Port refuse to build because of python311-3.11.15_2 has known vulnerabilities
when building port's dependency bash:
```
===> python311-3.11.15_2 has known vulnerabilities:
python311-3.11.15_2 is vulnerable:
Python -- imaplib module, when passed a user-controlled command, can have additional commands injected using newlines
CVE: CVE-2025-15366
WWW: https://vuxml.FreeBSD.org/freebsd/0be929a5-2e0f-11f1-88c7-00a098b42aeb.html
Python -- poplib module, when passed a user-controlled command, can have additional commands injected using newlines
CVE: CVE-2025-15367
WWW: https://vuxml.FreeBSD.org/freebsd/6d3488ae-2e0f-11f1-88c7-00a098b42aeb.html
Python -- configparser vulnerable to excessive CPU use
WWW: https://vuxml.FreeBSD.org/freebsd/5ec4dcf6-3588-11f1-b51c-6dd25bec137b.html
Python -- HTTP proxy CONNECT tunnel does not sanitize CR/LF
CVE: CVE-2026-1502
WWW: https://vuxml.FreeBSD.org/freebsd/30bda1c3-369b-11f1-b51c-6dd25bec137b.html
Python -- use-after-free vulnerability in decompressors under memory pressure
CVE: CVE-2026-6100
WWW: https://vuxml.FreeBSD.org/freebsd/b8e9f33c-375d-11f1-a119-e36228bfe7d4.html
python -- more webbrowser.open() command injection vulnerabilities
CVE: CVE-2026-4786
WWW: https://vuxml.FreeBSD.org/freebsd/cf75f572-378a-11f1-a119-e36228bfe7d4.html
6 problem(s) in 1 package(s) found.
=> Please update your ports tree and try again.
=> Note: Vulnerable ports are marked as such even if there is no update available.
=> If you wish to ignore this vulnerability rebuild with 'make DISABLE_VULNERABILITIES=yes'
*** Error code 1
Stop.
make[9]: stopped in /src/git/ports/lang/python311
*** Error code 1
Stop.
make[8]: stopped in /src/git/ports/devel/gettext-tools
*** Error code 1
Stop.
make[7]: stopped in /src/git/ports/devel/p5-Locale-gettext
*** Error code 1
Stop.
make[6]: stopped in /src/git/ports/misc/help2man
*** Error code 1
Stop.
make[5]: stopped in /src/git/ports/print/texinfo
*** Error code 1
Stop.
make[4]: stopped in /src/git/ports/devel/m4
*** Error code 1
Stop.
make[3]: stopped in /src/git/ports/devel/bison
*** Error code 1
Stop.
make[2]: stopped in /src/git/ports/shells/bash
*** Error code 1
Stop.
make[1]: stopped in /src/git/ports/lang/go125
*** Error code 1
Stop.
make: stopped in /src/git/ports/lang/go
```
关闭于 2026-05-12 1 条评论