ALT-PU-2021-2596: package gem-puma update to version 5.3.2-alt1
Источник
errata.altlinux.org
Дата публикации
22.08.2021
Дата обновления
04.02.2026
Устраненные уязвимости
5
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
Описание
This update upgrades gem-puma to version 5.3.2-alt1.
Устраненные уязвимости5
Ссылки4
GHSA-q28m-8xjw-8vr5
https://github.com/advisories/GHSA-q28m-8xjw-8vr5GHSA-w64w-qqph-5gxm
https://github.com/advisories/GHSA-w64w-qqph-5gxmGHSA-x7jg-6pwg-fx5h
https://github.com/advisories/GHSA-x7jg-6pwg-fx5hСвязанные уязвимости
CVSS3: 7.5
altlinux
около 3 лет назад
ALT-PU-2023-4271: package `gem-puma` update to version 5.6.5-alt1
CVSS3: 7.5
ubuntu
больше 6 лет назад
In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.