Skip to content

curl: add v7.88.1 and deprecate previous versions due to CVEs#35825

Merged
haampie merged 2 commits intospack:developfrom
alecbcs:add/curl-v7.88.1
Mar 5, 2023
Merged

curl: add v7.88.1 and deprecate previous versions due to CVEs#35825
haampie merged 2 commits intospack:developfrom
alecbcs:add/curl-v7.88.1

Conversation

@alecbcs
Copy link
Copy Markdown
Member

@alecbcs alecbcs commented Mar 5, 2023

Add curl v7.88.1 and deprecate previous versions due to CVE-2022-43551, CVE-2022-32221, and CVE-2022-32206.

@spackbot-app
Copy link
Copy Markdown

spackbot-app bot commented Mar 5, 2023

Hi @alecbcs! I noticed that the following package(s) don't yet have maintainers:

  • curl

Are you interested in adopting any of these package(s)? If so, simply add the following to the package class:

    maintainers("alecbcs")

If not, could you contact the developers of this package and see if they are interested? You can quickly see who has worked on a package with spack blame:

$ spack blame curl

Thank you for your help! Please don't add maintainers without their consent.

You don't have to be a Spack expert or package developer in order to be a "maintainer," it just gives us a list of users willing to review PRs or debug issues relating to this package. A package can have multiple maintainers; just add a list of GitHub handles of anyone who wants to volunteer.

@alecbcs alecbcs force-pushed the add/curl-v7.88.1 branch from bbf3916 to 1a04413 Compare March 5, 2023 06:28
@alecbcs alecbcs force-pushed the add/curl-v7.88.1 branch from 1a04413 to f6ad133 Compare March 5, 2023 06:32
@alecbcs
Copy link
Copy Markdown
Member Author

alecbcs commented Mar 5, 2023

@haampie would you be interested in partnering up as maintainers for curl?

@haampie
Copy link
Copy Markdown
Member

haampie commented Mar 5, 2023

In principle that's fine, but from the next version bump, to reduce CI cycles ;p

@haampie haampie merged commit 3aae80c into spack:develop Mar 5, 2023
@alecbcs alecbcs deleted the add/curl-v7.88.1 branch March 5, 2023 19:25
jmcarcell pushed a commit to key4hep/spack that referenced this pull request Apr 13, 2023
…35825)

* curl: add v7.88.1 and deprecate previous versions due to CVEs

* Add self as a maintainer to curl
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants