CVE-2022-40897
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.9
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
- Record
CVE-2022-40897- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1333
- Updated
- 2026-11-02
CVE List
5.9
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
- Record
CVE-2022-40897- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1333
- Updated
- 2026-11-02
EUVDEUVD-2022-0278
5.9
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
- Record
EUVD-2022-0278- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-r9hx-vwmv-q579
8.7
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
Python Packaging Authority (PyPA)'s setuptools is a library designed to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier could allow remote attackers to cause a denial of service by fetching malicious HTML from a PyPI package or custom PackageIndex page due to a vulnerable Regular Expression in package_index. This has been patched in version 65.5.1.
- Record
GHSA-r9hx-vwmv-q579- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1333
- Updated
- 2026-11-02
OSVAZL-60207
5.9
CVE-2022-40897 affecting package python3 for versions less than 3.9.19-11
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
- Record
AZL-60207- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2022-40897
5.9
CVE-2022-40897 does not affect BellSoft software
- Record
BELL-CVE-2022-40897- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 42 moreShow less
OSV
5.9
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
- Record
CVE-2022-40897- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-r9hx-vwmv-q579
8.7
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
Python Packaging Authority (PyPA)'s setuptools is a library designed to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier could allow remote attackers to cause a denial of service by fetching malicious HTML from a PyPI package or custom PackageIndex page due to a vulnerable Regular Expression in package_index. This has been patched in version 65.5.1.
- Record
GHSA-r9hx-vwmv-q579- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1333
- Updated
- 2026-11-02
OSVOESA-2023-1004
7.5
python-setuptools security update
Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages.This package contains a python wheel of setuptools to use with venv.
Security Fix(es):
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.(CVE-2022-40897)
- Record
OESA-2023-1004- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:0835
5.9
Red Hat Security Advisory: python-setuptools security update
- Record
RHSA-2023:0835- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:0952
5.9
Red Hat Security Advisory: python-setuptools security update
- Record
RHSA-2023:0952- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:6793
8.6
Red Hat Security Advisory: rh-python38-python security update
- Record
RHSA-2023:6793- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2023:7395
5.9
Red Hat Security Advisory: python-setuptools security update
- Record
RHSA-2023:7395- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:2985
6.5
Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update
- Record
RHSA-2024:2985- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2024:2987
7.5
Red Hat Security Advisory: python27:2.7 security update
- Record
RHSA-2024:2987- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:4421
5.9
Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update
- Record
RHSA-2024:4421- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:6915
6.8
Red Hat Security Advisory: python39:3.9 security update
- Record
RHSA-2024:6915- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRLSA-2023:0835
5.9
Moderate: python-setuptools security update
The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages.
Security Fix(es):
- pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:0835- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2023:0952
5.9
Moderate: python-setuptools security update
The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages.
Security Fix(es):
- pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:0952- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2024:2987
7.8
Moderate: python27:2.7 security update
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.
Security Fix(es):
-
pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
-
python: use after free in heappushpop() of heapq module (CVE-2022-48560)
-
python: XML External Entity in XML processing plistlib module (CVE-2022-48565)
-
python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)
-
jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.
- Record
RLSA-2024:2987- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVROOT-APP-PYPI-CVE-2022-40897
7.5
CVE-2022-40897 in setuptools - Patched by Root
Root has patched CVE-2022-40897 in the setuptools package for Root:PyPI. Multiple fixed versions available.
- Record
ROOT-APP-PYPI-CVE-2022-40897- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-40897
5.9
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
- Record
UBUNTU-CVE-2022-40897- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2023:0835 No score
Moderate: python-setuptools security update
The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages.
Security Fix(es):
- pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:0835- Updated
- 2026-11-02
OSVALSA-2023:0952 No score
Moderate: python-setuptools security update
The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages.
Security Fix(es):
- pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:0952- Updated
- 2026-11-02
OSVALSA-2024:2985 No score
Moderate: python39:3.9 and python39-devel:3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
- pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
- python-cryptography: memory corruption via immutable objects (CVE-2023-23931)
- python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)
- python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2985- Updated
- 2026-11-02
OSVALSA-2024:2987 No score
Moderate: python27:2.7 security update
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.
Security Fix(es):
- pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
- python: use after free in heappushpop() of heapq module (CVE-2022-48560)
- python: XML External Entity in XML processing plistlib module (CVE-2022-48565)
- python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)
- jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2987- Updated
- 2026-11-02
OSVBIT-setuptools-2022-40897 No score
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
- Record
BIT-setuptools-2022-40897- Updated
- 2026-11-02
OSVCLSA-2025-1761051864 No score
python3-setuptools: Fix of 2 CVEs
- CVE-2022-40897: fix Regular Expression Denial of Service (ReDoS) in package_index.py
- CVE-2024-6345: fix remote code execution in package_index module
- Record
CLSA-2025-1761051864- Updated
- 2026-11-02
OSVCLSA-2025-1761056282 No score
python3-setuptools: Fix of 2 CVEs
- CVE-2022-40897: fix Regular Expression Denial of Service (ReDoS) in package_index.py
- CVE-2024-6345: fix remote code execution in package_index module
- Record
CLSA-2025-1761056282- Updated
- 2026-11-02
OSVCLSA-2026-1774916703 No score
TuxCare security update for setuptools (1 CVE)
TuxCare rebuilt setuptools to address 1 CVE. Fixed in 59.8.0.post1+tuxcare.
- Record
CLSA-2026-1774916703- Updated
- 2026-11-02
OSVCLSA-2026-1789379973 No score
TuxCare security update for setuptools (1 CVE)
TuxCare rebuilt setuptools to address 1 CVE. Fixed in 60.0.0.post2+tuxcare.
- Record
CLSA-2026-1789379973- Updated
- 2026-11-02
OSVCLSA-2026-1791500181 No score
python-setuptools: Fix of CVE-2022-40897
- CVE-2022-40897: fix ReDoS in the package_index REL regular expression
- Record
CLSA-2026-1791500181- Updated
- 2026-11-02
OSVCLSA-2026-1791500952 No score
python-setuptools: Fix of CVE-2022-40897
- CVE-2022-40897: fix ReDoS in the package_index REL regular expression
- Record
CLSA-2026-1791500952- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-40897 No score
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
- Record
DEBIAN-CVE-2022-40897- Updated
- 2026-11-03
OSVMGASA-2023-0219 No score
Updated python-setuptools packages fix security vulnerability
Denial of service via crafted HTML (CVE-2022-40897)
- Record
MGASA-2023-0219- Updated
- 2026-11-02
OSVPYSEC-2022-43012 No score
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
- Record
PYSEC-2022-43012- Updated
- 2026-11-02
OSVRLSA-2024:2985 No score
Moderate: python39:3.9 and python39-devel:3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
-
pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
-
python-cryptography: memory corruption via immutable objects (CVE-2023-23931)
-
python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)
-
python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.
- Record
RLSA-2024:2985- Updated
- 2026-11-02
OSVSUSE-SU-2023:0091-1 No score
Security update for python310-setuptools
This update for python310-setuptools fixes the following issues:
- CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).
- Record
SUSE-SU-2023:0091-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0093-1 No score
Security update for python-setuptools
This update for python-setuptools fixes the following issues:
- CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).
- Record
SUSE-SU-2023:0093-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0094-1 No score
Security update for python36-setuptools
This update for python36-setuptools fixes the following issues:
- CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).
- Record
SUSE-SU-2023:0094-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0159-1 No score
Security update for python-setuptools
This update for python-setuptools fixes the following issues:
- CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).
- Record
SUSE-SU-2023:0159-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0202-1 No score
Security update for python39-setuptools
This update for python39-setuptools fixes the following issues:
- CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).
- Record
SUSE-SU-2023:0202-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0223-1 No score
Security update for python-setuptools
This update for python-setuptools fixes the following issues:
- CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).
- Record
SUSE-SU-2023:0223-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0402-1 No score
Security update for python-setuptools
This update for python-setuptools fixes the following issues:
- CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).
- Record
SUSE-SU-2023:0402-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0403-1 No score
Security update for python-setuptools
This update for python-setuptools fixes the following issues:
- CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).
- Record
SUSE-SU-2023:0403-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4517-1 No score
Security update for python3-setuptools
This update for python3-setuptools fixes the following issues:
- CVE-2022-40897: Fixed Regular Expression Denial of Service (ReDoS) in package_index.py (bsc#1206667).
- Record
SUSE-SU-2023:4517-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2435-1 No score
Security update for python3-setuptools
This update for python3-setuptools fixes the following issues:
- CVE-2022-40897: Fixed Regular Expression Denial of Service (ReDoS) in package_index.py (bsc#1206667).
- Record
SUSE-SU-2024:2435-1- Updated
- 2026-11-02
OSVUSN-5817-1 No score
python-setuptools, setuptools vulnerability
Sebastian Chnelik discovered that setuptools incorrectly handled certain regex inputs. An attacker could possibly use this issue to cause a denial of service.
- Record
USN-5817-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
setuptoolsPyPI |
before 65.5.1 | 65.5.1 |
platform-python-setuptoolsAlmaLinux:8 |
before 39.2.0-6.el8_7.1 | 39.2.0-6.el8_7.1 |
python3-setuptoolsAlmaLinux:8 |
before 39.2.0-6.el8_7.1 | 39.2.0-6.el8_7.1 |
python3-setuptools-wheelAlmaLinux:8 |
before 39.2.0-6.el8_7.1 | 39.2.0-6.el8_7.1 |
python3-setuptoolsAlmaLinux:9 |
before 53.0.0-10.el9_1.1 | 53.0.0-10.el9_1.1 |
python3-setuptools-wheelAlmaLinux:9 |
before 53.0.0-10.el9_1.1 | 53.0.0-10.el9_1.1 |
python39AlmaLinux:8 From an advisory covering 4 CVEs |
before 3.9.18-3.module_el8.10.0+3765+2f9a457d | 3.9.18-3.module_el8.10.0+3765+2f9a457d |
python39-CythonAlmaLinux:8 From an advisory covering 4 CVEs |
before 0.29.21-5.module_el8.6.0+2780+a40f65e1 | 0.29.21-5.module_el8.6.0+2780+a40f65e1 |
python39-CythonAlmaLinux:8 From an advisory covering 4 CVEs |
before 0.29.21-5.module_el8.6.0+3248+c431e88c | 0.29.21-5.module_el8.6.0+3248+c431e88c |
python39-PyMySQLAlmaLinux:8 From an advisory covering 4 CVEs |
before 0.10.1-2.module_el8.6.0+2780+a40f65e1 | 0.10.1-2.module_el8.6.0+2780+a40f65e1 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python39-attrsAlmaLinux:8 From an advisory covering 4 CVEs |
before 20.3.0-2.module_el8.6.0+2780+a40f65e1 | 20.3.0-2.module_el8.6.0+2780+a40f65e1 |
python39-cffiAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.14.3-2.module_el8.6.0+2780+a40f65e1 | 1.14.3-2.module_el8.6.0+2780+a40f65e1 |
python39-cffiAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.14.3-2.module_el8.6.0+3248+c431e88c | 1.14.3-2.module_el8.6.0+3248+c431e88c |
python39-chardetAlmaLinux:8 From an advisory covering 4 CVEs |
before 3.0.4-19.module_el8.6.0+2780+a40f65e1 | 3.0.4-19.module_el8.6.0+2780+a40f65e1 |
python39-cryptographyAlmaLinux:8 From an advisory covering 4 CVEs |
before 3.3.1-3.module_el8.10.0+3765+2f9a457d | 3.3.1-3.module_el8.10.0+3765+2f9a457d |
python39-debugAlmaLinux:8 From an advisory covering 4 CVEs |
before 3.9.18-3.module_el8.10.0+3765+2f9a457d | 3.9.18-3.module_el8.10.0+3765+2f9a457d |
python39-develAlmaLinux:8 From an advisory covering 4 CVEs |
before 3.9.18-3.module_el8.10.0+3765+2f9a457d | 3.9.18-3.module_el8.10.0+3765+2f9a457d |
python39-idleAlmaLinux:8 From an advisory covering 4 CVEs |
before 3.9.18-3.module_el8.10.0+3765+2f9a457d | 3.9.18-3.module_el8.10.0+3765+2f9a457d |
python39-idnaAlmaLinux:8 From an advisory covering 4 CVEs |
before 2.10-3.module_el8.6.0+2780+a40f65e1 | 2.10-3.module_el8.6.0+2780+a40f65e1 |
python39-iniconfigAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.1.1-2.module_el8.6.0+2780+a40f65e1 | 1.1.1-2.module_el8.6.0+2780+a40f65e1 |
python39-libsAlmaLinux:8 From an advisory covering 4 CVEs |
before 3.9.18-3.module_el8.10.0+3765+2f9a457d | 3.9.18-3.module_el8.10.0+3765+2f9a457d |
python39-lxmlAlmaLinux:8 From an advisory covering 4 CVEs |
before 4.6.5-1.module_el8.6.0+2780+a40f65e1 | 4.6.5-1.module_el8.6.0+2780+a40f65e1 |
python39-lxmlAlmaLinux:8 From an advisory covering 4 CVEs |
before 4.6.5-1.module_el8.6.0+3248+c431e88c | 4.6.5-1.module_el8.6.0+3248+c431e88c |
python39-mod_wsgiAlmaLinux:8 From an advisory covering 4 CVEs |
before 4.7.1-7.module_el8.9.0+3634+fb2a896c | 4.7.1-7.module_el8.9.0+3634+fb2a896c |
python39-more-itertoolsAlmaLinux:8 From an advisory covering 4 CVEs |
before 8.5.0-2.module_el8.6.0+2780+a40f65e1 | 8.5.0-2.module_el8.6.0+2780+a40f65e1 |
python39-numpyAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.19.4-3.module_el8.6.0+2780+a40f65e1 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 |
python39-numpyAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.19.4-3.module_el8.6.0+3248+c431e88c | 1.19.4-3.module_el8.6.0+3248+c431e88c |
python39-numpy-docAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.19.4-3.module_el8.6.0+2780+a40f65e1 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 |
python39-numpy-f2pyAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.19.4-3.module_el8.6.0+2780+a40f65e1 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 |
python39-numpy-f2pyAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.19.4-3.module_el8.6.0+3248+c431e88c | 1.19.4-3.module_el8.6.0+3248+c431e88c |
python39-packagingAlmaLinux:8 From an advisory covering 4 CVEs |
before 20.4-4.module_el8.6.0+2780+a40f65e1 | 20.4-4.module_el8.6.0+2780+a40f65e1 |
python39-pipAlmaLinux:8 From an advisory covering 4 CVEs |
before 20.2.4-9.module_el8.10.0+3765+2f9a457d | 20.2.4-9.module_el8.10.0+3765+2f9a457d |
python39-pip-wheelAlmaLinux:8 From an advisory covering 4 CVEs |
before 20.2.4-9.module_el8.10.0+3765+2f9a457d | 20.2.4-9.module_el8.10.0+3765+2f9a457d |
python39-pluggyAlmaLinux:8 From an advisory covering 4 CVEs |
before 0.13.1-3.module_el8.6.0+2780+a40f65e1 | 0.13.1-3.module_el8.6.0+2780+a40f65e1 |
python39-plyAlmaLinux:8 From an advisory covering 4 CVEs |
before 3.11-10.module_el8.6.0+2780+a40f65e1 | 3.11-10.module_el8.6.0+2780+a40f65e1 |
python39-psutilAlmaLinux:8 From an advisory covering 4 CVEs |
before 5.8.0-4.module_el8.6.0+2780+a40f65e1 | 5.8.0-4.module_el8.6.0+2780+a40f65e1 |
python39-psutilAlmaLinux:8 From an advisory covering 4 CVEs |
before 5.8.0-4.module_el8.6.0+3248+c431e88c | 5.8.0-4.module_el8.6.0+3248+c431e88c |
python39-psycopg2AlmaLinux:8 From an advisory covering 4 CVEs |
before 2.8.6-3.module_el8.10.0+3765+2f9a457d | 2.8.6-3.module_el8.10.0+3765+2f9a457d |
python39-psycopg2-docAlmaLinux:8 From an advisory covering 4 CVEs |
before 2.8.6-3.module_el8.10.0+3765+2f9a457d | 2.8.6-3.module_el8.10.0+3765+2f9a457d |
python39-psycopg2-testsAlmaLinux:8 From an advisory covering 4 CVEs |
before 2.8.6-3.module_el8.10.0+3765+2f9a457d | 2.8.6-3.module_el8.10.0+3765+2f9a457d |
python39-pyAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.10.0-1.module_el8.6.0+2780+a40f65e1 | 1.10.0-1.module_el8.6.0+2780+a40f65e1 |
python39-pybind11AlmaLinux:8 From an advisory covering 4 CVEs |
before 2.7.1-1.module_el8.6.0+2780+a40f65e1 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 |
python39-pybind11AlmaLinux:8 From an advisory covering 4 CVEs |
before 2.7.1-1.module_el8.6.0+3248+c431e88c | 2.7.1-1.module_el8.6.0+3248+c431e88c |
python39-pybind11-develAlmaLinux:8 From an advisory covering 4 CVEs |
before 2.7.1-1.module_el8.6.0+3248+c431e88c | 2.7.1-1.module_el8.6.0+3248+c431e88c |
python39-pybind11-develAlmaLinux:8 From an advisory covering 4 CVEs |
before 2.7.1-1.module_el8.6.0+2780+a40f65e1 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 |
python39-pycparserAlmaLinux:8 From an advisory covering 4 CVEs |
before 2.20-3.module_el8.6.0+2780+a40f65e1 | 2.20-3.module_el8.6.0+2780+a40f65e1 |
python39-pyparsingAlmaLinux:8 From an advisory covering 4 CVEs |
before 2.4.7-5.module_el8.6.0+2780+a40f65e1 | 2.4.7-5.module_el8.6.0+2780+a40f65e1 |
python39-pysocksAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.7.1-4.module_el8.6.0+2780+a40f65e1 | 1.7.1-4.module_el8.6.0+2780+a40f65e1 |
python39-pytestAlmaLinux:8 From an advisory covering 4 CVEs |
before 6.0.2-2.module_el8.6.0+2780+a40f65e1 | 6.0.2-2.module_el8.6.0+2780+a40f65e1 |
python39-pyyamlAlmaLinux:8 From an advisory covering 4 CVEs |
before 5.4.1-1.module_el8.6.0+2780+a40f65e1 | 5.4.1-1.module_el8.6.0+2780+a40f65e1 |
python39-pyyamlAlmaLinux:8 From an advisory covering 4 CVEs |
before 5.4.1-1.module_el8.6.0+3248+c431e88c | 5.4.1-1.module_el8.6.0+3248+c431e88c |
python39-requestsAlmaLinux:8 From an advisory covering 4 CVEs |
before 2.25.0-3.module_el8.9.0+3634+fb2a896c | 2.25.0-3.module_el8.9.0+3634+fb2a896c |
python39-rpm-macrosAlmaLinux:8 From an advisory covering 4 CVEs |
before 3.9.18-3.module_el8.10.0+3765+2f9a457d | 3.9.18-3.module_el8.10.0+3765+2f9a457d |
python39-scipyAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.5.4-5.module_el8.9.0+3634+fb2a896c | 1.5.4-5.module_el8.9.0+3634+fb2a896c |
python39-setuptoolsAlmaLinux:8 From an advisory covering 4 CVEs |
before 50.3.2-5.module_el8.10.0+3765+2f9a457d | 50.3.2-5.module_el8.10.0+3765+2f9a457d |
python39-setuptools-wheelAlmaLinux:8 From an advisory covering 4 CVEs |
before 50.3.2-5.module_el8.10.0+3765+2f9a457d | 50.3.2-5.module_el8.10.0+3765+2f9a457d |
python39-sixAlmaLinux:8 From an advisory covering 4 CVEs |
before 1.15.0-3.module_el8.6.0+2780+a40f65e1 | 1.15.0-3.module_el8.6.0+2780+a40f65e1 |
python39-testAlmaLinux:8 From an advisory covering 4 CVEs |
before 3.9.18-3.module_el8.10.0+3765+2f9a457d | 3.9.18-3.module_el8.10.0+3765+2f9a457d |
python39-tkinterAlmaLinux:8 From an advisory covering 4 CVEs |
before 3.9.18-3.module_el8.10.0+3765+2f9a457d | 3.9.18-3.module_el8.10.0+3765+2f9a457d |
python39-tomlAlmaLinux:8 From an advisory covering 4 CVEs |
before 0.10.1-5.module_el8.6.0+2780+a40f65e1 | 0.10.1-5.module_el8.6.0+2780+a40f65e1 |
python39-urllib3AlmaLinux:8 From an advisory covering 4 CVEs |
before 1.25.10-5.module_el8.10.0+3765+2f9a457d | 1.25.10-5.module_el8.10.0+3765+2f9a457d |
python39-wcwidthAlmaLinux:8 From an advisory covering 4 CVEs |
before 0.2.5-3.module_el8.6.0+2780+a40f65e1 | 0.2.5-3.module_el8.6.0+2780+a40f65e1 |
python39-wheelAlmaLinux:8 From an advisory covering 4 CVEs |
before 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 |
python39-wheel-wheelAlmaLinux:8 From an advisory covering 4 CVEs |
before 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 |
babelAlmaLinux:8 From an advisory covering 5 CVEs |
before 2.5.1-10.module_el8.6.0+2781+fed64c13 | 2.5.1-10.module_el8.6.0+2781+fed64c13 |
python-nose-docsAlmaLinux:8 From an advisory covering 5 CVEs |
before 1.3.7-31.module_el8.6.0+2781+fed64c13 | 1.3.7-31.module_el8.6.0+2781+fed64c13 |
python-psycopg2-docAlmaLinux:8 From an advisory covering 5 CVEs |
before 2.7.5-8.module_el8.9.0+3640+8d3927b5 | 2.7.5-8.module_el8.9.0+3640+8d3927b5 |
python-sqlalchemy-docAlmaLinux:8 From an advisory covering 5 CVEs |
before 1.3.2-2.module_el8.6.0+2781+fed64c13 | 1.3.2-2.module_el8.6.0+2781+fed64c13 |
python2AlmaLinux:8 From an advisory covering 5 CVEs |
before 2.7.18-17.module_el8.10.0+3783+2756348e.alma | 2.7.18-17.module_el8.10.0+3783+2756348e.alma |
python2-CythonAlmaLinux:8 From an advisory covering 5 CVEs |
before 0.28.1-7.module_el8.6.0+3162+01a09e5a | 0.28.1-7.module_el8.6.0+3162+01a09e5a |
python2-CythonAlmaLinux:8 From an advisory covering 5 CVEs |
before 0.28.1-7.module_el8.6.0+2781+fed64c13 | 0.28.1-7.module_el8.6.0+2781+fed64c13 |
python2-PyMySQLAlmaLinux:8 From an advisory covering 5 CVEs |
before 0.8.0-10.module_el8.6.0+2781+fed64c13 | 0.8.0-10.module_el8.6.0+2781+fed64c13 |
python2-attrsAlmaLinux:8 From an advisory covering 5 CVEs |
before 17.4.0-10.module_el8.6.0+2781+fed64c13 | 17.4.0-10.module_el8.6.0+2781+fed64c13 |
python2-babelAlmaLinux:8 From an advisory covering 5 CVEs |
before 2.5.1-10.module_el8.6.0+2781+fed64c13 | 2.5.1-10.module_el8.6.0+2781+fed64c13 |
python2-backportsAlmaLinux:8 From an advisory covering 5 CVEs |
before 1.0-16.module_el8.6.0+2781+fed64c13 | 1.0-16.module_el8.6.0+2781+fed64c13 |
python3Azure Linux:2 |
before 3.9.19-11 | 3.9.19-11 |
setuptoolsBitnami |
before 65.5.1 | 65.5.1 |
python3-setuptoolsTuxCare:OracleLinux:7 From an advisory covering 2 CVEs |
before 39.2.0-10.0.5.el7.tuxcare.els1 | 39.2.0-10.0.5.el7.tuxcare.els1 |
python3-setuptoolsTuxCare:CentOS:7 From an advisory covering 2 CVEs |
before 39.2.0-10.0.5.el7.tuxcare.els1 | 39.2.0-10.0.5.el7.tuxcare.els1 |
setuptoolsTuxCare:PyPI |
59.8.0 up to 59.8.0.post1+tuxcare | 59.8.0.post1+tuxcare |
setuptoolsTuxCare:PyPI |
60.0.0 up to 60.0.0.post2+tuxcare, plus listed versions 60.0.0.post1+tuxcare |
60.0.0.post2+tuxcare |
python-setuptoolsTuxCare:CentOS:7 |
before 0.9.8-7.0.3.el7.tuxcare.els3 | 0.9.8-7.0.3.el7.tuxcare.els3 |
python-setuptoolsTuxCare:OracleLinux:7 |
before 0.9.8-7.0.3.el7.tuxcare.els3 | 0.9.8-7.0.3.el7.tuxcare.els3 |
setuptoolsDebian:12 |
before 65.6.3-1 | 65.6.3-1 |
setuptoolsDebian:13 |
before 65.6.3-1 | 65.6.3-1 |
setuptoolsDebian:14 |
before 65.6.3-1 | 65.6.3-1 |
setuptoolsDebian:11 From an advisory covering 2 CVEs |
before 52.0.0-4+deb11u1, plus listed versions 52.0.0-4 |
52.0.0-4+deb11u1 |
setuptoolsPyPI |
before 65.5.1, plus listed versions 0.6b10.6b20.6b30.6b40.6c1 Show 45 moreShow less0.6c100.6c110.6c20.6c30.6c40.6c50.6c60.6c70.6c80.6c90.7.20.7.30.7.40.7.50.7.60.7.70.7.80.80.90.9.10.9.20.9.30.9.40.9.50.9.60.9.70.9.81.01.11.1.11.1.21.1.31.1.41.1.51.1.61.1.71.21.31.3.11.3.21.41.4.11.4.210.010.0.1 |
65.5.1 |
python-setuptoolsMageia:8 |
before 56.2.0-1.1.mga8 | 56.2.0-1.1.mga8 |
python-setuptoolsopenEuler:20.03-LTS-SP1 |
before 44.1.1-2.oe1 | 44.1.1-2.oe1 |
python-setuptoolsopenEuler:20.03-LTS-SP3 |
before 44.1.1-2.oe1 | 44.1.1-2.oe1 |
python-setuptoolsopenEuler:22.03-LTS |
before 59.4.0-5.oe2203sp1 | 59.4.0-5.oe2203sp1 |
python-setuptoolsopenEuler:22.03-LTS-SP1 |
before 59.4.0-5.oe2203sp1 | 59.4.0-5.oe2203sp1 |
setuptoolsPyPI |
before 65.5.1, plus listed versions 0.6b10.6b20.6b30.6b40.6c1 Show 45 moreShow less0.6c100.6c110.6c20.6c30.6c40.6c50.6c60.6c70.6c80.6c90.7.20.7.30.7.40.7.50.7.60.7.70.7.80.80.90.9.10.9.20.9.30.9.40.9.50.9.60.9.70.9.81.01.11.1.11.1.21.1.31.1.41.1.51.1.61.1.71.21.31.3.11.3.21.41.4.11.4.210.010.0.1 |
65.5.1 |
platform-python-setuptoolsRed Hat:enterprise_linux:8::baseos |
before 0:39.2.0-6.el8_7.1 | 0:39.2.0-6.el8_7.1 |
python-setuptoolsRed Hat:enterprise_linux:8::baseos |
before 0:39.2.0-6.el8_7.1 | 0:39.2.0-6.el8_7.1 |
python3-setuptoolsRed Hat:enterprise_linux:8::baseos |
before 0:39.2.0-6.el8_7.1 | 0:39.2.0-6.el8_7.1 |
python3-setuptools-wheelRed Hat:enterprise_linux:8::baseos |
before 0:39.2.0-6.el8_7.1 | 0:39.2.0-6.el8_7.1 |
python-setuptoolsRed Hat:enterprise_linux:9::baseos |
before 0:53.0.0-10.el9_1.1 | 0:53.0.0-10.el9_1.1 |
python3-setuptoolsRed Hat:enterprise_linux:9::baseos |
before 0:53.0.0-10.el9_1.1 | 0:53.0.0-10.el9_1.1 |
python3-setuptools-wheelRed Hat:enterprise_linux:9::baseos |
before 0:53.0.0-10.el9_1.1 | 0:53.0.0-10.el9_1.1 |
rh-python38-pythonRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:3.8.18-2.el7 | 0:3.8.18-2.el7 |
rh-python38-python-debugRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:3.8.18-2.el7 | 0:3.8.18-2.el7 |
rh-python38-python-debuginfoRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:3.8.18-2.el7 | 0:3.8.18-2.el7 |
rh-python38-python-develRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:3.8.18-2.el7 | 0:3.8.18-2.el7 |
rh-python38-python-idleRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:3.8.18-2.el7 | 0:3.8.18-2.el7 |
rh-python38-python-libsRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:3.8.18-2.el7 | 0:3.8.18-2.el7 |
rh-python38-python-pipRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:19.3.1-4.el7 | 0:19.3.1-4.el7 |
rh-python38-python-pip-wheelRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:19.3.1-4.el7 | 0:19.3.1-4.el7 |
rh-python38-python-rpm-macrosRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:3.8.18-2.el7 | 0:3.8.18-2.el7 |
rh-python38-python-srpm-macrosRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:3.8.18-2.el7 | 0:3.8.18-2.el7 |
rh-python38-python-testRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:3.8.18-2.el7 | 0:3.8.18-2.el7 |
rh-python38-python-tkinterRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:3.8.18-2.el7 | 0:3.8.18-2.el7 |
rh-python38-python-setuptoolsRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:41.6.0-8.el7 | 0:41.6.0-8.el7 |
rh-python38-python-setuptools-wheelRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:41.6.0-8.el7 | 0:41.6.0-8.el7 |
rh-python38-python-wheelRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:0.33.6-9.el7 | 0:0.33.6-9.el7 |
rh-python38-python-wheel-wheelRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:0.33.6-9.el7 | 0:0.33.6-9.el7 |
rh-python38-python-cryptographyRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:2.8-6.el7 | 0:2.8-6.el7 |
rh-python38-python-cryptography-debuginfoRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:2.8-6.el7 | 0:2.8-6.el7 |
rh-python38-python-requestsRed Hat:rhel_software_collections:3::el7 From an advisory covering 8 CVEs |
before 0:2.22.0-11.el7 | 0:2.22.0-11.el7 |
platform-python-setuptoolsRed Hat:rhel_eus:8.6::baseos |
before 0:39.2.0-7.el8_6 | 0:39.2.0-7.el8_6 |
python-setuptoolsRed Hat:rhel_eus:8.6::baseos |
before 0:39.2.0-7.el8_6 | 0:39.2.0-7.el8_6 |
python3-setuptoolsRed Hat:rhel_eus:8.6::baseos |
before 0:39.2.0-7.el8_6 | 0:39.2.0-7.el8_6 |
python3-setuptools-wheelRed Hat:rhel_eus:8.6::baseos |
before 0:39.2.0-7.el8_6 | 0:39.2.0-7.el8_6 |
PyYAMLRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:5.4.1-1.module+el8.9.0+19644+d68f775d | 0:5.4.1-1.module+el8.9.0+19644+d68f775d |
PyYAML-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:5.4.1-1.module+el8.9.0+19644+d68f775d | 0:5.4.1-1.module+el8.9.0+19644+d68f775d |
mod_wsgiRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:4.7.1-7.module+el8.9.0+19644+d68f775d | 0:4.7.1-7.module+el8.9.0+19644+d68f775d |
numpyRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.19.4-3.module+el8.9.0+19644+d68f775d | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
numpy-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.19.4-3.module+el8.9.0+19644+d68f775d | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
python-PyMySQLRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:0.10.1-2.module+el8.9.0+19644+d68f775d | 0:0.10.1-2.module+el8.9.0+19644+d68f775d |
python-cffiRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.3-2.module+el8.9.0+19644+d68f775d | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
python-cffi-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.3-2.module+el8.9.0+19644+d68f775d | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
python-chardetRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.0.4-19.module+el8.9.0+19644+d68f775d | 0:3.0.4-19.module+el8.9.0+19644+d68f775d |
python-cryptographyRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
python-cryptography-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
python-idnaRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:2.10-3.module+el8.9.0+19644+d68f775d | 0:2.10-3.module+el8.9.0+19644+d68f775d |
python-lxmlRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:4.6.5-1.module+el8.9.0+19644+d68f775d | 0:4.6.5-1.module+el8.9.0+19644+d68f775d |
python-lxml-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:4.6.5-1.module+el8.9.0+19644+d68f775d | 0:4.6.5-1.module+el8.9.0+19644+d68f775d |
python-plyRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.11-10.module+el8.9.0+19644+d68f775d | 0:3.11-10.module+el8.9.0+19644+d68f775d |
python-psutilRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:5.8.0-4.module+el8.9.0+19644+d68f775d | 0:5.8.0-4.module+el8.9.0+19644+d68f775d |
python-psutil-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:5.8.0-4.module+el8.9.0+19644+d68f775d | 0:5.8.0-4.module+el8.9.0+19644+d68f775d |
python-psycopg2Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:2.8.6-3.module+el8.10.0+21142+453d2b75 | 0:2.8.6-3.module+el8.10.0+21142+453d2b75 |
python-psycopg2-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:2.8.6-3.module+el8.10.0+21142+453d2b75 | 0:2.8.6-3.module+el8.10.0+21142+453d2b75 |
python-pycparserRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:2.20-3.module+el8.9.0+19644+d68f775d | 0:2.20-3.module+el8.9.0+19644+d68f775d |
python-pysocksRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.7.1-4.module+el8.9.0+19644+d68f775d | 0:1.7.1-4.module+el8.9.0+19644+d68f775d |
python-requestsRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:2.25.0-3.module+el8.9.0+19644+d68f775d | 0:2.25.0-3.module+el8.9.0+19644+d68f775d |
python-tomlRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:0.10.1-5.module+el8.9.0+19644+d68f775d | 0:0.10.1-5.module+el8.9.0+19644+d68f775d |
python-urllib3Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.25.10-5.module+el8.10.0+20443+f0a692fe | 0:1.25.10-5.module+el8.10.0+20443+f0a692fe |
python-wheelRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 1:0.35.1-4.module+el8.9.0+19644+d68f775d | 1:0.35.1-4.module+el8.9.0+19644+d68f775d |
python39Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.9.18-3.module+el8.10.0+21142+453d2b75 | 0:3.9.18-3.module+el8.10.0+21142+453d2b75 |
python39-PyMySQLRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:0.10.1-2.module+el8.9.0+19644+d68f775d | 0:0.10.1-2.module+el8.9.0+19644+d68f775d |
python39-cffiRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.3-2.module+el8.9.0+19644+d68f775d | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
python39-cffi-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.14.3-2.module+el8.9.0+19644+d68f775d | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
python39-chardetRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.0.4-19.module+el8.9.0+19644+d68f775d | 0:3.0.4-19.module+el8.9.0+19644+d68f775d |
python39-cryptographyRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
python39-cryptography-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
python39-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.9.18-3.module+el8.10.0+21142+453d2b75 | 0:3.9.18-3.module+el8.10.0+21142+453d2b75 |
python39-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.9.18-3.module+el8.10.0+21142+453d2b75 | 0:3.9.18-3.module+el8.10.0+21142+453d2b75 |
python39-develRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.9.18-3.module+el8.10.0+21142+453d2b75 | 0:3.9.18-3.module+el8.10.0+21142+453d2b75 |
python39-idleRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.9.18-3.module+el8.10.0+21142+453d2b75 | 0:3.9.18-3.module+el8.10.0+21142+453d2b75 |
python39-idnaRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:2.10-3.module+el8.9.0+19644+d68f775d | 0:2.10-3.module+el8.9.0+19644+d68f775d |
python39-libsRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:3.9.18-3.module+el8.10.0+21142+453d2b75 | 0:3.9.18-3.module+el8.10.0+21142+453d2b75 |
python39-lxmlRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:4.6.5-1.module+el8.9.0+19644+d68f775d | 0:4.6.5-1.module+el8.9.0+19644+d68f775d |
python39-lxml-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:4.6.5-1.module+el8.9.0+19644+d68f775d | 0:4.6.5-1.module+el8.9.0+19644+d68f775d |
python39-mod_wsgiRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:4.7.1-7.module+el8.9.0+19644+d68f775d | 0:4.7.1-7.module+el8.9.0+19644+d68f775d |
python39-numpyRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.19.4-3.module+el8.9.0+19644+d68f775d | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
python39-numpy-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:1.19.4-3.module+el8.9.0+19644+d68f775d | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
python-setuptoolsRocky Linux:8 |
before 0:39.2.0-6.el8_7.1 | 0:39.2.0-6.el8_7.1 |
python-setuptoolsRocky Linux:9 |
before 0:53.0.0-10.el9_1.1 | 0:53.0.0-10.el9_1.1 |
CythonRocky Linux:8 From an advisory covering 4 CVEs |
before 0:0.29.21-5.module+el8.10.0+1582+bc278001 | 0:0.29.21-5.module+el8.10.0+1582+bc278001 |
mod_wsgiRocky Linux:8 From an advisory covering 4 CVEs |
before 0:4.7.1-7.module+el8.10.0+1582+bc278001 | 0:4.7.1-7.module+el8.10.0+1582+bc278001 |
numpyRocky Linux:8 From an advisory covering 4 CVEs |
before 0:1.19.4-3.module+el8.10.0+1582+bc278001 | 0:1.19.4-3.module+el8.10.0+1582+bc278001 |
pybind11Rocky Linux:8 From an advisory covering 4 CVEs |
before 0:2.7.1-1.module+el8.9.0+1357+a3b80af7 | 0:2.7.1-1.module+el8.9.0+1357+a3b80af7 |
pytestRocky Linux:8 From an advisory covering 4 CVEs |
before 0:6.0.2-2.module+el8.10.0+1582+bc278001 | 0:6.0.2-2.module+el8.10.0+1582+bc278001 |
python3x-pipRocky Linux:8 From an advisory covering 4 CVEs |
before 0:20.2.4-9.module+el8.10.0+1721+e52d6351 | 0:20.2.4-9.module+el8.10.0+1721+e52d6351 |
python3x-pyparsingRocky Linux:8 From an advisory covering 4 CVEs |
before 0:2.4.7-5.module+el8.10.0+1582+bc278001 | 0:2.4.7-5.module+el8.10.0+1582+bc278001 |
python3x-setuptoolsRocky Linux:8 From an advisory covering 4 CVEs |
before 0:50.3.2-5.module+el8.10.0+1582+bc278001 | 0:50.3.2-5.module+el8.10.0+1582+bc278001 |
python3x-sixRocky Linux:8 From an advisory covering 4 CVEs |
before 0:1.15.0-3.module+el8.10.0+1582+bc278001 | 0:1.15.0-3.module+el8.10.0+1582+bc278001 |
python-attrsRocky Linux:8 From an advisory covering 4 CVEs |
before 0:20.3.0-2.module+el8.10.0+1582+bc278001 | 0:20.3.0-2.module+el8.10.0+1582+bc278001 |
python-cffiRocky Linux:8 From an advisory covering 4 CVEs |
before 0:1.14.3-2.module+el8.10.0+1582+bc278001 | 0:1.14.3-2.module+el8.10.0+1582+bc278001 |
python-chardetRocky Linux:8 From an advisory covering 4 CVEs |
before 0:3.0.4-19.module+el8.10.0+1582+bc278001 | 0:3.0.4-19.module+el8.10.0+1582+bc278001 |
python-cryptographyRocky Linux:8 From an advisory covering 4 CVEs |
before 0:3.3.1-3.module+el8.10.0+1697+7e517775 | 0:3.3.1-3.module+el8.10.0+1697+7e517775 |
python-iniconfigRocky Linux:8 From an advisory covering 4 CVEs |
before 0:1.1.1-2.module+el8.9.0+1332+dd574197 | 0:1.1.1-2.module+el8.9.0+1332+dd574197 |
python-lxmlRocky Linux:8 From an advisory covering 4 CVEs |
before 0:4.6.5-1.module+el8.10.0+1582+bc278001 | 0:4.6.5-1.module+el8.10.0+1582+bc278001 |
python-more-itertoolsRocky Linux:8 From an advisory covering 4 CVEs |
before 0:8.5.0-2.module+el8.10.0+1582+bc278001 | 0:8.5.0-2.module+el8.10.0+1582+bc278001 |
python-packagingRocky Linux:8 From an advisory covering 4 CVEs |
before 0:20.4-4.module+el8.10.0+1582+bc278001 | 0:20.4-4.module+el8.10.0+1582+bc278001 |
python-pluggyRocky Linux:8 From an advisory covering 4 CVEs |
before 0:0.13.1-3.module+el8.10.0+1582+bc278001 | 0:0.13.1-3.module+el8.10.0+1582+bc278001 |
python-plyRocky Linux:8 From an advisory covering 4 CVEs |
before 0:3.11-10.module+el8.10.0+1582+bc278001 | 0:3.11-10.module+el8.10.0+1582+bc278001 |
python-psutilRocky Linux:8 From an advisory covering 4 CVEs |
before 0:5.8.0-4.module+el8.9.0+1357+a3b80af7 | 0:5.8.0-4.module+el8.9.0+1357+a3b80af7 |
python-psycopg2Rocky Linux:8 From an advisory covering 4 CVEs |
before 0:2.8.6-3.module+el8.10.0+1660+b5b6f004 | 0:2.8.6-3.module+el8.10.0+1660+b5b6f004 |
python-pyRocky Linux:8 From an advisory covering 4 CVEs |
before 0:1.10.0-1.module+el8.10.0+1582+bc278001 | 0:1.10.0-1.module+el8.10.0+1582+bc278001 |
python-pycparserRocky Linux:8 From an advisory covering 4 CVEs |
before 0:2.20-3.module+el8.10.0+1582+bc278001 | 0:2.20-3.module+el8.10.0+1582+bc278001 |
python-PyMySQLRocky Linux:8 From an advisory covering 4 CVEs |
before 0:0.10.1-2.module+el8.10.0+1582+bc278001 | 0:0.10.1-2.module+el8.10.0+1582+bc278001 |
python-pysocksRocky Linux:8 From an advisory covering 4 CVEs |
before 0:1.7.1-4.module+el8.10.0+1582+bc278001 | 0:1.7.1-4.module+el8.10.0+1582+bc278001 |
python-requestsRocky Linux:8 From an advisory covering 4 CVEs |
before 0:2.25.0-3.module+el8.10.0+1582+bc278001 | 0:2.25.0-3.module+el8.10.0+1582+bc278001 |
python-tomlRocky Linux:8 From an advisory covering 4 CVEs |
before 0:0.10.1-5.module+el8.9.0+1332+dd574197 | 0:0.10.1-5.module+el8.9.0+1332+dd574197 |
python-urllib3Rocky Linux:8 From an advisory covering 4 CVEs |
before 0:1.25.10-5.module+el8.10.0+1545+03246da9 | 0:1.25.10-5.module+el8.10.0+1545+03246da9 |
python-wcwidthRocky Linux:8 From an advisory covering 4 CVEs |
before 0:0.2.5-3.module+el8.10.0+1582+bc278001 | 0:0.2.5-3.module+el8.10.0+1582+bc278001 |
python-wheelRocky Linux:8 From an advisory covering 4 CVEs |
before 1:0.35.1-4.module+el8.10.0+1582+bc278001 | 1:0.35.1-4.module+el8.10.0+1582+bc278001 |
PyYAMLRocky Linux:8 From an advisory covering 4 CVEs |
before 0:5.4.1-1.module+el8.10.0+1582+bc278001 | 0:5.4.1-1.module+el8.10.0+1582+bc278001 |
scipyRocky Linux:8 From an advisory covering 4 CVEs |
before 0:1.5.4-5.module+el8.10.0+1582+bc278001 | 0:1.5.4-5.module+el8.10.0+1582+bc278001 |
babelRocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.5.1-10.module+el8.9.0+1531+a18208f5 | 0:2.5.1-10.module+el8.9.0+1531+a18208f5 |
CythonRocky Linux:8 From an advisory covering 5 CVEs |
before 0:0.28.1-7.module+el8.9.0+1531+a18208f5 | 0:0.28.1-7.module+el8.9.0+1531+a18208f5 |
numpyRocky Linux:8 From an advisory covering 5 CVEs |
before 1:1.14.2-16.module+el8.9.0+1531+a18208f5 | 1:1.14.2-16.module+el8.9.0+1531+a18208f5 |
pytestRocky Linux:8 From an advisory covering 5 CVEs |
before 0:3.4.2-13.module+el8.9.0+1531+a18208f5 | 0:3.4.2-13.module+el8.9.0+1531+a18208f5 |
python2Rocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.7.18-17.module+el8.10.0+1813+4b021305.rocky.0.2 | 0:2.7.18-17.module+el8.10.0+1813+4b021305.rocky.0.2 |
python2-pipRocky Linux:8 From an advisory covering 5 CVEs |
before 0:9.0.3-19.module+el8.9.0+1531+a18208f5 | 0:9.0.3-19.module+el8.9.0+1531+a18208f5 |
python2-rpm-macrosRocky Linux:8 From an advisory covering 5 CVEs |
before 0:3-38.module+el8.9.0+1531+a18208f5 | 0:3-38.module+el8.9.0+1531+a18208f5 |
python2-setuptoolsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:39.0.1-14.module+el8.10.0+1813+4b021305 | 0:39.0.1-14.module+el8.10.0+1813+4b021305 |
python2-sixRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.11.0-6.module+el8.9.0+1531+a18208f5 | 0:1.11.0-6.module+el8.9.0+1531+a18208f5 |
python-attrsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:17.4.0-10.module+el8.9.0+1531+a18208f5 | 0:17.4.0-10.module+el8.9.0+1531+a18208f5 |
python-backportsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.0-16.module+el8.9.0+1531+a18208f5 | 0:1.0-16.module+el8.9.0+1531+a18208f5 |
python-backports-ssl_match_hostnameRocky Linux:8 From an advisory covering 5 CVEs |
before 0:3.5.0.1-12.module+el8.9.0+1531+a18208f5 | 0:3.5.0.1-12.module+el8.9.0+1531+a18208f5 |
python-chardetRocky Linux:8 From an advisory covering 5 CVEs |
before 0:3.0.4-10.module+el8.9.0+1531+a18208f5 | 0:3.0.4-10.module+el8.9.0+1531+a18208f5 |
python-coverageRocky Linux:8 From an advisory covering 5 CVEs |
before 0:4.5.1-5.module+el8.10.0+1817+0b01df83 | 0:4.5.1-5.module+el8.10.0+1817+0b01df83 |
python-dnsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.15.0-10.module+el8.9.0+1531+a18208f5 | 0:1.15.0-10.module+el8.9.0+1531+a18208f5 |
python-docsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.7.16-2.module+el8.9.0+1531+a18208f5 | 0:2.7.16-2.module+el8.9.0+1531+a18208f5 |
python-docutilsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:0.14-12.module+el8.10.0+1592+61442852 | 0:0.14-12.module+el8.10.0+1592+61442852 |
python-docutilsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:0.14-12.module+el8.10.0+1910+234ad790 | 0:0.14-12.module+el8.10.0+1910+234ad790 |
python-docutilsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:0.14-12.module+el8.9.0+1531+a18208f5 | 0:0.14-12.module+el8.9.0+1531+a18208f5 |
python-funcsigsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.0.2-13.module+el8.9.0+1531+a18208f5 | 0:1.0.2-13.module+el8.9.0+1531+a18208f5 |
python-idnaRocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.5-7.module+el8.9.0+1531+a18208f5 | 0:2.5-7.module+el8.9.0+1531+a18208f5 |
python-ipaddressRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.0.18-6.module+el8.9.0+1531+a18208f5 | 0:1.0.18-6.module+el8.9.0+1531+a18208f5 |
python-jinja2Rocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.10-10.module+el8.10.0+1813+4b021305 | 0:2.10-10.module+el8.10.0+1813+4b021305 |
python-lxmlRocky Linux:8 From an advisory covering 5 CVEs |
before 0:4.2.3-6.module+el8.9.0+1531+a18208f5 | 0:4.2.3-6.module+el8.9.0+1531+a18208f5 |
python-markupsafeRocky Linux:8 From an advisory covering 5 CVEs |
before 0:0.23-19.module+el8.9.0+1531+a18208f5 | 0:0.23-19.module+el8.9.0+1531+a18208f5 |
python-mockRocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.0.0-13.module+el8.9.0+1531+a18208f5 | 0:2.0.0-13.module+el8.9.0+1531+a18208f5 |
python-noseRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.3.7-31.module+el8.10.0+1592+61442852 | 0:1.3.7-31.module+el8.10.0+1592+61442852 |
python-noseRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.3.7-31.module+el8.10.0+1910+234ad790 | 0:1.3.7-31.module+el8.10.0+1910+234ad790 |
python-noseRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.3.7-31.module+el8.9.0+1531+a18208f5 | 0:1.3.7-31.module+el8.9.0+1531+a18208f5 |
python-pluggyRocky Linux:8 From an advisory covering 5 CVEs |
before 0:0.6.0-8.module+el8.9.0+1531+a18208f5 | 0:0.6.0-8.module+el8.9.0+1531+a18208f5 |
python-psycopg2Rocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.7.5-8.module+el8.10.0+1817+0b01df83 | 0:2.7.5-8.module+el8.10.0+1817+0b01df83 |
python-pyRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.5.3-6.module+el8.9.0+1531+a18208f5 | 0:1.5.3-6.module+el8.9.0+1531+a18208f5 |
python-pygmentsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.2.0-22.module+el8.10.0+1592+61442852 | 0:2.2.0-22.module+el8.10.0+1592+61442852 |
python-pygmentsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.2.0-22.module+el8.10.0+1910+234ad790 | 0:2.2.0-22.module+el8.10.0+1910+234ad790 |
python-pygmentsRocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.2.0-22.module+el8.9.0+1531+a18208f5 | 0:2.2.0-22.module+el8.9.0+1531+a18208f5 |
python-pymongoRocky Linux:8 From an advisory covering 5 CVEs |
before 0:3.7.0-1.module+el8.10.0+1592+61442852 | 0:3.7.0-1.module+el8.10.0+1592+61442852 |
python-pymongoRocky Linux:8 From an advisory covering 5 CVEs |
before 0:3.7.0-1.module+el8.10.0+1910+234ad790 | 0:3.7.0-1.module+el8.10.0+1910+234ad790 |
python-pymongoRocky Linux:8 From an advisory covering 5 CVEs |
before 0:3.7.0-1.module+el8.9.0+1531+a18208f5 | 0:3.7.0-1.module+el8.9.0+1531+a18208f5 |
python-PyMySQLRocky Linux:8 From an advisory covering 5 CVEs |
before 0:0.8.0-10.module+el8.9.0+1531+a18208f5 | 0:0.8.0-10.module+el8.9.0+1531+a18208f5 |
setuptoolsRoot:PyPI |
before 65.5.0+aikido.4 | 65.5.0+aikido.463.2.0+aikido.236.2.7+aikido.1 |
python310-setuptoolsSUSE:Linux Enterprise Module for Python 3 15 SP4 |
before 57.4.0-150400.4.3.1 | 57.4.0-150400.4.3.1 |
python310-setuptoolsopenSUSE:Leap 15.4 |
before 57.4.0-150400.4.3.1 | 57.4.0-150400.4.3.1 |
python-setuptoolsSUSE:Linux Enterprise Module for Containers 12 |
before 40.6.2-4.21.1 | 40.6.2-4.21.1 |
python-setuptoolsSUSE:Linux Enterprise Module for Public Cloud 12 |
before 40.6.2-4.21.1 | 40.6.2-4.21.1 |
python-setuptoolsSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 40.6.2-4.21.1 | 40.6.2-4.21.1 |
python-setuptoolsSUSE:Linux Enterprise Server 12 SP5 |
before 40.6.2-4.21.1 | 40.6.2-4.21.1 |
python-setuptoolsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 40.6.2-4.21.1 | 40.6.2-4.21.1 |
python36-setuptoolsSUSE:Linux Enterprise Server 12 SP5 |
before 44.1.1-8.6.1 | 44.1.1-8.6.1 |
python36-setuptoolsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 44.1.1-8.6.1 | 44.1.1-8.6.1 |
python-setuptoolsSUSE:Linux Enterprise Micro 5.3 |
before 44.1.1-150400.3.3.1 | 44.1.1-150400.3.3.1 |
python-setuptoolsSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 44.1.1-150400.3.3.1 | 44.1.1-150400.3.3.1 |
python-setuptools-testSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 44.1.1-150400.3.3.1 | 44.1.1-150400.3.3.1 |
python-setuptools-wheelSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 44.1.1-150400.3.3.1 | 44.1.1-150400.3.3.1 |
python-setuptoolsopenSUSE:Leap Micro 5.3 |
before 44.1.1-150400.3.3.1 | 44.1.1-150400.3.3.1 |
python-setuptoolsopenSUSE:Leap 15.4 |
before 44.1.1-150400.3.3.1 | 44.1.1-150400.3.3.1 |
python-setuptools-testopenSUSE:Leap 15.4 |
before 44.1.1-150400.3.3.1 | 44.1.1-150400.3.3.1 |
python-setuptools-wheelopenSUSE:Leap 15.4 |
before 44.1.1-150400.3.3.1 | 44.1.1-150400.3.3.1 |
python39-setuptoolsSUSE:Linux Enterprise Real Time 15 SP3 |
before 44.1.1-150300.7.6.1 | 44.1.1-150300.7.6.1 |
python39-setuptoolsopenSUSE:Leap 15.4 |
before 44.1.1-150300.7.6.1 | 44.1.1-150300.7.6.1 |
python-setuptoolsSUSE:Linux Enterprise Real Time 15 SP3 |
before 40.5.0-150100.6.6.1 | 40.5.0-150100.6.6.1 |
python-setuptools-testSUSE:Linux Enterprise Real Time 15 SP3 |
before 40.5.0-150100.6.6.1 | 40.5.0-150100.6.6.1 |
python-setuptools-wheelSUSE:Linux Enterprise Real Time 15 SP3 |
before 40.5.0-150100.6.6.1 | 40.5.0-150100.6.6.1 |
python-setuptoolsSUSE:Linux Enterprise Micro 5.1 |
before 40.5.0-150100.6.6.1 | 40.5.0-150100.6.6.1 |
python-setuptoolsSUSE:Linux Enterprise Micro 5.2 |
before 40.5.0-150100.6.6.1 | 40.5.0-150100.6.6.1 |
python-setuptoolsopenSUSE:Leap Micro 5.2 |
before 40.5.0-150100.6.6.1 | 40.5.0-150100.6.6.1 |
python-setuptoolsSUSE:OpenStack Cloud 9 |
before 40.1.0-3.3.1 | 40.1.0-3.3.1 |
python-setuptoolsSUSE:OpenStack Cloud Crowbar 9 |
before 40.1.0-3.3.1 | 40.1.0-3.3.1 |
python-setuptoolsSUSE:HPE Helion OpenStack 8 |
before 36.5.0-3.3.1 | 36.5.0-3.3.1 |
python-setuptoolsSUSE:OpenStack Cloud 8 |
before 36.5.0-3.3.1 | 36.5.0-3.3.1 |
python-setuptoolsSUSE:OpenStack Cloud Crowbar 8 |
before 36.5.0-3.3.1 | 36.5.0-3.3.1 |
python3-setuptoolsSUSE:Linux Enterprise Micro 5.3 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptoolsSUSE:Linux Enterprise Micro 5.4 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptoolsSUSE:Linux Enterprise Micro 5.5 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptoolsSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptools-testSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptools-wheelSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptoolsSUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptools-testSUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptools-wheelSUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptoolsopenSUSE:Leap Micro 5.3 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptoolsopenSUSE:Leap Micro 5.4 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptoolsopenSUSE:Leap 15.4 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptools-testopenSUSE:Leap 15.4 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptools-wheelopenSUSE:Leap 15.4 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptoolsopenSUSE:Leap 15.5 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptools-testopenSUSE:Leap 15.5 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python3-setuptools-wheelopenSUSE:Leap 15.5 |
before 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 |
python-pipUbuntu:Pro:14.04:LTS |
before 1.5.4-1ubuntu4+esm2, plus listed versions 1.4.1-21.5.4-11.5.4-1ubuntu11.5.4-1ubuntu31.5.4-1ubuntu41.5.4-1ubuntu4+esm1 |
1.5.4-1ubuntu4+esm2 |
python-setuptoolsUbuntu:Pro:14.04:LTS |
before 3.3-1ubuntu2+esm1, plus listed versions 1.4.2-12.0.1-1ubuntu12.0.1-2ubuntu12.0.2-12.1-12.2-13.3-1ubuntu13.3-1ubuntu2 |
3.3-1ubuntu2+esm1 |
python-setuptoolsUbuntu:Pro:16.04:LTS |
before 20.7.0-1ubuntu0.1~esm1, plus listed versions 18.4-118.4-218.7-118.8-120.1.1-120.3.1-120.7.0-1 |
20.7.0-1ubuntu0.1~esm1 |
python-pipUbuntu:Pro:16.04:LTS |
before 8.1.1-2ubuntu0.6+esm3, plus listed versions 1.5.6-7ubuntu11.5.6-7ubuntu28.0.2-78.0.3-18.0.3-2 Show 9 moreShow less8.1.0-18.1.0-28.1.1-18.1.1-28.1.1-2ubuntu0.18.1.1-2ubuntu0.28.1.1-2ubuntu0.48.1.1-2ubuntu0.68.1.1-2ubuntu0.6+esm2 |
8.1.1-2ubuntu0.6+esm3 |
python-pipUbuntu:18.04:LTS |
before 9.0.1-2.3~ubuntu1.18.04.6, plus listed versions 9.0.1-29.0.1-2.3~ubuntu19.0.1-2.3~ubuntu1.18.04.19.0.1-2.3~ubuntu1.18.04.29.0.1-2.3~ubuntu1.18.04.39.0.1-2.3~ubuntu1.18.04.49.0.1-2.3~ubuntu1.18.04.5 |
9.0.1-2.3~ubuntu1.18.04.6 |
python-setuptoolsUbuntu:18.04:LTS |
before 39.0.1-2ubuntu0.1, plus listed versions 36.2.7-238.4.0-138.5.2-139.0.1-139.0.1-2 |
39.0.1-2ubuntu0.1 |
python-pipUbuntu:20.04:LTS |
before 20.0.2-5ubuntu1.7, plus listed versions 18.1-518.1-5build118.1-5ubuntu120.0.2-220.0.2-4 Show 7 moreShow less20.0.2-520.0.2-5ubuntu120.0.2-5ubuntu1.120.0.2-5ubuntu1.320.0.2-5ubuntu1.420.0.2-5ubuntu1.520.0.2-5ubuntu1.6 |
20.0.2-5ubuntu1.7 |
python-setuptoolsUbuntu:20.04:LTS |
before 44.0.0-2ubuntu0.1, plus listed versions 41.1.0-141.4.0-144.0.0-144.0.0-2 |
44.0.0-2ubuntu0.1 |
setuptoolsUbuntu:20.04:LTS |
before 45.2.0-1ubuntu0.1, plus listed versions 45.2.0-1 |
45.2.0-1ubuntu0.1 |
python-pipUbuntu:22.04:LTS |
before 22.0.2+dfsg-1ubuntu0.1, plus listed versions 20.3.4-421.3.1+dfsg-322.0.2+dfsg-1 |
22.0.2+dfsg-1ubuntu0.1 |
python-setuptoolsUbuntu:22.04:LTS |
before 44.1.1-1.2ubuntu0.22.04.1, plus listed versions 44.1.1-144.1.1-1.2 |
44.1.1-1.2ubuntu0.22.04.1 |
setuptoolsUbuntu:22.04:LTS |
before 59.6.0-1.2ubuntu0.22.04.1, plus listed versions 52.0.0-458.2.0-159.6.0-1.2 |
59.6.0-1.2ubuntu0.22.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-40897 is a medium vulnerability (CVSS 5.9) in Python Setuptools, published December 22, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.63%, the 85th percentile. Fixed in setuptools 65.5.1.
References
github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py
pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages
github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be
pyup.io/vulnerabilities/CVE-2022-40897/52495
github.com/pypa/setuptools/compare/v65.5.0...v65.5.1
security.netapp.com/advisory/ntap-20230214-0001
Show 145 moreShow less
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R
security.netapp.com/advisory/ntap-20240621-0006
lists.debian.org/debian-lts-announce/2024/09/msg00018.html
nvd.nist.gov/vuln/detail/CVE-2022-40897
github.com/pypa/setuptools/issues/3659
lists.fedoraproject.org/archives/list/[email protected]/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R
lists.fedoraproject.org/archives/list/[email protected]/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H
setuptools.pypa.io/en/latest
github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2022-43012.yaml
github.com/advisories/GHSA-r9hx-vwmv-q579
access.redhat.com/errata/RHSA-2023:0835
access.redhat.com/security/cve/CVE-2022-40897
bugzilla.redhat.com/2158559
errata.almalinux.org/8/ALSA-2023-0835.html
access.redhat.com/errata/RHSA-2023:0952
errata.almalinux.org/9/ALSA-2023-0952.html
access.redhat.com/errata/RHSA-2024:2985
access.redhat.com/security/cve/CVE-2023-23931
access.redhat.com/security/cve/CVE-2023-27043
access.redhat.com/security/cve/CVE-2023-43804
bugzilla.redhat.com/2171817
bugzilla.redhat.com/2196183
bugzilla.redhat.com/2242493
errata.almalinux.org/8/ALSA-2024-2985.html
access.redhat.com/errata/RHSA-2024:2987
access.redhat.com/security/cve/CVE-2022-48560
access.redhat.com/security/cve/CVE-2022-48565
access.redhat.com/security/cve/CVE-2024-22195
bugzilla.redhat.com/2240059
bugzilla.redhat.com/2249755
bugzilla.redhat.com/2257854
errata.almalinux.org/8/ALSA-2024-2987.html
docs.bell-sw.com/security/cves/CVE-2022-40897
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1761051864.html
errata.tuxcare.com/els_os/centos7els/CLSA-2025-1761056282.html
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1791500181.html
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1791500952.html
github.com/CVEProject/cvelistV5/tree/main/cves/2022/40xxx/CVE-2022-40897.json
security-tracker.debian.org/tracker/CVE-2022-40897
github.com/pypa/setuptools
advisories.mageia.org/MGASA-2023-0219.html
bugs.mageia.org/show_bug.cgi?id=31421
lists.opensuse.org/archives/list/[email protected]/thread/WAQKKYI5XTBXPHU7RRPHNAQ7W6ARWJQW
ubuntu.com/security/notices/USN-5817-1
lists.fedoraproject.org/archives/list/[email protected]/thread/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1004
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2158559
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0835.json
cve.org/CVERecord?id=CVE-2022-40897
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0952.json
access.redhat.com/errata/RHSA-2023:6793
bugzilla.redhat.com/show_bug.cgi?id=263261
bugzilla.redhat.com/show_bug.cgi?id=2144072
bugzilla.redhat.com/show_bug.cgi?id=2165864
bugzilla.redhat.com/show_bug.cgi?id=2171817
bugzilla.redhat.com/show_bug.cgi?id=2173917
bugzilla.redhat.com/show_bug.cgi?id=2209469
bugzilla.redhat.com/show_bug.cgi?id=2235789
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6793.json
access.redhat.com/security/cve/CVE-2007-4559
cve.org/CVERecord?id=CVE-2007-4559
nvd.nist.gov/vuln/detail/CVE-2007-4559
access.redhat.com/security/cve/CVE-2022-40898
cve.org/CVERecord?id=CVE-2022-40898
nvd.nist.gov/vuln/detail/CVE-2022-40898
github.com/advisories/GHSA-qwmp-2cf2-g9g6
access.redhat.com/security/cve/CVE-2022-45061
cve.org/CVERecord?id=CVE-2022-45061
nvd.nist.gov/vuln/detail/CVE-2022-45061
github.com/python/cpython/issues/98433
python-security.readthedocs.io/vuln/slow-idna-large-strings.html
cve.org/CVERecord?id=CVE-2023-23931
nvd.nist.gov/vuln/detail/CVE-2023-23931
github.com/pyca/cryptography/security/advisories/GHSA-w7pp-m8wf-vj6r
access.redhat.com/security/cve/CVE-2023-24329
cve.org/CVERecord?id=CVE-2023-24329
nvd.nist.gov/vuln/detail/CVE-2023-24329
pointernull.com/security/python-url-parse-problem.html
access.redhat.com/security/cve/CVE-2023-32681
cve.org/CVERecord?id=CVE-2023-32681
nvd.nist.gov/vuln/detail/CVE-2023-32681
github.com/psf/requests/security/advisories/GHSA-j8r2-6x86-q33q
access.redhat.com/security/cve/CVE-2023-40217
cve.org/CVERecord?id=CVE-2023-40217
nvd.nist.gov/vuln/detail/CVE-2023-40217
github.com/python/cpython/issues/108310
github.com/python/cpython/pull/108315
mail.python.org/archives/list/[email protected]/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY
access.redhat.com/errata/RHSA-2023:7395
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7395.json
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=2196183
bugzilla.redhat.com/show_bug.cgi?id=2242493
issues.redhat.com/browse/RHEL-21905
issues.redhat.com/browse/RHEL-25457
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2985.json
cve.org/CVERecord?id=CVE-2023-27043
nvd.nist.gov/vuln/detail/CVE-2023-27043
access.redhat.com/articles/7051467
cve.org/CVERecord?id=CVE-2023-43804
nvd.nist.gov/vuln/detail/CVE-2023-43804
bugzilla.redhat.com/show_bug.cgi?id=2240059
bugzilla.redhat.com/show_bug.cgi?id=2249755
bugzilla.redhat.com/show_bug.cgi?id=2257854
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2987.json
cve.org/CVERecord?id=CVE-2022-48560
nvd.nist.gov/vuln/detail/CVE-2022-48560
bugs.python.org/issue39421
github.com/python/cpython/issues/83602
cve.org/CVERecord?id=CVE-2022-48565
nvd.nist.gov/vuln/detail/CVE-2022-48565
cve.org/CVERecord?id=CVE-2024-22195
nvd.nist.gov/vuln/detail/CVE-2024-22195
github.com/pallets/jinja/releases/tag/3.1.3
github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95
access.redhat.com/errata/RHSA-2024:4421
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4421.json
access.redhat.com/errata/RHSA-2024:6915
bugzilla.redhat.com/show_bug.cgi?id=2302255
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6915.json
access.redhat.com/security/cve/CVE-2024-6923
cve.org/CVERecord?id=CVE-2024-6923
nvd.nist.gov/vuln/detail/CVE-2024-6923
github.com/python/cpython/issues/121650
github.com/python/cpython/pull/122233
mail.python.org/archives/list/[email protected]/thread/QH3BUOE2DYQBWP7NAQ7UNHPPOELKISRW
errata.rockylinux.org/RLSA-2023:0835
errata.rockylinux.org/RLSA-2023:0952
errata.rockylinux.org/RLSA-2024:2985
errata.rockylinux.org/RLSA-2024:2987
suse.com/support/update/announcement/2023/suse-su-20230091-1
bugzilla.suse.com/1206667
suse.com/security/cve/CVE-2022-40897
suse.com/support/update/announcement/2023/suse-su-20230093-1
suse.com/support/update/announcement/2023/suse-su-20230094-1
suse.com/support/update/announcement/2023/suse-su-20230159-1
suse.com/support/update/announcement/2023/suse-su-20230202-1
suse.com/support/update/announcement/2023/suse-su-20230223-1
suse.com/support/update/announcement/2023/suse-su-20230402-1
suse.com/support/update/announcement/2023/suse-su-20230403-1
suse.com/support/update/announcement/2023/suse-su-20234517-1
suse.com/support/update/announcement/2024/suse-su-20242435-1
ubuntu.com/security/CVE-2022-40897
Left out here: 584 package rows and 996 versions. The JSON record has them.