Add support for gegl 0.4.

[Joel Barrios]

Gegl 0.4 has been released yesterday and fixes CVE-2018-10114 (limit allocations in ppm-load to 2GB).

https://download.gimp.org/pub/gegl/0.4/gegl-0.4.0.tar.bz2

Would be great to have Dibuja support it in configure out of the box.

[Juan B (jbal)]

I have to change some source files and configure.ac, then test on gegl-0.3, gegl-0.4, maybe 0.2
Would it not be easier to patch gegl-0.3?
See:
https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-10114.html

Patch:
https://git.gnome.org/browse/gegl/patch/?id=c83b05d565a1e3392c9606a4ecaa560eb9a4ee29

[Joel Barrios (darkshram)]

Yes, it would be easier (I did repackage 0.3 with patch in my distro), but gegl-0.3 was a development branch and will be superseded by gegl-0.4 (Gimp 2.10 was released a couple of days after gegl 0.4), so most likely there will not be a gegl 0.3.36 or any further 0.3.x release.

As far as I know, there are only 3 applications using gegl-0.3: dibuja, gnome-photos and gimp 2.10. Both gimp and gnome-photos have already made commits to replace gegl-0.3 with gegl-0.4.
https://github.com/GNOME/gimp/commit/f1db670f1914f38a76d4714388760106f53fdbcb
https://github.com/GNOME/gnome-photos/commit/4479b7da00ba788e85b463e06dbf57f633ec2c01

[Juan B (jbal)]

Here is a patch to use gegl-0.4. I have other changes I have been working on that I want to
commit first. The change will be permanent on the next version.
To apply:
  patch -p0 -i gegl-0.4.diff

Add "--with-geg-0.4" to configure, maybe:
  ./configure --prefix=/your_prefix --libdir=/your_libdir --with-gegl-0.4

Regards
JBal

[Joel Barrios (darkshram)]

Would be better if you make default gegl 0.4. There will not be any further releases of the 0.3 branch. Gegl 0.4.2 has been released with several fixes and a file named '00_NOTE__GEGL_0_4_has_been_released' has been put at https://download.gimp.org/pub/gegl/0.3/.

[Juan B (jbal)]

@Joel Barrios
> Would be better if you make default gegl 0.4
Perhaps at a later date.

Nice OS