From d35db90a36f9e1d9cb35565e44db899c1c367aa3 Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Tue, 12 Oct 2021 22:41:28 +0200
Subject: Add CVE-2021-41136/puma

---
 data/CVE/list.2021 | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/data/CVE/list.2021 b/data/CVE/list.2021
index 34dc7059cf..9199c4d67a 100644
--- a/data/CVE/list.2021
+++ b/data/CVE/list.2021
@@ -2659,7 +2659,9 @@ CVE-2021-41138
 CVE-2021-41137
 	RESERVED
 CVE-2021-41136 (Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to version ...)
-	TODO: check
+	- puma <unfixed>
+	NOTE: https://github.com/puma/puma/security/advisories/GHSA-48w2-rm65-62xx
+	NOTE: https://github.com/puma/puma/commit/acdc3ae571dfae0e045cf09a295280127db65c7f
 CVE-2021-41135
 	RESERVED
 CVE-2021-41134
-- 
cgit v1.2.3