Multiple vulnerabilities have been discovered in Puma, the worst of which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-servers/puma | * | < 5.6.4 | >= 5.6.4 |
Puma is a simple, fast, threaded, and highly concurrent HTTP 1.1 server for Ruby/Rack.
Multiple vulnerabilities have been discovered in Puma. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Puma users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/puma-5.6.4"