Vulnerability · Published May 17, 2025 · Assigned by GitHub_M
CVE-2025-47273setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
High 7.7
In plain English
A high-severity path traversal in setuptools from pypa. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 4.0)7.7High
Exploit odds (30 days)1.6%top 24.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC
Official description
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | fence-agents-aliyun | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-all | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-amt-ws | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-apc | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-apc-snmp | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-aws | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-azure-arm | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-bladecenter | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-brocade | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-cisco-mds | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-cisco-ucs | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-common | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-compute | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-drac5 | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-eaton-snmp | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-emerson | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-eps | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-gce | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-heuristics-ping | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-hpblade | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-ibm-powervs | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-ibm-vpc | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-ibmblade | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-ifmib | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-ilo-moonshot | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-ilo-mp | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-ilo-ssh | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-ilo2 | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-intelmodular | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-ipdu | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-ipmilan | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-kdump | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-kubevirt | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-lpar | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-mpath | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-openstack | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-redfish | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-rhevm | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-rsa | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-rsb | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-sbd | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-scsi | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-virsh | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-vmware-rest | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-vmware-soap | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-wti | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-agents-zvm | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-virt | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-virtd | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-virtd-cpg | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-virtd-libvirt | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-virtd-multicast | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-virtd-serial | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | fence-virtd-tcp | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:9 | ha-cloud-support | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux:8 | platform-python-setuptools | 39.2.0-9.el8_10 | ALSA-2025:11036 |
| AlmaLinux:10 | python3-setuptools | 69.0.3-12.el10_0 | ALSA-2025:9940 |
| AlmaLinux:8 | python3-setuptools | 39.2.0-9.el8_10 | ALSA-2025:11036 |
| AlmaLinux:9 | python3-setuptools | 53.0.0-13.el9_6.1 | ALSA-2025:10407 |
| AlmaLinux:10 | python3-setuptools-wheel | 69.0.3-12.el10_0 | ALSA-2025:9940 |
| AlmaLinux:8 | python3-setuptools-wheel | 39.2.0-9.el8_10 | ALSA-2025:11036 |
| AlmaLinux:9 | python3-setuptools-wheel | 53.0.0-13.el9_6.1 | ALSA-2025:10407 |
| AlmaLinux:8 | python3.11-setuptools | 65.5.1-4.el8_10 | ALSA-2025:11043 |
| AlmaLinux:9 | python3.11-setuptools | 65.5.1-4.el9_6 | ALSA-2025:13578 |
| AlmaLinux:8 | python3.11-setuptools-wheel | 65.5.1-4.el8_10 | ALSA-2025:11043 |
| AlmaLinux:9 | python3.11-setuptools-wheel | 65.5.1-4.el9_6 | ALSA-2025:13578 |
| AlmaLinux:9 | python3.12-setuptools | 68.2.2-5.el9_6 | ALSA-2025:12834 |
| AlmaLinux:8 | python3.12-setuptools-wheel | 68.2.2-5.el8_10 | ALSA-2025:11044 |
| AlmaLinux:9 | python3.12-setuptools-wheel | 68.2.2-5.el9_6 | ALSA-2025:12834 |
| AlmaLinux:8 | python39 | 3.9.20-2.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-Cython | 0.29.21-5.module_el8.6.0+3248+c431e88c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-Cython | 0.29.21-5.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-PyMySQL | 0.10.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-attrs | 20.3.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-cffi | 1.14.3-2.module_el8.6.0+3248+c431e88c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-cffi | 1.14.3-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-chardet | 3.0.4-19.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-cryptography | 3.3.1-3.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux:8 | python39-debug | 3.9.20-2.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-devel | 3.9.20-2.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-idle | 3.9.20-2.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-idna | 2.10-4.module_el8.10.0+3849+a48d89aa | ALSA-2025:14900 |
| AlmaLinux:8 | python39-iniconfig | 1.1.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-libs | 3.9.20-2.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-lxml | 4.6.5-1.module_el8.6.0+3248+c431e88c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-lxml | 4.6.5-1.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-mod_wsgi | 4.7.1-7.module_el8.10.0+3989+a618fe15.1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-more-itertools | 8.5.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-numpy | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-numpy | 1.19.4-3.module_el8.6.0+3248+c431e88c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-numpy-doc | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-numpy-f2py | 1.19.4-3.module_el8.6.0+3248+c431e88c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-numpy-f2py | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-packaging | 20.4-4.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pip | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pip-wheel | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pluggy | 0.13.1-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-ply | 3.11-10.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-psutil | 5.8.0-4.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-psutil | 5.8.0-4.module_el8.6.0+3248+c431e88c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-psycopg2 | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux:8 | python39-psycopg2-doc | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux:8 | python39-psycopg2-tests | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux:8 | python39-py | 1.10.0-1.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pybind11 | 2.7.1-1.module_el8.6.0+3248+c431e88c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pybind11 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pybind11-devel | 2.7.1-1.module_el8.6.0+3248+c431e88c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pybind11-devel | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pycparser | 2.20-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pyparsing | 2.4.7-5.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pysocks | 1.7.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pytest | 6.0.2-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+3248+c431e88c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-requests | 2.25.0-3.module_el8.9.0+3634+fb2a896c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-rpm-macros | 3.9.20-2.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-scipy | 1.5.4-5.module_el8.9.0+3634+fb2a896c | ALSA-2025:14900 |
| AlmaLinux:8 | python39-setuptools | 50.3.2-7.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-setuptools-wheel | 50.3.2-7.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-six | 1.15.0-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-test | 3.9.20-2.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-tkinter | 3.9.20-2.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-toml | 0.10.1-5.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-urllib3 | 1.25.10-5.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux:8 | python39-wcwidth | 0.2.5-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-wheel | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux:8 | python39-wheel-wheel | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| Debian:12 | setuptools | 66.1.1-1+deb12u2 | DEBIAN-CVE-2025-47273 |
| Debian:13 | setuptools | 78.1.1-0.1 | DEBIAN-CVE-2025-47273 |
| Debian:14 | setuptools | 78.1.1-0.1 | DEBIAN-CVE-2025-47273 |
| PyPI | setuptools | 78.1.1 | GHSA-5rjg-fvgr-3xxf |
| PyPI | setuptools | 78.1.1 | PYSEC-2025-49 |
| Rocky Linux:8 | Cython | 0:0.29.21-5.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | Cython | 0:0.29.21-5.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.9.0+1418+f0d66789 | RLSA-2025:14900 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:9 | fence-agents | 0:4.10.0-86.el9_6.7 | RLSA-2025:11463 |
| Rocky Linux:8 | mod_wsgi | 0:4.7.1-7.module+el8.10.0+1978+d4f111ba.1 | RLSA-2025:14900 |
| Rocky Linux:8 | mod_wsgi | 0:4.7.1-7.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | mod_wsgi | 0:4.7.1-7.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | numpy | 0:1.19.4-3.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | numpy | 0:1.19.4-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | pybind11 | 0:2.7.1-1.module+el8.9.0+1357+a3b80af7 | RLSA-2025:14900 |
| Rocky Linux:8 | pytest | 0:6.0.2-2.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | pytest | 0:6.0.2-2.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1592+61442852 | RLSA-2025:14900 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1910+234ad790 | RLSA-2025:14900 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-attrs | 0:20.3.0-2.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-attrs | 0:20.3.0-2.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-cffi | 0:1.14.3-2.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-cffi | 0:1.14.3-2.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-chardet | 0:3.0.4-19.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-chardet | 0:3.0.4-19.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-chardet | 0:3.0.4-19.module+el8.9.0+1418+f0d66789 | RLSA-2025:14900 |
| Rocky Linux:8 | python-cryptography | 0:3.3.1-3.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-cryptography | 0:3.3.1-3.module+el8.10.0+1697+7e517775 | RLSA-2025:14900 |
| Rocky Linux:8 | python-idna | 0:2.10-4.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-idna | 0:2.10-4.module+el8.10.0+1809+41195054 | RLSA-2025:14900 |
| Rocky Linux:8 | python-iniconfig | 0:1.1.1-2.module+el8.9.0+1332+dd574197 | RLSA-2025:14900 |
| Rocky Linux:8 | python-lxml | 0:4.6.5-1.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-more-itertools | 0:8.5.0-2.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-more-itertools | 0:8.5.0-2.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-packaging | 0:20.4-4.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-packaging | 0:20.4-4.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-pluggy | 0:0.13.1-3.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-pluggy | 0:0.13.1-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-ply | 0:3.11-10.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-ply | 0:3.11-10.module+el8.9.0+1418+f0d66789 | RLSA-2025:14900 |
| Rocky Linux:8 | python-ply | 0:3.11-10.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-psutil | 0:5.8.0-4.module+el8.9.0+1357+a3b80af7 | RLSA-2025:14900 |
| Rocky Linux:8 | python-psycopg2 | 0:2.8.6-3.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-psycopg2 | 0:2.8.6-3.module+el8.10.0+1660+b5b6f004 | RLSA-2025:14900 |
| Rocky Linux:8 | python-py | 0:1.10.0-1.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-py | 0:1.10.0-1.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-pycparser | 0:2.20-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-pycparser | 0:2.20-3.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-pysocks | 0:1.7.1-4.module+el8.9.0+1418+f0d66789 | RLSA-2025:14900 |
| Rocky Linux:8 | python-pysocks | 0:1.7.1-4.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-pysocks | 0:1.7.1-4.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-requests | 0:2.25.0-3.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-requests | 0:2.25.0-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:10 | python-setuptools | 0:69.0.3-12.el10_0 | RLSA-2025:9940 |
| Rocky Linux:8 | python-setuptools | 0:39.2.0-9.el8_10 | RLSA-2025:11036 |
| Rocky Linux:9 | python-setuptools | 0:53.0.0-13.el9_6.1 | RLSA-2025:10407 |
| Rocky Linux:8 | python-toml | 0:0.10.1-5.module+el8.9.0+1332+dd574197 | RLSA-2025:14900 |
| Rocky Linux:8 | python-urllib3 | 0:1.25.10-5.module+el8.10.0+1545+03246da9 | RLSA-2025:14900 |
| Rocky Linux:8 | python-urllib3 | 0:1.25.10-5.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-wcwidth | 0:0.2.5-3.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python-wcwidth | 0:0.2.5-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-wheel | 1:0.35.1-4.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux:8 | python-wheel | 1:0.35.1-4.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
| Rocky Linux:8 | python3.11-setuptools | 0:65.5.1-4.el8_10 | RLSA-2025:11043 |
| Rocky Linux:9 | python3.11-setuptools | 0:65.5.1-4.el9_6 | RLSA-2025:13578 |
| Rocky Linux:8 | python3.12-setuptools | 0:68.2.2-5.el8_10 | RLSA-2025:11044 |
| Rocky Linux:9 | python3.12-setuptools | 0:68.2.2-5.el9_6 | RLSA-2025:12834 |
| Rocky Linux:8 | python39 | 0:3.9.20-2.module+el8.10.0+2057+30213a2b | RLSA-2025:14900 |
| Rocky Linux:8 | python3x-pip | 0:20.2.4-9.module+el8.10.0+1860+afcc1c71 | RLSA-2025:14900 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| pypa | setuptools | < 78.1.1 |
Weakness: CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
References
- https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf x_refsource_CONFIRM
- https://github.com/pypa/setuptools/issues/4946 x_refsource_MISC
- https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b x_refsource_MISC
- https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88 x_refsource_MISC
- https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html