Every CVE Search/ Get API key

CVE-2011-4944

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them...

1.9 LowFix available

CVE-2011-4944 is a low vulnerability (CVSS 1.9) in Python, published August 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in python2.7 2.7.3~rc2-2.

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

Exploit likelihood

0.43%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 1.9

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

Record
CVE-2011-4944
CVSS 2.0
1.9 LowAV:L/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

Record
CVE-2011-4944
Updated
2026-11-02
EUVDEUVD-2011-4853 No score

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

Record
EUVD-2011-4853
Updated
2026-11-03
GitHub AdvisoriesGHSA-2j46-98gf-6xf6 No score

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them...

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

Record
GHSA-2j46-98gf-6xf6
Updated
2026-11-02
OSV No score

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

Record
CVE-2011-4944
Updated
2026-11-02
OSVDEBIAN-CVE-2011-4944 No score

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

Record
DEBIAN-CVE-2011-4944
Updated
2026-11-02
Show 18 moreShow less
OSVopenSUSE-SU-2020:0086-1 No score

Security update for python3

This update for python3 to version 3.6.10 fixes the following issues:

  • CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).
  • CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).
  • CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:0086-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10426-1 No score

libpython3_5m1_0-3.5.1-3.6 on GA media

These are all security issues fixed in the libpython3_5m1_0-3.5.1-3.6 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10426-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10536-1 No score

libpython2_7-1_0-2.7.12-1.4 on GA media

These are all security issues fixed in the libpython2_7-1_0-2.7.12-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10536-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11202-1 No score

python-2.7.18-8.1 on GA media

These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11202-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11283-1 No score

python310-3.10.0rc1-4.2 on GA media

These are all security issues fixed in the python310-3.10.0rc1-4.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11283-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11284-1 No score

python36-3.6.15-1.1 on GA media

These are all security issues fixed in the python36-3.6.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11284-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11285-1 No score

python38-3.8.12-1.2 on GA media

These are all security issues fixed in the python38-3.8.12-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11285-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11286-1 No score

python39-3.9.7-2.1 on GA media

These are all security issues fixed in the python39-3.9.7-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11286-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12089-1 No score

python311-3.11.0b1-1.1 on GA media

These are all security issues fixed in the python311-3.11.0b1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12089-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12910-1 No score

python312-3.12.0a7-1.1 on GA media

These are all security issues fixed in the python312-3.12.0a7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12910-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14109-1 No score

python313-3.13.0~b3-1.1 on GA media

These are all security issues fixed in the python313-3.13.0~b3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14109-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14434-1 No score

python314-3.14.0~a1-1.1 on GA media

These are all security issues fixed in the python314-3.14.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14434-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15713-1 No score

python315-3.15.0~a1-1.1 on GA media

These are all security issues fixed in the python315-3.15.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15713-1
Updated
2026-11-02
OSVPSF-2012-2 No score

pypirc created insecurely

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

Record
PSF-2012-2
Updated
2026-11-02
OSVSUSE-FU-2022:0444-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

  • Introduce venv-salt-minion.
  • Track already fixed issues.
Record
SUSE-FU-2022:0444-1
Updated
2026-11-02
OSVSUSE-FU-2022:0445-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

  • Introduce venv-salt-minion.
  • Mention fixed issues provided with the bundle.
Record
SUSE-FU-2022:0445-1
Updated
2026-11-02
OSVSUSE-SU-2020:0114-1 No score

Security update for python3

This update for python3 to version 3.6.10 fixes the following issues:

  • CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).
  • CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).
  • CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).
Record
SUSE-SU-2020:0114-1
Updated
2026-11-02
OSVSUSE-SU-2020:0234-1 No score

Security update for python

This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Record
SUSE-SU-2020:0234-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python2.7
Debian:11
 before 2.7.3~rc2-2
2.7.3~rc2-2
python2.6
Debian:6.0
 before 2.6.6-8+deb6u1, plus listed versions
2.6.6-8
2.6.6-8+deb6u1
python
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-libs
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
tkinter
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-devel
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-test
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-tools
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
Show 61 moreShow less
Affected packages
PackageAffectedFixed
python-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-libs
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-test
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-tools
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
tkinter
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-devel
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-libs
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
tkinter
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-test
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-tools
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-libs
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
tkinter
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-test
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-tools
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python-libs
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python-tools
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
tkinter
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python-devel
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python-libs
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python-tools
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
tkinter
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-46.el5_8.2
0:2.4.3-46.el5_8.2
python3
SUSE:Linux Enterprise Module for Basesystem 15
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Basesystem 15
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Development Tools 15
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Development Tools 15 SP1
 before 3.6.10-3.42.2
3.6.10-3.42.2
python
SUSE:Linux Enterprise Module for Basesystem 15
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15
 before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Desktop Applications 15
 before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
 before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Python 2 15 SP1
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Python 2 15 SP1
 before 2.7.17-7.32.1
2.7.17-7.32.1
python3
openSUSE:Leap 15.1
 before 3.6.10-lp151.6.7.1
3.6.10-lp151.6.7.1
python3-base
openSUSE:Leap 15.1
 before 3.6.10-lp151.6.7.1
3.6.10-lp151.6.7.1
python-base
openSUSE:Tumbleweed
 before 2.7.12-1.4
2.7.12-1.4
python
openSUSE:Tumbleweed
 before 2.7.18-8.1
2.7.18-8.1
python310
openSUSE:Tumbleweed
 before 3.10.0rc1-4.2
3.10.0rc1-4.2
python36
openSUSE:Tumbleweed
 before 3.6.15-1.1
3.6.15-1.1
python38
openSUSE:Tumbleweed
 before 3.8.12-1.2
3.8.12-1.2
python39
openSUSE:Tumbleweed
 before 3.9.7-2.1
3.9.7-2.1
python311
openSUSE:Tumbleweed
 before 3.11.0b1-1.1
3.11.0b1-1.1
python312
openSUSE:Tumbleweed
 before 3.12.0a7-1.1
3.12.0a7-1.1
python313
openSUSE:Tumbleweed
 before 3.13.0~b3-1.1
3.13.0~b3-1.1
python314
openSUSE:Tumbleweed
 before 3.14.0~a1-1.1
3.14.0~a1-1.1
python315
openSUSE:Tumbleweed
 before 3.15.0~a1-1.1
3.15.0~a1-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 656 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open