Every CVESearch/Get API key

SUSE-SU-2016:0267-1

Security update for rubygem-mail-2_4

No scoreFix available

This update for rubygem-mail-2_4 fixes the following issues:

  • bsc#959129: SMTP Injection via recipient email addresses

What each source reports

OSVNo score

Security update for rubygem-mail-2_4

This update for rubygem-mail-2_4 fixes the following issues:

  • bsc#959129: SMTP Injection via recipient email addresses
Record
SUSE-SU-2016:0267-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
rubygem-mail-2_4
SUSE:Linux Enterprise Software Development Kit 11 SP4
before 2.4.4-0.10.2
2.4.4-0.10.2
rubygem-mail-2_4
SUSE:Lifecycle Management Server 1.3
before 2.4.4-0.10.2
2.4.4-0.10.2
rubygem-mail-2_4
SUSE:Studio Onsite 1.3
before 2.4.4-0.10.2
2.4.4-0.10.2
rubygem-mail-2_4
SUSE:WebYast 1.3
before 2.4.4-0.10.2
2.4.4-0.10.2

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

SUSE-SU-2016:0267-1 is a vulnerability with no CVSS score yet in rubygem-mail-2_4, published January 27, 2016. No source lists public exploit code. Fixed in rubygem-mail-2_4 2.4.4-0.10.2.

References

MoveEnter Open