SUSE-CU-2025:1356-1: Security update of suse/rmt-server

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/rmt-server
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:1356-1
Container Tags        : suse/rmt-server:2 , suse/rmt-server:2.21 , suse/rmt-server:2.21-37.2 , suse/rmt-server:latest
Container Release     : 37.2
Severity              : important
Type                  : security
References            : 1230930 1232440 CVE-2024-47220 CVE-2024-49761 
-----------------------------------------------------------------

The container suse/rmt-server was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:736-1
Released:    Wed Feb 26 19:38:12 2025
Summary:     Security update for ruby2.5
Type:        security
Severity:    important
References:  1230930,1232440,CVE-2024-47220,CVE-2024-49761

This update for ruby2.5 fixes the following issues:

- CVE-2024-47220: Fixed a HTTP request smuggling attack in WEBrick (bsc#1230930)
- CVE-2024-49761: Fixed a ReDoS vulnerability in ruby rexml (bsc#1232440)

Other fixes:

- [ruby/uri] Fix quadratic backtracking on invalid relative URI
- [ruby/time] Make RFC2822 regexp linear
- [ruby/time] Fix quadratic backtracking on invalid time
- merge some parts of CGI 0.1.1



The following package changes have been done:

- libruby2_5-2_5-2.5.9-150000.4.36.1 updated
- ruby2.5-stdlib-2.5.9-150000.4.36.1 updated
- ruby2.5-2.5.9-150000.4.36.1 updated