[Git][security-tracker-team/security-tracker][master] Add CVE-2025-47273/setuptools

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d3278902 by Salvatore Bonaccorso at 2025-05-17T22:25:08+02:00
Add CVE-2025-47273/setuptools

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -39,7 +39,10 @@ CVE-2025-47945 (Donetick an open-source app for managing tasks and chores. Prior
 CVE-2025-47931 (LibreNMS is PHP/MySQL/SNMP based network monitoring software. LibreNMS ...)
 	NOT-FOR-US: LibreNMS
 CVE-2025-47273 (setuptools is a package that allows users to download, build, install, ...)
-	TODO: check
+	- setuptools <unfixed>
+	NOTE: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf
+	NOTE: https://github.com/pypa/setuptools/issues/4946
+	NOTE: Fixed by: https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b (v78.1.1)
 CVE-2025-3888 (The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross- ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-3527 (The EventON Pro plugin for WordPress is vulnerable to unauthorized mod ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d3278902218f36956743e60715eb16d3f2ee1081

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d3278902218f36956743e60715eb16d3f2ee1081
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250517/89e0a2cc/attachment.htm>