Subject: [bug#28972] [PATCH] gnu: Remove unrar.

From: ng0 <[email-masked]>
Date: Tue, 24 Oct 2017 19:29:41 +0000

Adonay Felipe Nogueira transcribed 2.4K bytes:
> Perhaps The Unarchiver (unar, no R in the middle)?
> 
> See <https://directory.fsf.org/wiki/Unar>

Well it exists, but we certainly don't have it in Guix.
I want to have this packaged first before we drop unrar
to avoid any sudden surprises.

> ng0 <[email-masked]> writes:
> 
> > Leo Famulari transcribed 1.4K bytes:
> >> This package is abandoned upstream and contains serious bugs:
> >> 
> >> http://seclists.org/oss-sec/2017/q3/329
> >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14120
> >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14121
> >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14122
> >
> > Oh oh. Do we have another package providing the binar(ies) and function
> > unrar has?
> >
> >> * gnu/packages/compression.scm (unrar): Remove variable.
> >> ---
> >>  gnu/packages/compression.scm | 18 ------------------
> >>  1 file changed, 18 deletions(-)
> >> 
> >> diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm
> >> index a2bf3a186..c06c3c52e 100644
> >> --- a/gnu/packages/compression.scm
> >> +++ b/gnu/packages/compression.scm
> >> @@ -1285,24 +1285,6 @@ or junctions, and always follows hard links.")
> >>   archives from InstallShield installers.")
> >>      (license license:expat)))
> >>  
> >> -(define-public unrar
> >> -  (package
> >> -    (name "unrar")
> >> -    (version "0.0.1")
> >> -    (source (origin
> >> -              (method url-fetch)
> >> -              (uri (string-append
> >> -                    "http://download.gna.org/unrar/unrar-" version ".tar.gz"))
> >> -              (sha256
> >> -               (base32
> >> -                "1fgmjaxffj3shyxgy765jhxwz1cq88hk0fih1bsdzyvymyyz6mz7"))))
> >> -    (build-system gnu-build-system)
> >> -    (home-page "http://download.gna.org/unrar")
> >> -    (synopsis "RAR archive extraction tool")
> >> -    (description "Unrar is a simple command-line program to list and extract
> >> -RAR archives.")
> >> -    (license license:gpl2+)))
> >> -
> >>  (define-public zstd
> >>    (package
> >>      (name "zstd")
> >> -- 
> >> 2.14.3
> >> 
> >> 
> >> 
> >> 
> >> 
> 
> -- 
> - https://libreplanet.org/wiki/User:Adfeno
> - Palestrante e consultor sobre /software/ livre (não confundir com
>   gratis).
> - "WhatsApp"? Ele não é livre. Por favor, veja formas de se comunicar
>   instantaneamente comigo no endereço abaixo.
> - Contato: https://libreplanet.org/wiki/User:Adfeno#vCard
> - Arquivos comuns aceitos (apenas sem DRM): Corel Draw, Microsoft
>   Office, MP3, MP4, WMA, WMV.
> - Arquivos comuns aceitos e enviados: CSV, GNU Dia, GNU Emacs Org, GNU
>   GIMP, Inkscape SVG, JPG, LibreOffice (padrão ODF), OGG, OPUS, PDF
>   (apenas sem DRM), PNG, TXT, WEBM.
> 
> 
> 
> 

-- 
ng0
GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588
GnuPG: https://dist.ng0.infotropique.org/dist/keys/
https://www.infotropique.org https://ng0.infotropique.org