mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-11-12 15:31:03 +00:00
Hetvi Thakar
021ed63fde
This patch applies the upstream fix as referenced in [2], using the commit shown in [1]. Preserve interpreter paths as literal data in POSIX console launchers for both the app-data and pip seeders, and update the pip launchers' RECORD hashes after rewriting them. Include the RECORD-writing follow-up from [3] so the new rewrite path replaces existing links and uses exclusive creation. The required write_file helper comes from the preceding CVE-2026-113721 fix [4]. Regenerate existing environments to repair their launchers. A later independent pip install or upgrade can replace the corrected launchers; this backport does not modify pip's vendored distlib. [1] https://github.com/pypa/virtualenv/commit/2519941bed33ee0d3ac99277f67913e439e476a9 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-113722 [3] https://github.com/pypa/virtualenv/commit/3598e201f6f044e389136b2347a8a919ac03c5f4 [4] https://github.com/pypa/virtualenv/commit/d25f28699eefb1fc34a251e5adf2b5de844c36cd Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories