From d0eb1f11950e6fbe4667ea1dd008111da79aa654 Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Sat, 11 Jan 2025 00:30:24 +0100 Subject: [PATCH] gnupg1orig: drop The last upstream release was 6 years ago and there is no remaining usage within nixpkgs. Given it is a security sensitive package, it would be nice to remove it before running into issues. --- pkgs/tools/security/gnupg/1.nix | 49 --------------------------------- pkgs/top-level/aliases.nix | 1 + pkgs/top-level/all-packages.nix | 1 - 3 files changed, 1 insertion(+), 50 deletions(-) delete mode 100644 pkgs/tools/security/gnupg/1.nix diff --git a/pkgs/tools/security/gnupg/1.nix b/pkgs/tools/security/gnupg/1.nix deleted file mode 100644 index 6cdbc419e074..000000000000 --- a/pkgs/tools/security/gnupg/1.nix +++ /dev/null @@ -1,49 +0,0 @@ -{ - lib, - stdenv, - fetchurl, - readline, - bzip2, -}: - -stdenv.mkDerivation rec { - pname = "gnupg"; - version = "1.4.23"; - - src = fetchurl { - url = "mirror://gnupg/gnupg/gnupg-${version}.tar.bz2"; - sha256 = "1fkq4sqldvf6a25mm2qz95swv1qjg464736091w51djiwqbjyin9"; - }; - - buildInputs = [ - readline - bzip2 - ]; - - # Workaround build failure on -fno-common toolchains like upstream - # gcc-10. Otherwise build fails as: - # ld: ../util/libutil.a(estream-printf.o):/build/gnupg-1.4.23/util/../include/memory.h:100: multiple definition of - # `memory_debug_mode'; gpgsplit.o:/build/gnupg-1.4.23/tools/../include/memory.h:100: first defined here - env.NIX_CFLAGS_COMPILE = "-fcommon"; - - doCheck = true; - - meta = with lib; { - homepage = "https://gnupg.org"; - description = "Classic (1.4) release of the GNU Privacy Guard, a GPL OpenPGP implementation"; - license = licenses.gpl3Plus; - longDescription = '' - The GNU Privacy Guard is the GNU project's complete and free - implementation of the OpenPGP standard as defined by RFC4880. GnuPG - "classic" (1.4) is the old standalone version which is most suitable for - older or embedded platforms. GnuPG allows to encrypt and sign your data - and communication, features a versatile key management system as well as - access modules for all kind of public key directories. GnuPG, also known - as GPG, is a command line tool with features for easy integration with - other applications. A wealth of frontend applications and libraries are - available. - ''; - platforms = platforms.all; - mainProgram = "gpg"; - }; -} diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix index 453805988349..26d96c09662b 100644 --- a/pkgs/top-level/aliases.nix +++ b/pkgs/top-level/aliases.nix @@ -457,6 +457,7 @@ mapAliases { gmtp = throw "'gmtp' has been removed due to lack of maintenance upstream. Consider using 'gnome-music' instead"; # Added 2024-09-14 gnome-latex = throw "'gnome-latex' has been superseded by 'enter-tex'"; # Added 2024-09-18 gnu-cobol = gnucobol; # Added 2024-09-17 + gnupg1orig = throw "'gnupg1orig' has been removed due to lack of active upstream maintainance. Consider using 'gnupg' instead"; # Added 2025-01-11 gnupg22 = throw "'gnupg22' is end-of-life. Consider using 'gnupg24' instead"; # Added 2025-01-05 gogs = throw '' Gogs development has stalled. Also, it has several unpatched, critical vulnerabilities that diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix index 70f3f57e768b..482d974088ad 100644 --- a/pkgs/top-level/all-packages.nix +++ b/pkgs/top-level/all-packages.nix @@ -3462,7 +3462,6 @@ with pkgs; gnupatch = callPackage ../tools/text/gnupatch { }; - gnupg1orig = callPackage ../tools/security/gnupg/1.nix { }; gnupg1compat = callPackage ../tools/security/gnupg/1compat.nix { }; gnupg1 = gnupg1compat; # use config.packageOverrides if you prefer original gnupg1