← Packages
python-filelock
Platform independent file lock
- Current
- 3.29.0
- Candidate
- 4.2.10
- License
- Unlicense
RuntimeDeps
Advisory · 9
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale breakOSV
- Fixed events
- 4.2.1OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.104%FIRST
- Returned advisory
- GHSA-567q-5qvw-pf92OSV
- Aliases
- GHSA-567q-5qvw-pf92OSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:LOSV
- Summary
- filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock pathOSV
- Fixed events
- 4.2.1OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.22%FIRST
- Returned advisory
- GHSA-69hj-f68j-2879OSV
- Aliases
- GHSA-69hj-f68j-2879OSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:NOSV
- Summary
- filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACLOSV
- Fixed events
- 4.2.1OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.161%FIRST
- Returned advisory
- GHSA-8mx5-7m5m-r77gOSV
- Aliases
- GHSA-8mx5-7m5m-r77gOSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LOSV
- Summary
- filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its databaseOSV
- Fixed events
- 4.2.1OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.118%FIRST
- Returned advisory
- GHSA-9vhv-jxww-xfm5OSV
- Aliases
- GHSA-9vhv-jxww-xfm5OSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LOSV
- Summary
- filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeoutOSV
- Fixed events
- 4.2.1OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.218%FIRST
- Returned advisory
- GHSA-cwqr-hh33-gh44OSV
- Aliases
- GHSA-cwqr-hh33-gh44OSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV
- Summary
- filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holdersOSV
- Fixed events
- 4.2.1OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.132%FIRST
- Returned advisory
- GHSA-fq56-3cx3-fjxpOSV
- Aliases
- GHSA-fq56-3cx3-fjxpOSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:NOSV
- Summary
- filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable markerOSV
- Fixed events
- 4.2.1OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.14%FIRST
- Returned advisory
- GHSA-rfpc-qcw5-3pc4OSV
- Aliases
- GHSA-rfpc-qcw5-3pc4OSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:NOSV
- Summary
- filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own filesOSV
- Fixed events
- 4.2.1OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.19%FIRST
- Returned advisory
- GHSA-v4x8-3wr5-3wq8OSV
- Aliases
- GHSA-v4x8-3wr5-3wq8OSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HOSV
Description
filelock contains a single module implementing a platform independent file lock in Python, which provides a simple way of inter-process communication.
Changelog
PR · 6
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Checked | ||
Checked | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Checked Compared same-provider, same-project SPDX metadata for this version pair. | Last attempted | |
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Checked |