The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-lxmlUpgrade python2-pysocksUpgrade python2-pyUpgrade python2-babelUpgrade python2-pipUpgrade python39-chardetUpgrade python39-pip-wheelUpgrade python39-CythonUpgrade python-psycopg2-docUpgrade python3-setuptoolsUpgrade python2-pluggyUpgrade python39-scipyUpgrade python39-debugUpgrade python39-psycopg2Upgrade python39-wheel-wheelUpgrade python39-packagingUpgrade python2-backports-ssl_match_hostnameUpgrade python-nose-docsUpgrade python39-psutilUpgrade python2-chardetUpgrade python2-pytzUpgrade python2-pip-wheelUpgrade python2-markupsafeUpgrade python39-wcwidthUpgrade python39-attrsUpgrade python39-numpyUpgrade python2Upgrade python2-sixUpgrade python2-setuptools-wheelUpgrade python39-mod_wsgiUpgrade python2-idnaUpgrade python39-lxmlUpgrade python2-jinja2Upgrade python2-pygmentsUpgrade python2-wheel-wheelUpgrade python2-pymongoUpgrade python2-pymongo-gridfsUpgrade python2-docs-infoUpgrade python2-numpy-f2pyUpgrade python39-numpy-docUpgrade python2-backportsUpgrade python2-urllib3Upgrade python39-psycopg2-docUpgrade python39-idleUpgrade python2-numpyUpgrade python2-mockUpgrade python39-setuptools-wheelUpgrade python2-pytest-mockUpgrade python2-wheelUpgrade python39-pybind11-develUpgrade python39-plyUpgrade python-sqlalchemy-docUpgrade python39-pybind11Upgrade python39-cryptographyUpgrade python2-setuptools_scmUpgrade python2-coverageUpgrade python2-noseUpgrade python39-numpy-f2pyUpgrade python39-iniconfigUpgrade python39-pyparsingUpgrade python2-rpm-macrosUpgrade python2-ipaddressUpgrade python2-psycopg2-debugUpgrade python39-setuptoolsUpgrade python2-toolsUpgrade python39-psycopg2-testsUpgrade python2-tkinterUpgrade python39-pipUpgrade python2-docsUpgrade python39-PyMySQLUpgrade python2-funcsigsUpgrade python39-pyUpgrade python39-libsUpgrade python2-PyMySQLUpgrade python39-develUpgrade python2-scipyUpgrade python2-attrsUpgrade python39-urllib3Upgrade python39-pytestUpgrade python2-psycopg2-testsUpgrade python2-sqlalchemyUpgrade python2-virtualenvUpgrade python39-wheelUpgrade python39-tkinterUpgrade python39-rpm-macrosUpgrade python39-tomlUpgrade python39-idnaUpgrade python2-testUpgrade python2-dnsUpgrade python39-more-itertoolsUpgrade python2-CythonUpgrade python2-docutilsUpgrade python2-develUpgrade python2-numpy-docUpgrade python2-requestsUpgrade python39-pluggyUpgrade python39-pyyamlUpgrade python2-pytestUpgrade babelUpgrade python39-pysocksUpgrade python39-pycparserUpgrade python39-testUpgrade python39-sixUpgrade python2-psycopg2Upgrade python2-libsUpgrade python2-debugUpgrade python39Upgrade python2-bsonUpgrade python2-pyyamlUpgrade python39-requestsUpgrade platform-python-setuptoolsUpgrade python3-setuptools-wheelUpgrade python2-setuptoolsUpgrade python39-cffi | Feb 22, 2023 | Dec 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python38-setuptoolsUpgrade python-setuptools-wheelUpgrade python3-setuptoolsUpgrade python2-setuptools | Mar 7, 2023 | Dec 23, 2022 |
| Centos_linux | — | Upgrade python3-setuptoolsUpgrade platform-python-setuptoolsUpgrade python3-setuptools-wheel | Feb 22, 2023 | Dec 23, 2022 |
| Debian | — | Upgrade setuptools | Jul 30, 2024 | Dec 23, 2022 |
| Freebsd | — | Upgrade py27-setuptools44Upgrade py39-setuptools58Upgrade py39-setuptools | Apr 14, 2023 | Apr 9, 2023 |
| Gentoo Linux | — | Upgrade dev-python/setuptools. | May 6, 2024 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | Mar 20, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | May 8, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-setuptools | Jun 9, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-setuptools-wheelUpgrade python3-setuptoolsUpgrade python2-setuptools | Apr 13, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | Mar 9, 2023 | Dec 23, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade python2-setuptools_scmUpgrade python2-coverageUpgrade python39-psycopg2-docUpgrade python39-libsUpgrade python2-docutilsUpgrade python2-PyMySQLUpgrade python39-psycopg2Upgrade python39-pybind11Upgrade python2-psycopg2-debugUpgrade python2-setuptools-wheelUpgrade python39-packagingUpgrade python2-pip-wheelUpgrade python2-funcsigsUpgrade python39-develUpgrade python2-toolsUpgrade python39-requestsUpgrade python2-virtualenvUpgrade python2-setuptoolsUpgrade python39-testUpgrade python2-testUpgrade babelUpgrade python2-numpyUpgrade python2-pluggyUpgrade python2-pysocksUpgrade python2-CythonUpgrade python2-backportsUpgrade python2-ipaddressUpgrade python2-chardetUpgrade python2-scipyUpgrade python2-pymongo-gridfsUpgrade python2-babelUpgrade python39-PyMySQLUpgrade python2-develUpgrade python2-docs-infoUpgrade python2-libsUpgrade python3-setuptools-wheelUpgrade python2-pytest-mockUpgrade python2-pytzUpgrade python39-more-itertoolsUpgrade python39Upgrade python39-psycopg2-testsUpgrade python39-numpy-docUpgrade python39-psutilUpgrade python39-idleUpgrade python39-pip-wheelUpgrade python2Upgrade python39-cffiUpgrade python39-wheelUpgrade python-nose-docsUpgrade python3-setuptoolsUpgrade python2-pyUpgrade python39-pluggyUpgrade platform-python-setuptoolsUpgrade python39-debugUpgrade python39-wcwidthUpgrade python2-attrsUpgrade python2-jinja2Upgrade python2-numpy-docUpgrade python2-sqlalchemyUpgrade python39-wheel-wheelUpgrade python2-idnaUpgrade python39-attrsUpgrade python39-cryptographyUpgrade python2-wheelUpgrade python-sqlalchemy-docUpgrade python2-pyyamlUpgrade python39-numpyUpgrade python39-pyyamlUpgrade python39-pyUpgrade python39-pipUpgrade python39-tomlUpgrade python39-CythonUpgrade python39-rpm-macrosUpgrade python39-sixUpgrade python2-bsonUpgrade python2-psycopg2Upgrade python39-pybind11-develUpgrade python2-noseUpgrade python39-setuptoolsUpgrade python39-pycparserUpgrade python39-idnaUpgrade python2-rpm-macrosUpgrade python2-urllib3Upgrade python2-requestsUpgrade python2-pygmentsUpgrade python39-lxmlUpgrade python2-pymongoUpgrade python39-setuptools-wheelUpgrade python39-pytestUpgrade python39-pysocksUpgrade python39-numpy-f2pyUpgrade python39-mod_wsgiUpgrade python2-debugUpgrade python2-mockUpgrade python-psycopg2-docUpgrade python2-wheel-wheelUpgrade python39-urllib3Upgrade python39-plyUpgrade python2-docsUpgrade python39-pyparsingUpgrade python2-dnsUpgrade python2-pipUpgrade python39-tkinterUpgrade python39-iniconfigUpgrade python2-markupsafeUpgrade python2-tkinterUpgrade python2-pytestUpgrade python2-sixUpgrade python39-scipyUpgrade python2-backports-ssl_match_hostnameUpgrade python39-chardetUpgrade python2-psycopg2-testsUpgrade python2-numpy-f2pyUpgrade python2-lxml | Feb 22, 2023 | Dec 22, 2022 |
| Redhat_linux | — | Upgrade python39-pip-wheelUpgrade python39-lxml-debuginfoUpgrade python2-debugUpgrade python2-pymongo-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade Cython-debugsourceUpgrade python2-pluggyUpgrade python39-debugsourceUpgrade python2-idnaUpgrade python39-testUpgrade python2-setuptoolsUpgrade python39-setuptools-wheelUpgrade platform-python-setuptoolsUpgrade python2-setuptools-wheelUpgrade python2-tkinterUpgrade python-pymongo-debuginfoUpgrade python39-numpy-docUpgrade python-lxml-debugsourceUpgrade python39-pycparserUpgrade python2-scipyUpgrade python39-numpy-f2pyUpgrade python3-setuptoolsUpgrade python2-numpy-docUpgrade scipy-debugsourceUpgrade python39-requestsUpgrade python39-pybind11-develUpgrade python2-coverage-debuginfoUpgrade python2-numpy-debuginfoUpgrade python2-babelUpgrade python-psycopg2-debugsourceUpgrade python39-cryptography-debuginfoUpgrade python2-pytest-mockUpgrade python39-psutil-debuginfoUpgrade python39-libsUpgrade python2-noseUpgrade python39-iniconfigUpgrade python39-packagingUpgrade python2-chardetUpgrade python39-psycopg2-docUpgrade python-psycopg2-debuginfoUpgrade python2-docutilsUpgrade python-nose-docsUpgrade python39-lxmlUpgrade python39-pyyamlUpgrade python2-pyyamlUpgrade python2-numpyUpgrade python39-idleUpgrade python2-ipaddressUpgrade python39-cryptographyUpgrade python39-wcwidthUpgrade python2-psycopg2-debuginfoUpgrade python39-scipyUpgrade python3-setuptools-wheelUpgrade python2-pyUpgrade python2-develUpgrade python39-more-itertoolsUpgrade python2-sqlalchemyUpgrade python39-Cython-debuginfoUpgrade python2-jinja2Upgrade python39-cffiUpgrade python2-psycopg2Upgrade python2-bson-debuginfoUpgrade python39-sixUpgrade python39-numpy-debuginfoUpgrade python2-pymongoUpgrade python-sqlalchemy-docUpgrade python39-chardetUpgrade python39-numpyUpgrade python2-scipy-debuginfoUpgrade python2-wheel-wheelUpgrade python39-wheelUpgrade python39-urllib3Upgrade python39Upgrade python39-psycopg2-testsUpgrade python2-coverageUpgrade python2-urllib3Upgrade python2-lxmlNo solution existsUpgrade python2-bsonUpgrade python2-debuginfoUpgrade python2-markupsafeUpgrade python2-requestsUpgrade python2-psycopg2-debugUpgrade numpy-debugsourceUpgrade python39-pytestUpgrade python2-psycopg2-debug-debuginfoUpgrade python39-psycopg2Upgrade python2-attrsUpgrade python2-wheelUpgrade python39-attrsUpgrade python2-numpy-f2pyUpgrade python2-dnsUpgrade python39-tomlUpgrade python2-pymongo-gridfsUpgrade python2-backportsUpgrade python39-cffi-debuginfoUpgrade python39-pipUpgrade python2-mockUpgrade python2-libsUpgrade python39-CythonUpgrade python39-idnaUpgrade python39-develUpgrade python-psycopg2-docUpgrade python2-docs-infoUpgrade python2-sixUpgrade python2Upgrade python2-pytestUpgrade python2-pip-wheelUpgrade python39-pysocksUpgrade python39-psycopg2-debuginfoUpgrade python2-rpm-macrosUpgrade python39-plyUpgrade python39-pyyaml-debuginfoUpgrade python39-scipy-debuginfoUpgrade python39-psutilUpgrade PyYAML-debugsourceUpgrade python2-toolsUpgrade python2-Cython-debuginfoUpgrade python2-CythonUpgrade python2-funcsigsUpgrade python2-pysocksUpgrade python39-tkinterUpgrade python39-wheel-wheelUpgrade python39-pybind11Upgrade python-cryptography-debugsourceUpgrade python-cffi-debugsourceUpgrade python39-PyMySQLUpgrade python2-psycopg2-testsUpgrade python2-pytzUpgrade babelUpgrade python2-docsUpgrade python39-mod_wsgiUpgrade python2-lxml-debuginfoUpgrade python39-debuginfoUpgrade python2-testUpgrade python2-virtualenvUpgrade python2-PyMySQLUpgrade python2-backports-ssl_match_hostnameUpgrade python-coverage-debugsourceUpgrade python2-debugsourceUpgrade python-pymongo-debugsourceUpgrade python39-debugUpgrade python-psutil-debugsourceUpgrade python2-pygmentsUpgrade python39-setuptoolsUpgrade python39-pyUpgrade python2-setuptools_scmUpgrade python2-pipUpgrade python39-rpm-macrosUpgrade python39-pluggyUpgrade python39-pyparsing | Feb 22, 2023 | Dec 23, 2022 |
| Rocky_linux | — | Upgrade python39-scipy-debuginfoUpgrade python39-cffiUpgrade python2-libsUpgrade python2-bsonUpgrade python39-mod_wsgiUpgrade python39-psutilUpgrade python2-psycopg2-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2-testUpgrade python2-develUpgrade python39-cryptography-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python2-scipyUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-markupsafeUpgrade python2-sqlalchemyUpgrade python2-psycopg2-debugUpgrade python-psutil-debugsourceUpgrade python2-backportsUpgrade python2-debuginfoUpgrade python-cffi-debugsourceUpgrade python39-psycopg2Upgrade python2-numpyUpgrade python39-psutil-debuginfoUpgrade python-coverage-debugsourceUpgrade numpy-debugsourceUpgrade python39-numpy-debuginfoUpgrade python2-CythonUpgrade python-pymongo-debugsourceUpgrade PyYAML-debugsourceUpgrade python2Upgrade python39-psycopg2-debuginfoUpgrade python-psycopg2-docUpgrade python2-coverage-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python39-Cython-debuginfoUpgrade python39-pyyamlUpgrade python2-numpy-debuginfoUpgrade python2-tkinterUpgrade python2-Cython-debuginfoUpgrade python2-numpy-f2pyUpgrade python2-lxml-debuginfoUpgrade python39-psycopg2-testsUpgrade python2-coverageUpgrade scipy-debugsourceUpgrade python2-psycopg2-testsUpgrade python2-toolsUpgrade python2-scipy-debuginfoUpgrade python39-cffi-debuginfoUpgrade python39-numpyUpgrade python-psycopg2-debuginfoUpgrade python39-lxmlUpgrade python-psycopg2-debugsourceUpgrade python39-lxml-debuginfoUpgrade python39-CythonUpgrade python2-debugsourceUpgrade python-pymongo-debuginfoUpgrade python2-debugUpgrade python39-pybind11Upgrade python2-lxmlUpgrade python2-pyyaml-debuginfoUpgrade python-lxml-debugsourceUpgrade python2-bson-debuginfoUpgrade python39-pybind11-develUpgrade python39-numpy-f2pyUpgrade python39-cryptographyUpgrade python2-pymongoUpgrade python2-pyyamlUpgrade python39-psycopg2-docUpgrade python2-psycopg2Upgrade python39-scipyUpgrade Cython-debugsourceUpgrade python-cryptography-debugsource | Mar 12, 2024 | Dec 23, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.5Upgrade Splunk Enterprise to version 9.2.2Upgrade Splunk Enterprise to version 9.0.10 | Sep 30, 2025 | Dec 22, 2022 |
| Suse | — | Upgrade python3-setuptools-wheelUpgrade python-setuptoolsUpgrade python310-setuptoolsUpgrade python36-setuptoolsUpgrade python39-setuptoolsUpgrade python3-setuptools-testUpgrade python3-setuptools | Jan 17, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade pypy-setuptools (Ubuntu Pro)Upgrade pypy-setuptoolsUpgrade python3-setuptoolsUpgrade python3-setuptools (Ubuntu Pro)Upgrade python-setuptoolsUpgrade python-setuptools (Ubuntu Pro) | Jan 23, 2023 | Dec 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 22, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub