[CLSA-2026:1785238150] alt-python311-setuptools: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-28 11:29:20 UTC
Description:
- CVE-2024-6345: remote code execution via command injection in VCS download functions - CVE-2025-47273: path traversal in PackageIndex download filename resolution
CVEs fixed:
Updated packages:
  • alt-python311-setuptools-65.6.3-4.el7.noarch.rpm
    sha:9fa6e18cb0563323b720cffd3dbb1ca153708550fb3d0719fcb7d4af0977a93f
  • alt-python311-setuptools-wheel-65.6.3-4.el7.noarch.rpm
    sha:f1d36a08b1dea9c5612cf38a03c021c4696edb69f6b5124f2c24bbacb5e88c97
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.