Fedora alert FEDORA-2026-3bce8d3f11 (python-starlette)

From:
             
 
updates--- via package-announce <package-announce@lists.fedoraproject.org>
To:
             
 
package-announce@lists.fedoraproject.org
Subject:
             
 
[SECURITY] Fedora 44 Update: python-starlette-0.52.1-2.fc44
Date:
             
 
Fri, 05 Jun 2026 04:27:16 +0000
Message-ID:
             
 
<20260605042716.CAAFB8552D@bastion01.rdu3.fedoraproject.org>
Archive-link:
             
 
Article
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-3bce8d3f11
2026-06-05 04:25:00.359057+00:00
--------------------------------------------------------------------------------

Name        : python-starlette
Product     : Fedora 44
Version     : 0.52.1
Release     : 2.fc44
URL         : https://www.starlette.io/
Summary     : The little ASGI library that shines
Description :
Starlette is a lightweight ASGI framework/toolkit, which is ideal for building
async web services in Python.

It is production-ready, and gives you the following:

  • A lightweight, low-complexity HTTP web framework.
  • WebSocket support.
  • In-process background tasks.
  • Startup and shutdown events.
  • Test client built on requests.
  • CORS, GZip, Static Files, Streaming responses.
  • Session and Cookie support.
  • 100% test coverage.
  • 100% type annotated codebase.
  • Few hard dependencies.
  • Compatible with asyncio and trio backends.
  • Great overall performance against independent benchmarks.

--------------------------------------------------------------------------------
Update Information:

Backport fix for CVE-2026-48710
--------------------------------------------------------------------------------
ChangeLog:

* Thu May 28 2026 Paul Wouters <paul.wouters@aiven.io> - 0.52.1-2
- Backport fix for CVE-2026-48710
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2481742 - CVE-2026-48710 starlette: Starlette: Security restriction bypass via
malformed HTTP Host header
        https://bugzilla.redhat.com/show_bug.cgi?id=2481742
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-3bce8d3f11' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgr...

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------



Attachment: None (type=text/plain)
-- 
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond...
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/package-ann...
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new