nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-07-21 08:01:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

lepton: remove

Browse Source 
Archived upstream with known vulnerabilities (CVE-2022-4104). Prefer
lepton-jpeg-util. gb-backup no longer depends on this package.

Assisted-by: Grok 4.3 (xAI)
This commit is contained in:
lucasew
2026-06-29 18:45:33 -03:00
parent 7bd2581099
commit f338f71d96
2 changed files with 1 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
pkgs/by-name/le/lepton/package.nix
View File

@@ -1,38 +0,0 @@
{
lib,
stdenv,
fetchFromGitHub,
cmake,
git,
glibc,
}:
stdenv.mkDerivation {
version = "2019-08-20";
pname = "lepton-unstable";
src = fetchFromGitHub {
repo = "lepton";
owner = "dropbox";
rev = "3d1bc19da9f13a6e817938afd0f61a81110be4da";
sha256 = "0aqs6nvcbq8cbfv8699fa634bsz7csmk0169n069yvv17d1c07fd";
};
nativeBuildInputs = [
cmake
git
];
buildInputs = lib.optionals stdenv.hostPlatform.isLinux [ glibc.static ];
meta = {
homepage = "https://github.com/dropbox/lepton";
description = "Tool to losslessly compress JPEGs";
license = lib.licenses.asl20;
platforms = [
"x86_64-linux"
"x86_64-darwin"
];
maintainers = with lib.maintainers; [ artemist ];
knownVulnerabilities = [ "CVE-2022-4104" ];
};
}

1
pkgs/top-level/aliases.nix
View File

@@ -1164,6 +1164,7 @@ mapAliases {
leaf = throw "'leaf' has been removed as it is unmaintained. Consider using 'fastfetch' instead"; # Added 2026-04-24
ledger-agent = throw "ledger-agent has been removed because upstream dropped Ledger support"; # Added 2026-03-11
ledger_agent = throw "ledger-agent has been removed because upstream dropped Ledger support"; # Added 2026-03-11
lepton = throw "'lepton' has been removed as it is archived upstream and has known vulnerabilities (CVE-2022-4104). Consider using 'lepton-jpeg-util' instead"; # Added 2026-06-29
lesstif = throw "'lesstif' has been removed due to its being broken and unmaintained upstream. Consider using 'motif' instead."; # Added 2025-06-09
lexical = throw "'lexical' has been removed because it was deprecated and archived upstream. Consider using 'beamPackages.expert' instead"; # Added 2026-02-24
lfe = warnAlias "'lfe' is deprecated in favor of using the beamPackages sets. Use 'beam27Packages.lfe' instead." beam27Packages.lfe; # added 2026-06-15