From 5b9d260054a50ef994fc4db2a2df24760d302cb9 Mon Sep 17 00:00:00 2001
From: heatherkellyucl <h.kelly@ucl.ac.uk>
Date: Mon, 13 Nov 2023 20:38:16 +0000
Subject: [PATCH] gzip: deprecate <1.13 for vulnerability (#41044)

---
 .../repos/builtin/packages/gzip/package.py    | 19 ++++++++++++++++---
 1 file changed, 16 insertions(+), 3 deletions(-)

diff --git a/var/spack/repos/builtin/packages/gzip/package.py b/var/spack/repos/builtin/packages/gzip/package.py
index 76a06818251..6645969dd0e 100644
--- a/var/spack/repos/builtin/packages/gzip/package.py
+++ b/var/spack/repos/builtin/packages/gzip/package.py
@@ -12,9 +12,22 @@ class Gzip(AutotoolsPackage):
     homepage = "https://www.gnu.org/software/gzip/"
     url = "https://ftp.gnu.org/gnu/gzip/gzip-1.10.tar.gz"
 
-    version("1.12", sha256="5b4fb14d38314e09f2fc8a1c510e7cd540a3ea0e3eb9b0420046b82c3bf41085")
-    version("1.11", sha256="3e8a0e0c45bad3009341dce17d71536c4c655d9313039021ce7554a26cd50ed9")
-    version("1.10", sha256="c91f74430bf7bc20402e1f657d0b252cb80aa66ba333a25704512af346633c68")
+    version("1.13", sha256="20fc818aeebae87cdbf209d35141ad9d3cf312b35a5e6be61bfcfbf9eddd212a")
+    version(
+        "1.12",
+        sha256="5b4fb14d38314e09f2fc8a1c510e7cd540a3ea0e3eb9b0420046b82c3bf41085",
+        deprecated=True,
+    )
+    version(
+        "1.11",
+        sha256="3e8a0e0c45bad3009341dce17d71536c4c655d9313039021ce7554a26cd50ed9",
+        deprecated=True,
+    )
+    version(
+        "1.10",
+        sha256="c91f74430bf7bc20402e1f657d0b252cb80aa66ba333a25704512af346633c68",
+        deprecated=True,
+    )
 
     # Gzip makes a recursive symlink if built in-source
     build_directory = "spack-build"