Bug#1077549: bookworm-pu: package xmedcon/0.23.0-gtk3+dfsg-1+deb12u1
Control: tags -1 + confirmed
On Mon, 2024-07-29 at 23:00 +0200, Étienne Mollier wrote:
> xmedcon in bookworm is affected by CVE-2024-29421. It is,
> quoting the description: "vulnerable to Buffer Overflow via
> libs/dicom/basic.c which allows an attacker to execute arbitrary
> code". It is currently rated minor by the security team, hence
> following the proposed-update process instead of a security
> update. The issue is tracked in #1077369.
Please go ahead.
Regards,
Adam
Reply to: