SUSE-CU-2025:2837-1: Security update of bci/ruby

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/ruby
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:2837-1
Container Tags        : bci/ruby:2 , bci/ruby:2.5 , bci/ruby:2.5-31.63 , bci/ruby:latest
Container Release     : 31.63
Severity              : important
Type                  : security
References            : 1230930 1235773 1237804 1237806 CVE-2024-47220 CVE-2025-27219
                        CVE-2025-27220 
-----------------------------------------------------------------

The container bci/ruby was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:1369-1
Released:    Thu Apr 24 19:11:18 2025
Summary:     Security update for ruby2.5
Type:        security
Severity:    important
References:  1230930,1235773,1237804,1237806,CVE-2024-47220,CVE-2025-27219,CVE-2025-27220
This update for ruby2.5 fixes the following issues:

- CVE-2025-27219: Fixed denial of service in CGI::Cookie.parse (bsc#1237804)    
- CVE-2025-27220: Fixed ReDoS in CGI::Util#escapeElement (bsc#1237806)
 
Other fixes:
- Improved fix for CVE-2024-47220 (bsc#1230930, bsc#1235773) 


The following package changes have been done:

- libglib-2_0-0-2.78.6-150600.4.11.1 updated
- libruby2_5-2_5-2.5.9-150000.4.41.1 updated
- ruby2.5-stdlib-2.5.9-150000.4.41.1 updated
- ruby2.5-2.5.9-150000.4.41.1 updated
- ruby2.5-devel-2.5.9-150000.4.41.1 updated
- container:registry.suse.com-bci-bci-base-15.6-f3afe9485569457ebd4f47c3345be5e179b382f490db42fc625b2103b92069af-0 updated