Your message dated Tue, 10 Mar 2026 21:50:09 +0000
with message-id <[email protected]>
and subject line Bug#1037981: fixed in libjpeg-turbo 1:3.1.3-1
has caused the Debian Bug report #1037981,
regarding Stop installing the header file jpegint.h
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1037981: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037981
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libjpeg62-turbo-dev
Version: 1:2.0.6-4
We should not be distributing jpegint.h header, it gives a false sense of API.
Here is the full verbatim quote from upstream about this:
```
jpegint.h is only included by jpeglib.h if JPEG_INTERNALS is defined.
jpegint.h is a project-private header that exposes internal interfaces
and structures in the libjpeg API library. Unlike the public libjpeg
API/ABI, those internal interfaces and structures are not guaranteed
to be backward or forward compatible in any way. Thus, downstream
projects that include jpegint.h must ensure that they are using a
libjpeg-turbo code base that is compatible with the version of
jpegint.h they are including. Because the libjpeg API has exposed API
structures, the internal structures in jpegint.h are used to store
additional API state that may be necessary in order to implement
certain features or fixes in libjpeg-turbo. Thus, those structures are
not guaranteed to be backward or forward compatible even within a
particular libjpeg-turbo branch/release series. That means that
downstream projects that use jpegint.h cannot rely on a central
(system-wide) installation of the libjpeg-turbo SDK, because there is
no guarantee that the SDK's internal interfaces and structures will
match the ones that the downstream project expects. The real danger is
that a downstream application or library may trigger a buffer overflow
if its expectation regarding the layout of the internal structures
does not match reality. Generally speaking, best practices are for
downstream projects that use jpegint.h to include an in-tree build of
libjpeg-turbo. (For instance, libjpeg-turbo could be included as a Git
submodule that pulls from a specific libjpeg-turbo commit.) The fact
that jpegint.h is not distributed in the libjpeg-turbo SDK encourages
those best practices, whereas distributing jpegint.h would create a
false sense that the interfaces and structures defined therein are
backward/forward compatible. They aren't and never have been, and that
is why jpegint.h has never been distributed in the 30-year history of
libjpeg and libjpeg-turbo. Downstream packages should ABSOLUTELY NEVER
distribute jpegint.h, and any issues caused by the failure to adhere
to those best practices are issues that downstream packagers must
address without the help of The libjpeg-turbo Project.
```
*
https://github.com/libjpeg-turbo/libjpeg-turbo/pull/695#issuecomment-1591383190
--- End Message ---
--- Begin Message ---
Source: libjpeg-turbo
Source-Version: 1:3.1.3-1
Done: Mike Gabriel <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libjpeg-turbo, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mike Gabriel <[email protected]> (supplier of updated libjpeg-turbo package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 10 Mar 2026 22:13:26 +0100
Source: libjpeg-turbo
Architecture: source
Version: 1:3.1.3-1
Distribution: experimental
Urgency: medium
Maintainer: Ondřej Surý <[email protected]>
Changed-By: Mike Gabriel <[email protected]>
Closes: 1037981
Changes:
libjpeg-turbo (1:3.1.3-1) experimental; urgency=medium
.
* Upload to experimental.
.
* New upstream release.
* debian/control:
+ Bump Standards-Version: to 4.7.2. No changes needed.
+ Bump Standards-Version: to 4.7.3. Drop Priority: field from d/control.
* debian/patches:
+ Drop 0001_initialize-simd-support-before-every-use.patch. Applied
upstream.
+ Rebase 1001_fix-groff-warning-macro-f-not-defined.patch.
+ Rebase patches 1001-use-utc-timestamp.patch and
2001_dont-set-RPATH.patch.
* debian/libjpeg62-turbo-dev.install:
+ Drop file jpegint.h from dev:pkg. (Closes: #1037981).
* debian/copyright:
+ Update auto-generated copyright.in file.
+ Update copyright attributions.
* lintian:
+ Update various lintian rules for new upstream version.
* debian/*.symbols:
+ Update .symbols files.
* debian/missing-sources/:
+ Update jquery.js to 3.7.1 for reference.
* debian/*docs:
+ Adjust to new upstream paths of doc files.
* debian/rules:
+ Upstream ChangeLog filename has changed.
* debian/libjpeg62-turbo-dev.examples:
+ Drop. No tjexample.c file anymore in the source tree.
Checksums-Sha1:
0bb955b0f7a88ab13da27b46412a50f19167760b 2508 libjpeg-turbo_3.1.3-1.dsc
b728173b706cb23f7f79148c16beb6c79d04eada 2516606
libjpeg-turbo_3.1.3.orig.tar.gz
c391be5ba3034bfa83c8738d9bb0a188258b3ea3 111100
libjpeg-turbo_3.1.3-1.debian.tar.xz
f87f3407067f8b9ab6c20d8ecdad46b68d7ad143 14865
libjpeg-turbo_3.1.3-1_source.buildinfo
Checksums-Sha256:
0dee48ba5f876f826de4a6708e367d6d08ef6339623c25140299840250612548 2508
libjpeg-turbo_3.1.3-1.dsc
3a13a5ba767dc8264bc40b185e41368a80d5d5f945944d1dbaa4b2fb0099f4e5 2516606
libjpeg-turbo_3.1.3.orig.tar.gz
abb0f0520bb338d1c0efe9adceb959d6cd39d5d7bd36f036755ee1913629c038 111100
libjpeg-turbo_3.1.3-1.debian.tar.xz
42b88a62a946cb4462b7f0804045d42e92ea5b805d1e67bc2c843a299b61c62e 14865
libjpeg-turbo_3.1.3-1_source.buildinfo
Files:
cccff5347aabcabcfad98904b94337f1 2508 graphics optional
libjpeg-turbo_3.1.3-1.dsc
6a03c55732045630e051f20ba7ece465 2516606 graphics optional
libjpeg-turbo_3.1.3.orig.tar.gz
b0eb72d858faffaddac95c6f357e23b5 111100 graphics optional
libjpeg-turbo_3.1.3-1.debian.tar.xz
31d525abbc14964bb30d78dea41fc86b 14865 graphics optional
libjpeg-turbo_3.1.3-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=+xg8
-----END PGP SIGNATURE-----
pgpST3H0gUUKo.pgp
Description: PGP signature
--- End Message ---
