-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6478-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 30, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : starlette CVE ID : CVE-2026-48817 CVE-2026-54282 CVE-2026-54283 Debian Bug : 1140631 1140632 Several vulnerabilities were discovered in starlette, a lightweight ASGI framework/toolkit, which could result in bypass of authorization checks or denial of service. For the stable distribution (trixie), these problems have been fixed in version 0.46.1-3+deb13u3. We recommend that you upgrade your starlette packages. For the detailed security status of starlette please refer to its security tracker page at: https://security-tracker.debian.org/tracker/starlette Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: [email protected] -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmqUf5hfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0TkDg//WFk1J1LeVPjk4OMOYjaIJcVDKqTBkdwGb86CcxUABGmyhIfc/fvfrbqI od/LPeB9j+BQ4ERpbInBZ4tdTzkhFGPrWi4qbc9RVg0CXLrSpn1kWG185G4XTgg7 srQEYRkvTi0zRvyXZY1g8lBtQ6d+CCLkgxHj3HDbiNgS3odcHlRmdf0JLghM4qUO Zyon8Bfl0+QJCpfbtoOCch2Z5PQ+7eQsNgm8VqUJmxb0wMyUWqJVxE/Ds75ZbE1/ eQNjIWbwmMLwpCg6gGCVyWWrKUXK4iQdLgb9NE97VHEejLvJhw0OS5a9XRbmi4JR 4JKO8PnY3uoh9DMmCM2ppck70V/jYFnxkc27Z9tjM5C348o3hRQYZbkL4wTqzQ94 TI6jeLBsvM2jKKawOWCdgq79sRlGLbYvhlxhLwoUa+NHcyjd+uc9wgcK6aSE21IC q17YMae4R1VP0I2dsJEca6+yEYsF5S68k98UH34zrMU1mP0cCO2mnpSTZbyUShf1 Vk1Eg4UoUE9CqxUFkXNawiJ6MZ/ajLJCfj0KqshsdlXZcAi1Zvs4mYvbwOSZTk4c ECH+Olc9RmO2P/9OiPeQm2hMpwqYedY5vjHZudkaJBBMj8812aMdOiuGD5ZTS1Fv etb6ahBWUG4IW6SXpIXFMNE79bpKRdBfl97rSyRENypCUi0pyA8= =lp7x -----END PGP SIGNATURE-----
