Re: Python 3.11 Open CVE Resolution?

On 5/4/26 18:38, Tim Daneliuk wrote:
> On 5/4/26 16:34, Tim Daneliuk wrote:
>> On 5/4/26 12:17, Michael Sierchio wrote:
>>> On Mon, May 4, 2026 at 1:02 PM Tim Daneliuk <[email protected]> wrote:
>>>>
>>>> A lot of port upgrades are failing because of open CVEs on Python 3.11 on 13.5-STABLE.
>>>>
>>>> Do we have a likely ETA for resolution?  I prefer not to disable vulnerability checking.
>>>
>>> By resolution do you mean availability of a point release for Python,
>>> such as 3.11.15?
>>>
>>
>> Yes.  This has not appeared in ports yet so far as I know.
> 
> I should correct this.  3.11.15 is in the ports, but the current .2 subversion is still
> shown vulnerabilities.
> 
> This is preventing all manner of other ports updates.


Nevermind.  I managed to somehow miss that 13-stable was EOL.  A move to 14-stable
on a few servers made everything happy again (but the CVEs are still not resolved).

D'Oh ...