mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-11-12 15:31:03 +00:00
Hetvi Thakar
c25089f12e
Analysis: - The advisory [1] describes a deletion-error callback changing the permissions of a symlink target. - In 21.2.1, safe_delete() always passes ignore_errors=True to shutil.rmtree(), which disables the supplied error callback. This remains true after the existing security backports. - Upstream enabled that callback later in [2]. The chmod recovery path fixed by [3] is therefore unreachable in this recipe. Reference: [1] https://github.com/pypa/virtualenv/security/advisories/GHSA-43mp-35q3-x3fq [2] https://github.com/pypa/virtualenv/pull/3222 [3] https://github.com/pypa/virtualenv/commit/2bfdc0230d1b2685fedfcfe66c835b9a2ec7c440 Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories