Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
Python Setuptools Security Update on Red Hat Systems
published 1 year ago
Summary
A security update is available for Python's Setuptools package on Red Hat systems. This update fixes a potential security issue that could allow an attacker to execute arbitrary code. It's recommended to update your system to the latest version of Setuptools to ensure the security of your Python applications.
What to do
- Update redhat platform-python-setuptools to version 0:39.2.0-6.el8_4.2.
- Update redhat python-setuptools to version 0:39.2.0-6.el8_4.2.
- Update redhat python3-setuptools to version 0:39.2.0-6.el8_4.2.
- Update redhat python3-setuptools-wheel to version 0:39.2.0-6.el8_4.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_aus:8.4::baseos | redhat | platform-python-setuptools |
< 0:39.2.0-6.el8_4.2 Fix: upgrade to 0:39.2.0-6.el8_4.2
|
| Red Hat:rhel_aus:8.4::baseos | redhat | python-setuptools |
< 0:39.2.0-6.el8_4.2 Fix: upgrade to 0:39.2.0-6.el8_4.2
|
| Red Hat:rhel_aus:8.4::baseos | redhat | python3-setuptools |
< 0:39.2.0-6.el8_4.2 Fix: upgrade to 0:39.2.0-6.el8_4.2
|
| Red Hat:rhel_aus:8.4::baseos | redhat | python3-setuptools-wheel |
< 0:39.2.0-6.el8_4.2 Fix: upgrade to 0:39.2.0-6.el8_4.2
|
| Red Hat:rhel_eus_long_life:8.4::baseos | redhat | platform-python-setuptools |
< 0:39.2.0-6.el8_4.2 Fix: upgrade to 0:39.2.0-6.el8_4.2
|
| Red Hat:rhel_eus_long_life:8.4::baseos | redhat | python-setuptools |
< 0:39.2.0-6.el8_4.2 Fix: upgrade to 0:39.2.0-6.el8_4.2
|
| Red Hat:rhel_eus_long_life:8.4::baseos | redhat | python3-setuptools |
< 0:39.2.0-6.el8_4.2 Fix: upgrade to 0:39.2.0-6.el8_4.2
|
| Red Hat:rhel_eus_long_life:8.4::baseos | redhat | python3-setuptools-wheel |
< 0:39.2.0-6.el8_4.2 Fix: upgrade to 0:39.2.0-6.el8_4.2
|
Original advisory text
Red Hat Security Advisory: python-setuptools security update
References
- https://access.redhat.com/errata/RHSA-2025:11425 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366982 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11425.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-47273 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-47273 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-47273 Vendor Advisory
- https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558... Third Party Advisory
- https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb... Third Party Advisory
- https://github.com/pypa/setuptools/issues/4946 Third Party Advisory
- https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published22 Jul 2025
Updated6 May 2026
First seen6 May 2026
Sources
RHSA-2025:11425 · OSV
Track software like this
Free during beta