[Git][security-tracker-team/security-tracker][master] Add new dcmtk issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
42c4a36f by Salvatore Bonaccorso at 2026-10-09T10:06:42+02:00
Add new dcmtk issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -201,19 +201,33 @@ CVE-2026-50054 (An authorization flaw in Zimbra Collaboration Suite\u2019s Grant
 CVE-2026-4894 (A vulnerability has been identified regarding insufficient validation  ...)
 	TODO: check
 CVE-2026-44038 (A global out-of-bounds read in the Huffman decoder of the bundled IJG  ...)
-	TODO: check
+	- dcmtk <unfixed>
+	NOTE: https://support.dcmtk.org/redmine/issues/1221
+	NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/d6ae1bc8d5b9ae9c7300013c8c85cc2ea0fd8cf5
 CVE-2026-44037 (Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), D ...)
-	TODO: check
+	- dcmtk <unfixed>
+	NOTE: https://support.dcmtk.org/redmine/issues/1225
+	NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/cf955e64c35a1e07ba10698f639d5dcdec53b9d7
 CVE-2026-44036 (Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet( ...)
-	TODO: check
+	- dcmtk <unfixed>
+	NOTE: https://support.dcmtk.org/redmine/issues/1224
+	NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/87f256d73e30656a822bf7d76d1cf1d9bb693954
 CVE-2026-44035 (Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/l ...)
-	TODO: check
+	- dcmtk <unfixed>
+	NOTE: https://support.dcmtk.org/redmine/issues/1215
+	NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f
 CVE-2026-44034 (A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() i ...)
-	TODO: check
+	- dcmtk <unfixed>
+	NOTE: https://support.dcmtk.org/redmine/issues/1213
+	NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/45469f3c30037e9c7159290e4bb74cd7b3b9ef1d
 CVE-2026-44033 (Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::empt ...)
-	TODO: check
+	- dcmtk <unfixed>
+	NOTE: https://support.dcmtk.org/redmine/issues/1214
+	NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/d12e350e687530eb41e2b0c860aff4d8c04e5941
 CVE-2026-44031 (Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read ...)
-	TODO: check
+	- dcmtk <unfixed>
+	NOTE: https://support.dcmtk.org/redmine/issues/1191
+	NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/885ff0f10372bd589b5f44cea974f28a3964cb0f
 CVE-2026-42698 (Concurrent Execution using Shared Resource with Improper Synchronizati ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-40804 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/42c4a36f5ae97f401bc29bc6915e4f69c8c5d271

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/42c4a36f5ae97f401bc29bc6915e4f69c8c5d271
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/23fa4fdf/attachment.htm>