Description
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pypa | setuptools | < 78.1.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | setuptools | 78.1.1-0.1 | — |
| Debian 13 | setuptools | 78.1.1-0.1 | — |
| Debian 12 | setuptools | 66.1.1-1+deb12u2 | — |
| Debian 11 | setuptools | 52.0.0-4+deb11u2 | DLA-4183-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | setuptools | 68.1.2-2ubuntu1.2 | USN-7544-1 |
| Ubuntu 22.04 LTS | setuptools | 59.6.0-1.2ubuntu0.22.04.3 | USN-7544-1 |
| Ubuntu 20.04 LTS | setuptools | 45.2.0-1ubuntu0.3 | USN-7544-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | python-setuptools | 44.1.1-1.2ubuntu0.22.04.1+esm2 | USN-7544-1 |
| Ubuntu Pro 20.04 LTS | python-setuptools | 44.0.0-2ubuntu0.1+esm2 | USN-7544-1 |
| Ubuntu Pro 18.04 LTS | python-pip | 9.0.1-2.3~ubuntu1.18.04.8+esm8 | — |
| Ubuntu Pro 18.04 LTS | python-setuptools | 39.0.1-2ubuntu0.1+esm2 | USN-7544-1 |
| Ubuntu Pro 16.04 LTS | python-pip | 8.1.1-2ubuntu0.6+esm12 | — |
| Ubuntu Pro 16.04 LTS | python-setuptools | 20.7.0-1ubuntu0.1~esm3 | USN-7544-1 |
| Ubuntu Pro 14.04 LTS | python-pip | No fix yet | — |
| Ubuntu Pro 14.04 LTS | python-setuptools | 3.3-1ubuntu2+esm3 | USN-7544-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | python-setuptools +2 | 69.0.3-12.el10_0 | RHSA-2025:9940 |
| RHEL 9 | fence-virt +55 | 4.10.0-86.el9_6.7 | RHSA-2025:11463 |
| RHEL 9 | python-setuptools +2 | 53.0.0-13.el9_6.1 | RHSA-2025:10407 |
| RHEL 9 | python3.11-setuptools +1 | 65.5.1-4.el9_6 | RHSA-2025:13578 |
| RHEL 9 | python3.12-setuptools +1 | 68.2.2-5.el9_6 | RHSA-2025:12834 |
| RHEL 8 | Cython +1 | 0.29.21-5.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | PyYAML +1 | 5.4.1-1.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | mod_wsgi +1 | 4.7.1-7.module+el8.10.0+23075+0aa18782.1 | RHSA-2025:14900 |
| RHEL 8 | numpy +3 | 1.19.4-3.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | pybind11 +2 | 2.7.1-1.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | pytest +1 | 6.0.2-2.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-PyMySQL +1 | 0.10.1-2.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-attrs +1 | 20.3.0-2.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-cffi +1 | 1.14.3-2.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-chardet +1 | 3.0.4-19.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-cryptography +1 | 3.3.1-3.module+el8.10.0+21271+eccd1d86 | RHSA-2025:14900 |
| RHEL 8 | python-idna +1 | 2.10-4.module+el8.10.0+21815+bb024982 | RHSA-2025:14900 |
| RHEL 8 | python-iniconfig +1 | 1.1.1-2.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-lxml +1 | 4.6.5-1.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-more-itertools +1 | 8.5.0-2.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-packaging +1 | 20.4-4.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-pluggy +1 | 0.13.1-3.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-ply +1 | 3.11-10.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-psutil +1 | 5.8.0-4.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-psycopg2 +3 | 2.8.6-3.module+el8.10.0+21142+453d2b75 | RHSA-2025:14900 |
| RHEL 8 | python-py +1 | 1.10.0-1.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-pycparser +1 | 2.20-3.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-pysocks +1 | 1.7.1-4.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-requests +1 | 2.25.0-3.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-setuptools +3 | 39.2.0-9.el8_10 | RHSA-2025:11036 |
| RHEL 8 | python-toml +1 | 0.10.1-5.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-urllib3 +1 | 1.25.10-5.module+el8.10.0+20443+f0a692fe | RHSA-2025:14900 |
| RHEL 8 | python-wcwidth +1 | 0.2.5-3.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python-wheel +2 | 1:0.35.1-4.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python3.11-setuptools +1 | 65.5.1-4.el8_10 | RHSA-2025:11043 |
| RHEL 8 | python3.12-setuptools +1 | 68.2.2-5.el8_10 | RHSA-2025:11044 |
| RHEL 8 | python39 +7 | 3.9.20-2.module+el8.10.0+23441+1124c1da | RHSA-2025:14900 |
| RHEL 8 | python39-pip +2 | 20.2.4-9.module+el8.10.0+21329+8d76b841 | RHSA-2025:14900 |
| RHEL 8 | python39-pyparsing +1 | 2.4.7-5.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | python39-setuptools +2 | 50.3.2-7.module+el8.10.0+23406+03055bfb | RHSA-2025:14900 |
| RHEL 8 | python39-six +1 | 1.15.0-3.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
| RHEL 8 | scipy +1 | 1.5.4-5.module+el8.9.0+19644+d68f775d | RHSA-2025:14900 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | fence-virt +55 | 4.10.0-62.el9_4.15 | RHSA-2025:11102 |
| RHEL 9.4 EUS | python-setuptools +2 | 53.0.0-12.el9_4.2 | RHSA-2025:11868 |
| RHEL 9.4 EUS | python3.11-setuptools +1 | 65.5.1-2.el9_4.2 | RHSA-2025:13669 |
| RHEL 9.4 EUS | python3.12-setuptools +1 | 68.2.2-3.el9_4.2 | RHSA-2025:13668 |
| RHEL 9.2 E4S | fence-virt +55 | 4.10.0-43.el9_2.14 | RHSA-2025:11101 |
| RHEL 9.2 E4S | python-setuptools +2 | 53.0.0-12.el9_2.3 | RHSA-2025:12020 |
| RHEL 9.2 E4S | python3.11-setuptools +1 | 65.5.1-2.el9_2.2 | RHSA-2025:13803 |
| RHEL 9.0 E4S | fence-virt +56 | 4.10.0-20.el9_0.23 | RHSA-2025:11464 |
| RHEL 9.0 E4S | python-setuptools +2 | 53.0.0-13.el9_0 | RHSA-2025:11584 |
| RHEL 8.8 TUS | python-setuptools +3 | 39.2.0-7.el8_8.3 | RHSA-2025:11427 |
| RHEL 8.8 TUS | python3.11-setuptools +1 | 65.5.1-2.el8_8.2 | RHSA-2025:13804 |
| RHEL 8.8 E4S | PyYAML +1 | 5.4.1-1.module+el8.5.0+10613+59a13ec4 | RHSA-2025:15408 |
| RHEL 8.8 E4S | mod_wsgi +1 | 4.7.1-5.module+el8.7.0+16654+645aad7f | RHSA-2025:15408 |
| RHEL 8.8 E4S | numpy +3 | 1.19.4-3.module+el8.5.0+12204+54860423 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-PyMySQL +1 | 0.10.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-cffi +1 | 1.14.3-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-chardet +1 | 3.0.4-19.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-cryptography +1 | 3.3.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-idna +1 | 2.10-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-lxml +1 | 4.6.5-1.module+el8.6.0+13933+9cf0c87c | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-ply +1 | 3.11-10.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-psutil +1 | 5.8.0-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-psycopg2 +3 | 2.8.6-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-pycparser +1 | 2.20-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-pysocks +1 | 1.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-requests +1 | 2.25.0-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-setuptools +3 | 39.2.0-7.el8_8.3 | RHSA-2025:11427 |
| RHEL 8.8 E4S | python-toml +1 | 0.10.1-5.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-urllib3 +1 | 1.25.10-4.module+el8.5.0+11712+ea2d2be1 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python-wheel +2 | 1:0.35.1-4.module+el8.5.0+12204+54860423 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python3.11-setuptools +1 | 65.5.1-2.el8_8.2 | RHSA-2025:13804 |
| RHEL 8.8 E4S | python39 +6 | 3.9.16-1.module+el8.8.0+22374+62aa8e74.4 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python39-pip +2 | 20.2.4-7.module+el8.6.0+13003+6bb2c488 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python39-setuptools +2 | 50.3.2-7.module+el8.8.0+23471+79c1a070 | RHSA-2025:15408 |
| RHEL 8.8 E4S | python39-six +1 | 1.15.0-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.8 E4S | scipy +1 | 1.5.4-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15408 |
| RHEL 8.6 TUS | PyYAML +1 | 5.4.1-1.module+el8.5.0+10613+59a13ec4 | RHSA-2025:15410 |
| RHEL 8.6 TUS | mod_wsgi +1 | 4.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | numpy +3 | 1.19.4-3.module+el8.5.0+12204+54860423 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-PyMySQL +1 | 0.10.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-cffi +1 | 1.14.3-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-chardet +1 | 3.0.4-19.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-cryptography +1 | 3.3.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-idna +1 | 2.10-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-lxml +1 | 4.6.5-1.module+el8.6.0+13933+9cf0c87c | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-ply +1 | 3.11-10.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-psutil +1 | 5.8.0-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-psycopg2 +3 | 2.8.6-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-pycparser +1 | 2.20-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-pysocks +1 | 1.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-requests +1 | 2.25.0-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-setuptools +3 | 39.2.0-7.el8_6.2 | RHSA-2025:11424 |
| RHEL 8.6 TUS | python-toml +1 | 0.10.1-5.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-urllib3 +1 | 1.25.10-4.module+el8.5.0+11712+ea2d2be1 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python-wheel +2 | 1:0.35.1-4.module+el8.5.0+12204+54860423 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python39 +6 | 3.9.7-2.module+el8.6.0+22380+a90b5d28.4 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python39-pip +2 | 20.2.4-7.module+el8.6.0+13003+6bb2c488 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python39-setuptools +2 | 50.3.2-6.module+el8.6.0+23451+54007be4.1 | RHSA-2025:15410 |
| RHEL 8.6 TUS | python39-six +1 | 1.15.0-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 TUS | scipy +1 | 1.5.4-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | PyYAML +1 | 5.4.1-1.module+el8.5.0+10613+59a13ec4 | RHSA-2025:15410 |
| RHEL 8.6 E4S | mod_wsgi +1 | 4.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | numpy +3 | 1.19.4-3.module+el8.5.0+12204+54860423 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-PyMySQL +1 | 0.10.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-cffi +1 | 1.14.3-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-chardet +1 | 3.0.4-19.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-cryptography +1 | 3.3.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-idna +1 | 2.10-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-lxml +1 | 4.6.5-1.module+el8.6.0+13933+9cf0c87c | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-ply +1 | 3.11-10.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-psutil +1 | 5.8.0-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-psycopg2 +3 | 2.8.6-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-pycparser +1 | 2.20-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-pysocks +1 | 1.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-requests +1 | 2.25.0-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-setuptools +3 | 39.2.0-7.el8_6.2 | RHSA-2025:11424 |
| RHEL 8.6 E4S | python-toml +1 | 0.10.1-5.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-urllib3 +1 | 1.25.10-4.module+el8.5.0+11712+ea2d2be1 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python-wheel +2 | 1:0.35.1-4.module+el8.5.0+12204+54860423 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python39 +6 | 3.9.7-2.module+el8.6.0+22380+a90b5d28.4 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python39-pip +2 | 20.2.4-7.module+el8.6.0+13003+6bb2c488 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python39-setuptools +2 | 50.3.2-6.module+el8.6.0+23451+54007be4.1 | RHSA-2025:15410 |
| RHEL 8.6 E4S | python39-six +1 | 1.15.0-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 E4S | scipy +1 | 1.5.4-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | PyYAML +1 | 5.4.1-1.module+el8.5.0+10613+59a13ec4 | RHSA-2025:15410 |
| RHEL 8.6 AUS | mod_wsgi +1 | 4.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | numpy +3 | 1.19.4-3.module+el8.5.0+12204+54860423 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-PyMySQL +1 | 0.10.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-cffi +1 | 1.14.3-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-chardet +1 | 3.0.4-19.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-cryptography +1 | 3.3.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-idna +1 | 2.10-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-lxml +1 | 4.6.5-1.module+el8.6.0+13933+9cf0c87c | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-ply +1 | 3.11-10.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-psutil +1 | 5.8.0-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-psycopg2 +3 | 2.8.6-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-pycparser +1 | 2.20-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-pysocks +1 | 1.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-requests +1 | 2.25.0-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-setuptools +3 | 39.2.0-7.el8_6.2 | RHSA-2025:11424 |
| RHEL 8.6 AUS | python-toml +1 | 0.10.1-5.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-urllib3 +1 | 1.25.10-4.module+el8.5.0+11712+ea2d2be1 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python-wheel +2 | 1:0.35.1-4.module+el8.5.0+12204+54860423 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python39 +6 | 3.9.7-2.module+el8.6.0+22380+a90b5d28.4 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python39-pip +2 | 20.2.4-7.module+el8.6.0+13003+6bb2c488 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python39-setuptools +2 | 50.3.2-6.module+el8.6.0+23451+54007be4.1 | RHSA-2025:15410 |
| RHEL 8.6 AUS | python39-six +1 | 1.15.0-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.6 AUS | scipy +1 | 1.5.4-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15410 |
| RHEL 8.4 EUS Long Life | PyYAML +1 | 5.4.1-1.module+el8.4.0+10484+27ce8e03 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | mod_wsgi +1 | 4.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | numpy +3 | 1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-PyMySQL +1 | 0.10.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-cffi +1 | 1.14.3-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-chardet +1 | 3.0.4-19.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-cryptography +1 | 3.3.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-idna +1 | 2.10-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-lxml +1 | 4.6.2-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-ply +1 | 3.11-10.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-psutil +1 | 5.8.0-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-psycopg2 +3 | 2.8.6-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-pycparser +1 | 2.20-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-pysocks +1 | 1.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-requests +1 | 2.25.0-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-setuptools +3 | 39.2.0-6.el8_4.2 | RHSA-2025:11425 |
| RHEL 8.4 EUS Long Life | python-toml +1 | 0.10.1-5.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-urllib3 +1 | 1.25.10-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python-wheel +2 | 1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python39 +6 | 3.9.2-2.module+el8.4.0+22379+dcc60181.4 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python39-pip +2 | 20.2.4-3.module+el8.4.0+15042+dc5a279b.1 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python39-setuptools +2 | 50.3.2-3.module+el8.4.0+23445+8885b4ac.3 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | python39-six +1 | 1.15.0-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 EUS Long Life | scipy +1 | 1.5.4-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | PyYAML +1 | 5.4.1-1.module+el8.4.0+10484+27ce8e03 | RHSA-2025:15411 |
| RHEL 8.4 AUS | mod_wsgi +1 | 4.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | numpy +3 | 1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-PyMySQL +1 | 0.10.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-cffi +1 | 1.14.3-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-chardet +1 | 3.0.4-19.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-cryptography +1 | 3.3.1-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-idna +1 | 2.10-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-lxml +1 | 4.6.2-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-ply +1 | 3.11-10.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-psutil +1 | 5.8.0-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-psycopg2 +3 | 2.8.6-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-pycparser +1 | 2.20-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-pysocks +1 | 1.7.1-4.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-requests +1 | 2.25.0-2.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-setuptools +3 | 39.2.0-6.el8_4.2 | RHSA-2025:11425 |
| RHEL 8.4 AUS | python-toml +1 | 0.10.1-5.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-urllib3 +1 | 1.25.10-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python-wheel +2 | 1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python39 +6 | 3.9.2-2.module+el8.4.0+22379+dcc60181.4 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python39-pip +2 | 20.2.4-3.module+el8.4.0+15042+dc5a279b.1 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python39-setuptools +2 | 50.3.2-3.module+el8.4.0+23445+8885b4ac.3 | RHSA-2025:15411 |
| RHEL 8.4 AUS | python39-six +1 | 1.15.0-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.4 AUS | scipy +1 | 1.5.4-3.module+el8.4.0+9822+20bf1249 | RHSA-2025:15411 |
| RHEL 8.2 AUS | python-setuptools +3 | 39.2.0-5.el8_2.2 | RHSA-2025:11426 |
| RHEL 7 ELS | python-setuptools | 0.9.8-7.el7_9.2 | RHSA-2025:11984 |
| RHEL 7 ELS | python3-setuptools | 39.2.0-10.el7_9.2 | RHSA-2025:11607 |
| Red Hat Ansible Automation Platform Developer 2 | automation-controller +1 | 4.6.19-1.el8ap | RHSA-2025:14686 |
| Red Hat Ansible Automation Platform Developer 2 | python3.11-django | 4.2.23-1.el8ap | RHSA-2025:14686 |
| Red Hat Ansible Automation Platform 2 | automation-controller +4 | 4.6.19-1.el8ap | RHSA-2025:14686 |
| Red Hat Ansible Automation Platform 2 | python3.11-django | 4.2.23-1.el8ap | RHSA-2025:14686 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | python3-setuptools +1 | 69.0.3-12.el10_0 | ALSA-2025:9940 |
| AlmaLinux 9 | fence-virt +54 | 4.10.0-86.el9_6.7 | ALSA-2025:11463 |
| AlmaLinux 9 | python3-setuptools +1 | 53.0.0-13.el9_6.1 | ALSA-2025:10407 |
| AlmaLinux 9 | python3.11-setuptools +1 | 65.5.1-4.el9_6 | ALSA-2025:13578 |
| AlmaLinux 9 | python3.12-setuptools +1 | 68.2.2-5.el9_6 | ALSA-2025:12834 |
| AlmaLinux 8 | python3-setuptools +2 | 39.2.0-9.el8_10 | ALSA-2025:11036 |
| AlmaLinux 8 | python3.11-setuptools +1 | 65.5.1-4.el8_10 | ALSA-2025:11043 |
| AlmaLinux 8 | python3.12-setuptools-wheel | 68.2.2-5.el8_10 | ALSA-2025:11044 |
| AlmaLinux 8 | python39 +7 | 3.9.20-2.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-Cython | 0.29.21-5.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-PyMySQL | 0.10.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-attrs | 20.3.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-cffi | 1.14.3-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-chardet | 3.0.4-19.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-cryptography | 3.3.1-3.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux 8 | python39-idna | 2.10-4.module_el8.10.0+3849+a48d89aa | ALSA-2025:14900 |
| AlmaLinux 8 | python39-iniconfig | 1.1.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-lxml | 4.6.5-1.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-mod_wsgi | 4.7.1-7.module_el8.10.0+3989+a618fe15.1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-more-itertools | 8.5.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-numpy +2 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-packaging | 20.4-4.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-pip +1 | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux 8 | python39-pluggy | 0.13.1-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-ply | 3.11-10.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-psutil | 5.8.0-4.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-psycopg2 +2 | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux 8 | python39-py | 1.10.0-1.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-pybind11 +1 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-pycparser | 2.20-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-pyparsing | 2.4.7-5.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-pysocks | 1.7.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-pytest | 6.0.2-2.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-requests | 2.25.0-3.module_el8.9.0+3634+fb2a896c | ALSA-2025:14900 |
| AlmaLinux 8 | python39-scipy | 1.5.4-5.module_el8.9.0+3634+fb2a896c | ALSA-2025:14900 |
| AlmaLinux 8 | python39-setuptools +1 | 50.3.2-7.module_el8.10.0+4040+9207bbc0 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-six | 1.15.0-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-toml | 0.10.1-5.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-urllib3 | 1.25.10-5.module_el8.10.0+3765+2f9a457d | ALSA-2025:14900 |
| AlmaLinux 8 | python39-wcwidth | 0.2.5-3.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
| AlmaLinux 8 | python39-wheel +1 | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2025:14900 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | python-setuptools | 69.0.3-12.el10_0 | RLSA-2025:9940 |
| Rocky Linux 9 | fence-agents | 4.10.0-86.el9_6.7 | RLSA-2025:11463 |
| Rocky Linux 9 | python-setuptools | 53.0.0-13.el9_6.1 | RLSA-2025:10407 |
| Rocky Linux 9 | python3.11-setuptools | 65.5.1-4.el9_6 | RLSA-2025:13578 |
| Rocky Linux 9 | python3.12-setuptools | 68.2.2-5.el9_6 | RLSA-2025:12834 |
| Rocky Linux 8 | Cython | 0.29.21-5.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | PyYAML | 5.4.1-1.module+el8.9.0+1418+f0d66789 | RLSA-2025:14900 |
| Rocky Linux 8 | mod_wsgi | 4.7.1-7.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | numpy | 1.19.4-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | pybind11 | 2.7.1-1.module+el8.9.0+1357+a3b80af7 | RLSA-2025:14900 |
| Rocky Linux 8 | pytest | 6.0.2-2.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-PyMySQL | 0.10.1-2.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-attrs | 20.3.0-2.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-cffi | 1.14.3-2.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-chardet | 3.0.4-19.module+el8.9.0+1418+f0d66789 | RLSA-2025:14900 |
| Rocky Linux 8 | python-cryptography | 3.3.1-3.module+el8.10.0+1697+7e517775 | RLSA-2025:14900 |
| Rocky Linux 8 | python-idna | 2.10-4.module+el8.10.0+1809+41195054 | RLSA-2025:14900 |
| Rocky Linux 8 | python-iniconfig | 1.1.1-2.module+el8.9.0+1332+dd574197 | RLSA-2025:14900 |
| Rocky Linux 8 | python-lxml | 4.6.5-1.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-more-itertools | 8.5.0-2.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-packaging | 20.4-4.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-pluggy | 0.13.1-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-ply | 3.11-10.module+el8.9.0+1418+f0d66789 | RLSA-2025:14900 |
| Rocky Linux 8 | python-psutil | 5.8.0-4.module+el8.9.0+1357+a3b80af7 | RLSA-2025:14900 |
| Rocky Linux 8 | python-psycopg2 | 2.8.6-3.module+el8.10.0+1660+b5b6f004 | RLSA-2025:14900 |
| Rocky Linux 8 | python-py | 1.10.0-1.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-pycparser | 2.20-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-pysocks | 1.7.1-4.module+el8.9.0+1418+f0d66789 | RLSA-2025:14900 |
| Rocky Linux 8 | python-requests | 2.25.0-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-setuptools | 39.2.0-9.el8_10 | RLSA-2025:11036 |
| Rocky Linux 8 | python-toml | 0.10.1-5.module+el8.9.0+1332+dd574197 | RLSA-2025:14900 |
| Rocky Linux 8 | python-urllib3 | 1.25.10-5.module+el8.10.0+1545+03246da9 | RLSA-2025:14900 |
| Rocky Linux 8 | python-wcwidth | 0.2.5-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python-wheel | 1:0.35.1-4.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python3.11-setuptools | 65.5.1-4.el8_10 | RLSA-2025:11043 |
| Rocky Linux 8 | python3.12-setuptools | 68.2.2-5.el8_10 | RLSA-2025:11044 |
| Rocky Linux 8 | python39 | 3.9.20-2.module+el8.10.0+2057+30213a2b | RLSA-2025:14900 |
| Rocky Linux 8 | python3x-pip | 20.2.4-9.module+el8.10.0+1721+e52d6351 | RLSA-2025:14900 |
| Rocky Linux 8 | python3x-pyparsing | 2.4.7-5.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | python3x-setuptools | 50.3.2-7.module+el8.10.0+2057+30213a2b | RLSA-2025:14900 |
| Rocky Linux 8 | python3x-six | 1.15.0-3.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
| Rocky Linux 8 | scipy | 1.5.4-5.module+el8.10.0+1582+bc278001 | RLSA-2025:14900 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLES 15 SP6 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLES 15 SP5 | python-setuptools | 67.7.2-150400.3.19.1 | SUSE-SU-2025:01704-1 |
| SLES 15 SP5 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLES 15 SP4 | python-setuptools | 67.7.2-150400.3.19.1 | SUSE-SU-2025:01704-1 |
| SLES 15 SP4 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLES 15 SP4 | python310-setuptools | 67.6.1-150400.4.12.1 | SUSE-SU-2025:01709-1 |
| SLES 15 SP3 | python-setuptools +2 | 40.5.0-150100.6.12.1 | SUSE-SU-2025:01715-1 |
| SLES 15 SP3 | python39-setuptools | 44.1.1-150300.7.12.1 | SUSE-SU-2025:01723-1 |
Show 19 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | python-setuptools | 40.6.2-4.27.1 | SUSE-SU-2025:01695-1 |
| SLES 12 SP5 | python36-setuptools | 44.1.1-8.12.1 | SUSE-SU-2025:01693-1 |
| SLES 12 | python-setuptools | 40.6.2-4.27.1 | SUSE-SU-2025:01695-1 |
| SLES 3 | python-setuptools | 67.7.2-150400.3.19.1 | SUSE-SU-2025:01704-2, SUSE-SU-2025:01704-1 |
| SLES 3 | python312-setuptools | 68.1.2-150600.3.6.1 | SUSE-SU-2025:01774-1 |
| SLES 3 | python313-setuptools | 72.1.0-150700.3.3.1 | SUSE-SU-2025:01744-1 |
| SLES for SAP 15 SP5 | python-setuptools | 67.7.2-150400.3.19.1 | SUSE-SU-2025:01704-1 |
| SLES for SAP 15 SP5 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLES for SAP 15 SP4 | python-setuptools | 67.7.2-150400.3.19.1 | SUSE-SU-2025:01704-1 |
| SLES for SAP 15 SP4 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLES for SAP 15 SP4 | python310-setuptools | 67.6.1-150400.4.12.1 | SUSE-SU-2025:01709-1 |
| SLES for SAP 15 SP3 | python-setuptools +2 | 40.5.0-150100.6.12.1 | SUSE-SU-2025:01715-1 |
| SLES for SAP 15 SP3 | python39-setuptools | 44.1.1-150300.7.12.1 | SUSE-SU-2025:01723-1 |
| SLE Micro 6.1 | python-setuptools | 70.0.0-slfo.1.1_2.1 | SUSE-SU-2025:20462-1 |
| SLE Micro 6.0 | python-setuptools | 69.0.2-3.1 | SUSE-SU-2025:20412-1 |
| SLE Micro 5.5 | python3-setuptools | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLE Micro 5.4 | python3-setuptools | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLE Micro 5.3 | python3-setuptools | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLE Micro 5.2 | python-setuptools | 40.5.0-150100.6.12.1 | SUSE-SU-2025:01715-1 |
| SLE Micro 5.1 | python-setuptools | 40.5.0-150100.6.12.1 | SUSE-SU-2025:01715-1 |
| SLE HPC 15 SP5 | python-setuptools | 67.7.2-150400.3.19.1 | SUSE-SU-2025:01704-1 |
| SLE HPC 15 SP5 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLE HPC 15 SP4 | python-setuptools | 67.7.2-150400.3.19.1 | SUSE-SU-2025:01704-1 |
| SLE HPC 15 SP4 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SLE HPC 15 SP4 | python310-setuptools | 67.6.1-150400.4.12.1 | SUSE-SU-2025:01709-1 |
| SLE HPC 15 SP3 | python-setuptools +2 | 40.5.0-150100.6.12.1 | SUSE-SU-2025:01715-1 |
| SLE HPC 15 SP3 | python39-setuptools | 44.1.1-150300.7.12.1 | SUSE-SU-2025:01723-1 |
| SUSE Manager Server 4.3 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SUSE Manager Proxy 4.3 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| SUSE Enterprise Storage 7.1 | python-setuptools +2 | 40.5.0-150100.6.12.1 | SUSE-SU-2025:01715-1 |
| SUSE Enterprise Storage 7.1 | python39-setuptools | 44.1.1-150300.7.12.1 | SUSE-SU-2025:01723-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bazel-rules-python | 2.3.3-1.1 | openSUSE-SU-2026:11831-1 |
| openSUSE Tumbleweed | oci-cli | 3.76.2-1.1 | openSUSE-SU-2026:10539-1 |
| openSUSE Leap 15.6 | python-setuptools +1 | 67.7.2-150400.3.19.1 | SUSE-SU-2025:01704-1 |
| openSUSE Leap 15.6 | python3-setuptools +2 | 44.1.1-150400.9.12.1 | SUSE-SU-2025:01810-1 |
| openSUSE Leap 15.6 | python310-setuptools | 67.6.1-150400.4.12.1 | SUSE-SU-2025:01709-1 |
| openSUSE Leap 15.6 | python312-setuptools | 68.1.2-150600.3.6.1 | SUSE-SU-2025:01774-1 |
| openSUSE Leap 15.6 | python39-setuptools | 44.1.1-150300.7.12.1 | SUSE-SU-2025:01723-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | python3-setuptools +1 | 59.6.0-2.amzn2023.0.6 | ALAS2023-2025-1005 |
| Amazon Linux 2023 | python3.11-setuptools +1 | 65.5.1-2.amzn2023.0.7 | ALAS2023-2025-1003 |
| Amazon Linux 2023 | python3.12-setuptools +1 | 68.2.2-4.amzn2023.0.3 | ALAS2023-2025-1004 |
| Amazon Linux 2 | python2-setuptools | 41.2.0-4.amzn2.0.6 | ALAS2-2025-2877 |
| Amazon Linux 2 | python3-setuptools +1 | 49.1.3-1.amzn2.0.6 | ALAS2-2025-2876 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python-setuptools | 69.0.3-5 | — |
| Azure Linux 3 | setuptool | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | python3-setuptools +1 | 69.0.3-12.el10_0 | ELSA-2025-9940 |
| Oracle Linux 9 | fence-agents-all +39 | 4.10.0-86.el9_6.7 | ELSA-2025-11463 |
| Oracle Linux 9 | python3-setuptools +1 | 53.0.0-13.el9_6.1 | ELSA-2025-10407 |
| Oracle Linux 9 | python3.11-setuptools +1 | 65.5.1-4.el9_6 | ELSA-2025-13578 |
| Oracle Linux 9 | python3.12-setuptools +1 | 68.2.2-5.el9_6 | ELSA-2025-12834 |
| Oracle Linux 8 | python3-setuptools +2 | 39.2.0-9.el8_10 | ELSA-2025-11036 |
| Oracle Linux 8 | python3.11-setuptools +1 | 65.5.1-4.el8_10 | ELSA-2025-11043 |
| Oracle Linux 8 | python3.12-setuptools +1 | 68.2.2-5.el8_10 | ELSA-2025-11044 |
| Oracle Linux 8 | python39 +7 | 3.9.20-2.module+el8.10.0+90647+49247197 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-Cython | 0.29.21-5.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-PyMySQL | 0.10.1-2.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-attrs | 20.3.0-2.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-cffi | 1.14.3-2.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-chardet | 3.0.4-19.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-cryptography | 3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-idna | 2.10-4.module+el8.10.0+90341+71ca88f4 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-iniconfig | 1.1.1-2.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-lxml | 4.6.5-1.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-mod_wsgi | 4.7.1-7.module+el8.10.0+90647+49247197.1 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-more-itertools | 8.5.0-2.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-numpy +2 | 1.19.4-3.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-packaging | 20.4-4.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-pip +1 | 20.2.4-9.module+el8.10.0+90269+2fa22b99 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-pluggy | 0.13.1-3.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-ply | 3.11-10.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-psutil | 5.8.0-4.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-psycopg2 +2 | 2.8.6-3.module+el8.10.0+90269+2fa22b99 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-py | 1.10.0-1.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-pybind11 +1 | 2.7.1-1.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-pycparser | 2.20-3.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-pyparsing | 2.4.7-5.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-pysocks | 1.7.1-4.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-pytest | 6.0.2-2.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-pyyaml | 5.4.1-1.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-requests | 2.25.0-3.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-scipy | 1.5.4-5.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-setuptools +1 | 50.3.2-7.module+el8.10.0+90647+49247197 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-six | 1.15.0-3.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-toml | 0.10.1-5.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-urllib3 | 1.25.10-5.module+el8.10.0+90269+2fa22b99 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-wcwidth | 0.2.5-3.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 8 | python39-wheel +1 | 1:0.35.1-4.module+el8.9.0+90016+9c2d6573 | ELSA-2025-14900 |
| Oracle Linux 7 | python-setuptools | 0.9.8-7.0.3.el7 | ELSA-2025-11984 |
| Oracle Linux 7 | python3-setuptools | 39.2.0-10.0.5.el7 | ELSA-2025-11607 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aws-cli-2 +1 | 2.27.60-r1 | — |
| Wolfi rolling | checkov | 3.2.432-r0 | — |
| Wolfi rolling | dask-gateway | 2025.4.0-r7 | — |
| Wolfi rolling | datadog-agent-7.73 +1 | 7.73.3-r23 | — |
| Wolfi rolling | datadog-agent-7.77 +1 | 7.77.3-r18 | — |
| Wolfi rolling | datadog-agent-7.79 +1 | 7.79.2-r8 | — |
| Wolfi rolling | datadog-agent-7.80 +1 | 7.80.4-r6 | — |
| Wolfi rolling | emissary +6 | 3.10.0-r4 | — |
| Wolfi rolling | jwt-tool | 2.3.0-r1 | — |
| Wolfi rolling | kserve +9 | 0.16.0-r6 | — |
| Wolfi rolling | py3.10-pipenv +3 | 2026.6.2-r1 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 2 repositories
-
ahmedreda38/CVE-2025-47273-PoC ★ 1 · Mar 15, 2026
CVE-2025-47273 is a high-severity path traversal vulnerability in the setuptools library ,specifically version 78.1.0 .
-
AliElKhatteb/CVE-2025-47273-POC ★ 1 · Mar 15, 2026
CVE-2025-47273 — setuptools path traversal PoC
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | setuptools | < 78.1.1 | 78.1.1 | GHSA-5rjg-fvgr-3xxf |
Advisories 50
- WID-SEC-2025-1433 Red Hat Enterprise Linux (python-setuptools): Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Nov 12, 2026
- WID-SEC-2026-3046 IBM Concert: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026
- WID-SEC-2026-2189 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026
- ALSA-2025:11463 Moderate: fence-agents security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:12834 Moderate: python3.12-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:13578 Moderate: python3.11-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:10407 Moderate: python-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9940 Moderate: python-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:14900 Moderate: python39:3.9 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:11036 Moderate: python-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:11043 Moderate: python3.11-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:11044 Moderate: python3.12-setuptools security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:9940 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:15411 Red Hat Security Advisory: python39:3.9 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:15408 Red Hat Security Advisory: python39:3.9 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:15410 Red Hat Security Advisory: python39:3.9 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:14900 Red Hat Security Advisory: python39:3.9 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:14686 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:13804 Red Hat Security Advisory: python3.11-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:13803 Red Hat Security Advisory: python3.11-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:13668 Red Hat Security Advisory: python3.12-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:13669 Red Hat Security Advisory: python3.11-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:12834 Red Hat Security Advisory: python3.12-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:13578 Red Hat Security Advisory: python3.11-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:12020 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11984 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11868 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11584 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11607 Red Hat Security Advisory: python3-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11463 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11464 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11427 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11425 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11426 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11424 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11102 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11044 Red Hat Security Advisory: python3.12-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11101 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11036 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:11043 Red Hat Security Advisory: python3.11-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:10407 Red Hat Security Advisory: python-setuptools security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- openSUSE-SU-2026:11831-1 bazel-rules-python-source-2.3.3-1.1 on GA media SUSE / openSUSE Security Updates · Sep 22, 2026
- USN-7544-1 python-setuptools, setuptools vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026
- WID-SEC-2026-0778 Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
- openSUSE-SU-2026:10539-1 oci-cli-3.76.2-1.1 on GA media SUSE / openSUSE Security Updates · Apr 14, 2026
- SUSE-SU-2025:20462-1 Security update for python-setuptools SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:01810-1 Security update for python3-setuptools SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:01695-1 Security update for python-setuptools SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20412-1 Security update for python-setuptools SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:01693-1 Security update for python36-setuptools SUSE / openSUSE Security Updates · Mar 23, 2026
References
- https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf
- https://github.com/pypa/setuptools/issues/4946
- https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b
- https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88