Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-pyyamlUpgrade python39-requestsUpgrade python2-sqlalchemyUpgrade python39-testUpgrade python39-pyparsingUpgrade python2-PyMySQLUpgrade python39-cffiUpgrade python2-psycopg2-debugUpgrade python39-pybind11-develUpgrade python2-pytest-mockUpgrade python2-funcsigsUpgrade python2-setuptools_scmUpgrade python2-libsUpgrade python39-pysocksUpgrade platform-python-setuptoolsUpgrade python2-CythonUpgrade python-sqlalchemy-docUpgrade python39-pycparserUpgrade python39-more-itertoolsUpgrade python39-pyUpgrade python2-mockUpgrade python39-plyUpgrade python2-wheelUpgrade python2-pytestUpgrade python39-urllib3Upgrade python2-coverageUpgrade python39-numpy-f2pyUpgrade python2-testUpgrade python2-tkinterUpgrade babelUpgrade python2-pyyamlUpgrade python39-libsUpgrade python39-wheelUpgrade python2-docsUpgrade python39-rpm-macrosUpgrade python39-PyMySQLUpgrade python39-pybind11Upgrade python2-numpy-docUpgrade python2-toolsUpgrade python2-ipaddressUpgrade python2-dnsUpgrade python39-setuptools-wheelUpgrade python2-psycopg2-testsUpgrade python2-docutilsUpgrade python2-scipyUpgrade python2-bsonUpgrade python2-debugUpgrade python39-iniconfigUpgrade python2-rpm-macrosUpgrade python39-tomlUpgrade python39-idnaUpgrade python39-sixUpgrade python39-pipUpgrade python39-pytestUpgrade python2-virtualenvUpgrade python2-attrsUpgrade python39-cryptographyUpgrade python39-tkinterUpgrade python39Upgrade python39-pluggyUpgrade python39-develUpgrade python39-setuptoolsUpgrade python2-noseUpgrade python2-requestsUpgrade python2-psycopg2Upgrade python3-setuptools-wheelUpgrade python2-setuptoolsUpgrade python39-psycopg2-testsUpgrade python2-develUpgrade python-nose-docsUpgrade python2-wheel-wheelUpgrade python2-pysocksUpgrade python39-psutilUpgrade python2-pymongo-gridfsUpgrade python39-numpyUpgrade python39-numpy-docUpgrade python2-pytzUpgrade python2-docs-infoUpgrade python2-idnaUpgrade python39-wcwidthUpgrade python2-numpyUpgrade python2-pygmentsUpgrade python39-psycopg2-docUpgrade python2-babelUpgrade python39-pip-wheelUpgrade python2-pipUpgrade python2-pluggyUpgrade python2Upgrade python39-CythonUpgrade python3-setuptoolsUpgrade python39-wheel-wheelUpgrade python39-packagingUpgrade python39-debugUpgrade python2-numpy-f2pyUpgrade python39-attrsUpgrade python2-urllib3Upgrade python39-psycopg2Upgrade python2-lxmlUpgrade python39-idleUpgrade python2-markupsafeUpgrade python39-chardetUpgrade python2-setuptools-wheelUpgrade python2-backports-ssl_match_hostnameUpgrade python39-scipyUpgrade python2-jinja2Upgrade python2-sixUpgrade python2-pymongoUpgrade python2-pip-wheelUpgrade python2-pyUpgrade python39-lxmlUpgrade python2-chardetUpgrade python-psycopg2-docUpgrade python2-backportsUpgrade python39-mod_wsgi | Feb 22, 2023 | Dec 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python3-setuptoolsUpgrade python-setuptools-wheelUpgrade python38-setuptoolsUpgrade python2-setuptools | Mar 7, 2023 | Dec 23, 2022 |
| Centos_linux | — | Upgrade python3-setuptools-wheelUpgrade platform-python-setuptoolsUpgrade python3-setuptools | Feb 22, 2023 | Dec 23, 2022 |
| Debian | — | Upgrade setuptools | Jul 30, 2024 | Dec 23, 2022 |
| Freebsd | — | Upgrade py39-setuptools58Upgrade py39-setuptoolsUpgrade py27-setuptools44 | Apr 14, 2023 | Apr 9, 2023 |
| Gentoo Linux | — | Upgrade dev-python/setuptools. | May 6, 2024 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | Mar 20, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | May 8, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-setuptools | Jun 9, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-setuptoolsUpgrade python2-setuptoolsUpgrade python-setuptools-wheel | Apr 13, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-setuptoolsUpgrade python-setuptools | Mar 9, 2023 | Dec 23, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade python39-pybind11-develUpgrade python39-tomlUpgrade python2-lxmlUpgrade python39-rpm-macrosUpgrade python2-numpy-f2pyUpgrade python39-pipUpgrade python39-chardetUpgrade python39-idnaUpgrade python2-wheel-wheelUpgrade python39-tkinterUpgrade python2-pytestUpgrade python39-iniconfigUpgrade python39-cryptographyUpgrade python2-debugUpgrade python2-mockUpgrade python2-psycopg2-testsUpgrade python2-docsUpgrade python-sqlalchemy-docUpgrade python2-wheelUpgrade python39-CythonUpgrade python39-plyUpgrade python2-pipUpgrade python39-pyUpgrade python2-sixUpgrade python39-pyyamlUpgrade python39-urllib3Upgrade python2-backports-ssl_match_hostnameUpgrade python39-numpyUpgrade python2-pygmentsUpgrade python2-requestsUpgrade python39-lxmlUpgrade python39-mod_wsgiUpgrade python39-pycparserUpgrade python39-setuptoolsUpgrade python2-urllib3Upgrade python2-noseUpgrade python2-rpm-macrosUpgrade python39-setuptools-wheelUpgrade python2-pymongoUpgrade python39-numpy-f2pyUpgrade python39-pysocksUpgrade python39-pytestUpgrade python2-markupsafeUpgrade python2-pyyamlUpgrade python39-scipyUpgrade python-psycopg2-docUpgrade python2-dnsUpgrade python39-sixUpgrade python2-bsonUpgrade python2-tkinterUpgrade python39-pyparsingUpgrade python2-psycopg2Upgrade python2-numpyUpgrade python39-more-itertoolsUpgrade python39-libsUpgrade python39-wheel-wheelUpgrade python39-wcwidthUpgrade platform-python-setuptoolsUpgrade python3-setuptoolsUpgrade python2-attrsUpgrade python39-pip-wheelUpgrade python39-idleUpgrade python2-pytest-mockUpgrade python39-psutilUpgrade python39-attrsUpgrade python3-setuptools-wheelUpgrade python2-setuptools_scmUpgrade python2-pymongo-gridfsUpgrade python2-libsUpgrade python2-docs-infoUpgrade python2-coverageUpgrade python2-babelUpgrade python39-psycopg2-testsUpgrade python39Upgrade python2-develUpgrade python39-numpy-docUpgrade python39-wheelUpgrade python2-setuptools-wheelUpgrade python39-pybind11Upgrade python39-psycopg2-docUpgrade python2-PyMySQLUpgrade python2-pluggyUpgrade python39-psycopg2Upgrade python2-pysocksUpgrade python2-docutilsUpgrade python2-pytzUpgrade python2-testUpgrade python39-testUpgrade python2-virtualenvUpgrade python2-toolsUpgrade python2-setuptoolsUpgrade babelUpgrade python2-pip-wheelUpgrade python-nose-docsUpgrade python2-psycopg2-debugUpgrade python2-numpy-docUpgrade python2-sqlalchemyUpgrade python2Upgrade python39-debugUpgrade python39-PyMySQLUpgrade python39-develUpgrade python39-requestsUpgrade python2-scipyUpgrade python2-ipaddressUpgrade python2-funcsigsUpgrade python2-CythonUpgrade python2-chardetUpgrade python2-backportsUpgrade python39-packagingUpgrade python2-jinja2Upgrade python39-pluggyUpgrade python39-cffiUpgrade python2-pyUpgrade python2-idna | Feb 22, 2023 | Dec 22, 2022 |
| Redhat_linux | — | Upgrade python39-tomlUpgrade python39-pipUpgrade python39-idnaUpgrade python2-pymongo-gridfsUpgrade python2-requestsUpgrade python2-libsUpgrade python2-mockUpgrade python39-develUpgrade python39-CythonUpgrade python39-cffi-debuginfoUpgrade python2-markupsafeUpgrade python2-backportsUpgrade python2-pygmentsUpgrade python2-pipUpgrade python39-pyUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pip-wheelUpgrade python-psutil-debugsourceUpgrade python39-attrsUpgrade python39-pytestUpgrade python2-dnsUpgrade python39-setuptoolsUpgrade python-coverage-debugsourceUpgrade python-psycopg2-docUpgrade python39-rpm-macrosUpgrade python2Upgrade python2-PyMySQLUpgrade python2-toolsUpgrade python2-sixUpgrade python39-scipy-debuginfoUpgrade python2-testUpgrade python2-funcsigsUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-CythonUpgrade babelUpgrade python2-lxml-debuginfoUpgrade python39-psycopg2-debuginfoUpgrade python39-PyMySQLUpgrade python39-tkinterUpgrade python2-psycopg2-debugUpgrade python39-pyyaml-debuginfoUpgrade python39-pybind11Upgrade python39-wheel-wheelUpgrade python-cryptography-debugsourceUpgrade python2-pytzUpgrade python2-numpy-f2pyUpgrade python39-pyparsingUpgrade python-cffi-debugsourceUpgrade python2-pysocksUpgrade PyYAML-debugsourceUpgrade python2-debugsourceUpgrade python2-pytestUpgrade python39-debugUpgrade python39-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-bsonUpgrade python-pymongo-debugsourceUpgrade python2-rpm-macrosUpgrade python39-psutilUpgrade python2-Cython-debuginfoUpgrade python39-plyUpgrade python39-mod_wsgiUpgrade python2-attrsUpgrade python2-virtualenvUpgrade python2-wheelUpgrade python2-docsUpgrade python39-psycopg2Upgrade python2-debuginfoUpgrade numpy-debugsourceUpgrade python39-pysocksUpgrade python2-setuptools_scmUpgrade python2-docs-infoUpgrade python39-pluggyUpgrade python2-coverageUpgrade python39-idleUpgrade python2-pymongo-debuginfoUpgrade python2-numpy-docUpgrade python39-lxmlUpgrade python3-setuptoolsUpgrade python2-urllib3Upgrade python2-bson-debuginfoUpgrade python-lxml-debugsourceUpgrade python-nose-docsUpgrade python39-setuptools-wheelUpgrade python39-pybind11-develUpgrade python39-cryptography-debuginfoUpgrade python39-pyyamlUpgrade python2-setuptoolsUpgrade python39-packagingUpgrade python-psycopg2-debugsourceUpgrade python2-ipaddressUpgrade python39-cffiUpgrade python39-urllib3Upgrade python39-numpy-debuginfoUpgrade python3-setuptools-wheelUpgrade python39-scipyUpgrade python39-psycopg2-docUpgrade python39-libsUpgrade python2-sqlalchemyUpgrade python39-Cython-debuginfoUpgrade python2-pymongoUpgrade python2-wheel-wheelUpgrade python39-chardetUpgrade python2-babelUpgrade python2-docutilsUpgrade python2-psycopg2-debuginfoUpgrade python-sqlalchemy-docUpgrade python39-numpyUpgrade python39-requestsUpgrade python2-pyyamlUpgrade python2-scipy-debuginfoUpgrade python39-psutil-debuginfoUpgrade Cython-debugsourceUpgrade python39-lxml-debuginfoUpgrade python2-pytest-mockUpgrade python2-lxmlUpgrade python39-iniconfigUpgrade scipy-debugsourceUpgrade python2-chardetUpgrade python2-setuptools-wheelUpgrade python2-psycopg2Upgrade python39-wheelUpgrade python39-sixUpgrade python39-more-itertoolsUpgrade python39-wcwidthUpgrade python2-develUpgrade python2-jinja2Upgrade python2-tkinterUpgrade python2-coverage-debuginfoUpgrade python2-numpyUpgrade python39-psycopg2-testsNo solution existsUpgrade python2-numpy-debuginfoUpgrade python39Upgrade python39-pycparserUpgrade platform-python-setuptoolsUpgrade python39-numpy-f2pyUpgrade python2-pyUpgrade python2-noseUpgrade python39-cryptographyUpgrade python39-numpy-docUpgrade python-pymongo-debuginfoUpgrade python39-testUpgrade python2-scipyUpgrade python-psycopg2-debuginfoUpgrade python39-pip-wheelUpgrade python2-pluggyUpgrade python2-pyyaml-debuginfoUpgrade python2-debugUpgrade python39-debugsourceUpgrade python2-idna | Feb 22, 2023 | Dec 23, 2022 |
| Rocky_linux | — | Upgrade python39-psycopg2-testsUpgrade python39-pyyamlUpgrade python2-coverageUpgrade python2-lxml-debuginfoUpgrade python39-numpyUpgrade python2-numpy-f2pyUpgrade python2-pyyamlUpgrade scipy-debugsourceUpgrade python-pymongo-debuginfoUpgrade python2-debugsourceUpgrade python39-psycopg2-docUpgrade python39-CythonUpgrade python39-lxmlUpgrade python39-scipyUpgrade python2-toolsUpgrade python39-lxml-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-numpy-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-psycopg2Upgrade python-cryptography-debugsourceUpgrade python-psycopg2-debugsourceUpgrade python2-debugUpgrade python2-Cython-debuginfoUpgrade python2-tkinterUpgrade Cython-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python39-cffi-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python-lxml-debugsourceUpgrade python39-pybind11Upgrade python39-pybind11-develUpgrade python2-pymongoUpgrade python2-lxmlUpgrade python39-numpy-f2pyUpgrade python2-bson-debuginfoUpgrade python39-cryptographyUpgrade python39-cffiUpgrade python39-cryptography-debuginfoUpgrade python2-scipyUpgrade python2-debuginfoUpgrade python39-numpy-debuginfoUpgrade python-pymongo-debugsourceUpgrade python-coverage-debugsourceUpgrade python2-testUpgrade python39-psycopg2Upgrade python2-psycopg2-debugUpgrade python2-pymongo-gridfsUpgrade python39-psutil-debuginfoUpgrade python-cffi-debugsourceUpgrade python2-markupsafeUpgrade python2-backportsUpgrade python39-scipy-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python2-bsonUpgrade python2-psycopg2-debuginfoUpgrade python39-mod_wsgiUpgrade python39-Cython-debuginfoUpgrade python2Upgrade python2-pymongo-debuginfoUpgrade python2-coverage-debuginfoUpgrade PyYAML-debugsourceUpgrade python2-numpyUpgrade python2-CythonUpgrade python2-develUpgrade numpy-debugsourceUpgrade python2-sqlalchemyUpgrade python2-libsUpgrade python39-psutilUpgrade python-psycopg2-docUpgrade python39-psycopg2-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python-psutil-debugsource | Mar 12, 2024 | Dec 23, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.2Upgrade Splunk Enterprise to version 9.1.5Upgrade Splunk Enterprise to version 9.0.10 | Sep 30, 2025 | Dec 22, 2022 |
| Suse | — | Upgrade python310-setuptoolsUpgrade python39-setuptoolsUpgrade python3-setuptools-wheelUpgrade python-setuptoolsUpgrade python3-setuptools-testUpgrade python36-setuptoolsUpgrade python3-setuptools | Jan 17, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade pypy-setuptoolsUpgrade pypy-setuptools (Ubuntu Pro)Upgrade python3-setuptoolsUpgrade python-setuptools (Ubuntu Pro)Upgrade python-setuptoolsUpgrade python3-setuptools (Ubuntu Pro) | Jan 23, 2023 | Dec 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 22, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub