A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-intelmodularUpgrade fence-agents-rsaUpgrade python39-packagingUpgrade python3-setuptools-wheelUpgrade fence-agents-mpathUpgrade python39-pybind11-develUpgrade fence-agents-aliyunUpgrade python39-tomlUpgrade fence-virtdUpgrade python39-wheel-wheelUpgrade python39-debugUpgrade python39-lxmlUpgrade python39-libsUpgrade fence-agents-scsiUpgrade python39-pyUpgrade python39-PyMySQLUpgrade fence-agents-heuristics-pingUpgrade fence-agents-ipmilanUpgrade python39-cffiUpgrade python39-pyparsingUpgrade python39-psycopg2-testsUpgrade fence-agents-amt-wsUpgrade python39-requestsUpgrade python39-pysocksUpgrade python39-more-itertoolsUpgrade fence-agents-virshUpgrade ha-cloud-supportUpgrade fence-agents-sbdUpgrade fence-agents-bladecenterUpgrade python39-iniconfigUpgrade python39-plyUpgrade fence-virtd-tcpUpgrade fence-agents-computeUpgrade python3.12-setuptoolsUpgrade python39-pytestUpgrade fence-agents-gceUpgrade fence-agents-ibmbladeUpgrade python39-tkinterUpgrade fence-agents-ibm-powervsUpgrade python39-idleUpgrade fence-agents-ilo-mpUpgrade fence-agents-vmware-soapUpgrade python39-numpy-docUpgrade python39-rpm-macrosUpgrade python39-develUpgrade fence-virtd-cpgUpgrade fence-agents-ilo2Upgrade python39-setuptoolsUpgrade python39-pyyamlUpgrade python39-testUpgrade fence-agents-redfishUpgrade platform-python-setuptoolsUpgrade fence-agents-rsbUpgrade python39-numpy-f2pyUpgrade python39-wheelUpgrade fence-agents-cisco-mdsUpgrade fence-agents-kubevirtUpgrade fence-agents-azure-armUpgrade fence-agents-emersonUpgrade python39-pybind11Upgrade fence-agents-allUpgrade fence-agents-kdumpUpgrade fence-agents-drac5Upgrade python39-pluggyUpgrade python39-attrsUpgrade python39-scipyUpgrade python3-setuptoolsUpgrade fence-agents-apc-snmpUpgrade python39-psycopg2-docUpgrade fence-virtd-libvirtUpgrade python3.11-setuptools-wheelUpgrade fence-agents-wtiUpgrade python39Upgrade fence-agents-ilo-moonshotUpgrade fence-agents-cisco-ucsUpgrade fence-virtd-serialUpgrade fence-agents-vmware-restUpgrade fence-agents-brocadeUpgrade fence-virtUpgrade fence-agents-awsUpgrade python3.12-setuptools-wheelUpgrade python39-pycparserUpgrade fence-agents-rhevmUpgrade python39-psutilUpgrade python39-wcwidthUpgrade python39-idnaUpgrade python39-pipUpgrade python39-pip-wheelUpgrade fence-agents-zvmUpgrade python39-setuptools-wheelUpgrade fence-agents-ifmibUpgrade fence-agents-ibm-vpcUpgrade python39-CythonUpgrade fence-agents-ilo-sshUpgrade fence-agents-lparUpgrade python39-urllib3Upgrade fence-agents-apcUpgrade fence-agents-ipduUpgrade python3.11-setuptoolsUpgrade python39-cryptographyUpgrade python39-psycopg2Upgrade python39-chardetUpgrade resource-agents-pafUpgrade resource-agentsUpgrade fence-agents-eaton-snmpUpgrade python39-numpyUpgrade fence-agents-epsUpgrade python39-sixUpgrade fence-agents-hpbladeUpgrade fence-virtd-multicastUpgrade fence-agents-openstackUpgrade fence-agents-commonUpgrade resource-agents-gcpUpgrade resource-agents-aliyunUpgrade python39-mod_wsgi | Aug 22, 2024 | Jul 15, 2024 |
| Alpine Linux | — | Upgrade py3-setuptools | Aug 22, 2024 | Jul 15, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-setuptools-wheelUpgrade python38-setuptoolsUpgrade python2-setuptoolsUpgrade python3-setuptools | Sep 19, 2024 | Jul 15, 2024 |
| Debian | — | Upgrade setuptools | Sep 6, 2024 | Jul 15, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Dec 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | Nov 11, 2024 | Jul 15, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-setuptoolsUpgrade python-setuptools | Oct 9, 2024 | Jul 15, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python-setuptools | Nov 5, 2024 | Jul 15, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | Nov 11, 2024 | Jul 15, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory11 | Aug 13, 2024 | Jul 15, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Feb 17, 2025 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 37087534 for version 14.1.1.0.0. | Oct 18, 2024 | Jul 15, 2024 |
| Oracle_linux | — | Upgrade fence-agents-scsiUpgrade python3-setuptools-wheelUpgrade python39-tomlUpgrade fence-agents-ipmilanUpgrade fence-agents-ifmibUpgrade fence-agents-hpbladeUpgrade fence-agents-apcUpgrade python39-requestsUpgrade python39-cryptographyUpgrade python39-wheelUpgrade fence-agents-ilo2Upgrade fence-virtd-multicastUpgrade fence-agents-rsaUpgrade fence-agents-mpathUpgrade python39-setuptools-wheelUpgrade python39-pysocksUpgrade fence-agents-redfishUpgrade python39-setuptoolsUpgrade python39-urllib3Upgrade python39-plyUpgrade python39-pip-wheelUpgrade fence-agents-wtiUpgrade python39-psutilUpgrade python3.12-setuptoolsUpgrade fence-virtd-libvirtUpgrade python39-pipUpgrade fence-agents-kubevirtUpgrade python39-mod_wsgiUpgrade fence-agents-drac5Upgrade python39-wheel-wheelUpgrade fence-virtd-serialUpgrade fence-agents-ibmbladeUpgrade fence-agents-heuristics-pingUpgrade python39-psycopg2Upgrade python39Upgrade fence-agents-lparUpgrade fence-agents-intelmodularUpgrade python39-chardetUpgrade python39-rpm-macrosUpgrade python3.11-setuptools-wheelUpgrade python39-cffiUpgrade fence-agents-vmware-restUpgrade python3.11-setuptoolsUpgrade python39-lxmlUpgrade python39-psycopg2-docUpgrade fence-agents-commonUpgrade python39-idnaUpgrade python3.12-setuptools-wheelUpgrade fence-agents-bladecenterUpgrade python39-scipyUpgrade fence-agents-eaton-snmpUpgrade fence-agents-rhevmUpgrade fence-agents-ipduUpgrade fence-virtdUpgrade python39-pyyamlUpgrade fence-agents-apc-snmpUpgrade fence-agents-cisco-ucsUpgrade python39-PyMySQLUpgrade fence-agents-emersonUpgrade python39-develUpgrade fence-virtUpgrade fence-agents-vmware-soapUpgrade platform-python-setuptoolsUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-amt-wsUpgrade fence-agents-ilo-sshUpgrade python39-numpyUpgrade python39-numpy-docUpgrade python39-psycopg2-testsUpgrade fence-agents-brocadeUpgrade fence-agents-ilo-mpUpgrade fence-virtd-cpgUpgrade python39-tkinterUpgrade python39-idleUpgrade fence-agents-sbdUpgrade python39-libsUpgrade python39-debugUpgrade python39-testUpgrade fence-agents-rsbUpgrade resource-agentsUpgrade fence-agents-virshUpgrade fence-virtd-tcpUpgrade python3-setuptoolsUpgrade python-setuptoolsUpgrade fence-agents-allUpgrade fence-agents-epsUpgrade fence-agents-cisco-mdsUpgrade fence-agents-ibm-vpcUpgrade fence-agents-kdumpUpgrade fence-agents-ibm-powervsUpgrade python39-numpy-f2pyUpgrade fence-agents-computeUpgrade python39-pycparserUpgrade python39-six | Oct 16, 2024 | Jul 15, 2024 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Oct 17, 2024 | Jul 15, 2024 |
| Redhat_linux | — | Upgrade python39-mod_wsgiUpgrade python39-pybind11Upgrade fence-agents-ipduUpgrade python-cffi-debugsourceUpgrade fence-agents-openstackUpgrade python-setuptoolsUpgrade fence-virtd-tcpUpgrade python39-pipUpgrade fence-agents-ibmbladeUpgrade python39-psutilUpgrade fence-agents-computeUpgrade fence-agents-intelmodularUpgrade scipy-debugsourceUpgrade python39-iniconfigUpgrade fence-agents-virshUpgrade python39-sixUpgrade fence-agents-ipmilanUpgrade fence-agents-kubevirtUpgrade python39-chardetUpgrade fence-agents-debugsourceUpgrade fence-virtdUpgrade python39-plyUpgrade python3.11-setuptools-wheelUpgrade fence-agents-allUpgrade fence-virtd-debuginfoUpgrade python39-develUpgrade python39-cryptographyUpgrade python39-wheel-wheelUpgrade python39-requestsUpgrade python39-rpm-macrosUpgrade python39-cryptography-debuginfoUpgrade python39-idnaUpgrade python39-pybind11-develUpgrade fence-agents-kdump-debuginfoUpgrade python39-pytestUpgrade fence-agents-aliyunUpgrade python39-psycopg2-debuginfoUpgrade fence-agents-azure-armUpgrade python3-setuptools-wheelUpgrade python39-wheelUpgrade python39-pluggyUpgrade fence-virtd-serialUpgrade ha-cloud-supportUpgrade fence-agents-heuristics-pingUpgrade resource-agents-debugsourceUpgrade fence-agents-wtiUpgrade fence-agents-debuginfoUpgrade python39-debugUpgrade python39-debuginfoUpgrade python39-tomlUpgrade fence-virtd-libvirtUpgrade python39-setuptoolsUpgrade fence-agents-ibm-powervsUpgrade python-cryptography-debugsourceUpgrade python-psycopg2-debugsourceUpgrade fence-agents-scsiUpgrade python39-libsUpgrade python39-urllib3Upgrade python39Upgrade python39-psycopg2-testsUpgrade fence-agents-lparUpgrade fence-agents-redfishUpgrade python39-setuptools-wheelUpgrade resource-agents-debuginfoUpgrade python39-cffiUpgrade python39-more-itertoolsUpgrade fence-virt-debuginfoUpgrade python39-tkinterUpgrade python39-pysocksUpgrade ha-cloud-support-debuginfoUpgrade python39-Cython-debuginfoUpgrade fence-agents-ilo-sshUpgrade resource-agents-aliyun-debuginfoUpgrade fence-virtUpgrade fence-agents-vmware-soapUpgrade fence-agents-awsUpgrade fence-agents-brocadeUpgrade fence-virtd-tcp-debuginfoUpgrade fence-agents-gceUpgrade fence-agents-ilo-mpUpgrade PyYAML-debugsourceUpgrade Cython-debugsourceUpgrade python39-pyparsingUpgrade python39-pyUpgrade python39-cffi-debuginfoUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-kubevirt-debuginfoUpgrade python39-pip-wheelUpgrade python39-debugsourceUpgrade fence-agents-hpbladeUpgrade fence-agents-zvmUpgrade python39-CythonUpgrade python39-numpy-f2pyUpgrade numpy-debugsourceUpgrade resource-agents-pafUpgrade fence-agents-ibm-vpcUpgrade fence-agents-vmware-restUpgrade fence-agents-commonUpgrade fence-agents-rsbUpgrade python39-wcwidthUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-kdumpUpgrade python3.11-setuptoolsUpgrade python39-psutil-debuginfoUpgrade python39-PyMySQLUpgrade fence-agents-emersonUpgrade python39-pycparserUpgrade fence-agents-sbdUpgrade fence-agents-ifmibUpgrade python39-numpy-docUpgrade python39-attrsUpgrade python39-lxmlUpgrade python-lxml-debugsourceUpgrade python39-scipy-debuginfoUpgrade fence-virtd-multicast-debuginfoUpgrade fence-agents-apc-snmpUpgrade python39-scipyUpgrade fence-virtd-cpgUpgrade fence-agents-rsaUpgrade fence-agents-apcUpgrade fence-agents-drac5Upgrade fence-agents-amt-wsUpgrade fence-agents-epsUpgrade python-psutil-debugsourceUpgrade fence-virtd-cpg-debuginfoUpgrade fence-agents-ilo2Upgrade python39-pyyamlUpgrade python3-setuptoolsUpgrade fence-agents-cisco-ucsUpgrade fence-virtd-serial-debuginfoUpgrade fence-agents-eaton-snmpUpgrade fence-agents-rhevmUpgrade python39-psycopg2-docUpgrade python3.12-setuptoolsUpgrade fence-agents-mpathNo solution existsUpgrade python39-lxml-debuginfoUpgrade python3.12-setuptools-wheelUpgrade fence-agents-cisco-mdsUpgrade resource-agentsUpgrade python39-packagingUpgrade python39-testUpgrade fence-virtd-multicastUpgrade resource-agents-gcpUpgrade python39-idleUpgrade fence-agents-bladecenterUpgrade platform-python-setuptoolsUpgrade resource-agents-aliyunUpgrade python39-psycopg2Upgrade fence-virtd-libvirt-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python39-numpy-debuginfoUpgrade python39-numpy | Aug 7, 2024 | Jul 15, 2024 |
| Rocky_linux | — | Upgrade python39-idleUpgrade fence-virtd-multicastUpgrade ha-cloud-support-debuginfoUpgrade fence-virtd-cpgUpgrade python39-numpyUpgrade fence-virtd-debuginfoUpgrade python39-numpy-f2pyUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-computeUpgrade python39-debugsourceUpgrade fence-virtd-tcp-debuginfoUpgrade python39Upgrade fence-agents-awsUpgrade python-cryptography-debugsourceUpgrade fence-virtUpgrade python39-cryptography-debuginfoUpgrade fence-agents-kdumpUpgrade python39-develUpgrade scipy-debugsourceUpgrade fence-agents-debugsourceUpgrade fence-virtd-tcpUpgrade fence-virtdUpgrade resource-agentsUpgrade python39-pybind11Upgrade python-lxml-debugsourceUpgrade fence-agents-openstackUpgrade fence-virtd-cpg-debuginfoUpgrade python39-cffi-debuginfoUpgrade Cython-debugsourceUpgrade python39-cryptographyUpgrade python39-lxmlUpgrade python39-lxml-debuginfoUpgrade python39-pyyamlUpgrade resource-agents-debuginfoUpgrade python39-psycopg2-testsUpgrade resource-agents-aliyunUpgrade python39-libsUpgrade fence-virtd-multicast-debuginfoUpgrade python39-CythonUpgrade fence-agents-gceUpgrade fence-agents-kubevirtUpgrade fence-virtd-libvirt-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python39-pybind11-develUpgrade python-cffi-debugsourceUpgrade python39-numpy-debuginfoUpgrade resource-agents-gcpUpgrade python39-pyyaml-debuginfoUpgrade fence-agents-debuginfoUpgrade fence-virtd-libvirtUpgrade python39-psutil-debuginfoUpgrade fence-agents-kdump-debuginfoUpgrade python-psutil-debugsourceUpgrade ha-cloud-supportUpgrade resource-agents-aliyun-debuginfoUpgrade python39-Cython-debuginfoUpgrade python39-scipyUpgrade python39-debugUpgrade python39-mod_wsgiUpgrade fence-virt-debuginfoUpgrade fence-virtd-serial-debuginfoUpgrade fence-agents-redfishUpgrade python39-debuginfoUpgrade numpy-debugsourceUpgrade python39-tkinterUpgrade python39-testUpgrade python39-psycopg2-debuginfoUpgrade python39-psutilUpgrade resource-agents-pafUpgrade PyYAML-debugsourceUpgrade python39-scipy-debuginfoUpgrade python39-psycopg2-docUpgrade fence-virtd-serialUpgrade fence-agents-allUpgrade resource-agents-debugsourceUpgrade python39-cffiUpgrade fence-agents-azure-armUpgrade fence-agents-aliyunUpgrade fence-agents-zvmUpgrade python39-psycopg2 | Oct 2, 2024 | Jul 15, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.3.5Upgrade Splunk Enterprise to version 9.4.3 | Sep 30, 2025 | Jul 15, 2024 |
| Suse | — | Upgrade python310-setuptoolsUpgrade python3-setuptools-testUpgrade python3-setuptools-wheelUpgrade python311-setuptools-wheelUpgrade python3-setuptoolsUpgrade python311-setuptoolsUpgrade python313-setuptools-wheelUpgrade python2-setuptoolsUpgrade python312-setuptoolsUpgrade python-setuptoolsUpgrade python39-setuptoolsUpgrade python36-setuptoolsUpgrade python313-setuptools | Aug 15, 2024 | Jul 15, 2024 |
| Ubuntu | — | Upgrade python3-setuptoolsUpgrade python3-setuptools (Ubuntu Pro)Upgrade python-setuptools (Ubuntu Pro)Upgrade pypy-setuptools (Ubuntu Pro) | Sep 13, 2024 | Jul 15, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 15, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub