High ELSA-2024-6661 1 CVE

Important: python3-setuptools security update (Oracle Linux 7)

Published Oct 7, 2024 · Updated Oct 7, 2024

Ecosystem: Oracle Linux

Summary

[39.2.0-10.0.3]
- Back port fix for CVE-2024-6345 [Orabug: 37054771]

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	python3-setuptools	0:39.2.0-10.0.3.el7

Vulnerabilities 1

High 8.8

CVE-2024-6345

Remote Code Execution in pypa/setuptools

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index …

pypa pypa/setuptools katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Jul 15, 2024