From e3afe9a364d2abd4f73f3ea96847f2d8a576d4b2 Mon Sep 17 00:00:00 2001 From: Wouter Deconinck <wdconinc@gmail.com> Date: Tue, 15 Oct 2024 18:50:56 -0500 Subject: yara: add v4.5.2 (fix CVE) (#46998) * yara: add v4.5.2 * yara: deprecate 3.9.0 --- var/spack/repos/builtin/packages/yara/package.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/var/spack/repos/builtin/packages/yara/package.py b/var/spack/repos/builtin/packages/yara/package.py index 7b2da9e1e8..cce0191a10 100644 --- a/var/spack/repos/builtin/packages/yara/package.py +++ b/var/spack/repos/builtin/packages/yara/package.py @@ -15,7 +15,10 @@ class Yara(AutotoolsPackage): license("BSD-3-Clause") - version("3.9.0", sha256="ebe7fab0abadb90449a62afbd24e196e18b177efe71ffd8bf22df95c5386f64d") + version("4.5.2", sha256="1f87056fcb10ee361936ee7b0548444f7974612ebb0e681734d8de7df055d1ec") + with default_args(deprecated=True): + # https://nvd.nist.gov/vuln/detail/CVE-2021-3402 + version("3.9.0", sha256="ebe7fab0abadb90449a62afbd24e196e18b177efe71ffd8bf22df95c5386f64d") depends_on("c", type="build") # generated depends_on("cxx", type="build") # generated @@ -24,3 +27,4 @@ class Yara(AutotoolsPackage): depends_on("automake", type="build") depends_on("libtool", type="build") depends_on("m4", type="build") + depends_on("pkgconfig", type="build", when="@4:") -- cgit v1.2.3-70-g09d2