Packages / openSUSE Tumbleweed / Unspecified / perl-Starman

Package: perl-Starman (0.4018-1.3)

High-performance preforking PSGI/Plack web server

Starman is a PSGI perl web server that has unique features such as: * High Performance Uses the fast XS/C HTTP header parser * Preforking Spawns workers preforked like most high performance UNIX servers do. Starman also reaps dead children and automatically restarts the worker pool. * Signals Supports 'HUP' for graceful worker restarts, and 'TTIN'/'TTOU' to dynamically increase or decrease the number of worker processes, as well as 'QUIT' to gracefully shutdown the worker processes. * Superdaemon aware Supports Server::Starter for hot deploy and graceful restarts. * Multiple interfaces and UNIX Domain Socket support Able to listen on multiple interfaces including UNIX sockets. * Small memory footprint Preloading the applications with '--preload-app' command line option enables copy-on-write friendly memory management. Also, the minimum memory usage Starman requires for the master process is 7MB and children (workers) is less than 3.0MB. * PSGI compatible Can run any PSGI applications and frameworks * HTTP/1.1 support Supports chunked requests and responses, keep-alive and pipeline requests. * UNIX only This server does not support Win32.

Other Packages Related to perl-Starman:

  • dep: /usr/bin/perl

    Package not available

  • dep: perl(:MODULE_COMPAT_5.44.0)

    Package not available

  • dep: perl(Data::Dump)

    Package not available

  • dep: perl(HTTP::Date)

    Package not available

  • dep: perl(HTTP::Parser::XS)

    Package not available

  • dep: perl(HTTP::Status)

    Package not available

  • dep: perl(Net::Server) (>= 2.7)

    Package not available

  • dep: perl(Plack) (>= 0.997.100)

    Package not available

  • dep: perl(Test::TCP) (>= 2.0)

    Package not available

  • dep: perl(parent)

    Package not available

Download perl-Starman

ArchitecturePackage sizeInstalled sizeFilesPackage
noarch40 KiB70 KiBlist of filesDownload

Package file paths (21)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/starman
  • /usr/lib/perl5/vendor_perl/5.44.0/HTTP
  • /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Server
  • /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Server/PSGI
  • /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Server/PSGI/Net
  • /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Server/PSGI/Net/Server
  • /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Server/PSGI/Net/Server/PreFork.pm
  • /usr/lib/perl5/vendor_perl/5.44.0/Plack
  • /usr/lib/perl5/vendor_perl/5.44.0/Plack/Handler
  • /usr/lib/perl5/vendor_perl/5.44.0/Plack/Handler/Starman.pm
  • /usr/lib/perl5/vendor_perl/5.44.0/Starman
  • /usr/lib/perl5/vendor_perl/5.44.0/Starman.pm
  • /usr/lib/perl5/vendor_perl/5.44.0/Starman/Server.pm
  • /usr/share/doc/packages/perl-Starman
  • /usr/share/doc/packages/perl-Starman/Changes
  • /usr/share/doc/packages/perl-Starman/README
  • /usr/share/licenses/perl-Starman
  • /usr/share/licenses/perl-Starman/LICENSE
  • /usr/share/man/man1/starman.1.gz
  • /usr/share/man/man3/Plack::Handler::Starman.3pm.gz
  • /usr/share/man/man3/Starman.3pm.gz

Field source: openSUSE Tumbleweed OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
0.4018-1.3tumbleweed / ossnoarchopenSUSE Tumbleweed · OSS · multi-architecture40 KiB70 KiBnoarch/perl-Starman-0.4018-1.3.noarch.rpm

Field source: openSUSE Tumbleweed OSS

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-115817]

Published:

starman: CVE-2026-115817

MediumAffected
Details (1)
  • 0.4018-1.3 · noarch · tumbleweed

    Affected · Fixed: 0.4019-1.1

    dsa · perl-Starman · opensuse · tumbleweed

Fixed and unaffected versions (1)
CVESeverityVersion impact
[CVE-2026-40560]

Published:

Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both head

High(8.8)Fixed
Details (1)
  • 0.4018-1.3 · noarch · tumbleweed

    Fixed · Fixed: 0.4018-1.1

    nvd · perl-Starman · opensuse · tumbleweed

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

0.4018-1.3 / noarchObserved Sep 1, 2026sha512 205371f7ecc3…24e1fd72Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 205371f7ecc346726c9bf5aa2daa311d46cbf8319e2a9528005cb59889c99f6307ed5d558a058f2ba0151f7ef669426c69d31297250b1164f87270e224e1fd72

Field source: openSUSE Tumbleweed OSS

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

    Repository-signature verification record
    Signed-object SHA-256
    4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable