Stay Secure with the Latest Linux Advisories

security advisoryfedorapython

Fedora 44 python-starlette Security Fix for CVE-2026-48710

Backport fix for CVE-2026-48710. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-3bce8d3f11 2026-06-05 04:25:00.359057+00:00 -------------------------------------------------------------------------------- Name : python-starlette Product : Fedora 44 Version : 0.52.1 Release : 2.fc44 URL : https://www.starlette.io/ Summary : The little ASGI library that shines Description : Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: • A lightweight, low-complexity HTTP web framework. • WebSocket support. • In-process background tasks. • Startup and shutdown events. • Test client built on requests. • CORS, GZip, Static Files, Streaming responses. • Session and Cookie support. • 100% test coverage. • 100% type annotated codebase. • Few hard dependencies. • Compatible with asyncio and trio backends. • Great overall performance against independent benchmarks. -------------------------------------------------------------------------------- Update Information: Backport fix for CVE-2026-48710 -------------------------------------------------------------------------------- ChangeLog: * Thu May 28 2026 Paul Wouters - 0.52.1-2 - Backport fix for CVE-2026-48710 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2481742 - CVE-2026-48710 starlette: Starlette: Security restriction bypass via malformed HTTP Host header https://bugzilla.redhat.com/show_bug.cgi?id=2481742 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3bce8d3f11' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fix for CVE-2026-48710 in Fedora 44's python-starlette ensures enhanced security and stability.. Fedora 44, python application, security update, CVE-2026-48710. . Severity: Critical. LinuxSecurity.com Team

Jun 05, 2026 •Critical Fedora