{ stdenv, fetchurl, unzip, libjpeg, autoreconfHook }: stdenv.mkDerivation rec { name = "jasper-1.900.1"; src = fetchurl { url = "http://www.ece.uvic.ca/~mdadams/jasper/software/${name}.zip"; sha256 = "154l7zk7yh3v8l2l6zm5s2alvd2fzkp6c9i18iajfbna5af5m43b"; }; patches = [ ./jasper-CVE-2014-8137-variant2.diff ./jasper-CVE-2014-8137-noabort.diff ./jasper-CVE-2014-8138.diff ./jasper-CVE-2014-8157.diff ./jasper-CVE-2014-8158.diff ./jasper-CVE-2014-9029.diff ]; # newer reconf to recognize a multiout flag nativeBuildInputs = [ unzip autoreconfHook ]; propagatedBuildInputs = [ libjpeg ]; configureFlags = "--enable-shared"; outputs = [ "dev" "out" "man" "bin" ]; enableParallelBuilding = true; meta = { homepage = https://www.ece.uvic.ca/~frodo/jasper/; description = "JPEG2000 Library"; }; }