[CLSA-2026:1785240768] alt-python311-setuptools: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-28 12:13:05 UTC
Description:
- CVE-2024-6345: remote code execution via command injection in VCS download functions - CVE-2025-47273: path traversal in PackageIndex download filename resolution
CVEs fixed:
Updated packages:
  • alt-python311-setuptools-65.6.3-4.el8.noarch.rpm
    sha:68d45e674d9fadca36a77a3e5dce8c32b46fe95f85649761daa60c06436fd9a3
  • alt-python311-setuptools-wheel-65.6.3-4.el8.noarch.rpm
    sha:d83836af17a15564b606df89a71c5188afd53c9d6122b17251d4f992d2ed1348
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.