Re: [security patch] lang/python/2.7 : Fix CVE-2021-4189 and CVE-2022-0391

On 2022/02/26 13:37, wen heping wrote:
> Hi, ports@:
>
> Here is a security patch for python27, which fix two security issues,
> CVE-2021-4189 and CVE-2022-0391, copied from NetBSD and they
> sourced via Fedora.
> I am not sure which REVISION should be bumped so I did not update
> REVISION.
>
> wen

I prefer this..

Index: Makefile
===================================================================
RCS file: /cvs/ports/lang/python/2.7/Makefile,v
retrieving revision 1.73
diff -u -p -r1.73 Makefile
--- Makefile 23 Jan 2022 21:32:07 -0000 1.73
+++ Makefile 26 Feb 2022 13:41:10 -0000
@@ -9,7 +9,7 @@ FULL_VERSION = 2.7.18
SHARED_LIBS = python2.7 0.0
VERSION_SPEC = >=2.7,<2.8

-REVISION-main = 5
+REVISION-main = 6
REVISION-idle = 1
REVISION-tests = 1
REVISION-bsddb = 0
Index: pkg/MESSAGE-main
===================================================================
RCS file: pkg/MESSAGE-main
diff -N pkg/MESSAGE-main
--- /dev/null 1 Jan 1970 00:00:00 -0000
+++ pkg/MESSAGE-main 26 Feb 2022 13:41:10 -0000
@@ -0,0 +1 @@
+*** Python 2.7 is end-of-life and no longer receives security updates.