Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 20 Jun 2026 13:49:36 +0000
From:      bugzilla-noreply@freebsd.org
To:        python@FreeBSD.org
Subject:   [Bug 285957] lang/python312 as default python
Message-ID:  <bug-285957-21822-6DgqFD3aUz@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-285957-21822@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=285957

Dag-Erling Smørgrav <des@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |des@FreeBSD.org

--- Comment #83 from Dag-Erling Smørgrav <des@FreeBSD.org> ---
I would like to point out that the oldest version of Python for which patches
exist for all known vulnerabilities¹ is 3.13.

With 2026Q3 fast approaching, I would suggest we switch now and fix the fallout
later.

BTW, the _PYTHON_PORTBRANCH variable hasn't been used anywhere since 2018 and
can probably just be dropped.

¹ I'm including CVE-2025-15366 and CVE-2025-15367 for which patches exist which
we could choose to apply locally to python313, even though upstream has
deliberately chosen not to merge them.

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-285957-21822-6DgqFD3aUz>