Moderate Patch Released for openSUSE python-Authlib Vulnerability CVE-2026-41479

A moderate patch has been released for the python-Authlib library to address CVE-2026-41479, which allows crafted authorization requests to cause unauthenticated open redirects. This vulnerability affects openSUSE Leap 15.6 and Python 3 Module 15-SP7. The CVE was published on June 22, 2026, and has a CVSS score of 5.4, indicating a medium threat level. Users are advised to update their systems using the recommended methods such as 'zypper patch' or YaST online_update. The patch is available for both openSUSE Leap 15.6 and the Python 3 Module 15-SP7. The vulnerability impacts systems that utilize the affected versions of python-Authlib, which is commonly used for authorization in web applications.

Key Points: • CVE-2026-41479 allows unauthenticated open redirects via crafted requests. • The vulnerability affects openSUSE Leap 15.6 and Python 3 Module 15-SP7. • Users should apply the patch using 'zypper patch' or YaST online_update.