Уведомление безопасности SUSE-SU-2017:1067-1

Высокая (7.5)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

SUSE

libruby2_1-2_1 (any) libruby2_1-2_1-debuginfo (any) ruby2.1 (any) ruby2.1-debuginfo (any) ruby2.1-debugsource (any) ruby2.1-devel (any) ruby2.1-stdlib (any) ruby2.1-stdlib-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP2, SUSE Linux Enterprise Software Development Kit 12-SP1, SUSE Linux Enterprise Desktop 12-SP1, SUSE Linux Enterprise Desktop 12-SP2, OpenStack Cloud Magnum Orchestration 7, SUSE Linux Enterprise Server 12-SP2, SUSE Linux Enterprise Server 12-SP1, SUSE Linux Enterprise Server for Raspberry Pi 12-SP2

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP2:
aarch64, ppc64le, s390x, x86_64:
ruby2.1-debugsource - 2.1.9-15.1
ruby2.1-debuginfo - 2.1.9-15.1
ruby2.1-devel - 2.1.9-15.1
SUSE Linux Enterprise Software Development Kit 12-SP1:
ppc64le, s390x, x86_64:
ruby2.1-debugsource - 2.1.9-15.1
ruby2.1-debuginfo - 2.1.9-15.1
ruby2.1-devel - 2.1.9-15.1
SUSE Linux Enterprise Desktop 12-SP1:
x86_64:
ruby2.1-stdlib-debuginfo - 2.1.9-15.1
libruby2_1-2_1 - 2.1.9-15.1
ruby2.1-debugsource - 2.1.9-15.1
libruby2_1-2_1-debuginfo - 2.1.9-15.1
ruby2.1-stdlib - 2.1.9-15.1
ruby2.1-debuginfo - 2.1.9-15.1
ruby2.1 - 2.1.9-15.1
SUSE Linux Enterprise Desktop 12-SP2:
x86_64:
ruby2.1-stdlib-debuginfo - 2.1.9-15.1
libruby2_1-2_1 - 2.1.9-15.1
ruby2.1-debugsource - 2.1.9-15.1
libruby2_1-2_1-debuginfo - 2.1.9-15.1
ruby2.1-stdlib - 2.1.9-15.1
ruby2.1-debuginfo - 2.1.9-15.1
ruby2.1 - 2.1.9-15.1
OpenStack Cloud Magnum Orchestration 7:
x86_64:
ruby2.1-stdlib-debuginfo - 2.1.9-15.1
libruby2_1-2_1 - 2.1.9-15.1
ruby2.1-debugsource - 2.1.9-15.1
libruby2_1-2_1-debuginfo - 2.1.9-15.1
ruby2.1-stdlib - 2.1.9-15.1
ruby2.1-debuginfo - 2.1.9-15.1
ruby2.1 - 2.1.9-15.1
SUSE Linux Enterprise Server 12-SP2:
aarch64, ppc64le, x86_64:
ruby2.1-stdlib-debuginfo - 2.1.9-15.1
libruby2_1-2_1 - 2.1.9-15.1
ruby2.1-debugsource - 2.1.9-15.1
libruby2_1-2_1-debuginfo - 2.1.9-15.1
ruby2.1-stdlib - 2.1.9-15.1
ruby2.1-debuginfo - 2.1.9-15.1
ruby2.1 - 2.1.9-15.1
SUSE Linux Enterprise Server 12-SP1:
ppc64le, s390x, x86_64:
ruby2.1-stdlib-debuginfo - 2.1.9-15.1
libruby2_1-2_1 - 2.1.9-15.1
ruby2.1-debugsource - 2.1.9-15.1
libruby2_1-2_1-debuginfo - 2.1.9-15.1
ruby2.1-stdlib - 2.1.9-15.1
ruby2.1-debuginfo - 2.1.9-15.1
ruby2.1 - 2.1.9-15.1
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
aarch64:
ruby2.1-stdlib-debuginfo - 2.1.9-15.1
libruby2_1-2_1 - 2.1.9-15.1
ruby2.1-debugsource - 2.1.9-15.1
libruby2_1-2_1-debuginfo - 2.1.9-15.1
ruby2.1-stdlib - 2.1.9-15.1
ruby2.1-debuginfo - 2.1.9-15.1
ruby2.1 - 2.1.9-15.1

http://lists.opensuse.org/opensuse-security-announce/2017-04/msg00024.html
https://bugzilla.suse.com/1014863
https://bugzilla.suse.com/1018808
https://bugzilla.suse.com/887877
https://bugzilla.suse.com/909695
https://bugzilla.suse.com/926974
https://bugzilla.suse.com/936032
https://bugzilla.suse.com/959495
https://bugzilla.suse.com/986630

Источник: CVE
Наименование: CVE-2015-3900
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3900

Источник: CVE
Наименование: CVE-2015-1855
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1855

Источник: CVE
Наименование: CVE-2016-2339
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2339

Источник: CVE
Наименование: CVE-2015-7551
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7551

Источник: CVE
Наименование: CVE-2014-4975
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4975