-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 25 Jul 2026 00:12:35 -0300
Source: starlette
Binary: python3-starlette
Architecture: all
Version: 0.46.1-3+deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Matheus Polkorny <mpolkorny@gmail.com>
Description:
 python3-starlette - ASGI library ideal for building high performance asyncio services
Closes: 1140631 1140632
Changes:
 starlette (0.46.1-3+deb13u3) trixie-security; urgency=medium
 .
   * Team upload.
   * d/patches: (Closes: #1140631, #1140632)
     - CVE-2026-48817: Import and backport upstream patch
       (Prevent unintended HTTPEndpoint method dispatch)
     - CVE-2026-54282: Import upstream patch
       (Validate request paths to prevent host confusion)
     - CVE-2026-54283: Import and backport upstream patch
       (Enforce max_fields and max_part_size limits)
Checksums-Sha1:
 37a647dedcea7feca55704e91337bf100d2f085b 51668 python3-starlette_0.46.1-3+deb13u3_all.deb
 297afa4b736772a36057800859f5aa2984d4d9f9 7998 starlette_0.46.1-3+deb13u3_all-buildd.buildinfo
Checksums-Sha256:
 e27e915c942c868a6ca2f4fcf35f0eed7fab9a1d55bb81a17de6fef49b7c1bca 51668 python3-starlette_0.46.1-3+deb13u3_all.deb
 a57f0819d9fa746d424d811419aafe3f6fcd671a749825d3cc4cd7e4a831f9aa 7998 starlette_0.46.1-3+deb13u3_all-buildd.buildinfo
Files:
 918824ba3a6cd8819c1482e259dc47c8 51668 python optional python3-starlette_0.46.1-3+deb13u3_all.deb
 e8f1d19f3f44591457464537a045139b 7998 python optional starlette_0.46.1-3+deb13u3_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=hWr6
-----END PGP SIGNATURE-----