CVE-2024-6345 — Remote Code Execution in pypa/setuptools

Description

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.

Affected products

Vendor	Product	Affected	Fixed
pypa	pypa/setuptools	unspecified – < 70.0	70.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	setuptools	70.3.0-2	—
Debian 13	setuptools	70.3.0-2	—
Debian 12	setuptools	66.1.1-1+deb12u1	—
Debian 11	setuptools	52.0.0-4+deb11u1	DLA-3876-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 24.04 LTS	setuptools	68.1.2-2ubuntu1.1	USN-7002-1
Ubuntu 22.04 LTS	setuptools	59.6.0-1.2ubuntu0.22.04.2	USN-7002-1
Ubuntu 20.04 LTS	setuptools	45.2.0-1ubuntu0.2	USN-7002-1

Show 5 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 22.04 LTS	python-setuptools	44.1.1-1.2ubuntu0.22.04.1+esm1	USN-7002-1
Ubuntu Pro 20.04 LTS	python-pip	20.0.2-5ubuntu1.10+esm2	—
Ubuntu Pro 20.04 LTS	python-setuptools	44.0.0-2ubuntu0.1+esm1	USN-7002-1
Ubuntu Pro 18.04 LTS	python-pip	9.0.1-2.3~ubuntu1.18.04.8+esm4	—
Ubuntu Pro 18.04 LTS	python-setuptools	39.0.1-2ubuntu0.1+esm1	USN-7002-1
Ubuntu Pro 16.04 LTS	python-pip	8.1.1-2ubuntu0.6+esm8	—
Ubuntu Pro 16.04 LTS	python-setuptools	20.7.0-1ubuntu0.1~esm2	USN-7002-1
Ubuntu Pro 14.04 LTS	python-pip	1.5.4-1ubuntu4+esm5	—
Ubuntu Pro 14.04 LTS	python-setuptools	3.3-1ubuntu2+esm2	USN-7002-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 9	fence-virt +55	4.10.0-62.el9_4.5	RHSA-2024:6726
RHEL 9	python-setuptools +2	53.0.0-12.el9_4.1	RHSA-2024:5534
RHEL 9	python3.11-setuptools +1	65.5.1-2.el9_4.1	RHSA-2024:5279
RHEL 9	python3.12-setuptools +1	68.2.2-3.el9_4.1	RHSA-2024:5533
RHEL 8	Cython +1	0.29.21-5.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	PyYAML +1	5.4.1-1.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	fence-agents +47	4.2.1-129.el8_10.4	RHSA-2024:6309
RHEL 8	mod_wsgi +1	4.7.1-7.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	numpy +3	1.19.4-3.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	pybind11 +2	2.7.1-1.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	pytest +1	6.0.2-2.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-PyMySQL +1	0.10.1-2.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-attrs +1	20.3.0-2.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-cffi +1	1.14.3-2.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-chardet +1	3.0.4-19.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-cryptography +1	3.3.1-3.module+el8.10.0+21271+eccd1d86	RHSA-2024:5962
RHEL 8	python-idna +1	2.10-4.module+el8.10.0+21815+bb024982	RHSA-2024:5962
RHEL 8	python-iniconfig +1	1.1.1-2.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-lxml +1	4.6.5-1.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-more-itertools +1	8.5.0-2.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-packaging +1	20.4-4.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-pluggy +1	0.13.1-3.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-ply +1	3.11-10.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-psutil +1	5.8.0-4.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-psycopg2 +3	2.8.6-3.module+el8.10.0+21142+453d2b75	RHSA-2024:5962
RHEL 8	python-py +1	1.10.0-1.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-pycparser +1	2.20-3.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-pysocks +1	1.7.1-4.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-requests +1	2.25.0-3.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-setuptools +3	39.2.0-8.el8_10	RHSA-2024:5530
RHEL 8	python-toml +1	0.10.1-5.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-urllib3 +1	1.25.10-5.module+el8.10.0+20443+f0a692fe	RHSA-2024:5962
RHEL 8	python-wcwidth +1	0.2.5-3.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python-wheel +2	1:0.35.1-4.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python3.11-setuptools +1	65.5.1-3.el8_10	RHSA-2024:5532
RHEL 8	python3.12-setuptools +1	68.2.2-4.el8_10	RHSA-2024:5531
RHEL 8	python39 +7	3.9.19-7.module+el8.10.0+22237+51382d7a	RHSA-2024:5962
RHEL 8	python39-pip +2	20.2.4-9.module+el8.10.0+21329+8d76b841	RHSA-2024:5962
RHEL 8	python39-pyparsing +1	2.4.7-5.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	python39-setuptools +2	50.3.2-6.module+el8.10.0+22183+c898c0c1	RHSA-2024:5962
RHEL 8	python39-six +1	1.15.0-3.module+el8.9.0+19644+d68f775d	RHSA-2024:5962
RHEL 8	resource-agents +3	4.9.0-54.el8_10.4	RHSA-2024:6311
RHEL 8	scipy +1	1.5.4-5.module+el8.9.0+19644+d68f775d	RHSA-2024:5962

Show 11 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
RHEL 9.2 EUS	fence-virt +55	4.10.0-43.el9_2.9	RHSA-2024:6611
RHEL 9.2 EUS	python-setuptools +2	53.0.0-12.el9_2.1	RHSA-2024:5137
RHEL 9.2 EUS	python3.11-setuptools +1	65.5.1-2.el9_2.1	RHSA-2024:6312
RHEL 9.0 E4S	fence-virt +56	4.10.0-20.el9_0.17	RHSA-2024:6612
RHEL 9.0 E4S	python-setuptools +2	53.0.0-12.el9_0	RHSA-2024:5389
RHEL 8.8 EUS	Cython +1	0.29.21-5.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	PyYAML +1	5.4.1-1.module+el8.5.0+10613+59a13ec4	RHSA-2024:5084
RHEL 8.8 EUS	fence-agents +47	4.2.1-112.el8_8.8	RHSA-2024:8168
RHEL 8.8 EUS	mod_wsgi +1	4.7.1-5.module+el8.7.0+16654+645aad7f	RHSA-2024:5084
RHEL 8.8 EUS	numpy +3	1.19.4-3.module+el8.5.0+12204+54860423	RHSA-2024:5084
RHEL 8.8 EUS	pybind11 +2	2.7.1-1.module+el8.6.0+12838+640e6226	RHSA-2024:5084
RHEL 8.8 EUS	pytest +1	6.0.2-2.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-PyMySQL +1	0.10.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-attrs +1	20.3.0-2.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-cffi +1	1.14.3-2.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-chardet +1	3.0.4-19.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-cryptography +1	3.3.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-idna +1	2.10-3.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-iniconfig +1	1.1.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-lxml +1	4.6.5-1.module+el8.6.0+13933+9cf0c87c	RHSA-2024:5084
RHEL 8.8 EUS	python-more-itertools +1	8.5.0-2.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-packaging +1	20.4-4.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-pluggy +1	0.13.1-3.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-ply +1	3.11-10.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-psutil +1	5.8.0-4.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-psycopg2 +3	2.8.6-2.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-py +1	1.10.0-1.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-pycparser +1	2.20-3.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-pysocks +1	1.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-requests +1	2.25.0-2.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-setuptools +3	39.2.0-7.el8_8.1	RHSA-2024:5000
RHEL 8.8 EUS	python-toml +1	0.10.1-5.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-urllib3 +1	1.25.10-4.module+el8.5.0+11712+ea2d2be1	RHSA-2024:5084
RHEL 8.8 EUS	python-wcwidth +1	0.2.5-3.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python-wheel +2	1:0.35.1-4.module+el8.5.0+12204+54860423	RHSA-2024:5084
RHEL 8.8 EUS	python3.11-setuptools +1	65.5.1-2.el8_8.1	RHSA-2024:5002
RHEL 8.8 EUS	python39 +7	3.9.16-1.module+el8.8.0+20025+f2100191.2	RHSA-2024:5084
RHEL 8.8 EUS	python39-pip +2	20.2.4-7.module+el8.6.0+13003+6bb2c488	RHSA-2024:5084
RHEL 8.8 EUS	python39-pyparsing +1	2.4.7-5.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	python39-setuptools +2	50.3.2-6.module+el8.8.0+22158+89b6fb7b	RHSA-2024:5084
RHEL 8.8 EUS	python39-six +1	1.15.0-3.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.8 EUS	resource-agents +3	4.9.0-40.el8_8.6	RHSA-2024:8179
RHEL 8.8 EUS	scipy +1	1.5.4-3.module+el8.4.0+9822+20bf1249	RHSA-2024:5084
RHEL 8.6 TUS	PyYAML +1	5.4.1-1.module+el8.5.0+10613+59a13ec4	RHSA-2024:6220
RHEL 8.6 TUS	fence-agents +45	4.2.1-89.el8_6.14	RHSA-2024:8171
RHEL 8.6 TUS	mod_wsgi +1	4.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	numpy +3	1.19.4-3.module+el8.5.0+12204+54860423	RHSA-2024:6220
RHEL 8.6 TUS	python-PyMySQL +1	0.10.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-cffi +1	1.14.3-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-chardet +1	3.0.4-19.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-cryptography +1	3.3.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-idna +1	2.10-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-lxml +1	4.6.5-1.module+el8.6.0+13933+9cf0c87c	RHSA-2024:6220
RHEL 8.6 TUS	python-ply +1	3.11-10.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-psutil +1	5.8.0-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-psycopg2 +3	2.8.6-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-pycparser +1	2.20-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-pysocks +1	1.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-requests +1	2.25.0-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-setuptools +3	39.2.0-7.el8_6.1	RHSA-2024:5040
RHEL 8.6 TUS	python-toml +1	0.10.1-5.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	python-urllib3 +1	1.25.10-4.module+el8.5.0+11712+ea2d2be1	RHSA-2024:6220
RHEL 8.6 TUS	python-wheel +2	1:0.35.1-4.module+el8.5.0+12204+54860423	RHSA-2024:6220
RHEL 8.6 TUS	python39 +6	3.9.7-2.module+el8.6.0+20026+579726f4.2	RHSA-2024:6220
RHEL 8.6 TUS	python39-pip +2	20.2.4-7.module+el8.6.0+13003+6bb2c488	RHSA-2024:6220
RHEL 8.6 TUS	python39-setuptools +2	50.3.2-6.module+el8.6.0+22162+859a69ec	RHSA-2024:6220
RHEL 8.6 TUS	python39-six +1	1.15.0-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 TUS	resource-agents +3	4.9.0-16.el8_6.14	RHSA-2024:8173
RHEL 8.6 TUS	scipy +1	1.5.4-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	PyYAML +1	5.4.1-1.module+el8.5.0+10613+59a13ec4	RHSA-2024:6220
RHEL 8.6 E4S	fence-agents +46	4.2.1-89.el8_6.14	RHSA-2024:8171
RHEL 8.6 E4S	mod_wsgi +1	4.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	numpy +3	1.19.4-3.module+el8.5.0+12204+54860423	RHSA-2024:6220
RHEL 8.6 E4S	python-PyMySQL +1	0.10.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-cffi +1	1.14.3-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-chardet +1	3.0.4-19.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-cryptography +1	3.3.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-idna +1	2.10-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-lxml +1	4.6.5-1.module+el8.6.0+13933+9cf0c87c	RHSA-2024:6220
RHEL 8.6 E4S	python-ply +1	3.11-10.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-psutil +1	5.8.0-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-psycopg2 +3	2.8.6-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-pycparser +1	2.20-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-pysocks +1	1.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-requests +1	2.25.0-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-setuptools +3	39.2.0-7.el8_6.1	RHSA-2024:5040
RHEL 8.6 E4S	python-toml +1	0.10.1-5.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	python-urllib3 +1	1.25.10-4.module+el8.5.0+11712+ea2d2be1	RHSA-2024:6220
RHEL 8.6 E4S	python-wheel +2	1:0.35.1-4.module+el8.5.0+12204+54860423	RHSA-2024:6220
RHEL 8.6 E4S	python39 +6	3.9.7-2.module+el8.6.0+20026+579726f4.2	RHSA-2024:6220
RHEL 8.6 E4S	python39-pip +2	20.2.4-7.module+el8.6.0+13003+6bb2c488	RHSA-2024:6220
RHEL 8.6 E4S	python39-setuptools +2	50.3.2-6.module+el8.6.0+22162+859a69ec	RHSA-2024:6220
RHEL 8.6 E4S	python39-six +1	1.15.0-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 E4S	resource-agents +3	4.9.0-16.el8_6.14	RHSA-2024:8173
RHEL 8.6 E4S	scipy +1	1.5.4-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	PyYAML +1	5.4.1-1.module+el8.5.0+10613+59a13ec4	RHSA-2024:6220
RHEL 8.6 AUS	fence-agents +41	4.2.1-89.el8_6.14	RHSA-2024:8171
RHEL 8.6 AUS	mod_wsgi +1	4.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	numpy +3	1.19.4-3.module+el8.5.0+12204+54860423	RHSA-2024:6220
RHEL 8.6 AUS	python-PyMySQL +1	0.10.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-cffi +1	1.14.3-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-chardet +1	3.0.4-19.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-cryptography +1	3.3.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-idna +1	2.10-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-lxml +1	4.6.5-1.module+el8.6.0+13933+9cf0c87c	RHSA-2024:6220
RHEL 8.6 AUS	python-ply +1	3.11-10.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-psutil +1	5.8.0-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-psycopg2 +3	2.8.6-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-pycparser +1	2.20-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-pysocks +1	1.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-requests +1	2.25.0-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-setuptools +3	39.2.0-7.el8_6.1	RHSA-2024:5040
RHEL 8.6 AUS	python-toml +1	0.10.1-5.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	python-urllib3 +1	1.25.10-4.module+el8.5.0+11712+ea2d2be1	RHSA-2024:6220
RHEL 8.6 AUS	python-wheel +2	1:0.35.1-4.module+el8.5.0+12204+54860423	RHSA-2024:6220
RHEL 8.6 AUS	python39 +6	3.9.7-2.module+el8.6.0+20026+579726f4.2	RHSA-2024:6220
RHEL 8.6 AUS	python39-pip +2	20.2.4-7.module+el8.6.0+13003+6bb2c488	RHSA-2024:6220
RHEL 8.6 AUS	python39-setuptools +2	50.3.2-6.module+el8.6.0+22162+859a69ec	RHSA-2024:6220
RHEL 8.6 AUS	python39-six +1	1.15.0-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.6 AUS	scipy +1	1.5.4-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6220
RHEL 8.4 TUS	PyYAML +1	5.4.1-1.module+el8.4.0+10484+27ce8e03	RHSA-2024:6488
RHEL 8.4 TUS	fence-agents +45	4.2.1-65.el8_4.20	RHSA-2024:8170
RHEL 8.4 TUS	mod_wsgi +1	4.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	numpy +3	1.19.4-2.module+el8.4.0+15042+dc5a279b.1	RHSA-2024:6488
RHEL 8.4 TUS	python-PyMySQL +1	0.10.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-cffi +1	1.14.3-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-chardet +1	3.0.4-19.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-cryptography +1	3.3.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-idna +1	2.10-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-lxml +1	4.6.2-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-ply +1	3.11-10.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-psutil +1	5.8.0-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-psycopg2 +3	2.8.6-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-pycparser +1	2.20-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-pysocks +1	1.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-requests +1	2.25.0-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-setuptools +3	39.2.0-6.el8_4.1	RHSA-2024:5078
RHEL 8.4 TUS	python-toml +1	0.10.1-5.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-urllib3 +1	1.25.10-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	python-wheel +2	1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1	RHSA-2024:6488
RHEL 8.4 TUS	python39 +6	3.9.2-2.module+el8.4.0+20027+45e0e702.2	RHSA-2024:6488
RHEL 8.4 TUS	python39-pip +2	20.2.4-3.module+el8.4.0+15042+dc5a279b.1	RHSA-2024:6488
RHEL 8.4 TUS	python39-setuptools +2	50.3.2-3.module+el8.4.0+22168+8a561f05.2	RHSA-2024:6488
RHEL 8.4 TUS	python39-six +1	1.15.0-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 TUS	resource-agents +2	4.1.1-90.el8_4.18	RHSA-2024:8172
RHEL 8.4 TUS	scipy +1	1.5.4-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	PyYAML +1	5.4.1-1.module+el8.4.0+10484+27ce8e03	RHSA-2024:6488
RHEL 8.4 E4S	fence-agents +45	4.2.1-65.el8_4.20	RHSA-2024:8170
RHEL 8.4 E4S	mod_wsgi +1	4.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	numpy +3	1.19.4-2.module+el8.4.0+15042+dc5a279b.1	RHSA-2024:6488
RHEL 8.4 E4S	python-PyMySQL +1	0.10.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-cffi +1	1.14.3-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-chardet +1	3.0.4-19.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-cryptography +1	3.3.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-idna +1	2.10-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-lxml +1	4.6.2-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-ply +1	3.11-10.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-psutil +1	5.8.0-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-psycopg2 +3	2.8.6-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-pycparser +1	2.20-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-pysocks +1	1.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-requests +1	2.25.0-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-setuptools +3	39.2.0-6.el8_4.1	RHSA-2024:5078
RHEL 8.4 E4S	python-toml +1	0.10.1-5.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-urllib3 +1	1.25.10-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	python-wheel +2	1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1	RHSA-2024:6488
RHEL 8.4 E4S	python39 +6	3.9.2-2.module+el8.4.0+20027+45e0e702.2	RHSA-2024:6488
RHEL 8.4 E4S	python39-pip +2	20.2.4-3.module+el8.4.0+15042+dc5a279b.1	RHSA-2024:6488
RHEL 8.4 E4S	python39-setuptools +2	50.3.2-3.module+el8.4.0+22168+8a561f05.2	RHSA-2024:6488
RHEL 8.4 E4S	python39-six +1	1.15.0-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 E4S	resource-agents +2	4.1.1-90.el8_4.18	RHSA-2024:8172
RHEL 8.4 E4S	scipy +1	1.5.4-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	PyYAML +1	5.4.1-1.module+el8.4.0+10484+27ce8e03	RHSA-2024:6488
RHEL 8.4 AUS	fence-agents +45	4.2.1-65.el8_4.20	RHSA-2024:8170
RHEL 8.4 AUS	mod_wsgi +1	4.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	numpy +3	1.19.4-2.module+el8.4.0+15042+dc5a279b.1	RHSA-2024:6488
RHEL 8.4 AUS	python-PyMySQL +1	0.10.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-cffi +1	1.14.3-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-chardet +1	3.0.4-19.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-cryptography +1	3.3.1-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-idna +1	2.10-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-lxml +1	4.6.2-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-ply +1	3.11-10.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-psutil +1	5.8.0-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-psycopg2 +3	2.8.6-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-pycparser +1	2.20-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-pysocks +1	1.7.1-4.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-requests +1	2.25.0-2.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-setuptools +3	39.2.0-6.el8_4.1	RHSA-2024:5078
RHEL 8.4 AUS	python-toml +1	0.10.1-5.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-urllib3 +1	1.25.10-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	python-wheel +2	1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1	RHSA-2024:6488
RHEL 8.4 AUS	python39 +6	3.9.2-2.module+el8.4.0+20027+45e0e702.2	RHSA-2024:6488
RHEL 8.4 AUS	python39-pip +2	20.2.4-3.module+el8.4.0+15042+dc5a279b.1	RHSA-2024:6488
RHEL 8.4 AUS	python39-setuptools +2	50.3.2-3.module+el8.4.0+22168+8a561f05.2	RHSA-2024:6488
RHEL 8.4 AUS	python39-six +1	1.15.0-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.4 AUS	resource-agents +2	4.1.1-90.el8_4.18	RHSA-2024:8172
RHEL 8.4 AUS	scipy +1	1.5.4-3.module+el8.4.0+9822+20bf1249	RHSA-2024:6488
RHEL 8.2 AUS	python-setuptools +3	39.2.0-5.el8_2.1	RHSA-2024:6907
RHEL 7 ELS	python-setuptools	0.9.8-7.el7_9.1	RHSA-2024:6662
RHEL 7 ELS	python3-setuptools	39.2.0-10.el7_9.1	RHSA-2024:6661

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 9	fence-virt +54	4.10.0-62.el9_4.5	ALSA-2024:6726
AlmaLinux 9	python3-setuptools +1	53.0.0-12.el9_4.1	ALSA-2024:5534
AlmaLinux 9	python3.11-setuptools +1	65.5.1-2.el9_4.1	ALSA-2024:5279
AlmaLinux 9	python3.12-setuptools +1	68.2.2-3.el9_4.1	ALSA-2024:5533
AlmaLinux 8	fence-agents-all +46	4.2.1-129.el8_10.4	ALSA-2024:6309
AlmaLinux 8	python3-setuptools +2	39.2.0-8.el8_10	ALSA-2024:5530
AlmaLinux 8	python3.11-setuptools +1	65.5.1-3.el8_10	ALSA-2024:5532
AlmaLinux 8	python3.12-setuptools +1	68.2.2-4.el8_10	ALSA-2024:5531
AlmaLinux 8	python39 +7	3.9.19-7.module_el8.10.0+3885+d986a391	ALSA-2024:5962
AlmaLinux 8	python39-Cython	0.29.21-5.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-PyMySQL	0.10.1-2.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-attrs	20.3.0-2.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-cffi	1.14.3-2.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-chardet	3.0.4-19.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-cryptography	3.3.1-3.module_el8.10.0+3765+2f9a457d	ALSA-2024:5962
AlmaLinux 8	python39-idna	2.10-4.module_el8.10.0+3849+a48d89aa	ALSA-2024:5962
AlmaLinux 8	python39-iniconfig	1.1.1-2.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-lxml	4.6.5-1.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-mod_wsgi	4.7.1-7.module_el8.9.0+3634+fb2a896c	ALSA-2024:5962
AlmaLinux 8	python39-more-itertools	8.5.0-2.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-numpy +2	1.19.4-3.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-packaging	20.4-4.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-pip +1	20.2.4-9.module_el8.10.0+3765+2f9a457d	ALSA-2024:5962
AlmaLinux 8	python39-pluggy	0.13.1-3.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-ply	3.11-10.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-psutil	5.8.0-4.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-psycopg2 +2	2.8.6-3.module_el8.10.0+3765+2f9a457d	ALSA-2024:5962
AlmaLinux 8	python39-py	1.10.0-1.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-pybind11 +1	2.7.1-1.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-pycparser	2.20-3.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-pyparsing	2.4.7-5.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-pysocks	1.7.1-4.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-pytest	6.0.2-2.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-pyyaml	5.4.1-1.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-requests	2.25.0-3.module_el8.9.0+3634+fb2a896c	ALSA-2024:5962
AlmaLinux 8	python39-scipy	1.5.4-5.module_el8.9.0+3634+fb2a896c	ALSA-2024:5962
AlmaLinux 8	python39-setuptools +1	50.3.2-6.module_el8.10.0+3885+d986a391	ALSA-2024:5962
AlmaLinux 8	python39-six	1.15.0-3.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-toml	0.10.1-5.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-urllib3	1.25.10-5.module_el8.10.0+3765+2f9a457d	ALSA-2024:5962
AlmaLinux 8	python39-wcwidth	0.2.5-3.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	python39-wheel +1	1:0.35.1-4.module_el8.6.0+2780+a40f65e1	ALSA-2024:5962
AlmaLinux 8	resource-agents +3	4.9.0-54.el8_10.4	ALSA-2024:6311

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 9	fence-agents	4.10.0-62.el9_4.5	RLSA-2024:6726
Rocky Linux 9	python3.11-setuptools	65.5.1-2.el9_4.1	RLSA-2024:5279
Rocky Linux 9	python3.12-setuptools	68.2.2-3.el9_4.1	RLSA-2024:5533
Rocky Linux 8	Cython	0.29.21-5.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	PyYAML	5.4.1-1.module+el8.9.0+1418+f0d66789	RLSA-2024:5962
Rocky Linux 8	fence-agents	4.2.1-129.el8_10.4	RLSA-2024:6309
Rocky Linux 8	mod_wsgi	4.7.1-7.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	numpy	1.19.4-3.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	pybind11	2.7.1-1.module+el8.9.0+1357+a3b80af7	RLSA-2024:5962
Rocky Linux 8	pytest	6.0.2-2.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-PyMySQL	0.10.1-2.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-attrs	20.3.0-2.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-cffi	1.14.3-2.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-chardet	3.0.4-19.module+el8.9.0+1418+f0d66789	RLSA-2024:5962
Rocky Linux 8	python-cryptography	3.3.1-3.module+el8.10.0+1697+7e517775	RLSA-2024:5962
Rocky Linux 8	python-idna	2.10-4.module+el8.10.0+1809+41195054	RLSA-2024:5962
Rocky Linux 8	python-iniconfig	1.1.1-2.module+el8.9.0+1332+dd574197	RLSA-2024:5962
Rocky Linux 8	python-lxml	4.6.5-1.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-more-itertools	8.5.0-2.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-packaging	20.4-4.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-pluggy	0.13.1-3.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-ply	3.11-10.module+el8.9.0+1418+f0d66789	RLSA-2024:5962
Rocky Linux 8	python-psutil	5.8.0-4.module+el8.9.0+1357+a3b80af7	RLSA-2024:5962
Rocky Linux 8	python-psycopg2	2.8.6-3.module+el8.10.0+1660+b5b6f004	RLSA-2024:5962
Rocky Linux 8	python-py	1.10.0-1.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-pycparser	2.20-3.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-pysocks	1.7.1-4.module+el8.9.0+1418+f0d66789	RLSA-2024:5962
Rocky Linux 8	python-requests	2.25.0-3.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-setuptools	39.2.0-8.el8_10	RLSA-2024:5530
Rocky Linux 8	python-toml	0.10.1-5.module+el8.9.0+1332+dd574197	RLSA-2024:5962
Rocky Linux 8	python-urllib3	1.25.10-5.module+el8.10.0+1545+03246da9	RLSA-2024:5962
Rocky Linux 8	python-wcwidth	0.2.5-3.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python-wheel	1:0.35.1-4.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python3.12-setuptools	68.2.2-4.el8_10	RLSA-2024:5531
Rocky Linux 8	python39	3.9.19-7.module+el8.10.0+1860+afcc1c71	RLSA-2024:5962
Rocky Linux 8	python3x-pip	20.2.4-9.module+el8.10.0+1721+e52d6351	RLSA-2024:5962
Rocky Linux 8	python3x-pyparsing	2.4.7-5.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	python3x-setuptools	50.3.2-6.module+el8.10.0+1861+0f5e39ec	RLSA-2024:5962
Rocky Linux 8	python3x-six	1.15.0-3.module+el8.10.0+1582+bc278001	RLSA-2024:5962
Rocky Linux 8	resource-agents	4.9.0-54.el8_10.4	RLSA-2024:6311
Rocky Linux 8	scipy	1.5.4-5.module+el8.10.0+1582+bc278001	RLSA-2024:5962

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP6	python3-setuptools +2	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
SLES 15 SP5	python3-setuptools +2	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
SLES 15 SP4	python-setuptools	67.7.2-150400.3.16.1	SUSE-SU-2024:3055-1
SLES 15 SP4	python3-setuptools +2	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
SLES 15 SP4	python310-setuptools	67.6.1-150400.4.9.1	SUSE-SU-2024:2907-1
SLES 15 SP3	python-setuptools +2	40.5.0-150100.6.9.1	SUSE-SU-2024:2899-1
SLES 15 SP3	python39-setuptools	44.1.1-150300.7.9.1	SUSE-SU-2024:2906-1
SLES 15 SP2	python-setuptools	40.5.0-150100.6.9.1	SUSE-SU-2024:2899-1

Show 26 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES 12 SP5	python-setuptools	40.6.2-4.24.1	SUSE-SU-2024:2900-1
SLES 12 SP5	python36-setuptools	44.1.1-8.9.1	SUSE-SU-2024:2950-1
SLES 12	python-setuptools	40.6.2-4.24.1	SUSE-SU-2024:2900-1
SLES 3	python-setuptools	67.7.2-150400.3.16.1	SUSE-SU-2024:3055-1
SLES 3	python312-setuptools	68.1.2-150600.3.3.1	SUSE-SU-2024:2904-1
SLES for SAP 15 SP4	python-setuptools	67.7.2-150400.3.16.1	SUSE-SU-2024:3055-1
SLES for SAP 15 SP4	python3-setuptools +2	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
SLES for SAP 15 SP4	python310-setuptools	67.6.1-150400.4.9.1	SUSE-SU-2024:2907-1
SLES for SAP 15 SP3	python-setuptools +2	40.5.0-150100.6.9.1	SUSE-SU-2024:2899-1
SLES for SAP 15 SP3	python39-setuptools	44.1.1-150300.7.9.1	SUSE-SU-2024:2906-1
SLES for SAP 15 SP2	python-setuptools	40.5.0-150100.6.9.1	SUSE-SU-2024:2899-1
SLES for SAP 12 SP5	python-setuptools	40.6.2-4.24.1	SUSE-SU-2024:2900-1
SLES for SAP 12 SP5	python36-setuptools	44.1.1-8.9.1	SUSE-SU-2024:2950-1
SLE Micro 6.0	python-setuptools	69.0.2-2.1	SUSE-SU-2025:20053-1
SLE Micro 5.5	python3-setuptools	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
SLE Micro 5.4	python3-setuptools	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
SLE Micro 5.3	python3-setuptools	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
SLE Micro 5.2	python-setuptools	40.5.0-150100.6.9.1	SUSE-SU-2024:2899-1
SLE Micro 5.1	python-setuptools	40.5.0-150100.6.9.1	SUSE-SU-2024:2899-1
SLE HPC 15 SP4	python-setuptools	67.7.2-150400.3.16.1	SUSE-SU-2024:3055-1
SLE HPC 15 SP4	python3-setuptools +2	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
SLE HPC 15 SP4	python310-setuptools	67.6.1-150400.4.9.1	SUSE-SU-2024:2907-1
SLE HPC 15 SP3	python-setuptools +2	40.5.0-150100.6.9.1	SUSE-SU-2024:2899-1
SLE HPC 15 SP3	python39-setuptools	44.1.1-150300.7.9.1	SUSE-SU-2024:2906-1
SLE HPC 15 SP2	python-setuptools	40.5.0-150100.6.9.1	SUSE-SU-2024:2899-1
SUSE Manager Server Module 4.3	venv-salt-minion	3006.0-150000.3.67.1	SUSE-SU-2024:4021-1
SUSE Manager Server 4.3	python3-setuptools +2	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
SUSE Manager Proxy Module 4.3	venv-salt-minion	3006.0-150000.3.67.1	SUSE-SU-2024:4021-1
SUSE Manager Proxy 4.3	python3-setuptools +2	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
SUSE Manager Client Tools for SLE Micro 5	venv-salt-minion	3006.0-150000.3.67.1	SUSE-SU-2024:4021-1
SUSE Manager Client Tools for RHEL, Liberty and Clones 9	venv-salt-minion	3006.0-1.47.1	SUSE-SU-2024:4029-1, SUSE-EL-9-CLIENT-TOOLS-2024-4029
SUSE Manager Client Tools 15	venv-salt-minion	3006.0-150000.3.67.1	SUSE-SU-2024:4021-1
SUSE Manager Client Tools 12	venv-salt-minion	3006.0-3.65.1	SUSE-SU-2024:4020-1
SUSE Enterprise Storage 7.1	python-setuptools +2	40.5.0-150100.6.9.1	SUSE-SU-2024:2899-1
SUSE Enterprise Storage 7.1	python39-setuptools	44.1.1-150300.7.9.1	SUSE-SU-2024:2906-1
SUSE EL-9:Update:Products:SaltBundle:Update	saltbundlepy +1	3.11.9-1.26.1	SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update	saltbundlepy-cryptography	3.3.2-1.18.1	SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update	saltbundlepy-docker	7.0.0-1.8.1	SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update	saltbundlepy-idna	3.4-1.9.2	SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update	saltbundlepy-passlib +1	1.7.4-1.3.1	SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update	saltbundlepy-setuptools	67.7.2-1.12.1	SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update	saltbundlepy-urllib3	2.0.7-1.12.1	SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update	saltbundlepy-zipp	3.15.0-1.9.2	SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update	venv-salt-minion	3006.0-1.47.1	SUSE-SU-2024:4029-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	python-setuptools	72.1.0-1.1	openSUSE-SU-2024:14294-1
openSUSE Leap 15.6	python-setuptools +1	67.7.2-150400.3.16.1	SUSE-SU-2024:3055-1
openSUSE Leap 15.6	python3-setuptools +2	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
openSUSE Leap 15.6	python310-setuptools	67.6.1-150400.4.9.1	SUSE-SU-2024:2907-1
openSUSE Leap 15.6	python312-setuptools	68.1.2-150600.3.3.1	SUSE-SU-2024:2904-1
openSUSE Leap 15.6	python39-setuptools	44.1.1-150300.7.9.1	SUSE-SU-2024:2906-1
openSUSE Leap 15.5	python-setuptools	67.7.2-150400.3.16.1	SUSE-SU-2024:3055-1
openSUSE Leap 15.5	python3-setuptools +2	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1
openSUSE Leap 15.5	python310-setuptools	67.6.1-150400.4.9.1	SUSE-SU-2024:2907-1
openSUSE Leap 15.5	python39-setuptools	44.1.1-150300.7.9.1	SUSE-SU-2024:2906-1

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
openSUSE Leap Micro 5.5	python3-setuptools	44.1.1-150400.9.9.1	SUSE-SU-2024:3054-1

Alpine

Security tracker ↗

Release	Package	Fixed in	Advisory
Alpine v3.24	py3-setuptools	70.3.0-r0	—
Alpine v3.23	py3-setuptools	70.3.0-r0	—
Alpine v3.22	py3-setuptools	70.3.0-r0	—
Alpine v3.21	py3-setuptools	70.3.0-r0	—
Alpine v3.20	py3-setuptools	70.3.0-r0	—

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Alpine v3.19	py3-setuptools	70.3.0-r0	—
Alpine v3.18	py3-setuptools	70.3.0-r0	—
Alpine v3.17	py3-setuptools	70.3.0-r0	—

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2023	python3-setuptools +1	59.6.0-2.amzn2023.0.5	ALAS2023-2024-676
Amazon Linux 2023	python3.11-setuptools +1	65.5.1-2.amzn2023.0.6	ALAS2023-2024-740
Amazon Linux 2	python2-setuptools	41.2.0-4.amzn2.0.4	ALAS2-2024-2632
Amazon Linux 2	python3-setuptools +1	49.1.3-1.amzn2.0.5	ALAS2-2024-2641

Azure Linux

Release	Package	Fixed in	Advisory
Azure Linux 3	python-pip	24.2-1	—
Azure Linux 3	python-setuptools	69.0.3-4	—
Azure Linux 2 (CBL-Mariner)	python3	3.9.19-12	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 9	fence-virt +47	4.10.0-62.el9_4.5	ELSA-2024-6726
Oracle Linux 9	python3-setuptools +1	53.0.0-12.el9_4.1	ELSA-2024-5534
Oracle Linux 9	python3.11-setuptools +1	65.5.1-2.el9_4.1	ELSA-2024-5279
Oracle Linux 9	python3.12-setuptools +1	68.2.2-3.el9_4.1	ELSA-2024-5533
Oracle Linux 8	fence-agents-all +40	4.2.1-129.el8_10.4	ELSA-2024-6309
Oracle Linux 8	python3-setuptools +2	39.2.0-8.el8_10	ELSA-2024-5530
Oracle Linux 8	python3.11-setuptools +1	65.5.1-3.el8_10	ELSA-2024-5532
Oracle Linux 8	python3.12-setuptools +1	68.2.2-4.el8_10	ELSA-2024-5531
Oracle Linux 8	python39 +7	3.9.19-7.module+el8.10.0+90395+b6c4aad1	ELSA-2024-5962
Oracle Linux 8	python39-PyMySQL	0.10.1-2.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-cffi	1.14.3-2.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-chardet	3.0.4-19.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-cryptography	3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99	ELSA-2024-5962
Oracle Linux 8	python39-idna	2.10-4.module+el8.10.0+90341+71ca88f4	ELSA-2024-5962
Oracle Linux 8	python39-lxml	4.6.5-1.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-mod_wsgi	4.7.1-7.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-numpy +2	1.19.4-3.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-pip +1	20.2.4-9.module+el8.10.0+90269+2fa22b99	ELSA-2024-5962
Oracle Linux 8	python39-ply	3.11-10.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-psutil	5.8.0-4.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-psycopg2 +2	2.8.6-3.module+el8.10.0+90269+2fa22b99	ELSA-2024-5962
Oracle Linux 8	python39-pycparser	2.20-3.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-pysocks	1.7.1-4.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-pyyaml	5.4.1-1.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-requests	2.25.0-3.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-scipy	1.5.4-5.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-setuptools +1	50.3.2-6.module+el8.10.0+90395+b6c4aad1	ELSA-2024-5962
Oracle Linux 8	python39-six	1.15.0-3.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-toml	0.10.1-5.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	python39-urllib3	1.25.10-5.module+el8.10.0+90269+2fa22b99	ELSA-2024-5962
Oracle Linux 8	python39-wheel +1	1:0.35.1-4.module+el8.9.0+90016+9c2d6573	ELSA-2024-5962
Oracle Linux 8	resource-agents	4.9.0-54.el8_10.4	ELSA-2024-6311
Oracle Linux 7	python-setuptools	0.9.8-7.0.1.el7	ELSA-2024-6662
Oracle Linux 7	python3-setuptools	39.2.0-10.0.3.el7	ELSA-2024-6661

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	airflow	2.9.3-r1	—
Wolfi rolling	az +1	2.62.0-r1	—
Wolfi rolling	checkov	3.0.34-r1	—
Wolfi rolling	kubeflow-katib +17	0.18.0-r0	—
Wolfi rolling	py3-cassandra-medusa +1	0.23.0-r30	—
Wolfi rolling	py3-pipenv +9	2024.4.1-r0	—
Wolfi rolling	reflex	0.7.3-r0	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
PyPI	setuptools	< 70.0.0	70.0.0	GHSA-cx63-2mw6-8hw5

Advisories 50

ALSA-2024:6726 Important: fence-agents security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:5279 Important: python3.11-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:5533 Important: python3.12-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:5534 Important: python-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:6311 Moderate: resource-agents security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:5531 Important: python3.12-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:5530 Important: python-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:5532 Important: python3.11-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:5962 Moderate: python39:3.9 and python39-devel:3.9 security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:6309 Moderate: fence-agents security update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2024:8173 Red Hat Security Advisory: resource-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:8179 Red Hat Security Advisory: resource-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:8172 Red Hat Security Advisory: resource-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:8170 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:8171 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:8168 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6726 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6907 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6662 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6661 Red Hat Security Advisory: python3-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6612 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6611 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6488 Red Hat Security Advisory: python39:3.9 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6312 Red Hat Security Advisory: python3.11-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6309 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6311 Red Hat Security Advisory: resource-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:6220 Red Hat Security Advisory: python39:3.9 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5962 Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5532 Red Hat Security Advisory: python3.11-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5533 Red Hat Security Advisory: python3.12-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5534 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5531 Red Hat Security Advisory: python3.12-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5389 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5530 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5279 Red Hat Security Advisory: python3.11-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5137 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5084 Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5078 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5002 Red Hat Security Advisory: python3.11-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5040 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5000 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
WID-SEC-2025-0001 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
SUSE-EL-9-CLIENT-TOOLS-2024-4029 Security update for SUSE Manager Salt Bundle SUSE / openSUSE Security Updates · Jul 24, 2026
WID-SEC-2024-1756 Red Hat Enterprise Linux (python-setuptools): Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jun 29, 2026
USN-7002-1 python-setuptools, setuptools vulnerability Ubuntu Security Notices (USN) · Jun 29, 2026
WID-SEC-2026-0778 Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
SUSE-SU-2025:20053-1 Security update for python-setuptools SUSE / openSUSE Security Updates · Mar 23, 2026
DLA-3876-1 setuptools - security update Debian Security (DSA / DLA) · Mar 9, 2026
WID-SEC-2024-1913 Red Hat OpenShift Container Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 3, 2026
RLSA-2024:5530 Important: python-setuptools security update Rocky Linux Security Advisories · Feb 5, 2026

CNA	v3.0	8.8
OSV:GHSA	v3.1	8.8
OSV:PYSEC	v3.1	8.8
EUVD	v3.0	8.8

Remote Code Execution in pypa/setuptools

Description

Affected products

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

AlmaLinux

Rocky Linux

SUSE

openSUSE

Alpine

Amazon Linux

Azure Linux

Oracle Linux

Wolfi

Affected packages

Advisories 50

References