-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 21:16:40 +0200 Source: dcmtk Binary: dcmtk dcmtk-dbgsym libdcmtk-dev libdcmtk17 libdcmtk17-dbgsym Architecture: amd64 Version: 3.6.7-9~deb12u4 Distribution: bookworm Urgency: medium Maintainer: amd64 Build Daemon (x86-grnet-01) Changed-By: Étienne Mollier Description: dcmtk - OFFIS DICOM toolkit command line utilities libdcmtk-dev - OFFIS DICOM toolkit development libraries and headers libdcmtk17 - OFFIS DICOM toolkit runtime libraries Closes: 1100724 1113993 1122926 1123584 1133001 1139181 1140562 Changes: dcmtk (3.6.7-9~deb12u4) bookworm; urgency=medium . * Team upload. * 0012-CVE-2022-4981.patch: new: fix CVE-2022-4981. * 0013-CVE-2025-2357.patch: new: fix CVE-2025-2357. (Closes: #1100724) * *CVE-2025-9732*.patch: new. These two patches fix CVE-2025-9732. (Closes: #1113993) * 0016-CVE-2025-14607.patch: new: fix CVE-2025-14607. (Closes: #1122926) * 0017-CVE-2025-14841.patch: new: fix CVE-2025-14841. (Closes: #1123584) * 0018-CVE-2026-5663.patch: new: fix CVE-2026-5663. This patch required some rework from upstream due to little changes in the logic and the coding style. (Closes: #1133001) * 0019-CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) * 0020-CVE-2026-12805.patch: new: fix CVE-2026-12805. This patch fixes a risk of buffer overflow by ensuring negative error codes in XMLNode::parseFile are properly handled, as well a NULL values. (Closes: #1140562) Checksums-Sha1: 238af3bf2a5682e4d12c7e2f48d759dd8175b3e4 5520420 dcmtk-dbgsym_3.6.7-9~deb12u4_amd64.deb 1b27e9191e129077b68da8ba82e629e3b30de9ce 9329 dcmtk_3.6.7-9~deb12u4_amd64-buildd.buildinfo 6ee5442b98c427c290b08f528a38722b245e7cbe 888048 dcmtk_3.6.7-9~deb12u4_amd64.deb 7f99d7d041a183ac2da52871d5119abe7097ab95 1013788 libdcmtk-dev_3.6.7-9~deb12u4_amd64.deb d950adfa904e992262b5d545c6415edb8f57797d 65643360 libdcmtk17-dbgsym_3.6.7-9~deb12u4_amd64.deb 7f7a3e623c3055d9bf1df75d4d315bd20a9ef313 5080320 libdcmtk17_3.6.7-9~deb12u4_amd64.deb Checksums-Sha256: 3ec491b9e7b9c59c46422760dd5350610260f2d5eada3a61684f3d00bc76822a 5520420 dcmtk-dbgsym_3.6.7-9~deb12u4_amd64.deb 560d19484e67c97053b0be83b9ffd916405435866e4dbdcbc1e76d0cf4fc88f5 9329 dcmtk_3.6.7-9~deb12u4_amd64-buildd.buildinfo da180a4e99da30c5acf47a405cf2b3f494d7f90ffdb64ad3fe3a0f20c8fe3f05 888048 dcmtk_3.6.7-9~deb12u4_amd64.deb 0a5aa881e8eba4ae76e7248cdb70578567415c3e03e69bd7e599679cbe1b753d 1013788 libdcmtk-dev_3.6.7-9~deb12u4_amd64.deb a37bd765eb2f3e2a5120ed8fd9ef001e204bb8c6b1a7e5ddaaf927e59ca64f0b 65643360 libdcmtk17-dbgsym_3.6.7-9~deb12u4_amd64.deb b182180dab98a3b92f55736aea1a0900b065390950777a1b1b0c8768c14d1234 5080320 libdcmtk17_3.6.7-9~deb12u4_amd64.deb Files: 367abe2b2b3e272ae158a3a00b31e959 5520420 debug optional dcmtk-dbgsym_3.6.7-9~deb12u4_amd64.deb 96e5510338d1ff521bf2cbdb9123ce3e 9329 science optional dcmtk_3.6.7-9~deb12u4_amd64-buildd.buildinfo 0ab01b95ee6b710b8e6d74f2f3cb07f7 888048 science optional dcmtk_3.6.7-9~deb12u4_amd64.deb fe6caa07bc3f313e5c06c1becbf56b97 1013788 libdevel optional libdcmtk-dev_3.6.7-9~deb12u4_amd64.deb 00a6a34b73513c1bb395d8f1c8ce3b22 65643360 debug optional libdcmtk17-dbgsym_3.6.7-9~deb12u4_amd64.deb 4fa0852fc6b56ab773bce7cfec92d8e3 5080320 libs optional libdcmtk17_3.6.7-9~deb12u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmpED90ACgkQf2INRiCd aWLvig/+PpoXzmSFulBlwOEMaR14ywBkES9IjHexK2QEVTrqCPYTBTeY/LlgAxqB 8LJQD65fO2ExRnjA2ovSvTht5pNx+3aTaAzWqUZUeETBLZ7xIirVctAvZPRC6CIB 1YeAYstT4X0RWKfPIoCVcfTixXgb3iUi8i2GKEI5uRL4rCymHxA9rp+c9/ur1TPU fk9S0JMB1gl+RH9snBlttzwifalgTxMbowDUXCfrURXy6aCoUZnpB5is8aQt5ban MhL9mGPeYWOFnTts1153+dbxAirzLICA9zyIlXLbFda5Y4jeFcuN0IOXWpfR2GFC d3UY3lgtYVss+JSq1K/pqkjLzogWTOKU97YTnxWRvIQy55txxiBGtpslSSoGhbE7 EYXyHWtinsdfQrVq5VKL0ycp1He9FOmmlhhBxbKMx5DaRFpofSYClg64jP9tKcYY nVpURcoKUugWOkxi4emBDkpQ3NWw5ZZT+kvBjs1k38hw7DfwhigRNO7LLAigaMJw e8d8PoxLVWnOm2In7qZKrSvEmkLHt+tJLBKO87NMFgo+7UXg3UfEF0VtQibbBVRn 6sw064/5Xkk+iI9Z6pl0DlUnqf9NJTP8XdsPzeD3vwYiNQKqqI/zlGjzF0yzBoji zl/jYfJKFRU1WbLSiR+IC6NB3msmZXQzlIUe56aQT/w8O4nVTgA= =HXPb -----END PGP SIGNATURE-----