Summary
Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library.
Security Fix(es):
* cmark-gfm: Exponential time to parse certain inputs could lead to DoS (CVE-2020-5238)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | pandoc | 2.0.6-5.el8 |
| AlmaLinux · 8 | pandoc-common | 2.0.6-5.el8 |
Vulnerabilities 1
-
Medium 6.5
Denial of service in table parsing in cmark-gfm
The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue do…
References
-
report
https://vulners.com/cve/CVE-2020-5238