RE: units issues
Brian Inglis sent the following at Tuesday, May 23, 2017 10:37 PM > >On 2017-05-23 17:55, Doug Henderson wrote: > >> On 23 May 2017 at 15:49, Brian Inglis wrote: >> >>> Updating the currencies only when setup is run seems to me to be >>> insufficient if users want to use current currency conversions. >> >> Currencies needs to be split to a different package from non-currency >> units. Non-currency units is very static, whereas most currencies >> changes daily. In the absence of updates, non-currency units are still >> useful; but currencies are incorrect in most cases, and increasingly >> so as time pass. >> >> It is difficult to predict user requirements based on current package >> dependencies as non-currency units and currencies are likely used by >> almost disjoint sets of packages. Users of non-currency units should >> not be burdened by the complexities of currencies. But if they do need >> currencies, they should be up to date. >> >> A possible solution is to check the currency of the currency data on >> library initialization or each use by comparing the current date with >> the data's date of update. When the data is stale, automatically >> update it if possible, or notify the user of the problem. > >It's a command line utility from GNU with currency conversion factors >in a separate definition file included from the main file, updated by >a Python script, which downloads an RSS XML file of current (Euro) >rates from a free source with a permissive licence, and converts it to >definitions acceptable to the utility, overwriting the existing file. > >The main issues are that, as currently implemented, currency rates are >updated automatically by a postinstall script only when setup is run; >setup may be running in an environment without external access, so the >postinstall script will generate an error; users may not want or care >about currency updates; and the postinstall script uses find to avoid >updating if there is no currency file, or it has been updated recently. > >One option to deal with this is update the package to install a >zero length currency definitions file, so currency conversions are >not defined, but the program has no issues, and drop the permanent >postinstall script to perform updates. Then announce and document that >users who want updated currency conversion rates need to run the update >script from the command line, a profile script, cron job, or Windows >Scheduled Task, as is desirable if they use currency conversions. > >There are also issues with the Python update script, as the currency >source site cert expired recently, causing the update and postinstall >scripts to fail, with no workaround other than a replacement or patch; >and a poster has problems using the update script with Windows proxies, >which I have addressed to the upstream maintainer for discussion about >approaches. If there is no response, I will create a Cygwin update patch >and submit it upstream, but there has been no visible response to issues >raised on the GNU site. I would prefer that by default updates happen automatically and those who do not want automatic updates do something to stop them from happening. For instance, someone who does not want updates makes the definitions file read-only and have the script check for write permission and exit or skip updating if the file cannot be written. A zero length read-only file works if one is worried about someone using stale conversion factors. An environmental variable whose existence marks no-update might be another possibility. Best wishes, - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: [ITA] cygwin-doc
Jon TURNEY wrote on March 13, 2015 10:29 AM As invited [1], I shall adopt the cygwin-doc package. https://cygwin.com/ml/cygwin/2015-02/msg00163.html Thanks, - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
Obsolete Packages in Requires Lines
Please excuse me if this is the wrong list for this topic.
Inspired by my experience with that EXCELLENT new package,
cygcheck-dep, I tried cleaning cruft in my installation of cygwin by
uninstalling packages in the _obsolete category. Setup reported
that a number of them were required by other packages, including some
that weren't circularly dependent.
This suggested to me that perhaps there are packages whose requires:
lines need updating. I put together a script to look for that.
Here is the script I used:
SETUP=path_to_setup.ini
gawk ' /^@ / { pkg = $2 }
/ _obsolete/ { print \t pkg $ }
' ${SETUP} | \
sort -u \
ob.tmp
gawk ' /^@ / { pkg = $2 }
/^requires: / { for (N = 2; N = NF; N++) { print pkg \t $N } }
' ${SETUP} | \
sort -u | \
grep -f ob.tmp
rm ob.tmp
Here's what I found:
For 64 bit setup.ini:
CURRENT_64bit_PKG OBSOLETE_PKG
libpoco-devel libexpat1-devel
libwmf-devel libexpat1-devel
For 32 bit setup.ini:
CURRENT_32bit_PKG OBSOLETE_PKG
catdoctcltk
clang gcc4-core
clang gcc4-g++
gnupg minires
grub-fontsgrub
guile libguile12
libAfterImage0libpng12
libAfterImage-devel libpng12-devel
libautotrace-devellibexpat1-devel
libfltk1.1libpng12
libfltk1.1-gdilibpng12
libgeotifflibjpeg62
libgeotiff1 libjpeg62
libgeotiff1 libproj0
libGraphicsMagick3libpng14
libgs8libjpeg62
libicu-devel gcc4-core
libicu-devel gcc4-g++
libImageMagick1 libpng12
libjasper1.701_0 libjpeg62
libMagickCore5libpng14
libmetalink-devel libexpat1-devel
libneon-devel libexpat1-devel
libplot2 libpng12
libplot-devel libpng12-devel
libplotter2 libpng12
libplotter-devel libpng12-devel
libpng14-devellibpng14
libpoco-devel libexpat1-devel
libproj-devel libproj0
libslang2 libpng14
libtiff4 libjpeg62
libungif-devellibungif4
libWINGs-devellibexpat1-devel
libwmf-devel libexpat1-devel
libxerces-c-devel curl-devel
libxerces-c-devel gcc4-g++
logiweb gcc4
octave-devel gcc4-fortran
octave-devel libexpat1-devel
openglw32api
ploticus libjpeg62
ploticus libpng12
proj libproj0
qiv libpng14
singular-surf libjpeg62
sng libpng12
xemacslibjpeg62
xemacslibpng12
XFree86-lib-compatxorg-x11-base
xorg-x11-develxorg-x11-base
Best wishes,
- Barry
Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: [GOLDSTAR] Re: [PATCH] setup: allow running as non-admin
Corinna Vinschen sent the following at Saturday, November 09, 2013 5:20 AM Maybe I'm dense but I don't quite understand it. Under 32 bit, a tool called setup-foo will be recognized as an installer binary. Therefore the helpful UAC installer recognition will try to start setup-x86 as an installer with admin permissions, asking for consent (default for admin accounts) or admin credentials (default for non-admin accounts). How was it possible at all to start 32 bit setup as normal user, without getting the elevation prompt? Or, hmm... [do you hear me thinking?] ...does the UAC installer recognition only kick in for an UAC crippled admin account but not for a normal user account? [...testing...] I just started an older setup-x86 on Windows 8.1 and Windows 7 using a non-admin user account, and in both cases I have been asked for administrator credentials. Which means, I still don't understand how anybody ran setup from http://cygwin.com/setup-x86.exe as a normal user account without being asked for admin creds. Unless the admins of these machines have switched off the installer recognition. In that case non-admins could simply start setup-x86 from the net and now they can't anymore. Do we still want to support this? If support is dropped, the Cygwin home page should explain what non-admins need to do to install 32 bit Cygwin. The solution on this list has long been download and rename to foo.exe. That could be done for all by renaming http://cygwin.com/setup-x86.exe to http://cygwin.com/getcygwin32.exe. I've often wondered whether there is a reason why this hasn't been done before. If there is, I'd be interested in learning why, for my education. Is there a benefit to having an installer name that includes setup or install? (If there is, I'll drop the topic.) This is a suggestion, not a request. This doesn't affect me because I almost never run setup from the browser. I run it off my hard disk, downloading updates when they are released. Thanks, - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: [PATCH 2/2 rebase] Handle CPAN/etc. DLLs in rebaseall
Yaakov sent the following at Monday, February 11, 2013 11:32 PM Please leave it in; PHP is a fairly popular offering in Ports (at least according to my blog stats), and probably should be moved into the distro already. Please! :-)
RE: [ITP] doxygen-1.8.0-2 -- A documentation system for C++, C, Java, Objective-C, IDL (Corba and Microsoft flavors) and to some extent PHP, C#, and D.
David Stacey sent the following at Tuesday, October 02, 2012 3:11 PM http://cygwin.com/setup.html#submitting Package acceptation ^^^ Might acceptance be a better word? http://en.wiktionary.org/wiki/acceptation (I originally thought that acceptation isn't an English word, but it is.) - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
Setup copyright notice
The latest version of setup (2.764) lists copyright 2000-2011. Should 2011 be changed to 2012? Best wishes, - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: setup.exe -s (--site) option not working
David King sent the following at Friday, January 20, 2012 8:33 AM On Jan 18, 2012, at 12:21 PM, Buchbinder, Barry (NIH/NIAID) [E] wrote: David King sent the following at Tuesday, January 17, 2012 10:14 PM cygwin install, version 2.763 I created a batch file to auto install cygwin with some packages (see below). When I run the batch file from a command prompt, it just outputs getUrlToStream failed multiple times before it ends. If I take out the -s option and run the batch file, the gui displays and stops on the page to choose a download site and then the next page goes into the package selection gui. If I quit the gui installer at that point, and then re-run my batch file, the install performs perfectly. My best guess is that it's loading the previously selected download site in one of the generated setup files. Is this a known issue or is there a workaround? The batch file is here: https://gist.github.com/1630619 The output saved to my setup.log is here: https://gist.github.com/1630611 My GUESS is that setup cannot guess what directory of mirrors.kernel.org to look in. The links to mirrors on http://cygwin.com/mirrors.html point to directories, not to the roots of the servers Try http://mirrors.kernel.org/sourceware/cygwin/ with or without the training slashes, or maybe http://mirrors.kernel.org/sourceware/ Thank you very much Barry. That was the exact problem. I was using the urls specified by the gui mirror download list. Here's my working batch file in case anybody is curious: --- setup.exe ^ --disable-buggy-antivirus ^ --quiet-mode ^ --site http://mirrors.kernel.org/sourceware/cygwin/ ^ --packages ^ ruby,^ curl,^ git,^ mingw64-i686-gcc-g++,^ gcc,^ libtool,^ make,^ automake,^ readline,^ libreadline7,^ zlib-devel,^ ncurses,^ vim - Perhaps an elaboration of how to specify the URL this should be added to setup's help and documentation. - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: setup.exe -s (--site) option not working
David King sent the following at Tuesday, January 17, 2012 10:14 PM cygwin install, version 2.763 I created a batch file to auto install cygwin with some packages (see below). When I run the batch file from a command prompt, it just outputs getUrlToStream failed multiple times before it ends. If I take out the -s option and run the batch file, the gui displays and stops on the page to choose a download site and then the next page goes into the package selection gui. If I quit the gui installer at that point, and then re-run my batch file, the install performs perfectly. My best guess is that it's loading the previously selected download site in one of the generated setup files. Is this a known issue or is there a workaround? The batch file is here: https://gist.github.com/1630619 The output saved to my setup.log is here: https://gist.github.com/1630611 My GUESS is that setup cannot guess what directory of mirrors.kernel.org to look in. The links to mirrors on http://cygwin.com/mirrors.html point to directories, not to the roots of the servers Try http://mirrors.kernel.org/sourceware/cygwin/ with or without the training slashes, or maybe http://mirrors.kernel.org/sourceware/ Good luck, - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: ssh through Cisco VPN problem
Charles Stepp sent the following at Friday, November 04, 2011 10:15 AM Does anyone have any idea why the openssh in cygwin (latest) would not connect through a Cisco vpn, but putty and virtualboxed Fedora's ssh would have no problem? Cygwin's ssh works fine at work, not using the vpn. I'll include -vvv's if no one knows right off the bat. Wrong list. s/-apps// - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: [ITP] nosleep 0.1.3-1
On 9/25/2011 6:15 AM, Andrew Schulman wrote: nosleep has been written originally for Cygwin, so it's not available in any Linux distros and needs to be voted on. Just wondering ... Since nosleep has been written originally for Cygwin, might it make sense to add this to cygutils (A collection of simple utilities)? Just a thought - not a request. - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: 256x256 px icons
Warren Young sent the following at Friday, July 29, 2011 10:12 AM http://etr-usa.com/cygwin/logo/glowing.ico http://etr-usa.com/cygwin/logo/logo-glowing.ico
RE: setup and mintty (was Re: New setup.exe release?)
Christopher Faylor sent the following at Monday, May 23, 2011 1:26 PM Maybe we should be looking into introducing a way to set the CYGWIN environment variable in the global environment and adding c:\cygwin\bin (or whatever) to the global PATH as well. http://cygwin.com/ml/cygwin/2010-01/msg00977.html Still Just a suggestion, not a request. - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: Up for new maintainer - base-files and base-passwd
Since so little is in the base-cygwin and base-passwd packages, might it make sense to fold them into base-files? - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: Packages keep being installed again
Thomas Wolff sent the following at Friday, January 15, 2010 4:55 AM A few packages keep showing up in my setup for installation and are installed again every time even though they have been installed already; currently it's: glib lapack I also get tetex
singular-icons: possible packaging error?
The singular-icons package contains the following file in both versions 3.0.3-1 and 3.1.0-1. /usr/lib/Singular/cygwin-setup.exe I point this out since it seems strange to me and I wonder whether it might be a mistake. I apologized for wasting bandwidth if it is not an error. Thanks, - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: Save and restore setup.exe window geometry attempt #2
Christopher Faylor wrote on Thursday, May 21, 2009 1:42 PM: On Thu, May 21, 2009 at 01:11:11PM -0400, Jonathon Merz wrote: On Thu, May 21, 2009 at 11:29 AM, Christopher Faylor wrote: On Thu, May 21, 2009 at 11:23:36AM -0400, Charles Wilson wrote: Christopher Faylor wrote: That doesn't sound right. That sounds like it means that you are ditching the current behavior which I, and others, obviously are satisfied with, in favor of forcing people to resize the chooser screen themselves. I thought that was the whole point, here. That the chooser would be resizable to a specific size, and would *remember* that size for next time. So, sure, you might have to resize the chooser once, when the new setup is distributed. But after that, you wouldn't. You, I, and others might be happy with the current maximize-always behavior, but I thought there were at least some folks (with extremely large screens?) who wanted the chooser a bit smaller. With resize-and-remember, we all win, don't we? Boy this is tedious. No, it is not the same. We're talking about the default behavior. The default should be maximized. If that makes someone's eyes bleed then they can change it for the future. I think I have a better understanding now. I may wish I'd started this discussion before I started submitting patches, but better late than never I hope. As I understand things now: - The chooser screen, but not the rest of setup, should maximized any time it is run and finds no saved geometry, in particular, the first time setup is run - When setup is run with a saved geometry, the saved geometry should be used. If those are correct, the questions I see now are: 1. Should the saved geometry be used for all screens in setup, or only for the chooser? When I was struggling with this, I thought it might be a good idea to make other windows bigger too but, since I don't recall anyone ever complaining that other windows which accepted input were too small, then I think it is probably acceptable to just apply the geometry to the chooser. But, that's just my opinion. My only criteria is that the initial screen for first-time users should be maximized so that they see everything rather than getting a partial view. If someone wants to change the default for the future that's fine. cgf Personally ... (1) I would see a change of geometry when I arrive at the chooser to be unexpected behavior. (2) I would expect that people who chose a geometry other than maximized or the default normal might resize/reposition immediately upon launching setup if it opened in some other position. To me, that undoes the convenience of setup remembering geometry. (3) And as long as I've taken up space in your inbox... OT class=by now, since it seems whether this will go into setup has already been decidedI really don't see a need for setup remembering geometry. When updating, I find the current default adequate. The only time I maximize is when I'm choosing new packages or possibly a new mirror. It is not clear to me why anyone doing one of those take so long that they need to change geometry so they can work on other things at the same time. Focus people! Multitasking may be efficient for computers, but its not for humans./OT Have a great weekend. - Barry
RE: Cygwin setup.exe - command line parameters
Ralph Hempel wrote on Tuesday, March 03, 2009 11:49 AM: Quick show of hands - how many people are still using 9x? I stall have 98se on my home machine, but I almost never use cygwin on it. I can live without cygwin on it, and I can handle a gui. Perhaps the real question is the number of people who (1) cannot use the gui setup AND (2) are still on 9x. - Barry Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: please add a find-the-fastest-mirror-automatically feature to setup.exe
Jason Spiro wrote on Wednesday, May 28, 2008 11:38 AM: Cc'ing the hackers of the Ubuntu software-properties app. 2008/5/23 Chris Sutcliffe [EMAIL PROTECTED] wrote: Jason Spiro wrote: [Cygwin] Setup.exe is a great tool, but could you please add a find-the-fastest-mirror-automatically feature? That would require making a connection attempt to every entry in setup's list, which would be rather counter-productive I would think. What if Setup randomly tested just five or ten servers? BTW, there are many mirror-testing servers out there. (Ubuntu Linux has a tool with a GUI interface called software-properties[1], with a find-the-fastest-mirror-automatically feature called Select Best Server. You can see screenshots of the feature online.[2] Fedora has yum-fastestmirror. Debian has netselect-apt, which is based on a tool called netselect. Dirk Eddelbuettel wrote a similar tool called debian-mirrors which IIRC is no longer a Debian-only tool.) And now, a question for the software-properties hackers I cc'ed: Do you know?: When is it worth the time it takes for users to test various mirrors? Is it worth it if they are planning to do just 2 minutes of downloading? How about 20 minutes? Is it useful for users who have only, say, 128Kbps connections like DSL or lite cable? I would think that if one has a slow connection, that is the rate-limiting factor, not the server. [snip] Jason Spiro I'm not a programmer, so please excuse me for commenting on a topic whose solution I am incapable of contributing to. I do not see what the problem is. Or, rather, it seems to me (remember that I admit haven't forgot that I'm totally unqualified to make this estimate) that the benefit:work ratio is high compared to some other improvements to setup. If one finds a mirror too slow, one can always look on the list of mirrors http://cygwin.com/mirrors.html, pick a few that seem geographically close*, and time them with ping. Better yet, just try a few and see which works best. * Actually, one could also try one that is far away, if it is the middle of the night in that part of the world. I say this as someone who started with cygwin the pre-setup days, when to get the user package involved downloading a zip file that, if I remember correctly, was at least 20 Meg. And I downloaded it over *dial-up*! Get it started and the phone line was tied up for two hours. (Now, with DSL or faster connections, I suspect that the slow downloads for some people are really caused by downloading movies at the same time. :-) ) And yes, I have had to change mirrors from time to time as my favorite mirror has gotten slow or gone off line; annoying at the moment but, averaged over time, no big deal. However, I do seem to remember that I've sometimes had problems (probably over dial-up -- it has been a while) downloading lots of new packages. Then the solution has always been to do it a few packages at a time, e.g., one category at a time. Now the above is not to dismiss your concerns. Obviously, this is an issue for you. However, having read various cygwin lists for years, this is the first time I can remember that someone has asked for this feature. Most setup requests have to do with user interface. Most mirror complaints are about staleness or disappearances. Well, that's my two bits (and not even worth that much). Best wishes, - Barry - Disclaimer: Statements made herein are not made on behalf of NIAID. - If you believe you received this e-mail in error, you are probably sadly mistaken, but if not, aren't you lucky? - Sending this e-mail does not constitute endorsement of the contents; I may change my mind later. - This e-mail may have been sent in haste; if any of its contents are offensive, inappropriate, inaccurate, ungrammatical, misspelled, or incomplete, too bad. - Ideas in this e-mail are bigger than they appear and the writer may be smarter than he appears.
Typo in setup.hint of csih
category: Util This creates a new category, of which csih is the only package. It probably should be Utils. - Barry - Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: [ITP] txt2regex-0.8 -- A Regular Expression wizard, all written with bash2 builtins
Jari Aalto (Cygwin-bug#20080303T1357) wrote on Monday, March 03, 2008 9:02 AM: Included in Debain stable: http://packages.debian.org/txt2regex Jari sdesc: A Regular Expression wizard, all written with bash2 builtins ldesc: A program that converts human sentences to RegExs. With a simple interface, you just answer to questions and build your own RegEx for a large variety of programs, like awk, emacs, grep, perl, php, procmail, python, sed and vim. There are more than 20 supported programs. category: Utils requires: cygwin Shouldn't requires include bash?
RE: [ITP] colordiff-1.0.7
Kostya Altukhov wrote on Thursday, February 21, 2008 6:55 AM: requires: cygwin perl ldesc:A wrapper for the diff command. If this is a wrapper to diff, shouldn't it require diffutils? (Please excuse me if this is terribly naïve.) Thanks for packaging this. I'm looking forward to having it show up in the mirrors! - Barry - Disclaimer: Statements made herein are not made on behalf of NIAID.
RE: Updated: ttcp-20071212-1 -- Network benchmarking tool
Wrong list? (Top posted on purpose, since there's no need to read the content.) Jari Aalto wrote on Wednesday, December 12, 2007 3:48 PM: PACKAGE DESCRIPTION === Homepage: http://www.netcordia.com/resources/tools.asp License : GPL Network throughput testing tool. It can be also used to create a network pipe through which you can push any other data you might have. CHANGES SINCE LAST RELEASE == None. New maintainer. INSTALL OR UPGRADE NOTES Standard install. CYGWIN INSTALLATION INFORMATION === To install this package, click on the Install Cygwin now link on the http://cygwin.com/ web page. This downloads setup.exe to your system. Then, run setup and answer all of the questions. You'll find the package listed in the All category. After installation, read the documentation at directories: /usr/share/doc/package-version/* /usr/share/doc/Cygwin/package-version.README If you have questions or comments, please send them to the Cygwin mailing list at [EMAIL PROTECTED]. CYGWIN-ANNOUNCE UNSUBSCRIBE INFO This message has been sent to cygwin-announce list. If you want to unsubscribe from the mailing list, look at the List-Unsubscribe: tag in the email header of this message. Send email to the address specified there. It will be in the format: [EMAIL PROTECTED] More information on unsubscribing can be found: http://sources.redhat.com/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at the above URL. -- Welcome to FOSS revolution: we fix and modify until it shines
RE: Updated: epstool 3.08-2 -- edit preview images and fix bounding boxes in EPS files
Wrong list? (Top posted on purpose, since there's no need to read the content.) Jari Aalto wrote on Tuesday, December 18, 2007 10:22 AM: PACKAGE DESCRIPTION === Homepage: http://www.cs.wisc.edu/~ghost/gsview/epstool.htm License : GPL Encapsulated PostScript (EPS) files may contain a preview to be used by programs that can't interpret the PostScript code. epstool can create and extract such previews. CHANGES SINCE LAST RELEASE == None. New maintainer. INSTALL OR UPGRADE NOTES Standard install. CYGWIN INSTALLATION INFORMATION === To install this package, click on the Install Cygwin now link on the http://cygwin.com/ web page. This downloads setup.exe to your system. Then, run setup and answer all of the questions. You'll find the package listed in the All category. After installation, read the documentation at directories: /usr/share/doc/package-version/* /usr/share/doc/Cygwin/package-version.README If you have questions or comments, please send them to the Cygwin mailing list at [EMAIL PROTECTED]. CYGWIN-ANNOUNCE UNSUBSCRIBE INFO This message has been sent to cygwin-announce list. If you want to unsubscribe from the mailing list, look at the List-Unsubscribe: tag in the email header of this message. Send email to the address specified there. It will be in the format: [EMAIL PROTECTED] More information on unsubscribing can be found: http://sources.redhat.com/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at the above URL. -- Welcome to FOSS revolution: we fix and modify until it shines
setup.ini (presumably setup.htnt) for man
bash is on the requires line twice.
fortune-1.99.1-2
http://sourceware.org/ml/cygwin-apps/2006-01/msg00113.html Is it time to remove the test designation? - Barry
FYI: un/zip update available
I do not meaning to bug the maintainer, request an update, or imply that the maintainer is not paying attention to the canonical site, but in case the maintainer just hasn't noticed ... http://www.info-zip.org/: - Zip 2.32 was released on 20 June 2006. http://www.info-zip.org/Zip.html: All known vulnerabilities are fixed in Zip 2.32. Zip 2.3 and (presumably) all previous versions have a buffer-overrun vulnerability relating to deep directory paths that could potentially lead to local privilege escalation ... - UnZip 5.52 was released on 27 February 2005. http://www.info-zip.org/UnZip.html: All versions of UnZip through 5.50 have a number of directory-traversal vulnerabilities ... /c cygcheck -c zip; ls -og /bin/zip.exe Cygwin Package Information Package VersionStatus zip 2.3-6 OK -rwxrwxrwx 1 63488 2004-02-26 20:37:16 /bin/zip.exe /c cygcheck -c unzip; ls -og /bin/unzip.exe Cygwin Package Information Package VersionStatus unzip5.50-5 OK -rwxrwxrwx 1 108544 2003-08-09 03:32:53 /bin/unzip.exe Again, I do not mean to bug the maintainer and appreciate all the work that s/he has done maintaining the zip and unzip packages. - Barry - Disclaimer: Statements made herein are not made on behalf of NIAID. - If you believe you received this e-mail in error, you are probably sadly mistaken, but if not, aren't you lucky? - Sending this e-mail does not constitute endorsement of the contents; I may change my mind later. - This e-mail may have been sent in haste; if any of its contents are offensive, inappropriate, inaccurate, ungrammatical, misspelled, or incomplete, too bad. - Ideas in this e-mail are bigger than they appear and the writer may be smarter than he appears.
RE: [ITP] gt5-1.3 -- A terminal program to show disk usage and navigate between directories
Jari Aalto wrote: requires: cygwin lynx The author says that links is better than lynx. http://gt5.sourceforge.net/browsers.html Is there a reason that you prefer lynx? Thanks for offering this. - Barry
