Critical Security Vulnerability in Python Setuptools Packages: CVE-2025-47273
Summary
RHSA-2025:11036: Red Hat Security Advisory: python-setuptools security update. Affects platform-python-setuptools versions < 0:39.2.0-9.el8_10. Fixed in 0:39.2.0-9.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python Setuptools is a package development and distribution library for Python, enabling developers to easily package and distribute their Python projects. It simplifies the process of managing dependencies and packaging Python applications. The affected packages include platform-python-setuptools, python-setuptools, python3-setuptools, and python3-setuptools-wheel, all of which are integral to Python development in Red Hat Enterprise Linux 8.
Vulnerability Detail
The vulnerability identified as CVE-2025-47273 affects multiple Python Setuptools packages, allowing for potential unauthorized access to sensitive information. This issue arises from improper handling of certain inputs, which could lead to information disclosure. If exploited, this vulnerability could allow attackers to gain access to sensitive data, impacting the integrity and confidentiality of applications relying on these packages.
How To Fix
Minimum fixed version
0:39.2.0-9.el8_10
This is the first release that contains the fix.
sudo dnf update platform-python-setuptoolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, if updating the packages is not immediately feasible, consider restricting access to the affected applications or services until the update can be applied. Additionally, review application logs for any suspicious activity that may indicate exploitation attempts.
Conclusion
The vulnerability CVE-2025-47273 poses a significant risk to applications using the affected Python Setuptools packages. It is crucial to update to the patched versions to mitigate potential security risks. Regular monitoring and proactive vulnerability management are essential to maintaining application security.
See every vulnerability recorded for platform-python-setuptools →
FAQ
CVE-2025-47273 is a security vulnerability affecting Python Setuptools packages that could lead to unauthorized access to sensitive information.
The affected packages include platform-python-setuptools, python-setuptools, python3-setuptools, and python3-setuptools-wheel.
The CVSS score for this vulnerability is 7.1, indicating a high severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, consider restricting access to the affected applications or services and monitor logs for any suspicious activity.
Related vulnerabilities
Recent vulnerabilities recorded for platform-python-setuptools.
