Vulnerability	Vulnerable Version
H Incorrect Default Permissions Affected versions of this package are vulnerable to Incorrect Default Permissions. Keyring files are created with world-readable permissions. How to fix Incorrect Default Permissions? Upgrade `keyring` to version 0.10 or higher.	[,0.10)
M Insecure Permissions `keyring` is a Store and access your passwords safely. Affected versions of this package are vulnerable to Insecure permissions due to an incomplete fix for CVE-2012-5577. It would create its configuration file world-readable which was fixed in CVE-2012-5577, however it only changed the permissions of an existing configuration file, which is incomplete. How to fix Insecure Permissions? Upgrade to version `0.10` or greater.	[0.9.2,0.10)

Incorrect Default Permissions

Affected versions of this package are vulnerable to Incorrect Default Permissions. Keyring files are created with world-readable permissions.

How to fix Incorrect Default Permissions?

Upgrade keyring to version 0.10 or higher.

[,0.10)

Insecure Permissions

keyring is a Store and access your passwords safely. Affected versions of this package are vulnerable to Insecure permissions due to an incomplete fix for CVE-2012-5577.

It would create its configuration file world-readable which was fixed in CVE-2012-5577, however it only changed the permissions of an existing configuration file, which is incomplete.

How to fix Insecure Permissions?

Upgrade to version 0.10 or greater.

[0.9.2,0.10)

Go back to all versions of this package