OESA-2024-1931

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1931
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2024-1931.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2024-1931
Upstream
Published
2024-08-02T11:08:42Z
Modified
2025-08-12T05:47:47.708415Z
Summary
python-setuptools security update
Details

Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages.

Security Fix(es):

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.(CVE-2024-6345)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4 / python-setuptools

Package

Name
python-setuptools
Purl
pkg:rpm/openEuler/python-setuptools&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
44.1.1-3.oe2003sp4

Ecosystem specific 

{
    "src": [
        "python-setuptools-44.1.1-3.oe2003sp4.src.rpm"
    ],
    "noarch": [
        "python-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
        "python3-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
        "python2-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
        "python-setuptools-help-44.1.1-3.oe2003sp4.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP1 / python-setuptools

Package

Name
python-setuptools
Purl
pkg:rpm/openEuler/python-setuptools&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
59.4.0-6.oe2203sp1

Ecosystem specific 

{
    "src": [
        "python-setuptools-59.4.0-6.oe2203sp1.src.rpm"
    ],
    "noarch": [
        "python3-setuptools-59.4.0-6.oe2203sp1.noarch.rpm",
        "python-setuptools-59.4.0-6.oe2203sp1.noarch.rpm",
        "python-setuptools-help-59.4.0-6.oe2203sp1.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP3 / python-setuptools

Package

Name
python-setuptools
Purl
pkg:rpm/openEuler/python-setuptools&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
59.4.0-6.oe2203sp3

Ecosystem specific 

{
    "src": [
        "python-setuptools-59.4.0-6.oe2203sp3.src.rpm"
    ],
    "noarch": [
        "python3-setuptools-59.4.0-6.oe2203sp3.noarch.rpm",
        "python-setuptools-help-59.4.0-6.oe2203sp3.noarch.rpm",
        "python-setuptools-59.4.0-6.oe2203sp3.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP4 / python-setuptools

Package

Name
python-setuptools
Purl
pkg:rpm/openEuler/python-setuptools&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
59.4.0-6.oe2203sp4

Ecosystem specific 

{
    "src": [
        "python-setuptools-59.4.0-6.oe2203sp4.src.rpm"
    ],
    "noarch": [
        "python3-setuptools-59.4.0-6.oe2203sp4.noarch.rpm",
        "python-setuptools-59.4.0-6.oe2203sp4.noarch.rpm",
        "python-setuptools-help-59.4.0-6.oe2203sp4.noarch.rpm"
    ]
}

openEuler:24.03-LTS / python-setuptools

Package

Name
python-setuptools
Purl
pkg:rpm/openEuler/python-setuptools&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
68.0.0-2.oe2403

Ecosystem specific 

{
    "src": [
        "python-setuptools-68.0.0-2.oe2403.src.rpm"
    ],
    "noarch": [
        "python3-setuptools-68.0.0-2.oe2403.noarch.rpm",
        "python-setuptools-68.0.0-2.oe2403.noarch.rpm",
        "python-setuptools-help-68.0.0-2.oe2403.noarch.rpm"
    ]
}