netpbm: Do not use vendored dependencies

Especially since Jasper is unmaintained and insecure
This commit is contained in:
Jan Tojnar 2020-09-06 16:34:31 +02:00
parent 8a9fa4782f
commit 3f3fe38c7a
No known key found for this signature in database
GPG Key ID: 7FAB2A15F7A607A4

View File

@ -4,6 +4,7 @@
, pkg-config
, libjpeg
, libpng
, jbigkit
, flex
, zlib
, perl
@ -40,6 +41,7 @@ stdenv.mkDerivation {
libjpeg
libxml2
libtiff
jbigkit
] ++ lib.optional enableX11 libX11;
enableParallelBuilding = true;
@ -63,6 +65,9 @@ stdenv.mkDerivation {
echo "TIFFLIB_NEEDS_JPEG = N" >> config.mk
echo "TIFFLIB_NEEDS_Z = N" >> config.mk
echo "JPEGLIB = libjpeg.so" >> config.mk
echo "JBIGLIB = libjbig.a" >> config.mk
# Insecure
echo "JASPERLIB = NONE" >> config.mk
# Fix path to rgb.txt
echo "RGB_DB_PATH = $out/share/netpbm/misc/rgb.txt" >> config.mk