Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[staging-24.05] python311Packages.starlette: fix CVE-2024-47874 #350969

Merged

Conversation

mweinelt
Copy link
Member

Denial of service (DoS) via multipart/form-data

GHSA-f96h-pmfr-66vw

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

Add a 👍 reaction to pull requests you find important.

> Denial of service (DoS) via multipart/form-data

GHSA-f96h-pmfr-66vw
@ofborg ofborg bot requested a review from wd15 October 24, 2024 19:57
@mweinelt mweinelt merged commit b1a88d3 into NixOS:staging-24.05 Oct 25, 2024
31 of 32 checks passed
@mweinelt mweinelt deleted the 24.05/starlette-CVE-2024-47874 branch October 25, 2024 01:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant