[SECURITY] Fedora 43 Update: mingw-python-wheel-0.46.3-1.fc43

MinGW Windows Python wheel library...

[SECURITY] Fedora 43 Update: python-wheel-0.45.1-20.fc43

This is a command line tool for manipulating Python wheel files, as defined in PEP 427. It contains the following functionality: - Convert .egg archives into .whl. - Unpack wheel archives. - Repack wheel archives. - Add or remove tags in existing wheel archives...

Fedora 43 : python-wheel (2026-ce64e86fd8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ce64e86fd8 advisory. - Security fix for CVE-2026-24049 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 43 : mingw-python-wheel (2026-3d31544140)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3d31544140 advisory. Update to 0.46.3, fixes CVE-2026-24049. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 42 : mingw-python-wheel (2026-78d626bfca)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-78d626bfca advisory. Update to 0.46.3, fixes CVE-2026-24049. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 42 : python-wheel (2026-28a177c207)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-28a177c207 advisory. - Security fix for CVE-2026-24049 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Path Traversal

wheel is vulnerable to Path Traversal.The vulnerability is due to unsafe handling of file permissions during wheel extraction, where the unpack function trusts archive header filenames when applying chmod, allowing a malicious wheel to modify permissions of arbitrary system files after path...

SUSE CVE-2026-24049

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the...

FreeBSD : wheel -- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (65439aa0-f77d-11f0-9821-b0416f0c4c67)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 65439aa0-f77d-11f0-9821-b0416f0c4c67 advisory. https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx reports: wheel is a command line...

a-mailx (=0.1.0), a2grunnerp (>=0.1.0 <=0.1.8) +878 more potentially affected by CVE-2026-24049 via wheel (>=0.40.0 <=0.46.1)

wheel PYPI version =0.40.0, =0.1.0, =0.4.24, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =1.0.0, =1.1.0, =1.1.0, =0.0.6, =0.1.0, =1.2.6, =1.2.7 and more Source cves: CVE-2026-24049 Source advisory: OSV:GHSA-8RRH-RW8J-W5FX...

GHSA-8RRH-RW8J-W5FX Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

Summary - Vulnerability Type: Path Traversal CWE-22 leading to Arbitrary File Permission Modification. - Root Cause Component: wheel.cli.unpack.unpack function. - Affected Packages: 1. wheel Upstream source 2. setuptools Downstream, vendors wheel - Severity: High Allows modifying system file...

Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

Summary - Vulnerability Type: Path Traversal CWE-22 leading to Arbitrary File Permission Modification. - Root Cause Component: wheel.cli.unpack.unpack function. - Affected Packages: 1. wheel Upstream source 2. setuptools Downstream, vendors wheel - Severity: High Allows modifying system file...

CVE-2026-24049

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the...

AZL-75192 CVE-2026-24049 affecting package python-virtualenv 20.26.6-2

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the...

AZL-77826 CVE-2026-24049 affecting package python-virtualenv 20.36.1-1

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the...

ALPINE-CVE-2026-24049

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the...

AZL-75195 CVE-2026-24049 affecting package python-wheel 0.43.0-1

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the...

CVE-2026-24049

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the...

UBUNTU-CVE-2026-24049

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the...

a-mailx (=0.1.0), a2grunnerp (>=0.1.0 <=0.1.8) +1589 more potentially affected by CVE-2026-24049 via wheel (>=0.24.0 <=0.46.1)

wheel PYPI version =0.24.0, =0.1.0, =0.1.0, =0.4.24, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =0.0.3, =1.0.0, =1.1.0, =1.1.0, =1.2.5 and more Source cves: CVE-2026-24049 Source advisory: SNYK:PYTHON-WHEEL-15053866...