[MacPorts] #68032: Python 3.11.5 WIP
MacPorts
noreply at macports.org
Fri Aug 25 00:17:45 UTC 2023
#68032: Python 3.11.5 WIP
----------------------+----------------------
Reporter: artkiver | Owner: jmroot
Type: update | Status: assigned
Priority: High | Milestone:
Component: ports | Version:
Keywords: | Port:
----------------------+----------------------
While doing something completely unrelated, I noticed that Python 3.11.5
was released today and it is a security related release.
{{{
gh-108310: Fixed an issue where instances of ssl.SSLSocket were vulnerable
to a bypass of the TLS handshake and included protections (like
certificate verification) and treating sent unencrypted data as if it were
post-handshake TLS encrypted data. Security issue reported as
CVE-2023-40217 by Aapo Oksman. Patch by Gregory P. Smith.
}}}
I've prepped a diff for the Portfile and it seems to have built OK
locally.
However, when running % port test I received the following:
{{{
Error: Failed to test python311: command execution failed
Error: See
/opt/local/var/macports/logs/_opt_local_var_macports_sources_github
.com_macports_macports-ports_lang_python311/python311/main.log for
details.
Error: Follow https://guide.macports.org/#project.tickets if you believe
there
is a bug.
Error: Processing of port python311 failed
}}}
Additionally, I noticed this in the Portfile:
{{{
# Remember to keep py311-tkinter and py311-gdbm's versions sync'd with
this
version 3.11.5
}}}
So, rather than submitting a PR, I figure since the port has a maintainer,
better to document my efforts along with my diff and main.log from tests
to see if it would be helpful for others more experienced than I.
Thank you!
--
Ticket URL: <https://trac.macports.org/ticket/68032>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list