Arch Linux

Please read this before reporting a bug:

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

FS#65567 - [gdk-pixbuf2] drop support for jasper

Attached to Project: Arch Linux
Opened by Gunnar Bretthauer (Taijian) - Thursday, 20 February 2020, 12:21 GMT
Last edited by Jan Alexander Steffens (heftig) - Thursday, 20 February 2020, 12:38 GMT
Task Type Feature Request
Category Packages: Extra
Status Closed
Assigned To Jan de Groot (JGC)
Jan Alexander Steffens (heftig)
Architecture All
Severity Critical
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No



Arch currently builds gdk-pixbuf2 with jasper support enabled. Unfortunately, jasper is currently unmaintened upstream and it is unlikely that this will change [1]. There are numerous open CVEs that are unlikely to be fixed.
For this reason, gdk-pixbuf2 upstream recommends that it be build without jasper enabled, as is the default [2].
Lots of other distros have already dropped jasper altogether (Debian, Ubuntu, NixOS, Alpine, OpenSUSE) and I think Arch should do so as well [1],[3].

Additional info:
* package version(s)
* config and/or log files etc.
* link to upstream bug report, if any

Steps to reproduce:
This task depends upon

Closed by  Jan Alexander Steffens (heftig)
Thursday, 20 February 2020, 12:38 GMT
Reason for closing:  Fixed
Additional comments about closing:  2.40.0-2