Back Linuxsecurity

Fedora 43 rubygem-yard Critical Path Traversal Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • June 5, 2026

* Thu May 28 2026 Mamoru TASAKA - 0.9.37-5 - Backport 0.9.41 / 0.9.44 fixes for possible path traversal issues - -

Fedora Update Notification FEDORA-2026-2d0a32ddc0 2026-06-05 04:07:33.980021+00:00 Name : rubygem-yard Product : Fedora 43 Version : 0.9.37 Release : 5.fc43 URL : Summary : Documentation tool for consistent and usable documentation in Ruby Description : YARD is a documentation generation tool for the Ruby programming language. It enables the user to generate consistent, usable documentation that can be exported to a number of formats very easily, and also supports extending for custom Ruby constructs such as custom class level definitions.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2d0a32ddc0' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Path Traversal Vulnerabilities in rubygem-yard for Fedora 43 and 44 On June 5, 2026, Fedora released updates addressing critical path traversal vulnerabilities in the rubygem-yard documentation tool. The vulnerabilities were backported from versions 0.9.41 and 0.9.44 and affect Fedora 43 and 44 systems. Users are advised to upgrade to the patched versions to mitigate potential exploitation risks. The vulnerabilities could allow unauthorized access to sensitive files, posing a significant risk to affected systems. The updates were announced by Mamoru Tasaka on May 28, 2026, and are available through the 'dnf' update program. The affected versions are 0.9.40-2 for Fedora 44 and 0.9.37-5 for Fedora 43. Administrators are urged to apply the updates promptly to ensure system security. 2 sources 71

Extracted Entities

Fedora 43 rubygem-yard Critical Path Traversal Advisory 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

Platforms (1)