Debian 11 Bullseye DLA-4183-1 Moderate: Setuptools Path Traversal Risk

A path traversal vulnerability in `PackageIndex` was found in setuptools. An
attacker would be allowed to write files to arbitrary locations on the
filesystem with the permissions of the process running the Python code, which
could escalate to remote code execution depending on the context.

For Debian 11 bullseye, this problem has been fixed in version
52.0.0-4+deb11u2.

We recommend that you upgrade your setuptools packages.

For the detailed security status of setuptools please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/setuptools

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS