SUSE-SU-2017:0914-1

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2016-2339
Published: 03 Apr 2017, 15:26
Last modified:04 Feb 2026, 04:28

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Apr 2017, 15:26
Published
Vulnerability first disclosed
04 Feb 2026, 04:28
Last Modified
Vulnerability information updated

Description

Security update for ruby19 This update for ruby19 fixes the following issues: Security issue fixed: - CVE-2016-2339: heap overflow vulnerability in the Fiddle::Function.new'initialize' (bsc#1018808) Bugfixes: - fix small mistake in the backport for (bsc#986630) - HTTP Header injection in 'net/http' (bsc#986630) - make the testsuite work with our new openssl requirements

Affected Systems

  • suse•ruby19&distro=SUSE Studio Onsite 1.3

    < 1.9.3.p392-0.26.1

  • suse•ruby19&distro=SUSE Studio Onsite Runner 1.3

    < 1.9.3.p392-0.26.1

References (4)