[DRE-maint] Bug#1149582: trixie-pu: package puma/6.6.0-4+deb13u1

[Abhijith PA]

Package: release.debian.org
Severity: normal
Tags: trixie
X-Debbugs-Cc: puma at packages.debian.org
Control: affects -1 + src:puma
User: release.debian.org at packages.debian.org
Usertags: pu

Hi,

I'd like to make a stable upload for puma, fixing CVE-2026-47736 and
CVE-2026-47737. The sec team marked both as no-DSA, hence doing SPU.

Fixes are backported from the upstream, changes fit easily without
much fuzz. 

There are wide coverage tests including the tests for this particular
fixes. All are passing during the build. 


  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable


--abhijith