Back Linuxsecurity

Fedora 43 python-python-multipart Security Advisory Update 2026

Linuxsecurity •LinuxSecurity Advisories • June 15, 2026

0.0.32 (2026-06-04) Speed up partial-boundary scanning for CR/LF-dense part data. 0.0.31 (2026-06-04) Speed up multipart header parsing and callback dispatch. Bound header field name size before validating. Validate Content-Length is non-negative in parse_form. Fixes security issues GHSA-v9pg-7xvm-68hf, GHSA-5rvq-cxj2-64vf, GHSA-6jv3-5f52-599m, and GHSA-vffw-93wf-4j4q. 0.0.30 (2026-05-31) Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator. Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2.

* Fri Jun 5 2026 Packit - 0.0.32-1 - Update to 0.0.32 upstream release - Resolves: rhbz#2484846 * Thu Jun 4 2026 Packit - 0.0.31-1 - Update to 0.0.31 upstream release - Resolves: rhbz#2484715 * Mon Jun 1 2026 Packit - 0.0.30-1 - Update to 0.0.30 upstream release - Resolves: rhbz#2483639

[ 1 ] Bug #2483639 - python-python-multipart-0.0.30 is available [ 2 ] Bug #2484715 - python-python-multipart-0.0.31 is available [ 3 ] Bug #2484846 - python-python-multipart-0.0.32 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2cfc16a621' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Security Updates for Fedora 44 and 43 Python Multipart Libraries On June 4, 2026, security updates were released for the python-python-multipart library in Fedora 44 and 43. These updates address multiple security vulnerabilities identified as GHSA-v9pg-7xvm-68hf, GHSA-5rvq-cxj2-64vf, GHSA-6jv3-5f52-599m, and GHSA-vffw-93wf-4j4q. The updates improve performance in parsing multipart headers and validating Content-Length in forms. Users of Fedora 44 and 43 are advised to upgrade to the latest versions (0.0.32, 0.0.31, and 0.0.30) to mitigate these vulnerabilities. The updates can be installed via the 'dnf' package manager. The vulnerabilities could potentially allow for exploitation if not patched, affecting applications relying on these libraries. 2 sources 58

Extracted Entities

Vulnerabilities (4)

GHSA-5rvq-cxj2-64vf GHSA-6jv3-5f52-599m GHSA-v9pg-7xvm-68hf GHSA-vffw-93wf-4j4q