Description
os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python-py | No fix yet | — |
Advisories 1
- DSA-159 python - insecure temporary files Debian Security (DSA / DLA) · Mar 9, 2026
References
- MDKSA-2002:082 vendor-advisory
- CLA-2002:527 vendor-advisory
- RHSA-2003:048 vendor-advisory
- 20030123 [OpenPKG-SA-2003.006] OpenPKG Security Advisory (python) mailing-list
- RHSA-2002:202 vendor-advisory
- DSA-159 vendor-advisory
- 5581 vdb-entry
- http://mail.python.org/pipermail/python-dev/2002-August/027229.html
- python-execvpe-tmpfile-symlink(10009) vdb-entry