diff options
| author | Nirbheek Chauhan <nirbheek@centricular.com> | 2018-08-07 20:02:01 +0530 |
|---|---|---|
| committer | Nirbheek Chauhan <nirbheek@centricular.com> | 2018-08-10 03:24:46 +0530 |
| commit | a6a78e7efc68599e4cf21d7c2a790fd4b9521bba (patch) | |
| tree | e6fa63faa8331e41930a1c38266cd3a112fd6b59 | |
| parent | 1ebfee9231fcaea731db3573348eff9577fc7915 (diff) | |
bzip2.recipe: Only use our mirror for fetching the tarball1.10
Upstream didn't support HTTPS, and is dead now.
https://lwn.net/Articles/762264/
Updating all older branches to reduce the efficacy of a possible
malicious tarball upload to the bzip.org website since it is now in
unknown hands.
| -rw-r--r-- | recipes/bzip2.recipe | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/recipes/bzip2.recipe b/recipes/bzip2.recipe index 02d47eea..1501b1d3 100644 --- a/recipes/bzip2.recipe +++ b/recipes/bzip2.recipe @@ -7,7 +7,9 @@ class Recipe(recipe.Recipe): version = '1.0.6' licenses = [License.BSD_like] stype = SourceType.TARBALL - url = 'http://bzip.org/1.0.6/bzip2-1.0.6.tar.gz' + # This URL doesn't support https, so we don't use it + #url = 'https://bzip.org/%(version)s/bzip2-%(version)s.tar.gz' + url = 'https://gstreamer.freedesktop.org/src/mirror/bzip2-%(version)s.tar.gz' patches = ['bzip2/0001-Fix-Makefiles-and-add-support-for-Windows-and-OS-X.patch'] files_libs = ['libbz2'] |