diff options
| author | Derek Ryan Strong <drkrynstrng@pm.me> | 2024-11-27 14:14:34 -0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-11-27 16:14:34 -0600 |
| commit | 30814fb4e044c89a6541882ccd4862a875f72390 (patch) | |
| tree | 679663f5441b5ceac96ad71a15404feb3aeb4390 | |
| parent | 3194be2e92b5d7e12ecfbbd2d6b02f2b053d40df (diff) | |
| download | spack-30814fb4e044c89a6541882ccd4862a875f72390.tar.gz spack-30814fb4e044c89a6541882ccd4862a875f72390.tar.bz2 spack-30814fb4e044c89a6541882ccd4862a875f72390.tar.xz spack-30814fb4e044c89a6541882ccd4862a875f72390.zip | |
Deprecate rsync releases before v3.2.5 (#47820)
| -rw-r--r-- | var/spack/repos/builtin/packages/rsync/package.py | 44 |
1 files changed, 35 insertions, 9 deletions
diff --git a/var/spack/repos/builtin/packages/rsync/package.py b/var/spack/repos/builtin/packages/rsync/package.py index e33eeed368..3e8e97ce59 100644 --- a/var/spack/repos/builtin/packages/rsync/package.py +++ b/var/spack/repos/builtin/packages/rsync/package.py @@ -12,7 +12,7 @@ class Rsync(AutotoolsPackage): """An open source utility that provides fast incremental file transfer.""" homepage = "https://rsync.samba.org" - url = "https://download.samba.org/pub/rsync/src/rsync-3.2.4.tar.gz" + url = "https://download.samba.org/pub/rsync/src/rsync-3.3.0.tar.gz" license("GPL-3.0-or-later") @@ -20,16 +20,42 @@ class Rsync(AutotoolsPackage): version("3.2.7", sha256="4e7d9d3f6ed10878c58c5fb724a67dacf4b6aac7340b13e488fb2dc41346f2bb") version("3.2.6", sha256="fb3365bab27837d41feaf42e967c57bd3a47bc8f10765a3671efd6a3835454d3") version("3.2.5", sha256="2ac4d21635cdf791867bc377c35ca6dda7f50d919a58be45057fd51600c69aba") - version("3.2.4", sha256="6f761838d08052b0b6579cf7f6737d93e47f01f4da04c5d24d3447b7f2a5fad1") - version("3.2.3", sha256="becc3c504ceea499f4167a260040ccf4d9f2ef9499ad5683c179a697146ce50e") - version("3.2.2", sha256="644bd3841779507665211fd7db8359c8a10670c57e305b4aab61b4e40037afa8") - version("3.1.3", sha256="55cc554efec5fdaad70de921cd5a5eeb6c29a95524c715f3bbf849235b0800c0") - version("3.1.2", sha256="ecfa62a7fa3c4c18b9eccd8c16eaddee4bd308a76ea50b5c02a5840f09c0a1c2") - version("3.1.1", sha256="7de4364fcf5fe42f3bdb514417f1c40d10bbca896abe7e7f2c581c6ea08a2621") - depends_on("c", type="build") # generated - depends_on("cxx", type="build") # generated + # Releases before 3.2.5 are deprecated because of CVE-2022-29154 + # https://nvd.nist.gov/vuln/detail/CVE-2022-29154 + version( + "3.2.4", + sha256="6f761838d08052b0b6579cf7f6737d93e47f01f4da04c5d24d3447b7f2a5fad1", + deprecated=True, + ) + version( + "3.2.3", + sha256="becc3c504ceea499f4167a260040ccf4d9f2ef9499ad5683c179a697146ce50e", + deprecated=True, + ) + version( + "3.2.2", + sha256="644bd3841779507665211fd7db8359c8a10670c57e305b4aab61b4e40037afa8", + deprecated=True, + ) + version( + "3.1.3", + sha256="55cc554efec5fdaad70de921cd5a5eeb6c29a95524c715f3bbf849235b0800c0", + deprecated=True, + ) + version( + "3.1.2", + sha256="ecfa62a7fa3c4c18b9eccd8c16eaddee4bd308a76ea50b5c02a5840f09c0a1c2", + deprecated=True, + ) + version( + "3.1.1", + sha256="7de4364fcf5fe42f3bdb514417f1c40d10bbca896abe7e7f2c581c6ea08a2621", + deprecated=True, + ) + depends_on("c", type="build") + depends_on("cxx", type="build") depends_on("zlib-api") depends_on("popt") depends_on("openssl", when="@3.2:") |