-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 27 May 2025 12:05:29 +0200
Source: setuptools
Architecture: source
Version: 52.0.0-4+deb11u2
Distribution: bullseye-security
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Lee Garrett <debian@rocketjump.eu>
Changes:
setuptools (52.0.0-4+deb11u2) bullseye-security; urgency=medium
.
* Non-maintainer upload by the Debian LTS Team.
* Fix CVE-2025-47273:
- Path traversal in PackageIndex.download leads to Arbitrary File Write.
Checksums-Sha1:
9fb2e70b21c854745d201e071ae7d6479b9703e4 2780 setuptools_52.0.0-4+deb11u2.dsc
b1a0f468627157c4453dc023feb27862f165141e 17016 setuptools_52.0.0-4+deb11u2.debian.tar.xz
34ac186d4870e5e83f0fd89835b387542255d88f 9134 setuptools_52.0.0-4+deb11u2_amd64.buildinfo
Checksums-Sha256:
8ca363cb4ee1fc3030e284082d67445804b3096ee7746d3af41d3d22d7c9bbfa 2780 setuptools_52.0.0-4+deb11u2.dsc
8cc05d8971b5e6b3d92611cbaf9038b0f92e5d1c85d96393ea7f78b964c3644d 17016 setuptools_52.0.0-4+deb11u2.debian.tar.xz
19580877bd85e9db5291f8a3d7b48dbcfb123f4b5b188c8a8709c174ec4a7bc1 9134 setuptools_52.0.0-4+deb11u2_amd64.buildinfo
Files:
d4206ccd7d5b9fcf712ef3742b6a5978 2780 python optional setuptools_52.0.0-4+deb11u2.dsc
54502ddeb194ef886cf3e2f04d586737 17016 python optional setuptools_52.0.0-4+deb11u2.debian.tar.xz
d8cb1a89f785c86511b25040da15a393 9134 python optional setuptools_52.0.0-4+deb11u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=cH3E
-----END PGP SIGNATURE-----
Attachment:
pgp8utoOp8JlP.pgp
Description: PGP signature