Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 44 Transmission 4.1.2 Important Clickjacking Fix CVE-2026-38978

Calendar White Jun 05, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 libre 4.8.1 Critical Update Details for Real-Time Communication

Calendar White Jun 05, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 NextCloud Update Denial of Service JSON Tampering 2026-30881a5be7

Calendar White Jun 05, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 44 python-starlette Security Fix for CVE-2026-48710

Calendar White Jun 05, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 perl-Cpanel-JSON-XS Moderate Denial of Service CVE-2026-9516

Calendar White Jun 05, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 rubygem-yard High Path Traversal Fix Vuln 2026-acefc1fe48

Calendar White Jun 05, 2026
high
Fedora Large Esm H800
Fedora

Fedora 44 Rust Sequoia Sop Low-Severity Fix Advisory 2026-5c5f4f40a4

Calendar White Jun 05, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 44 rust-sequoia-sq Low Threat Security Advisory 2026-5c5f4f40a4

Calendar White Jun 05, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 44 rust-sequoia-wot Low Severity Security Fix 2026-5c5f4f40a4

Calendar White Jun 05, 2026
Low
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
202
Ls Advisories Opensuse Esm H240
Price Tag 1security advisorymoderatepackage update

openSUSE Tumbleweed: 2025:15119-1 moderate: kramdown security fix

An update that solves 2 vulnerabilities can now be installed.. # ruby3.4-rubygem-kramdown-2.4.0-1.15 on GA media Announcement ID: openSUSE-SU-2025:15119-1 Rating: moderate Cross-References: * CVE-2020-14001 * CVE-2021-28834 CVSS scores: * CVE-2020-14001 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L * CVE-2021-28834 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the ruby3.4-rubygem-kramdown-2.4.0-1.15 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * ruby3.4-rubygem-kramdown 2.4.0-1.15 ## References: * https://www.suse.com/security/cve/CVE-2020-14001.html * https://www.suse.com/security/cve/CVE-2021-28834.html . The latest openSUSE Tumbleweed release resolves critical vulnerabilities in ruby3.4-rubygem-kramdown, enhancing overall system reliability.. openSUSE Tumbleweed, ruby3.4, package security update, kramdown security fix. . LinuxSecurity.com Team

Calendar 2 May 18, 2025 OpenSUSE
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedoracritical update

Fedora 34: Critical Update for rubygem-kramdown 2.3.1 Namespace Restriction

New version 2.3.1 is released. Note that a possible security related issue is found on the previous version of rubygem-kramdown where kramdown does not restrict custom Rouge formatters within Rouge::Formatters namespace. This issue is now assigned as CVE-2021-28834. This new rpm should fix this issue.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-139a6a2f9d 2021-03-26 00:15:07.081055 --------------------------------------------------------------------------------Name : rubygem-kramdown Product : Fedora 34 Version : 2.3.1 Release : 1.fc34 URL : Summary : Fast, pure-Ruby Markdown-superset converter Description : kramdown is yet-another-markdown-parser but fast, pure Ruby, using a strict syntax definition and supporting several common extensions. --------------------------------------------------------------------------------Update Information: New version 2.3.1 is released. Note that a possible security related issue is found on the previous version of rubygem-kramdown where kramdown does not restrict custom Rouge formatters within Rouge::Formatters namespace. This issue is now assigned as CVE-2021-28834. This new rpm should fix this issue. --------------------------------------------------------------------------------ChangeLog: * Sun Mar 21 2021 Mamoru TASAKA - 2.3.0-1 - 2.3.1 * Sun Mar 21 2021 Mamoru TASAKA - 2.3.0-3 - Apply upstream fix for CVE-2021-28834 (rouge formatter namespace restriction) --------------------------------------------------------------------------------References: [ 1 ] Bug #1941045 - CVE-2021-28834 rubygem-kramdown: allows arbitrary classes to be instantiated [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1941045 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-139a6a2f9d' at thecommand line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Debian's rubygem-dookup upgraded to mitigate CVE-2021-28683, tackling vulnerabilities.. rubygem kramdown update security. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 25, 2021 •Critical Fedora
Banner 3 1028x280 1708121785 1771599793
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisoryinformation leakcode execution

Ubuntu 20.10: USN-4562-2 Moderate: Kramdown Code Execution Risk

kramdown could be made to crash, run programs, or leak sensitive information if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-4562-2 October 26, 2020 ruby-kramdown vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.10 Summary: kramdown could be made to crash, run programs, or leak sensitive information if it opened a specially crafted file. Software Description: - ruby-kramdown: Fast, pure-Ruby Markdown-superset converter - ruby library Details: It was discovered that kramdown insecurely handled certain crafted input. An attacker could use this vulnerability to read restricted files or execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.10: kramdown 1.17.0-4ubuntu0.20.10.1 ruby-kramdown 1.17.0-4ubuntu0.20.10.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4562-2 https://ubuntu.com/security/notices/USN-4562-1 CVE-2020-14001 Package Information: https://launchpad.net/ubuntu/+source/ruby-kramdown/1.17.0-4ubuntu0.20.10.1 -- ubuntu-security-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce . The Kramdown flaw in Ubuntu poses risks of system failures or unauthorized script runs, which may compromise the integrity of confidential information.. kramdown vulnerability, Ubuntu security notice, information leak risk. . LinuxSecurity.com Team

Calendar 2 Oct 26, 2020 Ubuntu
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorysecurity issueFedora

Fedora 32: 2020-f6eee9a2d3 Critical: rubygem-kramdown Code Execution

A security flaw was found on ruby kramdown which may lead to unintended code execution. This vulnerability is now assigned as CVE-2020-14001 . This new rpm should fix this issue.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-f6eee9a2d3 2020-08-20 01:10:33.168119 --------------------------------------------------------------------------------Name : rubygem-kramdown Product : Fedora 32 Version : 2.1.0 Release : 3.fc32 URL : Summary : Fast, pure-Ruby Markdown-superset converter Description : kramdown is yet-another-markdown-parser but fast, pure Ruby, using a strict syntax definition and supporting several common extensions. --------------------------------------------------------------------------------Update Information: A security flaw was found on ruby kramdown which may lead to unintended code execution. This vulnerability is now assigned as CVE-2020-14001 . This new rpm should fix this issue. --------------------------------------------------------------------------------ChangeLog: * Mon Aug 10 2020 Mamoru TASAKA - 2.1.0-3 - Backport upstream patch for CVE-2020-14001 (bug 1858395) --------------------------------------------------------------------------------References: [ 1 ] Bug #1858414 - CVE-2020-14001 rubygem-kramdown: processing template options inside documents allows unintended read access or embedded Ruby code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1858414 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-f6eee9a2d3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . An important patch for rubygem-markdown tackles a vulnerability that could result in arbitrary code execution, rectifying CVE-2021-12345.. rubygem-kramdown,ruby,security update,Fedora,code execution. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 19, 2020 •Critical Fedora
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryFedoraruby

Fedora 31: 2020-5c70d97eca Critical: Rubygem-Kramdown Code Exec

A security flaw was found on ruby kramdown which may lead to unintended code execution. THis vulnerability is now assigned as CVE-2020-14001 . This new rpm should fix this issue.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-5c70d97eca 2020-08-20 01:03:35.305841 --------------------------------------------------------------------------------Name : rubygem-kramdown Product : Fedora 31 Version : 1.17.0 Release : 6.fc31 URL : Summary : Fast, pure-Ruby Markdown-superset converter Description : kramdown is yet-another-markdown-parser but fast, pure Ruby, using a strict syntax definition and supporting several common extensions. --------------------------------------------------------------------------------Update Information: A security flaw was found on ruby kramdown which may lead to unintended code execution. THis vulnerability is now assigned as CVE-2020-14001 . This new rpm should fix this issue. --------------------------------------------------------------------------------ChangeLog: * Mon Aug 10 2020 Mamoru TASAKA - 1.17.0-6 - Backport upstream patch for CVE-2020-14001 (bug 1858395) --------------------------------------------------------------------------------References: [ 1 ] Bug #1858414 - CVE-2020-14001 rubygem-kramdown: processing template options inside documents allows unintended read access or embedded Ruby code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1858414 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-5c70d97eca' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . A vulnerability in the ruby kramdown library results in unexpected command execution. This notice outlines the remedial measures.. Fedora Security Advisory,ruby kramdown exploit,code execution patch. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 19, 2020 •Critical Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here