jiachao2130/csaf2cusa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5cde716b34
csaf2cusa/csaf/advisories/2024/csaf-openEuler-SA-2024-1931.json
Jia Chao 5cde716b34 更新：20240807 
Signed-off-by: Jia Chao <jiac13@chinaunicom.cn>
2024-08-07 09:56:41 +08:00

716 lines
28 KiB
JSON
Raw Blame History

{
"document":{
"aggregate_severity":{
"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
"text":"High"
},
"category":"csaf_vex",
"csaf_version":"2.0",
"distribution":{
"tlp":{
"label":"WHITE",
"url":"https:/www.first.org/tlp/"
}
},
"lang":"en",
"notes":[
{
"text":"python-setuptools security update",
"category":"general",
"title":"Synopsis"
},
{
"text":"An update for python-setuptools is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP1,openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4 and openEuler-24.03-LTS.",
"category":"general",
"title":"Summary"
},
{
"text":"Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages.\n\nSecurity Fix(es):\n\nA vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.(CVE-2024-6345)",
"category":"general",
"title":"Description"
},
{
"text":"An update for python-setuptools is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP1,openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4 and openEuler-24.03-LTS.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
"category":"general",
"title":"Topic"
},
{
"text":"High",
"category":"general",
"title":"Severity"
},
{
"text":"python-setuptools",
"category":"general",
"title":"Affected Component"
}
],
"publisher":{
"issuing_authority":"openEuler security committee",
"name":"openEuler",
"namespace":"https://www.openeuler.org",
"contact_details":"openeuler-security@openeuler.org",
"category":"vendor"
},
"references":[
{
"summary":"openEuler-SA-2024-1931",
"category":"self",
"url":"https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-1931"
},
{
"summary":"CVE-2024-6345",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-6345&packageName=python-setuptools"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6345"
},
{
"summary":"openEuler-SA-2024-1931 vex file",
"category":"self",
"url":"https://repo.openeuler.org/security/data/csaf/advisories/2024/csaf-openEuler-SA-2024-1931.json"
}
],
"title":"An update for python-setuptools is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP1,openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4 and openEuler-24.03-LTS",
"tracking":{
"initial_release_date":"2024-08-02T19:42:06+08:00",
"revision_history":[
{
"date":"2024-08-02T19:42:06+08:00",
"summary":"Initial",
"number":"1.0.0"
},
{
"date":"2024-08-05T11:31:06+08:00",
"summary":"final",
"number":"2.0.0"
}
],
"generator":{
"date":"2024-08-05T11:31:06+08:00",
"engine":{
"name":"openEuler CSAF Tool V1.0"
}
},
"current_release_date":"2024-08-05T11:31:06+08:00",
"id":"openEuler-SA-2024-1931",
"version":"2.0.0",
"status":"final"
}
},
"product_tree":{
"branches":[
{
"name":"openEuler",
"category":"vendor",
"branches":[
{
"name":"openEuler",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4"
},
"product_id":"openEuler-20.03-LTS-SP4",
"name":"openEuler-20.03-LTS-SP4"
},
"name":"openEuler-20.03-LTS-SP4",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP1"
},
"product_id":"openEuler-22.03-LTS-SP1",
"name":"openEuler-22.03-LTS-SP1"
},
"name":"openEuler-22.03-LTS-SP1",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"openEuler-22.03-LTS-SP3",
"name":"openEuler-22.03-LTS-SP3"
},
"name":"openEuler-22.03-LTS-SP3",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"
},
"product_id":"openEuler-22.03-LTS-SP4",
"name":"openEuler-22.03-LTS-SP4"
},
"name":"openEuler-22.03-LTS-SP4",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
},
"product_id":"openEuler-24.03-LTS",
"name":"openEuler-24.03-LTS"
},
"name":"openEuler-24.03-LTS",
"category":"product_version"
}
],
"category":"product_name"
},
{
"name":"noarch",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4"
},
"product_id":"python-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
"name":"python-setuptools-44.1.1-3.oe2003sp4.noarch.rpm"
},
"name":"python-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4"
},
"product_id":"python3-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
"name":"python3-setuptools-44.1.1-3.oe2003sp4.noarch.rpm"
},
"name":"python3-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4"
},
"product_id":"python2-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
"name":"python2-setuptools-44.1.1-3.oe2003sp4.noarch.rpm"
},
"name":"python2-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4"
},
"product_id":"python-setuptools-help-44.1.1-3.oe2003sp4.noarch.rpm",
"name":"python-setuptools-help-44.1.1-3.oe2003sp4.noarch.rpm"
},
"name":"python-setuptools-help-44.1.1-3.oe2003sp4.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP1"
},
"product_id":"python3-setuptools-59.4.0-6.oe2203sp1.noarch.rpm",
"name":"python3-setuptools-59.4.0-6.oe2203sp1.noarch.rpm"
},
"name":"python3-setuptools-59.4.0-6.oe2203sp1.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP1"
},
"product_id":"python-setuptools-59.4.0-6.oe2203sp1.noarch.rpm",
"name":"python-setuptools-59.4.0-6.oe2203sp1.noarch.rpm"
},
"name":"python-setuptools-59.4.0-6.oe2203sp1.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP1"
},
"product_id":"python-setuptools-help-59.4.0-6.oe2203sp1.noarch.rpm",
"name":"python-setuptools-help-59.4.0-6.oe2203sp1.noarch.rpm"
},
"name":"python-setuptools-help-59.4.0-6.oe2203sp1.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python3-setuptools-59.4.0-6.oe2203sp3.noarch.rpm",
"name":"python3-setuptools-59.4.0-6.oe2203sp3.noarch.rpm"
},
"name":"python3-setuptools-59.4.0-6.oe2203sp3.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python-setuptools-help-59.4.0-6.oe2203sp3.noarch.rpm",
"name":"python-setuptools-help-59.4.0-6.oe2203sp3.noarch.rpm"
},
"name":"python-setuptools-help-59.4.0-6.oe2203sp3.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python-setuptools-59.4.0-6.oe2203sp3.noarch.rpm",
"name":"python-setuptools-59.4.0-6.oe2203sp3.noarch.rpm"
},
"name":"python-setuptools-59.4.0-6.oe2203sp3.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"
},
"product_id":"python3-setuptools-59.4.0-6.oe2203sp4.noarch.rpm",
"name":"python3-setuptools-59.4.0-6.oe2203sp4.noarch.rpm"
},
"name":"python3-setuptools-59.4.0-6.oe2203sp4.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"
},
"product_id":"python-setuptools-59.4.0-6.oe2203sp4.noarch.rpm",
"name":"python-setuptools-59.4.0-6.oe2203sp4.noarch.rpm"
},
"name":"python-setuptools-59.4.0-6.oe2203sp4.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"
},
"product_id":"python-setuptools-help-59.4.0-6.oe2203sp4.noarch.rpm",
"name":"python-setuptools-help-59.4.0-6.oe2203sp4.noarch.rpm"
},
"name":"python-setuptools-help-59.4.0-6.oe2203sp4.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
},
"product_id":"python3-setuptools-68.0.0-2.oe2403.noarch.rpm",
"name":"python3-setuptools-68.0.0-2.oe2403.noarch.rpm"
},
"name":"python3-setuptools-68.0.0-2.oe2403.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
},
"product_id":"python-setuptools-68.0.0-2.oe2403.noarch.rpm",
"name":"python-setuptools-68.0.0-2.oe2403.noarch.rpm"
},
"name":"python-setuptools-68.0.0-2.oe2403.noarch.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
},
"product_id":"python-setuptools-help-68.0.0-2.oe2403.noarch.rpm",
"name":"python-setuptools-help-68.0.0-2.oe2403.noarch.rpm"
},
"name":"python-setuptools-help-68.0.0-2.oe2403.noarch.rpm",
"category":"product_version"
}
],
"category":"product_name"
},
{
"name":"src",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4"
},
"product_id":"python-setuptools-44.1.1-3.oe2003sp4.src.rpm",
"name":"python-setuptools-44.1.1-3.oe2003sp4.src.rpm"
},
"name":"python-setuptools-44.1.1-3.oe2003sp4.src.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP1"
},
"product_id":"python-setuptools-59.4.0-6.oe2203sp1.src.rpm",
"name":"python-setuptools-59.4.0-6.oe2203sp1.src.rpm"
},
"name":"python-setuptools-59.4.0-6.oe2203sp1.src.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python-setuptools-59.4.0-6.oe2203sp3.src.rpm",
"name":"python-setuptools-59.4.0-6.oe2203sp3.src.rpm"
},
"name":"python-setuptools-59.4.0-6.oe2203sp3.src.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"
},
"product_id":"python-setuptools-59.4.0-6.oe2203sp4.src.rpm",
"name":"python-setuptools-59.4.0-6.oe2203sp4.src.rpm"
},
"name":"python-setuptools-59.4.0-6.oe2203sp4.src.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
},
"product_id":"python-setuptools-68.0.0-2.oe2403.src.rpm",
"name":"python-setuptools-68.0.0-2.oe2403.src.rpm"
},
"name":"python-setuptools-68.0.0-2.oe2403.src.rpm",
"category":"product_version"
}
],
"category":"product_name"
}
]
}
],
"relationships":[
{
"relates_to_product_reference":"openEuler-20.03-LTS-SP4",
"product_reference":"python-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-20.03-LTS-SP4:python-setuptools-44.1.1-3.oe2003sp4.noarch",
"name":"python-setuptools-44.1.1-3.oe2003sp4.noarch as a component of openEuler-20.03-LTS-SP4"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-20.03-LTS-SP4",
"product_reference":"python3-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-20.03-LTS-SP4:python3-setuptools-44.1.1-3.oe2003sp4.noarch",
"name":"python3-setuptools-44.1.1-3.oe2003sp4.noarch as a component of openEuler-20.03-LTS-SP4"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-20.03-LTS-SP4",
"product_reference":"python2-setuptools-44.1.1-3.oe2003sp4.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-20.03-LTS-SP4:python2-setuptools-44.1.1-3.oe2003sp4.noarch",
"name":"python2-setuptools-44.1.1-3.oe2003sp4.noarch as a component of openEuler-20.03-LTS-SP4"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-20.03-LTS-SP4",
"product_reference":"python-setuptools-help-44.1.1-3.oe2003sp4.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-20.03-LTS-SP4:python-setuptools-help-44.1.1-3.oe2003sp4.noarch",
"name":"python-setuptools-help-44.1.1-3.oe2003sp4.noarch as a component of openEuler-20.03-LTS-SP4"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP1",
"product_reference":"python3-setuptools-59.4.0-6.oe2203sp1.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP1:python3-setuptools-59.4.0-6.oe2203sp1.noarch",
"name":"python3-setuptools-59.4.0-6.oe2203sp1.noarch as a component of openEuler-22.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP1",
"product_reference":"python-setuptools-59.4.0-6.oe2203sp1.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP1:python-setuptools-59.4.0-6.oe2203sp1.noarch",
"name":"python-setuptools-59.4.0-6.oe2203sp1.noarch as a component of openEuler-22.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP1",
"product_reference":"python-setuptools-help-59.4.0-6.oe2203sp1.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP1:python-setuptools-help-59.4.0-6.oe2203sp1.noarch",
"name":"python-setuptools-help-59.4.0-6.oe2203sp1.noarch as a component of openEuler-22.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python3-setuptools-59.4.0-6.oe2203sp3.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python3-setuptools-59.4.0-6.oe2203sp3.noarch",
"name":"python3-setuptools-59.4.0-6.oe2203sp3.noarch as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python-setuptools-help-59.4.0-6.oe2203sp3.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python-setuptools-help-59.4.0-6.oe2203sp3.noarch",
"name":"python-setuptools-help-59.4.0-6.oe2203sp3.noarch as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python-setuptools-59.4.0-6.oe2203sp3.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python-setuptools-59.4.0-6.oe2203sp3.noarch",
"name":"python-setuptools-59.4.0-6.oe2203sp3.noarch as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP4",
"product_reference":"python3-setuptools-59.4.0-6.oe2203sp4.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP4:python3-setuptools-59.4.0-6.oe2203sp4.noarch",
"name":"python3-setuptools-59.4.0-6.oe2203sp4.noarch as a component of openEuler-22.03-LTS-SP4"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP4",
"product_reference":"python-setuptools-59.4.0-6.oe2203sp4.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP4:python-setuptools-59.4.0-6.oe2203sp4.noarch",
"name":"python-setuptools-59.4.0-6.oe2203sp4.noarch as a component of openEuler-22.03-LTS-SP4"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP4",
"product_reference":"python-setuptools-help-59.4.0-6.oe2203sp4.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP4:python-setuptools-help-59.4.0-6.oe2203sp4.noarch",
"name":"python-setuptools-help-59.4.0-6.oe2203sp4.noarch as a component of openEuler-22.03-LTS-SP4"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS",
"product_reference":"python3-setuptools-68.0.0-2.oe2403.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS:python3-setuptools-68.0.0-2.oe2403.noarch",
"name":"python3-setuptools-68.0.0-2.oe2403.noarch as a component of openEuler-24.03-LTS"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS",
"product_reference":"python-setuptools-68.0.0-2.oe2403.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS:python-setuptools-68.0.0-2.oe2403.noarch",
"name":"python-setuptools-68.0.0-2.oe2403.noarch as a component of openEuler-24.03-LTS"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS",
"product_reference":"python-setuptools-help-68.0.0-2.oe2403.noarch.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS:python-setuptools-help-68.0.0-2.oe2403.noarch",
"name":"python-setuptools-help-68.0.0-2.oe2403.noarch as a component of openEuler-24.03-LTS"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-20.03-LTS-SP4",
"product_reference":"python-setuptools-44.1.1-3.oe2003sp4.src.rpm",
"full_product_name":{
"product_id":"openEuler-20.03-LTS-SP4:python-setuptools-44.1.1-3.oe2003sp4.src",
"name":"python-setuptools-44.1.1-3.oe2003sp4.src as a component of openEuler-20.03-LTS-SP4"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP1",
"product_reference":"python-setuptools-59.4.0-6.oe2203sp1.src.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP1:python-setuptools-59.4.0-6.oe2203sp1.src",
"name":"python-setuptools-59.4.0-6.oe2203sp1.src as a component of openEuler-22.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python-setuptools-59.4.0-6.oe2203sp3.src.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python-setuptools-59.4.0-6.oe2203sp3.src",
"name":"python-setuptools-59.4.0-6.oe2203sp3.src as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP4",
"product_reference":"python-setuptools-59.4.0-6.oe2203sp4.src.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP4:python-setuptools-59.4.0-6.oe2203sp4.src",
"name":"python-setuptools-59.4.0-6.oe2203sp4.src as a component of openEuler-22.03-LTS-SP4"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS",
"product_reference":"python-setuptools-68.0.0-2.oe2403.src.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS:python-setuptools-68.0.0-2.oe2403.src",
"name":"python-setuptools-68.0.0-2.oe2403.src as a component of openEuler-24.03-LTS"
},
"category":"default_component_of"
}
]
},
"vulnerabilities":[
{
"cve":"CVE-2024-6345",
"notes":[
{
"text":"A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-20.03-LTS-SP4:python-setuptools-44.1.1-3.oe2003sp4.noarch",
"openEuler-20.03-LTS-SP4:python3-setuptools-44.1.1-3.oe2003sp4.noarch",
"openEuler-20.03-LTS-SP4:python2-setuptools-44.1.1-3.oe2003sp4.noarch",
"openEuler-20.03-LTS-SP4:python-setuptools-help-44.1.1-3.oe2003sp4.noarch",
"openEuler-22.03-LTS-SP1:python3-setuptools-59.4.0-6.oe2203sp1.noarch",
"openEuler-22.03-LTS-SP1:python-setuptools-59.4.0-6.oe2203sp1.noarch",
"openEuler-22.03-LTS-SP1:python-setuptools-help-59.4.0-6.oe2203sp1.noarch",
"openEuler-22.03-LTS-SP3:python3-setuptools-59.4.0-6.oe2203sp3.noarch",
"openEuler-22.03-LTS-SP3:python-setuptools-help-59.4.0-6.oe2203sp3.noarch",
"openEuler-22.03-LTS-SP3:python-setuptools-59.4.0-6.oe2203sp3.noarch",
"openEuler-22.03-LTS-SP4:python3-setuptools-59.4.0-6.oe2203sp4.noarch",
"openEuler-22.03-LTS-SP4:python-setuptools-59.4.0-6.oe2203sp4.noarch",
"openEuler-22.03-LTS-SP4:python-setuptools-help-59.4.0-6.oe2203sp4.noarch",
"openEuler-24.03-LTS:python3-setuptools-68.0.0-2.oe2403.noarch",
"openEuler-24.03-LTS:python-setuptools-68.0.0-2.oe2403.noarch",
"openEuler-24.03-LTS:python-setuptools-help-68.0.0-2.oe2403.noarch",
"openEuler-20.03-LTS-SP4:python-setuptools-44.1.1-3.oe2003sp4.src",
"openEuler-22.03-LTS-SP1:python-setuptools-59.4.0-6.oe2203sp1.src",
"openEuler-22.03-LTS-SP3:python-setuptools-59.4.0-6.oe2203sp3.src",
"openEuler-22.03-LTS-SP4:python-setuptools-59.4.0-6.oe2203sp4.src",
"openEuler-24.03-LTS:python-setuptools-68.0.0-2.oe2403.src"
]
},
"remediations":[
{
"product_ids":[
"openEuler-20.03-LTS-SP4:python-setuptools-44.1.1-3.oe2003sp4.noarch",
"openEuler-20.03-LTS-SP4:python3-setuptools-44.1.1-3.oe2003sp4.noarch",
"openEuler-20.03-LTS-SP4:python2-setuptools-44.1.1-3.oe2003sp4.noarch",
"openEuler-20.03-LTS-SP4:python-setuptools-help-44.1.1-3.oe2003sp4.noarch",
"openEuler-22.03-LTS-SP1:python3-setuptools-59.4.0-6.oe2203sp1.noarch",
"openEuler-22.03-LTS-SP1:python-setuptools-59.4.0-6.oe2203sp1.noarch",
"openEuler-22.03-LTS-SP1:python-setuptools-help-59.4.0-6.oe2203sp1.noarch",
"openEuler-22.03-LTS-SP3:python3-setuptools-59.4.0-6.oe2203sp3.noarch",
"openEuler-22.03-LTS-SP3:python-setuptools-help-59.4.0-6.oe2203sp3.noarch",
"openEuler-22.03-LTS-SP3:python-setuptools-59.4.0-6.oe2203sp3.noarch",
"openEuler-22.03-LTS-SP4:python3-setuptools-59.4.0-6.oe2203sp4.noarch",
"openEuler-22.03-LTS-SP4:python-setuptools-59.4.0-6.oe2203sp4.noarch",
"openEuler-22.03-LTS-SP4:python-setuptools-help-59.4.0-6.oe2203sp4.noarch",
"openEuler-24.03-LTS:python3-setuptools-68.0.0-2.oe2403.noarch",
"openEuler-24.03-LTS:python-setuptools-68.0.0-2.oe2403.noarch",
"openEuler-24.03-LTS:python-setuptools-help-68.0.0-2.oe2403.noarch",
"openEuler-20.03-LTS-SP4:python-setuptools-44.1.1-3.oe2003sp4.src",
"openEuler-22.03-LTS-SP1:python-setuptools-59.4.0-6.oe2203sp1.src",
"openEuler-22.03-LTS-SP3:python-setuptools-59.4.0-6.oe2203sp3.src",
"openEuler-22.03-LTS-SP4:python-setuptools-59.4.0-6.oe2203sp4.src",
"openEuler-24.03-LTS:python-setuptools-68.0.0-2.oe2403.src"
],
"details":"python-setuptools security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1931"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"HIGH",
"baseScore":8.8,
"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version":"3.1"
},
"products":[
"openEuler-20.03-LTS-SP4:python-setuptools-44.1.1-3.oe2003sp4.noarch",
"openEuler-20.03-LTS-SP4:python3-setuptools-44.1.1-3.oe2003sp4.noarch",
"openEuler-20.03-LTS-SP4:python2-setuptools-44.1.1-3.oe2003sp4.noarch",
"openEuler-20.03-LTS-SP4:python-setuptools-help-44.1.1-3.oe2003sp4.noarch",
"openEuler-22.03-LTS-SP1:python3-setuptools-59.4.0-6.oe2203sp1.noarch",
"openEuler-22.03-LTS-SP1:python-setuptools-59.4.0-6.oe2203sp1.noarch",
"openEuler-22.03-LTS-SP1:python-setuptools-help-59.4.0-6.oe2203sp1.noarch",
"openEuler-22.03-LTS-SP3:python3-setuptools-59.4.0-6.oe2203sp3.noarch",
"openEuler-22.03-LTS-SP3:python-setuptools-help-59.4.0-6.oe2203sp3.noarch",
"openEuler-22.03-LTS-SP3:python-setuptools-59.4.0-6.oe2203sp3.noarch",
"openEuler-22.03-LTS-SP4:python3-setuptools-59.4.0-6.oe2203sp4.noarch",
"openEuler-22.03-LTS-SP4:python-setuptools-59.4.0-6.oe2203sp4.noarch",
"openEuler-22.03-LTS-SP4:python-setuptools-help-59.4.0-6.oe2203sp4.noarch",
"openEuler-24.03-LTS:python3-setuptools-68.0.0-2.oe2403.noarch",
"openEuler-24.03-LTS:python-setuptools-68.0.0-2.oe2403.noarch",
"openEuler-24.03-LTS:python-setuptools-help-68.0.0-2.oe2403.noarch",
"openEuler-20.03-LTS-SP4:python-setuptools-44.1.1-3.oe2003sp4.src",
"openEuler-22.03-LTS-SP1:python-setuptools-59.4.0-6.oe2203sp1.src",
"openEuler-22.03-LTS-SP3:python-setuptools-59.4.0-6.oe2203sp3.src",
"openEuler-22.03-LTS-SP4:python-setuptools-59.4.0-6.oe2203sp4.src",
"openEuler-24.03-LTS:python-setuptools-68.0.0-2.oe2403.src"
]
}
],
"threats":[
{
"details":"High",
"category":"impact"
}
],
"title":"CVE-2024-6345"
}
]
}
Reference in New Issue View Git Blame Copy Permalink