This commit fixes high CVEs by overriding affected Python packages locally in the image. Packages From To ============= ====== ====== setuptools v57.4.0 v82.0.0 urllib3 v1.26.20 v2.6.3 certifi v2023.7.22 v2025.8.3 wheel v0.37.0 v0.38.1 mako v1.1.2 v1.2.2 virtualenv v20.7.2 v20.26.6 cryptography v43.0.3 v46.0.5 future v0.18.2 v0.18.3 jaraco.context v6.0.1 v6.1.0 TEST PLAN: PASS: successful build and deployment PASS: No extra critical/high severity vulnerabilities found in python packages. Story: 2011698 Task: 53921 Change-Id: I7e71f0ba5204b3ecdaeb8bf09b26ab7a27c9da4c Signed-off-by: Italo Lemos <Italo.doRegoLemos@windriver.com>
stx-upstream
StarlingX Upstream Packages
Description
Languages
Python
50.9%
Shell
41.4%
BitBake
7.2%
POV-Ray SDL
0.5%