SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-filelock (SUSE-SU-2026:0220-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0220-1 advisory. - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitra...

OESA-2026-1239 python-filelock security update

This package contains a single module, which implements a platform independent file locking mechanism for Python. Security Fixes: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of th...

OESA-2026-1240 python-filelock security update

This package contains a single module, which implements a platform independent file locking mechanism for Python. Security Fixes: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of th...

OESA-2026-1238 python-filelock security update

This package contains a single module, which implements a platform independent file locking mechanism for Python. Security Fixes: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of th...

Security update for python-filelock

This update for python-filelock fixes the following issues: CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files bsc1255244. CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation bsc1256457. Patch Instructions: To install...

SUSE-SU-2026:0220-1 Security update for python-filelock

This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files bsc1255244. - CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation bsc1256457...

Security Bulletin: Vulnerability in filelock affects IBM Netezza Appliance

Summary The filelock package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-68146 Vulnerability Details CVEID:CVE-2025-68146 DESCRIPTION: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a...

CVE-2026-22701

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

31 (2.3.0), abaco (0.1.0) +853 more potentially affected by CVE-2026-22701 via filelock (>=3.0.4, <=3.20.2)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2026-22701 Source advisory: GHSA-QMGC-5H2G-MVRW...

31 (2.3.0), abaco (0.1.0) +853 more potentially affected by CVE-2026-22701 via filelock (>=3.0.4, <=3.20.2)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2026-22701 Source advisory: OSV:GHSA-QMGC-5H2G-MVRW...

EUVD-2026-1870

filelock Time-of-Check-Time-of-Use TOCTOU Symlink Vulnerability in SoftFileLock...

collabi (0.0.5), intelecy-chocolate (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-22701 via filelock (2.0.13)

filelock PYPI version 2.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - collabi 0.0.5 - intelecy-chocolate =0.1.0, =0.1.20, =0.1.23 Source cves: CVE-2026-22701 Source advisory: OSV:GHSA-QMGC-5H2G-MVRW...

SUSE CVE-2026-22701

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

OPENSUSE-SU-2026:10043-1 python311-filelock-3.20.3-1.1 on GA media

These are all security issues fixed in the python311-filelock-3.20.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-68146 affecting package python-filelock for versions less than 3.20.1-1

CVE-2025-68146 affecting package python-filelock for versions less than 3.20.1-1. An upgraded version of the package is available that resolves this issue...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via a race condition in the acquire method. An attacker can cause lock operations to fail or behave unexpectedly by creating a symlink at the lock file path between the permission check and file creation. Remediation...

31 (2.3.0), abaco (0.1.0) +853 more potentially affected by CVE-2026-22701 via filelock (>=3.0.4, <=3.20.2)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2026-22701 Source advisory: SNYK:PYTHON-FILELOCK-14912448...

AZL-74234 CVE-2026-22701 affecting package python-filelock for versions less than 3.20.3-1

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

AZL-79235 CVE-2026-22701 affecting package python-filelock 3.0.12-13

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

CVE-2026-22701

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...