Lucene search
AlmaLinuxALSA-2023:0952HistoryFeb 28, 2023 - 12:00 a.m.
Moderate: python-setuptools security update
2023-02-2800:00:00
errata.almalinux.org
11
python-setuptools package
security update
cve-2022-40897
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
0.005 Low
EPSS
Percentile
77.5%
The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages.
Security Fix(es):
- pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | noarch | python3-setuptools-wheel | < 53.0.0-10.el9_1.1 | python3-setuptools-wheel-53.0.0-10.el9_1.1.noarch.rpm |
| almalinux | 9 | noarch | python3-setuptools | < 53.0.0-10.el9_1.1 | python3-setuptools-53.0.0-10.el9_1.1.noarch.rpm |
Related
redhatcve
redhatcve
CVE-2022-40897
2023-01-05 18:35:06
nessus
nessus
EulerOS 2.0 SP10 : python-setuptools (EulerOS-SA-2023-1563)
2023-03-19 00:00:00
AlmaLinux 9 : python-setuptools (ALSA-2023:0952)
2023-02-28 00:00:00
cvelist
cvelist
CVE-2022-40897
2022-12-22 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0093-1)
2023-01-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0159-1)
2023-01-27 00:00:00
ibm
ibm
redhat
redhat
(RHSA-2023:0952) Moderate: python-setuptools security update
2023-02-28 07:52:59
(RHSA-2023:0835) Moderate: python-setuptools security update
2023-02-21 08:46:22
(RHSA-2023:7395) Moderate: python-setuptools security update
2023-11-21 09:47:07
freebsd
freebsd
py39-setuptools58 -- denial of service vulnerability
2022-12-23 00:00:00
py27-setuptools44 -- denial of service vulnerability
2022-12-23 00:00:00
py39-setuptools -- denial of service vulnerability
2022-12-23 00:00:00
osv
osv
Moderate: python-setuptools security update
2023-04-06 15:53:31
Moderate: python-setuptools security update
2023-02-28 00:00:00
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
2022-12-23 00:30:23
github
github
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
2022-12-23 00:30:23
fedora
fedora
[SECURITY] Fedora 36 Update: python-setuptools-59.6.0-4.fc36
2023-04-30 01:24:06
[SECURITY] Fedora 37 Update: python-setuptools-62.6.0-3.fc37
2023-05-01 01:29:09
amazon
amazon
Medium: python2-setuptools
2023-03-02 22:35:00
Medium: python-setuptools
2023-08-03 18:10:00
rocky
rocky
python-setuptools security update
2023-02-22 01:08:44
python-setuptools security update
2023-04-06 15:53:31
python39:3.9 and python39-devel:3.9 security update
2024-06-14 13:59:30
nvd
nvd
CVE-2022-40897
2022-12-23 00:15:13
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-12-23 08:31:40
almalinux
almalinux
Moderate: python-setuptools security update
2023-02-21 00:00:00
Moderate: python39:3.9 and python39-devel:3.9 security update
2024-05-22 00:00:00
Moderate: python27:2.7 security update
2024-05-22 00:00:00
oraclelinux
oraclelinux
python-setuptools security update
2023-02-22 00:00:00
python3-setuptools security update
2023-05-23 00:00:00
python-setuptools security update
2023-02-28 00:00:00
ubuntu
ubuntu
Setuptools vulnerability
2023-01-23 00:00:00
gentoo
gentoo
Setuptools: Denial of Service
2024-05-05 00:00:00
cve
cve
CVE-2022-40897
2022-12-23 00:15:13
mageia
mageia
Updated python-setuptools packages fix security vulnerability
2023-07-07 08:54:45
cbl_mariner
cbl_mariner
CVE-2022-40897 affecting package python-setuptools 40.2.0-6
2023-01-12 20:54:53
prion
prion
Denial of service
2022-12-23 00:15:00
ubuntucve
ubuntucve
CVE-2022-40897
2022-12-23 00:00:00
redos
redos
ROS-20230428-05
2023-04-28 00:00:00
debiancve
debiancve
CVE-2022-40897
2022-12-23 00:15:13
cloudfoundry
cloudfoundry
USN-5817-1: Setuptools vulnerability | Cloud Foundry
2023-02-24 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0538
2023-02-26 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0427
2023-07-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
0.005 Low
EPSS
Percentile
77.5%
Related for ALSA-2023:0952