| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: perl-Starman | Distribution: openSUSE Tumbleweed |
| Version: 0.4019 | Vendor: openSUSE |
| Release: 1.1 | Build date: Mon Oct 26 11:48:16 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 82990 | Source RPM: perl-Starman-0.4019-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://metacpan.org/release/Starman | |
| Summary: High-performance preforking PSGI/Plack web server | |
Starman is a PSGI perl web server that has unique features such as: * High Performance Uses the fast XS/C HTTP header parser * Preforking Spawns workers preforked like most high performance UNIX servers do. Starman also reaps dead children and automatically restarts the worker pool. * Signals Supports 'HUP' for graceful worker restarts, and 'TTIN'/'TTOU' to dynamically increase or decrease the number of worker processes, as well as 'QUIT' to gracefully shutdown the worker processes. * Superdaemon aware Supports Server::Starter for hot deploy and graceful restarts. * Multiple interfaces and UNIX Domain Socket support Able to listen on multiple interfaces including UNIX sockets. * Small memory footprint Preloading the applications with '--preload-app' command line option enables copy-on-write friendly memory management. Also, the minimum memory usage Starman requires for the master process is 7MB and children (workers) is less than 3.0MB. * PSGI compatible Can run any PSGI applications and frameworks * HTTP/1.1 support Supports chunked requests and responses, keep-alive and pipeline requests. * UNIX only This server does not support Win32.
Artistic-1.0 OR GPL-1.0-or-later
* Sat Oct 24 2026 Tina Müller <timueller+perl@suse.de>
- updated to 0.4019
see /usr/share/doc/packages/perl-Starman/Changes
0.4019 2026-10-24 02:02:21 PDT
[SECURITY]
- Stream chunked request bodies to the temporary buffer instead of
holding whole chunks in memory (CVE-2026-115824) bsc#1287697
- Parse chunk-size lines in linear time with a 4 KiB length limit and
strict syntax; malformed lines get 400 (CVE-2026-115822) bsc#1287695
- Do not send a response body for HEAD requests or 1xx, 204 and 304
responses, on both the array and streaming paths (CVE-2026-115823) bsc#1287696
- Limit how long a request body may take to arrive: --read-timeout
(default 5 seconds) now also applies to each wait for more of the
body, and the new --body-timeout option limits the total time
(default 300 seconds; raise it or set it to 0 for slower uploads).
Expiry gets 408 (CVE-2026-115817) bsc#1287694
- Reject Transfer-Encoding other than "chunked" (400/501) and close
the connection after a request with both Transfer-Encoding and
Content-Length. Completes the fix for CVE-2026-40560 bsc#1263364
- Reject malformed, negative and conflicting Content-Length headers
with 400
- Reject malformed header field names: whitespace before the colon,
obs-fold, and Content-Length/Transfer-Encoding spelled with "_"
- Read request bodies with exact framing: keep the bytes after a body
for the next pipelined request, consume chunked trailers (up to
16 KiB), and reject bodies cut short by EOF with 400 instead of
dispatching a partial body
- Parse each request header exactly once and skip empty lines before
the request line (a request could be dispatched twice with the
pure-Perl HTTP::Parser::XS backend)
- Respond with 500 instead of dispatching a truncated body when the
request body cannot be stored (e.g. disk full)
- Do not send Content-Length or Transfer-Encoding in 1xx and 204
responses
- Limit request headers to 128 KiB (431)
[BEHAVIOUR CHANGES]
- Requests with Transfer-Encoding in HTTP/1.0, or with obs-fold header
lines, now get 400
- Pipelined requests of any method are served (previously anything
but GET/HEAD after a request was silently dropped)
- A chunked body must end with the empty line after the last chunk
(RFC 9112); "0\r\n" alone no longer completes the request. Clients
using HTTP::Tiny older than 0.064 (bundled with perl 5.24 and
older) send chunked bodies that way and now get 408
* Tue Apr 28 2026 Tina Müller <timueller+perl@suse.de>
- updated to 0.4018
see /usr/share/doc/packages/perl-Starman/Changes
0.4018 2026-04-27 12:29:41 PDT
- Fix HTTP request smuggling: Transfer-Encoding now takes precedence
over Content-Length per RFC 7230 §3.3.3 (CVE-2026-40560, bsc#1263364)
* Thu Sep 14 2023 Tina Müller <timueller+perl@suse.de>
- updated to 0.4017
see /usr/share/doc/packages/perl-Starman/Changes
0.4017 2023-09-13 13:27:02 PDT
- Handle EINTR when doing sysread calls (Rob Mueller) #148
- Requires perl 5.14
* Wed Sep 14 2022 Tina Müller <timueller+perl@suse.de>
- updated to 0.4016
see /usr/share/doc/packages/perl-Starman/Changes
0.4016 2022-09-13 10:11:34 PDT
- Add psgix.informational callback #146
* Tue May 21 2019 Stephan Kulow <coolo@suse.com>
- updated to 0.4015
see /usr/share/doc/packages/perl-Starman/Changes
0.4015 2019-05-20 18:43:46 PDT
- Fixed a bug incorrectly handling content body of '0' (olsonanl) #133
* Sun Jun 07 2015 coolo@suse.com
- updated to 0.4014
see /usr/share/doc/packages/perl-Starman/Changes
0.4014 2015-06-03 12:01:00 PDT
- Treat ECONNRESET like EPIPE (i.e. ignore), not as a fatal error #114 (Tim Bunce)
* Fri May 15 2015 coolo@suse.com
- updated to 0.4013
see /usr/share/doc/packages/perl-Starman/Changes
0.4013 2015-05-14 15:01:20 PDT
- Fixed some bad git merges.
0.4012 2015-05-14 14:59:48 PDT
- Add --net_server-* options to pass directly to Net::Server backend (#109)
- Updated documentation
* Mon Apr 13 2015 coolo@suse.com
- updated to 0.4011
see /usr/share/doc/packages/perl-Starman/Changes
0.4011 2014-11-11 08:07:43 PST
- Move the app dispatch into a method #107
0.4010 2014-08-22 09:37:22 PDT
- Support --read-timeout #103 (slobo)
- Handle Expect header case insensitively #101 (oschwald)
* Fri May 23 2014 ncutler@suse.com
- initial package 0.4009
* created by cpanspec 1.78.07
- took over
- checked License
/usr/bin/starman /usr/lib/perl5/vendor_perl/5.44.0/HTTP /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Server /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Server/PSGI /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Server/PSGI/Net /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Server/PSGI/Net/Server /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Server/PSGI/Net/Server/PreFork.pm /usr/lib/perl5/vendor_perl/5.44.0/Plack /usr/lib/perl5/vendor_perl/5.44.0/Plack/Handler /usr/lib/perl5/vendor_perl/5.44.0/Plack/Handler/Starman.pm /usr/lib/perl5/vendor_perl/5.44.0/Starman /usr/lib/perl5/vendor_perl/5.44.0/Starman.pm /usr/lib/perl5/vendor_perl/5.44.0/Starman/Server.pm /usr/share/doc/packages/perl-Starman /usr/share/doc/packages/perl-Starman/Changes /usr/share/doc/packages/perl-Starman/README /usr/share/licenses/perl-Starman /usr/share/licenses/perl-Starman/LICENSE /usr/share/man/man1/starman.1.gz /usr/share/man/man3/Plack::Handler::Starman.3pm.gz /usr/share/man/man3/Starman.3pm.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Oct 27 22:33:16 2026