From 6522c566b9257b25720b75e17885277e18a7882c Mon Sep 17 00:00:00 2001 From: "Danilo G. Baio" Date: Mon, 22 Jun 2020 11:05:02 +0000 Subject: MFH: r533797 r539739 python 3.5 will reach End-of-life on 2020-09-13 lang/python35: Fix security issues The patches for CVE-2019-18348 and CVE-2020-8492 are in the 3.5 branch and will be present in a next release. PR: 246984 Approved by: python (with hat) Security: ca595a25-91d8-11ea-b470-080027846a02 (CVE-2019-18348) Security: a27b0bb6-84fc-11ea-b5b4-641c67a117d8 (CVE-2020-8492) Approved by: ports-secteam (blanket, backport of security fix) --- lang/python35/Makefile | 9 +++++++-- lang/python35/distinfo | 6 +++++- 2 files changed, 12 insertions(+), 3 deletions(-) diff --git a/lang/python35/Makefile b/lang/python35/Makefile index 91dc9570cc4c..748da84b10af 100644 --- a/lang/python35/Makefile +++ b/lang/python35/Makefile @@ -3,7 +3,7 @@ PORTNAME= python PORTVERSION= ${PYTHON_PORTVERSION} -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= lang python MASTER_SITES= PYTHON/ftp/python/${PORTVERSION} PKGNAMESUFFIX= ${PYTHON_SUFFIX} @@ -12,13 +12,18 @@ DIST_SUBDIR= python # Resolve sinpi name clash with libm (IEEE-754 violation) PATCH_SITES= https://github.com/python/cpython/commit/ -PATCHFILES= f57cd8288dbe6aba99c057f37ad6d58f8db75350.patch:-p1 +PATCHFILES= f57cd8288dbe6aba99c057f37ad6d58f8db75350.patch:-p1 \ + 37fe316479e0b6906a74b0c0a5e495c55037fdfd.patch:-p1 \ + 09d8172837b6985c4ad90ee025f6b5a554a9f0ac.patch:-p1 MAINTAINER= python@FreeBSD.org COMMENT= Interpreted object-oriented programming language LICENSE= PSFL +DEPRECATED= Deprecated upstream +EXPIRATION_DATE= 2020-09-13 + USES= cpe ncurses pathfix pkgconfig readline:port shebangfix ssl tar:xz USE_CSTD= c99 PATHFIX_MAKEFILEIN= Makefile.pre.in diff --git a/lang/python35/distinfo b/lang/python35/distinfo index e64fa608a15c..4b709ae61ef6 100644 --- a/lang/python35/distinfo +++ b/lang/python35/distinfo @@ -1,5 +1,9 @@ -TIMESTAMP = 1575745214 +TIMESTAMP = 1592656701 SHA256 (python/Python-3.5.9.tar.xz) = c24a37c63a67f53bdd09c5f287b5cff8e8b98f857bf348c577d454d3f74db049 SIZE (python/Python-3.5.9.tar.xz) = 15388876 SHA256 (python/f57cd8288dbe6aba99c057f37ad6d58f8db75350.patch) = 44340896504b297bbab06db0bb0a71ddf9f25bbe02ab3dcdfeec2772c957b69f SIZE (python/f57cd8288dbe6aba99c057f37ad6d58f8db75350.patch) = 2542 +SHA256 (python/37fe316479e0b6906a74b0c0a5e495c55037fdfd.patch) = b576605d75b265b25cebe7ad166bacce417bfc68fa7cdc0902026b5eb7e4df26 +SIZE (python/37fe316479e0b6906a74b0c0a5e495c55037fdfd.patch) = 10880 +SHA256 (python/09d8172837b6985c4ad90ee025f6b5a554a9f0ac.patch) = 5780700c549f81323cf07d6637584c3bbca45afa84b3e9febbba54db07544ccf +SIZE (python/09d8172837b6985c4ad90ee025f6b5a554a9f0ac.patch) = 6643 -- cgit v1.2.3