Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Ubuntu 22 python-package Major Vulnerability Resolution 2026-bc73f87gf2

fedora
Calendar Grey February 1, 2026
Dist Fedora Esm H88
Critical security fix for python-wheel in Fedora 43 addressing CVE-2026-24049. Immediate action is recommended.
Security fix for CVE-2026-24049

Summary

This is a command line tool for manipulating Python wheel files,

as defined in PEP 427. It contains the following functionality:

- Convert .egg archives into .whl.

- Unpack wheel archives.

- Repack wheel archives.

- Add or remove tags in existing wheel archives.

Update Information:

Security fix for CVE-2026-24049

Topics%20covered

Topics Covered

security advisory fedora critical code execution privilege escalation python-wheel

Change Log

* Fri Jan 23 2026 Miro Hron\u010dok - 1:0.45.1-20 - Security fix for CVE-2026-24049 * Sat Jan 17 2026 Fedora Release Engineering - 1:0.45.1-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

References


[ 1 ] Bug #2432109 - CVE-2026-24049 python-wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2432109

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ce64e86fd8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python-wheel
Product: Fedora 43
Version: 0.45.1
Release: 20.fc43
URL: https://github.com/pypa/wheel
Summary: Built-package format for Python

Topics%20covered

Topics Covered

security advisory fedora critical code execution privilege escalation python-wheel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here