Summary
[68.2.2-4]
- Security fix for CVE-2024-6345
Resolves: RHEL-50475
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3.12-setuptools | 0:68.2.2-4.el8_10 |
| Oracle Linux · 8 | python3.12-setuptools-wheel | 0:68.2.2-4.el8_10 |
Vulnerabilities 1
-
High 8.8
Remote Code Execution in pypa/setuptools
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index …