-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 21:16:40 +0200 Source: dcmtk Binary: dcmtk-doc Architecture: all Version: 3.6.7-9~deb12u4 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Étienne Mollier Description: dcmtk-doc - OFFIS DICOM toolkit documentation Closes: 1100724 1113993 1122926 1123584 1133001 1139181 1140562 Changes: dcmtk (3.6.7-9~deb12u4) bookworm; urgency=medium . * Team upload. * 0012-CVE-2022-4981.patch: new: fix CVE-2022-4981. * 0013-CVE-2025-2357.patch: new: fix CVE-2025-2357. (Closes: #1100724) * *CVE-2025-9732*.patch: new. These two patches fix CVE-2025-9732. (Closes: #1113993) * 0016-CVE-2025-14607.patch: new: fix CVE-2025-14607. (Closes: #1122926) * 0017-CVE-2025-14841.patch: new: fix CVE-2025-14841. (Closes: #1123584) * 0018-CVE-2026-5663.patch: new: fix CVE-2026-5663. This patch required some rework from upstream due to little changes in the logic and the coding style. (Closes: #1133001) * 0019-CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) * 0020-CVE-2026-12805.patch: new: fix CVE-2026-12805. This patch fixes a risk of buffer overflow by ensuring negative error codes in XMLNode::parseFile are properly handled, as well a NULL values. (Closes: #1140562) Checksums-Sha1: 23cc59b3447cd1715b8bf553107eec03be06bfc9 7985080 dcmtk-doc_3.6.7-9~deb12u4_all.deb 4cbeab7e2db3602598394a8659bbaa9dd7440856 10056 dcmtk_3.6.7-9~deb12u4_all-buildd.buildinfo Checksums-Sha256: 136db20ed5c2d27692200bc4d2347678522463fddf42e9477f3239e67c6c0869 7985080 dcmtk-doc_3.6.7-9~deb12u4_all.deb 5a253086229cd496fc0b53b369a59467f6f5f7afd10aef84dbcc310e8438dd64 10056 dcmtk_3.6.7-9~deb12u4_all-buildd.buildinfo Files: dc4e622299bdea04c02edf3ac7fc748c 7985080 doc optional dcmtk-doc_3.6.7-9~deb12u4_all.deb 188989530b7755fb814c3f223f22c695 10056 science optional dcmtk_3.6.7-9~deb12u4_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmpEC+IACgkQN8Ugyu9d QiSjcBAAhVwnwVEcSDnC2xqdkaXXAdt4utkdkmgAC6grynbff7k4GldJQU0e87dM I1ZxaooTKJYH22ngHh2GxeyhSZXgKQhL/nOpefrN2boKlXUHpz8PVNS8YHmYdngD chU3RzVz4+s/azzwJUJqNrc7M/uzfMxAu14kVEOs/lYwXAaF/Ouh9bmr4UQQ1NoH maKnqyHXyAdQpY7dgUBVJ/Fj3I9rx+B5J4dHC6Pja63R0CwSMbEEFkWT2fcNuJ02 br+4CO+d49viSV+hb+s36FZ1uMiVRIeIRwcZe2WmhtpQgUx+Wn1exkE5VjGuYw/R yz364iCVIpqaM54fNxybEEqMTRogPQfqIwiL7QmzGJAK0lVfkxc/wVS5AaV1DKd4 wrKMVNdQ0KdUPP0b9TNuoVBO7oq8DLyD6Awk3M6JmNq5J2f77ZIYIpBPYtP+ORS1 fc0T/guwH1z8QMm6Z8lqW9o8DA2VzeC3MVdy/IszE3dEbNsr9X3Sk3pe5bl3ZeHq TyIzJ/6PscAWnN7JP5ti42exl6TLD3Jcp9hxyFOpPuxFsYo28kicxdLJPr7SzGIF 6hCI7bqdngtzu3+92S+oXIOV8NW+63vYWKDmDcj/FYNDmfoj7RIX3DG48SnV5quW n5MPTwOhZAazYpBcW/+wOVKjGs7vNY+4MfIttUDTVPJD/kDlLXU= =U/IX -----END PGP SIGNATURE-----