USN-5817-1 python-setuptools, setuptools vulnerability

Sebastian Chnelik discovered that setuptools incorrectly handled certain regex inputs. An attacker could possibly use this issue to cause a denial of service...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Setuptools vulnerability (USN-5817-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5817-1 advisory. Sebastian Chnelik discovered that setuptools incorrectly handled certain regex inputs. An attacker could possibly use this iss...

SUSE SLES12 Security Update : python-setuptools (SUSE-SU-2023:0093-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0093-1 advisory. - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667. Tenable has extract...

SUSE SLES12 Security Update : python36-setuptools (SUSE-SU-2023:0094-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0094-1 advisory. - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667. Tenable has extract...

SUSE: Security Advisory (SUSE-SU-2023:0093-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0094-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:0094-1 Security update for python36-setuptools

This update for python36-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667...

SUSE-SU-2023:0093-1 Security update for python-setuptools

This update for python-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python310-setuptools (SUSE-SU-2023:0091-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0091-1 advisory. - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML...

SUSE-SU-2023:0091-1 Security update for python310-setuptools

This update for python310-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667...

CVE-2022-40897 affecting package python-setuptools 40.2.0-6

CVE-2022-40897 affecting package python-setuptools 40.2.0-6. A patched version of the package is available...

OESA-2023-1004 python-setuptools security update

Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages.This package contains a python wheel of setuptools to use with venv. Security Fixes: Python Packaging...

CVE-2022-40897

A flaw was found in Python Setuptools due to a regular expression Denial of Service ReDoS present in packageindex.py. This issue could allow a remote attacker to cause a denial of service via HTML in a crafted package or custom PackageIndex page...

Regular Expression Denial Of Service (ReDoS)

setuptools is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the REL attribute in the findexternallinks function of packageindex.py, allowing an attacker to crash the application by passing a malicious HTML...

pex (>=0.8.2, <=0.8.6) potentially affected by CVE-2022-40897 via setuptools (7.0.0)

setuptools PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.8.2, =0.8.6 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

aspect-ratio (>=0.4.0, <=0.5.0), autoviz (>=0.1.38, <=0.1.58) +33 more potentially affected by CVE-2022-40897 via setuptools (60.10.0)

setuptools PYPI version 60.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aspect-ratio =0.4.0, =0.1.38, =20211210.1.0, =0.2.0, =0.1.0, =0.3.22, =0.1.0, =0.12.0, =0.0.0, =0.0.13, =0.0.16 and more Source cves:...

cvxpy (>=1.1.22, <=1.3.0), cvxpy-base (>=1.1.22, <=1.3.0) +3 more potentially affected by CVE-2022-40897 via setuptools (64.0.2)

setuptools PYPI version 64.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cvxpy =1.1.22, =1.1.22, =0.0.0, =0.2.0, =0.2.3 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

cytopt (>=0.0.4, <=0.0.9), mbox-to-json (>=1.0.1, <=1.0.3) +2 more potentially affected by CVE-2022-40897 via setuptools (59.4.0)

setuptools PYPI version 59.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cytopt =0.0.4, =1.0.1, =0.1.4, =0.1.5 - sha256sr 0.1.9 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

simple-zuora-client (0.1.6), vbet (>=6.20.3, <=6.20.4) potentially affected by CVE-2022-40897 via setuptools (49.3.2)

setuptools PYPI version 49.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - simple-zuora-client 0.1.6 - vbet =6.20.3, =6.20.4 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

fizzbuzz-a-a-r-2 (0.1.0) potentially affected by CVE-2022-40897 via setuptools (57.2.0)

setuptools PYPI version 57.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - fizzbuzz-a-a-r-2 0.1.0 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...