{"id":"CLSA-2025-1764615456","aliases":[],"status":"published","title":"Update of python3.11-setuptools","description":"- CVE:2025-47273: fix path traversal in PackageIndex.download leading to arbitrary file write","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-12-01T19:04:59Z","modified":"2026-06-01T00:31:23Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-setuptools","fixed_in":["65.5.1-2.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-setuptools-wheel","fixed_in":["65.5.1-2.el9.tuxcare.els2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.5.1-2.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3.11-setuptools-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.5.1-2.el9.tuxcare.els2"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1764615456.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1764615456","title":"Update of python3.11-setuptools","description":"- CVE:2025-47273: fix path traversal in PackageIndex.download leading to arbitrary file write","status":"published","published":"2025-12-01T19:04:59Z","modified":"2026-06-01T00:31:23.393937523Z","updated_at":"2026-11-02T15:43:42.847264Z"}]}}