Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-2667
3.3
LOWCVSS v2
Published
November 16, 2014
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true and multiple threads are used, might allow local users to bypass intended file permissions by leveraging a separate application vulnerability before the umask has been set to the expected value.
Python
ChocolateyPython is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance costs.
## Notes
- This package depends on the the latest major version of python package.
- This package do not support package parameters, please install the package [python315](https://chocolatey.org/packages/python315) directly when using package parameters.
- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**
ChocolateyPython is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance costs.
## Notes
- This package depends on the the latest major version of python package.
- This package do not support package parameters, please install the package [python315](https://chocolatey.org/packages/python315) directly when using package parameters.
- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**= 3.3.2, = 3.2.2, = 3.2.5, = 3.3.6, = 3.4.0, = 3.2.1, = 3.2.0, = 3.3.1, = 3.3.4, = 3.2.6, = 3.3.0, = 3.4.1, = 3.4.2, = 3.2.4, = 3.3.5, = 3.2.3, = 3.3.3NVD
python
NPMInteract with a long-running python child process
NPMInteract with a long-running python child process