Red Hat Security Advisory

RHSA-2024:5279

python3.11-setuptools security update

Released 2024-08-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) python3.11-setuptools-65.5.1-2.el9_4.1, python3.11-setuptools-wheel-65.5.1-2.el9_4.1

TI-2024-05888 CVE-2024-6345 · GHSA-cx63-2mw6-8hw5

HIGH 73

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01939 Published 2024-07-15 Partial fix · 70.0, 70.0.0 CWE-94