diff -Nru python-bottle-0.12.19/debian/changelog python-bottle-0.12.19/debian/changelog
--- python-bottle-0.12.19/debian/changelog	2020-12-30 15:48:11.000000000 +0000
+++ python-bottle-0.12.19/debian/changelog	2022-07-25 09:34:47.000000000 +0000
@@ -1,3 +1,16 @@
+python-bottle (0.12.19-1+deb11u1build0.22.04.1) jammy-security; urgency=medium
+
+  * fake sync from Debian
+
+ -- Nishit Majithia <nishit.majithia@canonical.com>  Mon, 25 Jul 2022 15:04:47 +0530
+
+python-bottle (0.12.19-1+deb11u1) bullseye-security; urgency=high
+
+  * Gracefully handle errors during early request binding
+    Kudos to Marcel Hellkamp
+
+ -- Federico Ceratto <federico@debian.org>  Thu, 26 May 2022 19:36:33 +0100
+
 python-bottle (0.12.19-1) unstable; urgency=medium
 
   * New upstream release
diff -Nru python-bottle-0.12.19/debian/patches/0004-request-binding.patch python-bottle-0.12.19/debian/patches/0004-request-binding.patch
--- python-bottle-0.12.19/debian/patches/0004-request-binding.patch	1970-01-01 00:00:00.000000000 +0000
+++ python-bottle-0.12.19/debian/patches/0004-request-binding.patch	2022-05-26 18:36:33.000000000 +0000
@@ -0,0 +1,31 @@
+From: Federico Ceratto <federico@debian.org>
+Subject:  Gracefully handle errors during early request binding
+
+--- a/bottle.py
++++ b/bottle.py
+@@ -848,17 +848,18 @@
+         return tob(template(ERROR_PAGE_TEMPLATE, e=res))
+ 
+     def _handle(self, environ):
+-        path = environ['bottle.raw_path'] = environ['PATH_INFO']
+-        if py3k:
+-            try:
+-                environ['PATH_INFO'] = path.encode('latin1').decode('utf8')
+-            except UnicodeError:
+-                return HTTPError(400, 'Invalid path string. Expected UTF-8')
+-
+         try:
+             environ['bottle.app'] = self
+             request.bind(environ)
+             response.bind()
++
++            path = environ['bottle.raw_path'] = environ['PATH_INFO']
++            if py3k:
++                try:
++                    environ['PATH_INFO'] = path.encode('latin1').decode('utf8')
++                except UnicodeError:
++                    return HTTPError(400, 'Invalid path string. Expected UTF-8')
++
+             try:
+                 self.trigger_hook('before_request')
+                 route, args = self.router.match(environ)
diff -Nru python-bottle-0.12.19/debian/patches/series python-bottle-0.12.19/debian/patches/series
--- python-bottle-0.12.19/debian/patches/series	2020-12-30 15:48:11.000000000 +0000
+++ python-bottle-0.12.19/debian/patches/series	2022-05-26 18:36:33.000000000 +0000
@@ -1,3 +1,4 @@
 0001-Remove-bottle.py-from-scripts.patch
 0002-Add-CLI-manpage.patch
 0003-Disable-failing-tests.patch
+0004-request-binding.patch