Critical Security Update for Python Setuptools: CVE-2025-47273
Summary
RHSA-2025:11426: Red Hat Security Advisory: python-setuptools security update. Affects platform-python-setuptools versions < 0:39.2.0-5.el8_2.2. Fixed in 0:39.2.0-5.el8_2.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python Setuptools is a widely used package development and distribution library for Python. It simplifies the process of packaging Python projects and managing dependencies. The affected packages include platform-python-setuptools, python-setuptools, python3-setuptools, and python3-setuptools-wheel, all of which are integral to Python development environments. This vulnerability exposes these packages to potential security risks, necessitating immediate attention from users and developers.
Vulnerability Detail
The vulnerability identified as CVE-2025-47273 originates from flaws in the Python Setuptools packages, which could allow an attacker to exploit the system by executing arbitrary code or causing denial of service. The severity of this vulnerability is underscored by its CVSS score of 7.1, indicating a high risk level. Users of affected packages are urged to take this threat seriously, as it can lead to significant security breaches if left unaddressed.
How To Fix
Minimum fixed version
0:39.2.0-5.el8_2.2
This is the first release that contains the fix.
sudo dnf update platform-python-setuptoolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the use of the affected packages until they can be updated. This may involve using alternative libraries or disabling certain functionalities that rely on the vulnerable packages.
Conclusion
The CVE-2025-47273 vulnerability poses a significant risk to users of Python Setuptools packages. It is crucial to update to the patched version to mitigate potential security threats. Users should remain vigilant and consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for platform-python-setuptools →
FAQ
CVE-2025-47273 is a security vulnerability affecting Python Setuptools packages that could allow attackers to execute arbitrary code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider using alternative libraries or disabling functionalities that rely on the vulnerable packages.
The CVSS score of this vulnerability is 7.1, indicating a high severity level.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2025:11426.json.
Related vulnerabilities
Recent vulnerabilities recorded for platform-python-setuptools.
