Add cabal distributor release 3.6.2.1

And warn when installing vulnerable cabal versions.
2023-11-17 22:32:55 +08:00 · 2023-11-17 22:32:55 +08:00 · 68b424fff3
commit 68b424fff3
parent dc6d43ddba
2 changed files with 218 additions and 4 deletions
--- a/ghcup-0.0.7.yaml
+++ b/ghcup-0.0.7.yaml
@ -4135,6 +4135,9 @@ ghcupDownloads:
    2.4.1.0:
      viTags:
        - old
+      viPostInstall: &cabal-HSEC-2023-0015 |
+        This release is vulnerable: https://github.com/haskell/security-advisories/blob/main/advisories/hackage/cabal-install/HSEC-2023-0015.md
+        Update to 3.6.2.1 or 3.10.2.0.
      viChangeLog: https://downloads.haskell.org/~cabal/cabal-install-2.4.1.0/changelog
      viArch:
        A_64:
@ -4172,6 +4175,7 @@ ghcupDownloads:
    3.0.0.0:
      viTags:
        - old
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://downloads.haskell.org/~cabal/cabal-install-3.0.0.0/changelog
      viArch:
        A_64:
@ -4208,6 +4212,7 @@ ghcupDownloads:
    3.2.0.0:
      viTags:
      - old
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://downloads.haskell.org/~cabal/cabal-install-3.2.0.0/changelog
      viArch:
        A_64:
@ -4244,6 +4249,7 @@ ghcupDownloads:
    3.4.0.0:
      viTags:
        - old
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.4.0.0.md
      viArch:
        A_64:
@ -4295,6 +4301,7 @@ ghcupDownloads:
    3.4.1.0:
      viTags:
        - old
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.4.1.0.md
      viArch:
        A_64:
@ -4344,6 +4351,7 @@ ghcupDownloads:
    3.6.0.0:
      viTags:
        - old
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.6.0.0.md
      viArch:
        A_64:
@ -4393,8 +4401,8 @@ ghcupDownloads:
              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.0.0/cabal-install-3.6.0.0-armv7-linux.tar.xz
              dlHash: 11b5ca042a8bf45971224f2127a3e9d6b803f09210042ca80a254bea06f01a2e
    3.6.2.0:
-      viTags:
-        - Recommended
+      viTags: []
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.6.2.0.md
      viArch:
        A_64:
@ -4441,8 +4449,106 @@ ghcupDownloads:
            unknown_versioning:
              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.0/cabal-install-3.6.2.0-armv7-linux-deb10.tar.xz
              dlHash: 694ba7c14f8d720c6e790ab0488dbff2d8a07d9c6de97b4deeba31088f825bc2
+    3.6.2.1:
+      viTags:
+        - Recommended
+      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.6.2.0.md
+      viPostInstall: |
+        This is a distributor release to fix https://github.com/haskell/security-advisories/blob/main/advisories/hackage/cabal-install/HSEC-2023-0015.md
+        The applied downstream patches can be viewed here: https://github.com/hasufell/cabal/tree/cabal-install-v3.6.2.1
+        Upstream PR: https://github.com/haskell/cabal/issues/9451
+        You can alternatively update to 3.10.2.0.
+      viArch:
+        A_64:
+          Linux_Debian:
+            '< 10': &cabal-3621-64-deb9
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-deb9.tar.xz
+              dlHash: a0153fa499a5e128a02e9bfe7c2e8430bfa211d06f361c721301dbf4c6713029
+            '(>= 10 && < 11)': &cabal-3621-64-deb10
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-deb10.tar.xz
+              dlHash: ab3ffb77d9816e9f7f62b49ed0565ec2da40c1a77687eb50d7124e9c90451edc
+            unknown_versioning: &cabal-3621-64-deb11
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-deb11.tar.xz
+              dlHash: 4b0040cee9c2a66d857c4e2ff592cfad8829bf634ca61726b1f3d9a153e2c31d
+          Linux_Ubuntu:
+            '( >= 16 && < 19 )': &cabal-3621-64-ubuntu18
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-ubuntu18.04.tar.xz
+              dlHash: 14537deb62927e77735776609cad4453541c5e8435d7fc647387cc35378a65b9
+            '( >= 20 && < 22 )': &cabal-3621-64-ubuntu20
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-ubuntu20.04.tar.xz
+              dlHash: 83a692864bf9a69f63b7c77a4c64580bfaede5abe1b77496c91c8fad2e581088
+            unknown_versioning: &cabal-3621-64-ubuntu22
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-ubuntu22.04.tar.xz
+              dlHash: 96f1686d8be78467e94e2db4b5629ed534f6510b923b1e08dbab224a32000d87
+          Linux_Mint:
+            '< 20':
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-mint19.3.tar.xz
+              dlHash: fadd44997edabea59a1e2282948e5fc052bba866772ce90a8221e915f2dbc6f7
+            '(>= 20 && < 21)':
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-mint20.2.tar.xz
+              dlHash: 1788e8eb4dbc5e52a39519031590713e6e666e7a50109aa6d8d9ded93e723a2a
+            '>= 21': *cabal-3621-64-ubuntu22
+          Linux_Fedora:
+            '< 33': &cabal-3621-64-fedora27
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-fedora27.tar.xz
+              dlHash: 22d49c9c888a331eb33cebe861a93c5af1a52abf22c785767e4ebec8ce3d4b56
+            '>= 33': &cabal-3621-64-fedora33
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-fedora33.tar.xz
+              dlHash: e03530b5158a34f9cf2d218a67249f34c69852276b880a52c19bb0b5905b8afd
+            unknown_versioning: *cabal-3621-64-fedora27
+          Linux_CentOS:
+            '( >= 7 && < 8 )': &cabal-3621-64-centos
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-centos7.tar.xz
+              dlHash: 01493a513b7ead376ff49f990cc5708dccfe30e553a2870407edbe8e15b98a8a
+            unknown_versioning: *cabal-3621-64-centos
+          Linux_RedHat:
+            unknown_versioning: *cabal-3621-64-centos
+          Linux_UnknownLinux:
+            unknown_versioning: &cabal-3621-64-unknown
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-unknown.tar.xz
+              dlHash: 5966d7cadb0a5ddc9e3129e0e5e1af32943aa96139c208aa11634f0865427d1a
+          Linux_Rocky:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-rocky8.tar.xz
+              dlHash: cca053ccab20975edfb1e03c62d47589a3e0c13e1e25d011f4b5b62c25e546c1
+          Linux_Alpine:
+            unknown_versioning: *cabal-3621-64-unknown
+          Darwin:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-apple-darwin.tar.xz
+              dlHash: e2712b3ad32f407536856376852a0fc829c89ec5feddb77afe64d0c2dbf4450f
+          Windows:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-mingw64.zip
+              dlHash: cb9e4f1bd4b51f7fe979a74142f7511fec581a1cfb4b34815b9b90fe37b88c5c
+          FreeBSD:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-portbld-freebsd.tar.xz
+              dlHash: d3b2c77806a7d29d663cef1f22a2125b88f84a3f4bc314daab211a8b4d269238
+        A_32:
+          Linux_UnknownLinux:
+            unknown_versioning: &cabal-3621-32-unknown
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-i386-linux-unknown.tar.xz
+              dlHash: b06f89f7390c8642adb248fd7c60cbfd46835541cd0c8d0d8a9a1bdd3d12517b
+          Linux_Alpine:
+            unknown_versioning: *cabal-3621-32-unknown
+        A_ARM64:
+          Linux_UnknownLinux:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-aarch64-linux-deb10.tar.xz
+              dlHash: aaa46b30dc8ab4b9fe45bf461a8a3b8c3f0e2d21716d224986ecee86f7172c5d
+          Darwin:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-aarch64-apple-darwin.tar.xz
+              dlHash: 43bdb9a91e8993d9b4bbfc9d06df9aa817777d09b39a53642ffcf1be21f9efad
+        A_ARM:
+          Linux_UnknownLinux:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-armv7-linux-deb10.tar.xz
+              dlHash: 3d309b79c7dd5f0b578b2a297104c626b9c0e49c2c5a558b2d49564726f40c5b
    3.8.1.0:
      viTags: []
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.8.1.0.md
      viArch:
        A_64:
@ -4488,6 +4594,7 @@ ghcupDownloads:
              dlHash: 836d89aa1c98a3a848b8b691f9b99123f260dcd4cc1163cb77435a31559475fe
    3.10.1.0:
      viTags: []
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.10.1.0.md
      viArch:
        A_64:
--- a/ghcup-0.0.8.yaml
+++ b/ghcup-0.0.8.yaml
@ -4135,6 +4135,9 @@ ghcupDownloads:
    2.4.1.0:
      viTags:
        - old
+      viPostInstall: &cabal-HSEC-2023-0015 |
+        This release is vulnerable: https://github.com/haskell/security-advisories/blob/main/advisories/hackage/cabal-install/HSEC-2023-0015.md
+        Update to 3.6.2.1 or 3.10.2.0.
      viChangeLog: https://downloads.haskell.org/~cabal/cabal-install-2.4.1.0/changelog
      viArch:
        A_64:
@ -4172,6 +4175,7 @@ ghcupDownloads:
    3.0.0.0:
      viTags:
        - old
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://downloads.haskell.org/~cabal/cabal-install-3.0.0.0/changelog
      viArch:
        A_64:
@ -4208,6 +4212,7 @@ ghcupDownloads:
    3.2.0.0:
      viTags:
      - old
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://downloads.haskell.org/~cabal/cabal-install-3.2.0.0/changelog
      viArch:
        A_64:
@ -4244,6 +4249,7 @@ ghcupDownloads:
    3.4.0.0:
      viTags:
        - old
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.4.0.0.md
      viArch:
        A_64:
@ -4295,6 +4301,7 @@ ghcupDownloads:
    3.4.1.0:
      viTags:
        - old
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.4.1.0.md
      viArch:
        A_64:
@ -4344,6 +4351,7 @@ ghcupDownloads:
    3.6.0.0:
      viTags:
        - old
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.6.0.0.md
      viArch:
        A_64:
@ -4393,8 +4401,8 @@ ghcupDownloads:
              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.0.0/cabal-install-3.6.0.0-armv7-linux.tar.xz
              dlHash: 11b5ca042a8bf45971224f2127a3e9d6b803f09210042ca80a254bea06f01a2e
    3.6.2.0:
-      viTags:
-        - Recommended
+      viTags: []
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.6.2.0.md
      viArch:
        A_64:
@ -4441,8 +4449,106 @@ ghcupDownloads:
            unknown_versioning:
              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.0/cabal-install-3.6.2.0-armv7-linux-deb10.tar.xz
              dlHash: 694ba7c14f8d720c6e790ab0488dbff2d8a07d9c6de97b4deeba31088f825bc2
+    3.6.2.1:
+      viTags:
+        - Recommended
+      viPostInstall: |
+        This is a distributor release to fix https://github.com/haskell/security-advisories/blob/main/advisories/hackage/cabal-install/HSEC-2023-0015.md
+        The applied downstream patches can be viewed here: https://github.com/hasufell/cabal/tree/cabal-install-v3.6.2.1
+        Upstream PR: https://github.com/haskell/cabal/issues/9451
+        You can alternatively update to 3.10.2.0.
+      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.6.2.0.md
+      viArch:
+        A_64:
+          Linux_Debian:
+            '< 10': &cabal-3621-64-deb9
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-deb9.tar.xz
+              dlHash: a0153fa499a5e128a02e9bfe7c2e8430bfa211d06f361c721301dbf4c6713029
+            '(>= 10 && < 11)': &cabal-3621-64-deb10
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-deb10.tar.xz
+              dlHash: ab3ffb77d9816e9f7f62b49ed0565ec2da40c1a77687eb50d7124e9c90451edc
+            unknown_versioning: &cabal-3621-64-deb11
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-deb11.tar.xz
+              dlHash: 4b0040cee9c2a66d857c4e2ff592cfad8829bf634ca61726b1f3d9a153e2c31d
+          Linux_Ubuntu:
+            '( >= 16 && < 19 )': &cabal-3621-64-ubuntu18
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-ubuntu18.04.tar.xz
+              dlHash: 14537deb62927e77735776609cad4453541c5e8435d7fc647387cc35378a65b9
+            '( >= 20 && < 22 )': &cabal-3621-64-ubuntu20
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-ubuntu20.04.tar.xz
+              dlHash: 83a692864bf9a69f63b7c77a4c64580bfaede5abe1b77496c91c8fad2e581088
+            unknown_versioning: &cabal-3621-64-ubuntu22
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-ubuntu22.04.tar.xz
+              dlHash: 96f1686d8be78467e94e2db4b5629ed534f6510b923b1e08dbab224a32000d87
+          Linux_Mint:
+            '< 20':
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-mint19.3.tar.xz
+              dlHash: fadd44997edabea59a1e2282948e5fc052bba866772ce90a8221e915f2dbc6f7
+            '(>= 20 && < 21)':
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-mint20.2.tar.xz
+              dlHash: 1788e8eb4dbc5e52a39519031590713e6e666e7a50109aa6d8d9ded93e723a2a
+            '>= 21': *cabal-3621-64-ubuntu22
+          Linux_Fedora:
+            '< 33': &cabal-3621-64-fedora27
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-fedora27.tar.xz
+              dlHash: 22d49c9c888a331eb33cebe861a93c5af1a52abf22c785767e4ebec8ce3d4b56
+            '>= 33': &cabal-3621-64-fedora33
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-fedora33.tar.xz
+              dlHash: e03530b5158a34f9cf2d218a67249f34c69852276b880a52c19bb0b5905b8afd
+            unknown_versioning: *cabal-3621-64-fedora27
+          Linux_CentOS:
+            '( >= 7 && < 8 )': &cabal-3621-64-centos
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-centos7.tar.xz
+              dlHash: 01493a513b7ead376ff49f990cc5708dccfe30e553a2870407edbe8e15b98a8a
+            unknown_versioning: *cabal-3621-64-centos
+          Linux_RedHat:
+            unknown_versioning: *cabal-3621-64-centos
+          Linux_UnknownLinux:
+            unknown_versioning: &cabal-3621-64-unknown
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-unknown.tar.xz
+              dlHash: 5966d7cadb0a5ddc9e3129e0e5e1af32943aa96139c208aa11634f0865427d1a
+          Linux_Rocky:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-linux-rocky8.tar.xz
+              dlHash: cca053ccab20975edfb1e03c62d47589a3e0c13e1e25d011f4b5b62c25e546c1
+          Linux_Alpine:
+            unknown_versioning: *cabal-3621-64-unknown
+          Darwin:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-apple-darwin.tar.xz
+              dlHash: e2712b3ad32f407536856376852a0fc829c89ec5feddb77afe64d0c2dbf4450f
+          Windows:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-mingw64.zip
+              dlHash: cb9e4f1bd4b51f7fe979a74142f7511fec581a1cfb4b34815b9b90fe37b88c5c
+          FreeBSD:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-x86_64-portbld-freebsd.tar.xz
+              dlHash: d3b2c77806a7d29d663cef1f22a2125b88f84a3f4bc314daab211a8b4d269238
+        A_32:
+          Linux_UnknownLinux:
+            unknown_versioning: &cabal-3621-32-unknown
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-i386-linux-unknown.tar.xz
+              dlHash: b06f89f7390c8642adb248fd7c60cbfd46835541cd0c8d0d8a9a1bdd3d12517b
+          Linux_Alpine:
+            unknown_versioning: *cabal-3621-32-unknown
+        A_ARM64:
+          Linux_UnknownLinux:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-aarch64-linux-deb10.tar.xz
+              dlHash: aaa46b30dc8ab4b9fe45bf461a8a3b8c3f0e2d21716d224986ecee86f7172c5d
+          Darwin:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-aarch64-apple-darwin.tar.xz
+              dlHash: 43bdb9a91e8993d9b4bbfc9d06df9aa817777d09b39a53642ffcf1be21f9efad
+        A_ARM:
+          Linux_UnknownLinux:
+            unknown_versioning:
+              dlUri: https://downloads.haskell.org/~ghcup/unofficial-bindists/cabal/3.6.2.1/cabal-install-3.6.2.1-armv7-linux-deb10.tar.xz
+              dlHash: 3d309b79c7dd5f0b578b2a297104c626b9c0e49c2c5a558b2d49564726f40c5b
    3.8.1.0:
      viTags: []
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.8.1.0.md
      viArch:
        A_64:
@ -4488,6 +4594,7 @@ ghcupDownloads:
              dlHash: 836d89aa1c98a3a848b8b691f9b99123f260dcd4cc1163cb77435a31559475fe
    3.10.1.0:
      viTags: []
+      viPostInstall: *cabal-HSEC-2023-0015
      viChangeLog: https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.10.1.0.md
      viArch:
        A_64: