SUSE-SU-2025:01695-1

UNKNOWN

Security update for python-setuptools

Published May 23, 2025

Modified 9 months ago

Fix available

Details

This update for python-setuptools fixes the following issues:

CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).

Affected Packages

python-setuptools

SUSE Linux Enterprise Module for Public Cloud 12SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

40.6.2-4.27.1

python3-setuptools

SUSE Linux Enterprise Module for Public Cloud 12SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

40.6.2-4.27.1

References

Upstream

Ecosystems

Timeline

PublishedMay 23, 2025

ModifiedMay 23, 2025

SUSE-SU-2025:01695-1 | Mondoo Vulnerability Intelligence