RHSA-2024:5279: Important: python3.11-setuptools security update
Important: python3.11-setuptools security update
Other sources
Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software that requires pkgresources.Security Fix(es): pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools (CVE-2024-6345) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:5279?
The severity of RHSA-2024:5279 is classified as Important.
How do I fix RHSA-2024:5279?
You can fix RHSA-2024:5279 by updating the python3.11-setuptools package to version 65.5.1-2.el9_4.1.
What vulnerabilities does RHSA-2024:5279 address?
RHSA-2024:5279 addresses security vulnerabilities in the python3.11-setuptools package used for building and distributing Python packages.
Which systems are affected by RHSA-2024:5279?
Affected systems include various Red Hat Enterprise Linux versions across architectures like x86_64, ARM, and IBM z Systems.
Is there a specific package version related to RHSA-2024:5279?
Yes, the specific package version to mitigate RHSA-2024:5279 is 65.5.1-2.el9_4.1 for python3.11-setuptools.