stable

gdcm-3.0.23-5.fc40

FEDORA-2024-fae33e6e9f created by gui1ty 5 months ago for Fedora 40

Security fixes

  • TALOS-2024-1924, CVE-2024-22391: heap overflow
  • TALOS-2024-1935, CVE-2024-22373: out-of-bounds write
  • TALOS-2024-1944, CVE-2024-25569: out-of-bounds read

Bug fixes

  • Replace deprecated PyEval_CallObject for compatibility with Python 3.13

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-fae33e6e9f

This update has been submitted for testing by gui1ty.

5 months ago

This update's test gating status has been changed to 'ignored'.

5 months ago

gui1ty edited this update.

5 months ago

This update has been pushed to testing.

5 months ago

This update has been submitted for stable by bodhi.

4 months ago

This update has been pushed to stable.

4 months ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
0
Signed
Content Type
RPM
Test Gating
Builds
1
gdcm-3.0.23-5.fc40
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
5 months ago
in testing
5 months ago
in stable
4 months ago
modified
5 months ago
approved
4 months ago
BZ#2245816 gdcm fails to build with Python 3.13: error: ‘PyEval_CallObject’ was not declared in this scope; did you mean ‘PyObject_CallObject’?
0
0
BZ#2277284 CVE-2024-22391 gdcm: crafted malformed file can lead to memory corruption due to heap overflow
0
0
BZ#2277288 CVE-2024-22391 gdcm: crafted malformed file can lead to memory corruption due to heap overflow [fedora-40]
0
0
BZ#2277289 CVE-2024-22373 gdcm: out-of-bounds write vulnerability lead to a heap buffer overflow
0
0
BZ#2277292 CVE-2024-22373 gdcm: out-of-bounds write vulnerability lead to a heap buffer overflow [fedora-40]
0
0
BZ#2277293 CVE-2024-25569 gdcm: out-of-bounds read vulnerability in the RAWCodec::DecodeBytes
0
0
BZ#2277296 CVE-2024-25569 gdcm: out-of-bounds read vulnerability in the RAWCodec::DecodeBytes [fedora-40]
0
0
gdcm-3.0.23-5.fc40

Automated Test Results

Copyright © 2007-2024 Red Hat, Inc. and others.

Running bodhi-server 8.1.1 on bodhi-web-161-qgrd5.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •