Skip to content
OpenAdvisories
Medium ELSA-2025-11036 1 CVE

Moderate: python-setuptools security update (Oracle Linux 8)

Published Jul 14, 2025 · Updated Jul 14, 2025

Ecosystem: Oracle Linux

Summary

[39.2.0-9]
- Security fix for CVE-2025-47273
Resolves: RHEL-96802

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 platform-python-setuptools 0:39.2.0-9.el8_10
Oracle Linux · 8 python3-setuptools 0:39.2.0-9.el8_10
Oracle Linux · 8 python3-setuptools-wheel 0:39.2.0-9.el8_10

Vulnerabilities 1

  • High 7.7
    CVE-2025-47273 Public exploit

    setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

    setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to ar…

    pypa setuptools kserve-storage-controller datadog-agent-7.77 Debian Ubuntu Azure Linux Wolfi PyPI