Moderate Security Update: python-setuptools Path Traversal Vulnerability
Summary
ALSA-2025:10407: Moderate: python-setuptools security update. Affects python3-setuptools versions < 53.0.0-13.el9_6.1. Fixed in 53.0.0-13.el9_6.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, and dynamic data types. The python3-setuptools package is essential for packaging Python projects, allowing developers to easily distribute and install their software. However, this package has been found to have a vulnerability that could potentially allow unauthorized access to system files.
Vulnerability Detail
The vulnerability identified as CVE-2025-47273 is a Path Traversal issue in the setuptools PackageIndex. This flaw allows an attacker to manipulate file paths, potentially leading to unauthorized access to sensitive files on the system. The implications of this vulnerability can be severe, as it may expose critical system information or allow for further exploitation of the system.
How To Fix
Minimum fixed version
53.0.0-13.el9_6.1
This is the first release that contains the fix.
sudo dnf update python3-setuptoolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the affected files or directories until the package is updated. However, this is not a permanent solution and updating the package is strongly advised.
Conclusion
The python3-setuptools package has a moderate security vulnerability that needs to be addressed promptly. By updating to the patched version, you can mitigate the risks associated with this vulnerability and ensure the security of your system.
See every vulnerability recorded for python3-setuptools →
FAQ
CVE-2025-47273 is a Path Traversal vulnerability found in the python3-setuptools package that could allow unauthorized access to system files.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Not addressing this vulnerability could lead to unauthorized access to sensitive files, potentially compromising the security of your system.
It is recommended to regularly check for updates and apply them promptly to ensure that your software is secure and up to date.
Vulert is a service that monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for python3-setuptools.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
