Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1231326

Bug#1093043: dcmtk: leftover CVE status.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Hello,

I tried to have a closer look at CVE-2024-28130 in dcmtk in
bookworm and noted there were ports of fixes to Debian bullseye
LTS earlier that year.  Either by picking upstream commits or by
fetching LTS patches, changes were sufficiently involved that I
didn't feel confident to make the necessary adjustments myself.
I have otherwise pushed a few changes on Salsa to address the
CVE-2024-34508 and CVE-2024-34509; in addition to the fix, it
was necessary to make a small adjustment to address a regression
in a test item, for which I pulled another upstream change.

I believe these changes in dcmtk are good enough to contact the
stable release manager for an upload in the upcoming point
release and will proceed.

Have a nice day,  :)
-- 
  .''`.  Étienne Mollier <emollier@debian.org>
 : :' :  pgp: 8f91 b227 c7d6 f2b1 948c  8236 793c f67e 8f0d 11da
 `. `'   sent from /dev/pts/3, please excuse my verbosity
   `-    on air: The Flower Kings - Garden of Dreams

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1093047: [Debian-med-packaging] Bug#1093047: Bug#1093043: Bug#1093043: dcmtk: CVE-2024-47796 Salvatore Bonaccorso <carnil@debian.org> - 2025-01-27 20:30 +0100
  Bug#1093043: dcmtk: leftover CVE status. Étienne Mollier <emollier@debian.org> - 2025-02-01 20:40 +0100
    Bug#1093043: dcmtk: leftover CVE status. Salvatore Bonaccorso <carnil@debian.org> - 2025-02-09 15:10 +0100
      Bug#1093047: dcmtk: leftover CVE status. Étienne Mollier <emollier@debian.org> - 2025-02-11 22:30 +0100

csiph-web