Bug#796270: Please disable jasper support

Michael Biebl biebl at debian.org
Fri Aug 21 07:19:31 UTC 2015


Hi Moritz!

Am 21.08.2015 um 00:29 schrieb Moritz Muehlenhoff:
> Source: gdk-pixbuf
> Severity: important
> 
> Hi,
> please disable jasper support in gdk-pixbuf. It's an abandoned
> code base with frequent security issues and JPEG2000 is an
> exotic fringe format unused in practice.
> 
> We can keep it in the archive for scientific software etc, but
> let's not expose via gdk-pixbuf to exposed applications like
> Iceweasel.

Jasper support was enabled in 2.21.6-1 back in 2010.
I didn't find any further explanation in debian/changelog why it was
enabled.

slomo, do you remember the details?

Regards,
Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20150821/458ec748/attachment-0001.sig>


More information about the pkg-gnome-maintainers mailing list