mbox

[bug#39197,core-updates,0/4] Replace libjpeg with libjpeg-turbo

Message ID 20200119231651.11874-1-mbakke@fastmail.com
Headers show

Message

Marius Bakke Jan. 19, 2020, 11:16 p.m. UTC 
AIUI most distributions have moved away from the IJG libjpeg library in
favor of libjpeg-turbo (which is ABI- and API-compatible, and under lots
of scrutiny by security researchers).

This series do the same for Guix.

Marius Bakke (4):
  gnu: RHash: Do not use git-fetch, but provide a fallback URL.
  gnu: cmake-minimal: Build with a minimal variant of cURL.
  gnu: Replace uses of 'libjpeg' with 'libjpeg-turbo'.
  gnu: Deprecate the 'libjpeg' variable.

 gnu/packages/abiword.scm          |  2 +-
 gnu/packages/admin.scm            |  2 +-
 gnu/packages/algebra.scm          |  2 +-
 gnu/packages/animation.scm        |  2 +-
 gnu/packages/astronomy.scm        |  4 ++--
 gnu/packages/cdrom.scm            |  2 +-
 gnu/packages/cmake.scm            |  5 ++++-
 gnu/packages/cran.scm             |  6 +++---
 gnu/packages/crypto.scm           | 18 ++++++++++++------
 gnu/packages/cups.scm             |  4 ++--
 gnu/packages/curl.scm             | 16 ++++++++++++++--
 gnu/packages/display-managers.scm |  2 +-
 gnu/packages/ebook.scm            |  2 +-
 gnu/packages/emacs.scm            |  2 +-
 gnu/packages/emulators.scm        |  2 +-
 gnu/packages/enlightenment.scm    |  2 +-
 gnu/packages/fltk.scm             |  4 ++--
 gnu/packages/fontutils.scm        |  2 +-
 gnu/packages/freedesktop.scm      |  2 +-
 gnu/packages/game-development.scm | 12 ++++++------
 gnu/packages/games.scm            | 20 ++++++++++----------
 gnu/packages/gd.scm               |  4 ++--
 gnu/packages/ghostscript.scm      |  6 +++---
 gnu/packages/gimp.scm             |  4 ++--
 gnu/packages/gnome.scm            |  8 ++++----
 gnu/packages/gnunet.scm           |  2 +-
 gnu/packages/gnustep.scm          |  2 +-
 gnu/packages/graphics.scm         | 14 +++++++-------
 gnu/packages/graphviz.scm         |  2 +-
 gnu/packages/gstreamer.scm        |  2 +-
 gnu/packages/gtk.scm              |  2 +-
 gnu/packages/image-processing.scm | 16 ++++++++--------
 gnu/packages/image-viewers.scm    |  4 ++--
 gnu/packages/image.scm            | 31 +++++++++++++++++--------------
 gnu/packages/imagemagick.scm      |  4 ++--
 gnu/packages/java.scm             | 10 +++++-----
 gnu/packages/kde-frameworks.scm   |  2 +-
 gnu/packages/kodi.scm             |  2 +-
 gnu/packages/machine-learning.scm |  4 ++--
 gnu/packages/mate.scm             |  4 ++--
 gnu/packages/maths.scm            |  8 ++++----
 gnu/packages/netpbm.scm           |  2 +-
 gnu/packages/pdf.scm              |  8 ++++----
 gnu/packages/photo.scm            | 12 ++++++------
 gnu/packages/prolog.scm           |  2 +-
 gnu/packages/python-xyz.scm       |  4 ++--
 gnu/packages/qt.scm               |  6 +++---
 gnu/packages/rdesktop.scm         |  2 +-
 gnu/packages/scanner.scm          |  4 ++--
 gnu/packages/scheme.scm           |  2 +-
 gnu/packages/scribus.scm          |  2 +-
 gnu/packages/sdl.scm              |  4 ++--
 gnu/packages/spice.scm            |  2 +-
 gnu/packages/statistics.scm       |  2 +-
 gnu/packages/tcl.scm              |  2 +-
 gnu/packages/upnp.scm             |  2 +-
 gnu/packages/video.scm            |  8 ++++----
 gnu/packages/web-browsers.scm     |  4 ++--
 gnu/packages/web.scm              |  2 +-
 gnu/packages/webkit.scm           |  2 +-
 gnu/packages/wine.scm             |  2 +-
 gnu/packages/wv.scm               |  2 +-
 gnu/packages/wxwidgets.scm        |  4 ++--
 gnu/packages/xdisorg.scm          |  2 +-
 gnu/packages/xfce.scm             |  2 +-
 gnu/packages/xfig.scm             |  4 ++--
 gnu/packages/xorg.scm             |  2 +-
 67 files changed, 179 insertions(+), 155 deletions(-)

Comments

Maja Kądziołka Jan. 20, 2020, 2:06 p.m. UTC | #1 
> This is necessary to avoid a circular dependency in the next commit.
> 
> * gnu/packages/curl.scm (curl-minimal): New public variable.
> * gnu/packages/cmake.scm (cmake-minimal)[inputs]: Change from CURL to 
> CURL-MINIMAL.
> (cmake)[inputs]: Do the opposite.

Is there a reason this curl-minimal couldn't also be used for
git-minimal? This would keep the updater working for rhash.