Path to this page:
Subject: CVS commit: pkgsrc/www/ruby-puma
From: Takahiro Kambe
Date: 2020-05-24 15:47:49
Message id: 20200524134749.F25A8FB27@cvs.NetBSD.org
Log Message:
www/ruby-puma: update to 4.3.5
Update ruby-puma to 4.3.5.
4.3.4/4.3.5 and 3.12.5/3.12.6 / 2020-05-22
Each patchlevel release contains a separate security fix. We recommend
simply upgrading to 4.3.5/3.12.6.
* Security
Fix: Fixed two separate HTTP smuggling vulnerabilities that used the
Transfer-Encoding header. CVE-2020-11076 and CVE-2020-11077.
Files: