From 0dc1cb329120743ca85599ba3fba24849f137677 Mon Sep 17 00:00:00 2001
From: ed <s@ocv.me>
Date: Fri, 9 Oct 2026 00:26:10 +0000
Subject: [PATCH] docker: drop openjpeg

---
 scripts/docker/innvikler.sh | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/scripts/docker/innvikler.sh b/scripts/docker/innvikler.sh
index db75345d5..b9b8ba0e8 100644
--- a/scripts/docker/innvikler.sh
+++ b/scripts/docker/innvikler.sh
@@ -38,6 +38,14 @@ f=/z/whl/zlib_ng-0.5.1-cp312-cp312-linux_$(cat /etc/apk/arch).whl
 }
 rm -rf /z/whl
 
+# drop openjpeg; unmaintained, has vulns
+(cd /usr/lib/python3.*/site-packages/PIL
+  sed -ri /jpg_2000/d features.py
+  sed -ri /Jpeg2KIm/d __init__.py
+  sed -ri /Jpeg2KIm/d Image.py
+  rm -f Jpeg2KImagePlugin.py
+) || true
+
 # cleanup for flavors with python build steps (dj/iv)
 rm -rf /var/cache/apk/* /root/.cache