From e3afe9a364d2abd4f73f3ea96847f2d8a576d4b2 Mon Sep 17 00:00:00 2001
From: Wouter Deconinck <wdconinc@gmail.com>
Date: Tue, 15 Oct 2024 18:50:56 -0500
Subject: yara: add v4.5.2 (fix CVE) (#46998)

* yara: add v4.5.2

* yara: deprecate 3.9.0
---
 var/spack/repos/builtin/packages/yara/package.py | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/var/spack/repos/builtin/packages/yara/package.py b/var/spack/repos/builtin/packages/yara/package.py
index 7b2da9e1e8..cce0191a10 100644
--- a/var/spack/repos/builtin/packages/yara/package.py
+++ b/var/spack/repos/builtin/packages/yara/package.py
@@ -15,7 +15,10 @@ class Yara(AutotoolsPackage):
 
     license("BSD-3-Clause")
 
-    version("3.9.0", sha256="ebe7fab0abadb90449a62afbd24e196e18b177efe71ffd8bf22df95c5386f64d")
+    version("4.5.2", sha256="1f87056fcb10ee361936ee7b0548444f7974612ebb0e681734d8de7df055d1ec")
+    with default_args(deprecated=True):
+        # https://nvd.nist.gov/vuln/detail/CVE-2021-3402
+        version("3.9.0", sha256="ebe7fab0abadb90449a62afbd24e196e18b177efe71ffd8bf22df95c5386f64d")
 
     depends_on("c", type="build")  # generated
     depends_on("cxx", type="build")  # generated
@@ -24,3 +27,4 @@ class Yara(AutotoolsPackage):
     depends_on("automake", type="build")
     depends_on("libtool", type="build")
     depends_on("m4", type="build")
+    depends_on("pkgconfig", type="build", when="@4:")
-- 
cgit v1.2.3-70-g09d2