← Search the atlas
SUSE-SU-2025:0736-1
Not scored
Security update for ruby2.5
This update for ruby2.5 fixes the following issues:
- CVE-2024-47220: Fixed a HTTP request smuggling attack in WEBrick (bsc#1230930)
- CVE-2024-49761: Fixed a ReDoS vulnerability in ruby rexml (bsc#1232440)
Other fixes:
- [ruby/uri] Fix quadratic backtracking on invalid relative URI
- [ruby/time] Make RFC2822 regexp linear
- [ruby/time] Fix quadratic backtracking on invalid time
- merge some parts of CGI 0.1.1
Exploit probability
Not scored
Published
February 26, 2025
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Enterprise Storage 7.1
ruby2.5
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
ruby2.5
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
ruby2.5
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
ruby2.5
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
ruby2.5
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
ruby2.5
SUSE:Linux Enterprise Module for Basesystem 15 SP6
ruby2.5
SUSE:Linux Enterprise Server 15 SP3-LTSS
ruby2.5
SUSE:Linux Enterprise Server 15 SP4-LTSS
ruby2.5
SUSE:Linux Enterprise Server 15 SP5-LTSS
ruby2.5
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
ruby2.5
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
ruby2.5
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
ruby2.5
SUSE:Manager Proxy 4.3
ruby2.5
SUSE:Manager Server 4.3
ruby2.5
openSUSE:Leap 15.6
ruby2.5
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2025:0736-1
This update for ruby2.5 fixes the following issues:
- CVE-2024-47220: Fixed a HTTP request smuggling attack in WEBrick (bsc#1230930)
- CVE-2024-49761: Fixed a ReDoS vulnerability in ruby rexml (bsc#1232440)
Other fixes:
- [ruby/uri] Fix quadratic backtracking on invalid relative URI
- [ruby/time] Make RFC2822 regexp linear
- [ruby/time] Fix quadratic backtracking on invalid time
- merge some parts of CGI 0.1.1
View original source ↗
05 / REFERENCES
Further evidence