lang/linux-rl9-python3: update to 3.9.25 release3fc68c5c16
Port details
lang/linux-rl9-python33.9.25
Python Language (Rocky Linux 9.8)
- Maintainer
- emulation@FreeBSD.org
- Packages
- linux-rl9-python39 3.9.25
- Upstream
- up to date
- CPE
python:pythonfrom the port- WWW
- https://www.python.org/
- Links
- cgit · VuXML
Unaddressed (14) · The CVE record lists this version as affected, no VuXML entry names the CVE
Updating to 3.13.14 would fix 12 of 14 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 3.10.0 1 · 3.10.20 2 · 3.10.21 4 · 3.13.10 6 · 3.13.11 7 · 3.13.13 10 · 3.13.14 12
| CVE-2026-15308 | 8.7 | 2026-07-09 | The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. |
| CVE-2023-36632 | 7.5 | 2023-06-25 | The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python o… |
| CVE-2026-4519 | 7.0 | 2026-03-20 | The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading … |
| CVE-2026-7210 | 6.3 | 2026-05-11 | `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding… |
| CVE-2025-12781 | 6.3 | 2026-01-21 | When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the "base64" module the characters "+/" will always be accepted, regardl… |
| CVE-2025-12084 | 6.3 | 2025-12-03 | When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability ca… |
| CVE-2025-13836 | 6.3 | 2025-12-01 | When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause … |
| CVE-2026-3087 | 6.0 | 2026-04-27 | If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target di… |
| CVE-2026-4224 | 6.0 | 2026-03-16 | When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs. |
| CVE-2026-3644 | 6.0 | 2026-03-16 | The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patc… |
| CVE-2026-0864 | 4.1 | 2026-06-23 | When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be inje… |
| CVE-2026-6019 | 2.1 | 2026-04-22 | http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive seq… |
| CVE-2025-13837 | 2.1 | 2025-12-01 | When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues |
| CVE-2025-13462 | 2.0 | 2026-03-12 | The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE… |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (0)
No VuXML entries for this package.
Commits (15)
lang/linux-rl9-python3: Fix CPE informationf618faa2e1
lang/linux-rl9-python3: update 3.9.21-2.el9_6.2 => 3.9.23-2.el9131d98fde7
lang/linux-rl9-python3: upstream reroll (+) 3.9.21-2.el9_6.1 => 3.9.21-2.el9_6.2faabaf0e89
lang/linux-rl9-python3: chase upstream reroll (+)ea83588df1
linux-rl9: update to Rocky Linux 9.6 release (+) All affected */linux-rl9-* ports was updated to versions corresponding to Rocky Linux 9.6 release repository Special thanks to jbo@ for amd64 mini exp-run!4808bceb40
linux-rl9*: Stop installing build-id files - They complicate pkg-plist manipulations - They increase the package's size - They are used for debugging and it is unlikely that someone would debug binaries coming from Linux RPMscebd2ae6f1
lang/linux-rl9-python3: update to 3.9.21 Sponsored by: Future Crew, LLC6fab907c80
*/*: Update Rocky Linux 9 packages to 9.5 release (+) While here, hook up missed packages to resolve all 'not found' libraries Sponsored by: Future Crew, LLC433660ccf0
*/*: Introduce Rocky Linux 9 32-bit compat librariries (+) Finaly we can get Linux Steam utils works again! :) While here, pet reative paths Sponsored by: Future Crew, LLC7dbd23b9e8
lang/linux-rl9-python3: upstream reroll Sponsored by: Future Crew, LLC05a497ea72
*/*: update Rocky Linux packages to 9.4 release Sponsored by: Serenity Cybersecurity, LLCcc6b95484d
Linuxulator ports: Add aarch64 support for Rocky Linux 9 Sponsored by: Serenity Cybersecurity, LLC8c7209e0d9
Linuxulator ports: Update Rocky Linux to 9.3 and add more packages Sponsored by: Serenity Cybersecurity, LLC Co-authored-by: awoonya <mzhyneva@gmail.com>82dfb2f204
Linuxulator ports: More Rocky Linux 9 packages Co-authored-by: Gleb Popov <arrowd@FreeBSD.org> Sponsored by: Serenity Cybersecurity, LLCbcd8439dc8