[ubuntu/mantic-proposed] puma 5.6.5-4ubuntu2 (Accepted)

[Marc Deslauriers]

puma (5.6.5-4ubuntu2) mantic; urgency=medium

  * SECURITY UPDATE: HTTP request smuggling issues
    - debian/patches/CVE-2023-40175.patch: fix parsing in
      lib/puma/client.rb, test/test_puma_server.rb.
    - CVE-2023-40175

Date: Fri, 22 Sep 2023 13:01:34 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/puma/5.6.5-4ubuntu2
-------------- next part --------------
Format: 1.8
Date: Fri, 22 Sep 2023 13:01:34 -0400
Source: puma
Built-For-Profiles: noudeb
Architecture: source
Version: 5.6.5-4ubuntu2
Distribution: mantic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 puma (5.6.5-4ubuntu2) mantic; urgency=medium
 .
   * SECURITY UPDATE: HTTP request smuggling issues
     - debian/patches/CVE-2023-40175.patch: fix parsing in
       lib/puma/client.rb, test/test_puma_server.rb.
     - CVE-2023-40175
Checksums-Sha1:
 19c9cc8d21f01405640aa986f607fe0cbb499319 2230 puma_5.6.5-4ubuntu2.dsc
 983644bb223fdacd97e40c2d5c2dfb624a4c7d3c 13672 puma_5.6.5-4ubuntu2.debian.tar.xz
 158cdec347a0ddd4f24514ff2d89f98bd1963b50 10124 puma_5.6.5-4ubuntu2_source.buildinfo
Checksums-Sha256:
 731fbd8e602483c6b1d27ebdb742ee3ec9c2669310663a3ed3ddec5940d27874 2230 puma_5.6.5-4ubuntu2.dsc
 c33de3768f7ccf55c65f0d9beb0afbaae6743e837bc37de5aa406da7d9e615f4 13672 puma_5.6.5-4ubuntu2.debian.tar.xz
 da5435071e9d880ed86e5926a9ad1547b3526832e145a3cb6f776f34adea9266 10124 puma_5.6.5-4ubuntu2_source.buildinfo
Files:
 d023428a6db6dd46bc60b653e2fe0940 2230 web optional puma_5.6.5-4ubuntu2.dsc
 4d4cfed8b1cb4eacb48fae86ff177123 13672 web optional puma_5.6.5-4ubuntu2.debian.tar.xz
 01c6b77fc2236bcc16fa2a0bf481eed7 10124 web optional puma_5.6.5-4ubuntu2_source.buildinfo
Original-Maintainer: Debian Ruby Team <pkg-ruby-extras-maintainers at lists.alioth.debian.org>