Open Sigmanificient opened 1 month ago
This project is not dependent on Freeimage.
The main project is pure Java. The Libretro core is not dependent on Freeimage.
The only thing that uses Freeimage is @hex007 's SDL interface, which like the Libretro core, is completely optional.
Thanks for your clarification, this is a great news
Hi, I am currently porting
freej2me
to nixpkgs (a linux package repository). Unfortunately, the package is stuck in draft due to theFreeimage
dependency, which is littered with CVEs:Due to the insecure nature of the dependency, it cannot be merged at the current state. I know that freej2me may not have high security concerns as it isn't a critical application, but I think using a freeimage should be avoided in it's current state.
I hope this can mark the start to migrating towards a vulnerability-free graphics library.