[Git][security-tracker-team/security-tracker][master] Add CVE-2026-97059/dcmtk

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a170f4bb by Salvatore Bonaccorso at 2026-09-25T06:48:17+02:00
Add CVE-2026-97059/dcmtk

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -92,7 +92,10 @@ CVE-2026-97062 (Aureus ERP through 1.6.0 stores uploaded SVG files on its public
 CVE-2026-97061 (Black Candy through 3.2.1 fails to scope playlist search queries to th ...)
 	NOT-FOR-US: Black Candy
 CVE-2026-97059 (DCMTK through 3.7.0 contains a heap over-read vulnerability in Concate ...)
-	TODO: check
+	- dcmtk <unfixed>
+	NOTE: https://support.dcmtk.org/redmine/issues/1281
+	NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/18379d5b8d234977cc30644e9e70d76d89c87285
+	NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/c33790827a192a598d20463af701a8b819f46ec1
 CVE-2026-97058 (sprintf-js through 1.1.3 passes unbounded precision specifiers to toFi ...)
 	NOT-FOR-US: sprintf-js
 CVE-2026-97057 (redis-parser through 3.0.0 fails to validate the multi-bulk length val ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a170f4bb73bac65d33240cc98ae90b23b8e1ac76

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a170f4bb73bac65d33240cc98ae90b23b8e1ac76
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260925/29f0e49a/attachment.htm>