GNU bug report logs - #70911
[PATCH] gnu: dcmtk: Update to 3.6.8. [security-fixes]

Previous Next

Package: guix-patches;

Reported by: Nicolas Graves <ngraves <at> ngraves.fr>

Date: Mon, 13 May 2024 07:54:01 UTC

Severity: normal

Tags: patch

Done: Zheng Junjie <zhengjunjie <at> iscas.ac.cn>

Bug is archived. No further changes may be made.

Full log


Message #8 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Zheng Junjie <zhengjunjie <at> iscas.ac.cn>
To: Nicolas Graves via Guix-patches via <guix-patches <at> gnu.org>
Cc: 70911-done <at> debbugs.gnu.org, Nicolas Graves <ngraves <at> ngraves.fr>
Subject: Re: [bug#70911] [PATCH] gnu: dcmtk: Update to 3.6.8. [security-fixes]
Date: Thu, 23 May 2024 13:31:33 +0800
[Message part 1 (text/plain, inline)]
Nicolas Graves via Guix-patches via <guix-patches <at> gnu.org> writes:

> * gnu/packages/image-processing.scm (dcmtk): Update to 3.6.8.
>
> Change-Id: I4e0203219280a2571267f566cdfc8c2a9ea3fd18
> ---
>  gnu/packages/image-processing.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm
> index ceef83f3b1e..7c9d12557e7 100644
> --- a/gnu/packages/image-processing.scm
> +++ b/gnu/packages/image-processing.scm
> @@ -167,7 +167,7 @@ (define-public bart
>  (define-public dcmtk
>    (package
>      (name "dcmtk")
> -    (version "3.6.7")
> +    (version "3.6.8")
>      (source
>       (origin
>         (method url-fetch)
> @@ -176,7 +176,7 @@ (define-public dcmtk
>                         "dcmtk" (string-join (string-split version #\.) "")
>                         "/dcmtk-" version ".tar.gz"))
>         (sha256
> -        (base32 "02kix73qhndgb56cmi5327666i6imp7hi17wwqp26q4d7s72jn3w"))))
> +        (base32 "03vjv2lq5kr79ghf8v0q9wskkrcr2ygi097nybmqs4q3amjpc813"))))
>      (build-system cmake-build-system)
>      (arguments
>       ;; By default, only static archives are built.

thanks, i add "This fixes CVE-2022-43272." and push.

see https://git.savannah.gnu.org/cgit/guix.git/commit/?id=63ee61a56dddaf76ecc8bb45b8a0f28bc12469b5
[signature.asc (application/pgp-signature, inline)]

This bug report was last modified 1 year and 59 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.