[dcmtk] important vulnerability (possible privilege escalation if setuid() fails)

[Igor Gnatenko]

Hi,

we have important vulnerability[0] in yours package - dcmtk.

Please apply upstream patch provided in BZ and submit update using link in BZ
for all Fedora branches.

Also when you created SCM request you added EPEL6 to branches, but we got
nothing in el6, fix it please ;)

[0]https://bugzilla.redhat.com/show_bug.cgi?id=1104041
-- 
-Igor Gnatenko

[Mario Ceresa]

Hi Igor, thanks for the heads up!
I'm at work now and have no access to my ssh key. I'll try to update the
fix later at home.

Best,

Mario




On 15 July 2014 08:59, Igor Gnatenko <ignatenkobrain(a)fedoraproject.org&gt;
wrote:

>  Hi,
>
>  we have important vulnerability[0] in yours package - dcmtk.
>
>  Please apply upstream patch provided in BZ and submit update using link in
>  BZ
>  for all Fedora branches.
>
>  Also when you created SCM request you added EPEL6 to branches, but we got
>  nothing in el6, fix it please ;)
>
>  [0]https://bugzilla.redhat.com/show_bug.cgi?id=1104041
>  --
>  -Igor Gnatenko
>
>