Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
42c4a36f by Salvatore Bonaccorso at 2026-10-09T10:06:42+02:00
Add new dcmtk issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -201,19 +201,33 @@ CVE-2026-50054 (An authorization flaw in Zimbra
Collaboration Suite\u2019s Grant
CVE-2026-4894 (A vulnerability has been identified regarding insufficient
validation ...)
TODO: check
CVE-2026-44038 (A global out-of-bounds read in the Huffman decoder of the
bundled IJG ...)
- TODO: check
+ - dcmtk <unfixed>
+ NOTE: https://support.dcmtk.org/redmine/issues/1221
+ NOTE: Fixed by:
https://github.com/DCMTK/dcmtk/commit/d6ae1bc8d5b9ae9c7300013c8c85cc2ea0fd8cf5
CVE-2026-44037 (Uncontrolled mutual recursion between
DcmJSONReader::parseDataSet(), D ...)
- TODO: check
+ - dcmtk <unfixed>
+ NOTE: https://support.dcmtk.org/redmine/issues/1225
+ NOTE: Fixed by:
https://github.com/DCMTK/dcmtk/commit/cf955e64c35a1e07ba10698f639d5dcdec53b9d7
CVE-2026-44036 (Uncontrolled mutual recursion between
DcmXMLParseHelper::parseDataSet( ...)
- TODO: check
+ - dcmtk <unfixed>
+ NOTE: https://support.dcmtk.org/redmine/issues/1224
+ NOTE: Fixed by:
https://github.com/DCMTK/dcmtk/commit/87f256d73e30656a822bf7d76d1cf1d9bb693954
CVE-2026-44035 (Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in
dcmdata/l ...)
- TODO: check
+ - dcmtk <unfixed>
+ NOTE: https://support.dcmtk.org/redmine/issues/1215
+ NOTE: Fixed by:
https://github.com/DCMTK/dcmtk/commit/ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f
CVE-2026-44034 (A heap-based out-of-bounds read in
DcmRLECodecDecoder::decodeFrame() i ...)
- TODO: check
+ - dcmtk <unfixed>
+ NOTE: https://support.dcmtk.org/redmine/issues/1213
+ NOTE: Fixed by:
https://github.com/DCMTK/dcmtk/commit/45469f3c30037e9c7159290e4bb74cd7b3b9ef1d
CVE-2026-44033 (Uncontrolled recursion in XMLNode::ParseXMLElement() and
XMLNode::empt ...)
- TODO: check
+ - dcmtk <unfixed>
+ NOTE: https://support.dcmtk.org/redmine/issues/1214
+ NOTE: Fixed by:
https://github.com/DCMTK/dcmtk/commit/d12e350e687530eb41e2b0c860aff4d8c04e5941
CVE-2026-44031 (Uncontrolled recursion in DcmSequenceOfItems::read() and
DcmItem::read ...)
- TODO: check
+ - dcmtk <unfixed>
+ NOTE: https://support.dcmtk.org/redmine/issues/1191
+ NOTE: Fixed by:
https://github.com/DCMTK/dcmtk/commit/885ff0f10372bd589b5f44cea974f28a3964cb0f
CVE-2026-42698 (Concurrent Execution using Shared Resource with Improper
Synchronizati ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-40804 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/42c4a36f5ae97f401bc29bc6915e4f69c8c5d271
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/42c4a36f5ae97f401bc29bc6915e4f69c8c5d271
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
