[Git][security-tracker-team/security-tracker][master] Mark trixie as no-dsa for dcmtk issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
544e850e by Salvatore Bonaccorso at 2026-07-07T21:39:35+02:00
Mark trixie as no-dsa for dcmtk issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3217,6 +3217,7 @@ CVE-2026-54500 (Oj (Optimized JSON) is a JSON parser and Object marshaller packa
 	NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-fm7p-mprw-wjm9
 CVE-2026-52868 (An unauthenticated attacker can read worklist records from a directory ...)
 	- dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
+	[trixie] - dcmtk <no-dsa> (Minor issue; exposing first in unstable, then via proposed-updates)
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=e3878daf870cd2db50eadfde38615f0afae8a584
 CVE-2026-52198 (Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-1613 ...)
 	NOT-FOR-US: UTT
@@ -3230,6 +3231,7 @@ CVE-2026-52193 (Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-21091
 	NOT-FOR-US: UTT
 CVE-2026-50254 (An unauthenticated remote attacker can repeatedly send a single crafte ...)
 	- dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
+	[trixie] - dcmtk <no-dsa> (Minor issue; exposing first in unstable, then via proposed-updates)
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=23f181f7a3cb8334056f751a3a0c2ddf01046752
 CVE-2026-50110 (Storage Concentrator (SC & SCVM) contains hardcoded credentials for nu ...)
 	NOT-FOR-US: Storage Concentrator
@@ -3237,9 +3239,11 @@ CVE-2026-50040 (Storage Concentrator (SC & SCVM) is vulnerable to reflected cros
 	NOT-FOR-US: Storage Concentrator
 CVE-2026-50003 (A malicious or compromised server can make a DCMTK client using bit-pr ...)
 	- dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
+	[trixie] - dcmtk <no-dsa> (Minor issue; exposing first in unstable, then via proposed-updates)
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=eca9a03dda7d4fc1faa7e5a6dac9617938cf5803
 CVE-2026-44628 (An unauthenticated attacker can crash the worklist server with a singl ...)
 	- dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
+	[trixie] - dcmtk <no-dsa> (Minor issue; exposing first in unstable, then via proposed-updates)
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=f4e0074682645b1a4289d62581926c4394d5c6d5
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=694a0a06a38015ce768fa161a62b148189f84959
 CVE-2026-44042 (UltraVNC repeater through 1.8.2.2 contains an off-by-one error in the  ...)
@@ -3255,6 +3259,7 @@ CVE-2026-37106 (An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remot
 	NOTE: https://github.com/dokuwiki/dokuwiki/issues/4682
 CVE-2026-35505 (An unauthenticated remote attacker can repeatedly send crafted connect ...)
 	- dcmtk 3.7.0+really3.7.0-7 (bug #1141411)
+	[trixie] - dcmtk <no-dsa> (Minor issue; exposing first in unstable, then via proposed-updates)
 	NOTE: Fixed by: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=2312891a8d058c862e00bcbd636e5da26308658a
 CVE-2026-2387 (The Event Organiser plugin for WordPress is vulnerable to Stored Cross ...)
 	NOT-FOR-US: WordPress plugin



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/544e850efd8f9f191b361fbb7d56482d26d2c646

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/544e850efd8f9f191b361fbb7d56482d26d2c646
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260707/c9484e6c/attachment.htm>