zhangyiss/spack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

expat: Add 2.6.4 with security fixes + deprecate vulnerable 2.6.3 (#47521)

Browse Source
This commit is contained in:
Sebastian Pipping 2024-11-12 15:10:00 +01:00 committed by GitHub
parent 00e68af794
commit 99fd37931c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
var/spack/repos/builtin/packages/expat/package.py
View File

@ -16,9 +16,14 @@ class Expat(AutotoolsPackage, CMakePackage):
url = "https://github.com/libexpat/libexpat/releases/download/R_2_2_9/expat-2.2.9.tar.bz2"
license("MIT")
version("2.6.3", sha256="b8baef92f328eebcf731f4d18103951c61fa8c8ec21d5ff4202fb6f2198aeb2d")
# deprecate all releases before 2.6.3 because of security issues
version("2.6.4", sha256="8dc480b796163d4436e6f1352e71800a774f73dbae213f1860b60607d2a83ada")
# deprecate all releases before 2.6.4 because of security issues
# CVE-2024-50602 (fixed in 2.6.4)
version(
"2.6.3",
sha256="b8baef92f328eebcf731f4d18103951c61fa8c8ec21d5ff4202fb6f2198aeb2d",
deprecated=True,
)
# CVE-2024-45490 (fixed in 2.6.3)
# CVE-2024-45491 (fixed in 2.6.3)
# CVE-2024-45492 (fixed in 2.6.3)