tocsin

Debian/cmark-gfm: critical 9.8

cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 and 0.28.3.gfm.21, an integer overflow in cmark-gfm's table row parsing `table.c:

Action: Upgrade cmark-gfm to 0.29.0.gfm.3-3 or later.

Affected

introducedfixedlast affected
00.29.0.gfm.3-3-

Fixed versions

0.29.0.gfm.3-3

Sources

published · modified · JSON