CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]    2021/02/16 11:50:27

Modified files:
        lang/python/3.9: Makefile 
        lang/python/3.9/files: CHANGES.OpenBSD 
Added files:
        lang/python/3.9/patches: 
                                 patch-2021-01-18-09-27-31_bpo-42938_4Zn4Mp_rst 
                                 patch-Lib_ctypes_test_test_parameters_py 
                                 patch-Modules__ctypes_callproc_c 

Log message:
python/3.9: add upstream patch for CVE-2021-3177

While waiting for this to appear in a proper Python 3.9.x release,
use upstream's commit for this severe sprintf bug.

The bug was reported on Jan 16 and the fix was available since Jan 18,
but only 3.6 and 3.7 have new releases as of now.

ok sthen

Reply via email to