File _patchinfo of Package patchinfo.24763
<patchinfo incident="24763">
<issue tracker="cve" id="2022-30123"/>
<issue tracker="cve" id="2022-30122"/>
<issue tracker="bnc" id="1201588">Latest update for rubygem-rack breaking crowbar-init service for cloud8/cloud9</issue>
<issue tracker="bnc" id="1200750">VUL-0: CVE-2022-30123: rubygem-rack: crafted requests can cause shell escape sequences</issue>
<issue tracker="bnc" id="1200748">VUL-0: CVE-2022-30122: rubygem-rack: crafted multipart POST request may cause a DoS</issue>
<packager>pgajdos</packager>
<rating>critical</rating>
<category>security</category>
<summary>Security update for rubygem-rack</summary>
<description>This update for rubygem-rack fixes the following issues:
- CVE-2022-30122: Fixed crafted multipart POST request may cause a DoS (bsc#1200748)
- CVE-2022-30123: Fixed crafted requests can cause shell escape sequences (bsc#1200750)
The following non-security bug was fixed:
- Fixed a regression in CVE-2022-30122 patch (bsc#1201588).
</description>
</patchinfo>