- Add CVE-2024-9287-venv_path_unquoted.patch to properly quote

path names provided when creating a virtual environment
  (bsc#1232241, CVE-2024-9287)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python311?expand=0&rev=147
This commit is contained in:
2024-11-01 16:39:46 +00:00
committed by Git OBS Bridge
commit f67c1ef5a0
38 changed files with 8885 additions and 0 deletions

View File

@@ -0,0 +1,13 @@
Index: Python-3.11.8/Lib/site.py
===================================================================
--- Python-3.11.8.orig/Lib/site.py
+++ Python-3.11.8/Lib/site.py
@@ -77,7 +77,7 @@ import io
import stat
# Prefixes for site-packages; add additional prefixes like /usr/local here
-PREFIXES = [sys.prefix, sys.exec_prefix]
+PREFIXES = [sys.prefix, sys.exec_prefix, '/usr/local']
# Enable per user site-packages directory
# set it to False to disable the feature or True to force the feature
ENABLE_USER_SITE = None