Important: python-setuptools

Issue Overview: A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptibl...

RHEL 9 : python-setuptools (RHSA-2024:5389)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5389 advisory. The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of...

RHEL 9 : python3.11-setuptools (RHSA-2024:5279)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5279 advisory. Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially...

SUSE SLES15: python2-setuptools / python3-setuptools / python3-setuptools-test / etc (SUSE-SU-2024:2899-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2899-1 advisory. - CVE-2024-6345: Fixed code execution via download functions in the packageindex module bsc1228105 Tenable has extracted the preceding...

SUSE SLES12 Security Update : python-setuptools (SUSE-SU-2024:2900-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2900-1 advisory. - CVE-2024-6345: Fixed code execution via download functions in the packageindex module bsc1228105 Tenable has extracted the preceding...

SUSE SLES15 / openSUSE 15 Security Update : python39-setuptools (SUSE-SU-2024:2906-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2906-1 advisory. - CVE-2024-6345: Fixed code execution via download functions in the packageindex module bsc1228105 Tenable has extracted the...

pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

A flaw was found in the packageindex module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to co...

Important: Red Hat Security Advisory: python-setuptools security update

An update for python-setuptools is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

SUSE-SU-2024:2907-1 Security update for python310-setuptools

This update for python310-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the packageindex module bsc1228105...

SUSE-SU-2024:2906-1 Security update for python39-setuptools

This update for python39-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the packageindex module bsc1228105...

SUSE-SU-2024:2904-1 Security update for python312-setuptools

This update for python312-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the packageindex module bsc1228105...

SUSE-SU-2024:2900-1 Security update for python-setuptools

This update for python-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the packageindex module bsc1228105...

SUSE-SU-2024:2899-1 Security update for python-setuptools

This update for python-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the packageindex module bsc1228105...

Oracle Linux 9 : python3.11-setuptools (ELSA-2024-5279)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5279 advisory. 65.5.1-2.1 - Security fix for CVE-2024-6345 Resolves: RHEL-50490 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 39 : python3.6 (2024-e27230c6c3)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-e27230c6c3 advisory. Security fix for CVE-2024-6345 in the bundled setuptools wheel. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 40 : python2.7 (2024-4c8a159e6e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4c8a159e6e advisory. Security fix for CVE-2024-6345 in the bundled setuptools wheel. Tenable has extracted the preceding description block directly from the Fedora security...

python3.11-setuptools security update

65.5.1-2.1 - Security fix for CVE-2024-6345 Resolves: RHEL-50490...

Security Bulletin: AIX is affected by information disclosure (CVE-2023-45803) and arbitrary code execution (CVE-2024-6345) due to Python

Summary Vulnerabilities in Python could allow a remote attacker to obtain sensitive information CVE-2023-45803 or execute arbitrary code CVE-2024-6345. Python is used by AIX as part of Ansible node management automation. Vulnerability Details CVEID:CVE-2023-45803 DESCRIPTION: urllib3 could allow ...

AIX is affected by information disclosure (CVE-2023-45803) and arbitrary code execution (CVE-2024-6345) due to Python

IBM SECURITY ADVISORY First Issued: Mon Aug 12 15:22:35 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory11.asc Security Bulletin: AIX is affected by information disclosure CVE-2023-45803 and arbitrary code executi...

Fedora: Security Advisory (FEDORA-2024-9ed182a5d3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...