File _patchinfo of Package patchinfo.35973
<patchinfo incident="35973"> <issue tracker="cve" id="2024-21647"/> <issue tracker="cve" id="2024-45614"/> <issue tracker="bnc" id="1218638">VUL-0: CVE-2024-21647: rubygem-puma: DoS when parsing chunked Transfer-Encoding bodies</issue> <issue tracker="bnc" id="1230848">VUL-0: CVE-2024-45614: rubygem-puma: Header normalization allows for client to clobber proxy set headers</issue> <packager>hennevogel</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for rubygem-puma</summary> <description>This update for rubygem-puma fixes the following issues: - CVE-2024-45614: Prevent underscores from clobbering hyphen headers (bsc#1230848). - CVE-2024-21647: Fixed DoS when parsing chunked Transfer-Encoding bodies (bsc#1218638). </description> </patchinfo>