FlawAtlas
Search the atlas
SUSE-SU-2023:0442-1 Not scored

Security update for rubygem-actionpack-4_2

This update for rubygem-actionpack-4_2 fixes the following issues: - CVE-2023-22795: Fixed possible ReDoS based DoS vulnerability in Action Dispatch via specially crafted HTTP header (bsc#1207451). - CVE-2023-22792: Fixed possible ReDoS based DoS vulnerability in Action Dispatch via specially crafted cookies (bsc#1207455).

Exploit probability Not scored
Published February 17, 2023
Required by Not available
Last source change May 2, 2025

02 / AFFECTED SOFTWARE

Affected packages

SUSE:OpenStack Cloud Crowbar 8 rubygem-actionpack-4_2
SUSE:OpenStack Cloud Crowbar 9 rubygem-actionpack-4_2

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:0442-1

This update for rubygem-actionpack-4_2 fixes the following issues: - CVE-2023-22795: Fixed possible ReDoS based DoS vulnerability in Action Dispatch via specially crafted HTTP header (bsc#1207451). - CVE-2023-22792: Fixed possible ReDoS based DoS vulnerability in Action Dispatch via specially crafted cookies (bsc#1207455).

View original source

05 / REFERENCES

Further evidence