[gdcm] Fixing CVS-* issues

Emmanuel Arias <[email protected]> Sat, 7 Feb 2026 15:08:34 -0300
Newsgroups gmane.linux.debian.devel.medical
Message-ID <aYd_ouJzSOVYTMTt@debian>
Hi all,

If there are no objections, I will start working on the bookworm (and trixie?)
update for gdcm. There are several CVEs that are currently open, and I am
planning to fix (in bookworm and bullseye) those already fixed in trixie and sid
by Étienne Mollier:

- CVE-2024-25569
- CVE-2024-22391
- CVE-2024-22373

I fixed in sid:

- CVE-2025-11266

I've also contacted upstream about the more recent and open CVEs, and they are
working on them, I'll keep you updated once there are news about them

- CVE-2025-48429
- CVE-2025-52582
- CVE-2025-53618
- CVE-2025-53619

-- 
cheers,
        Emmanuel Arias

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  [email protected]
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: 13796755BBC72BB8ABE2AEB5 FA9DEC5DE11C63F1
 ⠈⠳⣄
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEE3lnVbvHK7ir4q61+p3sXeEcY/EFAmmHf6EACgkQ+p3sXeEc
Y/HH4hAAuaDUSnpIJqwiX+WdUoD1jV/nljJ8lYEFNRRG+xgDNTTGdihHSr0qVhx8
KKoZmRgGaconC4KoRYdzMyhOcKVNZLmhLNyxl3nhJx6SO0cKyu0+gVDte+ac+ffI
3MXJ3A9Va+Y5LiZP0UeCajGWYpKNXFXxRloK3Ho0gYriqgtwbgkLrL2K/0WC80hY
+6lYk1zoTS6aA8E2HgehncL51RobrVnKlWBoXwYN8P+2f3nt/KO1IHAWV4vMVwzD
PuC0ruORq1HckpoS2K29ICAaKlJfPP0yAVdMhImy8ibMHezvSaxrFUvp1TxdeICE
c38XTyMGBL0CWAgQyUE58g3gFY+suaXMjdWrjoO8uZk7vC61veiiBrvEnUWj0vUA
xjjSJ2PACnh9nSABQHIpB2ohHX3cPDkqAlOkmzKQ308OrTzk9O+0gL6VSyHvavjv
P2zcBePGE9QhUIbXSltsT7YzCkYnve8adGW/OHE64dnOj0KiNtnjYQrxbg/ln/P5
C7T3/hUTZFZEuIkUlcZytZqRaQ3Jzch6PyuWp55GKjZZNeDxmwfztDnFT6ZEX17l
ArJ1LuSGE7SyKlW7Z7Gn0O8YpRJ6LXYALmHb6ClmvmAi6vkQousdw886svVwdql+
GR+FHLzRMtfA87zXRrmW5J60FECgokLvwCMJLwnQXJC2CPw6NCE=
=xtaN
-----END PGP SIGNATURE-----