Bug 248753
| Summary: | [exp-run] lang/python37: Update to 3.7.9 | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Wen Heping <wen> | ||||||||
| Component: | Individual Port(s) | Assignee: | Wen Heping <wen> | ||||||||
| Status: | Closed FIXED | ||||||||||
| Severity: | Affects Only Me | CC: | freebsd, i.dani, lwhsu, nevecherya, thierry, wen | ||||||||
| Priority: | --- | Keywords: | needs-patch | ||||||||
| Version: | Latest | Flags: | lwhsu:
merge-quarterly+
antoine: exp-run+ |
||||||||
| Hardware: | Any | ||||||||||
| OS: | Any | ||||||||||
| See Also: | https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=252916 | ||||||||||
| Attachments: |
|
||||||||||
Created attachment 217342 [details]
update to 3.7.9
update to 3.7.9
The checksums and sizes look wrong (In reply to Antoine Brodin from comment #2) I check again, the size and md5 of python-3.7.9.tar.xz both are the same as upstream. The size of the 4 doc files are the same as upstream too. wen Please check again, for instance fetch: https://www.python.org/ftp/python/doc/3.7.9/python-3.7.9-docs-text.tar.bz2: size mismatch: expected 2295112, actual 2291659 (In reply to Antoine Brodin from comment #4) I download the file here: https://docs.python.org/3.7/archives/ % make -C lang/python-doc-text fetch-urlall-list MASTER_SITE_BACKUP= https://www.python.org/ftp/python/doc/3.7.9/python-3.7.9-docs-text.tar.bz2 https://www.python.org/ftp/python/doc/current/python-3.7.9-docs-text.tar.bz2 I suggest raising the importance, as the current Python 3.7.8 is vulnerable: https://vuxml.freebsd.org/freebsd/3fcb70a4-e22d-11ea-98b2-080027846a02.html Comment on attachment 217342 [details]
update to 3.7.9
Mark obsolete, has wrong checksums and sizes
Created attachment 217456 [details]
Update python doc size and checksum
Exp-run looks fine A commit references this bug: Author: wen Date: Wed Aug 26 14:20:20 UTC 2020 New revision: 546286 URL: https://svnweb.freebsd.org/changeset/ports/546286 Log: - Update to 3.7.9(security update) PR: 248753 Submitted by: wen@(myself) Exp-run by: antoine@ MFH: 2020Q3 Security: CVE-2020-15801, CVE-2020-15523, CVE-2020-14422 Changes: head/lang/python-doc-html/distinfo head/lang/python37/Makefile head/lang/python37/Makefile.version head/lang/python37/distinfo head/lang/python37/pkg-plist A commit references this bug: Author: wen Date: Fri Aug 28 23:10:28 UTC 2020 New revision: 546849 URL: https://svnweb.freebsd.org/changeset/ports/546849 Log: MFH: r546286 - Update to 3.7.9(security update) PR: 248753 Submitted by: wen@(myself) Exp-run by: antoine@ Security: CVE-2020-15801, CVE-2020-15523, CVE-2020-14422 Approved by: ports-secteam@(joneum@) Changes: _U branches/2020Q3/ branches/2020Q3/lang/python-doc-html/distinfo branches/2020Q3/lang/python37/Makefile.version branches/2020Q3/lang/python37/distinfo branches/2020Q3/lang/python37/pkg-plist This broke french/aster. See https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=252916 |
Created attachment 217338 [details] Update to 3.7.9 Update to 3.7.9