Debian Patches
Status for starlette/0.26.1-1+deb12u2
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| CVE-2023-29159.patch | Merge pull request from GHSA-v5gw-mw7f-84px | Amin Alaee <mohammadamin.alaee@gmail.com> | no | upstream, https://github.com/Kludex/starlette/commit/1797de464124b090f10cf570441e8292936d63e3 | 2023-05-16 | |
| CVE-2024-47874.patch | Merge commit from fork Backported by: Matheus Polkorny <mpolkorny@gmail.com> Changes: - Refresh Patch context - Update hunks' offsets - Add missing ASGI typing imports required by the upstream test - Drop TestClientFactory type annotations not present in bookworm |
Marcelo Trylesinski <marcelotryle@gmail.com> | no | upstream, https://github.com/Kludex/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733 | 2024-10-15 | |
| CVE-2025-54121.patch | Make UploadFile check for future rollover (#2962) Backported by: Matheus Polkorny <mpolkorny@gmail.com> Changes: - Refresh Patch context - Update hunks' offsets - Add spool_max_size attribute required by the upstream tests - Drop TestClientFactory type annotations not present in bookworm |
Michael Honaker <37811263+HonakerM@users.noreply.github.com> | no | upstream, https://github.com/Kludex/starlette/commit/9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1 | 2025-07-21 | |
| CVE-2026-48710.patch | Ignore malformed `Host` header when constructing `request.url` (#3279) Backported by: Matheus Polkorny <mpolkorny@gmail.com> Changes: - Refresh Patch context - Update hunks' offsets |
Marcelo Trylesinski <marcelotryle@gmail.com> | no | upstream, https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6 | 2026-05-21 | |
| CVE-2026-48817.patch | Only dispatch standard HTTP verbs in `HTTPEndpoint` (#3286) | Marcelo Trylesinski <marcelotryle@gmail.com> | yes | upstream | https://github.com/Kludex/starlette/commit/e3f972225adb1d84b80dba132f520cc24cb84229 | 2026-05-23 |
| CVE-2026-54282.patch | Build `request.url` from structured components (#3326) | Marcelo Trylesinski <marcelotryle@gmail.com> | yes | upstream | https://github.com/Kludex/starlette/commit/167b5850e809f38b27fbfed62d58bf6442855975 | 2026-06-11 |
| Add-max_part_size-parameter-to-MultiPartParser.patch | Add `max_part_size` parameter to `MultiPartParser` (#2815) | Irfanuddin Shafi Ahmed <irfanudeen08@gmail.com> | no | https://github.com/Kludex/starlette/commit/cef7834e2b9eec9ec7bd1e00f9dacf7c3048c65e.patch | 2024-12-28 | |
| CVE-2026-54283.patch | Enforce `max_fields` and `max_part_size` in `FormParser` (#3329) | Marcelo Trylesinski <marcelotryle@gmail.com> | yes | upstream | https://github.com/Kludex/starlette/commit/dba1c4babc4f99ad2622bb913d87045775dda735 | 2026-06-12 |
All known versions for source package 'starlette'
- 1.6.0-1 (sid, forky)
- 0.46.1-3+deb13u3 (trixie-security, trixie)
- 0.26.1-1+deb12u2 (bookworm-security)
- 0.26.1-1+deb12u1 (bookworm)