CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]    2021/02/16 16:20:15

Modified files:
        lang/python/3.8: Tag: OPENBSD_6_8 Makefile 
        lang/python/3.8/files: Tag: OPENBSD_6_8 CHANGES.OpenBSD 
        lang/python/3.8/patches: Tag: OPENBSD_6_8 
                                 patch-Modules__hashopenssl_c 
                                 patch-Modules__ssl_c patch-configure_ac 
Added files:
        lang/python/3.8/patches: Tag: OPENBSD_6_8 
                                 patch-2021-01-18-09-27-31_bpo-42938_4Zn4Mp_rst 
                                 patch-Lib_ctypes_test_test_parameters_py 
                                 patch-Modules__ctypes_callproc_c 

Log message:
MFC: python/3.8: add upstream patch for CVE-2021-3177

While waiting for this to appear in a proper Python 3.8.x release,
use upstream's commit for this severe sprintf bug.

The bug was reported on Jan 16 and the fix was available since Jan 18,
but only 3.6 and 3.7 have new releases as of now.

ok sthen

Reply via email to