setuptool vulnerabilities (Azure Linux)

2 vulnerabilities.

• setuptool Azure Linux setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ CVE-2026-59890 Fix available 6.1 MediumJuly 8, 2026
• setuptool Azure Linux setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write CVE-2025-47273 Public exploitFix available 7.7 HighMay 17, 2025