Page MenuHomeVyOS Platform
Create Task
Maniphest T6783

Update vyos-http-api-tools for package Starlette security advisory
Closed, ResolvedPublicBUG
Actions

Description

A security advisory for the dependency 'Starlette' requires a regeneration of requirements.txt and a package rebuild.
https://github.com/advisories/GHSA-f96h-pmfr-66vw

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Security vulnerability

Event Timeline

jestabro created this task.Oct 15 2024, 11:22 PM
jestabro changed the task status from Open to In progress.
jestabro triaged this task as High priority.
jestabro created this object in space S1 VyOS Public.
jestabro added a comment.Oct 15 2024, 11:50 PM

PR for current/Circinus/Sagitta:
https://github.com/vyos/vyos-http-api-tools/pull/19

jestabro renamed this task from Update vyos-http-api-tools for packages Starlette security advisory to Update vyos-http-api-tools for package Starlette security advisory.Oct 15 2024, 11:57 PM
vyosbot added a project: Bugs.Oct 16 2024, 6:08 AM
pasik subscribed.Oct 16 2024, 11:55 AM
jestabro moved this task from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.Oct 22 2024, 3:47 PM
jestabro moved this task from Open to Finished on the VyOS 1.5 Circinus board.
jestabro moved this task from Need Triage to Completed on the VyOS Rolling board.
syncer added a subscriber: Global Notifications.Nov 1 2024, 9:16 PM
jestabro added a comment.Nov 15 2024, 8:29 PM

The only piece remaining here is a backport for Equuleus.

jestabro closed this task as Resolved.May 4 2025, 8:02 PM
jestabro removed a project: VyOS 1.3 Equuleus (1.3.9).