BSD Ports

Vulnerable: version 3.14.7 is affected by 3 known vulnerabilities. See below.

lang/python314 3.14.7 NetBSD

Interpreted, interactive, object-oriented programming language

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
63ddeff762
License
python-software-foundation
Categories
lang, python
Package size
25678.8 KiB, 176592.0 KiB installed

Description

Python is an interpreted, interactive, object-oriented programming language that combines remarkable power with very clear syntax. For an introduction to programming in Python you are referred to the Python Tutorial. The Python Library Reference documents built-in and standard types, constants, functions and modules. Finally, the Python Reference Manual describes the syntax and semantics of the core language in (perhaps too) much detail.

Python's basic power can be extended with your own modules written in C or C++. On most systems such modules may be dynamically loaded. Python is also adaptable as an exten- sion language for existing applications. See the internal documentation for hints.

This package provides Python version 3.14.x.

In the other systems

SystemPortVersion
NetBSDlang/python3143.14.7
FreeBSDlang/python3143.14.8
MidnightBSDlang/python314
HardenedBSDlang/python3143.14.7
GhostBSDlang/python3143.14.7

Install

Binary package:

pkgin install python314

From pkgsrc:

cd /usr/pkgsrc/lang/python314 && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_643.14.7
NetBSD 10.1 aarch643.14.6
SmartOS / illumos x86_643.14.8
macOS 15 arm643.14.8

Dependencies

Run dependencies 7
Required by 1

Known vulnerabilities 3

Commit history 3

DateCommitCreditsLog message
63ddeff762 adam python314 py314-html-docs: updated to 3.14.9
Python 3.14.9 Security gh-159894: Bump the version of pip bundled in ensurepip to version 26.2.2. gh-159428: mimetypes no longer reads the files listed in mimetypes.knownfiles by default on Windows, and uses only the registry. gh-157265: In tarfile, when extracting a link falls back to extracting a member of the archive, skip the member when the filter function returns None when called with the extracted member’s name replaced with the link’s. gh-157953: Update bundled libexpat to version 2.9.0. …
1eee3d0332 adam python314 py314-html-docs: updated to 3.14.8
3.14.8 Security gh-158446: Fix a crash or incorrect output that could occur when formatting a float or complex with a precision close to the platform’s INT_MAX. PyOS_double_to_string() now raises ValueError for any precision of that magnitude, regardless of presentation type or value, as the format string parsers already did for precisions above INT_MAX. gh-156793: asyncio: loop.start_tls() and loop.create_connection() now validate the server_hostname argument if an ssl.SSLContext is passed with check_hostname set to True. gh-156793: ssl.SSLContext.wrap_bio() now validates its server_side, server_hostname and session arguments similar to ssl.SSLContext.wrap_socket(). …
046a1090f9 adam python314 py314-html-docs: updated to 3.14.7
Python 3.14.7 final Security gh-153030: Fixed quadratic complexity in incremental parsing of long unterminated constructs (such as tags or comments) in html.parser.HTMLParser, which could be exploited for a denial of service. gh-152674: The xml.etree.ElementTree.Element methods findall(), iterfind() and find() avoid quadratic behavior when using XPath index predicates ([1], [last()], [last()-N]) on XML documents with many same-tag siblings. gh-152216: Update bundled libexpat to version 2.8.2. gh-151987: The tarfile.TarFile.extract() method now applies the given filter when it extracts a link target from the archive as a fallback. gh-151981: In tarfile, seeking a stream now stops when end of the stream is reached. …