Back Linuxsecurity

Fedora 43 mingw-python-wheel Important Privilege Escalation CVE-2026

Linuxsecurity •LinuxSecurity Advisories • February 1, 2026

MinGW Windows Python wheel library. Update Information : Update to 0.46.3, fixes CVE-2026-24049.

MinGW Windows Python wheel library.

Update to 0.46.3, fixes CVE-2026-24049.

* Thu Jan 22 2026 Sandro Mani - 0.46.3-1 - Update to 0.46.3 * Thu Jan 22 2026 Sandro Mani - 0.46.2-1 - Update to 0.46.2 * Fri Jan 16 2026 Fedora Release Engineering - 0.46.1-3 - Rebuilt for

[ 1 ] Bug #2432096 - CVE-2026-24049 mingw-python-wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking [fedora-42] [ 2 ] Bug #2432106 - CVE-2026-24049 mingw-python-wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3d31544140' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 42 and 43 mingw-python-wheel Critical Privilege Escalation Vulnerability A critical privilege escalation vulnerability identified as CVE-2026-24049 affects the MinGW Windows Python wheel library in Fedora 42 and 43. The vulnerability is addressed in the update to version 0.46.3, released on January 22, 2026, by Sandro Mani. 2 sources 44

Extracted Entities

CVEs (1)

CVE-2026-24049

Platforms (1)

Windows