Re: Consider to switch libjpeg-turbo as default jpeg

[Greg Troxel <gdt%lexort.com@localhost>]

I also use libjpeg-turbo.  My concerns would be:

  I dimly remember that on one OS/version, I thought I had to turn it
  off, but that's fuzzy and therefore doesn't count for much.

  I am unclear on how jpeg and jpeg-turbo, as projecs, deal with
  security issues and prompt releases.  I think we should look at them
  both and understand if we are moving to a worse (or better) situation
  before leaping.   Decoding of formats isn't quite the poster child of
  vulnerable packages, but it's close.