old_contents: # Copyright 2013-2021 Lawrence Livermore National Security, LLC and other
  # Spack Project Developers. See the top-level COPYRIGHT file for details.
  #
  # SPDX-License-Identifier: (Apache-2.0 OR MIT)
  
  from spack import *
  
  
  class Libpng(AutotoolsPackage):
      """libpng is the official PNG reference library."""
  
      homepage = "http://www.libpng.org/pub/png/libpng.html"
      url = "https://github.com/glennrp/libpng/archive/v1.6.37.tar.gz"
      git = "https://github.com/glennrp/libpng.git"
  
      version('1.6.37', sha256='ca74a0dace179a8422187671aee97dd3892b53e168627145271cad5b5ac81307')
      # From http://www.libpng.org/pub/png/libpng.html (2019-04-15)
      #     libpng versions 1.6.36 and earlier have a use-after-free bug in the
      #     simplified libpng API png_image_free(). It has been assigned ID
      #     CVE-2019-7317. The vulnerability is fixed in version 1.6.37,
      #     released on 15 April 2019.
  
      # Required for qt@3
      version('1.2.57', sha256='7f415186d38ca71c23058386d7cf5135c8beda821ee1beecdc2a7a26c0356615')
  
      depends_on('zlib@1.0.4:')  # 1.2.5 or later recommended
  
      def configure_args(self):
          args = [
              # not honored, see
              #   https://sourceforge.net/p/libpng/bugs/210/#33f1
              # '--with-zlib=' + self.spec['zlib'].prefix,
              'CPPFLAGS={0}'.format(self.spec['zlib'].headers.include_flags),
              'LDFLAGS={0}'.format(self.spec['zlib'].libs.search_flags)
          ]
          return args
  
      def check(self):
          # Libpng has both 'check' and 'test' targets that are aliases.
          # Only need to run the tests once.
          make('check')
  
new_contents: # Copyright 2013-2021 Lawrence Livermore National Security, LLC and other
  # Spack Project Developers. See the top-level COPYRIGHT file for details.
  #
  # SPDX-License-Identifier: (Apache-2.0 OR MIT)
  
  from spack import *
  
  
  class Libpng(AutotoolsPackage):
      """libpng is the official PNG reference library."""
  
      homepage = "http://www.libpng.org/pub/png/libpng.html"
      url = "https://prdownloads.sourceforge.net/libpng/libpng-1.6.37.tar.xz"
      git = "https://github.com/glennrp/libpng.git"
  
      version('1.6.37', sha256='505e70834d35383537b6491e7ae8641f1a4bed1876dbfe361201fc80868d88ca')
      # From http://www.libpng.org/pub/png/libpng.html (2019-04-15)
      #     libpng versions 1.6.36 and earlier have a use-after-free bug in the
      #     simplified libpng API png_image_free(). It has been assigned ID
      #     CVE-2019-7317. The vulnerability is fixed in version 1.6.37,
      #     released on 15 April 2019.
  
      # Required for qt@3
      version('1.2.57', sha256='0f4620e11fa283fedafb474427c8e96bf149511a1804bdc47350963ae5cf54d8')
  
      depends_on('zlib@1.0.4:')  # 1.2.5 or later recommended
  
      def configure_args(self):
          args = [
              # not honored, see
              #   https://sourceforge.net/p/libpng/bugs/210/#33f1
              # '--with-zlib=' + self.spec['zlib'].prefix,
              'CPPFLAGS={0}'.format(self.spec['zlib'].headers.include_flags),
              'LDFLAGS={0}'.format(self.spec['zlib'].libs.search_flags)
          ]
          return args
  
      def check(self):
          # Libpng has both 'check' and 'test' targets that are aliases.
          # Only need to run the tests once.
          make('check')
  
subject: Change url+checksums for libpng to official sourceforge archives (#23767)