gpp_maybe Security update for ruby2.5

SUSE-SLE-Module-Basesystem-15-SP7-2025-4264

This update for ruby2.5 fixes the following issues: - CVE-2024-35221: Fixed remote DoS via YAML manifest (bsc#1225905) - CVE-2024-47220: Fixed HTTP request smuggling in WEBrick (bsc#1230930) - CVE-2024-49761: Fixed ReDOS vulnerability by updating REXML to 3.3.9 (bsc#1232440) - CVE-2025-24294: Fixed denial of service (DoS) caused by an insufficient check on the length of a decompressed domain name within a DNS packet in resolv gem (bsc#1246430) - CVE-2025-27219: Fixed denial of service in CGI::Cookie.parse (bsc#1237804) - CVE-2025-27220: Fixed ReDoS in CGI::Util#escapeElement (bsc#1237806) - CVE-2025-27221: Fixed userinfo leakage in URI#join, URI#merge and URI#+ (bsc#1237805) - CVE-2025-6442: Fixed ruby WEBrick read_header HTTP request smuggling vulnerability (bsc#1245254)

• Release Date
  Nov 26 2025
• References
  Bugzilla: 1225905, 1230930, 1232440, 1235773, 1237804, 1237805, 1237806, 1245254, 1246430
  CVEs: CVE-2024-35221, CVE-2024-47220, CVE-2024-49761, CVE-2025-24294, CVE-2025-27219, CVE-2025-27220, CVE-2025-27221, CVE-2025-6442
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 aarch64

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150700.24.3.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150700.24.3.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150700.24.3.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150700.24.3.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150700.24.3.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150700.24.3.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150700.24.3.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150700.24.3.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150700.24.3.1 lock rpm