Back Linuxsecurity

Spyder 43 flask-bundle Major Security Patch 2026

Linuxsecurity •LinuxSecurity Advisories • February 1, 2026

This is a command line tool for manipulating Python wheel files, as defined in PEP 427. It contains the following functionality: - Convert .egg archives into .whl. - Unpack wheel archives. - Repack wheel archives. - Add or remove tags in existing wheel archives. Update Information : Security fix for CVE-2026-24049

This is a command line tool for manipulating Python wheel files,

as defined in PEP 427. It contains the following functionality:

- Convert .egg archives into .whl.

- Unpack wheel archives.

- Repack wheel archives.

- Add or remove tags in existing wheel archives.

Security fix for CVE-2026-24049

* Fri Jan 23 2026 Miro Hron\u010dok - 1:0.45.1-5 - Security fix for CVE-2026-24049

[ 1 ] Bug #2432099 - CVE-2026-24049 python-wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking [fedora-42]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-28a177c207' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Security Vulnerability in Python Wheel Manipulation Tools Addressed A major security vulnerability identified as CVE-2026-24049 affects command line tools for manipulating Python wheel files. The vulnerability impacts tools that convert, unpack, and repack wheel archives, which are essential for Python package management. Security patches have been released to address this issue. 2 sources 18

Extracted Entities

CVEs (1)

CVE-2026-24049