SimpleITK Release v2.5.4

To upgrade to this Python binary package run: pip install --upgrade --pre simpleitk --find-links https://github.com/SimpleITK/SimpleITK/releases/tag/v2.5.4

What’s Changed

  • Update FindR to detect R.dll on Windows by @Artur-man and @blowekamp in https://github.com/SimpleITK/SimpleITK/pull/2546

  • Update ITK Superbuild version to 5.4.6 by @blowekamp in https://github.com/SimpleITK/SimpleITK/pull/2570

Bug Fixes

  • Fixed FindR.cmake to correctly detect R.dll on Windows when building the R package with a MinGW/Rtools toolchain.

  • Fixed macOS package builds by replacing the deprecated macos-13 CI runner with macos-15-intel.

Bug Fixes from ITK 5.4.6

  • Updated GDCM to 2026-03-10 upstream snapshot.

Security Fixes

  • Addresses a memory leak vulnerability (CVE-2026-3650, GHSA-42p8-rv8p-8h4j) in the GDCM library when parsing malformed DICOM files with non-standard VR types in file meta information. A maliciously crafted file can trigger a denial-of-service condition via heap exhaustion. The fix is contained in ITK 5.4.6.

Full Changelog: https://github.com/SimpleITK/SimpleITK/compare/v2.5.3…v2.5.4