Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Fedora 43 mingw-python-pip Critical Path Traversal Risk Advisory

fedora
Calendar Grey July 20, 2026
Scroller Fedora
Important update for Fedora 43 addressing a security issue in mingw-python-pip impacting file handling and integrity.
Update to pip-26.1.2.

Summary

MinGW Windows Python pip library.

Update Information:

Update to pip-26.1.2.

Topics%20covered

Topics Covered

security advisory fedora update file overwrite important mingw-python-pip

Change Log

* Sat Jul 4 2026 Sandro Mani - 26.1.2-1 - Update to 26.1.2 * Fri May 22 2026 Sandro Mani - 26.1.1-1 - Update to 26.1.1 * Sun Mar 1 2026 Sandro Mani - 26.0.1-1 - Update to 26.0.1 * Fri Jan 16 2026 Fedora Release Engineering - 25.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Wed Dec 3 2025 Sandro Mani - 25.3-1 - Update to 25.3 * Sat Aug 30 2025 Sandro Mani - 25.2-1 - Update to 25.2

References


[ 1 ] Bug #2494474 - CVE-2026-8643 mingw-python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2494474

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-71562f8836' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: mingw-python-pip
Product: Fedora 43
Version: 26.1.2
Release: 1.fc43
URL: https://pypi.python.org/pypi/pip
Summary: MinGW Windows Python pip library

Topics%20covered

Topics Covered

security advisory fedora update file overwrite important mingw-python-pip

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.