From 92c6e4238a8db95787e8e544f75ee31e6fc61f99 Mon Sep 17 00:00:00 2001 From: Jean-Christophe Fillion-Robin Date: Mon, 28 Oct 2024 17:59:38 -0400 Subject: [PATCH] BUG: Update DCMTK to backport fixes for CVE-2022-2119 and CVE-2022-2120 Backport security fixes from the following post https://forum.dcmtk.org/viewtopic.php?t=5192 because of the following CVE: * [CVE-2022-2119](https://www.cvedetails.com/cve/CVE-2022-2119/) * [CVE-2022-2120](https://www.cvedetails.com/cve/CVE-2022-2120/) List of DCMTK changes: ``` $ git shortlog 0f9bf4d9e..11972eaa4 --no-merges Marco Eichelberg (2): [Backport] Fixed possible NULL pointer dereference. [Backport] Fixed path traversal vulnerability. ``` Co-authored-by: malbi --- CMakeExternals/DCMTK.cmake | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CMakeExternals/DCMTK.cmake b/CMakeExternals/DCMTK.cmake index 19ba5878a3..afd3788088 100644 --- a/CMakeExternals/DCMTK.cmake +++ b/CMakeExternals/DCMTK.cmake @@ -28,7 +28,7 @@ if(DEFINED DCMTK_DIR AND NOT EXISTS ${DCMTK_DIR}) endif() if(NOT DEFINED DCMTK_DIR AND NOT ${CMAKE_PROJECT_NAME}_USE_SYSTEM_${proj}) - set(revision_tag "0f9bf4d9e9a778c11fdddafca691b451c2b621bc") # patched-DCMTK-3.6.6_20210115 + set(revision_tag "11972eaa4ecdbf3aab0f46eff78f33d7e2b16bfe") # patched-DCMTK-3.6.6_20210115 if(${proj}_REVISION_TAG) set(revision_tag ${${proj}_REVISION_TAG}) endif()