Important: python3.11-setuptools

Issue Overview: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the...

Important: python-setuptools

Issue Overview: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the...

Important: python3.12-setuptools

Issue Overview: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the...

CVE-2025-4435 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-4138 vulnerabilities

Vulnerabilities for packages: python...

GHSA-4G4G-FQW4-PRP2 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-4330 vulnerabilities

Vulnerabilities for packages: python...

CVE-2024-12718 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-4517 vulnerabilities

Vulnerabilities for packages: python...

CVE-2024-12718 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-4330 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-4138 vulnerabilities

Vulnerabilities for packages: python...

GHSA-2PG8-H2J6-28XM vulnerabilities

Vulnerabilities for packages: python...

GHSA-68PJ-XRP5-VCCJ vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-4517 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-4435 vulnerabilities

Vulnerabilities for packages: python...

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.23-i586-1slack15.0.txz: Upgraded. This update fixes security issues: gh-135034: CVE-2024-12718 CVE-2025-4138 CVE-2025-433...

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks

Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency wallets, erase entire codebases after installation, and exfiltrate Telegram API tokens, once again demonstrating the variety of supply chain threats lurking in...

python36:3.6 security update

python36 python-distro python-docs python-docutils python-nose python-pygments python-pymongo 3.7.0-2 - Backport CVE-2024-5629...

Backdoors in Python and NPM Packages Target Windows and Linux

Checkmarx uncovers cross-ecosystem attack: fake Python and NPM packages plant backdoor on Windows and Linux, enabling data theft plus remote control...