Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2192-1

Опубликовано: 27 июн. 2022
Источник: suse-cvrf

Описание

Security update for rubygem-rack

This update for rubygem-rack fixes the following issues:

  • CVE-2022-30122: Fixed crafted multipart POST request may cause a DoS (bsc#1200748)
  • CVE-2022-30123: Fixed crafted requests can cause shell escape sequences (bsc#1200750)

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-BYOS-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-BYOS-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-EC2-HVM
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP3-SAP-BYOS-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP3-SAP-BYOS-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-BYOS
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-BYOS-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-BYOS-EC2
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-BYOS-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Hardened
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Hardened-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Hardened-BYOS
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Hardened-EC2
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP4-SAP-Hardened-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Azure-3P
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-BYOS-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-BYOS-EC2
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-BYOS-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Hardened-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Hardened-EC2
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP5-SAP-Hardened-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Azure-LI-BYOS
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-BYOS
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-BYOS-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-BYOS-EC2
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-BYOS-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Hardened
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Hardened-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Hardened-BYOS
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Hardened-EC2
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP6-SAP-Hardened-GCE
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
SUSE Linux Enterprise High Availability Extension 15
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
SUSE Linux Enterprise High Availability Extension 15 SP1
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
SUSE Linux Enterprise High Availability Extension 15 SP2
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
SUSE Linux Enterprise High Availability Extension 15 SP3
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
SUSE Linux Enterprise High Availability Extension 15 SP4
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
openSUSE Leap 15.3
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
ruby2.5-rubygem-rack-doc-2.0.8-150000.3.6.1
ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.6.1
openSUSE Leap 15.4
ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
ruby2.5-rubygem-rack-doc-2.0.8-150000.3.6.1
ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.6.1

Ссылки

Описание

A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.

Затронутые продукты
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Ссылки

Описание

A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.

Затронутые продукты
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:ruby2.5-rubygem-rack-2.0.8-150000.3.6.1
Ссылки
Уязвимость SUSE-SU-2022:2192-1