Setuptools: Denial of Service

Setuptools: Denial of Service A vulnerability has been discovered in Setuptools, which can lead to denial of service. setuptools 2024-05-05 2024-05-05 879813 remote 65.5.1 65.5.1

Setuptools is a manager for Python packages.

A vulnerability has been discovered in Setuptools. See the impact field.

An inefficiency in a regular expression may end in a denial of service if an user is fetching malicious HTML from a package in PyPI or a custom PackageIndex page.

There is no known workaround at this time.

All Setuptools users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=dev-python/setuptools-65.5.1"

CVE-2022-40897 graaff graaff