Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10 enterprise_linux:10.1 | python-wheel | 1:0.41.2-5.el10_1.1 |
| Red Hat · RHEL 10 enterprise_linux:10.1 | python3-wheel | 1:0.41.2-5.el10_1.1 |
| Red Hat · RHEL 10 enterprise_linux:10.1 | python3-wheel-wheel | 1:0.41.2-5.el10_1.1 |
Vulnerabilities 1
-
High 7.1CVE-2026-24049 Public exploit
wheel Allows Arbitrary File Permission Modification via Path Traversal
wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic b…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2431959
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1902.json
-
report
https://access.redhat.com/security/cve/CVE-2026-24049
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-24049
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24049
-
article
https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef
-
article
https://github.com/pypa/wheel/releases/tag/0.46.2
-
article
https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx