATCH] gnu: Remove unrar. Message-ID: <20171112212035.GF10629@jasmine.lan> References: <20171024190743.t7yhrfcrltrjlbt4@abyayala> <874lqouz9o.fsf@hyperbola.info> <87zi8fb8q4.fsf@elephly.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="bGR76rFJjkSxVeRa" Content-Disposition: inline In-Reply-To: <87zi8fb8q4.fsf@elephly.net> User-Agent: Mutt/1.9.1 (2017-09-22) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 28972-done Cc: 28972-done@debbugs.gnu.org, ng0 , Adonay Felipe Nogueira X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --bGR76rFJjkSxVeRa Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Oct 25, 2017 at 04:30:43PM +0200, Ricardo Wurmus wrote: >=20 > Adonay Felipe Nogueira writes: >=20 > > Perhaps The Unarchiver (unar, no R in the middle)? > > > > See >=20 > I tried packaging this once, but it is quite difficult as it depends on > an Objective C compiler (which is currently broken in Guix due to the > fact that GCC doesn=E2=80=99t find it) and GNUstep (which is not fully pa= ckaged > yet). >=20 > I agree with Leo to remove the outdated unrar package. Waiting for the > alternative to be packaged would not be reasonable, given the size of > the task. Removed with commit 2560aa7adbfcb46306e8b19180bd48d39c2da6dc. If anyone is interested in maintaining a package outside of Guix, Debian has written some patches for the recently discovered bugs, distributed in their package version 1:0.0.1+cvs20140707-4: https://packages.debian.org/sid/unrar-free http://http.debian.net/debian/pool/main/u/unrar-free/unrar-free_0.0.1+cvs20= 140707-4.debian.tar.xz I thought about taking these patches, but the bug reporter said it took them only "a few minutes" to find these bugs, so I'm not optimistic about the state of this program, at least if it is not maintained upstream. --bGR76rFJjkSxVeRa Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAloIuyIACgkQJkb6MLrK fwjnaw/8DxrNxZoQkK8gD3HsMjRMjzaYK2OoITixy8VD0g9NMHZRGzdynASllB/C GLfdkTTHl4BJP8FRXZ6uVgodobllj70MrbL+Z3mjvVpvA/HxzBVJYXm7pp1lJKIc Wu0/9fghcoKb+iy4PIJhLrzMkiDqkcLV0ZtCu6i9Y7yD6Qiyz5zmuXQWcy/Ick6C 7O4H/E2/+M1vi4Vsv0FNilj8mQaEyXc3NnXsfTyjHKO0lTIrcQYVvqKRGJtKV/d4 FHXyce6n7XsRa3iUtSPjEbrskMZSd1HxjGsSru1tXugHxLs1oUfcIhj9GSvS5NDW bmVqTsxnOhcpFOFnLEvUBZIJApBMX4sCBnCSDnkAfZ59MCNckmpeaYipAAyYEIN2 JzVk4ne0YWkYoW2Rv2rOBywoG5be8JizWDxSMv4LtJhL3kDWH5ODZPpLfiIjl+/M scUnw7kDM66aDwqxOmvBfvPfRoaLEmUsGgPp2LqrTKnQP7pVeHZ4ho0LRh1UbIh2 AjI7NU+GDdpSdCriiRUSieWjtKypNuC3sCR8it7zmwoTTfRbFPxgAHb2N09kFEGf zCiZV/8NCe4Pmn233NE6i9aP5AF1gjbluhx78LfJO1vbAS3syIWsfYqxm4uCBoAT o/oAjLXVwx9cwYRn7te0iCR0VSBpawixLsomm7Lc3OGry46ROE0= =6izS -----END PGP SIGNATURE----- --bGR76rFJjkSxVeRa-- ------------=_1510521662-1749-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 24 Oct 2017 18:52:54 +0000 Received: from localhost ([127.0.0.1]:60171 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e74Jq-0008R0-8I for submit@debbugs.gnu.org; Tue, 24 Oct 2017 14:52:54 -0400 Received: from eggs.gnu.org ([208.118.235.92]:37007) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e74Jn-0008Qh-FN for submit@debbugs.gnu.org; Tue, 24 Oct 2017 14:52:52 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1e74Jh-0004dF-0x for submit@debbugs.gnu.org; Tue, 24 Oct 2017 14:52:46 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:43486) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1e74Jg-0004d7-Tv for submit@debbugs.gnu.org; Tue, 24 Oct 2017 14:52:44 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:56206) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1e74Jf-000157-IQ for guix-patches@gnu.org; Tue, 24 Oct 2017 14:52:44 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1e74Jb-0004bF-7G for guix-patches@gnu.org; Tue, 24 Oct 2017 14:52:43 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:56445) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1e74Ja-0004as-Ve for guix-patches@gnu.org; Tue, 24 Oct 2017 14:52:39 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 208CF20DC6; Tue, 24 Oct 2017 14:52:38 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Tue, 24 Oct 2017 14:52:38 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:message-id:subject:to:x-me-sender:x-me-sender :x-sasl-enc; s=mesmtp; bh=33VsrYTtdoQgX7t4Nkdy4H4tkf1M0iaBMr9U50 lJfOc=; b=riu97SBssHFwNCD1/OE6FfE1tW0EuiOG2IxDoIgM8aiGbcv9USbXu1 R35Cwg8caiNzR/cnNNj7w6Ciijgl5fDcVfRr8jExTKifhYqRMfeCMZkHqv0BFnvh eekO8SHueP0xq7HXbg+RlAlMeL3t0hyhu6S3T5G2L6ghDHxYS43uM= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=date:from:message-id:subject:to :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=33VsrYTtdoQgX7t4N kdy4H4tkf1M0iaBMr9U50lJfOc=; b=V70g64Z6Wp/R6q17ow9OGV/kBtXWNyO0i mY6xJqsuHxx4MhUyFvxPGg8qUZ1xtoDaPBTWX0/ul5KA4mJdIbOsayyHcjJleweQ yuFtUOTJBmIQBVVm/8O+laV6Wy+EOVADngi78F19K+nDP0pP0O2jhIEs497f+c+Y Lz2BUNMBzM/QYuhZN1/rcrA1yNRrcYP589UvWAorIf61ATIVSwcaQPofLloh2RQI Svp+k7s7bRJmCRTUUHtjv225c0wcoNYDmAVbSPT2u5EAU5nS/bBL/5SRdaxFOA8g uDv42tWIF9svpzBjmcir+9bMFGaa1zd33p2LEIqi/BAuBqQo0Rhyw== X-ME-Sender: Received: from jasmine.lan (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id 967777F9A9 for ; Tue, 24 Oct 2017 14:52:37 -0400 (EDT) From: Leo Famulari To: guix-patches@gnu.org Subject: [PATCH] gnu: Remove unrar. Date: Tue, 24 Oct 2017 14:52:34 -0400 Message-Id: X-Mailer: git-send-email 2.14.3 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.1 (----) This package is abandoned upstream and contains serious bugs: http://seclists.org/oss-sec/2017/q3/329 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14120 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14121 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14122 * gnu/packages/compression.scm (unrar): Remove variable. --- gnu/packages/compression.scm | 18 ------------------ 1 file changed, 18 deletions(-) diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm index a2bf3a186..c06c3c52e 100644 --- a/gnu/packages/compression.scm +++ b/gnu/packages/compression.scm @@ -1285,24 +1285,6 @@ or junctions, and always follows hard links.") archives from InstallShield installers.") (license license:expat))) -(define-public unrar - (package - (name "unrar") - (version "0.0.1") - (source (origin - (method url-fetch) - (uri (string-append - "http://download.gna.org/unrar/unrar-" version ".tar.gz")) - (sha256 - (base32 - "1fgmjaxffj3shyxgy765jhxwz1cq88hk0fih1bsdzyvymyyz6mz7")))) - (build-system gnu-build-system) - (home-page "http://download.gna.org/unrar") - (synopsis "RAR archive extraction tool") - (description "Unrar is a simple command-line program to list and extract -RAR archives.") - (license license:gpl2+))) - (define-public zstd (package (name "zstd") -- 2.14.3 ------------=_1510521662-1749-1--