Skip to content

Commit

Permalink
gegl_0_4: disabling jasper, fixing build
Browse files Browse the repository at this point in the history
Jasper has been recently marked as insecure and removed from a bunch
of places due to some known vulnerabilities and upstream not moving
forward. This was done in NixOS#73586

This prevents gegl_0_4 from building, as jasper is a runtime dependency
per default. There is an upstream issue for that, but it does not seem
to have made progress yet: https://gitlab.gnome.org/GNOME/gegl/issues/35

(cherry picked from commit c9841ed)
  • Loading branch information
d-goldin authored and dtzWill committed Jan 24, 2020
1 parent d3c37fc commit 8596bc4
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions pkgs/development/libraries/gegl/4.0.nix
Original file line number Diff line number Diff line change
Expand Up @@ -105,6 +105,9 @@ stdenv.mkDerivation rec {
"-Dlibv4l=disabled"
"-Dlibv4l2=disabled"
"-Dumfpack=disabled"
# Disabled due to multiple vulnerabilities, see
# https://github.com/NixOS/nixpkgs/pull/73586
"-Djasper=disabled"
];

# TODO: Fix missing math symbols in gegl seamless clone.
Expand Down

0 comments on commit 8596bc4

Please sign in to comment.