net-mgmt/py-napalm-logs: Update to 0.11.0
0.9.0 fails on Python 3.12+: napalm_logs.base imports imp (removed
in 3.12) to load the Python device profiles, and it calls yaml.load()
without a Loader, which PyYAML 6 rejects, so no YAML profile loads.
0.11.0 fixes the YAML loading.
Also add some patches to fix the following issues:
* Replace the imp calls with importlib.
* napalm_logs/__init__.py imports pkg_resources to look up its
version; pkg_resources is deprecated and only available with
setuptools, which is not a run dependency. Use importlib.metadata.
* The authenticator process and the ClientAuth helper call
ssl.wrap_socket(), removed in Python 3.12, so the auth process
crashes on the first connection and clients cannot authenticate.
Use SSLContext with the same behaviour.
[12 lines not shown]
net-mgmt/py-napalm-logs: Update to 0.11.0
0.9.0 fails on Python 3.12+: napalm_logs.base imports imp (removed
in 3.12) to load the Python device profiles, and it calls yaml.load()
without a Loader, which PyYAML 6 rejects, so no YAML profile loads.
0.11.0 fixes the YAML loading.
Also add some patches to fix the following issues:
* Replace the imp calls with importlib.
* napalm_logs/__init__.py imports pkg_resources to look up its
version; pkg_resources is deprecated and only available with
setuptools, which is not a run dependency. Use importlib.metadata.
* The authenticator process and the ClientAuth helper call
ssl.wrap_socket(), removed in Python 3.12, so the auth process
crashes on the first connection and clients cannot authenticate.
Use SSLContext with the same behaviour.
[11 lines not shown]
www/freenginx: Security update to 1.30.2
One of the keys was left uninitialized when using automatic rotation of
TLS session ticket keys, which makes it possible to forge a session and
bypass client certificate verification.
Changes: https://freenginx.org/en/CHANGES-1.30
Security: 4784aba5-d6a9-11f1-8a93-a0369f6e85b8
Sponsored by: Netzkommune GmbH
(cherry picked from commit 7ac2e3d6e973bcef7bf45b72656a71e253cd9c75)
www/phpbb3: Security update to 3.3.19
Fixes an unauthenticated SMTP command injection through the contact
form, reflected and stored cross-site scripting, a missing CSRF check
when held private messages are released and several moderator permission
bypasses.
The same fixes were announced for 3.3.18, whose downloads did not carry
them.
Changelog:
https://github.com/phpbb/phpbb/blob/release-3.3.19/phpBB/docs/CHANGELOG.html
Security: 4784d4b8-d6a9-11f1-8a93-a0369f6e85b8
Sponsored by: Netzkommune GmbH
(cherry picked from commit 4d6d2c1680a007e107e49cc4fa9042781a677a61)
