diff options
| author | Nirbheek Chauhan <nirbheek@centricular.com> | 2018-08-07 20:02:01 +0530 |
|---|---|---|
| committer | Nirbheek Chauhan <nirbheek@centricular.com> | 2018-08-10 03:33:54 +0530 |
| commit | c1075aeaaae3850bce929bcf37d83e59f7247a51 (patch) | |
| tree | bc4d71d22ae8e4940d6b7409600847d3ad91e465 | |
| parent | 8a62bdd857f933bb387620ab90c45dec590e2e37 (diff) | |
bzip2.recipe: Only use our mirror for fetching the tarball1.6
Upstream didn't support HTTPS, and is dead now.
https://lwn.net/Articles/762264/
Updating all older branches to reduce the efficacy of a possible
malicious tarball upload to the bzip.org website since it is now in
unknown hands.
| -rw-r--r-- | recipes/bzip2.recipe | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/recipes/bzip2.recipe b/recipes/bzip2.recipe index 02d47eea..1501b1d3 100644 --- a/recipes/bzip2.recipe +++ b/recipes/bzip2.recipe @@ -7,7 +7,9 @@ class Recipe(recipe.Recipe): version = '1.0.6' licenses = [License.BSD_like] stype = SourceType.TARBALL - url = 'http://bzip.org/1.0.6/bzip2-1.0.6.tar.gz' + # This URL doesn't support https, so we don't use it + #url = 'https://bzip.org/%(version)s/bzip2-%(version)s.tar.gz' + url = 'https://gstreamer.freedesktop.org/src/mirror/bzip2-%(version)s.tar.gz' patches = ['bzip2/0001-Fix-Makefiles-and-add-support-for-Windows-and-OS-X.patch'] files_libs = ['libbz2'] |