Question 1

Is there a bug in keyring?

Accepted Answer

Incorrect Default Permissions in keyring Python keyring lib before 0.10 created keyring files with world-readable permissions. Fixed in keyring 0.10.

Question 2

Is there a bug in keyring?

Accepted Answer

Python Keyring does not securely initialize encryption cipher Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for `CryptedFileKeyring` files, which makes it easier for local users to obtain passwords via a brute-force attack. Fixed in keyring 0.9.2.

Question 3

Is there a bug in keyring?

Accepted Answer

Incorrect Default Permissions in keyring Python keyring has insecure permissions on new databases, allowing world-readable files to be created. Fixed in keyring 0.10.

Question 4

Is there a bug in keyring?

Accepted Answer

PYSEC-2019-182: advisory Python keyring has insecure permissions on new databases allowing world-readable files to be created Fixed in keyring 0.10.1.

Question 5

Is there a bug in keyring?

Accepted Answer

PYSEC-2019-181: advisory Python keyring lib before 0.10 created keyring files with world-readable permissions. Fixed in keyring 0.10.

Question 6

Is there a bug in keyring?

Accepted Answer

PYSEC-2012-8: advisory Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack. Fixed in keyring 0.9.2.

Severity	Affected	Fixed in	Title	Status	Source
high	any	0.10	Incorrect Default Permissions in keyring Python keyring lib before 0.10 created keyring files with world-readable permissions.	fixed	osv:GHSA-p86x-652p-6385
high	any	0.9.2	Python Keyring does not securely initialize encryption cipher Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for `CryptedFileKeyring` files, which makes it easier for local users to obtain passwords via a brute-force attack.	fixed	osv:GHSA-p3h7-3c45-qj4v
high	any	0.10	Incorrect Default Permissions in keyring Python keyring has insecure permissions on new databases, allowing world-readable files to be created.	fixed	osv:GHSA-8867-vpm3-g98g
medium	any	0.10.1	PYSEC-2019-182: advisory Python keyring has insecure permissions on new databases allowing world-readable files to be created	fixed	osv:PYSEC-2019-182
medium	any	0.10	PYSEC-2019-181: advisory Python keyring lib before 0.10 created keyring files with world-readable permissions.	fixed	osv:PYSEC-2019-181
medium	any	0.9.2	PYSEC-2012-8: advisory Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.	fixed	osv:PYSEC-2012-8

keyring known bugs