Red Hat Security Advisory

RHSA-2023:0835

python-setuptools security update

Released 2023-02-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) platform-python-setuptools-39.2.0-6.el8_7.1, python-setuptools-39.2.0-6.el8_7.1, python3-setuptools-39.2.0-6.el8_7.1 +1

Fixes 1 record

TI-2022-19471 CVE-2022-40897 · GHSA-r9hx-vwmv-q579

Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to…

LOW 31

Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02632 Published 2022-12-22 Partial fix · 65.5.1 CWE-1333