Critical Security Update for python3.11-setuptools: CVE-2025-47273
Summary
RHSA-2025:13804: Red Hat Security Advisory: python3.11-setuptools security update. Affects python3.11-setuptools versions < 0:65.5.1-2.el8_8.2. Fixed in 0:65.5.1-2.el8_8.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The python3.11-setuptools package is a vital tool in the Python ecosystem, enabling developers to package and distribute Python projects. It provides essential functionalities such as dependency management and installation of Python packages. However, this package has been identified with a security vulnerability that could potentially compromise the integrity of applications relying on it.
Vulnerability Detail
CVE-2025-47273 is a security vulnerability found in the python3.11-setuptools package. This issue arises from improper handling of certain inputs, which could allow an attacker to execute arbitrary code or manipulate the environment in which the package operates. The ramifications of this vulnerability can be severe, leading to unauthorized access or data corruption in applications that utilize this package. The CVSS score for this vulnerability is 7.1, indicating a high level of risk.
How To Fix
Minimum fixed version
0:65.5.1-2.el8_8.2
This is the first release that contains the fix.
sudo dnf update python3.11-setuptoolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider temporarily restricting access to the affected application or using an alternative package that does not have this vulnerability until the update can be applied.
Conclusion
The python3.11-setuptools package has a critical vulnerability (CVE-2025-47273) that requires immediate attention. Updating to the patched version is essential to maintain the security and integrity of applications using this package. Utilize tools like Vulert to monitor for vulnerabilities in your software effectively.
See every vulnerability recorded for python3.11-setuptools →
FAQ
CVE-2025-47273 is a security vulnerability in the python3.11-setuptools package that could allow attackers to execute arbitrary code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update the package right away, consider restricting access to the affected application or using an alternative package until you can apply the update.
The CVSS score of this vulnerability is 7.1, indicating a high severity level.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2025:13804.json.
Related vulnerabilities
Recent vulnerabilities recorded for python3.11-setuptools.
