zhangyiss/spack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

curl: add v8.4.0, allow r@8.3: to use it (#40442)

Browse Source 
* curl: 8.4.0

* fix r curl upperbound range
This commit is contained in:
Harmen Stoppels 2023-10-11 21:04:09 +02:00 committed by GitHub
parent a5853ee51a
commit 89e34d56a1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 20 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
var/spack/repos/builtin/packages/curl/package.py
View File

@ -26,11 +26,25 @@ class Curl(NMakePackage, AutotoolsPackage):
maintainers("alecbcs") maintainers("alecbcs")
version("8.1.2", sha256="b54974d32fd610acace92e3df1f643144015ac65847f0a041fdc17db6f43f243") version("8.4.0", sha256="e5250581a9c032b1b6ed3cf2f9c114c811fc41881069e9892d115cc73f9e88c6")
version("8.0.1", sha256="9b6b1e96b748d04b968786b6bdf407aa5c75ab53a3d37c1c8c81cdb736555ccf")
version("7.88.1", sha256="8224b45cce12abde039c12dc0711b7ea85b104b9ad534d6e4c5b4e188a61c907")
# Deprecated versions due to CVEs # Deprecated versions due to CVEs
# CVE-2023-38545
version(
"8.1.2",
sha256="b54974d32fd610acace92e3df1f643144015ac65847f0a041fdc17db6f43f243",
deprecated=True,
)
version(
"8.0.1",
sha256="9b6b1e96b748d04b968786b6bdf407aa5c75ab53a3d37c1c8c81cdb736555ccf",
deprecated=True,
)
version(
"7.88.1",
sha256="8224b45cce12abde039c12dc0711b7ea85b104b9ad534d6e4c5b4e188a61c907",
deprecated=True,
)
# https://nvd.nist.gov/vuln/detail/CVE-2022-43551 # https://nvd.nist.gov/vuln/detail/CVE-2022-43551
version( version(
"7.87.0", "7.87.0",

6
var/spack/repos/builtin/packages/r/package.py
View File

@ -70,9 +70,9 @@ class R(AutotoolsPackage):
depends_on("blas", when="+external-lapack") depends_on("blas", when="+external-lapack")
depends_on("lapack", when="+external-lapack") depends_on("lapack", when="+external-lapack")
depends_on("bzip2") depends_on("bzip2")
# R didn't anticipate the celebratory depends_on("curl+libidn2")
# non-breaking major version bump of curl 8. # R didn't anticipate the celebratory non-breaking major version bump of curl 8.
depends_on("curl+libidn2@:7") depends_on("curl@:7", when="@:4.2")
depends_on("icu4c") depends_on("icu4c")
depends_on("java") depends_on("java")
depends_on("ncurses") depends_on("ncurses")