[ALSA-2024:5533] Important: python3.12-setuptools security update
Type:
security
Severity:
important
Release date:
2024-08-21
Description:
Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources. Security Fix(es): * pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
noarch python3.12-setuptools-wheel-68.2.2-3.el9_4.1.noarch.rpm 131b0a0f2d74e9412a6cc9f472ba83b59d41a1569d92fe31ea3e11e061212f48
noarch python3.12-setuptools-68.2.2-3.el9_4.1.noarch.rpm 2279cfb9ea221569984b787a7fec27b7b50af47b8f76a308565dad2b0bb65d7a
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.