# Patches fro ITK 5.4.5

**URL:** https://discourse.itk.org/t/patches-fro-itk-5-4-5/7656
**Category:** Community
**Created:** [November 4, 2025, 4:46pm UTC](https://discourse.itk.org/t/patches-fro-itk-5-4-5/7656 "2025-11-04T16:46:38Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![matt.mccormick](https://discourse.itk.org/user_avatar/discourse.itk.org/matt.mccormick/32/7_2.png) [@matt.mccormick](https://discourse.itk.org/u/matt.mccormick)
#### Post date: [November 4, 2025, 4:46pm UTC](https://discourse.itk.org/t/patches-fro-itk-5-4-5/7656/1 "2025-11-04T16:46:38Z")

</div>

Hi folks,

The next patch (bugfix) release, ITK 5.4.5, is coming up.

Patches currently staged on the Git release-5.4 branch are:

```auto
  Bradley Lowekamp (1):
        BUG: Fix setting zero sized CompositeTransforms

  Dženan Zukić (1):
        DOC: Change version number in download.md from 5.4.3 to 5.4.4

  Hans Johnson (8):
        ENH: Backport AnatomicalOrientation to ITKv5
        COMP: Remove wrapping for AnatomicalOrientation backport
        COMP: Remove LEGACY off mode in backport
        DOC: Backport documentation for use of AnatomicalOrientation
        STYLE: Fix spelling ignore for named class (Resizeable)
        ENH: Add minimum policy version specification for external FFTW builds
        ENH: Specify `CMAKE_OSX_ARCHITECTURES` for external FFTW builds
        COMP: Replace np.bool with np.bool_

  Matt McCormick (6):
        COMP: Avoid PySequence_Fast_GET_ITEM
        COMP: Exclude BigIO from AzurePipelinesLinux
        DOC: ITK 5.4.4 release notes
        COMP: Replace np.bool with np.bool_
        DOC: Fix links to 5.4.4 release artifacts
        COMP: igenerator.py %i usage in help string

  Michael Cho (1):
        ENH: Support building with system Eigen3 >= 5

```

Are there other patches that are missing? Patches should be critical bugfixes, improved support for compilers, and documentation fixes.

---

<div class="post-metadata">

### Author: ![dzenanz](https://discourse.itk.org/user_avatar/discourse.itk.org/dzenanz/32/1093_2.png) [@dzenanz](https://discourse.itk.org/u/dzenanz)
#### Post date: [November 5, 2025, 4:35pm UTC](https://discourse.itk.org/t/patches-fro-itk-5-4-5/7656/2 "2025-11-05T16:35:55Z")

</div>

Let’s not forget to do search and replace `5.4.4` into `5.4.5` in `Documentation/docs` this time 😃

Maybe we should add this to release guide, maybe in [Increment the version number](https://github.com/InsightSoftwareConsortium/ITK/blob/main/Documentation/Maintenance/Release.md#increment-the-version-number) section.

---

<div class="post-metadata">

### Author: ![matt.mccormick](https://discourse.itk.org/user_avatar/discourse.itk.org/matt.mccormick/32/7_2.png) [@matt.mccormick](https://discourse.itk.org/u/matt.mccormick)
#### Post date: [November 5, 2025, 5:50pm UTC](https://discourse.itk.org/t/patches-fro-itk-5-4-5/7656/3 "2025-11-05T17:50:20Z")

</div>

Yes, we’ll get the download page updated correctly this time :-). We already have a note about it in the release process documentation here: [ITK/Documentation/Maintenance/Release.md at main · InsightSoftwareConsortium/ITK · GitHub](https://github.com/InsightSoftwareConsortium/ITK/blob/main/Documentation/Maintenance/Release.md#update-the-website)

---

<div class="post-metadata">

### Author: ![blowekamp](https://discourse.itk.org/user_avatar/discourse.itk.org/blowekamp/32/79_2.png) [@blowekamp](https://discourse.itk.org/u/blowekamp)
#### Post date: [November 10, 2025, 8:18pm UTC](https://discourse.itk.org/t/patches-fro-itk-5-4-5/7656/4 "2025-11-10T20:18:21Z")

</div>

Matt,

What is the status of this beta? I’d like to back port the following to patch release:

> <https://github.com/malaterre/GDCM/commit/5829c95c8ac3afa9a3a3413675e948959c28a789>
>
> Original report is:
> 
> Vulnerability VU#591834.1 (VU#591834)
> Date Added: 2025-08-2…1
> Description: An out-of-bounds read vulnerability exists in the Grassroots DICOM library (GDCM), specifically within the SequenceOfFragments::ReadValue method. The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments (compressed image data stored as multiple fragments).

---

<div class="post-metadata">

### Author: ![matt.mccormick](https://discourse.itk.org/user_avatar/discourse.itk.org/matt.mccormick/32/7_2.png) [@matt.mccormick](https://discourse.itk.org/u/matt.mccormick)
#### Post date: [November 15, 2025, 8:34pm UTC](https://discourse.itk.org/t/patches-fro-itk-5-4-5/7656/5 "2025-11-15T20:34:51Z")

</div>

@blowekamp 👍 will be included in 5.4.5.

---

<div class="post-metadata">

### Author: ![blowekamp](https://discourse.itk.org/user_avatar/discourse.itk.org/blowekamp/32/79_2.png) [@blowekamp](https://discourse.itk.org/u/blowekamp)
#### Post date: [November 18, 2025, 12:49pm UTC](https://discourse.itk.org/t/patches-fro-itk-5-4-5/7656/6 "2025-11-18T12:49:29Z")

</div>

What is the timeline for this tag and release?

---

<div class="post-metadata">

### Author: ![matt.mccormick](https://discourse.itk.org/user_avatar/discourse.itk.org/matt.mccormick/32/7_2.png) [@matt.mccormick](https://discourse.itk.org/u/matt.mccormick)
#### Post date: [November 18, 2025, 2:22pm UTC](https://discourse.itk.org/t/patches-fro-itk-5-4-5/7656/7 "2025-11-18T14:22:19Z")

</div>

Tagging tomorrow (Wednesday), release finalized Monday.
