Code Injection in setuptools - CVE-2024-6345

Vulnerability identifier: #VU95339

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-6345

CWE-ID: CWE-94

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation when processing URL in the package_index module of pypa/setuptools. A remote attacker can send a specially crafted request and execute arbitrary code on the target system via download functions.

setuptools
watsonx Orchestrate Developer Edition
Guardium Data Security Center (GDSC)
watsonx Assistant for IBM Cloud Pak for Data
watsonx Code Assistant for Ansible
IBM Business Automation Manager Open Editions
Maximo Application Suite - Monitor Component
Maximo Application Suite - Predict Component
PowerVault ME5
APEX Cloud Platform for Microsoft Azure
Netezza Performance Server Replication Services
QRadar Deployment Intelligence App
PowerStore T
OpenManage Network Integration (OMNI)
Security QRadar EDR
Enterprise SONiC
Cognos Dashboards on Cloud Pak for Data
Storage Resource Manager
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
SOAR QRadar Plugin App
Maximo Application Suite - IoT Component
Maximo Application Suite - Edge Data Collector
IBM Virtualization Engine TS7700 3948-VED
Maximo Application Suite - Visual Inspection Component
Storage Protect Plus File Systems Agent
IBM Netezza for Cloud Pak for Data
EMC Cloud Tiering Appliance
Robotic Process Automation for Cloud Pak
Oracle Linux
IBM AIX
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Manager Retail Branch Server
SUSE Manager Proxy Module
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Server Module
SUSE Manager Client Tools for SLE Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Anolis OS
SUSE Enterprise Storage
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
SUSE Manager Client Tools for RHEL, Liberty and Clones
SUSE Manager Client Tools for Debian
Public Cloud Module
Containers Module
SUSE Manager Client Tools for SLE
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
Ubuntu
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Python 3 Module
Basesystem Module
openSUSE Leap
openEuler
Fedora
SUSE Manager Client Tools for Ubuntu 20.04
SUSE Manager Client Tools for Ubuntu 22.04
IBM InfoSphere Information Server
IBM VIOS
Oracle WebLogic Server
IBM Concert Software
PowerVC
Splunk User Behavior Analytics (UBA)
IBM Sterling Connect:Direct Web Services
IBM Spectrum Protect Plus
Service Interconnect
Run Once Duration Override Operator for Red Hat OpenShift
Multicluster GlobalHub
Migration Toolkit for Runtimes
IBM Process Mining
Qradar Advisor
Red Hat Advanced Cluster Management for Kubernetes
IBM Fusion HCI
APEX Cloud Platform for Red Hat OpenShift
Red Hat OpenShift Dev Spaces
IBM Cloud Object Storage Systems
QRadar User Behavior Analytics
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Discovery for IBM Cloud Pak for Data
Kube Descheduler Operator for Red Hat OpenShift
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
OpenShift Logging
App Connect Enterprise Certified Container
IBM Robotic Process Automation
IBM Business Automation Workflow
IBM Observability with Instana
SmartFabric Storage Software
Virtualization Engine TS7700 3957-VED
QRadar Suite
watsonx.data
Python for Scientific Computing
IBM Edge Application Manager
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
IBM Netezza Analytics
RecoverPoint for Virtual Machines
IBM Qradar SIEM
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python3-setuptools (Ubuntu package)
pypy-setuptools (Ubuntu package)
python-setuptools (Ubuntu package)
python39-wcwidth
python-setuptools
python-setuptools (Red Hat package)
python39-PyMySQL
python39-toml
python39-pluggy
python39-Cython
python39-wheel-wheel
python39-wheel
python39-iniconfig
python39-scipy
python39-pysocks
python39-py
python39-cffi
python39-six
python39-numpy-doc
python39-numpy
python39-numpy-f2py
python39-urllib3
python39-pyparsing
python39-pybind11
python39-pybind11-devel
python2.7
python39-psycopg2
python39-psycopg2-doc
python39-psycopg2-tests
python39-idna
python39-pycparser
python39-requests
python39-chardet
python39-cryptography
python3.6
python39-libs
python39-debug
python39-test
python39-tkinter
python39
python39-idle
python39-rpm-macros
python39-devel
python39-ply
resource-agents (Red Hat package)
fence-agents (Red Hat package)
python39-lxml
python39-mod_wsgi
resource-agents-paf
resource-agents-aliyun
resource-agents
resource-agents-gcp
buku
fence-virtd-multicast
fence-virtd-cpg
fence-virtd-serial
fence-virtd-tcp
ha-cloud-support
fence-agents-amt-ws
fence-agents-vmware-soap
fence-agents-vmware-rest
fence-agents-apc
fence-agents-apc-snmp
fence-agents-virsh
fence-agents-wti
fence-virtd-libvirt
fence-virtd
fence-virt
fence-agents-gce
fence-agents-azure-arm
fence-agents-aws
fence-agents-aliyun
fence-agents-redfish
fence-agents-kubevirt
fence-agents-kdump
fence-agents-all
fence-agents-sbd
fence-agents-ibmblade
fence-agents-rsb
fence-agents-rsa
fence-agents-rhevm
fence-agents-mpath
fence-agents-lpar
fence-agents-ipmilan
fence-agents-ipdu
fence-agents-intelmodular
fence-agents-ilo2
fence-agents-ilo-ssh
fence-agents-ilo-mp
fence-agents-ilo-moonshot
fence-agents-ifmib
fence-agents-bladecenter
fence-agents-ibm-vpc
fence-agents-ibm-powervs
fence-agents-hpblade
fence-agents-scsi
fence-agents-heuristics-ping
fence-agents-eps
fence-agents-emerson
fence-agents-eaton-snmp
fence-agents-drac5
fence-agents-common
fence-agents-cisco-ucs
fence-agents-cisco-mds
fence-agents-brocade
python39-pyyaml
python39-psutil
python39-pytest
pypy
python39-more-itertools
python39-pip-wheel
python39-pip
python39-attrs
python39-packaging
python3-setuptools
python3-setuptools-wheel
platform-python-setuptools
python3-setuptools (Red Hat package)
python2-setuptools
python3-setuptools-test
python-setuptools-help
python36-setuptools
python39-setuptools
python39-setuptools-wheel
python3.11-setuptools (Red Hat package)
python310-setuptools
python311-setuptools
python311-setuptools-wheel
python-setuptools-wheel
python3-setuptools-doc
python312-setuptools
python3.12-setuptools (Red Hat package)
venv-salt-minion
RSA Authentication Manager
Red Hat OpenShift GitOps
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
Dell EMC Storage Monitoring and Reporting (SMR)
Red Hat Single Sign-On

Install updates from vendor's website.

setuptools - update to 70.0.0
IBM Concert Software - update to 1.0.5
watsonx Orchestrate Developer Edition - update to 1.13.0
SmartFabric Storage Software - update to 1.4.3
QRadar Suite - update to 1.10.25.0
watsonx.data - update to 2.1
PowerVC - update to 2.2.1.1
Guardium Data Security Center (GDSC) - addressed in versions 3.6.1, 3.8.5
Python for Scientific Computing - update to 4.2.1
Splunk User Behavior Analytics (UBA) - update to 5.4.2
watsonx Code Assistant for Ansible - update to 5.1.1
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
IBM Sterling Connect:Direct Web Services - update to 6.3.0.11 ifix001
IBM Business Automation Manager Open Editions - update to 8.0.7
RSA Authentication Manager - update to 8.7 SP2 Patch 5
Maximo Application Suite - Monitor Component - addressed in versions 8.10.15, 8.11.13, 9.0.5, 9.1.0
Maximo Application Suite - Predict Component - update to 9.0.1
IBM Spectrum Protect Plus - update to 10.1.17.1
python3-setuptools (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 45.2.0-1ubuntu0.2, 59.6.0-1.2ubuntu0.22.04.2, 68.1.2-2ubuntu1.1
pypy-setuptools (Ubuntu package) - update to Ubuntu Pro (Infra-only)
python-setuptools (Ubuntu package) - update to Ubuntu Pro (Infra-only)
python39-wcwidth - update to 0.2.5-3
python-setuptools - update to 0.9.8-7
python-setuptools (Red Hat package) - addressed in versions 0.9.8-7.el7_9.1, 39.2.0-5.el8_2.1, 39.2.0-6.el8_4.1, 39.2.0-7.el8_8.1, 39.2.0-8.el8_10, 53.0.0-12.el9_2.1, 53.0.0-12.el9_4.1
python39-PyMySQL - update to 0.10.1-2
python39-toml - update to 0.10.1-5
python39-pluggy - update to 0.13.1-3
python39-Cython - update to 0.29.21-5
python39-wheel-wheel - update to 0.35.1-4
python39-wheel - update to 0.35.1-4
Service Interconnect - addressed in versions 1, 1.4
python39-iniconfig - update to 1.1.1-2
Run Once Duration Override Operator for Red Hat OpenShift - addressed in versions 1.1.2, 1.2.0
Multicluster GlobalHub - update to 1.2.1
PowerVault ME5 - update to 1.2.2.1
Migration Toolkit for Runtimes - update to 1.2.7
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
python39-scipy - update to 1.5.4-5.0.1
python39-pysocks - update to 1.7.1-4
Migration Toolkit for Containers - update to 1.8.4
python39-py - update to 1.10.0-1
Red Hat OpenShift GitOps - addressed in versions 1.12.6, 1.13.2
python39-cffi - update to 1.14.3-2
IBM Process Mining - update to 1.15.0 IF001
python39-six - update to 1.15.0-3
python39-numpy-doc - update to 1.19.4-3.0.1
python39-numpy - update to 1.19.4-3.0.1
python39-numpy-f2py - update to 1.19.4-3.0.1
python39-urllib3 - update to 1.25.10-5
Multicluster Engine for Kubernetes - addressed in versions 2.3.8, 2.4.6
python39-pyparsing - update to 2.4.7-5
OpenShift Service Mesh - addressed in versions 2.4.11, 2.5.5, 2.6.2
Qradar Advisor - update to 2.6.6
python39-pybind11 - update to 2.7.1-1
python39-pybind11-devel - update to 2.7.1-1
python2.7 - addressed in versions 2.7.18-43.fc39, 2.7.18-43.fc40
python39-psycopg2 - update to 2.8.6-3.0.1
python39-psycopg2-doc - update to 2.8.6-3.0.1
python39-psycopg2-tests - update to 2.8.6-3.0.1
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.8.8, 2.9.5, 2.10.5, 2.12.0
IBM Fusion HCI - update to 2.9.0
python39-idna - update to 2.10-4
python39-pycparser - update to 2.20-3
python39-requests - update to 2.25.0-3
python39-chardet - update to 3.0.4-19
Netezza Performance Server Replication Services - update to 3.0.5.1
QRadar Deployment Intelligence App - update to 3.0.16
python39-cryptography - update to 3.3.1-3
APEX Cloud Platform for Red Hat OpenShift - update to 03.04.01.00
PowerStore T - update to 3.6.1.4-2413340
python3.6 - addressed in versions 3.6.15-34.fc39, 3.6.15-34.fc40
OpenManage Network Integration (OMNI) - update to 3.7
python39-libs - update to 3.9.19-7.0.1
python39-debug - update to 3.9.19-7.0.1
python39-test - update to 3.9.19-7.0.1
python39-tkinter - update to 3.9.19-7.0.1
python39 - update to 3.9.19-7.0.1
python39-idle - update to 3.9.19-7.0.1
python39-rpm-macros - update to 3.9.19-7.0.1
python39-devel - update to 3.9.19-7.0.1
python39-ply - update to 3.11-10
Security QRadar EDR - update to 3.12.12
Red Hat OpenShift Dev Spaces - update to 3.16.0
IBM Cloud Object Storage Systems - addressed in versions 3.18.0.75, 3.18.4.45
resource-agents (Red Hat package) - addressed in versions 4.1.1-90.el8_4.18, 4.9.0-16.el8_6.14, 4.9.0-40.el8_8.6, 4.9.0-54.el8_10.4
QRadar User Behavior Analytics - update to 4.1.17
fence-agents (Red Hat package) - addressed in versions 4.2.1-65.el8_4.20, 4.2.1-89.el8_6.14, 4.2.1-112.el8_8.8, 4.2.1-129.el8_10.4, 4.10.0-20.el9_0.17, 4.10.0-43.el9_2.9, 4.10.0-62.el9_4.5
Enterprise SONiC - update to 4.4.1
Red Hat Advanced Cluster Security for Kubernetes - update to 4.5.2
python39-lxml - update to 4.6.5-1
python39-mod_wsgi - update to 4.7.1-7
IBM Watson Discovery for IBM Cloud Pak for Data - addressed in versions 4.8.7, 5.0.3
Cognos Dashboards on Cloud Pak for Data - addressed in versions 4.8.9, 5.1.3
resource-agents-paf - update to 4.9.0-54
resource-agents-aliyun - update to 4.9.0-54
resource-agents - update to 4.9.0-54
resource-agents-gcp - update to 4.9.0-54
buku - addressed in versions 4.9-1.fc40, 4.9-1.fc41
fence-virtd-multicast - update to 4.10.0-62.0.2
fence-virtd-cpg - update to 4.10.0-62.0.2
fence-virtd-serial - update to 4.10.0-62.0.2
fence-virtd-tcp - update to 4.10.0-62.0.2
ha-cloud-support - update to 4.10.0-62.0.2
fence-agents-amt-ws - update to 4.10.0-62.0.2
fence-agents-vmware-soap - update to 4.10.0-62.0.2
fence-agents-vmware-rest - update to 4.10.0-62.0.2
fence-agents-apc - update to 4.10.0-62.0.2
fence-agents-apc-snmp - update to 4.10.0-62.0.2
fence-agents-virsh - update to 4.10.0-62.0.2
fence-agents-wti - update to 4.10.0-62.0.2
fence-virtd-libvirt - update to 4.10.0-62.0.2
fence-virtd - update to 4.10.0-62.0.2
fence-virt - update to 4.10.0-62.0.2
fence-agents-gce - update to 4.10.0-62.0.2
fence-agents-azure-arm - update to 4.10.0-62.0.2
fence-agents-aws - update to 4.10.0-62.0.2
fence-agents-aliyun - update to 4.10.0-62.0.2
fence-agents-redfish - update to 4.10.0-62.0.2
fence-agents-kubevirt - update to 4.10.0-62.0.2
fence-agents-kdump - update to 4.10.0-62.0.2
fence-agents-all - update to 4.10.0-62.0.2
fence-agents-sbd - update to 4.10.0-62.0.2
fence-agents-ibmblade - update to 4.10.0-62.0.2
fence-agents-rsb - update to 4.10.0-62.0.2
fence-agents-rsa - update to 4.10.0-62.0.2
fence-agents-rhevm - update to 4.10.0-62.0.2
fence-agents-mpath - update to 4.10.0-62.0.2
fence-agents-lpar - update to 4.10.0-62.0.2
fence-agents-ipmilan - update to 4.10.0-62.0.2
fence-agents-ipdu - update to 4.10.0-62.0.2
fence-agents-intelmodular - update to 4.10.0-62.0.2
fence-agents-ilo2 - update to 4.10.0-62.0.2
fence-agents-ilo-ssh - update to 4.10.0-62.0.2
fence-agents-ilo-mp - update to 4.10.0-62.0.2
fence-agents-ilo-moonshot - update to 4.10.0-62.0.2
fence-agents-ifmib - update to 4.10.0-62.0.2
fence-agents-bladecenter - update to 4.10.0-62.0.2
fence-agents-ibm-vpc - update to 4.10.0-62.0.2
fence-agents-ibm-powervs - update to 4.10.0-62.0.2
fence-agents-hpblade - update to 4.10.0-62.0.2
fence-agents-scsi - update to 4.10.0-62.0.2
fence-agents-heuristics-ping - update to 4.10.0-62.0.2
fence-agents-eps - update to 4.10.0-62.0.2
fence-agents-emerson - update to 4.10.0-62.0.2
fence-agents-eaton-snmp - update to 4.10.0-62.0.2
fence-agents-drac5 - update to 4.10.0-62.0.2
fence-agents-common - update to 4.10.0-62.0.2
fence-agents-cisco-ucs - update to 4.10.0-62.0.2
fence-agents-cisco-mds - update to 4.10.0-62.0.2
fence-agents-brocade - update to 4.10.0-62.0.2
Red Hat OpenShift Container Platform - addressed in versions 4.12.63, 4.13.48, 4.13.49, 4.14.35, 4.14.36, 4.15.28, 4.16.15, 4.16.44, 4.17.0, 4.17.1
OpenShift Virtualization - addressed in versions 4.13.11, 4.15.5
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.16.2
Storage Resource Manager - addressed in versions 5.0.2.0, 5.0.2.2
Kube Descheduler Operator for Red Hat OpenShift - addressed in versions 5.0.2, 5.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - addressed in versions 5.0.2.0, 5.0.2.2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.3
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - update to 5.1.1
python39-pyyaml - update to 5.4.1-1
SOAR QRadar Plugin App - update to 5.5.0
OpenShift Logging - addressed in versions 5.6.24, 5.6.25
python39-psutil - update to 5.8.0-4.0.1
python39-pytest - update to 6.0.2-2.0.1
pypy - update to 7.3.16-2.fc41
IBM Qradar SIEM - update to 7.5.0 Update Pack 9 IF03
Red Hat Single Sign-On - update to 7.6.10
python39-more-itertools - update to 8.5.0-2
Maximo Application Suite - IoT Component - addressed in versions 8.7.17, 8.8.13, 9.0.3
Maximo Application Suite - Edge Data Collector - addressed in versions 8.11.12, 9.0.4
IBM Virtualization Engine TS7700 3948-VED - addressed in versions 8.54.2.17, 8.60.0.115
Virtualization Engine TS7700 3957-VED - addressed in versions 8.54.2.17, 8.60.0.115
Maximo Application Suite - Visual Inspection Component - update to 9.0.4
Storage Protect Plus File Systems Agent - update to 10.1.16.3
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
IBM Netezza Analytics - update to 11.2.29
App Connect Enterprise Certified Container - addressed in versions 12.0.8, 12.8.2
EMC Cloud Tiering Appliance - update to 13.2.0.2.32
python39-pip-wheel - update to 20.2.4-9
python39-pip - update to 20.2.4-9
python39-attrs - update to 20.3.0-2
python39-packaging - update to 20.4-4
IBM Robotic Process Automation - addressed in versions 21.0.7.19, 23.0.19
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.19, 23.0.19
IBM Business Automation Workflow - update to 24.0.0-IF001
python3-setuptools - addressed in versions 39.2.0-8, 39.2.0-10, 68.0.0-3
python3-setuptools-wheel - update to 39.2.0-8
platform-python-setuptools - update to 39.2.0-8
python3-setuptools (Red Hat package) - update to 39.2.0-10.el7_9.1
python2-setuptools - update to 40.5.0-150100.6.9.1
python3-setuptools - addressed in versions 40.5.0-150100.6.9.1, 40.6.2-4.24.1, 44.1.1-150400.9.9.1
python3-setuptools-wheel - addressed in versions 40.5.0-150100.6.9.1, 44.1.1-150400.9.9.1
python3-setuptools-test - addressed in versions 40.5.0-150100.6.9.1, 44.1.1-150400.9.9.1
python-setuptools - update to 40.6.2-4.24.1
python-setuptools-help - update to 44.1.1-3
python2-setuptools - update to 44.1.1-3
python3-setuptools - update to 44.1.1-3
python-setuptools - update to 44.1.1-3
python36-setuptools - update to 44.1.1-8.9.1
python39-setuptools - update to 44.1.1-150300.7.9.1
python39-setuptools - update to 50.3.2-6
python39-setuptools-wheel - update to 50.3.2-6
python3.11-setuptools (Red Hat package) - addressed in versions 65.5.1-2.el8_8.1, 65.5.1-2.el9_2.1, 65.5.1-2.el9_4.1, 65.5.1-3.el8_10
python310-setuptools - update to 67.6.1-150400.4.9.1
python-setuptools - addressed in versions 67.7.2-8.fc39, 69.0.3-4.fc40
python311-setuptools - update to 67.7.2-150400.3.16.1
python311-setuptools-wheel - update to 67.7.2-150400.3.16.1
python-setuptools-wheel - update to 68.0.0-3
python3-setuptools-doc - update to 68.0.0-3
python312-setuptools - update to 68.1.2-150600.3.3.1
python3.12-setuptools (Red Hat package) - addressed in versions 68.2.2-3.el9_4.1, 68.2.2-4.el8_10
IBM Observability with Instana - update to 284
venv-salt-minion - addressed in versions 3006.0-1.47.1, 3006.0-2.23.1, 3006.0-2.54.3, 3006.0-2.61.1, 3006.0-2.63.3, 3006.0-3.65.1, 3006.0-150000.3.67.1

• https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5
• https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0

• Remote code execution in Python setuptools
• Fedora 39 update for python-setuptools
• Fedora 40 update for python-setuptools
• Fedora 41 update for pypy
• Fedora 39 update for python2.7
• Fedora 40 update for python2.7
• Fedora 39 update for python3.6
• Fedora 40 update for python3.6
• openEuler update for python-setuptools
• Red Hat Enterprise Linux 8 update for python-setuptools
• Red Hat Enterprise Linux 8 update for python3.11-setuptools
• Red Hat Enterprise Linux 8 update for python-setuptools
• Red Hat Enterprise Linux 9 update for python-setuptools
• Red Hat Enterprise Linux 8 update for the python39:3.9 and python39-devel:3.9 module
• Splunk Python for Scientific Computing update for third-party packages
• Red Hat Enterprise Linux 9 update for python3.11-setuptools
• Multiple vulnerabilities in IBM AIX and IBM VIOS
• SUSE update for python-setuptools
• SUSE update for python-setuptools
• SUSE update for python312-setuptools
• SUSE update for python39-setuptools
• SUSE update for python310-setuptools
• SUSE update for python36-setuptools
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Red Hat Enterprise Linux 8 update for python-setuptools
• Red Hat Enterprise Linux 8 update for python3.12-setuptools
• Red Hat Enterprise Linux 8 update for python3.11-setuptools
• Red Hat Enterprise Linux 9 update for python3.12-setuptools
• Red Hat Enterprise Linux 9 update for python-setuptools
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• SUSE update for python3-setuptools
• SUSE update for python-setuptools
• Multiple vulnerabilities in OpenShift Virtualization 4.15
• Multiple vulnerabilities in IBM QRadar Suite software
• Red Hat Enterprise Linux 8 update for the python39:3.9 module
• Code injection in IBM InfoSphere Information Server
• Multiple vulnerabilities in IBM Business Automation Workflow
• Ubuntu update for python-setuptools
• Multiple vulnerabilities in IBM Process Mining
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for python3-setuptools
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for python-setuptools
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.5
• Red Hat Enterprise Linux 9 update for fence-agents
• Red Hat Enterprise Linux 8 update for the python39:3.9 module
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Red Hat Enterprise Linux 8 update for fence-agents
• Red Hat Enterprise Linux 8 update for resource-agents
• Red Hat Enterprise Linux 9 update for python3.11-setuptools
• Red Hat Enterprise Linux 9 update for fence-agents
• Red Hat Enterprise Linux 9 update for fence-agents
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in IBM Cloud Object System
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6
• Red Hat Enterprise Linux 8 update for python-setuptools
• Code injection in IBM Watson Discovery
• Multiple vulnerabilities in Service Interconnect 1
• IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data update for pypa/setuptools
• Multiple vulnerabilities in Service Interconnect
• IBM Maximo Application Suite - Predict Component update for setuptools-68.0.0-py3-none-any.wh
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.16
• IBM Security QRadar EDR update for pypa/setuptools
• IBM Maximo Application Suite IoT Component update for setuptools-68.0.0-py3-none-any.whl
• Multiple vulnerabilities in IBM Storage Protect Plus File Systems Agent
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in OpenShift Service Mesh 2.4
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• Multiple vulnerabilities in OpenShift Service Mesh 2.6
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Oracle WebLogic Server
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift 1.2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Red Hat Enterprise Linux 8 update for fence-agents
• Red Hat Enterprise Linux 8 update for fence-agents
• Red Hat Enterprise Linux 8 update for fence-agents
• Red Hat Enterprise Linux 8 update for resource-agents
• Red Hat Enterprise Linux 8 update for resource-agents
• Red Hat Enterprise Linux 8 update for resource-agents
• Multiple vulnerabilities in Kube Descheduler Operator for Red Hat OpenShift 5.1
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in IBM SOAR QRadar Plugin App
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.9
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.13
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift 1.1
• Multiple vulnerabilities in IBM Observability with Instana
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.12
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Code Injection in IBM Edge Data Collector
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• Multiple vulnerabilities in Service Interconnect 1
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.3
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.8
• Multiple vulnerabilities in OpenShift Virtualization 4.13
• Multiple vulnerabilities in IBM QRadar User Behavior Analytics
• Multiple vulnerabilities in Kube Descheduler Operator for Red Hat OpenShift 5.0
• Multiple vulnerabilities in IBM Robotic Process Automation
• IBM Maximo Application Suite - Visual Inspection Component update for pypa/setuptools
• Code Injection in IBM PowerVC
• Multiple vulnerabilities in Service Interconnect
• Multiple vulnerabilities in IBM Fusion HCI
• IBM Sterling Connect:Direct Web Service update for Pypa Setuptools
• Multiple vulnerabilities in Enterprise SONiC Distribution
• Multiple vulnerabilities in Dell PowerStore T
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in IBM Netezza for Cloud Pak for Data (on Cloud)
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Fedora 41 update for buku
• Fedora 40 update for buku
• Multiple vulnerabilities in Guardium Data Security Center
• Multiple vulnerabilities in Multicluster GlobalHub 1.2
• IBM Watson Assistant for IBM Cloud Pak for Data update for pypa/setuptools
• IBM watsonx.data update for pypa/setuptools
• Multiple vulnerabilities in IBM QRadar Deployment Intelligence App
• IBM Maximo Application Suite - Monitor Component update for pypa/setuptools
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data update for pypa/setuptools
• Multiple vulnerabilities in IBM System Storage Virtualization Engine TS7700
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in QRadar Advisor With Watson for IBM QRadar SIEM
• Multiple vulnerabilities in IBM Concert Software
• IBM watsonx Code Assistant On Prem update for pypa/setuptools
• Anolis OS update for python-setuptools
• Anolis OS update for resource-agents
• Anolis OS update for fence-agents
• Anolis OS update for python-setuptools
• Anolis OS update for python3-setuptools
• Anolis OS update for python39:3.9 module
• Dell SmartFabric Storage Software update for third-party components
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Splunk User Behavior Analytics (UBA) update for third-party components
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Multiple vulnerabilities in IBM Cognos Dashboards on Cloud Pak for Data
• RSA Authentication Manager update for third-party components
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Dell RecoverPoint for Virtual Machines update for third-party components
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Multiple vulnerabilities in IBM Netezza Analytics - NPS
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Anolis OS update for python-setuptools
• Multiple vulnerabilities in IBM Edge Application Manager
• IBM watsonx Orchestrate Developer Edition update for setuptools
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in IBM Netezza Performance Server Replication Services
• Multiple vulnerabilities in Dell PowerVault ME5