rubygem-puma: incomplete fix for CVE-2019-16770 allows Denial of Service (DoS)

A flaw was found in rubygem-puma. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted from having their requests starved by greedy persistent-connections saturating all threads in the same process. However, new connections...