openSUSE-SU-2025:14811-1: moderate: ruby3.4-rubygem-rack-2.2-2.2.11-1.1 on GA media

# ruby3.4-rubygem-rack-2.2-2.2.11-1.1 on GA media Announcement ID: openSUSE-SU-2025:14811-1 Rating: moderate Cross-References: * CVE-2013-0262 * CVE-2013-0263 * CVE-2015-3225 * CVE-2018-16471 * CVE-2019-16782 * CVE-2020-8184 * CVE-2022-30122 * CVE-2022-30123 * CVE-2022-44570 * CVE-2022-44571 * CVE-2022-44572 * CVE-2023-27530 * CVE-2023-27539 * CVE-2024-25126 * CVE-2024-26141 * CVE-2024-26146 * CVE-2025-25184 CVSS scores: * CVE-2018-16471 ( SUSE ): 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2019-16782 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2020-8184 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2022-30122 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2022-30123 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-44570 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-44571 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-44572 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-27530 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-27539 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-25126 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26141 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26146 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-25184 ( SUSE ): 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-25184 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves 17 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.11-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * ruby3.4-rubygem-rack-2.2 2.2.11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2013-0262.html * https://www.suse.com/security/cve/CVE-2013-0263.html * https://www.suse.com/security/cve/CVE-2015-3225.html * https://www.suse.com/security/cve/CVE-2018-16471.html * https://www.suse.com/security/cve/CVE-2019-16782.html * https://www.suse.com/security/cve/CVE-2020-8184.html * https://www.suse.com/security/cve/CVE-2022-30122.html * https://www.suse.com/security/cve/CVE-2022-30123.html * https://www.suse.com/security/cve/CVE-2022-44570.html * https://www.suse.com/security/cve/CVE-2022-44571.html * https://www.suse.com/security/cve/CVE-2022-44572.html * https://www.suse.com/security/cve/CVE-2023-27530.html * https://www.suse.com/security/cve/CVE-2023-27539.html * https://www.suse.com/security/cve/CVE-2024-25126.html * https://www.suse.com/security/cve/CVE-2024-26141.html * https://www.suse.com/security/cve/CVE-2024-26146.html * https://www.suse.com/security/cve/CVE-2025-25184.html
participants (1)
-
meissner@suse.com