critical Security update for rubygem-rack

SUSE-SLE-Product-HA-15-2022-2192

This update for rubygem-rack fixes the following issues: - CVE-2022-30122: Fixed crafted multipart POST request may cause a DoS (bsc#1200748) - CVE-2022-30123: Fixed crafted requests can cause shell escape sequences (bsc#1200750)

• Release Date
  Jun 27 2022
• References
  Bugzilla: 1200750, 1200748
  CVEs: CVE-2022-30123, CVE-2022-30122
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise High Availability Extension 15 x86_64

• Packages
  ruby2.5-rubygem-rack
  A modular Ruby webserver interface

  2.0.8-150000.3.6.1

  lock rpm

  rubygem-rack
  A modular Ruby webserver interface

  2.0.8-150000.3.6.1

  lock src

SUSE Linux Enterprise High Availability Extension 15 s390x

• Packages
  ruby2.5-rubygem-rack
  A modular Ruby webserver interface

  2.0.8-150000.3.6.1

  lock rpm

  rubygem-rack
  A modular Ruby webserver interface

  2.0.8-150000.3.6.1

  lock src

SUSE Linux Enterprise High Availability Extension 15 ppc64le

• Packages
  ruby2.5-rubygem-rack
  A modular Ruby webserver interface

  2.0.8-150000.3.6.1

  lock rpm

  rubygem-rack
  A modular Ruby webserver interface

  2.0.8-150000.3.6.1

  lock src

SUSE Linux Enterprise High Availability Extension 15 aarch64

• Packages
  ruby2.5-rubygem-rack
  A modular Ruby webserver interface

  2.0.8-150000.3.6.1

  lock rpm

  rubygem-rack
  A modular Ruby webserver interface

  2.0.8-150000.3.6.1

  lock src