--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2023-9992b32c1f
2023-04-30 01:23:32.979043
--------------------------------------------------------------------------------Name        : python-setuptools
Product     : Fedora 36
Version     : 59.6.0
Release     : 4.fc36
URL         : https://pypi.org/project/setuptools/
Summary     : Easily build and distribute Python packages
Description :
Setuptools is a collection of enhancements to the Python distutils that allow
you to more easily build and distribute Python packages, especially ones that
have dependencies on other packages.

This package also contains the runtime components of setuptools, necessary to
execute the software that requires pkg_resources.

--------------------------------------------------------------------------------Update Information:

Security fix for CVE-2022-40897
--------------------------------------------------------------------------------ChangeLog:

* Thu Apr  6 2023 Charalampos Stratakis  - 59.6.0-4
- Security fix for CVE-2022-40897
- Fixes: rhbz#2158677
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #2158677 - CVE-2022-40897 python-setuptools: pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=2158677
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-9992b32c1f' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
--------------------------------------------------------------------------------_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
Do not reply to spam, report it: https://pagure.io/login/