Red Hat Security Advisory

RHSA-2024:5389

python-setuptools security update

Released 2024-08-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.9.0) python-setuptools-53.0.0-12.el9_0, python3-setuptools-53.0.0-12.el9_0, python3-setuptools-wheel-53.0.0-12.el9_0

TI-2024-05888 CVE-2024-6345 · GHSA-cx63-2mw6-8hw5

HIGH 73

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01939 Published 2024-07-15 Partial fix · 70.0, 70.0.0 CWE-94