Opened 19 months ago

Last modified 18 months ago

#71847 new enhancement

p7zip is no longer maintained as should be replaced with 7zip

Reported by: lcvisser (Ludo Visser) Owned by:
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc: mascguy (Christopher Nielsen), Schamschula (Marius Schamschula), Gcenx, jasonliu-- (Jason Liu), cardi (calvin ardi), herbygillot (Herby Gillot), srirangav (Sriranga Veeraraghavan), cooljeanius (Eric Gallager)
Port: gecode gnat-booch95 gnat-booch95 gutils-suite keka keka littleutils lzma MoltenVK p5-io-compress-lzma stardict ufo-ai

Description

p7zip hasn't been updated for 8 years and is stuck at version 16.02. At the same time, we have a 7zip port that is appears to be actively maintained and at version 24.09. Currently 18 ports depend on p7zip and zero ports depend on 7zip.

Is is possible to deprecate p7zip and/or make it an alias for 7zip?

Change History (4)

comment:1 Changed 19 months ago by ryandesign (Ryan Carsten Schmidt)

Cc: mascguy Schamschula Gcenx jasonliu-- cardi herbygillot srirangav added
Port: gecode gnat-booch95 gnat-booch95 gutils-suite keka keka littleutils lzma MoltenVK p5-io-compress-lzma stardict ufo-ai added; p7zip 7zip removed
Type: requestenhancement

Some of those Portfiles explicitly depend on port:p7zip:

  • gnat-booch95
  • gutils-suite
  • keka
  • littleutils
  • MoltenVK
  • p5-io-compress-lzma
  • ufo-ai

Whether each of those ports can be switched from p7zip to 7zip will need to be investigated individually.

Others have a 7z-compressed distfile as indicated by their use of use_7z yes:

  • gecode
  • gnat-booch95
  • keka
  • lzma
  • stardict

In those cases, MacPorts base automatically adds the bin:7za:p7zip dependency and uses it to extract the file. To fix these, the dependency added by MacPorts base would have to be changed. If the program installed by the 7zip port is named differently than the program installed by the p7zip port (it is) or takes different arguments, then further changes to MacPorts base would be needed to adapt to that. If any of the ports customize the extract arguments that would need to be verified too, but I don't think any of them do.

7zip has more dependencies than p7zip which may be undesirable.

7zip only works on arm64 and x86_64 which is definitely undesirable for users of ppc, ppc64, and i386 systems.

comment:2 Changed 19 months ago by lcvisser (Ludo Visser)

All good points.

My motivation for opening the ticket was that someone pointed out that p7zip has a number of open CVEs against it. A bit further digging shows that there is a newer fork that is at v17 but now also abandoned (last update 3 years ago). I'm unsure if there's a good way forward here...

comment:3 Changed 19 months ago by Schamschula (Marius Schamschula)

littleutils does not find the needed p7zip binaries if I switch to 7zip. Thus, to-7zip cannot be built.

More precisely (only looking at the binaries):

 Port p7zip @16.02_5 contains:
  /opt/local/bin/7z
  /opt/local/bin/7za
  /opt/local/bin/7zr

and

Port 7zip @24.09_0 contains:
  /opt/local/bin/7zz

comment:4 Changed 18 months ago by cooljeanius (Eric Gallager)

Cc: cooljeanius added
Note: See TracTickets for help on using tickets.