gpp_maybe Security update for python-python-multipart

SUSE-SLES-16.0-1088

This update for python-python-multipart fixes the following issues - CVE-2026-53537: multipart/form-data with extended parameters can lead to file or parameter smuggling (bsc#1268506). - CVE-2026-53538: urlencoded requests containing semicolons can lead to form field smuggling (bsc#1268496). - CVE-2026-53539: small crafted body can cause a denial of service (bsc#1268500). - CVE-2026-53540: crafted request buffers can lead to degrading availability (bsc#1268488).

• Release Date
  Jun 26 2026
• References
  Bugzilla: 1268488, 1268496, 1268500, 1268506
  CVEs: CVE-2026-53537, CVE-2026-53538, CVE-2026-53539, CVE-2026-53540
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  python313-python-multipart
  Python streaming multipart parser

  0.0.20-160000.5.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  python313-python-multipart
  Python streaming multipart parser

  0.0.20-160000.5.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  python313-python-multipart
  Python streaming multipart parser

  0.0.20-160000.5.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  python313-python-multipart
  Python streaming multipart parser

  0.0.20-160000.5.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  python313-python-multipart
  Python streaming multipart parser

  0.0.20-160000.5.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  python313-python-multipart
  Python streaming multipart parser

  0.0.20-160000.5.1 lock rpm