Advisories » MGASA-2025-0288

Updated python-setuptools packages fix security vulnerability

Publication date: 13 Nov 2025
Modification date: 13 Nov 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-47273

Description

Setuptools has a path traversal vulnerability in PackageIndex.download
that leads to Arbitrary File Write. (CVE-2025-47273)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34390
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QJ375SF7FQYZCXBVGMYYQXBL5RK5ORGD/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273

SRPMS

9/core

• python-setuptools-65.5.0-3.2.mga9