cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. Various commands, when piped to cmark-gfm with large values, cause the running time to increase quadratically. These vulnerabilities have been patched in version 0.29.0.gfm.7.
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "cmark-gfm", "binary_version": "0.29.0.gfm.3-3ubuntu0.1~esm1" }, { "binary_name": "cmark-gfm-dbgsym", "binary_version": "0.29.0.gfm.3-3ubuntu0.1~esm1" }, { "binary_name": "libcmark-gfm-dev", "binary_version": "0.29.0.gfm.3-3ubuntu0.1~esm1" }, { "binary_name": "libcmark-gfm-extensions-dev", "binary_version": "0.29.0.gfm.3-3ubuntu0.1~esm1" }, { "binary_name": "libcmark-gfm-extensions0.29.0.gfm.3", "binary_version": "0.29.0.gfm.3-3ubuntu0.1~esm1" }, { "binary_name": "libcmark-gfm-extensions0.29.0.gfm.3-dbgsym", "binary_version": "0.29.0.gfm.3-3ubuntu0.1~esm1" }, { "binary_name": "libcmark-gfm0.29.0.gfm.3", "binary_version": "0.29.0.gfm.3-3ubuntu0.1~esm1" }, { "binary_name": "libcmark-gfm0.29.0.gfm.3-dbgsym", "binary_version": "0.29.0.gfm.3-3ubuntu0.1~esm1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "cmark-gfm", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.10.1" }, { "binary_name": "cmark-gfm-dbgsym", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.10.1" }, { "binary_name": "libcmark-gfm-dev", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.10.1" }, { "binary_name": "libcmark-gfm-extensions-dev", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.10.1" }, { "binary_name": "libcmark-gfm-extensions0.29.0.gfm.6", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.10.1" }, { "binary_name": "libcmark-gfm-extensions0.29.0.gfm.6-dbgsym", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.10.1" }, { "binary_name": "libcmark-gfm0.29.0.gfm.6", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.10.1" }, { "binary_name": "libcmark-gfm0.29.0.gfm.6-dbgsym", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.10.1" } ] }
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "cmark-gfm", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.04.1~esm1" }, { "binary_name": "cmark-gfm-dbgsym", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.04.1~esm1" }, { "binary_name": "libcmark-gfm-dev", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.04.1~esm1" }, { "binary_name": "libcmark-gfm-extensions-dev", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.04.1~esm1" }, { "binary_name": "libcmark-gfm-extensions0.29.0.gfm.6", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.04.1~esm1" }, { "binary_name": "libcmark-gfm-extensions0.29.0.gfm.6-dbgsym", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.04.1~esm1" }, { "binary_name": "libcmark-gfm0.29.0.gfm.6", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.04.1~esm1" }, { "binary_name": "libcmark-gfm0.29.0.gfm.6-dbgsym", "binary_version": "0.29.0.gfm.6-6ubuntu0.24.04.1~esm1" } ] }