USN-6837-1 ruby-rack vulnerabilities

It was discovered that Rack incorrectly handled Multipart MIME parsing. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. This issue only affected Ubuntu 23.10. CVE-2023-27530 It was discovered that Rack incorrectly parsed certain...

Ubuntu 23.10 / 24.04 LTS : Rack vulnerabilities (USN-6837-1)

The remote Ubuntu 23.10 / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6837-1 advisory. It was discovered that Rack incorrectly handled Multipart MIME parsing. A remote attacker could possibly use this issue to cause Rack to consume...

OPENSUSE-SU-2024:12784-1 ruby3.1-rubygem-rack-2.2-2.2.6.3-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-2.2-2.2.6.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12119-1 ruby3.1-rubygem-rack-2.2.3.1-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-2.2.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13167-1 ruby3.2-rubygem-rack-3.0.7-1.2 on GA media

These are all security issues fixed in the ruby3.2-rubygem-rack-3.0.7-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12805-1 ruby3.1-rubygem-rack-3.0.7-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-3.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12633-1 ruby3.1-rubygem-rack-3.0.4.1-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-3.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12634-1 ruby3.1-rubygem-rack-2.2-2.2.6.2-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-2.2-2.2.6.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10115-1 ruby2.2-rubygem-rack-1_4-1.4.7-1.8 on GA media

These are all security issues fixed in the ruby2.2-rubygem-rack-14-1.4.7-1.8 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11344-1 ruby2.7-rubygem-rack-2.2.3-1.7 on GA media

These are all security issues fixed in the ruby2.7-rubygem-rack-2.2.3-1.7 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13727-1 ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 on GA media

These are all security issues fixed in the ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12397-1 ruby3.1-rubygem-rack-2.2-2.2.4-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-2.2-2.2.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13726-1 ruby3.3-rubygem-rack-3.0.9.1-1.1 on GA media

These are all security issues fixed in the ruby3.3-rubygem-rack-3.0.9.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12789-1 ruby3.1-rubygem-rack-2.2-2.2.6.4-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-2.2-2.2.6.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12773-1 ruby3.1-rubygem-rack-3.0.4.2-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-3.0.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10406-1 ruby2.2-rubygem-rack-1_6-1.6.5-1.1 on GA media

These are all security issues fixed in the ruby2.2-rubygem-rack-16-1.6.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11345-1 ruby2.7-rubygem-rack-1_6-1.6.13-1.13 on GA media

These are all security issues fixed in the ruby2.7-rubygem-rack-16-1.6.13-1.13 package on the GA media of openSUSE Tumbleweed...

RLSA-2024:2953 Moderate: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing CVE-2024-25126 rubygem-rack: Possible DoS Vulnerability with Range Header in Rack CVE-2024-26141...

Rocky Linux 8 : pcs (RLSA-2024:2953)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2953 advisory. rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing CVE-2024-25126 rubygem-rack: Possible DoS Vulnerability with Range Header in...

SUSE CVE-2024-25126

Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack's media type parser to take much longer than expected, leading to a possible denial of service vulnerability ReDos 2nd degree polynomial. This vulnerability is patched in 3.0.9.1 and 2.2.8.1...