Lucene search

K
suseSuseSUSE-SU-2017:0914-1
HistoryApr 03, 2017 - 9:09 p.m.

Security update for ruby19 (important)

2017-04-0321:09:44
lists.opensuse.org
22

0.011 Low

EPSS

Percentile

82.3%

This update for ruby19 fixes the following issues:

Security issue fixed:

  • CVE-2016-2339: heap overflow vulnerability in the
    Fiddle::Function.new"initialize" (bsc#1018808)

Bugfixes:

  • fix small mistake in the backport for (bsc#986630)
  • HTTP Header injection in ‘net/http’ (bsc#986630)
  • make the testsuite work with our new openssl requirements