gpp_maybe Security update for python-starlette

SUSE-SLES-16.0-1066

This update for python-starlette fixes the following issues - CVE-2026-48817: arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` (bsc#1268389). - CVE-2026-54282: request path that lacks a leading forward slash can lead to request.url.hostname manipulation (bsc#1268520). - CVE-2026-54283: urlencoded request body with an oversized data can lead to a denial of service (bsc#1268517).

• Release Date
  Jun 24 2026
• References
  Bugzilla: 1268389, 1268517, 1268520
  CVEs: CVE-2026-48817, CVE-2026-54282, CVE-2026-54283
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  python313-starlette
  Lightweight ASGI framework/toolkit

  0.41.3-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  python313-starlette
  Lightweight ASGI framework/toolkit

  0.41.3-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  python313-starlette
  Lightweight ASGI framework/toolkit

  0.41.3-160000.4.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  python313-starlette
  Lightweight ASGI framework/toolkit

  0.41.3-160000.4.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  python313-starlette
  Lightweight ASGI framework/toolkit

  0.41.3-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  python313-starlette
  Lightweight ASGI framework/toolkit

  0.41.3-160000.4.1 lock rpm