Bug 14166

Summary: [CVE 21] dcmtk 3.6.6 CVE
Product: [ROSA-based products] ROSA Fresh Reporter: Vladimir Potapov <v.potapov>
Component: Packages from MainAssignee: ROSA Linux Bugs <bugs>
Status: VERIFIED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: blocker    
Priority: Highest CC: a.proklov, i.gaptrakhmanov, pastordidi
Version: AllFlags: v.potapov: qa_verified+
v.potapov: secteam_verified?
a.proklov: published+
Target Milestone: ---   
Hardware: All   
OS: Linux   
URL: CVE-2022-2119,CVE-2021-41688,CVE-2021-41689,CVE-2021-41690,CVE-2022-2121,CVE-2022-2120
Whiteboard:
Platform: --- ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Vladimir Potapov 2023-12-21 16:13:07 MSK 
https://nvd.nist.gov/vuln/detail/CVE-2022-2119 critical
Comment 1 Vladimir Potapov 2023-12-21 16:21:14 MSK 
https://nvd.nist.gov/vuln/detail/CVE-2022-2120 critical!
Comment 2 ilfat 2023-12-21 19:34:33 MSK 
Project from contrib!

CVEs closed with update to 3.6.7

# dcmtk 3.6.7-2
https://abf.rosalinux.ru/build_lists/4892623 i686
https://abf.rosalinux.ru/build_lists/4892624 x86_64
https://abf.rosalinux.ru/build_lists/4892625 aarch64
https://abf.rosalinux.ru/build_lists/4892626 riscv64
Comment 3 Vladimir Potapov 2023-12-28 17:33:43 MSK 
Еще исправлены
CVE-2021-41688
CVE-2021-41689
CVE-2021-41690
CVE-2022-2121
Comment 4 Dmitry Postnikov 2023-12-28 18:19:18 MSK 
*****************************
Обновление отослано в Тестинг
Comment 5 Vladimir Potapov 2024-01-10 06:12:13 MSK 
dcmtk-3.6.7-2
https://abf.rosalinux.ru/build_lists/4892623 i686
https://abf.rosalinux.ru/build_lists/4892624 x86_64
https://abf.rosalinux.ru/build_lists/4892625 aarch64
https://abf.rosalinux.ru/build_lists/4892626 riscv64
**************************** Advisory *************************
CVE-2021-41688
CVE-2021-41689
CVE-2021-41690
CVE-2022-2121
CVE-2022-2119 
CVE-2022-2120 fix
***************************************************************
QA Verified
Comment 6 Vladimir Potapov 2024-01-13 12:35:06 MSK 
Не собрано для 21.15!
Comment 8 Vladimir Potapov 2024-01-13 14:22:56 MSK 
(In reply to ilfat from comment #7)
> dcmtk 3.6.7-2
> 
> # rosa2021.15
> https://abf.rosalinux.ru/build_lists/4954780 i686
> https://abf.rosalinux.ru/build_lists/4954781 x86_64
> https://abf.rosalinux.ru/build_lists/4954782 aarch64

*********************************************************
Опубликовано