Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-1855 (GCVE-0-2015-1855)
Vulnerability from cvelistv5
- Other
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T04:54:16.307Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://www.debian.org/security/2015/dsa-3247" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://www.debian.org/security/2015/dsa-3245" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://www.debian.org/security/2015/dsa-3246" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://puppetlabs.com/security/cve/cve-2015-1855" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://bugs.ruby-lang.org/issues/9644" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Ruby", "vendor": "Ruby", "versions": [ { "status": "affected", "version": "before 2.0.0 patchlevel 645" }, { "status": "affected", "version": "2.1.x before 2.1.6" }, { "status": "affected", "version": "and 2.2.x before 2.2.2" } ] } ], "datePublic": "2015-05-02T00:00:00", "descriptions": [ { "lang": "en", "value": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters." } ], "problemTypes": [ { "descriptions": [ { "description": "Other", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2019-11-29T20:46:48", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "http://www.debian.org/security/2015/dsa-3247" }, { "tags": [ "x_refsource_MISC" ], "url": "http://www.debian.org/security/2015/dsa-3245" }, { "tags": [ "x_refsource_MISC" ], "url": "http://www.debian.org/security/2015/dsa-3246" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/" }, { "tags": [ "x_refsource_MISC" ], "url": "https://puppetlabs.com/security/cve/cve-2015-1855" }, { "tags": [ "x_refsource_MISC" ], "url": "https://bugs.ruby-lang.org/issues/9644" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2015-1855", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Ruby", "version": { "version_data": [ { "version_value": "before 2.0.0 patchlevel 645" }, { "version_value": "2.1.x before 2.1.6" }, { "version_value": "and 2.2.x before 2.2.2" } ] } } ] }, "vendor_name": "Ruby" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Other" } ] } ] }, "references": { "reference_data": [ { "name": "http://www.debian.org/security/2015/dsa-3247", "refsource": "MISC", "url": "http://www.debian.org/security/2015/dsa-3247" }, { "name": "http://www.debian.org/security/2015/dsa-3245", "refsource": "MISC", "url": "http://www.debian.org/security/2015/dsa-3245" }, { "name": "http://www.debian.org/security/2015/dsa-3246", "refsource": "MISC", "url": "http://www.debian.org/security/2015/dsa-3246" }, { "name": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/", "refsource": "MISC", "url": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/" }, { "name": "https://puppetlabs.com/security/cve/cve-2015-1855", "refsource": "MISC", "url": "https://puppetlabs.com/security/cve/cve-2015-1855" }, { "name": "https://bugs.ruby-lang.org/issues/9644", "refsource": "MISC", "url": "https://bugs.ruby-lang.org/issues/9644" } ] } } } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2015-1855", "datePublished": "2019-11-29T20:46:48", "dateReserved": "2015-02-17T00:00:00", "dateUpdated": "2024-08-06T04:54:16.307Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2015-1855\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2019-11-29T21:15:10.807\",\"lastModified\":\"2024-11-21T02:26:16.630\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n Verified_certificate_identity en la extensi\u00f3n OpenSSL en Ruby versiones anteriores a 2.0.0 patchlevel 645, versiones 2.1.x anteriores a 2.1.6 y versiones 2.2.x anteriores 2.2.2, no comprueba apropiadamente los nombres de host, lo que permite a atacantes remotos falsificar servidores por medio de vectores relacionados con (1) m\u00faltiples wildcards, (1) wildcards en nombres IDNA, (3) sensibilidad a may\u00fasculas y min\u00fasculas y (4) caracteres no ASCII.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.1.0\",\"versionEndExcluding\":\"2.1.6\",\"matchCriteriaId\":\"C5793852-ECE3-465A-B8A5-D506744191E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.2.0\",\"versionEndExcluding\":\"2.2.2\",\"matchCriteriaId\":\"4E69BA95-2D84-4E80-9617-3B2F2B02D9E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"45B882EE-85F9-42B0-85F3-0B6A9FF4BA5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2423B85-0971-42AC-8B64-819008BC5778\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C663278-3B2A-4B7C-959A-2AA804467F21\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7927149-A76A-48BC-8405-7375FC7D7486\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:p353:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D627638-64AA-455B-9FEA-093D3773B9FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:p451:*:*:*:*:*:*\",\"matchCriteriaId\":\"46485519-C2FB-4767-B699-9F51FDCF29E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:p481:*:*:*:*:*:*\",\"matchCriteriaId\":\"19CF27FB-DCF5-4533-B309-55615AE21A63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:p576:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9865DD1-F2AF-40B6-848A-EA9FD37034DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:p594:*:*:*:*:*:*\",\"matchCriteriaId\":\"C10BD21E-B9FA-4B57-B617-0108A00D6132\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:p598:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D5ABD47-64AC-4844-B78B-F0D3BC3B8F49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:2.0.0:p643:*:*:*:*:*:*\",\"matchCriteriaId\":\"4EF7FDAD-9CAF-452D-B229-EF7C390DE712\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ruby-lang:trunk:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"50292\",\"matchCriteriaId\":\"4A56FC0D-59AE-48DD-9DD8-3CC0E6DC0F80\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F59A04-14CF-49E2-9973-645477EA09DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:puppet:puppet_agent:1.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCB7E6DC-B6C3-452B-98F7-09D0CE0879E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.0.0\",\"versionEndExcluding\":\"3.8.0\",\"matchCriteriaId\":\"82B0F981-35E1-4C9D-9D16-DDB0CA341FEF\"}]}]}],\"references\":[{\"url\":\"http://www.debian.org/security/2015/dsa-3245\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3246\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3247\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugs.ruby-lang.org/issues/9644\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://puppetlabs.com/security/cve/cve-2015-1855\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3245\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3246\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3247\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugs.ruby-lang.org/issues/9644\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://puppetlabs.com/security/cve/cve-2015-1855\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}" } }
CERTFR-2015-AVI-416
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Apple OS X. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une exécution de code arbitraire et un déni de service.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Apple OS X versions antérieures à v10.11
Vendor | Product | Description |
---|
Title | Publication Time | Tags | |||
---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [], "affected_systems_content": "\u003cP\u003eApple OS X versions ant\u00e9rieures \u00e0 v10.11\u003c/P\u003e", "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n", "cves": [ { "name": "CVE-2014-8080", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8080" }, { "name": "CVE-2015-5885", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5885" }, { "name": "CVE-2015-5851", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5851" }, { "name": "CVE-2015-5870", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5870" }, { "name": "CVE-2015-5873", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5873" }, { "name": "CVE-2015-3416", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3416" }, { "name": "CVE-2015-5867", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5867" }, { "name": "CVE-2015-0286", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0286" }, { "name": "CVE-2015-5830", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5830" }, { "name": "CVE-2014-7186", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7186" }, { "name": "CVE-2015-3415", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3415" }, { "name": "CVE-2015-5883", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5883" }, { "name": "CVE-2015-5523", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5523" }, { "name": "CVE-2015-5914", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5914" }, { "name": "CVE-2014-9652", "url": "https://www.cve.org/CVERecord?id=CVE-2014-9652" }, { "name": "CVE-2015-5875", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5875" }, { "name": "CVE-2015-5860", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5860" }, { "name": "CVE-2015-5824", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5824" }, { "name": "CVE-2015-5872", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5872" }, { "name": "CVE-2014-9705", "url": "https://www.cve.org/CVERecord?id=CVE-2014-9705" }, { "name": "CVE-2015-5522", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5522" }, { "name": "CVE-2015-5863", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5863" }, { "name": "CVE-2015-1352", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1352" }, { "name": "CVE-2014-9427", "url": "https://www.cve.org/CVERecord?id=CVE-2014-9427" }, { "name": "CVE-2015-5833", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5833" }, { "name": "CVE-2015-5840", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5840" }, { "name": "CVE-2015-5915", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5915" }, { "name": "CVE-2015-5871", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5871" }, { "name": "CVE-2015-2787", "url": "https://www.cve.org/CVERecord?id=CVE-2015-2787" }, { "name": "CVE-2014-8090", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8090" }, { "name": "CVE-2015-5836", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5836" }, { "name": "CVE-2015-5868", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5868" }, { "name": "CVE-2015-5891", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5891" }, { "name": "CVE-2015-5874", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5874" }, { "name": "CVE-2015-2305", "url": "https://www.cve.org/CVERecord?id=CVE-2015-2305" }, { "name": "CVE-2015-5887", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5887" }, { "name": "CVE-2015-5902", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5902" }, { "name": "CVE-2015-5900", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5900" }, { "name": "CVE-2015-5858", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5858" }, { "name": "CVE-2015-3414", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3414" }, { "name": "CVE-2015-5865", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5865" }, { "name": "CVE-2014-9425", "url": "https://www.cve.org/CVERecord?id=CVE-2014-9425" }, { "name": "CVE-2014-8611", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8611" }, { "name": "CVE-2015-5879", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5879" }, { "name": "CVE-2015-3330", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3330" }, { "name": "CVE-2015-5896", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5896" }, { "name": "CVE-2015-0273", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0273" }, { "name": "CVE-2014-6277", "url": "https://www.cve.org/CVERecord?id=CVE-2014-6277" }, { "name": "CVE-2015-5839", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5839" }, { "name": "CVE-2015-5893", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5893" }, { "name": "CVE-2015-3329", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3329" }, { "name": "CVE-2015-5853", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5853" }, { "name": "CVE-2015-0231", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0231" }, { "name": "CVE-2015-2301", "url": "https://www.cve.org/CVERecord?id=CVE-2015-2301" }, { "name": "CVE-2015-5882", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5882" }, { "name": "CVE-2015-5878", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5878" }, { "name": "CVE-2015-5894", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5894" }, { "name": "CVE-2015-5831", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5831" }, { "name": "CVE-2015-5869", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5869" }, { "name": "CVE-2015-1855", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1855" }, { "name": "CVE-2015-5862", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5862" }, { "name": "CVE-2014-8147", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8147" }, { "name": "CVE-2015-5889", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5889" }, { "name": "CVE-2015-5866", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5866" }, { "name": "CVE-2015-5876", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5876" }, { "name": "CVE-2014-2532", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2532" }, { "name": "CVE-2015-5912", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5912" }, { "name": "CVE-2015-5877", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5877" }, { "name": "CVE-2015-2331", "url": "https://www.cve.org/CVERecord?id=CVE-2015-2331" }, { "name": "CVE-2015-5922", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5922" }, { "name": "CVE-2015-5842", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5842" }, { "name": "CVE-2015-0287", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0287" }, { "name": "CVE-2015-1351", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1351" }, { "name": "CVE-2015-5849", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5849" }, { "name": "CVE-2015-5841", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5841" }, { "name": "CVE-2014-7187", "url": "https://www.cve.org/CVERecord?id=CVE-2014-7187" }, { "name": "CVE-2015-2783", "url": "https://www.cve.org/CVERecord?id=CVE-2015-2783" }, { "name": "CVE-2015-3785", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3785" }, { "name": "CVE-2015-5913", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5913" }, { "name": "CVE-2014-3618", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3618" }, { "name": "CVE-2015-5899", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5899" }, { "name": "CVE-2015-5847", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5847" }, { "name": "CVE-2015-0235", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0235" }, { "name": "CVE-2015-5903", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5903" }, { "name": "CVE-2015-5864", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5864" }, { "name": "CVE-2015-5917", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5917" }, { "name": "CVE-2015-0232", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0232" }, { "name": "CVE-2015-5901", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5901" }, { "name": "CVE-2015-5854", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5854" }, { "name": "CVE-2015-5881", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5881" }, { "name": "CVE-2015-5897", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5897" }, { "name": "CVE-2015-5888", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5888" }, { "name": "CVE-2015-5890", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5890" }, { "name": "CVE-2015-5884", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5884" }, { "name": "CVE-2013-3951", "url": "https://www.cve.org/CVERecord?id=CVE-2013-3951" }, { "name": "CVE-2014-9709", "url": "https://www.cve.org/CVERecord?id=CVE-2014-9709" }, { "name": "CVE-2015-5855", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5855" }, { "name": "CVE-2015-2348", "url": "https://www.cve.org/CVERecord?id=CVE-2015-2348" }, { "name": "CVE-2014-8146", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8146" } ], "initial_release_date": "2015-10-01T00:00:00", "last_revision_date": "2015-10-01T00:00:00", "links": [], "reference": "CERTFR-2015-AVI-416", "revisions": [ { "description": "version initiale.", "revision_date": "2015-10-01T00:00:00.000000" } ], "risks": [ { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" }, { "description": "Ex\u00e9cution de code arbitraire" }, { "description": "D\u00e9ni de service" }, { "description": "Contournement de la politique de s\u00e9curit\u00e9" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eApple OS X\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0\nun attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance,\nune ex\u00e9cution de code arbitraire et un d\u00e9ni de service.\n", "title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple OS X", "vendor_advisories": [ { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Apple HT205267 du 30 septembre 2015", "url": "https://support.apple.com/en-us/HT205267" } ] }
CERTFR-2015-AVI-308
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Oracle Solaris. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Contournement provisoire
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneTitle | Publication Time | Tags | |||
---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "Oracle Solaris versions 11.2 et ant\u00e9rieures", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Solaris versions 10 et ant\u00e9rieures", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } } ], "affected_systems_content": null, "content": "## Contournement provisoire\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n", "cves": [ { "name": "CVE-2014-8768", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8768" }, { "name": "CVE-2014-3566", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3566" }, { "name": "CVE-2015-1791", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1791" }, { "name": "CVE-2014-8991", "url": "https://www.cve.org/CVERecord?id=CVE-2014-8991" }, { "name": "CVE-2014-9652", "url": "https://www.cve.org/CVERecord?id=CVE-2014-9652" }, { "name": "CVE-2015-0261", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0261" }, { "name": "CVE-2014-9705", "url": "https://www.cve.org/CVERecord?id=CVE-2014-9705" }, { "name": "CVE-2015-0255", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0255" }, { "name": "CVE-2014-6511", "url": "https://www.cve.org/CVERecord?id=CVE-2014-6511" }, { "name": "CVE-2015-2787", "url": "https://www.cve.org/CVERecord?id=CVE-2015-2787" }, { "name": "CVE-2015-4000", "url": "https://www.cve.org/CVERecord?id=CVE-2015-4000" }, { "name": "CVE-2015-1789", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1789" }, { "name": "CVE-2014-9425", "url": "https://www.cve.org/CVERecord?id=CVE-2014-9425" }, { "name": "CVE-2014-9462", "url": "https://www.cve.org/CVERecord?id=CVE-2014-9462" }, { "name": "CVE-2014-9653", "url": "https://www.cve.org/CVERecord?id=CVE-2014-9653" }, { "name": "CVE-2015-0273", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0273" }, { "name": "CVE-2015-1788", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1788" }, { "name": "CVE-2015-1792", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1792" }, { "name": "CVE-2014-3710", "url": "https://www.cve.org/CVERecord?id=CVE-2014-3710" }, { "name": "CVE-2015-0231", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0231" }, { "name": "CVE-2015-3988", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3988" }, { "name": "CVE-2015-1855", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1855" }, { "name": "CVE-2015-2331", "url": "https://www.cve.org/CVERecord?id=CVE-2015-2331" }, { "name": "CVE-2015-1351", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1351" }, { "name": "CVE-2015-0232", "url": "https://www.cve.org/CVERecord?id=CVE-2015-0232" }, { "name": "CVE-2015-3294", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3294" }, { "name": "CVE-2015-2348", "url": "https://www.cve.org/CVERecord?id=CVE-2015-2348" }, { "name": "CVE-2015-1790", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1790" } ], "initial_release_date": "2015-07-15T00:00:00", "last_revision_date": "2015-07-15T00:00:00", "links": [], "reference": "CERTFR-2015-AVI-308", "revisions": [ { "description": "version initiale.", "revision_date": "2015-07-15T00:00:00.000000" } ], "risks": [ { "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Solaris\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n", "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Solaris", "vendor_advisories": [ { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 14 juillet 2015", "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html" } ] }
suse-su-2015:1889-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for ruby19", "title": "Title of the patch" }, { "category": "description", "text": "ruby19 was updated to fix two security issues.\n\nThe following vulnerabilities were fixed:\n\n* CVE-2015-1855: Ruby OpenSSL hostname verification was too permissive (bsc#926974).\n* CVE-2009-5147: DL::dlopen could have loaded a library with tainted library name even if $SAFE \u003e 0 (bsc#939860).", "title": "Description of the patch" }, { "category": "details", "text": "slestso13-ruby19-12180", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1889-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2015:1889-1", "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151889-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2015:1889-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-November/001661.html" }, { "category": "self", "summary": "SUSE Bug 926974", "url": "https://bugzilla.suse.com/926974" }, { "category": "self", "summary": "SUSE Bug 939860", "url": "https://bugzilla.suse.com/939860" }, { "category": "self", "summary": "SUSE CVE CVE-2009-5147 page", "url": "https://www.suse.com/security/cve/CVE-2009-5147/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1855 page", "url": "https://www.suse.com/security/cve/CVE-2015-1855/" } ], "title": "Security update for ruby19", "tracking": { "current_release_date": "2015-10-05T09:31:55Z", "generator": { "date": "2015-10-05T09:31:55Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2015:1889-1", "initial_release_date": "2015-10-05T09:31:55Z", "revision_history": [ { "date": "2015-10-05T09:31:55Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "ruby19-1.9.3.p392-0.23.1.x86_64", "product": { "name": "ruby19-1.9.3.p392-0.23.1.x86_64", "product_id": "ruby19-1.9.3.p392-0.23.1.x86_64" } }, { "category": "product_version", "name": "ruby19-devel-1.9.3.p392-0.23.1.x86_64", "product": { "name": "ruby19-devel-1.9.3.p392-0.23.1.x86_64", "product_id": "ruby19-devel-1.9.3.p392-0.23.1.x86_64" } }, { "category": "product_version", "name": "ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64", "product": { "name": "ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64", "product_id": "ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Studio Onsite 1.3", "product": { "name": "SUSE Studio Onsite 1.3", "product_id": "SUSE Studio Onsite 1.3", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-studioonsite:1.3" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ruby19-1.9.3.p392-0.23.1.x86_64 as component of SUSE Studio Onsite 1.3", "product_id": "SUSE Studio Onsite 1.3:ruby19-1.9.3.p392-0.23.1.x86_64" }, "product_reference": "ruby19-1.9.3.p392-0.23.1.x86_64", "relates_to_product_reference": "SUSE Studio Onsite 1.3" }, { "category": "default_component_of", "full_product_name": { "name": "ruby19-devel-1.9.3.p392-0.23.1.x86_64 as component of SUSE Studio Onsite 1.3", "product_id": "SUSE Studio Onsite 1.3:ruby19-devel-1.9.3.p392-0.23.1.x86_64" }, "product_reference": "ruby19-devel-1.9.3.p392-0.23.1.x86_64", "relates_to_product_reference": "SUSE Studio Onsite 1.3" }, { "category": "default_component_of", "full_product_name": { "name": "ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64 as component of SUSE Studio Onsite 1.3", "product_id": "SUSE Studio Onsite 1.3:ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64" }, "product_reference": "ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64", "relates_to_product_reference": "SUSE Studio Onsite 1.3" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-5147", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-5147" } ], "notes": [ { "category": "general", "text": "DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Studio Onsite 1.3:ruby19-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-5147", "url": "https://www.suse.com/security/cve/CVE-2009-5147" }, { "category": "external", "summary": "SUSE Bug 939860 for CVE-2009-5147", "url": "https://bugzilla.suse.com/939860" }, { "category": "external", "summary": "SUSE Bug 959495 for CVE-2009-5147", "url": "https://bugzilla.suse.com/959495" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Studio Onsite 1.3:ruby19-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "SUSE Studio Onsite 1.3:ruby19-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-10-05T09:31:55Z", "details": "low" } ], "title": "CVE-2009-5147" }, { "cve": "CVE-2015-1855", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-1855" } ], "notes": [ { "category": "general", "text": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Studio Onsite 1.3:ruby19-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-1855", "url": "https://www.suse.com/security/cve/CVE-2015-1855" }, { "category": "external", "summary": "SUSE Bug 926974 for CVE-2015-1855", "url": "https://bugzilla.suse.com/926974" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Studio Onsite 1.3:ruby19-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Studio Onsite 1.3:ruby19-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-1.9.3.p392-0.23.1.x86_64", "SUSE Studio Onsite 1.3:ruby19-devel-extra-1.9.3.p392-0.23.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2015-10-05T09:31:55Z", "details": "moderate" } ], "title": "CVE-2015-1855" } ] }
suse-su-2017:0948-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for ruby", "title": "Title of the patch" }, { "category": "description", "text": "\nThis update for ruby fixes the following issues:\n\nSecuirty issues fixed:\n- CVE-2015-1855: Ruby OpenSSL Hostname Verification (bsc#926974)\n- CVE-2015-7551: Unsafe tainted string usage in Fiddle and DL (bsc#959495)\n\nBugfixes:\n- fix small mistake in the backport for (bsc#986630)\n", "title": "Description of the patch" }, { "category": "details", "text": "sdksp4-ruby-13052,sleslms13-ruby-13052,slessp4-ruby-13052,slestso13-ruby-13052,slewyst13-ruby-13052", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0948-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2017:0948-1", "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170948-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2017:0948-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-April/002786.html" }, { "category": "self", "summary": "SUSE Bug 926974", "url": "https://bugzilla.suse.com/926974" }, { "category": "self", "summary": "SUSE Bug 959495", "url": "https://bugzilla.suse.com/959495" }, { "category": "self", "summary": "SUSE Bug 986630", "url": "https://bugzilla.suse.com/986630" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1855 page", "url": "https://www.suse.com/security/cve/CVE-2015-1855/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-7551 page", "url": "https://www.suse.com/security/cve/CVE-2015-7551/" } ], "title": "Security update for ruby", "tracking": { "current_release_date": "2017-04-06T09:39:44Z", "generator": { "date": "2017-04-06T09:39:44Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2017:0948-1", "initial_release_date": "2017-04-06T09:39:44Z", "revision_history": [ { "date": "2017-04-06T09:39:44Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "ruby-devel-1.8.7.p357-0.9.19.1.i586", "product": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.i586", "product_id": "ruby-devel-1.8.7.p357-0.9.19.1.i586" } }, { "category": "product_version", "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "product": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "product_id": "ruby-doc-html-1.8.7.p357-0.9.19.1.i586" } }, { "category": "product_version", "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.i586", "product": { "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.i586", "product_id": "ruby-doc-ri-1.8.7.p357-0.9.19.1.i586" } }, { "category": "product_version", "name": "ruby-examples-1.8.7.p357-0.9.19.1.i586", "product": { "name": "ruby-examples-1.8.7.p357-0.9.19.1.i586", "product_id": "ruby-examples-1.8.7.p357-0.9.19.1.i586" } }, { "category": "product_version", "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.i586", "product": { "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.i586", "product_id": "ruby-test-suite-1.8.7.p357-0.9.19.1.i586" } }, { "category": "product_version", "name": "ruby-tk-1.8.7.p357-0.9.19.1.i586", "product": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.i586", "product_id": "ruby-tk-1.8.7.p357-0.9.19.1.i586" } }, { "category": "product_version", "name": "ruby-1.8.7.p357-0.9.19.1.i586", "product": { "name": "ruby-1.8.7.p357-0.9.19.1.i586", "product_id": "ruby-1.8.7.p357-0.9.19.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "ruby-devel-1.8.7.p357-0.9.19.1.ia64", "product": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.ia64", "product_id": "ruby-devel-1.8.7.p357-0.9.19.1.ia64" } }, { "category": "product_version", "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "product": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "product_id": "ruby-doc-html-1.8.7.p357-0.9.19.1.ia64" } }, { "category": "product_version", "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64", "product": { "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64", "product_id": "ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64" } }, { "category": "product_version", "name": "ruby-examples-1.8.7.p357-0.9.19.1.ia64", "product": { "name": "ruby-examples-1.8.7.p357-0.9.19.1.ia64", "product_id": "ruby-examples-1.8.7.p357-0.9.19.1.ia64" } }, { "category": "product_version", "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.ia64", "product": { "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.ia64", "product_id": "ruby-test-suite-1.8.7.p357-0.9.19.1.ia64" } }, { "category": "product_version", "name": "ruby-tk-1.8.7.p357-0.9.19.1.ia64", "product": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.ia64", "product_id": "ruby-tk-1.8.7.p357-0.9.19.1.ia64" } }, { "category": "product_version", "name": "ruby-1.8.7.p357-0.9.19.1.ia64", "product": { "name": "ruby-1.8.7.p357-0.9.19.1.ia64", "product_id": "ruby-1.8.7.p357-0.9.19.1.ia64" } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "product": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "product_id": "ruby-devel-1.8.7.p357-0.9.19.1.ppc64" } }, { "category": "product_version", "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "product": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "product_id": "ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64" } }, { "category": "product_version", "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64", "product": { "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64", "product_id": "ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64" } }, { "category": "product_version", "name": "ruby-examples-1.8.7.p357-0.9.19.1.ppc64", "product": { "name": "ruby-examples-1.8.7.p357-0.9.19.1.ppc64", "product_id": "ruby-examples-1.8.7.p357-0.9.19.1.ppc64" } }, { "category": "product_version", "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64", "product": { "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64", "product_id": "ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64" } }, { "category": "product_version", "name": "ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "product": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "product_id": "ruby-tk-1.8.7.p357-0.9.19.1.ppc64" } }, { "category": "product_version", "name": "ruby-1.8.7.p357-0.9.19.1.ppc64", "product": { "name": "ruby-1.8.7.p357-0.9.19.1.ppc64", "product_id": "ruby-1.8.7.p357-0.9.19.1.ppc64" } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "ruby-devel-1.8.7.p357-0.9.19.1.s390x", "product": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.s390x", "product_id": "ruby-devel-1.8.7.p357-0.9.19.1.s390x" } }, { "category": "product_version", "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "product": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "product_id": "ruby-doc-html-1.8.7.p357-0.9.19.1.s390x" } }, { "category": "product_version", "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x", "product": { "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x", "product_id": "ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x" } }, { "category": "product_version", "name": "ruby-examples-1.8.7.p357-0.9.19.1.s390x", "product": { "name": "ruby-examples-1.8.7.p357-0.9.19.1.s390x", "product_id": "ruby-examples-1.8.7.p357-0.9.19.1.s390x" } }, { "category": "product_version", "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.s390x", "product": { "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.s390x", "product_id": "ruby-test-suite-1.8.7.p357-0.9.19.1.s390x" } }, { "category": "product_version", "name": "ruby-tk-1.8.7.p357-0.9.19.1.s390x", "product": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.s390x", "product_id": "ruby-tk-1.8.7.p357-0.9.19.1.s390x" } }, { "category": "product_version", "name": "ruby-1.8.7.p357-0.9.19.1.s390x", "product": { "name": "ruby-1.8.7.p357-0.9.19.1.s390x", "product_id": "ruby-1.8.7.p357-0.9.19.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "product": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "product_id": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64" } }, { "category": "product_version", "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "product": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "product_id": "ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64" } }, { "category": "product_version", "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64", "product": { "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64", "product_id": "ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64" } }, { "category": "product_version", "name": "ruby-examples-1.8.7.p357-0.9.19.1.x86_64", "product": { "name": "ruby-examples-1.8.7.p357-0.9.19.1.x86_64", "product_id": "ruby-examples-1.8.7.p357-0.9.19.1.x86_64" } }, { "category": "product_version", "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64", "product": { "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64", "product_id": "ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64" } }, { "category": "product_version", "name": "ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "product": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "product_id": "ruby-tk-1.8.7.p357-0.9.19.1.x86_64" } }, { "category": "product_version", "name": "ruby-1.8.7.p357-0.9.19.1.x86_64", "product": { "name": "ruby-1.8.7.p357-0.9.19.1.x86_64", "product_id": "ruby-1.8.7.p357-0.9.19.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 11 SP4", "product": { "name": "SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4", "product_identification_helper": { "cpe": "cpe:/a:suse:sle-sdk:11:sp4" } } }, { "category": "product_name", "name": "SUSE Lifecycle Management Server 1.3", "product": { "name": "SUSE Lifecycle Management Server 1.3", "product_id": "SUSE Lifecycle Management Server 1.3", "product_identification_helper": { "cpe": "cpe:/a:suse:sle-slms:1.3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 11 SP4", "product": { "name": "SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_sles:11:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:11:sp4" } } }, { "category": "product_name", "name": "SUSE Studio Onsite 1.3", "product": { "name": "SUSE Studio Onsite 1.3", "product_id": "SUSE Studio Onsite 1.3", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-studioonsite:1.3" } } }, { "category": "product_name", "name": "SUSE WebYast 1.3", "product": { "name": "SUSE WebYast 1.3", "product_id": "SUSE WebYast 1.3", "product_identification_helper": { "cpe": "cpe:/o:suse:webyast:1.3" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-doc-ri-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-examples-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-examples-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-examples-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-examples-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-examples-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-examples-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-examples-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-examples-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-examples-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-examples-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-test-suite-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-test-suite-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-test-suite-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4", "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Lifecycle Management Server 1.3", "product_id": "SUSE Lifecycle Management Server 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Lifecycle Management Server 1.3" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", "product_id": "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-tk-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE Studio Onsite 1.3", "product_id": "SUSE Studio Onsite 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE Studio Onsite 1.3" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.i586 as component of SUSE WebYast 1.3", "product_id": "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.i586" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.i586", "relates_to_product_reference": "SUSE WebYast 1.3" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.ia64 as component of SUSE WebYast 1.3", "product_id": "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ia64" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.ia64", "relates_to_product_reference": "SUSE WebYast 1.3" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.ppc64 as component of SUSE WebYast 1.3", "product_id": "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ppc64" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "relates_to_product_reference": "SUSE WebYast 1.3" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.s390x as component of SUSE WebYast 1.3", "product_id": "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.s390x" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.s390x", "relates_to_product_reference": "SUSE WebYast 1.3" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64 as component of SUSE WebYast 1.3", "product_id": "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64" }, "product_reference": "ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "relates_to_product_reference": "SUSE WebYast 1.3" } ] }, "vulnerabilities": [ { "cve": "CVE-2015-1855", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-1855" } ], "notes": [ { "category": "general", "text": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Lifecycle Management Server 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Studio Onsite 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.i586", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ia64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.s390x", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-1855", "url": "https://www.suse.com/security/cve/CVE-2015-1855" }, { "category": "external", "summary": "SUSE Bug 926974 for CVE-2015-1855", "url": "https://bugzilla.suse.com/926974" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Lifecycle Management Server 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Studio Onsite 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.i586", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ia64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.s390x", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Lifecycle Management Server 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Studio Onsite 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.i586", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ia64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.s390x", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-06T09:39:44Z", "details": "moderate" } ], "title": "CVE-2015-1855" }, { "cve": "CVE-2015-7551", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-7551" } ], "notes": [ { "category": "general", "text": "The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Lifecycle Management Server 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Studio Onsite 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.i586", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ia64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.s390x", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-7551", "url": "https://www.suse.com/security/cve/CVE-2015-7551" }, { "category": "external", "summary": "SUSE Bug 939860 for CVE-2015-7551", "url": "https://bugzilla.suse.com/939860" }, { "category": "external", "summary": "SUSE Bug 959495 for CVE-2015-7551", "url": "https://bugzilla.suse.com/959495" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Lifecycle Management Server 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-html-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-doc-ri-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-examples-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-test-suite-1.8.7.p357-0.9.19.1.x86_64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.i586", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ia64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.ppc64", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.s390x", "SUSE Linux Enterprise Software Development Kit 11 SP4:ruby-tk-1.8.7.p357-0.9.19.1.x86_64", "SUSE Studio Onsite 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.i586", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ia64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.ppc64", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.s390x", "SUSE WebYast 1.3:ruby-devel-1.8.7.p357-0.9.19.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-06T09:39:44Z", "details": "moderate" } ], "title": "CVE-2015-7551" } ] }
suse-su-2017:1067-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for ruby2.1", "title": "Title of the patch" }, { "category": "description", "text": "\nThis ruby2.1 update to version 2.1.9 fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2016-2339: heap overflow vulnerability in the Fiddle::Function.new\u0027initialize\u0027 (bsc#1018808)\n- CVE-2015-7551: Unsafe tainted string usage in Fiddle and DL (bsc#959495)\n- CVE-2015-3900: hostname validation does not work when fetching gems or making API requests (bsc#936032)\n- CVE-2015-1855: Ruby\u0027a OpenSSL extension suffers a vulnerability through overly permissive matching of\n hostnames (bsc#926974)\n- CVE-2014-4975: off-by-one stack-based buffer overflow in the encodes() function (bsc#887877)\n\nBugfixes:\n- SUSEconnect doesn\u0027t handle domain wildcards in no_proxy environment variable properly (bsc#1014863)\n- Segmentation fault after pack \u0026 ioctl \u0026 unpack (bsc#909695)\n- Ruby:HTTP Header injection in \u0027net/http\u0027 (bsc#986630)\n\nChangeLog:\n- http://svn.ruby-lang.org/repos/ruby/tags/v2_1_9/ChangeLog\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2017-624,SUSE-SLE-DESKTOP-12-SP1-2017-624,SUSE-SLE-DESKTOP-12-SP2-2017-624,SUSE-SLE-RPI-12-SP2-2017-624,SUSE-SLE-SDK-12-SP1-2017-624,SUSE-SLE-SDK-12-SP2-2017-624,SUSE-SLE-SERVER-12-SP1-2017-624,SUSE-SLE-SERVER-12-SP2-2017-624", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1067-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2017:1067-1", "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171067-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2017:1067-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-April/002820.html" }, { "category": "self", "summary": "SUSE Bug 1014863", "url": "https://bugzilla.suse.com/1014863" }, { "category": "self", "summary": "SUSE Bug 1018808", "url": "https://bugzilla.suse.com/1018808" }, { "category": "self", "summary": "SUSE Bug 887877", "url": "https://bugzilla.suse.com/887877" }, { "category": "self", "summary": "SUSE Bug 909695", "url": "https://bugzilla.suse.com/909695" }, { "category": "self", "summary": "SUSE Bug 926974", "url": "https://bugzilla.suse.com/926974" }, { "category": "self", "summary": "SUSE Bug 936032", "url": "https://bugzilla.suse.com/936032" }, { "category": "self", "summary": "SUSE Bug 959495", "url": "https://bugzilla.suse.com/959495" }, { "category": "self", "summary": "SUSE Bug 986630", "url": "https://bugzilla.suse.com/986630" }, { "category": "self", "summary": "SUSE CVE CVE-2014-4975 page", "url": "https://www.suse.com/security/cve/CVE-2014-4975/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1855 page", "url": "https://www.suse.com/security/cve/CVE-2015-1855/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3900 page", "url": "https://www.suse.com/security/cve/CVE-2015-3900/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-7551 page", "url": "https://www.suse.com/security/cve/CVE-2015-7551/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2339 page", "url": "https://www.suse.com/security/cve/CVE-2016-2339/" } ], "title": "Security update for ruby2.1", "tracking": { "current_release_date": "2017-04-20T06:35:59Z", "generator": { "date": "2017-04-20T06:35:59Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2017:1067-1", "initial_release_date": "2017-04-20T06:35:59Z", "revision_history": [ { "date": "2017-04-20T06:35:59Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libruby2_1-2_1-2.1.9-15.1.aarch64", "product": { "name": "libruby2_1-2_1-2.1.9-15.1.aarch64", "product_id": "libruby2_1-2_1-2.1.9-15.1.aarch64" } }, { "category": "product_version", "name": "ruby2.1-2.1.9-15.1.aarch64", "product": { "name": "ruby2.1-2.1.9-15.1.aarch64", "product_id": "ruby2.1-2.1.9-15.1.aarch64" } }, { "category": "product_version", "name": "ruby2.1-stdlib-2.1.9-15.1.aarch64", "product": { "name": "ruby2.1-stdlib-2.1.9-15.1.aarch64", "product_id": "ruby2.1-stdlib-2.1.9-15.1.aarch64" } }, { "category": "product_version", "name": "ruby2.1-devel-2.1.9-15.1.aarch64", "product": { "name": "ruby2.1-devel-2.1.9-15.1.aarch64", "product_id": "ruby2.1-devel-2.1.9-15.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "ruby2.1-devel-2.1.9-15.1.ppc64le", "product": { "name": "ruby2.1-devel-2.1.9-15.1.ppc64le", "product_id": "ruby2.1-devel-2.1.9-15.1.ppc64le" } }, { "category": "product_version", "name": "libruby2_1-2_1-2.1.9-15.1.ppc64le", "product": { "name": "libruby2_1-2_1-2.1.9-15.1.ppc64le", "product_id": "libruby2_1-2_1-2.1.9-15.1.ppc64le" } }, { "category": "product_version", "name": "ruby2.1-2.1.9-15.1.ppc64le", "product": { "name": "ruby2.1-2.1.9-15.1.ppc64le", "product_id": "ruby2.1-2.1.9-15.1.ppc64le" } }, { "category": "product_version", "name": "ruby2.1-stdlib-2.1.9-15.1.ppc64le", "product": { "name": "ruby2.1-stdlib-2.1.9-15.1.ppc64le", "product_id": "ruby2.1-stdlib-2.1.9-15.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "ruby2.1-devel-2.1.9-15.1.s390x", "product": { "name": "ruby2.1-devel-2.1.9-15.1.s390x", "product_id": "ruby2.1-devel-2.1.9-15.1.s390x" } }, { "category": "product_version", "name": "libruby2_1-2_1-2.1.9-15.1.s390x", "product": { "name": "libruby2_1-2_1-2.1.9-15.1.s390x", "product_id": "libruby2_1-2_1-2.1.9-15.1.s390x" } }, { "category": "product_version", "name": "ruby2.1-2.1.9-15.1.s390x", "product": { "name": "ruby2.1-2.1.9-15.1.s390x", "product_id": "ruby2.1-2.1.9-15.1.s390x" } }, { "category": "product_version", "name": "ruby2.1-stdlib-2.1.9-15.1.s390x", "product": { "name": "ruby2.1-stdlib-2.1.9-15.1.s390x", "product_id": "ruby2.1-stdlib-2.1.9-15.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libruby2_1-2_1-2.1.9-15.1.x86_64", "product": { "name": "libruby2_1-2_1-2.1.9-15.1.x86_64", "product_id": "libruby2_1-2_1-2.1.9-15.1.x86_64" } }, { "category": "product_version", "name": "ruby2.1-2.1.9-15.1.x86_64", "product": { "name": "ruby2.1-2.1.9-15.1.x86_64", "product_id": "ruby2.1-2.1.9-15.1.x86_64" } }, { "category": "product_version", "name": "ruby2.1-stdlib-2.1.9-15.1.x86_64", "product": { "name": "ruby2.1-stdlib-2.1.9-15.1.x86_64", "product_id": "ruby2.1-stdlib-2.1.9-15.1.x86_64" } }, { "category": "product_version", "name": "ruby2.1-devel-2.1.9-15.1.x86_64", "product": { "name": "ruby2.1-devel-2.1.9-15.1.x86_64", "product_id": "ruby2.1-devel-2.1.9-15.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 12 SP1", "product": { "name": "SUSE Linux Enterprise Desktop 12 SP1", "product_id": "SUSE Linux Enterprise Desktop 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sled:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 12 SP2", "product": { "name": "SUSE Linux Enterprise Desktop 12 SP2", "product_id": "SUSE Linux Enterprise Desktop 12 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sled:12:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", "product": { "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 12 SP1", "product": { "name": "SUSE Linux Enterprise Software Development Kit 12 SP1", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-sdk:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 12 SP2", "product": { "name": "SUSE Linux Enterprise Software Development Kit 12 SP2", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-sdk:12:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP1", "product": { "name": "SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP2", "product": { "name": "SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1", "product_id": "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1", "product_id": "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1", "product_id": "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2", "product_id": "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2", "product_id": "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2", "product_id": "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64" }, "product_reference": "ruby2.1-2.1.9-15.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-devel-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le" }, "product_reference": "ruby2.1-devel-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-devel-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x" }, "product_reference": "ruby2.1-devel-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-devel-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-devel-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-devel-2.1.9-15.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64" }, "product_reference": "ruby2.1-devel-2.1.9-15.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-devel-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le" }, "product_reference": "ruby2.1-devel-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-devel-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x" }, "product_reference": "ruby2.1-devel-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-devel-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-devel-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le" }, "product_reference": "ruby2.1-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x" }, "product_reference": "ruby2.1-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le" }, "product_reference": "ruby2.1-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x" }, "product_reference": "ruby2.1-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64" }, "product_reference": "ruby2.1-2.1.9-15.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le" }, "product_reference": "ruby2.1-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x" }, "product_reference": "ruby2.1-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2", "product_id": "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_1-2_1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64" }, "product_reference": "libruby2_1-2_1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64" }, "product_reference": "ruby2.1-2.1.9-15.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le" }, "product_reference": "ruby2.1-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x" }, "product_reference": "ruby2.1-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.1-stdlib-2.1.9-15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64" }, "product_reference": "ruby2.1-stdlib-2.1.9-15.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2" } ] }, "vulnerabilities": [ { "cve": "CVE-2014-4975", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-4975" } ], "notes": [ { "category": "general", "text": "Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-4975", "url": "https://www.suse.com/security/cve/CVE-2014-4975" }, { "category": "external", "summary": "SUSE Bug 887877 for CVE-2014-4975", "url": "https://bugzilla.suse.com/887877" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-20T06:35:59Z", "details": "moderate" } ], "title": "CVE-2014-4975" }, { "cve": "CVE-2015-1855", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-1855" } ], "notes": [ { "category": "general", "text": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-1855", "url": "https://www.suse.com/security/cve/CVE-2015-1855" }, { "category": "external", "summary": "SUSE Bug 926974 for CVE-2015-1855", "url": "https://bugzilla.suse.com/926974" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-20T06:35:59Z", "details": "moderate" } ], "title": "CVE-2015-1855" }, { "cve": "CVE-2015-3900", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3900" } ], "notes": [ { "category": "general", "text": "RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a \"DNS hijack attack.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3900", "url": "https://www.suse.com/security/cve/CVE-2015-3900" }, { "category": "external", "summary": "SUSE Bug 936032 for CVE-2015-3900", "url": "https://bugzilla.suse.com/936032" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-20T06:35:59Z", "details": "moderate" } ], "title": "CVE-2015-3900" }, { "cve": "CVE-2015-7551", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-7551" } ], "notes": [ { "category": "general", "text": "The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-7551", "url": "https://www.suse.com/security/cve/CVE-2015-7551" }, { "category": "external", "summary": "SUSE Bug 939860 for CVE-2015-7551", "url": "https://bugzilla.suse.com/939860" }, { "category": "external", "summary": "SUSE Bug 959495 for CVE-2015-7551", "url": "https://bugzilla.suse.com/959495" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-20T06:35:59Z", "details": "moderate" } ], "title": "CVE-2015-7551" }, { "cve": "CVE-2016-2339", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-2339" } ], "notes": [ { "category": "general", "text": "An exploitable heap overflow vulnerability exists in the Fiddle::Function.new \"initialize\" function functionality of Ruby. In Fiddle::Function.new \"initialize\" heap buffer \"arg_types\" allocation is made based on args array length. Specially constructed object passed as element of args array can increase this array size after mentioned allocation and cause heap overflow.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-2339", "url": "https://www.suse.com/security/cve/CVE-2016-2339" }, { "category": "external", "summary": "SUSE Bug 1018808 for CVE-2016-2339", "url": "https://bugzilla.suse.com/1018808" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Desktop 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libruby2_1-2_1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ruby2.1-stdlib-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP1:ruby2.1-devel-2.1.9-15.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP2:ruby2.1-devel-2.1.9-15.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2017-04-20T06:35:59Z", "details": "moderate" } ], "title": "CVE-2016-2339" } ] }
opensuse-su-2024:10090-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "libruby2_3-2_3-2.3.1-1.6 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the libruby2_3-2_3-2.3.1-1.6 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10090", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10090-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1855 page", "url": "https://www.suse.com/security/cve/CVE-2015-1855/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3900 page", "url": "https://www.suse.com/security/cve/CVE-2015-3900/" } ], "title": "libruby2_3-2_3-2.3.1-1.6 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10090-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libruby2_3-2_3-2.3.1-1.6.aarch64", "product": { "name": "libruby2_3-2_3-2.3.1-1.6.aarch64", "product_id": "libruby2_3-2_3-2.3.1-1.6.aarch64" } }, { "category": "product_version", "name": "ruby2.3-2.3.1-1.6.aarch64", "product": { "name": "ruby2.3-2.3.1-1.6.aarch64", "product_id": "ruby2.3-2.3.1-1.6.aarch64" } }, { "category": "product_version", "name": "ruby2.3-devel-2.3.1-1.6.aarch64", "product": { "name": "ruby2.3-devel-2.3.1-1.6.aarch64", "product_id": "ruby2.3-devel-2.3.1-1.6.aarch64" } }, { "category": "product_version", "name": "ruby2.3-devel-extra-2.3.1-1.6.aarch64", "product": { "name": "ruby2.3-devel-extra-2.3.1-1.6.aarch64", "product_id": "ruby2.3-devel-extra-2.3.1-1.6.aarch64" } }, { "category": "product_version", "name": "ruby2.3-doc-2.3.1-1.6.aarch64", "product": { "name": "ruby2.3-doc-2.3.1-1.6.aarch64", "product_id": "ruby2.3-doc-2.3.1-1.6.aarch64" } }, { "category": "product_version", "name": "ruby2.3-doc-ri-2.3.1-1.6.aarch64", "product": { "name": "ruby2.3-doc-ri-2.3.1-1.6.aarch64", "product_id": "ruby2.3-doc-ri-2.3.1-1.6.aarch64" } }, { "category": "product_version", "name": "ruby2.3-stdlib-2.3.1-1.6.aarch64", "product": { "name": "ruby2.3-stdlib-2.3.1-1.6.aarch64", "product_id": "ruby2.3-stdlib-2.3.1-1.6.aarch64" } }, { "category": "product_version", "name": "ruby2.3-tk-2.3.1-1.6.aarch64", "product": { "name": "ruby2.3-tk-2.3.1-1.6.aarch64", "product_id": "ruby2.3-tk-2.3.1-1.6.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libruby2_3-2_3-2.3.1-1.6.ppc64le", "product": { "name": "libruby2_3-2_3-2.3.1-1.6.ppc64le", "product_id": "libruby2_3-2_3-2.3.1-1.6.ppc64le" } }, { "category": "product_version", "name": "ruby2.3-2.3.1-1.6.ppc64le", "product": { "name": "ruby2.3-2.3.1-1.6.ppc64le", "product_id": "ruby2.3-2.3.1-1.6.ppc64le" } }, { "category": "product_version", "name": "ruby2.3-devel-2.3.1-1.6.ppc64le", "product": { "name": "ruby2.3-devel-2.3.1-1.6.ppc64le", "product_id": "ruby2.3-devel-2.3.1-1.6.ppc64le" } }, { "category": "product_version", "name": "ruby2.3-devel-extra-2.3.1-1.6.ppc64le", "product": { "name": "ruby2.3-devel-extra-2.3.1-1.6.ppc64le", "product_id": "ruby2.3-devel-extra-2.3.1-1.6.ppc64le" } }, { "category": "product_version", "name": "ruby2.3-doc-2.3.1-1.6.ppc64le", "product": { "name": "ruby2.3-doc-2.3.1-1.6.ppc64le", "product_id": "ruby2.3-doc-2.3.1-1.6.ppc64le" } }, { "category": "product_version", "name": "ruby2.3-doc-ri-2.3.1-1.6.ppc64le", "product": { "name": "ruby2.3-doc-ri-2.3.1-1.6.ppc64le", "product_id": "ruby2.3-doc-ri-2.3.1-1.6.ppc64le" } }, { "category": "product_version", "name": "ruby2.3-stdlib-2.3.1-1.6.ppc64le", "product": { "name": "ruby2.3-stdlib-2.3.1-1.6.ppc64le", "product_id": "ruby2.3-stdlib-2.3.1-1.6.ppc64le" } }, { "category": "product_version", "name": "ruby2.3-tk-2.3.1-1.6.ppc64le", "product": { "name": "ruby2.3-tk-2.3.1-1.6.ppc64le", "product_id": "ruby2.3-tk-2.3.1-1.6.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libruby2_3-2_3-2.3.1-1.6.s390x", "product": { "name": "libruby2_3-2_3-2.3.1-1.6.s390x", "product_id": "libruby2_3-2_3-2.3.1-1.6.s390x" } }, { "category": "product_version", "name": "ruby2.3-2.3.1-1.6.s390x", "product": { "name": "ruby2.3-2.3.1-1.6.s390x", "product_id": "ruby2.3-2.3.1-1.6.s390x" } }, { "category": "product_version", "name": "ruby2.3-devel-2.3.1-1.6.s390x", "product": { "name": "ruby2.3-devel-2.3.1-1.6.s390x", "product_id": "ruby2.3-devel-2.3.1-1.6.s390x" } }, { "category": "product_version", "name": "ruby2.3-devel-extra-2.3.1-1.6.s390x", "product": { "name": "ruby2.3-devel-extra-2.3.1-1.6.s390x", "product_id": "ruby2.3-devel-extra-2.3.1-1.6.s390x" } }, { "category": "product_version", "name": "ruby2.3-doc-2.3.1-1.6.s390x", "product": { "name": "ruby2.3-doc-2.3.1-1.6.s390x", "product_id": "ruby2.3-doc-2.3.1-1.6.s390x" } }, { "category": "product_version", "name": "ruby2.3-doc-ri-2.3.1-1.6.s390x", "product": { "name": "ruby2.3-doc-ri-2.3.1-1.6.s390x", "product_id": "ruby2.3-doc-ri-2.3.1-1.6.s390x" } }, { "category": "product_version", "name": "ruby2.3-stdlib-2.3.1-1.6.s390x", "product": { "name": "ruby2.3-stdlib-2.3.1-1.6.s390x", "product_id": "ruby2.3-stdlib-2.3.1-1.6.s390x" } }, { "category": "product_version", "name": "ruby2.3-tk-2.3.1-1.6.s390x", "product": { "name": "ruby2.3-tk-2.3.1-1.6.s390x", "product_id": "ruby2.3-tk-2.3.1-1.6.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libruby2_3-2_3-2.3.1-1.6.x86_64", "product": { "name": "libruby2_3-2_3-2.3.1-1.6.x86_64", "product_id": "libruby2_3-2_3-2.3.1-1.6.x86_64" } }, { "category": "product_version", "name": "ruby2.3-2.3.1-1.6.x86_64", "product": { "name": "ruby2.3-2.3.1-1.6.x86_64", "product_id": "ruby2.3-2.3.1-1.6.x86_64" } }, { "category": "product_version", "name": "ruby2.3-devel-2.3.1-1.6.x86_64", "product": { "name": "ruby2.3-devel-2.3.1-1.6.x86_64", "product_id": "ruby2.3-devel-2.3.1-1.6.x86_64" } }, { "category": "product_version", "name": "ruby2.3-devel-extra-2.3.1-1.6.x86_64", "product": { "name": "ruby2.3-devel-extra-2.3.1-1.6.x86_64", "product_id": "ruby2.3-devel-extra-2.3.1-1.6.x86_64" } }, { "category": "product_version", "name": "ruby2.3-doc-2.3.1-1.6.x86_64", "product": { "name": "ruby2.3-doc-2.3.1-1.6.x86_64", "product_id": "ruby2.3-doc-2.3.1-1.6.x86_64" } }, { "category": "product_version", "name": "ruby2.3-doc-ri-2.3.1-1.6.x86_64", "product": { "name": "ruby2.3-doc-ri-2.3.1-1.6.x86_64", "product_id": "ruby2.3-doc-ri-2.3.1-1.6.x86_64" } }, { "category": "product_version", "name": "ruby2.3-stdlib-2.3.1-1.6.x86_64", "product": { "name": "ruby2.3-stdlib-2.3.1-1.6.x86_64", "product_id": "ruby2.3-stdlib-2.3.1-1.6.x86_64" } }, { "category": "product_version", "name": "ruby2.3-tk-2.3.1-1.6.x86_64", "product": { "name": "ruby2.3-tk-2.3.1-1.6.x86_64", "product_id": "ruby2.3-tk-2.3.1-1.6.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libruby2_3-2_3-2.3.1-1.6.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.aarch64" }, "product_reference": "libruby2_3-2_3-2.3.1-1.6.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_3-2_3-2.3.1-1.6.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.ppc64le" }, "product_reference": "libruby2_3-2_3-2.3.1-1.6.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_3-2_3-2.3.1-1.6.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.s390x" }, "product_reference": "libruby2_3-2_3-2.3.1-1.6.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_3-2_3-2.3.1-1.6.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.x86_64" }, "product_reference": "libruby2_3-2_3-2.3.1-1.6.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-2.3.1-1.6.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.aarch64" }, "product_reference": "ruby2.3-2.3.1-1.6.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-2.3.1-1.6.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.ppc64le" }, "product_reference": "ruby2.3-2.3.1-1.6.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-2.3.1-1.6.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.s390x" }, "product_reference": "ruby2.3-2.3.1-1.6.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-2.3.1-1.6.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.x86_64" }, "product_reference": "ruby2.3-2.3.1-1.6.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-devel-2.3.1-1.6.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.aarch64" }, "product_reference": "ruby2.3-devel-2.3.1-1.6.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-devel-2.3.1-1.6.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.ppc64le" }, "product_reference": "ruby2.3-devel-2.3.1-1.6.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-devel-2.3.1-1.6.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.s390x" }, "product_reference": "ruby2.3-devel-2.3.1-1.6.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-devel-2.3.1-1.6.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.x86_64" }, "product_reference": "ruby2.3-devel-2.3.1-1.6.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-devel-extra-2.3.1-1.6.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.aarch64" }, "product_reference": "ruby2.3-devel-extra-2.3.1-1.6.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-devel-extra-2.3.1-1.6.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.ppc64le" }, "product_reference": "ruby2.3-devel-extra-2.3.1-1.6.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-devel-extra-2.3.1-1.6.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.s390x" }, "product_reference": "ruby2.3-devel-extra-2.3.1-1.6.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-devel-extra-2.3.1-1.6.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.x86_64" }, "product_reference": "ruby2.3-devel-extra-2.3.1-1.6.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-doc-2.3.1-1.6.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.aarch64" }, "product_reference": "ruby2.3-doc-2.3.1-1.6.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-doc-2.3.1-1.6.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.ppc64le" }, "product_reference": "ruby2.3-doc-2.3.1-1.6.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-doc-2.3.1-1.6.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.s390x" }, "product_reference": "ruby2.3-doc-2.3.1-1.6.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-doc-2.3.1-1.6.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.x86_64" }, "product_reference": "ruby2.3-doc-2.3.1-1.6.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-doc-ri-2.3.1-1.6.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.aarch64" }, "product_reference": "ruby2.3-doc-ri-2.3.1-1.6.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-doc-ri-2.3.1-1.6.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.ppc64le" }, "product_reference": "ruby2.3-doc-ri-2.3.1-1.6.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-doc-ri-2.3.1-1.6.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.s390x" }, "product_reference": "ruby2.3-doc-ri-2.3.1-1.6.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-doc-ri-2.3.1-1.6.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.x86_64" }, "product_reference": "ruby2.3-doc-ri-2.3.1-1.6.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-stdlib-2.3.1-1.6.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.aarch64" }, "product_reference": "ruby2.3-stdlib-2.3.1-1.6.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-stdlib-2.3.1-1.6.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.ppc64le" }, "product_reference": "ruby2.3-stdlib-2.3.1-1.6.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-stdlib-2.3.1-1.6.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.s390x" }, "product_reference": "ruby2.3-stdlib-2.3.1-1.6.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-stdlib-2.3.1-1.6.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.x86_64" }, "product_reference": "ruby2.3-stdlib-2.3.1-1.6.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-tk-2.3.1-1.6.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.aarch64" }, "product_reference": "ruby2.3-tk-2.3.1-1.6.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-tk-2.3.1-1.6.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.ppc64le" }, "product_reference": "ruby2.3-tk-2.3.1-1.6.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-tk-2.3.1-1.6.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.s390x" }, "product_reference": "ruby2.3-tk-2.3.1-1.6.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.3-tk-2.3.1-1.6.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.x86_64" }, "product_reference": "ruby2.3-tk-2.3.1-1.6.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2015-1855", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-1855" } ], "notes": [ { "category": "general", "text": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.s390x", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-1855", "url": "https://www.suse.com/security/cve/CVE-2015-1855" }, { "category": "external", "summary": "SUSE Bug 926974 for CVE-2015-1855", "url": "https://bugzilla.suse.com/926974" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.s390x", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.s390x", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2015-1855" }, { "cve": "CVE-2015-3900", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3900" } ], "notes": [ { "category": "general", "text": "RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a \"DNS hijack attack.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.s390x", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3900", "url": "https://www.suse.com/security/cve/CVE-2015-3900" }, { "category": "external", "summary": "SUSE Bug 936032 for CVE-2015-3900", "url": "https://bugzilla.suse.com/936032" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.s390x", "openSUSE Tumbleweed:libruby2_3-2_3-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-devel-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-devel-extra-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-doc-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-doc-ri-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-stdlib-2.3.1-1.6.x86_64", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.aarch64", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.ppc64le", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.s390x", "openSUSE Tumbleweed:ruby2.3-tk-2.3.1-1.6.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2015-3900" } ] }
opensuse-su-2024:10481-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "libruby2_2-2_2-2.2.5-1.5 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the libruby2_2-2_2-2.2.5-1.5 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10481", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10481-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1855 page", "url": "https://www.suse.com/security/cve/CVE-2015-1855/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3900 page", "url": "https://www.suse.com/security/cve/CVE-2015-3900/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-7551 page", "url": "https://www.suse.com/security/cve/CVE-2015-7551/" } ], "title": "libruby2_2-2_2-2.2.5-1.5 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10481-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libruby2_2-2_2-2.2.5-1.5.aarch64", "product": { "name": "libruby2_2-2_2-2.2.5-1.5.aarch64", "product_id": "libruby2_2-2_2-2.2.5-1.5.aarch64" } }, { "category": "product_version", "name": "ruby2.2-2.2.5-1.5.aarch64", "product": { "name": "ruby2.2-2.2.5-1.5.aarch64", "product_id": "ruby2.2-2.2.5-1.5.aarch64" } }, { "category": "product_version", "name": "ruby2.2-devel-2.2.5-1.5.aarch64", "product": { "name": "ruby2.2-devel-2.2.5-1.5.aarch64", "product_id": "ruby2.2-devel-2.2.5-1.5.aarch64" } }, { "category": "product_version", "name": "ruby2.2-devel-extra-2.2.5-1.5.aarch64", "product": { "name": "ruby2.2-devel-extra-2.2.5-1.5.aarch64", "product_id": "ruby2.2-devel-extra-2.2.5-1.5.aarch64" } }, { "category": "product_version", "name": "ruby2.2-doc-2.2.5-1.5.aarch64", "product": { "name": "ruby2.2-doc-2.2.5-1.5.aarch64", "product_id": "ruby2.2-doc-2.2.5-1.5.aarch64" } }, { "category": "product_version", "name": "ruby2.2-doc-ri-2.2.5-1.5.aarch64", "product": { "name": "ruby2.2-doc-ri-2.2.5-1.5.aarch64", "product_id": "ruby2.2-doc-ri-2.2.5-1.5.aarch64" } }, { "category": "product_version", "name": "ruby2.2-stdlib-2.2.5-1.5.aarch64", "product": { "name": "ruby2.2-stdlib-2.2.5-1.5.aarch64", "product_id": "ruby2.2-stdlib-2.2.5-1.5.aarch64" } }, { "category": "product_version", "name": "ruby2.2-tk-2.2.5-1.5.aarch64", "product": { "name": "ruby2.2-tk-2.2.5-1.5.aarch64", "product_id": "ruby2.2-tk-2.2.5-1.5.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libruby2_2-2_2-2.2.5-1.5.ppc64le", "product": { "name": "libruby2_2-2_2-2.2.5-1.5.ppc64le", "product_id": "libruby2_2-2_2-2.2.5-1.5.ppc64le" } }, { "category": "product_version", "name": "ruby2.2-2.2.5-1.5.ppc64le", "product": { "name": "ruby2.2-2.2.5-1.5.ppc64le", "product_id": "ruby2.2-2.2.5-1.5.ppc64le" } }, { "category": "product_version", "name": "ruby2.2-devel-2.2.5-1.5.ppc64le", "product": { "name": "ruby2.2-devel-2.2.5-1.5.ppc64le", "product_id": "ruby2.2-devel-2.2.5-1.5.ppc64le" } }, { "category": "product_version", "name": "ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "product": { "name": "ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "product_id": "ruby2.2-devel-extra-2.2.5-1.5.ppc64le" } }, { "category": "product_version", "name": "ruby2.2-doc-2.2.5-1.5.ppc64le", "product": { "name": "ruby2.2-doc-2.2.5-1.5.ppc64le", "product_id": "ruby2.2-doc-2.2.5-1.5.ppc64le" } }, { "category": "product_version", "name": "ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "product": { "name": "ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "product_id": "ruby2.2-doc-ri-2.2.5-1.5.ppc64le" } }, { "category": "product_version", "name": "ruby2.2-stdlib-2.2.5-1.5.ppc64le", "product": { "name": "ruby2.2-stdlib-2.2.5-1.5.ppc64le", "product_id": "ruby2.2-stdlib-2.2.5-1.5.ppc64le" } }, { "category": "product_version", "name": "ruby2.2-tk-2.2.5-1.5.ppc64le", "product": { "name": "ruby2.2-tk-2.2.5-1.5.ppc64le", "product_id": "ruby2.2-tk-2.2.5-1.5.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libruby2_2-2_2-2.2.5-1.5.s390x", "product": { "name": "libruby2_2-2_2-2.2.5-1.5.s390x", "product_id": "libruby2_2-2_2-2.2.5-1.5.s390x" } }, { "category": "product_version", "name": "ruby2.2-2.2.5-1.5.s390x", "product": { "name": "ruby2.2-2.2.5-1.5.s390x", "product_id": "ruby2.2-2.2.5-1.5.s390x" } }, { "category": "product_version", "name": "ruby2.2-devel-2.2.5-1.5.s390x", "product": { "name": "ruby2.2-devel-2.2.5-1.5.s390x", "product_id": "ruby2.2-devel-2.2.5-1.5.s390x" } }, { "category": "product_version", "name": "ruby2.2-devel-extra-2.2.5-1.5.s390x", "product": { "name": "ruby2.2-devel-extra-2.2.5-1.5.s390x", "product_id": "ruby2.2-devel-extra-2.2.5-1.5.s390x" } }, { "category": "product_version", "name": "ruby2.2-doc-2.2.5-1.5.s390x", "product": { "name": "ruby2.2-doc-2.2.5-1.5.s390x", "product_id": "ruby2.2-doc-2.2.5-1.5.s390x" } }, { "category": "product_version", "name": "ruby2.2-doc-ri-2.2.5-1.5.s390x", "product": { "name": "ruby2.2-doc-ri-2.2.5-1.5.s390x", "product_id": "ruby2.2-doc-ri-2.2.5-1.5.s390x" } }, { "category": "product_version", "name": "ruby2.2-stdlib-2.2.5-1.5.s390x", "product": { "name": "ruby2.2-stdlib-2.2.5-1.5.s390x", "product_id": "ruby2.2-stdlib-2.2.5-1.5.s390x" } }, { "category": "product_version", "name": "ruby2.2-tk-2.2.5-1.5.s390x", "product": { "name": "ruby2.2-tk-2.2.5-1.5.s390x", "product_id": "ruby2.2-tk-2.2.5-1.5.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libruby2_2-2_2-2.2.5-1.5.x86_64", "product": { "name": "libruby2_2-2_2-2.2.5-1.5.x86_64", "product_id": "libruby2_2-2_2-2.2.5-1.5.x86_64" } }, { "category": "product_version", "name": "ruby2.2-2.2.5-1.5.x86_64", "product": { "name": "ruby2.2-2.2.5-1.5.x86_64", "product_id": "ruby2.2-2.2.5-1.5.x86_64" } }, { "category": "product_version", "name": "ruby2.2-devel-2.2.5-1.5.x86_64", "product": { "name": "ruby2.2-devel-2.2.5-1.5.x86_64", "product_id": "ruby2.2-devel-2.2.5-1.5.x86_64" } }, { "category": "product_version", "name": "ruby2.2-devel-extra-2.2.5-1.5.x86_64", "product": { "name": "ruby2.2-devel-extra-2.2.5-1.5.x86_64", "product_id": "ruby2.2-devel-extra-2.2.5-1.5.x86_64" } }, { "category": "product_version", "name": "ruby2.2-doc-2.2.5-1.5.x86_64", "product": { "name": "ruby2.2-doc-2.2.5-1.5.x86_64", "product_id": "ruby2.2-doc-2.2.5-1.5.x86_64" } }, { "category": "product_version", "name": "ruby2.2-doc-ri-2.2.5-1.5.x86_64", "product": { "name": "ruby2.2-doc-ri-2.2.5-1.5.x86_64", "product_id": "ruby2.2-doc-ri-2.2.5-1.5.x86_64" } }, { "category": "product_version", "name": "ruby2.2-stdlib-2.2.5-1.5.x86_64", "product": { "name": "ruby2.2-stdlib-2.2.5-1.5.x86_64", "product_id": "ruby2.2-stdlib-2.2.5-1.5.x86_64" } }, { "category": "product_version", "name": "ruby2.2-tk-2.2.5-1.5.x86_64", "product": { "name": "ruby2.2-tk-2.2.5-1.5.x86_64", "product_id": "ruby2.2-tk-2.2.5-1.5.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libruby2_2-2_2-2.2.5-1.5.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.aarch64" }, "product_reference": "libruby2_2-2_2-2.2.5-1.5.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_2-2_2-2.2.5-1.5.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.ppc64le" }, "product_reference": "libruby2_2-2_2-2.2.5-1.5.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_2-2_2-2.2.5-1.5.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.s390x" }, "product_reference": "libruby2_2-2_2-2.2.5-1.5.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libruby2_2-2_2-2.2.5-1.5.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.x86_64" }, "product_reference": "libruby2_2-2_2-2.2.5-1.5.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-2.2.5-1.5.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.aarch64" }, "product_reference": "ruby2.2-2.2.5-1.5.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-2.2.5-1.5.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.ppc64le" }, "product_reference": "ruby2.2-2.2.5-1.5.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-2.2.5-1.5.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.s390x" }, "product_reference": "ruby2.2-2.2.5-1.5.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-2.2.5-1.5.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.x86_64" }, "product_reference": "ruby2.2-2.2.5-1.5.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-devel-2.2.5-1.5.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.aarch64" }, "product_reference": "ruby2.2-devel-2.2.5-1.5.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-devel-2.2.5-1.5.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.ppc64le" }, "product_reference": "ruby2.2-devel-2.2.5-1.5.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-devel-2.2.5-1.5.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.s390x" }, "product_reference": "ruby2.2-devel-2.2.5-1.5.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-devel-2.2.5-1.5.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.x86_64" }, "product_reference": "ruby2.2-devel-2.2.5-1.5.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-devel-extra-2.2.5-1.5.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.aarch64" }, "product_reference": "ruby2.2-devel-extra-2.2.5-1.5.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-devel-extra-2.2.5-1.5.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.ppc64le" }, "product_reference": "ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-devel-extra-2.2.5-1.5.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.s390x" }, "product_reference": "ruby2.2-devel-extra-2.2.5-1.5.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-devel-extra-2.2.5-1.5.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.x86_64" }, "product_reference": "ruby2.2-devel-extra-2.2.5-1.5.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-doc-2.2.5-1.5.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.aarch64" }, "product_reference": "ruby2.2-doc-2.2.5-1.5.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-doc-2.2.5-1.5.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.ppc64le" }, "product_reference": "ruby2.2-doc-2.2.5-1.5.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-doc-2.2.5-1.5.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.s390x" }, "product_reference": "ruby2.2-doc-2.2.5-1.5.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-doc-2.2.5-1.5.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.x86_64" }, "product_reference": "ruby2.2-doc-2.2.5-1.5.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-doc-ri-2.2.5-1.5.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.aarch64" }, "product_reference": "ruby2.2-doc-ri-2.2.5-1.5.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-doc-ri-2.2.5-1.5.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.ppc64le" }, "product_reference": "ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-doc-ri-2.2.5-1.5.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.s390x" }, "product_reference": "ruby2.2-doc-ri-2.2.5-1.5.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-doc-ri-2.2.5-1.5.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.x86_64" }, "product_reference": "ruby2.2-doc-ri-2.2.5-1.5.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-stdlib-2.2.5-1.5.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.aarch64" }, "product_reference": "ruby2.2-stdlib-2.2.5-1.5.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-stdlib-2.2.5-1.5.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.ppc64le" }, "product_reference": "ruby2.2-stdlib-2.2.5-1.5.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-stdlib-2.2.5-1.5.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.s390x" }, "product_reference": "ruby2.2-stdlib-2.2.5-1.5.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-stdlib-2.2.5-1.5.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.x86_64" }, "product_reference": "ruby2.2-stdlib-2.2.5-1.5.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-tk-2.2.5-1.5.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.aarch64" }, "product_reference": "ruby2.2-tk-2.2.5-1.5.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-tk-2.2.5-1.5.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.ppc64le" }, "product_reference": "ruby2.2-tk-2.2.5-1.5.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-tk-2.2.5-1.5.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.s390x" }, "product_reference": "ruby2.2-tk-2.2.5-1.5.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "ruby2.2-tk-2.2.5-1.5.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.x86_64" }, "product_reference": "ruby2.2-tk-2.2.5-1.5.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2015-1855", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-1855" } ], "notes": [ { "category": "general", "text": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-1855", "url": "https://www.suse.com/security/cve/CVE-2015-1855" }, { "category": "external", "summary": "SUSE Bug 926974 for CVE-2015-1855", "url": "https://bugzilla.suse.com/926974" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2015-1855" }, { "cve": "CVE-2015-3900", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3900" } ], "notes": [ { "category": "general", "text": "RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a \"DNS hijack attack.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3900", "url": "https://www.suse.com/security/cve/CVE-2015-3900" }, { "category": "external", "summary": "SUSE Bug 936032 for CVE-2015-3900", "url": "https://bugzilla.suse.com/936032" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2015-3900" }, { "cve": "CVE-2015-7551", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-7551" } ], "notes": [ { "category": "general", "text": "The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-7551", "url": "https://www.suse.com/security/cve/CVE-2015-7551" }, { "category": "external", "summary": "SUSE Bug 939860 for CVE-2015-7551", "url": "https://bugzilla.suse.com/939860" }, { "category": "external", "summary": "SUSE Bug 959495 for CVE-2015-7551", "url": "https://bugzilla.suse.com/959495" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:libruby2_2-2_2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-devel-extra-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-doc-ri-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-stdlib-2.2.5-1.5.x86_64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.aarch64", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.ppc64le", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.s390x", "openSUSE Tumbleweed:ruby2.2-tk-2.2.5-1.5.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2015-7551" } ] }
gsd-2015-1855
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2015-1855", "description": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.", "id": "GSD-2015-1855", "references": [ "https://www.suse.com/security/cve/CVE-2015-1855.html", "https://www.debian.org/security/2015/dsa-3247", "https://www.debian.org/security/2015/dsa-3246", "https://www.debian.org/security/2015/dsa-3245", "https://ubuntu.com/security/CVE-2015-1855", "https://advisories.mageia.org/CVE-2015-1855.html", "https://alas.aws.amazon.com/cve/html/CVE-2015-1855.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2015-1855" ], "details": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.", "id": "GSD-2015-1855", "modified": "2023-12-13T01:20:05.116123Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2015-1855", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Ruby", "version": { "version_data": [ { "version_value": "before 2.0.0 patchlevel 645" }, { "version_value": "2.1.x before 2.1.6" }, { "version_value": "and 2.2.x before 2.2.2" } ] } } ] }, "vendor_name": "Ruby" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Other" } ] } ] }, "references": { "reference_data": [ { "name": "http://www.debian.org/security/2015/dsa-3247", "refsource": "MISC", "url": "http://www.debian.org/security/2015/dsa-3247" }, { "name": "http://www.debian.org/security/2015/dsa-3245", "refsource": "MISC", "url": "http://www.debian.org/security/2015/dsa-3245" }, { "name": "http://www.debian.org/security/2015/dsa-3246", "refsource": "MISC", "url": "http://www.debian.org/security/2015/dsa-3246" }, { "name": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/", "refsource": "MISC", "url": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/" }, { "name": "https://puppetlabs.com/security/cve/cve-2015-1855", "refsource": "MISC", "url": "https://puppetlabs.com/security/cve/cve-2015-1855" }, { "name": "https://bugs.ruby-lang.org/issues/9644", "refsource": "MISC", "url": "https://bugs.ruby-lang.org/issues/9644" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:-:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p353:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p451:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p481:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p576:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p594:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p598:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p643:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "2.1.6", "versionStartIncluding": "2.1.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "2.2.2", "versionStartIncluding": "2.2.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ruby-lang:trunk:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "50292", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:puppet:puppet_agent:1.0.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "3.8.0", "versionStartIncluding": "3.0.0", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2015-1855" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-20" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugs.ruby-lang.org/issues/9644", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "https://bugs.ruby-lang.org/issues/9644" }, { "name": "http://www.debian.org/security/2015/dsa-3246", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3246" }, { "name": "http://www.debian.org/security/2015/dsa-3247", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3247" }, { "name": "https://puppetlabs.com/security/cve/cve-2015-1855", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "https://puppetlabs.com/security/cve/cve-2015-1855" }, { "name": "http://www.debian.org/security/2015/dsa-3245", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3245" }, { "name": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/", "refsource": "MISC", "tags": [ "Vendor Advisory" ], "url": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "exploitabilityScore": 2.2, "impactScore": 3.6 } }, "lastModifiedDate": "2020-09-30T12:27Z", "publishedDate": "2019-11-29T21:15Z" } } }
ghsa-4x8v-74xf-h4g3
Vulnerability from github
verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.
{ "affected": [], "aliases": [ "CVE-2015-1855" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2019-11-29T21:15:00Z", "severity": "MODERATE" }, "details": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.", "id": "GHSA-4x8v-74xf-h4g3", "modified": "2022-05-24T17:02:21Z", "published": "2022-05-24T17:02:21Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1855" }, { "type": "WEB", "url": "https://bugs.ruby-lang.org/issues/9644" }, { "type": "WEB", "url": "https://puppetlabs.com/security/cve/cve-2015-1855" }, { "type": "WEB", "url": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability" }, { "type": "WEB", "url": "http://www.debian.org/security/2015/dsa-3245" }, { "type": "WEB", "url": "http://www.debian.org/security/2015/dsa-3246" }, { "type": "WEB", "url": "http://www.debian.org/security/2015/dsa-3247" } ], "schema_version": "1.4.0", "severity": [] }
cnvd-2015-02927
Vulnerability from cnvd
用户可参考如下供应商提供的安全公告获得补丁信息: http://www.us.debian.org/security/2015/dsa-3246
Name | Ruby Ruby 1.9.1 |
---|
{ "cves": { "cve": { "cveNumber": "CVE-2015-1855" } }, "description": "Ruby\u662f\u65e5\u672c\u8f6f\u4ef6\u5f00\u53d1\u8005\u677e\u672c\u884c\u5f18\u6240\u7814\u53d1\u7684\u4e00\u79cd\u8de8\u5e73\u53f0\u3001\u9762\u5411\u5bf9\u8c61\u7684\u52a8\u6001\u7c7b\u578b\u7f16\u7a0b\u8bed\u8a00\u3002\r\n\r\nRuby\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u9a8c\u8bc1\u8bc1\u4e66\u7684\u57df\u540d\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5b9e\u65bd\u4e2d\u95f4\u4eba\u653b\u51fb\u5229\u7528\u8be5\u6f0f\u6d1e\u6b3a\u9a97\u670d\u52a1\u5668\u3002", "discovererName": "Ruby", "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://www.us.debian.org/security/2015/dsa-3246", "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e", "number": "CNVD-2015-02927", "openTime": "2015-05-08", "patchDescription": "Ruby\u662f\u65e5\u672c\u8f6f\u4ef6\u5f00\u53d1\u8005\u677e\u672c\u884c\u5f18\u6240\u7814\u53d1\u7684\u4e00\u79cd\u8de8\u5e73\u53f0\u3001\u9762\u5411\u5bf9\u8c61\u7684\u52a8\u6001\u7c7b\u578b\u7f16\u7a0b\u8bed\u8a00\u3002 \r\n\r\nRuby\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u9a8c\u8bc1\u8bc1\u4e66\u7684\u57df\u540d\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5b9e\u65bd\u4e2d\u95f4\u4eba\u653b\u51fb\u5229\u7528\u8be5\u6f0f\u6d1e\u6b3a\u9a97\u670d\u52a1\u5668\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002", "patchName": "Ruby\u8bc1\u4e66\u6821\u9a8c\u6f0f\u6d1e\u7684\u8865\u4e01", "products": { "product": "Ruby Ruby 1.9.1" }, "referenceLink": "http://www.us.debian.org/security/2015/dsa-3246 \r\nhttp://secunia.com/advisories/64396", "serverity": "\u4e2d", "submitTime": "2015-05-07", "title": "Ruby\u8bc1\u4e66\u6821\u9a8c\u6f0f\u6d1e" }
fkie_cve-2015-1855
Vulnerability from fkie_nvd
URL | Tags | ||
---|---|---|---|
secalert@redhat.com | http://www.debian.org/security/2015/dsa-3245 | Third Party Advisory | |
secalert@redhat.com | http://www.debian.org/security/2015/dsa-3246 | Third Party Advisory | |
secalert@redhat.com | http://www.debian.org/security/2015/dsa-3247 | Third Party Advisory | |
secalert@redhat.com | https://bugs.ruby-lang.org/issues/9644 | Third Party Advisory | |
secalert@redhat.com | https://puppetlabs.com/security/cve/cve-2015-1855 | Third Party Advisory | |
secalert@redhat.com | https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/ | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2015/dsa-3245 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2015/dsa-3246 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2015/dsa-3247 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugs.ruby-lang.org/issues/9644 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://puppetlabs.com/security/cve/cve-2015-1855 | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/ | Vendor Advisory |
Vendor | Product | Version | |
---|---|---|---|
ruby-lang | ruby | * | |
ruby-lang | ruby | * | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | ruby | 2.0.0 | |
ruby-lang | trunk | * | |
debian | debian_linux | 7.0 | |
debian | debian_linux | 8.0 | |
debian | debian_linux | 9.0 | |
puppet | puppet_agent | 1.0.0 | |
puppet | puppet_enterprise | * |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "matchCriteriaId": "C5793852-ECE3-465A-B8A5-D506744191E9", "versionEndExcluding": "2.1.6", "versionStartIncluding": "2.1.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E69BA95-2D84-4E80-9617-3B2F2B02D9E9", "versionEndExcluding": "2.2.2", "versionStartIncluding": "2.2.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:-:*:*:*:*:*:*", "matchCriteriaId": "45B882EE-85F9-42B0-85F3-0B6A9FF4BA5E", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*", "matchCriteriaId": "D2423B85-0971-42AC-8B64-819008BC5778", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*", "matchCriteriaId": "1C663278-3B2A-4B7C-959A-2AA804467F21", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:*", "matchCriteriaId": "B7927149-A76A-48BC-8405-7375FC7D7486", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p353:*:*:*:*:*:*", "matchCriteriaId": "3D627638-64AA-455B-9FEA-093D3773B9FD", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p451:*:*:*:*:*:*", "matchCriteriaId": "46485519-C2FB-4767-B699-9F51FDCF29E5", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p481:*:*:*:*:*:*", "matchCriteriaId": "19CF27FB-DCF5-4533-B309-55615AE21A63", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p576:*:*:*:*:*:*", "matchCriteriaId": "B9865DD1-F2AF-40B6-848A-EA9FD37034DD", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p594:*:*:*:*:*:*", "matchCriteriaId": "C10BD21E-B9FA-4B57-B617-0108A00D6132", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p598:*:*:*:*:*:*", "matchCriteriaId": "3D5ABD47-64AC-4844-B78B-F0D3BC3B8F49", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:ruby:2.0.0:p643:*:*:*:*:*:*", "matchCriteriaId": "4EF7FDAD-9CAF-452D-B229-EF7C390DE712", "vulnerable": true }, { "criteria": "cpe:2.3:a:ruby-lang:trunk:*:*:*:*:*:*:*:*", "matchCriteriaId": "4A56FC0D-59AE-48DD-9DD8-3CC0E6DC0F80", "versionEndExcluding": "50292", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA", "vulnerable": true }, { "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "vulnerable": true }, { "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:puppet:puppet_agent:1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "DCB7E6DC-B6C3-452B-98F7-09D0CE0879E1", "vulnerable": true }, { "criteria": "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*", "matchCriteriaId": "82B0F981-35E1-4C9D-9D16-DDB0CA341FEF", "versionEndExcluding": "3.8.0", "versionStartIncluding": "3.0.0", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters." }, { "lang": "es", "value": "La funci\u00f3n Verified_certificate_identity en la extensi\u00f3n OpenSSL en Ruby versiones anteriores a 2.0.0 patchlevel 645, versiones 2.1.x anteriores a 2.1.6 y versiones 2.2.x anteriores 2.2.2, no comprueba apropiadamente los nombres de host, lo que permite a atacantes remotos falsificar servidores por medio de vectores relacionados con (1) m\u00faltiples wildcards, (1) wildcards en nombres IDNA, (3) sensibilidad a may\u00fasculas y min\u00fasculas y (4) caracteres no ASCII." } ], "id": "CVE-2015-1855", "lastModified": "2024-11-21T02:26:16.630", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2019-11-29T21:15:10.807", "references": [ { "source": "secalert@redhat.com", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3245" }, { "source": "secalert@redhat.com", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3246" }, { "source": "secalert@redhat.com", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3247" }, { "source": "secalert@redhat.com", "tags": [ "Third Party Advisory" ], "url": "https://bugs.ruby-lang.org/issues/9644" }, { "source": "secalert@redhat.com", "tags": [ "Third Party Advisory" ], "url": "https://puppetlabs.com/security/cve/cve-2015-1855" }, { "source": "secalert@redhat.com", "tags": [ "Vendor Advisory" ], "url": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3245" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3246" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3247" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://bugs.ruby-lang.org/issues/9644" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://puppetlabs.com/security/cve/cve-2015-1855" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/" } ], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.