openSUSE has issued an advisory on January 16: https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WAQKKYI5XTBXPHU7RRPHNAQ7W6ARWJQW/ Mageia 8 is also affected.
Status comment: (none) => Patch available from openSUSEWhiteboard: (none) => MGA8TOO
Ubuntu has issued an advisory for this today (January 23): https://ubuntu.com/security/notices/USN-5817-1 The issue is fixed upstream in 65.5.1.
Severity: normal => major
RedHat has issued an advisory for this on February 21: https://access.redhat.com/errata/RHSA-2023:0835
Fedora has issued an advisory for this on April 30: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H/
patch added for both mga8 and cauldron! Packages in 9/Core/Updates_testing: ====================== python-setuptools-wheel-65.5.0-3.mga9.noarch.rpm python3-setuptools-65.5.0-3.mga9.noarch.rpm Packages in 8/Core/Updates_testing: ====================== python-setuptools-wheel-56.2.0-1.1.mga8.noarch.rpm python3-setuptools-56.2.0-1.1.mga8.noarch.rpm python3-pkg-resources-56.2.0-1.1.mga8.noarch.rpm From SRPMS: python-setuptools-65.5.0-3.mga9.src.rpm python-setuptools-56.2.0-1.1.mga8.src.rpm
CC: (none) => geiger.david68210Assignee: python => qa-bugs
Status comment: Patch available from openSUSE => (none)
Packages moved for cauldron!
Version: Cauldron => 8Whiteboard: MGA8TOO => (none)
Mageia8, x86_64 All three packages were already available and updated cleanly. There are 67 packages in the requires-recursive list but this is developer country so we should simply move it on.
CC: (none) => tarazed25Whiteboard: (none) => MGA8-64-OK
Validating.
CC: (none) => andrewsfarm, sysadmin-bugsKeywords: (none) => validated_update
Keywords: (none) => advisoryCC: (none) => davidwhodgins
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2023-0219.html
Resolution: (none) => FIXEDStatus: NEW => RESOLVED