Re: Status of Python 3.11
Charlie Li <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.ports |
|---|---|
| Organization | FreeBSD Project |
| Message-ID | <[email protected]> |
Jochen Neumeister wrote: > > > Am 08.08.26 um 02:17 schrieb Dag-Erling Smørgrav: >> "Dan Langille" <[email protected]> writes: >>> Two issues vex me and the alerts are overwhelming. >>> >>> CVE-2025-15367 >>> CVE-2025-15366 >> >> Patches for these exist, but the maintainer refuses to apply them. >> >> https://reviews.freebsd.org/D57717 >> https://reviews.freebsd.org/D57718 >> > As a member of the ports-secteam, I have asked for a prompt resolution. > I have left a comment to this effect in each review. > Nothing will be backported until upstream can verify that the fixes do not break existing (correct) behaviour. Currently only the imaplib (CVE-2025-15366) fixes are present in the latest upstream lang/python31{3,4,5}. -- Charlie Li ...nope, still don't have an exit line.
OpenPGP_signature.asc
(application/pgp-signature, 236 B)
-----BEGIN PGP SIGNATURE----- wnoEABYIACMWIQTHxcCLnAXo3rFg6k7P+1cn7slqBAUCanenTQUDAAAAAAAKCRDP+1cn7slqBNpK APiv/LdP+tAs+xWR6EUewgY0x/mL8ixRdqjOWNoxSUvHAP418vfYbLKfKyiTD8L4A6JZck0hkdCi ZT9VPGS2tRa2AA== =TcGV -----END PGP SIGNATURE-----