openSUSE: 2026:21066-1 : python-python

- CVE-2026-53537: multipart/form-data with extended parameters can lead to file or parameter smuggling (bsc#1268506).

- CVE-2026-53538: urlencoded requests containing semicolons can lead to form field smuggling (bsc#1268496).

- CVE-2026-53539: small crafted body can cause a denial of service (bsc#1268500).

- CVE-2026-53540: crafted request buffers can lead to degrading availability (bsc#1268488).

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch openSUSE-Leap-16.0-1088=1

- openSUSE Leap 16.0:

python313-python-multipart-0.0.20-160000.5.1

*

*

*

*

Get the latest Linux and open source security news straight to your inbox.