Commitd86b494

authored

Update docs forCVE-2024-4030 reference

1 parent632682c commitd86b494Copy full SHA for d86b494

File tree

+18

-0

lines changed

+18

-0

lines changed

Lines changed: 14 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -847,6 +847,12 @@ os`
`847`	`847`	:c:func:`!posix_spawn_file_actions_addclosefrom_np`.
`848`	`848`	(Contributed by Jakub Kulik in:gh:`113117`.)
`849`	`849`
	`850`	+*:func:`os.mkdir` and:func:`os.makedirs` on Windows now support passing a
	`851`	+ mode value of ``0o700`` to apply access control to the new directory. This
	`852`	+ implicitly affects:func:`tempfile.mkdtemp` and is a mitigation for
	`853`	+:cve:`2024-4030`. Other values for mode continue to be ignored.
	`854`	+ (Contributed by Steve Dower in:gh:`118486`.)
	`855`	`+`
`850`	`856`	`os.path`
`851`	`857`	`-------`
`852`	`858`
`@@ -989,6 +995,14 @@ sys`
`989`	`995`	`This function is not guaranteed to exist in all implementations of Python.`
`990`	`996`	(Contributed by Serhiy Storchaka in:gh:`78573`.)
`991`	`997`
	`998`	`+tempfile`
	`999`	`+--------`
	`1000`	`+`
	`1001`	+* On Windows, the default mode ``0o700`` used by:func:`tempfile.mkdtemp` now
	`1002`	+ limits access to the new directory due to changes to:func:`os.mkdir`. This
	`1003`	+ is a mitigation for:cve:`2024-4030`.
	`1004`	+ (Contributed by Steve Dower in:gh:`118486`.)
	`1005`	`+`
`992`	`1006`	`time`
`993`	`1007`	`----`
`994`	`1008`

Lines changed: 4 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,4 @@`
	`1`	+:func:`os.mkdir` on Windows now accepts mode of ``0o700`` to restrict
	`2`	+the new directory to the current user. This fixes:cve:`2024-4030`
	`3`	+affecting:func:`tempfile.mkdtemp` in scenarios where the base temporary
	`4`	`+directory is more permissive than the default.`

Comments

(0)