diff options
| author | Patrick Steinhardt <ps@pks.im> | 2025-06-27 12:58:27 +0200 |
|---|---|---|
| committer | Patrick Steinhardt <ps@pks.im> | 2025-06-27 14:34:41 +0200 |
| commit | d5030747200b11fd5e882dec5f4e05cf61228de8 (patch) | |
| tree | 2f17543eae569b37f7f0c43d13e662f8214a5f2f /pkgs/development/python-modules/termplotlib/gnuplot-subprocess.patch | |
| parent | af34e394ef1808ed488f871e67e15684b8b2b8ff (diff) | |
kodiPackages.sendtokodi: fix PYTHON_PATH conflict with Kodi and yt-dlp
The "sendtokodi" addon bundles its own versions of "youtube-dl" and
"yt-dlp". This causes two issues:
- The "youtube-dl" addon is unmaintained and suspect to known
vulnerabilities.
- Both of these dependencies also exist as packaged versions, so the
vendoring causes duplications.
The first issue is being addressed by patching out support for
"youtube-dl", which in any case is only really needed for supporting
Python 2. The second issue is being addressed by removing the bundled
version of "yt-dlp" and instead injecting our packaged version of this
dependency via `PYTHON_PATH`.
Using `PYTHON_PATH` creates some new problems though, because Kodi
packages a bunch of Python libraries like "requests" as addons. The
consequence is that we may have a conflict in our PYTHON_PATH, where
dependencies may be provided both by such Kodi addons and by transitive
dependencies of "yt-dlp".
One obvious solution would be to stop replacing the bundled version of
"yt-dlp", but that would reintroduce the second issue explained further
up.
Instead, fix the issue by replacing the bundled version of "yt-dlp" with
the contents of the packaged version thereof. This allows us to drop the
PYTHON_PATH workaround and thus resolves the conflicts.
Reported-by: Aaron Andersen <aaron@fosslib.net>
Diffstat (limited to 'pkgs/development/python-modules/termplotlib/gnuplot-subprocess.patch')
0 files changed, 0 insertions, 0 deletions
