[Bug 210325] lang/python35, lang/python34, lang/python33, lang/python27: Backport patches for CVE-2016-5636

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri Jun 17 17:09:17 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=210325

--- Comment #4 from commit-hook at freebsd.org ---
A commit references this bug:

Author: rm
Date: Fri Jun 17 17:09:06 UTC 2016
New revision: 417019
URL: https://svnweb.freebsd.org/changeset/ports/417019

Log:
  lang/python[xx]: backport upstream fix for CVE-2016-5636

  Add patch for integer overflow in zipimport module to all our python ports.

  While I'm here, get rid of -f flag in ${RM} invocation, because ${RM} already
  expands to rm -f, so in result we are getting something like:

  /bin/rm -f -f
/wrkdirs/usr/ports/lang/python35/work/stage/usr/local/lib/libpython3.so

  PR:           210325
  Submitted by:  Vladimir Krstulja <vlad-fbsd at acheronmedia.com>
  Security:     1d0f6852-33d8-11e6-a671-60a44ce6887b
  With hat:     python

Changes:
  head/lang/python27/Makefile
  head/lang/python27/files/patch-Modules_zipimport.c
  head/lang/python33/Makefile
  head/lang/python33/files/patch-Modules_zipimport.c
  head/lang/python34/Makefile
  head/lang/python34/files/patch-Modules_zipimport.c
  head/lang/python35/Makefile
  head/lang/python35/files/patch-Modules_zipimport.c

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the freebsd-python mailing list