An update for python-setuptools is now available for openEuler-24.03-LTS-SP1 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3377 Final 1.0 1.0 2026-08-13 Initial 2026-08-13 2026-08-13 openEuler SA Tool V1.0 2026-08-13 python-setuptools security update An update for python-setuptools is now available for openEuler-24.03-LTS-SP1 Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages. Security Fix(es): setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.(CVE-2025-47273) An update for python-setuptools is now available for openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP3/openEuler-22.03-LTS-SP4/openEuler-24.03-LTS/openEuler-24.03-LTS-Next/openEuler-24.03-LTS-SP1/openEuler-24.03-LTS-SP2/openEuler-24.03-LTS-SP3/openEuler-24.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High python-setuptools https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3377 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-47273 https://nvd.nist.gov/vuln/detail/CVE-2025-47273 openEuler-24.03-LTS-SP1 python-setuptools-68.0.0-4.oe2403sp1.src.rpm python-setuptools-68.0.0-4.oe2403sp1.noarch.rpm python-setuptools-help-68.0.0-4.oe2403sp1.noarch.rpm python3-setuptools-68.0.0-4.oe2403sp1.noarch.rpm setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue. 2026-08-13 CVE-2025-47273 openEuler-24.03-LTS-SP1 High 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H python-setuptools security update 2026-08-13 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3377