diff options
| author | Nirbheek Chauhan <nirbheek@centricular.com> | 2018-08-07 20:02:01 +0530 |
|---|---|---|
| committer | Nirbheek Chauhan <nirbheek@centricular.com> | 2018-08-10 03:33:45 +0530 |
| commit | 8df7411b8dcf99c69e8788d02914763fde601fe2 (patch) | |
| tree | 8ab8cc0cbcb5956e01fd4892168f4a287ea7f5bf | |
| parent | 77dc8223fb464cbfb0bc690ad4c02899c46fffce (diff) | |
bzip2.recipe: Only use our mirror for fetching the tarball1.8
Upstream didn't support HTTPS, and is dead now.
https://lwn.net/Articles/762264/
Updating all older branches to reduce the efficacy of a possible
malicious tarball upload to the bzip.org website since it is now in
unknown hands.
| -rw-r--r-- | recipes/bzip2.recipe | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/recipes/bzip2.recipe b/recipes/bzip2.recipe index 02d47eea..1501b1d3 100644 --- a/recipes/bzip2.recipe +++ b/recipes/bzip2.recipe @@ -7,7 +7,9 @@ class Recipe(recipe.Recipe): version = '1.0.6' licenses = [License.BSD_like] stype = SourceType.TARBALL - url = 'http://bzip.org/1.0.6/bzip2-1.0.6.tar.gz' + # This URL doesn't support https, so we don't use it + #url = 'https://bzip.org/%(version)s/bzip2-%(version)s.tar.gz' + url = 'https://gstreamer.freedesktop.org/src/mirror/bzip2-%(version)s.tar.gz' patches = ['bzip2/0001-Fix-Makefiles-and-add-support-for-Windows-and-OS-X.patch'] files_libs = ['libbz2'] |