[PATCH] Merge pull request from GHSA-68xg-gqqm-vgj8

* Reject empty string for Content-Length

* Ignore trailers in last chunk

* test_puma_server.rb - use heredoc, test_cl_and_te_smuggle

* client.rb - stye/RubyCop

* test_puma_server.rb - indented heredoc rubocop disable

* Dentarg comments

* Remove unused variable

---------

Co-authored-by: MSP-Greg <Greg.mpls@gmail.com>
Gbp-Pq: Name CVE-2023-40175.patch

disable-test-failing-on-amd64

This test failed on amd64 buildd
https://buildd.debian.org/status/fetch.php?pkg=puma&arch=amd64&ver=5.2.2-1&stamp=1615133735&raw=0

Gbp-Pq: Name 0014-disable-test-failing-on-amd64.patch

Fix test to read output locale independent

The test fails if run in a non-English environment.

Gbp-Pq: Name 0013-fix-test-term-not-accepts-new-connections.patch

Disable cli ssl tests

Forwarded: not-needed

Gbp-Pq: Name 0012-disable-cli-ssl-tests.patch

Disable unavailable minitest extensions

Forwarded: not-needed

Gbp-Pq: Name 0011-disable-minitest-extensions.patch

Drop git usage from gemspec

Forwarded: not-needed

Gbp-Pq: Name 0004-puma.gemspec-drop-git-usage.patch

puma (5.6.5-3+deb12u1) bookworm; urgency=medium

  * Team upload
  * d/patches/
   + CVE-2023-40175.patch: Fix CVE-2023-40175, incorrect behavior when
     parsing chunked transfer encoding bodies and zero-length
     Content-Length headers in a way that allowed HTTP request
     smuggling. (Closes: #1050079)

   + CVE-2024-21647.patch: Fix CVE-2024-21647 by limiting the size of
     chunk extensions. (Closes: #1060345)

   + CVE-2024-45614.patch: Fix CVE-2024-45614, clients could clobber
     values set by intermediate proxies (such as X-Forwarded-For) by
     providing a underscore version of the same header.
     (Closes: #1082379)

[dgit import unpatched puma 5.6.5-3+deb12u1]

Import puma_5.6.5-3+deb12u1.debian.tar.xz

[dgit import tarball puma 5.6.5-3+deb12u1 puma_5.6.5-3+deb12u1.debian.tar.xz]

Import puma_5.6.5.orig.tar.gz

[dgit import orig puma_5.6.5.orig.tar.gz]