[CLSA-2026:1785241961] alt-python311-setuptools: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-28 12:32:54 UTC
Description:
- CVE-2024-6345: remote code execution via command injection in VCS download functions - CVE-2025-47273: path traversal in PackageIndex download filename resolution
CVEs fixed:
Updated packages:
  • alt-python311-setuptools-65.6.3-4.el9.noarch.rpm
    sha:4fd610290101df1a699d44d21a5dc8c3376ac5235b7ea831bf54dbeb705b0bd6
  • alt-python311-setuptools-wheel-65.6.3-4.el9.noarch.rpm
    sha:a68a9cedb75ba836a7bf677a52d770fc432e59f1697913dfee13779c353fd6d2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.