Change:
<del> { lib, stdenv </del> <ins> { lib , stdenv </ins> , fetchurl , pkg-config <ins> , vala , gobject-introspection , gtk-doc , docbook-xsl-nons , docbook_xml_dtd_43 , glib </ins> , babl , libpng , cairo , libjpeg , librsvg <ins> , lensfun , libspiro , maxflow , netsurf </ins> , pango <del> , gtk2 </del> <ins> , poly2tri-c , poppler </ins> , bzip2 <del> , intltool , libintl , OpenGL ? null }: </del> <ins> , json-glib , gettext , meson , ninja , libraw , gexiv2 , libwebp , luajit , openexr , OpenCL , suitesparse }: </ins> stdenv.mkDerivation rec { pname = "gegl"; <del> version = "0.2.0"; </del> <ins> version = "0.4.30"; outputs = [ "out" "dev" "devdoc" ]; outputBin = "dev"; </ins> src = fetchurl { <del> url = "ftp://ftp.gtk.org/pub/gegl/0.2/${pname}-${version}.tar.bz2"; sha256 = "df2e6a0d9499afcbc4f9029c18d9d1e0dd5e8710a75e17c9b1d9a6480dd8d426"; </del> <ins> url = "https://download.gimp.org/pub/gegl/${lib.versions.majorMinor version}/${pname}-${version}.tar.xz"; sha256 = "sha256-wRJ4LPQJaWniMhfM36vkIoTjXVQ1/wxD1A5McPrsqN0="; </ins> }; <del> patches = [( fetchurl { url = "https://projects.archlinux.org/svntogit/packages.git/plain/trunk/" + "gegl-0.2.0-CVE-2012-4433.patch?h=packages/gegl&id=57a60fbda5d7bbbd1cc4767cb0724baa80c5e3e9"; sha256 = "0p8mxj3w09nn1cc6cbxrd9hx742c5y27903i608wx6ja3kdjis59"; name = "CVE-2012-4433.patch"; })]; </del> <ins> nativeBuildInputs = [ pkg-config gettext meson ninja vala gobject-introspection gtk-doc docbook-xsl-nons docbook_xml_dtd_43 ]; buildInputs = [ libpng cairo libjpeg librsvg lensfun libspiro maxflow netsurf.libnsgif pango poly2tri-c poppler bzip2 libraw libwebp gexiv2 luajit openexr suitesparse ] ++ lib.optional stdenv.isDarwin OpenCL; # for gegl-4.0.pc propagatedBuildInputs = [ glib json-glib babl ]; </ins> <del> # needs fonts otherwise don't know how to pass them configureFlags = [ "--disable-docs" ]; </del> <ins> mesonFlags = [ "-Ddocs=true" "-Dmrg=disabled" # not sure what that is "-Dsdl2=disabled" "-Dpygobject=disabled" "-Dlibav=disabled" "-Dlibv4l=disabled" "-Dlibv4l2=disabled" # Disabled due to multiple vulnerabilities, see # https://github.com/NixOS/nixpkgs/pull/73586 "-Djasper=disabled" ]; </ins> <del> buildInputs = [ babl libpng cairo libjpeg librsvg pango gtk2 bzip2 intltool libintl ] ++ lib.optional stdenv.isDarwin OpenGL; </del> <ins> # TODO: Fix missing math symbols in gegl seamless clone. # It only appears when we use packaged poly2tri-c instead of vendored one. NIX_CFLAGS_COMPILE = "-lm"; </ins> <del> nativeBuildInputs = [ pkg-config ]; </del> <ins> postPatch = '' chmod +x tests/opencl/opencl_test.sh patchShebangs tests/ff-load-save/tests_ff_load_save.sh tests/opencl/opencl_test.sh tools/xml_insert.sh ''; </ins> <del> doCheck = false; # fails 3 out of 19 tests </del> <ins> # tests fail to connect to the com.apple.fonts daemon in sandboxed mode doCheck = !stdenv.isDarwin; </ins> meta = with lib; { description = "Graph-based image processing framework";

Discussion:
Describe the bug I get this: It can also be seen on hydra: successful build: (revision ) First unsuccessful build: (revision ) To Reproduce Expected behavior It should build. Notify maintainers Maintainer information:
Considering it's abandonware since there's a new version, not resolving it and just setting it as broken is perhaps best.
Or removing arch from meta.platforms. Though really, nothing should be using such ancient version these days.
See for alternative solution (dropping gegl 0.2 completely)