Critical Security Update for python3.11-setuptools: CVE-2025-47273
Summary
RHSA-2025:13803: Red Hat Security Advisory: python3.11-setuptools security update. Affects python3.11-setuptools versions < 0:65.5.1-2.el9_2.2. Fixed in 0:65.5.1-2.el9_2.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python3.11-setuptools is a package that facilitates the installation and management of Python packages. It is an essential tool for developers working with Python, providing functionalities to package and distribute Python code. This package is widely used in various applications, making it crucial for maintaining security and stability. The vulnerability in question affects the package's integrity, potentially allowing unauthorized modifications.
Vulnerability Detail
The vulnerability identified as CVE-2025-47273 originates from a flaw in the python3.11-setuptools package, which can lead to unauthorized access and manipulation of the package's functionalities. This could allow an attacker to execute arbitrary code or alter the behavior of applications relying on this package. The ramifications of this vulnerability are significant, as it compromises the security of applications that depend on python3.11-setuptools, potentially leading to data breaches or system compromises.
How To Fix
Minimum fixed version
0:65.5.1-2.el9_2.2
This is the first release that contains the fix.
sudo dnf update python3.11-setuptoolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider restricting access to the affected package or using an alternative package manager that does not rely on python3.11-setuptools until the update can be applied.
Conclusion
The python3.11-setuptools package has a critical vulnerability (CVE-2025-47273) that requires immediate attention. Updating to the patched version is essential to secure applications relying on this package. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for python3.11-setuptools →
FAQ
CVE-2025-47273 is a security vulnerability in the python3.11-setuptools package that allows unauthorized access and manipulation of the package's functionalities.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Failing to address this vulnerability could lead to unauthorized code execution, data breaches, and compromised application integrity.
Yes, a patch is available. You should update to version 0:65.5.1-2.el9_2.2 to mitigate the vulnerability.
Vulert monitors and alerts for open-source vulnerabilities in software using just a manifest file like package-lock.json, providing real-time insights into potential security issues.
Related vulnerabilities
Recent vulnerabilities recorded for python3.11-setuptools.
