Critical Security Update for Python Setuptools: CVE-2025-47273
Summary
RHSA-2025:11427: Red Hat Security Advisory: python-setuptools security update. Affects platform-python-setuptools versions < 0:39.2.0-7.el8_8.3. Fixed in 0:39.2.0-7.el8_8.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python Setuptools is a widely used package development and distribution library for Python. It simplifies the process of packaging Python projects and managing dependencies. The affected versions of Python Setuptools, including platform-python-setuptools, python-setuptools, python3-setuptools, and python3-setuptools-wheel, are integral to Python environments in Red Hat Enterprise Linux (RHEL) 8.8. This vulnerability exposes users to potential security risks, making it crucial to address promptly.
Vulnerability Detail
The vulnerability identified as CVE-2025-47273 affects multiple versions of Python Setuptools. It originates from improper handling of certain inputs, which could allow an attacker to execute arbitrary code or escalate privileges. The ramifications of this vulnerability can be severe, potentially compromising the integrity of applications that rely on these packages. Users are advised to take immediate action to mitigate risks associated with this vulnerability.
How To Fix
Minimum fixed version
0:39.2.0-7.el8_8.3
This is the first release that contains the fix.
sudo dnf update platform-python-setuptoolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of their applications by restricting access to the affected components or by using alternative package management solutions until the update can be applied. However, this is not a substitute for applying the security patch.
Conclusion
The vulnerability CVE-2025-47273 poses a significant risk to users of Python Setuptools in Red Hat Enterprise Linux 8.8. It is essential to update the affected packages to the patched version to safeguard against potential exploits. Users are encouraged to monitor their applications for vulnerabilities using tools like Vulert.
See every vulnerability recorded for platform-python-setuptools →
FAQ
CVE-2025-47273 is a security vulnerability affecting Python Setuptools that could allow attackers to execute arbitrary code.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider implementing access restrictions to the affected components as a temporary measure.
The CVSS score for this vulnerability is 7.1, indicating a high severity level.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2025:11427.json.
Related vulnerabilities
Recent vulnerabilities recorded for platform-python-setuptools.
