Critical Security Update for python-setuptools: Addressing Vulnerability RHSA-2025:9940
Summary
RHSA-2025:9940: Red Hat Security Advisory: python-setuptools security update. Affects python-setuptools versions < 0:69.0.3-12.el10_0. Fixed in 0:69.0.3-12.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python-setuptools is a package development and distribution tool for Python, facilitating the packaging of Python projects and managing dependencies. It is widely used in Python environments to streamline the installation process of software packages. The vulnerability in question affects versions prior to 0:69.0.3-12.el10_0, which could lead to potential security risks if not addressed.
Vulnerability Detail
The vulnerability identified as RHSA-2025:9940 originates from a flaw in the python-setuptools package, which could allow an attacker to exploit the system's integrity. The CVSS score of 7.1 indicates a high severity level, suggesting that unauthorized access could lead to information disclosure or system compromise. This vulnerability affects not only python-setuptools but also its related packages, python3-setuptools and python3-setuptools-wheel, making it critical for users to update their installations promptly.
How To Fix
Minimum fixed version
0:69.0.3-12.el10_0
This is the first release that contains the fix.
sudo dnf update python-setuptoolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider temporarily disabling the affected package or restricting its use until a proper update can be applied. However, this is not a long-term solution and should only be used as a stopgap measure.
Conclusion
In summary, the vulnerability RHSA-2025:9940 affects critical Python packaging tools, posing significant security risks. Users are strongly advised to update their installations to the patched version to mitigate these risks. Regular monitoring and timely updates are essential for maintaining software security.
See every vulnerability recorded for python-setuptools →
FAQ
The CVSS score of this vulnerability is 7.1, indicating a high severity level.
The affected packages include python-setuptools, python3-setuptools, and python3-setuptools-wheel.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If you cannot update the package immediately, consider disabling the affected package or restricting its use until you can apply the update.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2025:9940.json.
Related vulnerabilities
Recent vulnerabilities recorded for python-setuptools.
