diff options
| author | Nirbheek Chauhan <nirbheek@centricular.com> | 2018-08-07 20:02:01 +0530 |
|---|---|---|
| committer | Nirbheek Chauhan <nirbheek@centricular.com> | 2018-08-10 03:34:09 +0530 |
| commit | e3d893bccdea1341df8761332bec4bb3a4837030 (patch) | |
| tree | 4055e57b951d5a11da47ce7233992608c3d5da91 | |
| parent | a4134e638bee563a09b1acb974fd69dc317534d7 (diff) | |
bzip2.recipe: Only use our mirror for fetching the tarball1.2
Upstream didn't support HTTPS, and is dead now.
https://lwn.net/Articles/762264/
Updating all older branches to reduce the efficacy of a possible
malicious tarball upload to the bzip.org website since it is now in
unknown hands.
| -rw-r--r-- | recipes/bzip2.recipe | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/recipes/bzip2.recipe b/recipes/bzip2.recipe index 8542654f..140395c9 100644 --- a/recipes/bzip2.recipe +++ b/recipes/bzip2.recipe @@ -7,7 +7,9 @@ class Recipe(recipe.Recipe): version = '1.0.6' licenses = [License.BSD_like] stype = SourceType.TARBALL - url = 'http://bzip.org/1.0.6/bzip2-1.0.6.tar.gz' + # This URL doesn't support https, so we don't use it + #url = 'https://bzip.org/%(version)s/bzip2-%(version)s.tar.gz' + url = 'https://gstreamer.freedesktop.org/src/mirror/bzip2-%(version)s.tar.gz' patches = ['bzip2/0001-Fix-Makefiles-and-add-support-for-Windows-and-OS-X.patch'] files_libs = ['libbz2'] |