[Git][security-tracker-team/security-tracker][master] Track fixed version for dcmtk issues via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
594d968d by Salvatore Bonaccorso at 2026-07-07T21:31:39+02:00
Track fixed version for dcmtk issues via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3216,7 +3216,7 @@ CVE-2026-54500 (Oj (Optimized JSON) is a JSON parser and Object marshaller packa
 	- ruby-oj 3.17.3-1
 	NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-fm7p-mprw-wjm9
 CVE-2026-52868 (An unauthenticated attacker can read worklist records from a directory ...)
-	- dcmtk <unfixed> (bug #1141411)
+	- dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=e3878daf870cd2db50eadfde38615f0afae8a584
 CVE-2026-52198 (Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-1613 ...)
 	NOT-FOR-US: UTT
@@ -3229,17 +3229,17 @@ CVE-2026-52195 (Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-21091
 CVE-2026-52193 (Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-1613 ...)
 	NOT-FOR-US: UTT
 CVE-2026-50254 (An unauthenticated remote attacker can repeatedly send a single crafte ...)
-	- dcmtk <unfixed> (bug #1141411)
+	- dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=23f181f7a3cb8334056f751a3a0c2ddf01046752
 CVE-2026-50110 (Storage Concentrator (SC & SCVM) contains hardcoded credentials for nu ...)
 	NOT-FOR-US: Storage Concentrator
 CVE-2026-50040 (Storage Concentrator (SC & SCVM) is vulnerable to reflected cross-site ...)
 	NOT-FOR-US: Storage Concentrator
 CVE-2026-50003 (A malicious or compromised server can make a DCMTK client using bit-pr ...)
-	- dcmtk <unfixed> (bug #1141411)
+	- dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=eca9a03dda7d4fc1faa7e5a6dac9617938cf5803
 CVE-2026-44628 (An unauthenticated attacker can crash the worklist server with a singl ...)
-	- dcmtk <unfixed> (bug #1141411)
+	- dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=f4e0074682645b1a4289d62581926c4394d5c6d5
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=694a0a06a38015ce768fa161a62b148189f84959
 CVE-2026-44042 (UltraVNC repeater through 1.8.2.2 contains an off-by-one error in the  ...)
@@ -3254,7 +3254,7 @@ CVE-2026-37106 (An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remot
 	NOTE: Bogus CVE assignment for DokuWiki
 	NOTE: https://github.com/dokuwiki/dokuwiki/issues/4682
 CVE-2026-35505 (An unauthenticated remote attacker can repeatedly send crafted connect ...)
-	- dcmtk <unfixed> (bug #1141411)
+	- dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=2312891a8d058c862e00bcbd636e5da26308658a
 CVE-2026-2387 (The Event Organiser plugin for WordPress is vulnerable to Stored Cross ...)
 	NOT-FOR-US: WordPress plugin



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/594d968d71e68d62b7d42b79eb60f461a7113922

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/594d968d71e68d62b7d42b79eb60f461a7113922
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260707/01c02cfb/attachment-0001.htm>