-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 21:16:40 +0200 Source: dcmtk Binary: dcmtk dcmtk-dbgsym libdcmtk-dev libdcmtk17 libdcmtk17-dbgsym Architecture: armhf Version: 3.6.7-9~deb12u4 Distribution: bookworm Urgency: medium Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Étienne Mollier Description: dcmtk - OFFIS DICOM toolkit command line utilities libdcmtk-dev - OFFIS DICOM toolkit development libraries and headers libdcmtk17 - OFFIS DICOM toolkit runtime libraries Closes: 1100724 1113993 1122926 1123584 1133001 1139181 1140562 Changes: dcmtk (3.6.7-9~deb12u4) bookworm; urgency=medium . * Team upload. * 0012-CVE-2022-4981.patch: new: fix CVE-2022-4981. * 0013-CVE-2025-2357.patch: new: fix CVE-2025-2357. (Closes: #1100724) * *CVE-2025-9732*.patch: new. These two patches fix CVE-2025-9732. (Closes: #1113993) * 0016-CVE-2025-14607.patch: new: fix CVE-2025-14607. (Closes: #1122926) * 0017-CVE-2025-14841.patch: new: fix CVE-2025-14841. (Closes: #1123584) * 0018-CVE-2026-5663.patch: new: fix CVE-2026-5663. This patch required some rework from upstream due to little changes in the logic and the coding style. (Closes: #1133001) * 0019-CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) * 0020-CVE-2026-12805.patch: new: fix CVE-2026-12805. This patch fixes a risk of buffer overflow by ensuring negative error codes in XMLNode::parseFile are properly handled, as well a NULL values. (Closes: #1140562) Checksums-Sha1: 9e57952cc3010f3b902f360a8d2878c0f14aad8a 4782636 dcmtk-dbgsym_3.6.7-9~deb12u4_armhf.deb 5d4582fb025a1bc43ad565dc768c0e6f93f0e720 9172 dcmtk_3.6.7-9~deb12u4_armhf-buildd.buildinfo 274e9b136ea2c189dced0ab84adaeea3ed80fbd3 837244 dcmtk_3.6.7-9~deb12u4_armhf.deb 30ecbf9404ca030a2efdaa98e25c2c6584d7435c 1013604 libdcmtk-dev_3.6.7-9~deb12u4_armhf.deb 3667f8da4935eb9edff6da759ef7669e7ed4d06c 62844452 libdcmtk17-dbgsym_3.6.7-9~deb12u4_armhf.deb fc027b22f0564bf1fe1b89283521905ad5fa4ecb 4236332 libdcmtk17_3.6.7-9~deb12u4_armhf.deb Checksums-Sha256: 621641d79131ea84ee3a3ada8bcf24499b8ebe24b68a576cf8b2ae81a01eeaa6 4782636 dcmtk-dbgsym_3.6.7-9~deb12u4_armhf.deb 0c5b0873305dca8fc32e8c0b4bc2e2fffb85f49647b49800ce74a8b6ae62e840 9172 dcmtk_3.6.7-9~deb12u4_armhf-buildd.buildinfo 9c5940bfc4dd368e0f31b9350c684c7a99cc4ce0cd1ca76979705c8159baca92 837244 dcmtk_3.6.7-9~deb12u4_armhf.deb fd574991db704d07d6ed66bce2aca0516b2b490e0fe24e6d2925cad1617a2834 1013604 libdcmtk-dev_3.6.7-9~deb12u4_armhf.deb db1aa2f8264e26e9da2313ca510e5b0e44ef8f9e918746c0b91a636ed597ff26 62844452 libdcmtk17-dbgsym_3.6.7-9~deb12u4_armhf.deb 023e72c0ae0a2680c8e42df6b2d09c1200ced72927c3f0001086198d945e09ca 4236332 libdcmtk17_3.6.7-9~deb12u4_armhf.deb Files: 9b81598888d65a0a2fa7e30b374f9d5c 4782636 debug optional dcmtk-dbgsym_3.6.7-9~deb12u4_armhf.deb 2c2390e4fd748e8d2c48986eb5a770d6 9172 science optional dcmtk_3.6.7-9~deb12u4_armhf-buildd.buildinfo fb0f86a05e256cad780f97afe2eec04a 837244 science optional dcmtk_3.6.7-9~deb12u4_armhf.deb fb38e83422caffff1bb569f0429dfdd3 1013604 libdevel optional libdcmtk-dev_3.6.7-9~deb12u4_armhf.deb 18ab2bacf57dbe17b5804c3cd9b7912f 62844452 debug optional libdcmtk17-dbgsym_3.6.7-9~deb12u4_armhf.deb 4a6484744b22dd85a5df65e99dffb6e6 4236332 libs optional libdcmtk17_3.6.7-9~deb12u4_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmpEDQ4ACgkQ8U6eOZMp j69Vew/8D2P5pNIeSZN6j0B/jFlcNiYLE293Mys9A7/35EYJcuVhKzWwj+M4KFIt igqQYmWMUXRKlq1vPwKT2+G7qV7iDl74OfsFb/hczadyHlLON9p2wNX3FnKNUdZm c7pfmP+vN6Zvkb4ddmL0fvTyFvdpEEHmV+060ZY943S7rJIUpxsdSoG5wEu00oFa 7f26DBjD00Caprv8EE0nlefYFI/OF+/mfpRepsXSDJPwXaiTBcvN5Zs4p/01j/fo +2oH+ZAtegGiRRC6KGVzsomgph4RhGBm8nPej2cTJQY/60PMlSTWk5nxJwIRdczq DSOkA6xIfoqilLvQaK0sPi4iX2dMpLZb9YbxiQNrm7Rza7YAEUOGAv8k3K4/SimU 6JZ2yYOTipWGh+P/PWijBwio7dznbf3PyURsEZk9C3PsDvvbclWHrS1CHTtDNayq xUUnNdsA8L43NMmULV5iVPxbfvXEIFsdo0ClEVGsi+eqoBy/jN3lCCqBAw0QHZWy 3JOwoy8z1N/X5dOGSU8OYLRd3qGsTF5/TQkNeL4/HCMyTNPX9iFJZqzxcR6yBurM e/qrKNBCJMDS1SVjZgOD5DRvcpXbFOfbCok07MdCPFpVzdyojg5XcmHq/MqG6BEL zZsE047n+b0uu+d+ZjG1+3uqCg/xjCH+E4dbMRWOD5zYfykObmQ= =xQkx -----END PGP SIGNATURE-----