mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-11-12 15:31:03 +00:00
Hetvi Thakar
be26025948
This patch applies the upstream fix as referenced in [2], using the commit shown in [1]. Always copy seed packages from temporary app-data, including when environment or configuration values enable symlinks. This keeps the environment usable after the temporary cache is removed. Although NVD lists releases from 21.14.8, the project advisory [3] traces the incomplete guard to 20.0.6. The same unguarded constructor is present in 21.2.1, where the upstream regression tests reproduce dangling pip links after temporary-cache cleanup. [1] https://github.com/pypa/virtualenv/commit/b81995c3feab9e1edb453c75ffc6616e1a77335e [2] https://nvd.nist.gov/vuln/detail/CVE-2026-113713 [3] https://github.com/pypa/virtualenv/security/advisories/GHSA-4f8h-vr72-p32c Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories