Commit Graph

3 Commits

Author SHA1 Message Date
Ross Burton 2574cef768 libpng: fix MIRRORS usage
MIRRORS needs to be pairs of values for the original URL to match and the
location find it on the mirror.

(From OE-Core rev: a649f3da630e8ca2d3ca58b610f3918720dd5229)

(From OE-Core rev: 1ea5d9f4d2afab924635462a35badfc55bd43c9c)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-07 15:57:43 +01:00
Ross Burton 2642535587 libpng: use SourceForge mirror
The Gentoo mirror also deletes old versions when they're not used, so revert
back to the canonical SourceForge site, adding /older-releases/ to MIRRORS to
handle new releases moving the version we want.

Original idea by Maxin B. John <maxin.john@intel.com>.

(From OE-Core rev: 791a3493c88c9c249f21f6d893b2061e1d8a0af6)

(From OE-Core rev: 8ced3de463f97930404fe83a9f30d5d6536ffc9b)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
[Updated for Pyro context]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-07 15:57:43 +01:00
Maxin B. John 8f90c28397 libpng: Upgrade 1.6.26 -> 1.6.28
This upgrade fixes the vulnerability: CVE-2016-10087

License file changes are due to updates in Package Version
and Copyright date. ie:
 'libpng version 1.6.28, January 5, 2017'

(From OE-Core rev: 94bb606b9f21b7fe4c5d7e9ae3fda17da047ece5)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-01-26 10:44:28 +00:00