Matthias Andree
955268b879
Add a -flto=full option, which can speed up the port build in terms of wallclock time at the expense of overall more CPU time. Issue a warning that test_ssl will fail from pre-test if DEBUG is enabled. Changelog: https://docs.python.org/release/3.14.4/whatsnew/changelog.html PR: 294324 Which contains these security fixes: pyexpat.c: Unbounded C recursion in conv_content_model causes crash Security: https://github.com/python/cpython/issues/145986 / CVE-2026-4224 Reject control characters in more places in http.cookies.Morsel Security: https://github.com/python/cpython/issues/145599 / CVE-2026-3644 SourcelessFileLoader does not use io.open_code() Security: https://github.com/python/cpython/issues/145506 / CVE-2026-2297 Disallow usage of control characters in status, headers and values for security in Lib/wsgiref/handlers.py Security: https://github.com/python/cpython/issues/144370 Reject leading dashes in webbrowser.open() Security: https://github.com/python/cpython/issues/143930 / 9fdad262-2e0f-11f1-88c7-00a098b42aeb / CVE-2026-4519 Excess Base64 data ignored after padding by default Security: https://github.com/python/cpython/issues/145264 / CVE-2026-3446 Additional security related PRs from upstream HTTP proxy via "CONNECT" tunneling doesn't sanitize CR/LF Obtained from: https://github.com/python/cpython/pull/148342 Security https://github.com/python/cpython/issues/146212 / CVE-2026-1502 configparser.RawConfigParser.{OPTCRE,OPTCRE_NV} regexes vulnerable to quadratic backtracking Obtained from: https://github.com/python/cpython/pull/148287 Security: https://github.com/python/cpython/issues/146333
8 lines
242 B
Makefile
8 lines
242 B
Makefile
# Mk/Uses/python.mk includes this file, don't remove it!
|
|
|
|
# Do not forget to
|
|
# 1. Update python documentation (lang/python-doc-*)
|
|
# Run "make -C lang/python-doc-html makesum"
|
|
# 2. Remove PORTREVISION in Makefile
|
|
PYTHON_DISTVERSION= 3.14.4
|