GNU bug report logs - #28972
[PATCH] gnu: Remove unrar.

Previous Next

Full log

View this message in rfc822 format

From: ng0 <ng0 <at> infotropique.org>
To: nee <nee <at> cock.li>
Cc: ng0 <ng0 <at> infotropique.org>, 28972 <at> debbugs.gnu.org
Subject: [bug#28972] [PATCH] gnu: Remove unrar.
Date: Tue, 24 Oct 2017 20:36:16 +0000

[Message part 1 (text/plain, inline)]

nee transcribed 1.0K bytes:
> Am 24.10.2017 um 21:07 schrieb ng0:
> > Leo Famulari transcribed 1.4K bytes:
> >> This package is abandoned upstream and contains serious bugs:
> >>
> >> http://seclists.org/oss-sec/2017/q3/329
> >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14120
> >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14121
> >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14122
> > 
> > Oh oh. Do we have another package providing the binar(ies) and function
> > unrar has?
> > 
> Is anything actually using unrar?
> 
> grep -r unrar in guix-git/gnu/ gives me no relevant hits

There is a using and using.
Some applications make use of unrar without us rewriting every occurence
of "unrar" in them (for example 'mc').

> I tried to add it as input for the mcomix package when I packaged
> mcomix, but it was unusable and couldn't open a single file.
> I remember that it behaved weird and unexpected and sometimes asked for
> passwords on stdin when the file wasn't encrypted.
> 
> It is very outdated and the rar standard it supports has been replaced
> around 15 years ago.
> 
> The closest replacement that I know is libarchive, it's not a
> commandline utility like unrar, but it is used in  file-roller which can
> open some rars.
> 

-- 
ng0
GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588
GnuPG: https://dist.ng0.infotropique.org/dist/keys/
https://www.infotropique.org https://ng0.infotropique.org

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.