GNU bug report logs - #70911
[PATCH] gnu: dcmtk: Update to 3.6.8. [security-fixes]

Previous Next

Package: guix-patches;

Reported by: Nicolas Graves <ngraves <at> ngraves.fr>

Date: Mon, 13 May 2024 07:54:01 UTC

Severity: normal

Tags: patch

Done: Zheng Junjie <zhengjunjie <at> iscas.ac.cn>

To reply to this bug, email your comments to 70911 AT debbugs.gnu.org.
There is no need to reopen the bug first.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to guix-patches <at> gnu.org:
bug#70911; Package guix-patches. (Mon, 13 May 2024 07:54:01 GMT) Full text and rfc822 format available.

Acknowledgement sent to Nicolas Graves <ngraves <at> ngraves.fr>:
New bug report received and forwarded. Copy sent to guix-patches <at> gnu.org. (Mon, 13 May 2024 07:54:01 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Nicolas Graves <ngraves <at> ngraves.fr>
To: guix-patches <at> gnu.org
Cc: ngraves <at> ngraves.fr
Subject: [PATCH] gnu: dcmtk: Update to 3.6.8. [security-fixes]
Date: Mon, 13 May 2024 09:53:11 +0200
* gnu/packages/image-processing.scm (dcmtk): Update to 3.6.8.

Change-Id: I4e0203219280a2571267f566cdfc8c2a9ea3fd18
---
 gnu/packages/image-processing.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm
index ceef83f3b1e..7c9d12557e7 100644
--- a/gnu/packages/image-processing.scm
+++ b/gnu/packages/image-processing.scm
@@ -167,7 +167,7 @@ (define-public bart
 (define-public dcmtk
   (package
     (name "dcmtk")
-    (version "3.6.7")
+    (version "3.6.8")
     (source
      (origin
        (method url-fetch)
@@ -176,7 +176,7 @@ (define-public dcmtk
                        "dcmtk" (string-join (string-split version #\.) "")
                        "/dcmtk-" version ".tar.gz"))
        (sha256
-        (base32 "02kix73qhndgb56cmi5327666i6imp7hi17wwqp26q4d7s72jn3w"))))
+        (base32 "03vjv2lq5kr79ghf8v0q9wskkrcr2ygi097nybmqs4q3amjpc813"))))
     (build-system cmake-build-system)
     (arguments
      ;; By default, only static archives are built.
-- 
2.41.0





Information forwarded to guix-patches <at> gnu.org:
bug#70911; Package guix-patches. (Thu, 23 May 2024 05:33:01 GMT) Full text and rfc822 format available.

Message #8 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Zheng Junjie <zhengjunjie <at> iscas.ac.cn>
To: Nicolas Graves via Guix-patches via <guix-patches <at> gnu.org>
Cc: 70911-done <at> debbugs.gnu.org, Nicolas Graves <ngraves <at> ngraves.fr>
Subject: Re: [bug#70911] [PATCH] gnu: dcmtk: Update to 3.6.8. [security-fixes]
Date: Thu, 23 May 2024 13:31:33 +0800
[Message part 1 (text/plain, inline)]
Nicolas Graves via Guix-patches via <guix-patches <at> gnu.org> writes:

> * gnu/packages/image-processing.scm (dcmtk): Update to 3.6.8.
>
> Change-Id: I4e0203219280a2571267f566cdfc8c2a9ea3fd18
> ---
>  gnu/packages/image-processing.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm
> index ceef83f3b1e..7c9d12557e7 100644
> --- a/gnu/packages/image-processing.scm
> +++ b/gnu/packages/image-processing.scm
> @@ -167,7 +167,7 @@ (define-public bart
>  (define-public dcmtk
>    (package
>      (name "dcmtk")
> -    (version "3.6.7")
> +    (version "3.6.8")
>      (source
>       (origin
>         (method url-fetch)
> @@ -176,7 +176,7 @@ (define-public dcmtk
>                         "dcmtk" (string-join (string-split version #\.) "")
>                         "/dcmtk-" version ".tar.gz"))
>         (sha256
> -        (base32 "02kix73qhndgb56cmi5327666i6imp7hi17wwqp26q4d7s72jn3w"))))
> +        (base32 "03vjv2lq5kr79ghf8v0q9wskkrcr2ygi097nybmqs4q3amjpc813"))))
>      (build-system cmake-build-system)
>      (arguments
>       ;; By default, only static archives are built.

thanks, i add "This fixes CVE-2022-43272." and push.

see https://git.savannah.gnu.org/cgit/guix.git/commit/?id=63ee61a56dddaf76ecc8bb45b8a0f28bc12469b5
[signature.asc (application/pgp-signature, inline)]

Reply sent to Zheng Junjie <zhengjunjie <at> iscas.ac.cn>:
You have taken responsibility. (Thu, 23 May 2024 05:33:02 GMT) Full text and rfc822 format available.

Notification sent to Nicolas Graves <ngraves <at> ngraves.fr>:
bug acknowledged by developer. (Thu, 23 May 2024 05:33:02 GMT) Full text and rfc822 format available.

This bug report was last modified 9 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.