Aside from updating the package, this modifies the Makefile to pull the
sources from GitHub rather than SourceForge. The exif project recently
moved to GitHub.
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 818f2d9dff)
Fixes:
CVE-2018-20030, CVE-2020-13114, CVE-2020-13113, CVE-2020-13112, CVE-2020-0093, CVE-2019-9278, CVE-2020-12767, CVE-2016-6328, CVE-2017-7544
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git
(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
