-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 02 Jul 2026 12:27:29 +0200
Source: starman
Binary: starman
Architecture: all
Version: 0.4018-0+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 starman    - high-performance preforking PSGI/Plack web server
Closes: 1135229
Changes:
 starman (0.4018-0+deb13u1) trixie; urgency=medium
 .
   [ gregor herrmann ]
   * Import upstream version 0.4018.
     - Fix HTTP request smuggling: Transfer-Encoding now takes precedence
       over Content-Length per RFC 7230 §3.3.3 (CVE-2026-40560)
     Closes: #1135229
Checksums-Sha1:
 bd77a2c1b57006258520750b3c288f636a8d58f8 7629 starman_0.4018-0+deb13u1_all-buildd.buildinfo
 c04b69f80d6ce944a592c6629e42ebc3058da54f 25276 starman_0.4018-0+deb13u1_all.deb
Checksums-Sha256:
 a811ec4e9373bee0fb8b483e0e2d58abe11c62783c1e0c1b36b72dbde19173be 7629 starman_0.4018-0+deb13u1_all-buildd.buildinfo
 52cb3a6252c224409687da17c914a274a277b7b76b975795dae5595c518714e3 25276 starman_0.4018-0+deb13u1_all.deb
Files:
 e2af1507997e6e753a4c7425ecbcfe51 7629 perl optional starman_0.4018-0+deb13u1_all-buildd.buildinfo
 329d0bc1844212be9e3aee9f8591219c 25276 perl optional starman_0.4018-0+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmpJuycACgkQmgPNRvTf
/zd/6Q/9FyLEGbzIKATqq13+QyC3MFnJpwYjsVHLYN1ZRm7mEKvGXcAKG9nFB/PF
BrM82Kylr1sADKqQx9HJp59NQK8Jdt/Dsfxi1J6IayN7wvpjn1iwfw7qs2mLlnxY
cG7AxR618L4J6CS75VRq8SHTWe1mnwKaxjUzgazqWmeKNDe0mWPgAmT7qEmTin42
JpyPJRcYoLlOSbULaBmhvhXp6EE6z0ny3DJSL4qrEr8Ta0aGedCouIFmqXyy7gzu
V1is3oV2qzrRTt290ldrLo5FiLYFK15z6KadXUIF2wrQ7IisnP9cXnncNO3bbhfJ
AQzhljV0weEIDkUVdIVDIUB3vCAxksIrr3Fctltzn6KaVuGhj73nQFKfrnI2fbKf
ZdfXwzhgfbmga4hEwar7QXokvq1W3bgru4lv6F8vC/GWesLimmfNs/W4MxS5WOXq
o3qxgtmuK0ZcEB5fnFF5qduK2sb1jcCM63xeYkXUmxSn2eeQM0STHtdSoBjoHFG5
Aauhfyqijmg3d1i4EBmNaSvxcm6OqSrQFkVALfp7Mly2c2dT5ibsI1OSN7NB1mq+
pL7I/dPZne+ivzBcPrtkFUTmgbR6Re6fabn9x4NWGT37P0h72G+0TY9xZ0ioXVbf
2gFqCFazIGVMWYcXjwfaSVHVMjaNLa6yx/Cj3QB3T2BqHIpJnp0=
=qMUH
-----END PGP SIGNATURE-----