dev-python/setuptools: update METADATA for CVE-2025-47273

This change updates the METADATA file to reflect that CVE-2025-47273
is mitigated by a patch.

BUG=b:456337451
TEST=none

Change-Id: I31b8af2e0431fa5322172adcaf6455972e79ce68
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/overlays/portage-stable/+/7275619
Auto-Submit: Greg Edelston <gredelston@google.com>
Tested-by: Greg Edelston <gredelston@google.com>
Commit-Queue: Greg Edelston <gredelston@google.com>
Reviewed-by: Leandro Lovisolo <lovisolo@google.com>

dev-python/setuptools/METADATA

diff --git a/dev-python/setuptools/METADATA b/dev-python/setuptools/METADATA
new file mode 100644
index 0000000..087dd93
--- /dev/null
+++ b/dev-python/setuptools/METADATA
@@ -0,0 +1,15 @@
+# Copyright 2025 The ChromiumOS Authors
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+# Metadata for CVEs that are fixed or don't affect ChromeOS.
+
+third_party {
+  security {
+    # CVEs mitigated by PATCHES.
+    mitigated_security_patch: "CVE-2025-47273"  # Fixed in files/setuptools-73.0.1-CVE-2025-47273.patch
+
+    # ChromeOS Public Tracker > Services > EngProd > Build
+    tag: "vuln_reporting:buganizer_component:1037860"
+  }
+}