[SECURITY] Fedora 37 Update: python-setuptools-62.6.0-3.fc37
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-60e2b22be0
2023-05-01 01:28:35.280146
--------------------------------------------------------------------------------
Name : python-setuptools
Product : Fedora 37
Version : 62.6.0
Release : 3.fc37
URL : https://pypi.python.org/pypi/setuptools
Summary : Easily build and distribute Python packages
Description :
Setuptools is a collection of enhancements to the Python distutils that allow
you to more easily build and distribute Python packages, especially ones that
have dependencies on other packages.
This package also contains the runtime components of setuptools, necessary to
execute the software that requires pkg_resources.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2022-40897
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 19 2023 Charalampos Stratakis <cstratak(a)redhat.com> - 62.6.0-3
- Security fix for CVE-2022-40897
- Fixes: rhbz#2158677
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2158559 - CVE-2022-40897 pypa-setuptools: Regular Expression Denial of
Service (ReDoS) in package_index.py
https://bugzilla.redhat.com/show_bug.cgi?id=2158559
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-60e2b22be0' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------