summaryrefslogtreecommitdiff
path: root/var
diff options
context:
space:
mode:
authorAlec Scott <scott112@llnl.gov>2023-01-16 01:57:55 -0800
committerGitHub <noreply@github.com>2023-01-16 10:57:55 +0100
commit1ca7da4831df85dab559d96ed13a005f153584ef (patch)
tree2580bc138bdc55586949161fee7f637e8a8c4977 /var
parentb9a16a599ac4d0be3589eb52a5a292ac1ab89498 (diff)
downloadspack-1ca7da4831df85dab559d96ed13a005f153584ef.tar.gz
spack-1ca7da4831df85dab559d96ed13a005f153584ef.tar.bz2
spack-1ca7da4831df85dab559d96ed13a005f153584ef.tar.xz
spack-1ca7da4831df85dab559d96ed13a005f153584ef.zip
Add v0.109.0 and deprecate versions < v0.79.1 due to a CVE (#34943)
Diffstat (limited to 'var')
-rw-r--r--var/spack/repos/builtin/packages/hugo/package.py21
1 files changed, 18 insertions, 3 deletions
diff --git a/var/spack/repos/builtin/packages/hugo/package.py b/var/spack/repos/builtin/packages/hugo/package.py
index 85825f883a..f4150c49ed 100644
--- a/var/spack/repos/builtin/packages/hugo/package.py
+++ b/var/spack/repos/builtin/packages/hugo/package.py
@@ -18,10 +18,25 @@ class Hugo(Package):
maintainers = ["alecbcs"]
+ version("0.109.0", sha256="35a5ba92057fe2c20b2218c374e762887021e978511d19bbe81ce4d9c21f0c78")
version("0.106.0", sha256="9219434beb51466487b9f8518edcbc671027c1998e5a5820d76d517e1dfbd96a")
- version("0.74.3", sha256="9b296fa0396c20956fa6a1f7afadaa78739af62c277b6c0cfae79a91b0fe823f")
- version("0.68.3", sha256="38e743605e45e3aafd9563feb9e78477e72d79535ce83b56b243ff991d3a2b6e")
- version("0.53", sha256="48e65a33d3b10527101d13c354538379d9df698e5c38f60f4660386f4232e65c")
+
+ # https://nvd.nist.gov/vuln/detail/CVE-2020-26284
+ version(
+ "0.74.3",
+ sha256="9b296fa0396c20956fa6a1f7afadaa78739af62c277b6c0cfae79a91b0fe823f",
+ deprecated=True,
+ )
+ version(
+ "0.68.3",
+ sha256="38e743605e45e3aafd9563feb9e78477e72d79535ce83b56b243ff991d3a2b6e",
+ deprecated=True,
+ )
+ version(
+ "0.53",
+ sha256="48e65a33d3b10527101d13c354538379d9df698e5c38f60f4660386f4232e65c",
+ deprecated=True,
+ )
# Uses go modules.
# See https://gohugo.io/getting-started/installing/#fetch-from-github