temporary directories

  1. CVE-2014-8991: Legacy pip DoS with predictable /tmp build dirs

    In 2014 the Python packaging tool pip was quietly found to contain a surprisingly low-tech, high-impact local denial‑of‑service (DoS) bug: pip versions 1.3 through 1.5.6 would create build directories in a predictable location under /tmp using a fixed prefix, allowing an unprivileged local user...