Debian Patches

Status for puma/5.6.5-3+deb12u2

Patch Description Author Forwarded Bugs Origin Last update
CVE-2024-21647.patch Merge pull request from GHSA-c2f4-cvqm-65w2 Nate Berkopec <nate.berkopec@gmail.com> no 2024-01-08
CVE-2024-45614.patch Merge commit from fork
* Prevent underscores from clobbering hyphen headers

* Special case encoding headers to prevent app confusion

* Handle _ as , in jruby as well

* Silence RuboCop offense
Evan Phoenix <evan@phx.io> no 2024-09-18
CVE-2026-47736_37.patch 7.2.1 backport (#3947)
* Limit and anchor PROXY protocol parsing

(cherry picked from commit f1f37d5822aa8ffe23e7d0d16e9a1f3b0eaf9bfd)

* Parse PROXY protocol only once per connection

(cherry picked from commit 8310c17cd43784723ed41a94d2a747da256306de)
Nate Berkopec <nate.berkopec@gmail.com> no 2026-05-27
new-certs-generated.patch ssl certs for testcases Abhijith PA <abhijith@debian.org> not-needed 2026-10-07
0004-puma.gemspec-drop-git-usage.patch Drop git usage from gemspec Antonio Terceiro <terceiro@softwarelivre.org> not-needed 2020-02-05
0011-disable-minitest-extensions.patch Disable unavailable minitest extensions Daniel Leidert <daniel.leidert@wgdd.de> not-needed 2020-02-05
0012-disable-cli-ssl-tests.patch Disable cli ssl tests Daniel Leidert <daniel.leidert@wgdd.de> not-needed 2020-02-05
0013-fix-test-term-not-accepts-new-connections.patch Fix test to read output locale independent
The test fails if run in a non-English environment.
Daniel Leidert <daniel.leidert@wgdd.de> no 2020-02-06
0014-disable-test-failing-on-amd64.patch This test failed on amd64 buildd
https://buildd.debian.org/status/fetch.php?pkg=puma&arch=amd64&ver=5.2.2-1&stamp=1615133735&raw=0
no
CVE-2023-40175.patch Merge pull request from GHSA-68xg-gqqm-vgj8
* Reject empty string for Content-Length

* Ignore trailers in last chunk

* test_puma_server.rb - use heredoc, test_cl_and_te_smuggle

* client.rb - stye/RubyCop

* test_puma_server.rb - indented heredoc rubocop disable

* Dentarg comments

* Remove unused variable
Nate Berkopec <nate.berkopec@gmail.com> no 2023-08-18

All known versions for source package 'puma'

Links