From owner-freebsd-python@freebsd.org  Mon Jun 22 11:05:23 2020
Return-Path: <owner-freebsd-python@freebsd.org>
Delivered-To: freebsd-python@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.nyi.freebsd.org (Postfix) with ESMTP id 3100F347DA3
 for <freebsd-python@mailman.nyi.freebsd.org>;
 Mon, 22 Jun 2020 11:05:23 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from mailman.nyi.freebsd.org (unknown [127.0.1.3])
 by mx1.freebsd.org (Postfix) with ESMTP id 49r65H0bCvz4b1g
 for <freebsd-python@freebsd.org>; Mon, 22 Jun 2020 11:05:23 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: by mailman.nyi.freebsd.org (Postfix)
 id 1271C347DA2; Mon, 22 Jun 2020 11:05:23 +0000 (UTC)
Delivered-To: python@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.nyi.freebsd.org (Postfix) with ESMTP id 123CF347B71
 for <python@mailman.nyi.freebsd.org>; Mon, 22 Jun 2020 11:05:23 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org
 [IPv6:2610:1c1:1:606c::19:3])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
 client-signature RSA-PSS (4096 bits) client-digest SHA256)
 (Client CN "mxrelay.nyi.freebsd.org",
 Issuer "Let's Encrypt Authority X3" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 49r65G6qXKz4bPw
 for <python@FreeBSD.org>; Mon, 22 Jun 2020 11:05:22 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org (kenobi.freebsd.org
 [IPv6:2610:1c1:1:606c::50:1d])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
 (Client did not present a certificate)
 by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id E5986D422
 for <python@FreeBSD.org>; Mon, 22 Jun 2020 11:05:22 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org ([127.0.1.5])
 by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 05MB5MFK074959
 for <python@FreeBSD.org>; Mon, 22 Jun 2020 11:05:22 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
Received: (from bugzilla@localhost)
 by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 05MB5MAg074958
 for python@FreeBSD.org; Mon, 22 Jun 2020 11:05:22 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to
 bugzilla-noreply@freebsd.org using -f
From: bugzilla-noreply@freebsd.org
To: python@FreeBSD.org
Subject: [Bug 246984] lang/python* Fix CVE-2020-8492, CVE-2019-18348
Date: Mon, 22 Jun 2020 11:05:21 +0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Ports & Packages
X-Bugzilla-Component: Individual Port(s)
X-Bugzilla-Version: Latest
X-Bugzilla-Keywords: needs-qa, security
X-Bugzilla-Severity: Affects Many People
X-Bugzilla-Who: commit-hook@freebsd.org
X-Bugzilla-Status: Open
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: Normal
X-Bugzilla-Assigned-To: dbaio@freebsd.org
X-Bugzilla-Flags: maintainer-feedback? merge-quarterly?
X-Bugzilla-Changed-Fields: 
Message-ID: <bug-246984-21822-Uxa6CDHQyu@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-246984-21822@https.bugs.freebsd.org/bugzilla/>
References: <bug-246984-21822@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: freebsd-python@freebsd.org
X-Mailman-Version: 2.1.33
Precedence: list
List-Id: FreeBSD-specific Python issues <freebsd-python.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-python>, 
 <mailto:freebsd-python-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-python/>
List-Post: <mailto:freebsd-python@freebsd.org>
List-Help: <mailto:freebsd-python-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-python>,
 <mailto:freebsd-python-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Jun 2020 11:05:23 -0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D246984

--- Comment #22 from commit-hook@freebsd.org ---
A commit references this bug:

Author: dbaio
Date: Mon Jun 22 11:05:03 UTC 2020
New revision: 539801
URL: https://svnweb.freebsd.org/changeset/ports/539801

Log:
  MFH: r533797 r539739

  python 3.5 will reach End-of-life on 2020-09-13

  lang/python35: Fix security issues

  The patches for CVE-2019-18348 and CVE-2020-8492 are in the 3.5 branch
  and will be present in a next release.

  PR:           246984
  Approved by:  python (with hat)
  Security:     ca595a25-91d8-11ea-b470-080027846a02 (CVE-2019-18348)
  Security:     a27b0bb6-84fc-11ea-b5b4-641c67a117d8 (CVE-2020-8492)

  Approved by:  ports-secteam (blanket, backport of security fix)

Changes:
_U  branches/2020Q2/
  branches/2020Q2/lang/python35/Makefile
  branches/2020Q2/lang/python35/distinfo

--=20
You are receiving this mail because:
You are on the CC list for the bug.=