On quarta-feira, 27 de abril de 2016 01:11:28 PDT Kevin Kofler wrote: > Jake Petroules wrote: > > The MNG and JPEG2000 plugins are no longer built by default on most > > platforms because upstream development has stalled and there are known > > security vulnerabilities. See > > https://codereview.qt-project.org/#/c/141429/ > > For libmng, you bundle the ancient version 1.0.10 from 2009 (!). The current > version is 2.0.3 from 2015: > https://sourceforge.net/projects/libmng/files/libmng-devel/ > Despite the new major version number, qt5-qtimageformats compiles with no > changes against that version.
Nice! I wonder why the bundled copies are still present. The commit that disabled them was "Build MNG and Jpeg2000 plugins only if system libs found". Deletion in https://codereview.qt-project.org/157156. > For JPEG2000: > > You can still build them manually if you really want them. Perhaps you > > could help port the JPEG2000 plugin to > > https://github.com/uclouvain/openjpeg > > That would be an option. But I would start by just getting the Jasper > security fixes from a GNU/Linux distribution (e.g.: > http://pkgs.fedoraproject.org/cgit/rpms/jasper.git/tree/ > ) and applying them to your bundled copy. Sorry, just deleting. That makes downloading and maintaining such a library SEP. https://en.wikipedia.org/wiki/SEP_field -- Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org Software Architect - Intel Open Source Technology Center _______________________________________________ Development mailing list [email protected] http://lists.qt-project.org/mailman/listinfo/development
