# setuptools security updates

Patch Radar has 12 security fixes for setuptools, closing 4 CVEs. The newest is DEBIAN-CVE-2026-23949 (84.0.0-2), released January 20, 2026.

- Web page: https://patchblox.com/security/product/linux/setuptools
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-23949](https://patchblox.com/security/data/fix/linux/debian-cve-2026-23949.md) | Jan 20, 2026 | Debian 14 84.0.0-2 | High | 1 | 0 |
| [DLA-4183-1](https://patchblox.com/security/data/fix/linux/dla-4183-1.md) | May 28, 2025 | Debian 11.6 (bullseye) 52.0.0-4+deb11u2 | High | 1 | 0 |
| [DEBIAN-CVE-2025-47273](https://patchblox.com/security/data/fix/linux/debian-cve-2025-47273.md) | May 17, 2025 | Debian 12.15 (bookworm) 66.1.1-1+deb12u2 | High | 1 | 0 |
| [DEBIAN-CVE-2025-47273](https://patchblox.com/security/data/fix/linux/debian-cve-2025-47273.md) | May 17, 2025 | Debian 13.5 (trixie) 78.1.1-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-47273](https://patchblox.com/security/data/fix/linux/debian-cve-2025-47273.md) | May 17, 2025 | Debian 14 78.1.1-0.1 | High | 1 | 0 |
| [DLA-3876-1](https://patchblox.com/security/data/fix/linux/dla-3876-1.md) | Sep 5, 2024 | Debian 11.6 (bullseye) 52.0.0-4+deb11u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-6345](https://patchblox.com/security/data/fix/linux/debian-cve-2024-6345.md) | Jul 15, 2024 | Debian 12.15 (bookworm) 66.1.1-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-6345](https://patchblox.com/security/data/fix/linux/debian-cve-2024-6345.md) | Jul 15, 2024 | Debian 13.5 (trixie) 70.3.0-2 | High | 1 | 0 |
| [DEBIAN-CVE-2024-6345](https://patchblox.com/security/data/fix/linux/debian-cve-2024-6345.md) | Jul 15, 2024 | Debian 14 70.3.0-2 | High | 1 | 0 |
| [DEBIAN-CVE-2022-40897](https://patchblox.com/security/data/fix/linux/debian-cve-2022-40897.md) | Dec 23, 2022 | Debian 12.15 (bookworm) 65.6.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-40897](https://patchblox.com/security/data/fix/linux/debian-cve-2022-40897.md) | Dec 23, 2022 | Debian 13.5 (trixie) 65.6.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-40897](https://patchblox.com/security/data/fix/linux/debian-cve-2022-40897.md) | Dec 23, 2022 | Debian 14 65.6.3-1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo