File tree 2 files changed +3
-3
lines changed
Misc/NEWS.d/next/Security
2 files changed +3
-3
lines changed Original file line number Diff line number Diff line change 902
902
* As of 3.11.10, :func: `os.mkdir ` and :func: `os.makedirs ` on Windows
903
903
now support passing a *mode * value of ``0o700 `` to apply access
904
904
control to the new directory. This implicitly affects
905
- :func: `tempfile.mkdtemp ` and is a mitigation for :cve: ` 2024-4030 ` .
905
+ :func: `tempfile.mkdtemp ` and is a mitigation for CVE- 2024-4030.
906
906
Other values for *mode * continue to be ignored.
907
907
(Contributed by Steve Dower in :gh: `118486 `.)
908
908
@@ -1068,7 +1068,7 @@ tempfile
1068
1068
1069
1069
* As of 3.11.10 on Windows, the default mode ``0o700 `` used by
1070
1070
:func: `tempfile.mkdtemp ` now limits access to the new directory due to
1071
- changes to :func: `os.mkdir `. This is a mitigation for :cve: ` 2024-4030 ` .
1071
+ changes to :func: `os.mkdir `. This is a mitigation for CVE- 2024-4030.
1072
1072
(Contributed by Steve Dower in :gh: `118486 `.)
1073
1073
1074
1074
Original file line number Diff line number Diff line change 1
1
:func: `os.mkdir ` on Windows now accepts *mode * of ``0o700 `` to restrict
2
- the new directory to the current user. This fixes :cve: ` 2024-4030 `
2
+ the new directory to the current user. This fixes CVE- 2024-4030
3
3
affecting :func: `tempfile.mkdtemp ` in scenarios where the base temporary
4
4
directory is more permissive than the default.
You can’t perform that action at this time.
0 commit comments