Fedora 43 Mingw-Python3 Critical Command Injection and Code Execution Fix
fedora
April 28, 2026
Backport fix for CVE-2026-4786
Summary
MinGW Windows python3
Update Information:
Backport fix for CVE-2026-4786. Backport fixes for CVE-2026-6100, CVE-2026-3479, CVE-2026-1502
Change Log
* Sat Apr 18 2026 Sandro Mani
References
[ 1 ] Bug #2449254 - CVE-2026-3479 mingw-python3: Python pkgutil.get_data(): Path Traversal via improper resource argument validation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2449254
[ 2 ] Bug #2457939 - CVE-2026-1502 mingw-python3: Python: HTTP header injection via CR/LF in proxy tunnel headers [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2457939
[ 3 ] Bug #2458011 - CVE-2026-6100 mingw-python3: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2458011
[ 4 ] Bug #2458219 - CVE-2026-4786 mingw-python3: Python: Arbitrary code execution via command injection in webbrowser.open() API [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2458219
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-43577dc43b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: mingw-python3
Product: Fedora 43
Version: 3.11.15
Release: 4.fc43
Summary: MinGW Windows python3
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!