Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BUG: Update DCMTK to backport fixes for CVE-2022-2119 and CVE-2022-2120 #1223

Merged

Commits on Oct 28, 2024

  1. BUG: Update DCMTK to backport fixes for CVE-2022-2119 and CVE-2022-2120

    Backport security fixes from the following post
    https://forum.dcmtk.org/viewtopic.php?t=5192 because of the following CVE:
    * [CVE-2022-2119](https://www.cvedetails.com/cve/CVE-2022-2119/)
    * [CVE-2022-2120](https://www.cvedetails.com/cve/CVE-2022-2120/)
    
    List of DCMTK changes:
    
    ```
    $ git shortlog 0f9bf4d9e..11972eaa4 --no-merges
    Marco Eichelberg (2):
          [Backport] Fixed possible NULL pointer dereference.
          [Backport] Fixed path traversal vulnerability.
    ```
    
    Co-authored-by: malbi <[email protected]>
    jcfr and malbi committed Oct 28, 2024
    Configuration menu
    Copy the full SHA
    92c6e42 View commit details
    Browse the repository at this point in the history