From 8b86f7440934ada35224a0050501d3d4cf132082 Mon Sep 17 00:00:00 2001
From: Tomodachi94 <tomodachi94@protonmail.com>
Date: Sat, 23 Nov 2024 04:20:06 +0000
Subject: [PATCH] vuze: drop

No releases since early 2017:
https://en.wikipedia.org/wiki/Vuze#Development_hiatus_and_fork

Vulnerable to CVE-2018-13417

BiglyBT (`biglybt`) is a maintained fork.

(cherry picked from commit 268ae6a302b043ad5ef07528d48b0585796be30b)
---
 .../manual/release-notes/rl-2411.section.md   |  3 ++
 .../networking/p2p/vuze/default.nix           | 33 -------------------
 pkgs/top-level/aliases.nix                    |  1 +
 pkgs/top-level/all-packages.nix               |  5 ---
 4 files changed, 4 insertions(+), 38 deletions(-)
 delete mode 100644 pkgs/applications/networking/p2p/vuze/default.nix

diff --git a/nixos/doc/manual/release-notes/rl-2411.section.md b/nixos/doc/manual/release-notes/rl-2411.section.md
index 7af68599ac20..f726128f1269 100644
--- a/nixos/doc/manual/release-notes/rl-2411.section.md
+++ b/nixos/doc/manual/release-notes/rl-2411.section.md
@@ -439,6 +439,9 @@
 
 - `gitea` no longer supports the opt-in feature [PAM (Pluggable Authentication Module)](https://docs.gitea.com/usage/authentication#pam-pluggable-authentication-module).
 
+- `vuze` was removed because it is unmaintained upstream and insecure (CVE-2018-13417).
+  BiglyBT is a maintained fork.
+
 - `services.ddclient.use` has been deprecated: `ddclient` now supports separate IPv4 and IPv6 configuration. Use `services.ddclient.usev4` and `services.ddclient.usev6` instead.
 
 - `services.pgbouncer` systemd service is now configured with `Type=notify-reload` and allows reloading configuration without process restart. PgBouncer configuration options were moved to the freeform type option under [`services.pgbouncer.settings`](#opt-services.pgbouncer.settings).
diff --git a/pkgs/applications/networking/p2p/vuze/default.nix b/pkgs/applications/networking/p2p/vuze/default.nix
deleted file mode 100644
index 0d3ee40236b5..000000000000
--- a/pkgs/applications/networking/p2p/vuze/default.nix
+++ /dev/null
@@ -1,33 +0,0 @@
-{ lib, stdenv, fetchsvn, jdk, jre, ant, swt, makeWrapper }:
-
-stdenv.mkDerivation rec {
-  pname = "vuze";
-  version = "5750";
-
-  src = fetchsvn {
-    url = "http://svn.vuze.com/public/client/tags/RELEASE_${version}";
-    sha256 = "07w6ipyiy8hi88d6yxbbf3vkv26mj7dcz9yr8141hb2ig03v0h0p";
-  };
-
-  nativeBuildInputs = [ makeWrapper ];
-  buildInputs = [ jdk ant ];
-
-  buildPhase = "ant";
-
-  installPhase = ''
-    install -D dist/Vuze_0000-00.jar $out/share/java/Vuze_${version}-00.jar
-    makeWrapper ${jre}/bin/java $out/bin/vuze \
-      --add-flags "-Xmx256m -Djava.library.path=${swt}/lib -cp $out/share/java/Vuze_${version}-00.jar:${swt}/jars/swt.jar org.gudy.azureus2.ui.swt.Main"
-  '';
-
-  meta = with lib; {
-    description = "Torrent client";
-    homepage = "http://www.vuze.com";
-    license = licenses.unfree;
-    platforms = platforms.all;
-    maintainers = [ ];
-    # Doesn't launch, gives java related incompatibilities errors. Probably
-    # related to swt. Same error happens with swt_jdk8
-    broken = true;
-  };
-}
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 80cf759bb46f..5d9dc2cc15b9 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -1289,6 +1289,7 @@ mapAliases {
   virtscreen = throw "'virtscreen' has been removed, as it was broken and unmaintained"; # Added 2024-10-17
   vkBasalt = vkbasalt; # Added 2022-11-22
   vkdt-wayland = vkdt; # Added 2024-04-19
+  vuze = throw "'vuze' was removed because it is unmaintained upstream and insecure (CVE-2018-13417). BiglyBT is a maintained fork."; # Added 2024-11-22
   inherit (libsForQt5.mauiPackages) vvave; # added 2022-05-17
 
   ### W ###
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index ed83d99fe3f3..df168be202cd 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -16359,11 +16359,6 @@ with pkgs;
     inherit (darwin.apple_sdk.frameworks) AppKit Cocoa CoreServices Security;
   };
 
-  vuze = callPackage ../applications/networking/p2p/vuze {
-    jre = jre8; # TODO: remove override https://github.com/NixOS/nixpkgs/pull/89731
-    jdk = jdk8; # TODO: remove override https://github.com/NixOS/nixpkgs/pull/89731
-  };
-
   whispers = with python3Packages; toPythonApplication whispers;
 
   warp = callPackage ../applications/networking/warp {