Solved Does anyone know who maintains Python Port?

K

kjpetrie

There's been a security advisory out on lang/python36 for several days now, which was discovered back in November, yet this port remains two versions out of date. Does anyone know who maintains it or why it hasn't been updated?

I realise updating something as basic as a language interpreter is not trivial because so much depends on it, but it seems a little slow to have something which has been insecure for several months as the latest version available.
 
make -C /usr/ports/lang/python36 maintainer

Just remove lang/python36. Everything was switched to Python 3.7 some time ago. So you shouldn't have anything depending on Python 3.6. I'm fairly sure a pkg autoremove is going to remove it too.
 
Thank you. I struggle a bit to keep up with package version changes which are not automatic and missed this one. I had to change the origin of security/py36-certbot to py37-... and then install the newer version. After that a pkg autoremove did the rest. Ironically ports-mgmt/poudriere had made the change and replaced the packages, but pkg on the server is evidently less intelligent than poudriere on the build machine!
 
kjpetrie said:
I had to change the origin of security/py36-certbot to py37-... and then install the newer version.
Click to expand...
A regular pkg upgrade would have done this automagically. At least it did on a lot of my machines. Never had much issues with this type of change. Just run pkg upgrade followed by pkg autoremove and things usually resolved itself.
 
Not in this case. pkg upgrade was something I tried repeatedly and I got the response
Your packages are up to date
Click to expand...
every time even after I manually changed the origin.

I had to do pkg install py37-certbot to make the upgrade happen, as per the example in man pkg().
 
You must log in or register to reply here.
Back
Top