ruby3.4-rubygem-fluentd-1.17.1-1.3 on GA media (moderate)

ruby3.4-rubygem-fluentd-1.17.1-1.3 on GA media Announcement ID: openSUSE-SU-2025:15115-1 Rating: moderate Cross-References: CVE-2021-41186 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2021-41186 affecting package rubygem-fluentd 1.11.0-1

CVE-2021-41186 affecting package rubygem-fluentd 1.11.0-1. No patch is available currently...

CVE-2021-41186

CVE-2021-41186 concerns a ReDoS in Fluentd’s parser_apache2 plugin (versions 0.14.14–1.14.1). The issue causes excessive CPU time when processing certain broken Apache log patterns, leading to potential DoS. A fix is available in Fluentd 1.14.2. If upgrading is not feasible, workarounds include: ...