SUSE-SU-2022:3259-1

UNKNOWN

Security update for rubygem-kramdown

Published Sep 12, 2022

Modified 3 years ago

Fix available

Details

This update for rubygem-kramdown fixes the following issues:

CVE-2020-14001: Fixed processing template options inside documents allowing unintended read access or embedded Ruby code execution (bsc#1174297).

Affected Packages

ruby2.5-rubygem-kramdown

SUSE Linux Enterprise High Availability Extension 15SUSE Linux Enterprise High Availability Extension 15 SP1SUSE Linux Enterprise High Availability Extension 15 SP2SUSE Linux Enterprise High Availability Extension 15 SP3SUSE Linux Enterprise High Availability Extension 15 SP4

Fixed in:

1.15.0-150000.3.3.1

rubygem-kramdown

Fixed in:

1.15.0-150000.3.3.1

ruby2.5-rubygem-kramdown-doc

openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in:

1.15.0-150000.3.3.1

ruby2.5-rubygem-kramdown-testsuite

openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in: