Fedora 42 : python-pydicom (2026-f89e555af4)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f89e555af4 advisory. Patch release for security advisory CVE-2026-32711. A crafted DICOMDIR could create a path traversal by setting ReferencedFileID to a path outside the File-s...

CVE-2026-32711

pydicom is affected by a Path Traversal vulnerability in versions 2.0.0-rc.1 through 3.0.1 involving a malicious DICOMDIR ReferencedFileID that can reference a path outside the File-set root. pydicom resolves the path existence but does not ensure it stays under the File-set root, allowing subseq...