SUSE openSUSE Moderate Patch for python-Authlib CVE-2026

Back Linuxsecurity

SUSE openSUSE Moderate Patch for python-Authlib CVE-2026

Linuxsecurity •LinuxSecurity Advisories • September 10, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

## This update for python-Authlib fixes the following issue: * CVE-2026-41479: crafted authorization requests with unsupported response_types can cause unauthenticated open redirects (bsc#1275231). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4111=1 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4111=1 ## Package List: * openSUSE Leap 15.6 (noarch) * python311-Authlib-1.3.1-150600.3.30.1 * Python 3 Module 15-SP7 (noarch) * python311-Authlib-1.3.1-150600.3.30.1

## This update for python-Authlib fixes the following issue: * CVE-2026-41479: crafted authorization requests with unsupported response_types can cause unauthenticated open redirects (bsc#1275231). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4111=1 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4111=1 ## Package List: * openSUSE Leap 15.6 (noarch) * python311-Authlib-1.3.1-150600.3.30.1 * Python 3 Module 15-SP7 (noarch) * python311-Authlib-1.3.1-150600.3.30.1

* CVE-2026-41479 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

* CVE-2026-41479 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

* Python 3 Module 15-SP7

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves one vulnerability can now be installed.

*

*

Announcement ID: SUSE-SU-2026:4111-1 Release Date: 2026-09-09T16:16:39Z Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Moderate Patch Released for openSUSE python-Authlib Vulnerability CVE-2026-41479 A moderate patch has been released for the python-Authlib library to address CVE-2026-41479, which allows crafted authorization requests to cause unauthenticated open redirects. This vulnerability affects openSUSE Leap 15.6 and Python 3 Module 15-SP7. The CVE was published on June 22, 2026, and has a CVSS score of 5.4, indicating a medium threat level. Users are advised to update their systems using the recommended methods such as 'zypper patch' or YaST online_update. The patch is available for both openSUSE Leap 15.6 and the Python 3 Module 15-SP7. The vulnerability impacts systems that utilize the affected versions of python-Authlib, which is commonly used for authorization in web applications. 3 sources 46

Extracted Entities

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Cwe-601 - Open Redirect

Platforms (4)

Linux SUSE Linux Enterprise Desktop SUSE Linux Enterprise Server SUSE Linux Enterprise Server For SAP Applications