Severity
6.1
Medium severity
Details
- CVSS score
- 6.1
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Overview
About vulnerability
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unicode normalization, so on macOS APFS or HFS+ an NFD file name could bypass an NFC exclusion rule and be packed into a source distribution. This issue is fixed in version 83.0.0.Details
- Affected product:
- AlmaLinux 9.2 ESU , Alpine Linux 3.22 , Alpine Linux 3.23 , Alpine Linux 3.24 , Amazon Linux 2 ELS , CentOS 7 ELS , Debian 10 , Debian 11 , Debian 12 , Debian 13 , EL 10 , EL 7 , EL 8 , EL 9 , Ubuntu 16.04 , Ubuntu 18.04 , Ubuntu 20.04 , Ubuntu 22.04 , Ubuntu 24.04 , setuptools
- Affected packages:
- alt-python37-setuptools @ 58.3.0 (+82 more)