Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-toolsUpgrade python2-setuptools_scmUpgrade python2-mockUpgrade python39-pybind11-develUpgrade python2-sqlalchemyUpgrade python39-rpm-macrosUpgrade python2-coverageUpgrade python39-urllib3Upgrade python39-pycparserUpgrade python2-ipaddressUpgrade python39-develUpgrade python39-requestsUpgrade python39-pipUpgrade python2-dnsUpgrade python39-cffiUpgrade python2-pyyamlUpgrade python39Upgrade python2-docsUpgrade python2-wheelUpgrade python39-PyMySQLUpgrade python2-numpy-docUpgrade python2-pytest-mockUpgrade python2-debugUpgrade python39-pluggyUpgrade python39-cryptographyUpgrade python39-pyUpgrade python2-requestsUpgrade python2-libsUpgrade python39-plyUpgrade python2-rpm-macrosUpgrade python2-scipyUpgrade python39-pytestUpgrade python39-pybind11Upgrade babelUpgrade python2-noseUpgrade python2-PyMySQLUpgrade python39-pysocksUpgrade python39-sixUpgrade python2-tkinterUpgrade python2-psycopg2-debugUpgrade python2-testUpgrade python39-pyyamlUpgrade python2-funcsigsUpgrade python39-numpy-f2pyUpgrade python2-docutilsUpgrade platform-python-setuptoolsUpgrade python2-bsonUpgrade python39-setuptoolsUpgrade python39-iniconfigUpgrade python39-pyparsingUpgrade python2-virtualenvUpgrade python39-idnaUpgrade python2-attrsUpgrade python-sqlalchemy-docUpgrade python39-psycopg2-testsUpgrade python39-testUpgrade python2-pytestUpgrade python39-tkinterUpgrade python39-libsUpgrade python2-CythonUpgrade python39-wheelUpgrade python39-setuptools-wheelUpgrade python39-more-itertoolsUpgrade python2-psycopg2Upgrade python3-setuptools-wheelUpgrade python2-setuptoolsUpgrade python39-tomlUpgrade python2-psycopg2-testsUpgrade python2-develUpgrade python2-chardetUpgrade python39-psycopg2-docUpgrade python2-pygmentsUpgrade python2-pyUpgrade python2-sixUpgrade python2-pip-wheelUpgrade python2-pytzUpgrade python39-debugUpgrade python39-wheel-wheelUpgrade python39-packagingUpgrade python2-docs-infoUpgrade python2-markupsafeUpgrade python2-setuptools-wheelUpgrade python39-idleUpgrade python39-wcwidthUpgrade python39-lxmlUpgrade python2-pymongo-gridfsUpgrade python2-backports-ssl_match_hostnameUpgrade python39-scipyUpgrade python2-numpy-f2pyUpgrade python39-psutilUpgrade python2-numpyUpgrade python39-mod_wsgiUpgrade python39-numpy-docUpgrade python2-pysocksUpgrade python2-pipUpgrade python2-lxmlUpgrade python2-idnaUpgrade python2-urllib3Upgrade python2-babelUpgrade python39-numpyUpgrade python-psycopg2-docUpgrade python39-psycopg2Upgrade python-nose-docsUpgrade python39-pip-wheelUpgrade python39-attrsUpgrade python2-pluggyUpgrade python3-setuptoolsUpgrade python2-backportsUpgrade python39-CythonUpgrade python2Upgrade python39-chardetUpgrade python2-pymongoUpgrade python2-jinja2Upgrade python2-wheel-wheel | Feb 22, 2023 | Dec 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-setuptools-wheelUpgrade python2-setuptoolsUpgrade python38-setuptoolsUpgrade python3-setuptools | Mar 7, 2023 | Dec 23, 2022 |
| Centos_linux | — | Upgrade python3-setuptoolsUpgrade platform-python-setuptoolsUpgrade python3-setuptools-wheel | Feb 22, 2023 | Dec 23, 2022 |
| Debian | — | Upgrade setuptools | Jul 30, 2024 | Dec 23, 2022 |
| Freebsd | — | Upgrade py39-setuptoolsUpgrade py39-setuptools58Upgrade py27-setuptools44 | Apr 14, 2023 | Apr 9, 2023 |
| Gentoo Linux | — | Upgrade dev-python/setuptools. | May 6, 2024 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | Mar 20, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | May 8, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-setuptools | Jun 9, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-setuptoolsUpgrade python3-setuptoolsUpgrade python-setuptools-wheel | Apr 13, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-setuptoolsUpgrade python-setuptools | Mar 9, 2023 | Dec 23, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade python39-idleUpgrade python39-more-itertoolsUpgrade python39-pip-wheelUpgrade python39Upgrade python39-wheelUpgrade python2-setuptools-wheelUpgrade python39-libsUpgrade python39-psycopg2-docUpgrade python39-psutilUpgrade python2-pluggyUpgrade python2-PyMySQLUpgrade python2-pysocksUpgrade python39-debugUpgrade python39-wcwidthUpgrade python39-attrsUpgrade python2-setuptools_scmUpgrade python2-jinja2Upgrade python2-sqlalchemyUpgrade python3-setuptoolsUpgrade python39-psycopg2-testsUpgrade python2-pip-wheelUpgrade python2-psycopg2-debugUpgrade python-nose-docsUpgrade platform-python-setuptoolsUpgrade python39-wheel-wheelUpgrade python39-packagingUpgrade python2-attrsUpgrade python2-docutilsUpgrade python3-setuptools-wheelUpgrade python2-coverageUpgrade python2-pymongo-gridfsUpgrade python2-idnaUpgrade python2-babelUpgrade python2-develUpgrade python2-docs-infoUpgrade python2-numpy-docUpgrade python39-testUpgrade python2-toolsUpgrade python2-setuptoolsUpgrade python2-virtualenvUpgrade babelUpgrade python39-numpy-docUpgrade python39-cffiUpgrade python39-pybind11Upgrade python2-testUpgrade python2-chardetUpgrade python2-pyUpgrade python2-funcsigsUpgrade python2-CythonUpgrade python39-develUpgrade python2-libsUpgrade python2-ipaddressUpgrade python39-PyMySQLUpgrade python39-requestsUpgrade python2-pytzUpgrade python2-backportsUpgrade python2Upgrade python2-pytest-mockUpgrade python2-scipyUpgrade python2-numpyUpgrade python39-pluggyUpgrade python39-psycopg2Upgrade python2-requestsUpgrade python2-urllib3Upgrade python2-sixUpgrade python39-iniconfigUpgrade python2-pytestUpgrade python2-pipUpgrade python2-mockUpgrade python2-markupsafeUpgrade python2-debugUpgrade python39-tkinterUpgrade python2-wheel-wheelUpgrade python39-pyparsingUpgrade python2-dnsUpgrade python-psycopg2-docUpgrade python2-tkinterUpgrade python39-mod_wsgiUpgrade python39-lxmlUpgrade python39-pysocksUpgrade python39-setuptools-wheelUpgrade python39-pytestUpgrade python2-pymongoUpgrade python39-numpy-f2pyUpgrade python39-pipUpgrade python39-CythonUpgrade python39-chardetUpgrade python2-psycopg2-testsUpgrade python2-numpy-f2pyUpgrade python2-lxmlUpgrade python39-tomlUpgrade python39-rpm-macrosUpgrade python2-bsonUpgrade python39-setuptoolsUpgrade python2-noseUpgrade python39-pyyamlUpgrade python2-wheelUpgrade python-sqlalchemy-docUpgrade python39-numpyUpgrade python2-psycopg2Upgrade python39-sixUpgrade python39-idnaUpgrade python39-pyUpgrade python39-cryptographyUpgrade python2-rpm-macrosUpgrade python2-pygmentsUpgrade python39-pycparserUpgrade python39-pybind11-develUpgrade python2-pyyamlUpgrade python2-docsUpgrade python2-backports-ssl_match_hostnameUpgrade python39-urllib3Upgrade python39-scipyUpgrade python39-ply | Feb 22, 2023 | Dec 22, 2022 |
| Redhat_linux | — | Upgrade python39-scipy-debuginfoUpgrade python2-pip-wheelUpgrade python39-plyUpgrade python2-funcsigsUpgrade python39-pyparsingUpgrade python2-docsUpgrade python2-lxml-debuginfoUpgrade python2-setuptools_scmUpgrade python2-sixUpgrade python39-setuptoolsUpgrade PyYAML-debugsourceUpgrade python39-psycopg2-debuginfoUpgrade python39-pysocksUpgrade python39-pyUpgrade python39-pyyaml-debuginfoUpgrade python2-pytzUpgrade python39-PyMySQLUpgrade python-cffi-debugsourceUpgrade python39-mod_wsgiUpgrade python-cryptography-debugsourceUpgrade python2-psycopg2-testsUpgrade python39-wheel-wheelUpgrade python2-pysocksUpgrade python2-pygmentsUpgrade python2-pipUpgrade python39-pybind11Upgrade babelUpgrade python2-requestsUpgrade python2-backports-ssl_match_hostnameUpgrade python-psutil-debugsourceUpgrade python2-CythonUpgrade python39-idnaUpgrade python39-tomlUpgrade python2-backportsUpgrade python39-cffi-debuginfoUpgrade python2-toolsUpgrade python2-rpm-macrosUpgrade python2-debugsourceUpgrade python39-debuginfoUpgrade python39-psutilUpgrade python2-Cython-debuginfoUpgrade python2-numpy-f2pyUpgrade python39-debugUpgrade python39-rpm-macrosUpgrade python2-virtualenvUpgrade python39-psycopg2Upgrade python2-dnsUpgrade python-psycopg2-docUpgrade python2-testUpgrade python39-pipUpgrade python39-pytestUpgrade python-coverage-debugsourceUpgrade python2-wheelUpgrade python2-PyMySQLUpgrade python-pymongo-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-pytestUpgrade python2-attrsUpgrade python39-pluggyUpgrade python2-psycopg2-debugUpgrade python2-debuginfoUpgrade python2-bsonUpgrade numpy-debugsourceUpgrade python2Upgrade python39-attrsUpgrade python2-docs-infoUpgrade python39-tkinterUpgrade python2-markupsafeUpgrade python2-mockUpgrade python39-develUpgrade python2-pymongo-gridfsUpgrade python2-libsUpgrade python39-CythonUpgrade python2-noseUpgrade python2-pluggyUpgrade python39-debugsourceUpgrade python2-pymongo-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python39-psutil-debuginfoUpgrade python39-pip-wheelUpgrade python2-psycopg2-debuginfoUpgrade python2-idnaUpgrade python39-numpy-docUpgrade python-lxml-debugsourceUpgrade python39-numpy-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python39-cryptography-debuginfoUpgrade python39-pybind11-develUpgrade python2-setuptoolsUpgrade scipy-debugsourceUpgrade python39-lxml-debuginfoUpgrade python2-pytest-mockUpgrade python-nose-docsUpgrade python39-lxmlUpgrade python39-libsUpgrade python2-setuptools-wheelUpgrade python39-setuptools-wheelUpgrade python39-urllib3Upgrade python39-scipyNo solution existsUpgrade python39-Cython-debuginfoUpgrade python3-setuptools-wheelUpgrade python2-docutilsUpgrade python39-idleUpgrade python2-debugUpgrade python39-numpy-f2pyUpgrade python39-requestsUpgrade python39-cryptographyUpgrade python39-pycparserUpgrade python2-wheel-wheelUpgrade python39-chardetUpgrade python2-sqlalchemyUpgrade python39-pyyamlUpgrade python39-cffiUpgrade python39-numpyUpgrade python2-scipy-debuginfoUpgrade python-pymongo-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-ipaddressUpgrade python39-testUpgrade python2-pyUpgrade Cython-debugsourceUpgrade python2-chardetUpgrade python-sqlalchemy-docUpgrade python2-scipyUpgrade python2-pyyamlUpgrade python2-babelUpgrade python2-pymongoUpgrade platform-python-setuptoolsUpgrade python39-psycopg2-testsUpgrade python39-packagingUpgrade python39-iniconfigUpgrade python2-urllib3Upgrade python3-setuptoolsUpgrade python2-tkinterUpgrade python2-lxmlUpgrade python2-coverageUpgrade python2-numpy-docUpgrade python2-numpy-debuginfoUpgrade python39-psycopg2-docUpgrade python2-numpyUpgrade python2-coverage-debuginfoUpgrade python2-develUpgrade python39-more-itertoolsUpgrade python39-wheelUpgrade python39-sixUpgrade python2-bson-debuginfoUpgrade python39Upgrade python39-wcwidthUpgrade python2-psycopg2Upgrade python2-jinja2 | Feb 22, 2023 | Dec 23, 2022 |
| Rocky_linux | — | Upgrade python2-markupsafeUpgrade python2-backportsUpgrade python39-cffiUpgrade python39-psutilUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-libsUpgrade python2-debuginfoUpgrade python2-scipyUpgrade python-psutil-debugsourceUpgrade python2-sqlalchemyUpgrade python39-cryptography-debuginfoUpgrade python39-mod_wsgiUpgrade python2-testUpgrade PyYAML-debugsourceUpgrade python2-pymongo-gridfsUpgrade python2-psycopg2-debuginfoUpgrade python-cffi-debugsourceUpgrade python39-psycopg2Upgrade numpy-debugsourceUpgrade python39-psutil-debuginfoUpgrade python2-CythonUpgrade python-psycopg2-docUpgrade python39-numpy-debuginfoUpgrade python39-psycopg2-debuginfoUpgrade python2-numpyUpgrade python2Upgrade python2-coverage-debuginfoUpgrade python39-Cython-debuginfoUpgrade python-coverage-debugsourceUpgrade python2-bsonUpgrade python2-pymongo-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-psycopg2-debugUpgrade python39-pyyaml-debuginfoUpgrade python39-scipy-debuginfoUpgrade python2-develUpgrade python39-psycopg2-docUpgrade python-psycopg2-debuginfoUpgrade scipy-debugsourceUpgrade python39-pybind11Upgrade python2-pyyamlUpgrade python2-debugUpgrade python2-pyyaml-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-numpy-f2pyUpgrade python39-psycopg2-testsUpgrade python2-toolsUpgrade python2-scipy-debuginfoUpgrade python2-psycopg2-testsUpgrade python39-cffi-debuginfoUpgrade Cython-debugsourceUpgrade python2-coverageUpgrade python-cryptography-debugsourceUpgrade python39-cryptographyUpgrade python2-Cython-debuginfoUpgrade python39-pybind11-develUpgrade python39-numpy-f2pyUpgrade python2-bson-debuginfoUpgrade python2-tkinterUpgrade python2-pymongoUpgrade python39-pyyamlUpgrade python-lxml-debugsourceUpgrade python2-lxml-debuginfoUpgrade python2-lxmlUpgrade python2-numpy-debuginfoUpgrade python39-numpyUpgrade python39-lxml-debuginfoUpgrade python39-CythonUpgrade python2-debugsourceUpgrade python2-psycopg2Upgrade python39-scipyUpgrade python39-lxmlUpgrade python-pymongo-debuginfo | Mar 12, 2024 | Dec 23, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.10Upgrade Splunk Enterprise to version 9.2.2Upgrade Splunk Enterprise to version 9.1.5 | Sep 30, 2025 | Dec 22, 2022 |
| Suse | — | Upgrade python-setuptoolsUpgrade python310-setuptoolsUpgrade python39-setuptoolsUpgrade python36-setuptoolsUpgrade python3-setuptools-wheelUpgrade python3-setuptools-testUpgrade python3-setuptools | Jan 17, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade pypy-setuptoolsUpgrade pypy-setuptools (Ubuntu Pro)Upgrade python3-setuptools (Ubuntu Pro)Upgrade python-setuptools (Ubuntu Pro)Upgrade python-setuptoolsUpgrade python3-setuptools | Jan 23, 2023 | Dec 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 22, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub