SUSE-SU-2017:0948-1

Details

This update for ruby fixes the following issues:

Secuirty issues fixed:

CVE-2015-1855: Ruby OpenSSL Hostname Verification (bsc#926974)
CVE-2015-7551: Unsafe tainted string usage in Fiddle and DL (bsc#959495)

Bugfixes:

fix small mistake in the backport for (bsc#986630)

Affected Packages

ruby

SUSE Lifecycle Management Server 1.3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4SUSE Studio Onsite 1.3

Fixed in:

1.8.7.p357-0.9.19.1

ruby-devel

SUSE Lifecycle Management Server 1.3SUSE Linux Enterprise Software Development Kit 11 SP4SUSE Studio Onsite 1.3SUSE WebYast 1.3

Fixed in:

1.8.7.p357-0.9.19.1

ruby-doc-html

SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

1.8.7.p357-0.9.19.1

ruby-tk

SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

1.8.7.p357-0.9.19.1

ruby-doc-ri

SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

1.8.7.p357-0.9.19.1

ruby-examples

SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

1.8.7.p357-0.9.19.1

ruby-test-suite

SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

1.8.7.p357-0.9.19.1

References

REPORT

https://bugzilla.suse.com/926974

REPORT

https://bugzilla.suse.com/959495

REPORT

https://bugzilla.suse.com/986630

WEB

https://www.suse.com/security/cve/CVE-2015-1855

WEB

https://www.suse.com/security/cve/CVE-2015-7551

ADVISORY

https://www.suse.com/support/update/announcement/2017/suse-su-20170948-1/