Critical Security Update for python3-setuptools: CVE-2025-47273
Summary
RHSA-2025:11607: Red Hat Security Advisory: python3-setuptools security update. Affects python3-setuptools versions < 0:39.2.0-10.el7_9.2. Fixed in 0:39.2.0-10.el7_9.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python3-setuptools is a package that facilitates the packaging of Python projects, enabling developers to easily distribute their code. It provides essential tools for building and installing Python packages, managing dependencies, and ensuring compatibility across different environments. However, vulnerabilities in this package can lead to significant security risks, affecting the integrity and reliability of applications that depend on it.
Vulnerability Detail
The vulnerability identified as CVE-2025-47273 affects python3-setuptools, allowing unauthorized access to sensitive information. This issue arises from improper handling of certain inputs, which can lead to information disclosure. If exploited, attackers could gain access to confidential data, potentially compromising the security of the entire application. The CVSS score for this vulnerability is 7.1, indicating a high severity level.
How To Fix
Minimum fixed version
0:39.2.0-10.el7_9.2
This is the first release that contains the fix.
sudo dnf update python3-setuptoolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider restricting access to the affected application or disabling features that utilize python3-setuptools until the package can be updated. However, this is not a permanent solution and should only be used as a stopgap measure.
Conclusion
The vulnerability CVE-2025-47273 in python3-setuptools poses a significant security risk that can lead to unauthorized access to sensitive information. It is crucial to update to the patched version to mitigate this risk. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for python3-setuptools →
FAQ
CVE-2025-47273 is a security vulnerability in python3-setuptools that can lead to unauthorized access to sensitive information.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 7.1, indicating a high level of severity.
You can update python3-setuptools by running the command 'sudo yum update python3-setuptools' in your terminal.
If you cannot update immediately, consider restricting access to the affected application or disabling features that use python3-setuptools as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for python3-setuptools.
