Skip to content
OpenAdvisories
Medium RHSA-2021:1972 1 CVE

Red Hat Security Advisory: pandoc security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::crb pandoc 0:2.0.6-5.el8
Red Hat · RHEL 8 enterprise_linux:8::crb pandoc-common 0:2.0.6-5.el8

Vulnerabilities 1

  • Medium 6.5
    CVE-2020-5238

    Denial of service in table parsing in cmark-gfm

    The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue do…

    GitHub cmark-gfm ruby-commonmarker r-cran-commonmark Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1854328
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1972.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-5238
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-5238
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-5238