Upgrade to release 21.14.13:
- Stop bash running commands from --prompt or an environment name
containing $(...), backticks or a backslash after shopt -s
promptvars, set -o posix, or in a child shell that inherits an
exported PS1 (GHSA-cx6f-vjhg-g3cc); reported by rozzkml. zsh now
draws the prompt from psvar[9], which is never parsed as shell
syntax.
Write the .venv redirect and the wheel RECORD with exclusive create, so
a link planted after the existence check cannot redirect the write. On
POSIX, a read-only .venv redirect that points at a virtualenv is
replaced.
License-Update: Copyright years updated
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
