HomeFreeBSD

devel/py-configobj: Fix security issue CVE-2023-26112

Description

devel/py-configobj: Fix security issue CVE-2023-26112

  • Add a patch to fix Regular Expression Denial of Service. It is an unofficial patch [1], but it has already been applied by other projects such as Debian or Fedora [2].
  • Bump PORTREVISION

Reference: https://github.com/DiffSK/configobj/pull/236 [1]
Reference: https://salsa.debian.org/python-team/packages/configobj/-/blob/master/debian/patches/CVE-2023-26112?ref_type=heads [2]
Reference: https://bodhi.fedoraproject.org/updates/FEDORA-2023-27b41bb133 [2]

Security: CVE-2023-26112

Details

Provenance
nivitAuthored on Aug 29 2024, 8:37 AM
Parents
R11:889c6b737f7e: math/py-pdal: Update to 3.4.5
Branches
Unknown
Tags
Unknown