ITADN

Port refuse to build because of python311-3.11.15_2 has known vulnerabilities

#267ClosedYuan-Quan 创建于 2026-05-12
Y
Yuan-Quancommented
when building port's dependency bash: ``` ===> python311-3.11.15_2 has known vulnerabilities: python311-3.11.15_2 is vulnerable: Python -- imaplib module, when passed a user-controlled command, can have additional commands injected using newlines CVE: CVE-2025-15366 WWW: https://vuxml.FreeBSD.org/freebsd/0be929a5-2e0f-11f1-88c7-00a098b42aeb.html Python -- poplib module, when passed a user-controlled command, can have additional commands injected using newlines CVE: CVE-2025-15367 WWW: https://vuxml.FreeBSD.org/freebsd/6d3488ae-2e0f-11f1-88c7-00a098b42aeb.html Python -- configparser vulnerable to excessive CPU use WWW: https://vuxml.FreeBSD.org/freebsd/5ec4dcf6-3588-11f1-b51c-6dd25bec137b.html Python -- HTTP proxy CONNECT tunnel does not sanitize CR/LF CVE: CVE-2026-1502 WWW: https://vuxml.FreeBSD.org/freebsd/30bda1c3-369b-11f1-b51c-6dd25bec137b.html Python -- use-after-free vulnerability in decompressors under memory pressure CVE: CVE-2026-6100 WWW: https://vuxml.FreeBSD.org/freebsd/b8e9f33c-375d-11f1-a119-e36228bfe7d4.html python -- more webbrowser.open() command injection vulnerabilities CVE: CVE-2026-4786 WWW: https://vuxml.FreeBSD.org/freebsd/cf75f572-378a-11f1-a119-e36228bfe7d4.html 6 problem(s) in 1 package(s) found. => Please update your ports tree and try again. => Note: Vulnerable ports are marked as such even if there is no update available. => If you wish to ignore this vulnerability rebuild with 'make DISABLE_VULNERABILITIES=yes' *** Error code 1 Stop. make[9]: stopped in /src/git/ports/lang/python311 *** Error code 1 Stop. make[8]: stopped in /src/git/ports/devel/gettext-tools *** Error code 1 Stop. make[7]: stopped in /src/git/ports/devel/p5-Locale-gettext *** Error code 1 Stop. make[6]: stopped in /src/git/ports/misc/help2man *** Error code 1 Stop. make[5]: stopped in /src/git/ports/print/texinfo *** Error code 1 Stop. make[4]: stopped in /src/git/ports/devel/m4 *** Error code 1 Stop. make[3]: stopped in /src/git/ports/devel/bison *** Error code 1 Stop. make[2]: stopped in /src/git/ports/shells/bash *** Error code 1 Stop. make[1]: stopped in /src/git/ports/lang/go125 *** Error code 1 Stop. make: stopped in /src/git/ports/lang/go ```
关闭于 2026-05-12 1 条评论