High ELSA-2026-1939 1 CVE

Important: python3.12-wheel security update (Oracle Linux 9)

Published Apr 27, 2026 · Updated Apr 27, 2026

Ecosystem: Oracle Linux

Summary

[0.41.2-3.1]
- Security fix for CVE-2026-24049
Resolves: RHEL-143652

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	python3.12-wheel	0:0.41.2-3.el9_7.1
Oracle Linux · 9	python3.12-wheel-wheel	0:0.41.2-3.el9_7.1

Vulnerabilities 1

High 7.1

CVE-2026-24049 Public exploit

wheel Allows Arbitrary File Permission Modification via Path Traversal

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic b…

pypa wheel open-webui katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Jan 22, 2026