{"id":"MGASA-2014-0216","summary":"Updated python3 packages fix security vulnerability","details":"It was reported that a patch added to Python 3.2 caused a race condition\nwhere a file created could be created with world read/write permissions\ninstead of the permissions dictated by the original umask of the process.\nThis could allow a local attacker that could win the race to view and edit\nfiles created by a program using this call. Note that prior versions of\nPython, including 2.x, do not include the vulnerable _get_masked_mode()\nfunction that is used by os.makedirs() when exist_ok is set to True\n(CVE-2014-2667).\n","modified":"2026-04-16T06:26:14.443223297Z","published":"2014-05-14T22:04:31Z","upstream":["CVE-2014-2667"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2014-0216.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=13305"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00007.html"}],"affected":[{"package":{"name":"python3","ecosystem":"Mageia:3","purl":"pkg:rpm/mageia/python3?arch=source&distro=mageia-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-4.8.mga3"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2014-0216.json"}},{"package":{"name":"python3","ecosystem":"Mageia:4","purl":"pkg:rpm/mageia/python3?arch=source&distro=mageia-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-13.3.mga4"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2014-0216.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}