lang/python313: fix blake2s_impl regen mismatch The only difference between "stock" and regenerated blake2s_impl.c is where a variable is declared in py_blake2s_new_impl(). Patch the stock file to the regenerated version so the regeneration script does not get called. Reported by: fluffy, jan[at]glaubitz[dot]org PR: 274671e0cbe08148
Port details
lang/python313t3.13.16
Interpreted object-oriented programming language
- Maintainer
- python@FreeBSD.org
- Packages
- python313t 3.13.16
- Upstream
- up to date
- CPE
python:pythonfrom the port- WWW
- https://www.python.org/
- Links
- cgit · VuXML
Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE
| CVE-2026-3087 | 6.0 | 2026-04-27 | If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target di… |
VuXML only (1) · listed, port not fixed yet
Fixed (7)
Show 7 fixed
VuXML entries whose affected range this version has left.
python -- more webbrowser.open() command injection vulnerabilitiesentered 2026-04-13
Python -- HTTP proxy CONNECT tunnel does not sanitize CR/LFentered 2026-04-12
Python -- configparser vulnerable to excessive CPU useentered 2026-04-12
no CVE referenced
Python -- The webbrowser.open() API allows leading dashesentered 2026-04-01
python -- several security vulnerabilitiesentered 2026-02-04
Commits (2)
lang/python313: add What's new: https://docs.python.org/3/whatsnew/3.13.html Most notably, introduce free-threaded mode. As this mode changes the ABI, the entire distribution lives in a separate hierarchy, and thus a new child port (lang/python313t) and FLAVOR (py313t) are introduced. Co-authored-by: vishwin PR: 274671 Differential Revision: https://reviews.freebsd.org/D49680edcf1d7d57