Merge pull request #102419 from freezeboy/remove-unarj

unarj: remove (broken since 2016, insecure since 2015)
This commit is contained in:
ajs124 2020-11-03 00:01:14 +01:00 committed by GitHub
commit b76c51f137
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 0 additions and 25 deletions

View File

@ -1,23 +0,0 @@
{stdenv, fetchurl}:
stdenv.mkDerivation rec {
pname = "unarj";
version = "2.65";
src = fetchurl {
sha256 = "0r027z7a0azrd5k885xvwhrxicpd0ah57jzmaqlypxha2qjw7p6p";
url = "https://src.fedoraproject.org/repo/pkgs/unarj/${pname}-${version}.tar.gz/c6fe45db1741f97155c7def322aa74aa/${pname}-${version}.tar.gz";
};
preInstall = ''
mkdir -p $out/bin
sed -i -e s,/usr/local/bin,$out/bin, Makefile
'';
meta = with stdenv.lib; {
description = "Unarchiver of ARJ files";
license = licenses.free;
# Vulnerable to CVE-2015-0557 & possibly CVE-2015-0556, CVE-2015-2782:
broken = true;
};
}

View File

@ -8131,8 +8131,6 @@ in
unar = callPackage ../tools/archivers/unar { stdenv = clangStdenv; };
unarj = callPackage ../tools/archivers/unarj { };
unp = callPackage ../tools/archivers/unp { };
unshield = callPackage ../tools/archivers/unshield { };