Re: Status of Python 3.11

[Charlie Li]

Jochen Neumeister wrote:

Am 08.08.26 um 02:17 schrieb Dag-Erling Smørgrav:

"Dan Langille" <d...@langille.org> writes:

Two issues vex me and the alerts are overwhelming.

CVE-2025-15367
CVE-2025-15366

Patches for these exist, but the maintainer refuses to apply them.

https://reviews.freebsd.org/D57717
https://reviews.freebsd.org/D57718

As a member of the ports-secteam, I have asked for a prompt resolution. I have left a comment to this effect in each review.

Nothing will be backported until upstream can verify that the fixes do not break existing (correct) behaviour. Currently only the imaplib (CVE-2025-15366) fixes are present in the latest upstream lang/python31{3,4,5}.

--
Charlie Li
...nope, still don't have an exit line.

OpenPGP_signature.asc
Description: OpenPGP digital signature