CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/03/18 05:15:32
Modified files:
lang/python/3 : Tag: OPENBSD_7_8 Makefile distinfo
lang/python/3/files: Tag: OPENBSD_7_8 CHANGES.OpenBSD
lang/python/3/pkg: Tag: OPENBSD_7_8 PLIST-tests
Added files:
lang/python/3/patches: Tag: OPENBSD_7_8
patch-Lib_http_cookies_py
patch-Lib_test_test_http_cookies_py
patch-Lib_test_test_pyexpat_py
patch-Modules_pyexpat_c
Log message:
update to python-3.12.13 and patch for recent security fixes.
backports from tb, .ok tb@ kmos@
https://mail.python.org/archives/list/[email protected]/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/
Reject control characters in 'http.cookies.Morsel.update' (CVE-2026-3644)
https://mail.python.org/archives/list/[email protected]/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/
Fix C stack overflow (CVE-2026-4224) when an Expat parser with a registered
'ElementDeclHandler' parses inline DTD containing deeply nested content model.
