Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-9940

Опубликовано: 30 июн. 2025
Источник: oracle-oval
Платформа: Oracle Linux 10

Описание

ELSA-2025-9940: python-setuptools security update (MODERATE)

[69.0.3-12]

  • Security fix for CVE-2025-47273

[69.0.3-11]

  • Change the test source location

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

python3-setuptools

69.0.3-12.el10_0

python3-setuptools-wheel

69.0.3-12.el10_0

Oracle Linux x86_64

python3-setuptools

69.0.3-12.el10_0

python3-setuptools-wheel

69.0.3-12.el10_0

Связанные CVE

Связанные уязвимости

CVSS3: 8.8
ubuntu
3 месяца назад

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.

CVSS3: 7.1
redhat
3 месяца назад

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.

CVSS3: 8.8
nvd
3 месяца назад

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.

CVSS3: 8.8
msrc
около 2 месяцев назад

Описание отсутствует

CVSS3: 8.8
debian
3 месяца назад

setuptools is a package that allows users to download, build, install, ...