diff --git a/SPECS/pandoc.spec b/SPECS/pandoc.spec
index b79624a..9d7b548 100644
--- a/SPECS/pandoc.spec
+++ b/SPECS/pandoc.spec
@@ -11,7 +11,7 @@
 
 Name:           %{pkg_name}
 Version:        2.0.6
-Release:        5%{?dist}
+Release:        6%{?dist}
 Summary:        Conversion between markup formats
 
 License:        GPLv2+
@@ -34,7 +34,7 @@ BuildRequires:  ghc-blaze-html-devel
 BuildRequires:  ghc-blaze-markup-devel
 BuildRequires:  ghc-bytestring-devel
 BuildRequires:  ghc-case-insensitive-devel
-BuildRequires:  ghc-cmark-gfm-devel
+BuildRequires:  ghc-cmark-gfm-devel >= 0.2.3
 BuildRequires:  ghc-containers-devel
 BuildRequires:  ghc-data-default-devel
 BuildRequires:  ghc-deepseq-devel
@@ -209,6 +209,10 @@ install -m 0644 -p -D man/pandoc.1 %{buildroot}%{_mandir}/man1/pandoc.1
 
 
 %changelog
+* Thu Apr 14 2022 Jens Petersen <petersen@redhat.com> - 2.0.6-6
+- rebuild with ghc-cmark-gfm-0.2.3 for CVE-2022-24724 (#2074997)
+- https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x
+
 * Mon Dec 14 2020 Jens Petersen <petersen@redhat.com> - 2.0.6-5
 - rebuild with ghc-cmark-gfm-0.2.2 (#1865911)