Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 40: FEDORA-2024-f02d23b92b Critical: xmedcon Heap Overflow Alert

fedora
Calendar Grey July 24, 2024
Dist Fedora Esm H88
Debian Package Alert: Recent libjpeg-turbo patch resolves buffer overflow in JPEG image processing; urgent security notice ahead.
update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files [fedora-all]

Summary

This project stands for Medical Image Conversion and is released under the

GNU's (L)GPL license. It bundles the C source code, a library, a flexible

command-line utility and a graphical front-end based on the amazing Gtk+

toolkit.

Its main purpose is image conversion while preserving valuable medical

study information. The currently supported formats are: Acr/Nema 2.0,

Analyze (SPM), Concorde/uPET, DICOM 3.0, CTI ECAT 6/7, InterFile 3.3

and PNG or Gif87a/89a towards desktop applications.

Update Information:

update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files [fedora-all] Bug 2283099 (CVE-2024-29421) - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files

Change Log

* Mon Jul 15 2024 Filipe Rosset - 0.24.0-1 - update xmedcon to 0.24.0

References


[ 1 ] Bug #2283099 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files https://bugzilla.redhat.com/show_bug.cgi?id=2283099

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-f02d23b92b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: xmedcon
Product: Fedora 40
Version: 0.24.0
Release: 1.fc40
Summary: A medical image conversion utility and library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here