python-installer: bump to 1.0.1
authorAlexandru Ardelean <redacted>
Fri, 15 May 2026 13:33:46 +0000 (16:33 +0300)
committerAlexandru Ardelean <redacted>
Sat, 16 May 2026 07:22:16 +0000 (10:22 +0300)
commitdc83108af4f09474eef54c7df4633c9714184dd7
tree09b19e04e7717d443cad9164870f3203c945705a
parent22cf551ffd58daf4bddfb5c4c046dfca9ae9a217
python-installer: bump to 1.0.1

1.0.1 fixes a false-positive path-traversal check in destinations.py:
the 1.0.0 code used Path.resolve() to validate that each installed file
stays within the --destdir, but Path.resolve() follows symlinks.
OpenWrt's staging dir and toolchain directories contain many symlinks,
so resolved paths could escape the destdir comparison and trigger:

  ValueError: Attempting to write <file> outside of the target directory

1.0.1 replaces Path.resolve() with os.path.abspath(), which normalises
the path without following symlinks, eliminating the false positive.

Signed-off-by: Alexandru Ardelean <redacted>
lang/python/python-installer/Makefile
git clone https://git.99rst.org/PROJECT