SUSE-SU-2025:4264-1: ruby2.5&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise

Published

Published 26-11-2025Last modified 23-03-2026

Vulnerability summary

SUSE-SU-2025:4264-1 is a vulnerability in ruby2.5&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 8 · Downstream 0 · Related 8

CVE-2024-35221 CVE-2024-47220 CVE-2024-49761 CVE-2025-24294 CVE-2025-27219 CVE-2025-27220+2 more

Timeline

26-11-2025
PublishedVulnerability first disclosed.
23-03-2026
Last modifiedVulnerability information updated.

Description

Security update for ruby2.5 This update for ruby2.5 fixes the following issues: - CVE-2024-35221: Fixed remote DoS via YAML manifest (bsc#1225905) - CVE-2024-47220: Fixed HTTP request smuggling in WEBrick (bsc#1230930) - CVE-2024-49761: Fixed ReDOS vulnerability by updating REXML to 3.3.9 (bsc#1232440) - CVE-2025-24294: Fixed denial of service (DoS) caused by an insufficient check on the length of a decompressed domain name within a DNS packet in resolv gem (bsc#1246430) - CVE-2025-27219: Fixed denial of service in CGI::Cookie.parse (bsc#1237804) - CVE-2025-27220: Fixed ReDoS in CGI::Util#escapeElement (bsc#1237806) - CVE-2025-27221: Fixed userinfo leakage in URI#join, URI#merge and URI#+ (bsc#1237805) - CVE-2025-6442: Fixed ruby WEBrick read_header HTTP request smuggling vulnerability (bsc#1245254)