Skip to content

7zip: add at 26.01#9061

Open
clintre wants to merge 14 commits into
getsolus:mainfrom
clintre:add_7zip
Open

7zip: add at 26.01#9061
clintre wants to merge 14 commits into
getsolus:mainfrom
clintre:add_7zip

Conversation

@clintre
Copy link
Copy Markdown
Member

@clintre clintre commented May 28, 2026

Summary
Replace p7zip due to security and lack of maintenance

Security:

  • CVE-2026-48095

Test Plan

Installed Peazip
Uninstalled p7zip
Installed 7Zip
Tested functionality through peazip
Verified binaries
From terminal tested several different formats

Needs more testing before considered ready

Checklist

  • Package was built and tested against unstable
  • This change could gainfully be listed in the weekly sync notes once merged
  • I agree to license this contribution and all my previous contributions under the licensing terms in LICENSE.md and have the power and authority to grant those licenses.

Comment thread packages/7/7zip/package.yml Outdated
Comment thread packages/7/7zip/package.yml Outdated
Comment thread packages/7/7zip/package.yml Outdated
Comment thread packages/7/7zip/package.yml Outdated
@clintre
Copy link
Copy Markdown
Member Author

clintre commented May 28, 2026

Ok, made changes based on the Fedora spec. Still probably needs some changes partly due to some of my ignorance of the ypkg side of things still.

@EbonJaeger
Copy link
Copy Markdown
Member

As far as I can see, this looks fine, now.

@clintre clintre marked this pull request as ready for review May 28, 2026 21:33
@clintre
Copy link
Copy Markdown
Member Author

clintre commented May 28, 2026

Ok I have ran testing across several archives as well as using Peazip which is working as expected. I modified the patch for Solus. If there is anything else, let me know.

@clintre clintre requested a review from EbonJaeger May 28, 2026 22:34
Copy link
Copy Markdown
Member

@EbonJaeger EbonJaeger left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since this is replacing p7zip, all of the packages that depend on p7zip need to be updated to depend on the new 7zip package. p7zip and p7zip-dbginfo should also be deprecated.

Comment thread packages/7/7zip/package.yml
@clintre clintre requested a review from EbonJaeger May 28, 2026 22:53
@clintre clintre added Security Security issue Topic: Sync Notes This PR/Issue can be highlighted in sync notes labels May 29, 2026
@clintre clintre marked this pull request as draft May 30, 2026 04:47
**Summary**
Replace p7zip due to security and lack of maintenance
@clintre clintre marked this pull request as ready for review May 30, 2026 05:34
@clintre
Copy link
Copy Markdown
Member Author

clintre commented May 30, 2026

Alright that is all the packages that depended on p7zip.

Comment thread packages/c/cherrytree/package.yml Outdated
@EbonJaeger
Copy link
Copy Markdown
Member

Could you add a commit at the end deprecating p7zip and p7zip-dbginfo? That's the only thing this is missing now.

Comment thread packages/a/ark/package.yml Outdated
@clintre
Copy link
Copy Markdown
Member Author

clintre commented May 30, 2026

I have not done that before. Is there a link to a process for that? Happy to do it, to learn.

@EbonJaeger
Copy link
Copy Markdown
Member

There is, actually! https://help.getsol.us/docs/packaging/procedures/release-processes#deprecating-a-package

Step 1 can be skipped because you're already in a branch. You can also delete the old package recipe directory at the same time.

@clintre
Copy link
Copy Markdown
Member Author

clintre commented May 30, 2026

Alright hopefully should be all good.

@Jaredy899
Copy link
Copy Markdown
Contributor

Also pcsx2 has p7zip as a builddep.

@clintre
Copy link
Copy Markdown
Member Author

clintre commented May 30, 2026

Ok added that as well. Grepped to see if any more existed and looks good.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Security Security issue Topic: Sync Notes This PR/Issue can be highlighted in sync notes

Projects

Status: Triage

Development

Successfully merging this pull request may close these issues.

3 participants