Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 08 Jul 2022 01:48:36 +0000
From:      bugzilla-noreply@freebsd.org
To:        python@FreeBSD.org
Subject:   [Bug 265082] devel/ipython: 7.31.1 was a security release but not marked or merged (CVE-2022-21699)
Message-ID:  <bug-265082-21822@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D265082

            Bug ID: 265082
           Summary: devel/ipython: 7.31.1 was a security release but not
                    marked or merged (CVE-2022-21699)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
               URL: https://github.com/ipython/ipython/blob/7.31.1/docs/so
                    urce/whatsnew/version7.rst
                OS: Any
            Status: New
          Keywords: needs-patch, needs-qa, security
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: python@FreeBSD.org
          Reporter: koobs@FreeBSD.org
                CC: ports-secteam@FreeBSD.org, sunpoet@FreeBSD.org
            Blocks: 265076
          Assignee: python@FreeBSD.org
             Flags: maintainer-feedback?(python@FreeBSD.org)
                CC:
                CC: sunpoet@FreeBSD.org
             Flags: maintainer-feedback?(sunpoet@FreeBSD.org),
                    merge-quarterly?

devel/ipython was updated from 7.29.0 to 7.32.0 in ports 3675d8a989eb but
security/vuxml entries don't appear to have been created and the update doe=
snt
appear to have been merged to quarterly at the time.

This issue is to create a security/vuxml entry for the security vulnerabili=
ty,
and to merge the latest 7.* port version updates (all bugfix releases) to
quarterly, before updating devel/ipython to the 8.x series in bug 265076


Referenced Bugs:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D265076
[Bug 265076] devel/ipython: Update to 8.4.0
--=20
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-265082-21822>