FEDORA-2024-c393b8b2fb — security update for rubygem-puma

stable

rubygem-puma-6.4.2-1.fc40

FEDORA-2024-c393b8b2fb created by vondruch 9 months ago for Fedora 40

Automatic update for rubygem-puma-6.4.2-1.fc40.

Changelog

* Tue Jan  9 2024 Vít Ondruch <vondruch@redhat.com> - 6.4.2-1
- Update to Puma 6.4.2.
  Resolves: rhbz#2134670
  Resolves: rhbz#2235332
  Related: rhbz#2232729
  Resolves: rhbz#2257341
  Related: rhbz#2257340

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-c393b8b2fb

This update was automatically created

9 months ago

This update's test gating status has been changed to 'waiting'.

9 months ago

This update's test gating status has been changed to 'ignored'.

9 months ago

This update has been submitted for stable by bodhi

9 months ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

rubygem-puma-6.4.2-1.fc40

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

0 days

Dates

submitted

9 months ago

in testing

9 months ago

in stable

9 months ago

approved

9 months ago

BZ#2134670 rubygem-puma-6.4.2 is available

BZ#2232729 CVE-2023-40175 rubygem-puma: HTTP request smuggling when parsing chunked transfer encoding bodies and zero-length content-length headers

BZ#2235332 CVE-2023-40175 rubygem-puma: HTTP request smuggling when parsing chunked transfer encoding bodies and zero-length content-length headers [fedora-38]

BZ#2257340 CVE-2024-21647 rubygem-puma: HTTP request smuggling when parsing chunked Transfer-Encoding Bodies

BZ#2257341 TRIAGE CVE-2024-21647 rubygem-puma: HTTP request smuggling when parsing chunked Transfer-Encoding Bodies [fedora-all]

rubygem-puma-6.4.2-1.fc40

Automated Test Results

ignored