[Python-modules-team] Bug#725847: python-pip: DoS by other users on the same system
donald at stufft.io
Sun Nov 23 03:15:53 UTC 2014
Just a FYI, I back ported this fix to 1.5.6 which should apply pretty easily to
the version of pip in testing and unstable. Essentially it will use a random
and securely created build directory in most every situation except the one
that relies on having a predictable build directory.
The patch is here: https://bpaste.net/show/05df2f100c93
I'm not sure what (if anything) I can do to help get this issue fixed other
than provide that patch.
PGP: 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA
More information about the Python-modules-team