[MacPorts] #68032: Python 3.11.5 WIP

MacPorts noreply at macports.org
Fri Aug 25 00:17:45 UTC 2023


#68032: Python 3.11.5 WIP
----------------------+----------------------
 Reporter:  artkiver  |      Owner:  jmroot
     Type:  update    |     Status:  assigned
 Priority:  High      |  Milestone:
Component:  ports     |    Version:
 Keywords:            |       Port:
----------------------+----------------------
 While doing something completely unrelated, I noticed that Python 3.11.5
 was released today and it is a security related release.

 {{{
 gh-108310: Fixed an issue where instances of ssl.SSLSocket were vulnerable
 to a bypass of the TLS handshake and included protections (like
 certificate verification) and treating sent unencrypted data as if it were
 post-handshake TLS encrypted data. Security issue reported as
 CVE-2023-40217 by Aapo Oksman. Patch by Gregory P. Smith.
 }}}

 I've prepped a diff for the Portfile and it seems to have built OK
 locally.

 However, when running % port test I received the following:

 {{{
 Error: Failed to test python311: command execution failed
 Error: See
 /opt/local/var/macports/logs/_opt_local_var_macports_sources_github
 .com_macports_macports-ports_lang_python311/python311/main.log for
 details.
 Error: Follow https://guide.macports.org/#project.tickets if you believe
 there
 is a bug.
 Error: Processing of port python311 failed
 }}}

 Additionally, I noticed this in the Portfile:

 {{{
 # Remember to keep py311-tkinter and py311-gdbm's versions sync'd with
 this
 version             3.11.5
 }}}

 So, rather than submitting a PR, I figure since the port has a maintainer,
 better to document my efforts along with my diff and main.log from tests
 to see if it would be helpful for others more experienced than I.

 Thank you!

-- 
Ticket URL: <https://trac.macports.org/ticket/68032>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list