python-setuptools

Easily build and distribute Python packages

Current: 83.0.0
Candidate: 84.2.1

License: MIT AND Apache-2.0 AND (BSD-2-Clause OR Apache-2.0) AND Python-2.0.1 AND LGPL-3.0-only
BuildSystem: ❔ custom

Build

Target	Result	Last successful version	Succeeded at
rva23python-setuptools	Succeeded	83.0.0	2026-10-20 07:18:29 UTC
rva23python-setuptools:bootstrap	Succeeded	83.0.0	2026-10-20 08:49:55 UTC
rva20python-setuptools	Succeeded	83.0.0	2026-10-20 07:19:48 UTC
rva20python-setuptools:bootstrap	Succeeded	83.0.0	2026-10-20 07:23:34 UTC
x86_64python-setuptools	Succeeded	83.0.0	2026-10-20 07:14:43 UTC
x86_64python-setuptools:bootstrap	Succeeded	83.0.0	2026-10-20 07:15:21 UTC

RuntimeDeps

Dependency	Observed source	Current requirement	Candidate requirement
Python	3.14.9	>=3.10✓	>=3.10✓

Optional RuntimeDeps

Dependency	Observed source	Current requirement	Candidate requirement
build[virtualenv]	1.3.0	>=1.0.3?	>=1.0.3?
filelock	3.29.0	>=3.4.0?	>=3.4.0?
furoUnmapped	—	any version	any version
importlib_metadata	9.0.0	>=6—	>=6—
importlib_metadata	9.0.0	>=7.0.2—	>=7.0.2—
ini2toml[lite]Unmapped	—	>=0.14	>=0.14
jaraco.developUnmapped	—	>=7.21	>=7.21
jaraco.envsUnmapped	—	>=2.2	>=2.2
jaraco.functools	4.5.0	>=4?	>=4?
jaraco.packagingUnmapped	—	>=9.3	>=9.3
jaraco.pathUnmapped	—	>=3.7.2	>=3.7.2
jaraco.testUnmapped	—	>=5.5	>=5.5
jaraco.text	4.2.0	>=3.7?	>=3.7?
jaraco.tideliftUnmapped	—	>=1.4	>=1.4
more_itertools	11.0.2	>=8.8?	>=8.8?
mypy	1.19.1	==1.18.*?	==1.18.*?
packaging	25.0	>=24.2?	>=26.3?
pipUnmapped	—	>=19.1	>=19.1
pygments-github-lexersUnmapped	—	==0.0.5	==0.0.5
pyproject-hooks	1.2.0	!=1.1?	!=1.1?
pytest	9.0.3	!=8.1.*,>=6?	!=8.1.*,>=6?
pytest-checkdocsUnmapped	—	>=2.14	>=2.14
pytest-cov	7.1.0	any version?	any version?
pytest-enablerUnmapped	—	>=3.4	>=3.4
pytest-homeUnmapped	—	>=0.5	>=0.5
pytest-mypyUnmapped	—	>=1.0.1	>=1.0.1
pytest-perfUnmapped	—	any version	any version
pytest-ruffUnmapped	—	>=0.2.1	>=0.2.1
pytest-subprocessUnmapped	—	any version	any version
pytest-timeout	2.4.0	any version?	any version?
pytest-xdist	3.8.0	>=3?	>=3?
rst.linkerUnmapped	—	>=1.9	>=1.9
ruffUnmapped	—	>=0.13.0	>=0.13.0
sphinx	9.1.0	>=3.5?	>=3.5?
sphinx-faviconUnmapped	—	any version	any version
sphinx-inline-tabsUnmapped	—	any version	any version
sphinx-lintUnmapped	—	any version	any version
sphinx-notfound-pageUnmapped	—	<2,>=1	<2,>=1
sphinx-reredirectsUnmapped	—	any version	any version
sphinxcontrib-towncrierUnmapped	—	any version	any version
tomliUnmapped	—	>=2.0.1	>=2.0.1
tomli-w	1.2.0	>=1.0.0?	>=1.0.0?
towncrierUnmapped	—	<24.7	<24.7
virtualenv	21.7.4	>=13.0.0?	>=13.0.0?
wheel	0.48.0	>=0.43.0?	>=0.43.0?
wheel	0.48.0	>=0.44.0?	>=0.44.0?

Dependency conditions

build[virtualenv]>=1.0.3?
Applies when (any)
extra == "test"
filelock >=3.4.0?
Applies when (any)
extra == "test"
furoany versionUnmapped
Applies when (any)
extra == "doc"
importlib_metadata >=6—
Applies when (any)
python_version < "3.10" and extra == "core"
importlib_metadata >=7.0.2—
Applies when (any)
python_version < "3.10" and extra == "type"
ini2toml[lite]>=0.14Unmapped
Applies when (any)
extra == "test"
jaraco.develop>=7.21Unmapped
Applies when (any)
(python_version >= "3.9" and sys_platform != "cygwin") and extra == "test"sys_platform != "cygwin" and extra == "type"
jaraco.envs>=2.2Unmapped
Applies when (any)
extra == "test"
jaraco.functools >=4?
Applies when (any)
extra == "core"
jaraco.packaging>=9.3Unmapped
Applies when (any)
extra == "doc"
jaraco.path>=3.7.2Unmapped
Applies when (any)
extra == "test"
jaraco.test>=5.5Unmapped
Applies when (any)
extra == "test"
jaraco.text >=3.7?
Applies when (any)
extra == "core"
jaraco.tidelift>=1.4Unmapped
Applies when (any)
extra == "doc"
more_itertools >=8.8?
Applies when (any)
extra == "core"
mypy ==1.18.*?
Applies when (any)
extra == "type"
packaging >=24.2?→>=26.3?
Applies when (any)
extra == "core"extra == "test"
pip>=19.1Unmapped
Applies when (any)
extra == "test"
pygments-github-lexers==0.0.5Unmapped
Applies when (any)
extra == "doc"
pyproject-hooks !=1.1?
Applies when (any)
extra == "doc"extra == "test"
pytest !=8.1.*,>=6?
Applies when (any)
extra == "test"
pytest-checkdocs>=2.14Unmapped
Applies when (any)
extra == "check"
pytest-cov any version?
Applies when (any)
extra == "cover"
pytest-enabler>=3.4Unmapped
Applies when (any)
extra == "enabler"
pytest-home>=0.5Unmapped
Applies when (any)
extra == "test"
pytest-mypy>=1.0.1Unmapped
Applies when (any)
platform_python_implementation != "PyPy" and extra == "type"
pytest-perfany versionUnmapped
Applies when (any)
sys_platform != "cygwin" and extra == "test"
pytest-ruff>=0.2.1Unmapped
Applies when (any)
sys_platform != "cygwin" and extra == "check"
pytest-subprocessany versionUnmapped
Applies when (any)
extra == "test"
pytest-timeout any version?
Applies when (any)
extra == "test"
pytest-xdist >=3?
Applies when (any)
extra == "test"
rst.linker>=1.9Unmapped
Applies when (any)
extra == "doc"
ruff>=0.13.0Unmapped
Applies when (any)
sys_platform != "cygwin" and extra == "check"
sphinx >=3.5?
Applies when (any)
extra == "doc"
sphinx-faviconany versionUnmapped
Applies when (any)
extra == "doc"
sphinx-inline-tabsany versionUnmapped
Applies when (any)
extra == "doc"
sphinx-lintany versionUnmapped
Applies when (any)
extra == "doc"
sphinx-notfound-page<2,>=1Unmapped
Applies when (any)
extra == "doc"
sphinx-reredirectsany versionUnmapped
Applies when (any)
extra == "doc"
sphinxcontrib-towncrierany versionUnmapped
Applies when (any)
extra == "doc"
tomli>=2.0.1Unmapped
Applies when (any)
python_version < "3.11" and extra == "core"
tomli-w >=1.0.0?
Applies when (any)
extra == "test"
towncrier<24.7Unmapped
Applies when (any)
extra == "doc"
virtualenv >=13.0.0?
Applies when (any)
extra == "test"
wheel >=0.43.0?
Applies when (any)
extra == "core"
wheel >=0.44.0?
Applies when (any)
extra == "test"

Advisory · 1

Query ecosystem: PyPIOSV
Query name: setuptoolsOSV
Query version: 83.0.0OSV

Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.

GHSA-xmj3-9gf7-h52w
OSV
Summary
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation DescriptionOSV
Fixed events
84.1.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
CVSS_V4
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:NOSV
References
Web · 6d07b8d17890 Web · github.com Web · github.com Web · github.com

Description

Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages.

Changelog

SPECS: python-setuptools: Update to 83.0.0 [security-fixes]
Li Guan6baff5564abe2026-09-19 13:47:30 UTC
SPECS: python-setuptools: Fix bootstrap BuildRequires.
misaka0025107de3498c7f12026-09-16 13:32:24 UTC
SPECS: update python-setuptools to 82.0.1
Sun Yuechi59942bd21c692026-06-11 17:58:13 UTC
SPECS: python-setuptools: Let itself provides python3-setuptools.
misaka00251e1f3039a0c512026-05-10 17:21:26 UTC
SPECS: python-setuptools: Merge subpackage & Fix python spec file formatting.
misaka00251e2c93a60ccba2026-05-09 15:13:19 UTC
SPECS: python-setuptools: Fix spec file formatting.
misaka00251e337766643e62026-03-18 18:28:48 UTC
SPECS: python-setuptools: Update to 80.9.0.
misaka00251f631b0df3e6d2025-12-05 04:36:25 UTC
Initial commit
Z572bc722d18574a2025-08-05 09:00:05 UTC

PR · 7

#1342 CVE Vulnerability Fixes (Part 1)
Leetfs2026-10-20 07:10:52 UTC
#1315 Update python to 3.14
misaka002512026-10-08 03:42:09 UTC
#343 SPECS: Update python-setuptools and related types stubs
KimmyXYC2026-06-14 12:31:46 UTC
#693 Add python packages for ceph CI
sunyuechi2026-06-12 02:51:47 UTC
#356 SPECS: python-setuptools: Let itself provides python3-setuptools.
misaka002512026-05-11 15:03:34 UTC
#345 SPECS: python-setuptools: Merge subpackage & Fix python spec file formatting.
misaka002512026-05-09 16:31:30 UTC
#104 SPECS: *: Fix style %{?autochangelog} -> %autochangelog (automated)
dramforever2026-04-09 06:15:39 UTC

Checks

Monitor	Observation	Last checked
Source	Checked	2026-11-10 07:56:40 UTC
Version	Checked	2026-11-10 05:36:01 UTC
Build	Checked	2026-11-10 07:57:26 UTC
GitHub	Checked	2026-11-10 07:54:05 UTC
EOL	Not configured No reliable monitor identity/configuration.	—
LicenseDiff	Checked Compared same-provider, same-project SPDX metadata for this version pair.	2026-11-10 00:55:04 UTC Last attempted2026-11-10 06:18:53 UTC
Dependencies	Checked	2026-11-10 00:55:04 UTC Last attempted2026-11-10 06:44:57 UTC
Advisory	Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated.	2026-11-10 07:20:20 UTC
Yanked	Checked	2026-11-10 06:56:41 UTC

Monitor	Checks
Source	6367 Checked 17 CheckFailed
Version	5534 Checked 132 CheckFailed 707 Not configured 3 Partial evidence 8 Input unavailable
Build	6382 Checked 2 Not yet checked
GitHub	6384 Checked
EOL	6260 Not configured 118 Checked 3 Metadata unavailable 3 Input unavailable
LicenseDiff	1665 Not configured 187 Input changed 3175 Not applicable 12 Input unavailable 1134 Checked 207 Metadata unavailable 4 CheckFailed
Dependencies	1852 Not configured 3214 Checked 1248 Metadata unavailable 7 Input unavailable 58 Partial evidence 5 CheckFailed
Advisory	4995 Checked 1375 Not configured 7 Input unavailable 6 Metadata unavailable 1 Not yet checked
Yanked	2248 Not configured 4116 Checked 5 CheckFailed 7 Input unavailable 8 Metadata unavailable