From: Michalis Vasileiadis <67660547+vmihalis@users.noreply.github.com>
Date: Fri, 29 May 2026 13:30:38 +0000 (+0800)
Subject: build: fetch config.guess/config.sub over HTTPS in release Dockerfile
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=2f3bb0f291dc016671d5c7d43940c5ae9eaf1e09;p=thirdparty%2Flibarchive.git

build: fetch config.guess/config.sub over HTTPS in release Dockerfile

Switch the config.guess/config.sub ADD fetches from http:// to https://
(CWE-494).
---

diff --git a/build/release/Dockerfile b/build/release/Dockerfile
index 619b67f4b..96d33e0c4 100644
--- a/build/release/Dockerfile
+++ b/build/release/Dockerfile
@@ -3,8 +3,8 @@ ENV DEBIAN_FRONTEND=noninteractive
 RUN ln -sf /usr/share/zoneinfo/Europe/Berlin /etc/localtime
 RUN apt-get update && apt-get install -y build-essential autoconf automake libtool pkg-config cmake zlib1g-dev libssl-dev libacl1-dev libbz2-dev liblzma-dev liblz4-dev libzstd-dev lzop groff ghostscript bsdmainutils zip
 ADD . $HOME/libarchive/
-ADD "http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess;hb=HEAD" $HOME/libarchive/build/autoconf/config.guess
-ADD "http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.sub;hb=HEAD" $HOME/libarchive/build/autoconf/config.sub
+ADD "https://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess;hb=HEAD" $HOME/libarchive/build/autoconf/config.guess
+ADD "https://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.sub;hb=HEAD" $HOME/libarchive/build/autoconf/config.sub
 WORKDIR $HOME/libarchive
 RUN /bin/sh build/clean.sh
 RUN /bin/sh build/autogen.sh