—
PYSEC-2019-181
Quick fix
PYSEC-2019-181 — keyring: upgrade to the fixed version with the command below.
pip install --upgrade 'keyring>=0.10'Details
Python keyring lib before 0.10 created keyring files with world-readable permissions.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://security-tracker.debian.org/tracker/CVE-2012-5577[WEB]
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5577[REPORT]
- https://bitbucket.org/kang/python-keyring-lib/issue/67/set-go-rwx-on-keyring_passcfg[WEB]
- http://www.openwall.com/lists/oss-security/2012/11/27/3[WEB]
- https://bitbucket.org/kang/python-keyring-lib/commits/049cd181470f1ee6c540e1d64acf1def7b1de0c1[WEB]
- https://github.com/advisories/GHSA-p86x-652p-6385[ADVISORY]