Stay Secure with the Latest Linux Advisories

security advisoryUbuntunetwork traffic

Ubuntu 24.04 LTS: USN-7031-1 critical: Puma header overwrite issue

Puma could be made to overwrite headers if it received specially crafted network traffic.. ========================================================================== Ubuntu Security Notice USN-7031-1 September 24, 2024 puma vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS Summary: Puma could be made to overwrite headers if it received specially crafted network traffic. Software Description: - puma: threaded HTTP 1.1 server for Ruby/Rack applications Details: It was discovered that Puma incorrectly handled parsing certain headers. A remote attacker could possibly use this issue to overwrite header values set by intermediate proxies by providing duplicate headers containing underscore characters. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS puma 6.4.2-4ubuntu4.3 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7031-1 CVE-2024-45614 Package Information: https://launchpad.net/ubuntu/+source/puma/6.4.2-4ubuntu4.3 . The persistent header replacement problem with Puma necessitates immediate patches for Ubuntu 24.04 LTS. Safeguard your system by installing the most recent updates.. Puma Security, Ubuntu Advisory, Network Vulnerability, Header Manipulation, Security Update. . Severity: Critical. LinuxSecurity.com Team

Sep 24, 2024 •Critical Ubuntu