Debian Patches
Status for starlette/0.46.1-3+deb13u3
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| json-format.patch | Fix test failures with older dependencies in testing. | Bas Couwenberg <sebastic@debian.org> | no | debian | 2025-07-28 | |
| 0002-fix-cve-2024-28849-async-write.patch | fix-cve-2024-28849-async-write Fix CVE-2025-54121: Avoid event loop blocking during multipart file uploads by writing to disk using thread pool to prevent synchronous blocking when SpooledTemporaryFile rolls over to disk. (Closes: #1109805) |
Yang Wang <yang.wang@windriver.com> | no | 2025-07-28 | ||
| CVE-2025-62727.patch | Merge commit from fork No changes in the backport. |
Marcelo Trylesinski <marcelotryle@gmail.com> | no | upstream, https://github.com/Kludex/starlette/commit/4ea6e22b489ec388d6004cfbca52dd5b147127c5 | 2025-10-28 | |
| CVE-2026-48710.patch | Ignore malformed `Host` header when constructing `request.url` (#3279) | Marcelo Trylesinski <marcelotryle@gmail.com> | no | 2026-05-21 | ||
| CVE-2026-48817.patch | Only dispatch standard HTTP verbs in `HTTPEndpoint` (#3286) | Marcelo Trylesinski <marcelotryle@gmail.com> | no | 2026-05-23 | ||
| CVE-2026-54282.patch | Build `request.url` from structured components (#3326) | Marcelo Trylesinski <marcelotryle@gmail.com> | no | 2026-06-11 | ||
| CVE-2026-54283.patch | Enforce `max_fields` and `max_part_size` in `FormParser` (#3329) | Marcelo Trylesinski <marcelotryle@gmail.com> | no | 2026-06-12 |
All known versions for source package 'starlette'
- 1.6.0-1 (sid, forky)
- 0.46.1-3+deb13u3 (trixie-security, trixie)
- 0.26.1-1+deb12u2 (bookworm-security)
- 0.26.1-1+deb12u1 (bookworm)