Re: Python 3.11 Open CVE Resolution?

Tim Daneliuk <[email protected]> Mon, 4 May 2026 18:38:15 -0500

Newsgroups	gmane.os.freebsd.questions
Message-ID	<[email protected]>

On 5/4/26 16:34, Tim Daneliuk wrote:
> On 5/4/26 12:17, Michael Sierchio wrote:
>> On Mon, May 4, 2026 at 1:02 PM Tim Daneliuk <[email protected]> wrote:
>>>
>>> A lot of port upgrades are failing because of open CVEs on Python 3.11 on 13.5-STABLE.
>>>
>>> Do we have a likely ETA for resolution?  I prefer not to disable vulnerability checking.
>>
>> By resolution do you mean availability of a point release for Python,
>> such as 3.11.15?
>>
> 
> Yes.  This has not appeared in ports yet so far as I know.

I should correct this.  3.11.15 is in the ports, but the current .2 subversion is still
shown vulnerabilities.

This is preventing all manner of other ports updates.