[From nobody Fri Jun 26 17:41:07 2026 Received: (at 1132042-close) by bugs.debian.org; 26 Jun 2026 16:38:38 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-111.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,MEDS2,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS, SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 12; hammy, 150; neutral, 290; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:41598) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wd9Ze-00ACwV-0v for 1132042-close@bugs.debian.org; Fri, 26 Jun 2026 16:38:38 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wd9Zc-00BhZB-1q for 1132042-close@bugs.debian.org; Fri, 26 Jun 2026 16:38:36 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=SfzRrTN9ZdzLXDtFBLPC3tZyPwPgIyo24WvdDteVsLE=; b=Ed5E8YSyQX8eubqhxRAeilEgRm i1ANkr2Ir2ekD1MBwqvfyoauQDiLY1sRS9UkXFlrVVVDemtxSgHpENo10vNd185x5ogp98MyFVNco ndGjGkFdalPHILwy83W9dHA6EcTFzHA64AV6FfVbHb3UDpIh171ZTwcx8jMRxZiDPL2q5jUjxZU+t 6adjW0IjfNz3XPr+B7Ngw9SPSWGb6F0ExaCvTOO/vtnV9pUfPkQTvaZHsaXY/awJBjhVobIX729Ii 4GS2Msouh+NTsPBjKXCfMqd9TvpdpaLZigpb1SWEgH52jHl3qvSoUxxKSROC55WBbUwXgFpcYN5gR SrmmMqeQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wd9Zb-00000008vRn-1WVy; Fri, 26 Jun 2026 16:38:35 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Emmanuel Arias <eamanu@debian.org> To: 1132042-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: gdcm Debian: DAK Debian-Changes: gdcm_3.0.24-11_source.changes Debian-Source: gdcm Debian-Version: 3.0.24-11 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1132042: fixed in gdcm 3.0.24-11 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7309848847670743036==" Message-Id: <E1wd9Zb-00000008vRn-1WVy@fasolo.debian.org> Date: Fri, 26 Jun 2026 16:38:35 +0000 X-CrossAssassin-Score: 4 --===============7309848847670743036== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: gdcm Source-Version: 3.0.24-11 Done: Emmanuel Arias <eamanu@debian.org> We believe that the bug you reported is fixed in the latest version of gdcm, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1132042@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Emmanuel Arias <eamanu@debian.org> (supplier of updated gdcm package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Jun 2026 11:48:10 -0300 Source: gdcm Architecture: source Version: 3.0.24-11 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debi= an.org> Changed-By: Emmanuel Arias <eamanu@debian.org> Closes: 1122862 1123576 1123587 1123589 1132042 Changes: gdcm (3.0.24-11) unstable; urgency=3Dmedium . * Team Upload. * CVE-2025-11266: Avoid out-of-bounds vulnerability. The issue was triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments. This vulnerability leads to a segmentation fault caused by an out-of-bounds memory access due to unsigned integer underflow in buffer indexing (Closes: #1122862). * CVE-2025-52582: Add patch to prevent overlay extraction in case of malformed overlay or image information (Closes: #1123576). * CVE-2025-48429: Add patch to refactor the RLE header to ensure it conforms to the DICOM standard (Closes: #1123589). * CVE-2025-53618 and CVE-2025-53619: Add patch to add a frame size check to ensure that the provided data corresponds to the buffer size (Closes: #1123587). * CVE-2026-3650: Add patch to reject Value Length exceeding stream size (Closes: #1132042). Checksums-Sha1: d4e6d7b9e1991d12d48b4ffa6e106423b67a9bea 3158 gdcm_3.0.24-11.dsc 74f318bac9412e6eea2eb6ed5422de3c18ddd305 288552 gdcm_3.0.24-11.debian.tar.xz 5bef56fd576fbeffad2ff354642cdb174e4d10c8 34392 gdcm_3.0.24-11_amd64.buildinfo Checksums-Sha256: d3cd3b72f49d8697d1d7d4153d044ce08163846c2f05286e30c3695c07eb92da 3158 gdcm_3= .0.24-11.dsc 81457d4be7404392b86e1a20878fd536f0a20cb5ae0bc72d7d74ef07ce49ba88 288552 gdcm= _3.0.24-11.debian.tar.xz 4440f47afbf7cf9ce9001ba1cdabc19c73a46b44cd74a9d2d6414928f7199247 34392 gdcm_= 3.0.24-11_amd64.buildinfo Files: 81c4738566b381c33ea3826bea4abdae 3158 libs optional gdcm_3.0.24-11.dsc bbdfc6923a5f0f9fddf407fcfdd5d204 288552 libs optional gdcm_3.0.24-11.debian.= tar.xz 85fc2d3227a3f87a596748bdeed7830a 34392 libs optional gdcm_3.0.24-11_amd64.bu= ildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEE3lnVbvHK7ir4q61+p3sXeEcY/EFAmo+pRoSHGVhbWFudUBk ZWJpYW4ub3JnAAoJEPqd7F3hHGPxqggP/0AP+F4VgjyjCtILgSEC30yFDkwwEoq+ XCtcz2N9WEP9ZzCPmKGNkgwngE/HJMM5D981B1IWe1btkgPobYA2r9pYg1tnpoGQ 3gJBgFQ9l/SWKp7vbsJDCamxBHyTlJo8KMqJqThhpBePxTgUDz5NDNuDpKMFtWEO jRBOHo4aOhZwQLdci05YYZ1K+dO6cv+uxhuF6+YyhUwpaNuAN84cIwF8sQfRu54Y 3WeI1rA+xvu4rSlO6VWrnhuhL0uuEOVyculK90luPko2yoe6+BkNwYbBn0/u0iBM vOBwKXqm0LYvjL28R6t/CyklDDHWm4wxwJBooDBZWCmlA/bNNu3nHipDAr4iMjWX i9NP/sQ7ASUM5xs7TTgNm0vrXMbS6HNEleCqPO8QSfGk+YvGc/ucln8KBslJ1auc IYnWiJqf4o34hHuRn0M7bl4sXVGFQA6zvR/2pYF/Sh/TFqGAOjEBlJeZfyYsBJnc /ohehLENQvONvwQGzGasen2qMYdownjeWFqiNa3NoPZ4N/bnAPisP8veQZBJuUTK LD1xoy86OrnpsOhW5riC8JZBn5UNYk/3JNZJtFpWciszqKr/Q8AIrTC2MtPpCmqO 9ZrnWoWvKd3iaHAGfhrewEpEAgVt0UYomGBeioY/TPL8SDUdV/wXBpEyzlq4S1aH nL7yuaj9V4Iz =3D60wI -----END PGP SIGNATURE----- --===============7309848847670743036== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaj6rCwAKCRCb9qggYcy5 Ift8AQD1pCS5nEXmLOfclguNgDCdaNjZoLKVdKyW5Pxx4ltCQQEA4ZNb5Gg1KgiD XHNZ02XTTtFyChKv6fZGLs070j+WjgI= =FOoD -----END PGP SIGNATURE----- --===============7309848847670743036==-- ]