Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to Rack 3.1.19
Rack could be made to crash if it received specially crafted network traffic.
An update that solves 2 vulnerabilities can now be installed.
* bsc#1237805 * bsc#1245254 Cross-References: * CVE-2025-27221
Several security issues were fixed in Sidekiq.
Several security issues were fixed in Sinatra.
* bsc#1242894 * bsc#1242899 Cross-References: * CVE-2025-32441
Rack could be made to crash or allow unintended access to network services.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
* bsc#1230930 * bsc#1235773 * bsc#1237804 * bsc#1237806
A regression was identified in rexml gem. A corner case of XML namespace default namespace was not handled correctly, and thus rexml failed to parse valid XML …
An update that fixes two vulnerabilities is now available.
The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many ` `. (CVE-2024-39908)
* bsc#1230930 Cross-References: * CVE-2024-47220
* bsc#1218638 * bsc#1230848 Cross-References: * CVE-2024-21647
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
