Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 20 Jun 2020 14:21:46 +0000 (UTC)
From:      "Danilo G. Baio" <dbaio@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r539739 - head/lang/python35
Message-ID:  <202006201421.05KELkIG007032@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: dbaio
Date: Sat Jun 20 14:21:46 2020
New Revision: 539739
URL: https://svnweb.freebsd.org/changeset/ports/539739

Log:
  lang/python35: Fix security issues
  
  The patches for CVE-2019-18348 and CVE-2020-8492 are in the 3.5 branch
  and will be present in a next release.
  
  PR:		246984
  Approved by:	python (with hat)
  MFH:		2020Q2
  Security:	ca595a25-91d8-11ea-b470-080027846a02 (CVE-2019-18348)
  Security:	a27b0bb6-84fc-11ea-b5b4-641c67a117d8 (CVE-2020-8492)

Modified:
  head/lang/python35/Makefile
  head/lang/python35/distinfo

Modified: head/lang/python35/Makefile
==============================================================================
--- head/lang/python35/Makefile	Sat Jun 20 14:07:48 2020	(r539738)
+++ head/lang/python35/Makefile	Sat Jun 20 14:21:46 2020	(r539739)
@@ -3,7 +3,7 @@
 
 PORTNAME=	python
 PORTVERSION=	${PYTHON_PORTVERSION}
-PORTREVISION=	4
+PORTREVISION=	5
 CATEGORIES=	lang python
 MASTER_SITES=	PYTHON/ftp/python/${PORTVERSION}
 PKGNAMESUFFIX=	${PYTHON_SUFFIX}
@@ -12,7 +12,9 @@ DIST_SUBDIR=	python
 
 # Resolve sinpi name clash with libm (IEEE-754 violation)
 PATCH_SITES=	https://github.com/python/cpython/commit/
-PATCHFILES=	f57cd8288dbe6aba99c057f37ad6d58f8db75350.patch:-p1
+PATCHFILES=	f57cd8288dbe6aba99c057f37ad6d58f8db75350.patch:-p1 \
+		37fe316479e0b6906a74b0c0a5e495c55037fdfd.patch:-p1 \
+		09d8172837b6985c4ad90ee025f6b5a554a9f0ac.patch:-p1
 
 MAINTAINER=	python@FreeBSD.org
 COMMENT=	Interpreted object-oriented programming language

Modified: head/lang/python35/distinfo
==============================================================================
--- head/lang/python35/distinfo	Sat Jun 20 14:07:48 2020	(r539738)
+++ head/lang/python35/distinfo	Sat Jun 20 14:21:46 2020	(r539739)
@@ -1,5 +1,9 @@
-TIMESTAMP = 1575745214
+TIMESTAMP = 1592656701
 SHA256 (python/Python-3.5.9.tar.xz) = c24a37c63a67f53bdd09c5f287b5cff8e8b98f857bf348c577d454d3f74db049
 SIZE (python/Python-3.5.9.tar.xz) = 15388876
 SHA256 (python/f57cd8288dbe6aba99c057f37ad6d58f8db75350.patch) = 44340896504b297bbab06db0bb0a71ddf9f25bbe02ab3dcdfeec2772c957b69f
 SIZE (python/f57cd8288dbe6aba99c057f37ad6d58f8db75350.patch) = 2542
+SHA256 (python/37fe316479e0b6906a74b0c0a5e495c55037fdfd.patch) = b576605d75b265b25cebe7ad166bacce417bfc68fa7cdc0902026b5eb7e4df26
+SIZE (python/37fe316479e0b6906a74b0c0a5e495c55037fdfd.patch) = 10880
+SHA256 (python/09d8172837b6985c4ad90ee025f6b5a554a9f0ac.patch) = 5780700c549f81323cf07d6637584c3bbca45afa84b3e9febbba54db07544ccf
+SIZE (python/09d8172837b6985c4ad90ee025f6b5a554a9f0ac.patch) = 6643



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202006201421.05KELkIG007032>