Skip to content
OpenAdvisories
Medium RHSA-2025:8427 1 CVE

Red Hat Security Advisory: pandoc security update

Published Jun 3, 2025 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::crb pandoc 0:2.0.6-7.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb pandoc-common 0:2.0.6-7.el8_10

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-24824

    Quadratic complexity may lead to a denial of service in cmark-gfm

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity …

    GitHub cmark-gfm ruby-commonmarker r-cran-commonmark Debian Ubuntu Hackage

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2210172
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8427.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-24824
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-24824
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-24824
  • article
    https://github.com/github/cmark-gfm/security/advisories/GHSA-66g8-4hjf-77xh