Page MenuHomeVyOS Platform
Create Task
Maniphest T6783

Update vyos-http-api-tools for package Starlette security advisory
In progress, HighPublicBUG
Actions

Description

A security advisory for the dependency 'Starlette' requires a regeneration of requirements.txt and a package rebuild.
https://github.com/advisories/GHSA-f96h-pmfr-66vw

Details

Difficulty level
Easy (less than an hour)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Security vulnerability

Event Timeline

jestabro created this task.Tue, Oct 15, 11:22 PM
jestabro changed the task status from Open to In progress.
jestabro triaged this task as High priority.
jestabro created this object in space S1 VyOS Public.
jestabro added a comment.Tue, Oct 15, 11:50 PM

PR for current/Circinus/Sagitta:
https://github.com/vyos/vyos-http-api-tools/pull/19

jestabro renamed this task from Update vyos-http-api-tools for packages Starlette security advisory to Update vyos-http-api-tools for package Starlette security advisory.Tue, Oct 15, 11:57 PM
vyosbot added a project: Restricted Project.Wed, Oct 16, 6:08 AM