Back Linuxsecurity

Fedora 42 mingw-python-wheel Critical Privilege Escalation 2026

Linuxsecurity •LinuxSecurity Advisories • February 1, 2026

MinGW Windows Python wheel library. Update Information : Update to 0.46.3, fixes CVE-2026-24049.

MinGW Windows Python wheel library.

Update to 0.46.3, fixes CVE-2026-24049.

* Thu Jan 22 2026 Sandro Mani - 0.46.3-1 - Update to 0.46.3 * Thu Jan 22 2026 Sandro Mani - 0.46.2-1 - Update to 0.46.2 * Fri Jan 16 2026 Fedora Release Engineering - 0.46.1-3 - Rebuilt for * Thu Jul 24 2025 Fedora Release Engineering - 0.46.1-2 - Rebuilt for * Tue Apr 15 2025 Sandro Mani - 0.46.1-1 - Update to 0.46.1 * Fri Apr 4 2025 Sandro Mani - 0.46.0-1 - Update to 0.46.0

[ 1 ] Bug #2432096 - CVE-2026-24049 mingw-python-wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking [fedora-42] [ 2 ] Bug #2432106 - CVE-2026-24049 mingw-python-wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-78d626bfca' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 42 and 43 mingw-python-wheel Critical Privilege Escalation Vulnerability A critical privilege escalation vulnerability identified as CVE-2026-24049 affects the MinGW Windows Python wheel library in Fedora 42 and 43. The vulnerability is addressed in the update to version 0.46.3, released on January 22, 2026, by Sandro Mani. 2 sources 44

Extracted Entities

Fedora 42 mingw-python-wheel Critical Privilege Escalation 2026

The full story

Extracted Entities

Companies (1)

CVEs (1)

Platforms (1)