Security update for ruby19 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:0914-1 Final 1 1 2017-04-03T15:26:04Z current 2017-04-03T15:26:04Z 2017-04-03T15:26:04Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ruby19 This update for ruby19 fixes the following issues: Security issue fixed: - CVE-2016-2339: heap overflow vulnerability in the Fiddle::Function.new'initialize' (bsc#1018808) Bugfixes: - fix small mistake in the backport for (bsc#986630) - HTTP Header injection in 'net/http' (bsc#986630) - make the testsuite work with our new openssl requirements The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slestso13-ruby19-13046 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20170914-1/ Link for SUSE-SU-2017:0914-1 https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00006.html E-Mail link for SUSE-SU-2017:0914-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1018808 SUSE Bug 1018808 https://bugzilla.suse.com/986630 SUSE Bug 986630 https://www.suse.com/security/cve/CVE-2016-2339/ SUSE CVE CVE-2016-2339 page SUSE Studio Onsite 1.3 SUSE Studio Onsite Runner 1.3 ruby19-1.9.3.p392-0.26.1 ruby19-devel-1.9.3.p392-0.26.1 ruby19-devel-extra-1.9.3.p392-0.26.1 ruby19-1.9.3.p392-0.26.1 as a component of SUSE Studio Onsite 1.3 ruby19-devel-1.9.3.p392-0.26.1 as a component of SUSE Studio Onsite 1.3 ruby19-devel-extra-1.9.3.p392-0.26.1 as a component of SUSE Studio Onsite 1.3 ruby19-1.9.3.p392-0.26.1 as a component of SUSE Studio Onsite Runner 1.3 ruby19-devel-1.9.3.p392-0.26.1 as a component of SUSE Studio Onsite Runner 1.3 ruby19-devel-extra-1.9.3.p392-0.26.1 as a component of SUSE Studio Onsite Runner 1.3 An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby. In Fiddle::Function.new "initialize" heap buffer "arg_types" allocation is made based on args array length. Specially constructed object passed as element of args array can increase this array size after mentioned allocation and cause heap overflow. CVE-2016-2339 SUSE Studio Onsite 1.3:ruby19-1.9.3.p392-0.26.1 SUSE Studio Onsite 1.3:ruby19-devel-1.9.3.p392-0.26.1 SUSE Studio Onsite 1.3:ruby19-devel-extra-1.9.3.p392-0.26.1 SUSE Studio Onsite Runner 1.3:ruby19-1.9.3.p392-0.26.1 SUSE Studio Onsite Runner 1.3:ruby19-devel-1.9.3.p392-0.26.1 SUSE Studio Onsite Runner 1.3:ruby19-devel-extra-1.9.3.p392-0.26.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170914-1/ https://www.suse.com/security/cve/CVE-2016-2339.html CVE-2016-2339 https://bugzilla.suse.com/1018808 SUSE Bug 1018808