To: alpine-dev <alpine-devel@lists.alpinelinux.org>
From: "A. Wilcox" <awilfox@adelielinux.org>
Subject: [alpine-devel] Concerns regarding the ImageMagick package
Organization: =?UTF-8?Q?Ad=c3=a9lie_Linux?=
Message-ID: <047dad7a-72be-84fd-bb3e-49786342fadd@adelielinux.org>
Date: Fri, 23 Mar 2018 03:07:57 -0500
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.6.0
Precedence: list
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="yZJeyswlCMoyOS3Tyc3w5BsDozYu1JeD2"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--yZJeyswlCMoyOS3Tyc3w5BsDozYu1JeD2
Content-Type: multipart/mixed; boundary="TYm23nfNgKkLx7UxAoddKZ5CvvR1FdUmY";
 protected-headers="v1"
From: "A. Wilcox" <awilfox@adelielinux.org>
To: alpine-dev <alpine-devel@lists.alpinelinux.org>
Message-ID: <047dad7a-72be-84fd-bb3e-49786342fadd@adelielinux.org>
Subject: Concerns regarding the ImageMagick package

--TYm23nfNgKkLx7UxAoddKZ5CvvR1FdUmY
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Hello Alpinists,

We (at Ad=C3=A9lie) have identified a few issues with the Alpine ImageMag=
ick
package:

1) The version of Ghostscript packaged in main/ghostscript is AGPL, not
GPL.  I believe it violates the licenses of both packages to link them
together, and yet this is happening.

I highly suggest that Alpine ship Ghostscript 9.06, the last GPL
version, along with Debian's security patches for it.  We had to do this
when we were based on Gentoo (see
https://code.foxkit.us/adelie/packages/blob/ebuild/app-text/ghostscript-g=
pl/ghostscript-gpl-9.06.ebuild
for the ebuild I wrote) because Gentoo's CUPS depends on Ghostscript.
If an APKBUILD for Ghostscript 9.06 is desired, I would be more than
happy to create one.

2) ImageMagick's X11 support is disabled.  I would understand that,
allowing one to use ImageMagick without installing X11 libraries, but
ImageMagick is linked against librsvg, which is linked against pango.
As shown on the Alpine package browser[1], pango pulls in libX11 and
libXext, which are ImageMagick's only X11 library dependencies.  As
such, no makedepends/checkdepends modifications are technically
necessary to change to --with-x (though libx11-dev and libxext-dev would
be a good idea).  Since this adds a lot of functionality and virtually
no binary size difference, we think it'd be a good idea to investigate th=
is.


Best,
--arw


[1]: https://pkgs.alpinelinux.org/package/edge/main/s390x/pango

--=20
A. Wilcox (awilfox)
Project Lead, Ad=C3=A9lie Linux
http://adelielinux.org


--TYm23nfNgKkLx7UxAoddKZ5CvvR1FdUmY--

--yZJeyswlCMoyOS3Tyc3w5BsDozYu1JeD2
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=/Kzi
-----END PGP SIGNATURE-----

--yZJeyswlCMoyOS3Tyc3w5BsDozYu1JeD2--


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---