Security update for rubygem-rack

This update for rubygem-rack fixes the following issues: CVE-2025-25184: Fixed escape sequence injection vulnerability in rack leading to possible log injection bsc1237141 CVE-2025-27111: Fixed escape sequence injection vulnerability in rack leading to possible log injection bsc1238607...

SUSE-SU-2025:0874-1 Security update for rubygem-rack

This update for rubygem-rack fixes the following issues: - CVE-2025-25184: Fixed escape sequence injection vulnerability in rack leading to possible log injection bsc1237141 - CVE-2025-27111: Fixed escape sequence injection vulnerability in rack leading to possible log injection bsc1238607 -...

openSUSE 15: ruby2.5-rubygem-rack-1_6 / ruby2.5-rubygem-rack-doc-1_6 / etc (SUSE-SU-2025:0858-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0858-1 advisory. - CVE-2025-27610: Fixed improper sanitization of user-supplied paths when serving files leading to local file inclusion bsc1239298. - CVE-2025-25184:...

Security update for rubygem-rack-1_6

This update for rubygem-rack-16 fixes the following issues: CVE-2025-27610: Fixed improper sanitization of user-supplied paths when serving files leading to local file inclusion bsc1239298. CVE-2025-25184: Fixed Rack::CommonLogger log entry manipulation bsc1237141. Patch Instructions: To install...

SUSE-SU-2025:0858-1 Security update for rubygem-rack-1_6

This update for rubygem-rack-16 fixes the following issues: - CVE-2025-27610: Fixed improper sanitization of user-supplied paths when serving files leading to local file inclusion bsc1239298. - CVE-2025-25184: Fixed Rack::CommonLogger log entry manipulation bsc1237141...

OPENSUSE-SU-2025:14876-1 ruby3.4-rubygem-rack-2.2-2.2.13-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12784-1 ruby3.1-rubygem-rack-2.2-2.2.6.3-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-2.2-2.2.6.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12119-1 ruby3.1-rubygem-rack-2.2.3.1-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-2.2.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13727-1 ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 on GA media

These are all security issues fixed in the ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11344-1 ruby2.7-rubygem-rack-2.2.3-1.7 on GA media

These are all security issues fixed in the ruby2.7-rubygem-rack-2.2.3-1.7 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10406-1 ruby2.2-rubygem-rack-1_6-1.6.5-1.1 on GA media

These are all security issues fixed in the ruby2.2-rubygem-rack-16-1.6.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11345-1 ruby2.7-rubygem-rack-1_6-1.6.13-1.13 on GA media

These are all security issues fixed in the ruby2.7-rubygem-rack-16-1.6.13-1.13 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12789-1 ruby3.1-rubygem-rack-2.2-2.2.6.4-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-2.2-2.2.6.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12773-1 ruby3.1-rubygem-rack-3.0.4.2-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rack-3.0.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

Rocky Linux 8 : pcs (RLSA-2024:2953)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2953 advisory. rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing CVE-2024-25126 rubygem-rack: Possible DoS Vulnerability with Range Header in...

Moderate: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing

A denial of service DoS vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted...

rubygem-rack: Possible DoS Vulnerability with Range Header in Rack

A denial of service DoS vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue...

Moderate: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

ALSA-2024:2953 Moderate: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing CVE-2024-25126 rubygem-rack: Possible DoS Vulnerability with Range Header in Rack CVE-2024-26141...