Lucene search

K
suseSuseOPENSUSE-SU-2017:0933-1
HistoryApr 05, 2017 - 3:08 p.m.

Security update for ruby2.2, ruby2.3 (important)

2017-04-0515:08:17
lists.opensuse.org
23

0.011 Low

EPSS

Percentile

82.3%

This update for ruby2.2, ruby2.3 fixes the following issues:

Security issues fixed:

  • CVE-2016-2339: heap overflow vulnerability in the
    Fiddle::Function.new"initialize" (boo#1018808)
  • CVE-2015-7551: Unsafe tainted string usage in Fiddle and DL (boo#959495)

Detailed ChangeLog: