Bug#1078176: bookworm-pu: package dcm2niix/1.0.20220720-1+deb12u1

2024-08-17 Thread Étienne Mollier
Adam D. Barratt, on 2024-08-17: > On Wed, 2024-08-07 at 23:24 +0200, Étienne Mollier wrote: > > dcm2niix is affected by minor security issue CVE-2024-27629 in > > bookworm: a local attacker can execute arbitrary code as the > > generated file name is not properly escaped and injected into a > > sys

Bug#1078176: bookworm-pu: package dcm2niix/1.0.20220720-1+deb12u1

2024-08-17 Thread Adam D. Barratt
Control: tags -1 + confirmed On Wed, 2024-08-07 at 23:24 +0200, Étienne Mollier wrote: > dcm2niix is affected by minor security issue CVE-2024-27629 in > bookworm: a local attacker can execute arbitrary code as the > generated file name is not properly escaped and injected into a > system call whe

Bug#1078176: bookworm-pu: package dcm2niix/1.0.20220720-1+deb12u1

2024-08-07 Thread Étienne Mollier
Package: release.debian.org Severity: normal Tags: bookworm X-Debbugs-Cc: dcm2n...@packages.debian.org Control: affects -1 + src:dcm2niix User: release.debian@packages.debian.org Usertags: pu Aloha, [ Reason ] dcm2niix is affected by minor security issue CVE-2024-27629 in bookworm: a local at