File _patchinfo of Package patchinfo.35973

<patchinfo incident="35973">
  <issue tracker="cve" id="2024-21647"/>
  <issue tracker="cve" id="2024-45614"/>
  <issue tracker="bnc" id="1218638">VUL-0: CVE-2024-21647: rubygem-puma: DoS when parsing chunked Transfer-Encoding bodies</issue>
  <issue tracker="bnc" id="1230848">VUL-0: CVE-2024-45614: rubygem-puma: Header normalization allows for client to clobber proxy set headers</issue>
  <packager>hennevogel</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for rubygem-puma</summary>
  <description>This update for rubygem-puma fixes the following issues:

- CVE-2024-45614: Prevent underscores from clobbering hyphen headers (bsc#1230848).
- CVE-2024-21647: Fixed DoS when parsing chunked Transfer-Encoding bodies (bsc#1218638).
</description>
</patchinfo>
openSUSE Build Service is sponsored by