Vulnerability · Published Jul 15, 2024 · Assigned by @huntr_ai
CVE-2024-6345Remote Code Execution in pypa/setuptools
High 8.8
In plain English
A high-severity code injection in pypa/setuptools from pypa. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.0)8.8High
Exploit odds (30 days)1.9%top 19.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | fence-agents-aliyun | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-aliyun | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-all | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-all | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-amt-ws | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-amt-ws | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-apc | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-apc | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-apc-snmp | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-apc-snmp | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-aws | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-aws | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-azure-arm | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-azure-arm | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-bladecenter | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-bladecenter | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-brocade | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-brocade | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-cisco-mds | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-cisco-mds | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-cisco-ucs | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-cisco-ucs | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-common | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-common | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-compute | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-compute | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-drac5 | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-drac5 | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-eaton-snmp | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-eaton-snmp | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-emerson | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-emerson | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-eps | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-eps | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-gce | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-gce | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-heuristics-ping | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-heuristics-ping | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-hpblade | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-hpblade | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-ibm-powervs | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-ibm-powervs | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-ibm-vpc | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-ibm-vpc | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-ibmblade | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-ibmblade | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-ifmib | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-ifmib | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-ilo-moonshot | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-ilo-moonshot | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-ilo-mp | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-ilo-mp | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-ilo-ssh | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-ilo-ssh | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-ilo2 | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-ilo2 | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-intelmodular | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-intelmodular | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-ipdu | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-ipdu | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-ipmilan | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-ipmilan | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-kdump | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-kdump | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-kubevirt | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-kubevirt | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-lpar | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-lpar | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-mpath | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-mpath | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-openstack | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-openstack | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-redfish | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-redfish | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-rhevm | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-rhevm | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-rsa | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-rsa | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-rsb | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-rsb | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-sbd | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-sbd | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-scsi | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-scsi | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-virsh | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-virsh | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-vmware-rest | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-vmware-rest | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-vmware-soap | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-vmware-soap | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-wti | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-wti | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | fence-agents-zvm | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux:9 | fence-agents-zvm | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:9 | fence-virt | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:9 | fence-virtd | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:9 | fence-virtd-cpg | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:9 | fence-virtd-libvirt | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:9 | fence-virtd-multicast | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:9 | fence-virtd-serial | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:9 | fence-virtd-tcp | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:9 | ha-cloud-support | 4.10.0-62.el9_4.5 | ALSA-2024:6726 |
| AlmaLinux:8 | platform-python-setuptools | 39.2.0-8.el8_10 | ALSA-2024:5530 |
| AlmaLinux:8 | python3-setuptools | 39.2.0-8.el8_10 | ALSA-2024:5530 |
| AlmaLinux:9 | python3-setuptools | 53.0.0-12.el9_4.1 | ALSA-2024:5534 |
| AlmaLinux:8 | python3-setuptools-wheel | 39.2.0-8.el8_10 | ALSA-2024:5530 |
| AlmaLinux:9 | python3-setuptools-wheel | 53.0.0-12.el9_4.1 | ALSA-2024:5534 |
| AlmaLinux:8 | python3.11-setuptools | 65.5.1-3.el8_10 | ALSA-2024:5532 |
| AlmaLinux:9 | python3.11-setuptools | 65.5.1-2.el9_4.1 | ALSA-2024:5279 |
| AlmaLinux:8 | python3.11-setuptools-wheel | 65.5.1-3.el8_10 | ALSA-2024:5532 |
| AlmaLinux:9 | python3.11-setuptools-wheel | 65.5.1-2.el9_4.1 | ALSA-2024:5279 |
| AlmaLinux:8 | python3.12-setuptools | 68.2.2-4.el8_10 | ALSA-2024:5531 |
| AlmaLinux:9 | python3.12-setuptools | 68.2.2-3.el9_4.1 | ALSA-2024:5533 |
| AlmaLinux:8 | python3.12-setuptools-wheel | 68.2.2-4.el8_10 | ALSA-2024:5531 |
| AlmaLinux:9 | python3.12-setuptools-wheel | 68.2.2-3.el9_4.1 | ALSA-2024:5533 |
| AlmaLinux:8 | python39 | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-Cython | 0.29.21-5.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-Cython | 0.29.21-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-PyMySQL | 0.10.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-attrs | 20.3.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-cffi | 1.14.3-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-cffi | 1.14.3-2.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-chardet | 3.0.4-19.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-cryptography | 3.3.1-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-debug | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-devel | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-idle | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-idna | 2.10-4.module_el8.10.0+3849+a48d89aa | ALSA-2024:5962 |
| AlmaLinux:8 | python39-iniconfig | 1.1.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-libs | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-lxml | 4.6.5-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-lxml | 4.6.5-1.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-mod_wsgi | 4.7.1-7.module_el8.9.0+3634+fb2a896c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-more-itertools | 8.5.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-numpy | 1.19.4-3.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-numpy | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-numpy-doc | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-numpy-f2py | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-numpy-f2py | 1.19.4-3.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-packaging | 20.4-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pip | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pip-wheel | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pluggy | 0.13.1-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-ply | 3.11-10.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-psutil | 5.8.0-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-psutil | 5.8.0-4.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-psycopg2 | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-psycopg2-doc | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-psycopg2-tests | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-py | 1.10.0-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pybind11 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pybind11 | 2.7.1-1.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pybind11-devel | 2.7.1-1.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pybind11-devel | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pycparser | 2.20-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pyparsing | 2.4.7-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pysocks | 1.7.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pytest | 6.0.2-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-requests | 2.25.0-3.module_el8.9.0+3634+fb2a896c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-rpm-macros | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-scipy | 1.5.4-5.module_el8.9.0+3634+fb2a896c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-setuptools | 50.3.2-6.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-setuptools-wheel | 50.3.2-6.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-six | 1.15.0-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-test | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-tkinter | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-toml | 0.10.1-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-urllib3 | 1.25.10-5.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-wcwidth | 0.2.5-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-wheel | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-wheel-wheel | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | resource-agents | 4.9.0-54.el8_10.4 | ALSA-2024:6311 |
| AlmaLinux:8 | resource-agents-aliyun | 4.9.0-54.el8_10.4 | ALSA-2024:6311 |
| AlmaLinux:8 | resource-agents-gcp | 4.9.0-54.el8_10.4 | ALSA-2024:6311 |
| AlmaLinux:8 | resource-agents-paf | 4.9.0-54.el8_10.4 | ALSA-2024:6311 |
| Alpine:v3.20 | py3-setuptools | 70.3.0-r0 | ALPINE-CVE-2024-6345 |
| Alpine:v3.21 | py3-setuptools | 70.3.0-r0 | ALPINE-CVE-2024-6345 |
| Alpine:v3.22 | py3-setuptools | 70.3.0-r0 | ALPINE-CVE-2024-6345 |
| Alpine:v3.23 | py3-setuptools | 70.3.0-r0 | ALPINE-CVE-2024-6345 |
| Alpine:v3.24 | py3-setuptools | 70.3.0-r0 | ALPINE-CVE-2024-6345 |
| Debian:12 | setuptools | 66.1.1-1+deb12u1 | DEBIAN-CVE-2024-6345 |
| Debian:13 | setuptools | 70.3.0-2 | DEBIAN-CVE-2024-6345 |
| Debian:14 | setuptools | 70.3.0-2 | DEBIAN-CVE-2024-6345 |
| PyPI | setuptools | 70.0.0 | GHSA-cx63-2mw6-8hw5 |
| PyPI | setuptools | 70.0.0 | PYSEC-2026-1918 |
| Rocky Linux:8 | Cython | 0:0.29.21-5.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | Cython | 0:0.29.21-5.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.9.0+1418+f0d66789 | RLSA-2024:5962 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | fence-agents | 0:4.2.1-129.el8_10.4 | RLSA-2024:6309 |
| Rocky Linux:9 | fence-agents | 0:4.10.0-62.el9_4.5 | RLSA-2024:6726 |
| Rocky Linux:8 | mod_wsgi | 0:4.7.1-7.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | mod_wsgi | 0:4.7.1-7.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | numpy | 0:1.19.4-3.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | numpy | 0:1.19.4-3.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | pybind11 | 0:2.7.1-1.module+el8.9.0+1357+a3b80af7 | RLSA-2024:5962 |
| Rocky Linux:8 | pytest | 0:6.0.2-2.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| pypa | pypa/setuptools | unspecified – before 70.0 |
Weakness: CWE-94 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H