File _patchinfo of Package patchinfo.35973
<patchinfo incident="35973">
<issue tracker="cve" id="2024-21647"/>
<issue tracker="cve" id="2024-45614"/>
<issue tracker="bnc" id="1218638">VUL-0: CVE-2024-21647: rubygem-puma: DoS when parsing chunked Transfer-Encoding bodies</issue>
<issue tracker="bnc" id="1230848">VUL-0: CVE-2024-45614: rubygem-puma: Header normalization allows for client to clobber proxy set headers</issue>
<packager>hennevogel</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for rubygem-puma</summary>
<description>This update for rubygem-puma fixes the following issues:
- CVE-2024-45614: Prevent underscores from clobbering hyphen headers (bsc#1230848).
- CVE-2024-21647: Fixed DoS when parsing chunked Transfer-Encoding bodies (bsc#1218638).
</description>
</patchinfo>