Public bug reported:

[Availability]
The package jpeg-xl is already in Ubuntu universe.
The package jpeg-xl build for the architectures it is designed to work on.
It currently builds and works for all Ubuntu architectures
Link to package https://launchpad.net/ubuntu/+source/jpeg-xl

[Rationale]
- The packages libjxl-gdk-pixbuf and libjxl0.9 (soon to have a soname bump to 
libjxl0.10) are required in Ubuntu main to enable JPEG XL files to be used as a 
desktop wallpaper and to be viewable in GNOME-ish apps like eog and shotwell
- The package libjxl-gdk-pixbuf will generally be useful for a large part of 
our user base
- The binary package libjxl-gdk-pixbuf needs to be in main to achieve JPEG XL 
support

- It would be great and useful to community/processes to have the
package jpeg-xl in Ubuntu main, but there is no definitive deadline.

[Security]
- Had multiple security issues in the past
- https://ubuntu.com/security/cve?package=jpeg-xl
- https://security-tracker.debian.org/tracker/source-package/jpeg-xl
+ Debian has marked the 2 2023 CVEs as "no-dsa (minor issue)
+ The remaining needs-triage bug in Ubuntu's tracker, CVE-2021-36691, has been 
marked by Debian as "negligible security impact"

- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Packages do not install services, timers or recurring jobs
- Packages do not open privileged ports (ports < 1024).
- Packages do not expose any external endpoints
- Packages do not contain extensions to security-sensitive software (filters, 
scanners, plugins, UI skins, ...)

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu/Upstream and does not have 
too many, long-term & critical, open bugs
- Ubuntu https://bugs.launchpad.net/ubuntu/+source/jpeg-xl/
- Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=jpeg-xl
- Upstream's bug tracker https://github.com/libjxl/libjxl/issues

- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package runs a test suite on build time, if it fails it makes the build 
fail, link to build log https://launchpad.net/ubuntu/+source/jpeg-xl/0.9.2-9

- The package runs an autopkgtest, and is currently passing on all 
architectures except for s390x.
- s390x is skipped (shows as "neutral") which is acceptable since the intended 
use of jpeg-xl is on desktops and s390x is not a desktop architecture.

https://autopkgtest.ubuntu.com/packages/jpeg-xl

- The package does have not failing autopkgtests right now

[Quality assurance - packaging]
- debian/watch is present and works
- debian/control defines a correct Maintainer field

- Lintian overrides are present, but ok because this was affected by the
t64 transition

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies

- The package will be installed by default, but does not ask debconf
questions

- Packaging and build is easy, link to debian/rules
https://salsa.debian.org/debian-phototools-team/libjxl/-/blob/master/debian/rules

[UI standards]
- Application is not end-user facing (does not need translation or .desktop 
file)

[Dependencies]
- There are further dependencies that are not yet in main, MIR for them is at 
- highway https://launchpad.net/bugs/2070807
- openexr
- which in turns depends on imath

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- The owning team will be Ubuntu Desktop (~desktop-packages) and I have their 
acknowledgement for that commitment

- This does not use static builds
- This does not use vendored code
- This package is not rust based

- The package has been built within the last 3 months in the archive
- Build link on launchpad: https://launchpad.net/ubuntu/+source/jpeg-xl/0.9.2-9

[Background information]
- The Package description explains the package well
- Upstream Name is libjxl
- Link to upstream project https://github.com/libjxl/libjxl
- Some additional binary packages have no reverse dependencies and can remain 
in universe:
+ libjpegxl-java
+ libjxl-devtools
+ libjxl-tools

- Before version 0.9, the gdk-pixbuf was not enabled in Debian or Ubuntu
because it required skcms which is not available in Debian or Ubuntu;
with version 0.9, the plugin was buildable with lcms2 which is in Ubuntu
main. It is not feasible to backport this to Ubuntu 24.04 LTS which only
has version 0.7.

- GNOME 46 (released in early 2024) switched its default desktop
wallpaper to JPEG XL

** Affects: jpeg-xl (Ubuntu)
     Importance: Undecided
         Status: Incomplete

** Changed in: jpeg-xl (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2070882

Title:
  [MIR] jpeg-xl

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/jpeg-xl/+bug/2070882/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to