public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

jasper: remove, abandoned upstream.

Browse Source 
Jasper has been marked insecure for a while, and upstream has not
been responsive to CVEs for over a year.

Fixes #55388.

Signed-off-by: David Anderson <dave@natulte.net>
This commit is contained in:
David Anderson
2020-03-14 01:30:31 -07:00
parent 9c11454182
commit 3a38cef8f9
12 changed files with 9 additions and 83 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
pkgs/development/libraries/libraw/default.nix
View File

@@ -1,7 +1,4 @@
{ stdenv, fetchurl, lcms2, pkgconfig
, jasper ? null, withJpeg2k ? false
# disable JPEG2000 support by default as jasper has many CVE
}:
{ stdenv, fetchurl, lcms2, pkgconfig }:
stdenv.mkDerivation rec {
pname = "libraw";
@@ -14,8 +11,6 @@ stdenv.mkDerivation rec {
outputs = [ "out" "lib" "dev" "doc" ];
buildInputs = stdenv.lib.optionals withJpeg2k [ jasper ];
propagatedBuildInputs = [ lcms2 ];
nativeBuildInputs = [ pkgconfig ];