[Bug 287009] lang/python3*: CVE-2025-4516 (use-after-free issue with unicode-escape decoder related to error= handling)

2025-05-28 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287009

Charlie Li  changed:

   What|Removed |Added

 CC||geo...@m5p.com

--- Comment #7 from Charlie Li  ---
*** Bug 287121 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are the assignee for the bug.


[Bug 286298] databases/py-{gdbm,sqlite3}, x11-toolkits/py-tkinter: internal headers from lang/python312+ not found

2025-05-28 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286298

Oleg Sidorkin  changed:

   What|Removed |Added

 CC||osidor...@gmail.com

--- Comment #5 from Oleg Sidorkin  ---
Created attachment 260767
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=260767&action=edit
Fix for py313

I'm using this patch with python 3.13 for a long time (and a similar one for
py-tkinter)

-- 
You are receiving this mail because:
You are the assignee for the bug.


[Bug 287009] lang/python3*: CVE-2025-4516 (use-after-free issue with unicode-escape decoder related to error= handling)

2025-05-28 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287009

--- Comment #8 from commit-h...@freebsd.org ---
A commit in branch main references this bug:

URL:
https://cgit.FreeBSD.org/ports/commit/?id=5e57ff8453ec6c1172fc575274cb5c466dd0bd30

commit 5e57ff8453ec6c1172fc575274cb5c466dd0bd30
Author: Charlie Li 
AuthorDate: 2025-05-29 04:36:01 +
Commit: Charlie Li 
CommitDate: 2025-05-29 04:38:19 +

lang/python311: pull in upstream commit addressing CVE-2025-4516

Reference: https://github.com/python/cpython/pull/134341

PR: 287009

 lang/python311/Makefile | 4 
 lang/python311/distinfo | 4 +++-
 2 files changed, 7 insertions(+), 1 deletion(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.