Hello, ruby-sig folks:
rubygem-kramdown before 2.3.0 has security issue assigned as CVE-2020-14001 :
https://bugzilla.redhat.com/show_bug.cgi?id=1858395 ,
so I've pushed updates rubygem-kramdown-2.2.1-4.fc32 for Fedora 32, and
rubygem-kramdown-1.17.0-6.fc31 for Fedora 31.
For EPEL(7), as I've repeatedly said I didn't maintain any packages on EPEL,
however as somehow EPEL updates request was assigned to me :
https://bugzilla.redhat.com/show_bug.cgi?id=1858415
I've created rubygem-kramdown-1.9.0-2.el7 updates which was pushed to stable
yesterday - however it seems there was some mistakes on the patch I've applied:
https://bugzilla.redhat.com/show_bug.cgi?id=1889144
So as I've thought before I am afraid that I should not maintain packages on EPEL,
so once I've orphaned rubygem-kramdown on EPEL. I hope that someone who really uses
EPEL can take care of this. Note that I'll keep maintaining rubygem-kramdown on
Fedora branches.
Regards,
Mamoru