https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=299262
Bug ID: 299262
Summary: devel/py-setuptools: add patches to fix
CVE-2022-40897, CVE-2024-6345, and CVE-2025-47273
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: Individual Port(s)
Assignee: [email protected]
Reporter: [email protected]
Assignee: [email protected]
Flags: maintainer-feedback?([email protected])
Created attachment 275530
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=275530&action=edit
update patch for devel/py-setuotools
This uses an AlmaLinux patch, and I consider it a working draft.
I'm aware of the discussion at
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298351 .
Whenever I'm building ports and run into “py31[123...]-setuptools-63.1.0_3 has
known vulnerabilities:”, I have to set “DISABLE_VULNERABILITIES=yes” and
rebuild—it's a hassle and feels wrong.
I would appreciate it if you could look into this.
--
You are receiving this mail because:
You are the assignee for the bug.
