More information about this security flaw is available in the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=2318801 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Wow, that was fast! Starlette 0.40.0 was released ten hours ago. This explains why FastAPI adjusted its version pins to allow Starlette 0.40 a few days ago even though 0.39 was the latest release – I thought that was odd, as usually FastAPI lags a little bit in adopting new releases. It should be possible to update Starlette to 0.40 in all Fedora releases that now have Starlette 0.39 – F42/Rawhide, F41, and F40 – although a couple of dependent patches will need to be patched to allow the new dependency version. It’s likely not possible to confidently backport the fix to Fedora 39, which fortunately is almost at end of life.
FEDORA-2024-466c574575 (python-openapi-core-0.19.4-4.fc42, python-platformio-6.1.16-2.fc42, and 1 more) has been submitted as an update to Fedora 42. https://bodhi.fedoraproject.org/updates/FEDORA-2024-466c574575
FEDORA-2024-466c574575 (python-openapi-core-0.19.4-4.fc42, python-platformio-6.1.16-2.fc42, and 1 more) has been pushed to the Fedora 42 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2024-05dedb1a53 (python-fastapi-0.115.2-1.fc41, python-openapi-core-0.19.4-4.fc41, and 2 more) has been submitted as an update to Fedora 41. https://bodhi.fedoraproject.org/updates/FEDORA-2024-05dedb1a53
FEDORA-2024-f1615b58e6 (python-fastapi-0.111.1-7.fc40, python-openapi-core-0.19.4-3.fc40, and 2 more) has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2024-f1615b58e6
FEDORA-2024-f1615b58e6 has been pushed to the Fedora 40 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-f1615b58e6` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-f1615b58e6 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2024-05dedb1a53 has been pushed to the Fedora 41 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-05dedb1a53` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-05dedb1a53 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2024-f1615b58e6 (python-fastapi-0.111.1-7.fc40, python-openapi-core-0.19.4-3.fc40, and 2 more) has been pushed to the Fedora 40 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2024-05dedb1a53 (python-fastapi-0.115.2-1.fc41, python-openapi-core-0.19.4-4.fc41, and 2 more) has been pushed to the Fedora 41 stable repository. If problem still persists, please make note of it in this bug report.