linux/meta-openembedded.git - Mirror of git.openembedded.org/meta-openembedded

	Commit message (Collapse)	Author	Age	Files	Lines
*	python3-virtualenv: upgrade 20.35.4 -> 20.36.1	Wang Mingyu	2026-01-13	1	-28/+0
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Changelog: ============== - fix: resolve TOCTOU vulnerabilities in app_data and lock directory creation - fix: Prevent NameError when accessing _DISTUTILS_PATCH during file overwrite - Upgrade pip and fix 3.15 picking old wheel - fix: wrong path on migrated venv - test_too_many_open_files: assert on errno.EMFILE instead of strerror - fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 - fix: resolve EncodingWarning in tox upgrade environment - Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 - Add support for PEP 440 version specifiers in the --python flag. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
*	python3-virtualenv: set CVE_PRODUCT	Gyorgy Sarvari	2025-12-31	1	-0/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	There are relevant CVEs tracked under two different CPEs: python:virtualenv (the default in OE), and virtualenv:virtualenv (these were missed). See CVE db query: sqlite> select * from products where PRODUCT = 'virtualenv'; CVE-2011-4617\|python\|virtualenv\|\|\|1.4.9\|<= CVE-2011-4617\|python\|virtualenv\|0.8\|=\|\| CVE-2011-4617\|python\|virtualenv\|0.8.1\|=\|\| CVE-2011-4617\|python\|virtualenv\|0.8.2\|=\|\| CVE-2011-4617\|python\|virtualenv\|0.8.3\|=\|\| CVE-2011-4617\|python\|virtualenv\|0.8.4\|=\|\| CVE-2011-4617\|python\|virtualenv\|0.9\|=\|\| CVE-2011-4617\|python\|virtualenv\|0.9.1\|=\|\| CVE-2011-4617\|python\|virtualenv\|0.9.2\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.0\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.1\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.1.1\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.2\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.3\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.3.1\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.3.2\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.3.3\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.3.4\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.4\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.4.1\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.4.2\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.4.3\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.4.4\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.4.5\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.4.6\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.4.7\|=\|\| CVE-2011-4617\|python\|virtualenv\|1.4.8\|=\|\| CVE-2013-5123\|virtualenv\|virtualenv\|12.0.7\|=\|\| CVE-2024-53899\|virtualenv\|virtualenv\|\|\|20.26.6\|< Set the CVE_PRODUCT so both are matched. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
*	python3-virtualenv: upgrade 20.35.3 -> 20.35.4	Wang Mingyu	2025-11-06	1	-0/+26
	Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>