Skip to content
OpenAdvisories
High ELSA-2025-8256 1 CVE

Important: pcs security update (Oracle Linux 9)

Published May 29, 2025 · Updated May 29, 2025

Ecosystem: Oracle Linux

Summary

[0.11.9-2.el9_6.1]
- rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 pcs 0:0.11.9-2.el9_6.1
Oracle Linux · 9 pcs-snmp 0:0.11.9-2.el9_6.1

Vulnerabilities 1

  • High 7.5
    CVE-2025-46727

    Unbounded-Parameter DoS in Rack::QueryParser

    Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses query strings and `application/x-www-form-urlencoded` bodies into Ruby data structures without imposing any limit on the number of parameters…

    rack rack rack ruby-rack Debian Ubuntu Wolfi RubyGems