Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-11044

Опубликовано: 15 июл. 2025
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2025-11044: python3.12-setuptools security update (MODERATE)

[68.2.2-5]

  • Security fix for CVE-2025-47273 Resolves: RHEL-101131

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

python3.12-setuptools

68.2.2-5.el8_10

python3.12-setuptools-wheel

68.2.2-5.el8_10

Oracle Linux x86_64

python3.12-setuptools

68.2.2-5.el8_10

python3.12-setuptools-wheel

68.2.2-5.el8_10

Связанные CVE

Связанные уязвимости

CVSS3: 8.8
ubuntu
3 месяца назад

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.

CVSS3: 7.1
redhat
3 месяца назад

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.

CVSS3: 8.8
nvd
3 месяца назад

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.

CVSS3: 8.8
msrc
около 2 месяцев назад

Описание отсутствует

CVSS3: 8.8
debian
3 месяца назад

setuptools is a package that allows users to download, build, install, ...