mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-11-13 03:37:15 +00:00
Yogita Urade
ce6bcd3337
Analysis: - The vulnerable code is WindowsViewer.get_command() constructing an unescaped cmd.exe command from a file path. [1] - Linux uses UnixViewer, which quotes the path, so this Windows command path is not used by the target recipe. [1] - Hence marking this CVE not applicable for the Linux target. [1] https://github.com/python-pillow/Pillow/security/advisories/GHSA-4x4j-2g7c-83w6 Signed-off-by: Yogita Urade <yurade@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories