Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 44 mingw-python-pip Important Path Traversal Risk CVE-2026-8643

fedora
Calendar Grey July 20, 2026
Scroller Fedora
Update pip to version 26.1.2 for Fedora 44, addressing a critical path traversal issue for MinGW Windows Python.
Update to pip-26.1.2.

Summary

MinGW Windows Python pip library.

Update Information:

Update to pip-26.1.2.

Topics%20covered

Topics Covered

security advisory fedora software update important path traversal mingw-python-pip

Change Log

* Sat Jul 4 2026 Sandro Mani - 26.1.2-1 - Update to 26.1.2 * Fri May 22 2026 Sandro Mani - 26.1.1-1 - Update to 26.1.1 * Sun Mar 1 2026 Sandro Mani - 26.0.1-1 - Update to 26.0.1

References


[ 1 ] Bug #2494474 - CVE-2026-8643 mingw-python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2494474

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6edc44733c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: mingw-python-pip
Product: Fedora 44
Version: 26.1.2
Release: 1.fc44
URL: https://pypi.python.org/pypi/pip
Summary: MinGW Windows Python pip library

Topics%20covered

Topics Covered

security advisory fedora software update important path traversal mingw-python-pip

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.