SUSE-SU-2025:02429-1
Not scored
Security update for rmt-server
This update for rmt-server fixes the following issues: - Update to version 2.23 - CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893) - CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session. (bsc#1242898)
Exploit probability
Not scored
Published
July 21, 2025
Required by
Not available
Last source change
March 23, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2025:02429-1
View original source
This update for rmt-server fixes the following issues: - Update to version 2.23 - CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893) - CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session. (bsc#1242898)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1236600
- https://bugzilla.suse.com/1236816
- https://bugzilla.suse.com/1236836
- https://bugzilla.suse.com/1237373
- https://bugzilla.suse.com/1242893
- https://bugzilla.suse.com/1242898
- https://bugzilla.suse.com/1244166
- https://www.suse.com/security/cve/CVE-2025-32441
- https://www.suse.com/security/cve/CVE-2025-46727
- https://www.suse.com/support/update/announcement/2025/suse-su-202502429-1/