Critical Security Update for python3.12-setuptools: CVE-2025-47273
Summary
RHSA-2025:12834: Red Hat Security Advisory: python3.12-setuptools security update. Affects python3.12-setuptools versions < 0:68.2.2-5.el9_6. Fixed in 0:68.2.2-5.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python3.12-setuptools is a package that facilitates the installation and management of Python packages. It is a crucial tool for developers working with Python, providing functionalities that streamline the package management process. However, this package has been identified to have a security vulnerability that could potentially allow unauthorized access or manipulation of data.
Vulnerability Detail
The vulnerability, identified as CVE-2025-47273, originates from a flaw in the python3.12-setuptools package that could lead to unauthorized access to sensitive information. This could allow attackers to manipulate the package installation process, potentially leading to system compromise. The CVSS score for this vulnerability is 7.1, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
0:68.2.2-5.el9_6
This is the first release that contains the fix.
sudo dnf update python3.12-setuptoolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the use of the affected package until the update is applied. This may involve using alternative package management tools or manually installing packages without relying on python3.12-setuptools.
Conclusion
The python3.12-setuptools package has a critical vulnerability (CVE-2025-47273) that requires immediate attention. Users are advised to update to the patched version to mitigate potential risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for python3.12-setuptools →
FAQ
CVE-2025-47273 is a security vulnerability in the python3.12-setuptools package that could allow unauthorized access to sensitive information.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update the package immediately, consider using alternative package management tools or limiting the use of the affected package as a temporary workaround.
The CVSS score of this vulnerability is 7.1, indicating a high severity level that requires prompt action.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2025:12834.json.
Related vulnerabilities
Recent vulnerabilities recorded for python3.12-setuptools.
