Package: guix-patches;
Reported by: Tobias Geerinckx-Rice <me <at> tobias.gr>
Date: Thu, 4 Jan 2018 02:20:01 UTC
Severity: normal
Tags: patch
Done: Tobias Geerinckx-Rice <me <at> tobias.gr>
Bug is archived. No further changes may be made.
Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):
From: Tobias Geerinckx-Rice <me <at> tobias.gr> To: guix-patches <at> gnu.org Subject: [PATCH] gnu: newsbeuter: Supersede. Date: Thu, 4 Jan 2018 03:21:57 +0100
* gnu/packages/syndication.scm (newsbeuter)[properties]: Mark as superseded by newsboat. --- Guix, Newsbeuter has been sufficiently (unpatched-CVE-level) stagnant for long enough that the last maintainer done went and forked it as Newsboat[0]. While our Newsbeuter shouldn't be outright vulnerable (thanks to Leo and Efraim), and newsbeuter.org might be only temporarily off-line, what do we think about blessing its successor? Surely it's but a one-line patch. Kind regards, T G-R [0]: https://groups.google.com/forum/#!topic/newsbeuter/RPtlWX8CPGU gnu/packages/syndication.scm | 97 ++++++++++++++++++++++---------------------- 1 file changed, 49 insertions(+), 48 deletions(-) diff --git a/gnu/packages/syndication.scm b/gnu/packages/syndication.scm index 086b132b7..6bfbe77cf 100644 --- a/gnu/packages/syndication.scm +++ b/gnu/packages/syndication.scm @@ -31,54 +31,6 @@ #:use-module (gnu packages xml) #:use-module (gnu packages web)) -(define-public newsbeuter - (package - (name "newsbeuter") - (version "2.9") - (source - (origin - (method url-fetch) - (uri (string-append "https://newsbeuter.org/downloads/newsbeuter-" - version ".tar.gz")) - (patches (search-patches "newsbeuter-CVE-2017-12904.patch" - "newsbeuter-CVE-2017-14500.patch")) - (sha256 - (base32 - "1j1x0hgwxz11dckk81ncalgylj5y5fgw5bcmp9qb5hq9kc0vza3l")))) - (build-system gnu-build-system) - (arguments - '(#:phases - (modify-phases %standard-phases - (replace 'configure - (lambda _ - (substitute* "config.sh" - ;; try to remove this at the next release - (("ncursesw5") "ncursesw6")) - #t))) - #:make-flags (list (string-append "prefix=" (assoc-ref %outputs "out"))) - #:test-target "test")) - (native-inputs - `(("gettext" ,gettext-minimal) - ("perl" ,perl) - ("pkg-config" ,pkg-config) - ("ruby" ,ruby))) ; for tests - (inputs - `(("curl" ,curl) - ("json-c" ,json-c-0.12) ; check whether json-c-0.12 can be removed - ("ncurses" ,ncurses) - ("stfl" ,stfl) - ("sqlite" ,sqlite) - ("libxml2" ,libxml2))) - (home-page "https://newsbeuter.org/") - (synopsis "Text mode rss feed reader with podcast support") - (description "Newsbeuter is an innovative RSS feed reader for the text -console. It supports OPML import/exports, HTML rendering, podcast (podbeuter), -offline reading, searching and storing articles to your filesystem, and many -more features. Its user interface is coherent, easy to use, and might look -common to users of @command{mutt} and @command{slrn}.") - (license (list license:gpl2+ ; filter/* - license:expat)))) ; everything else - (define-public newsboat (package (name "newsboat") @@ -128,3 +80,52 @@ file system, and many more features. It started life as a fork of the currently unmaintained Newsbeuter.") (license (list license:gpl2+ ; filter/* license:expat)))) ; everything else + +(define-public newsbeuter + (package + (name "newsbeuter") + (version "2.9") + (source + (origin + (method url-fetch) + (uri (string-append "https://newsbeuter.org/downloads/newsbeuter-" + version ".tar.gz")) + (patches (search-patches "newsbeuter-CVE-2017-12904.patch" + "newsbeuter-CVE-2017-14500.patch")) + (sha256 + (base32 + "1j1x0hgwxz11dckk81ncalgylj5y5fgw5bcmp9qb5hq9kc0vza3l")))) + (build-system gnu-build-system) + (arguments + '(#:phases + (modify-phases %standard-phases + (replace 'configure + (lambda _ + (substitute* "config.sh" + ;; try to remove this at the next release + (("ncursesw5") "ncursesw6")) + #t))) + #:make-flags (list (string-append "prefix=" (assoc-ref %outputs "out"))) + #:test-target "test")) + (native-inputs + `(("gettext" ,gettext-minimal) + ("perl" ,perl) + ("pkg-config" ,pkg-config) + ("ruby" ,ruby))) ; for tests + (inputs + `(("curl" ,curl) + ("json-c" ,json-c-0.12) ; check whether json-c-0.12 can be removed + ("ncurses" ,ncurses) + ("stfl" ,stfl) + ("sqlite" ,sqlite) + ("libxml2" ,libxml2))) + (home-page "https://newsbeuter.org/") + (synopsis "Text mode rss feed reader with podcast support") + (description "Newsbeuter is an innovative RSS feed reader for the text +console. It supports OPML import/exports, HTML rendering, podcast (podbeuter), +offline reading, searching and storing articles to your filesystem, and many +more features. Its user interface is coherent, easy to use, and might look +common to users of @command{mutt} and @command{slrn}.") + (license (list license:gpl2+ ; filter/* + license:expat)) ; everything else + (properties `((superseded . ,newsboat))))) ; unmaintained -- 2.15.0
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.