maintainer-feedback requested: [Bug 299262] devel/py-setuptools: add patches to fix CVE-2022-40897, CVE-2024-6345, and CVE-2025-47273

In reply to: bugzilla-noreply_a_freebsd.org: "[Bug 299262] devel/py-setuptools: add patches to fix CVE-2022-40897, CVE-2024-6345, and CVE-2025-47273"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 09 Oct 2026 23:09:58 UTC

Bugzilla Automation <bugzilla@FreeBSD.org> has asked freebsd-python (Nobody)
<python@FreeBSD.org> for maintainer-feedback:
Bug 299262: devel/py-setuptools: add patches to fix CVE-2022-40897,
CVE-2024-6345, and CVE-2025-47273
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=299262



--- Description ---
This uses an AlmaLinux patch, and I consider it a working draft.
I'm aware of the discussion at
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298351 .
Whenever I'm building ports and run into “py31[123...]-setuptools-63.1.0_3 has
known vulnerabilities:”, I have to set “DISABLE_VULNERABILITIES=yes” and
rebuild—it's a hassle and feels wrong.
I would appreciate it if you could look into this.