Alerts This Week
Warning Icon 1 1,365
Alerts This Week
Warning Icon 1 1,365

openSUSE Python-Starlette Important Denial of Service Issues 2026-21053-1

opensuse
Calendar Grey June 30, 2026
Dist Opensuse Esm H88
Critical update for openSUSE fixes important security issues in python-starlette, enhancing system integrity and stability.
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.

Description

This update for python-starlette fixes the following issues

- CVE-2026-48817: arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` (bsc#1268389).

- CVE-2026-54282: request path that lacks a leading forward slash can lead to request.url.hostname manipulation

(bsc#1268520).

- CVE-2026-54283: urlencoded request body with an oversized data can lead to a denial of service (bsc#1268517).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1066=1

Topics%20covered

Topics Covered

security advisory denial of service important OpenSUSE http method python-starlette

Patch

Package List

- openSUSE Leap 16.0:

python313-starlette-0.41.3-160000.4.1

References

* bsc#1268389

* bsc#1268517

* bsc#1268520

References:

* https://www.suse.com/security/cve/CVE-2026-48817.html

* https://www.suse.com/security/cve/CVE-2026-54282.html

* https://www.suse.com/security/cve/CVE-2026-54283.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:21053-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Topics%20covered

Topics Covered

security advisory denial of service important OpenSUSE http method python-starlette

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here