Back Linuxsecurity

Fedora 45 Python Quart Trio Memory Issues Vulnerability 2026

Linuxsecurity •LinuxSecurity Advisories • September 29, 2026

Share: View original

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

Quart-Trio is an extension for Quart to support the Trio event loop. This is an

alternative to using the asyncio event loop present in the Python standard

library and supported by default in Quart.

Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high severity by upstream, GHSA-8988-9cw3-xx77) HTTPResponse.stream() and read_chunked() could buffer a chunk-size line of unbounded length in memory. (Rated high severity by upstream, GHSA- vxq7-64xx-v4gw) Chunked Deflate streaming could enter an infinite loop. (Rated medium severity by upstream, GHSA-gh4c-6fx4-qh6g)

* Sun Sep 13 2026 Benjamin A. Beasley - 0.13.0-1 - Update to 0.13.0 upstream release - Resolves: rhbz#2532601

[ 1 ] Bug #2534200 - python-urllib3-2.8.0 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9a652403b1' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Flaw in Python urllib3 Exploited CISA has confirmed the exploitation of a critical vulnerability in the Python urllib3 library, affecting multiple Fedora versions. The vulnerability allows the TLS configuration for HTTPS proxies to be ignored or overridden, posing significant risks to data security. Additionally, two other issues could lead to unbounded memory buffering and infinite loops during streaming. The affected versions include python-urllib3 2.8.0, which has been updated to address these vulnerabilities. Users are urged to upgrade their systems immediately to mitigate risks. The vulnerabilities are rated high severity by upstream sources, with CVE identifiers GHSA-8988-9cw3-xx77, GHSA-vxq7-64xx-v4gw, and GHSA-gh4c-6fx4-qh6g. The updates are available via the dnf package manager. This incident highlights the urgency for system administrators to apply the patches to prevent potential exploitation. 5 sources 73

Fedora 45 Python Quart Trio Memory Issues Vulnerability 2026

The full story

Extracted Entities

Companies (1)

Platforms (1)