I cannot reach the maintainer petersen (see mail below): The package "pandoc" remains at 3.1.3 in Fedora, but pandoc is already at 3.1.11.1. Among the updates since 3.1.3, there have been two security-critical (including the medium CVE-2023-35936. Security fixes are in 3.1.4 & 3.1.6).
The actual risk is limited, but these should be updated
nevertheless.
Does anyone know how to reach him by other means?
Regards,
Chris
Subject: | Fedora package "pandoc" outdated and contains security vulnerability |
---|---|
Date: | Thu, 1 Feb 2024 15:55:09 +0100 |
From: | py0xc3@posteo.net |
To: | petersen@fedoraproject.org |