-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 21:16:40 +0200 Source: dcmtk Binary: dcmtk dcmtk-dbgsym libdcmtk-dev libdcmtk17 libdcmtk17-dbgsym Architecture: armel Version: 3.6.7-9~deb12u4 Distribution: bookworm Urgency: medium Maintainer: armel Build Daemon (arm-ubc-01) Changed-By: Étienne Mollier Description: dcmtk - OFFIS DICOM toolkit command line utilities libdcmtk-dev - OFFIS DICOM toolkit development libraries and headers libdcmtk17 - OFFIS DICOM toolkit runtime libraries Closes: 1100724 1113993 1122926 1123584 1133001 1139181 1140562 Changes: dcmtk (3.6.7-9~deb12u4) bookworm; urgency=medium . * Team upload. * 0012-CVE-2022-4981.patch: new: fix CVE-2022-4981. * 0013-CVE-2025-2357.patch: new: fix CVE-2025-2357. (Closes: #1100724) * *CVE-2025-9732*.patch: new. These two patches fix CVE-2025-9732. (Closes: #1113993) * 0016-CVE-2025-14607.patch: new: fix CVE-2025-14607. (Closes: #1122926) * 0017-CVE-2025-14841.patch: new: fix CVE-2025-14841. (Closes: #1123584) * 0018-CVE-2026-5663.patch: new: fix CVE-2026-5663. This patch required some rework from upstream due to little changes in the logic and the coding style. (Closes: #1133001) * 0019-CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) * 0020-CVE-2026-12805.patch: new: fix CVE-2026-12805. This patch fixes a risk of buffer overflow by ensuring negative error codes in XMLNode::parseFile are properly handled, as well a NULL values. (Closes: #1140562) Checksums-Sha1: f68a4db70eda8f3177f257455c0ebc593b65aaf5 4783500 dcmtk-dbgsym_3.6.7-9~deb12u4_armel.deb 5aaa4d971bb5ac7c909e9b9beea956c0a0e1af42 9170 dcmtk_3.6.7-9~deb12u4_armel-buildd.buildinfo 9b4709bdf43b5896dae89d1e86de99d0d96a9398 815616 dcmtk_3.6.7-9~deb12u4_armel.deb 7152ef6453cf6730a31df1764c06fa4a194d59c2 1013736 libdcmtk-dev_3.6.7-9~deb12u4_armel.deb 7b2b67b8e3f1b152ee1a903052bb93b68ee14c56 62188660 libdcmtk17-dbgsym_3.6.7-9~deb12u4_armel.deb 2337e533faf38fca00d5d580c42fd877f4263708 4135596 libdcmtk17_3.6.7-9~deb12u4_armel.deb Checksums-Sha256: 87398107c6ffbc9010ddeb2e361dcf1d18761256a874bf6728fbac2b33af5bf4 4783500 dcmtk-dbgsym_3.6.7-9~deb12u4_armel.deb 2de98b5a275cb18fccfeba50421baee77e0a5c4d73299606620fe26e74f1f16d 9170 dcmtk_3.6.7-9~deb12u4_armel-buildd.buildinfo f0834a0ec6d33cf3a61732c82e8f33a7780ba518859219debc15dac4bfff12f3 815616 dcmtk_3.6.7-9~deb12u4_armel.deb d397b964750a0fa33fd1d60230defeb71b48ab2f799c12e48020d3ae760c6f68 1013736 libdcmtk-dev_3.6.7-9~deb12u4_armel.deb a5b64356c257d089f91bb86dfb743c1171c7db9f3fc19308f2eeeafb006d4187 62188660 libdcmtk17-dbgsym_3.6.7-9~deb12u4_armel.deb 0bf2fc23e84c61a5c7bf4df468e8fef995ba49da0cbcfb86c0d20b1b0d1aae8d 4135596 libdcmtk17_3.6.7-9~deb12u4_armel.deb Files: 3208960b8ac507d277833258ef29ccef 4783500 debug optional dcmtk-dbgsym_3.6.7-9~deb12u4_armel.deb bceb1c3d4d3a266731cadedb33b862c2 9170 science optional dcmtk_3.6.7-9~deb12u4_armel-buildd.buildinfo 341ae312ebe170a44a8c5e589d1c542e 815616 science optional dcmtk_3.6.7-9~deb12u4_armel.deb dd9c31b86072a8cf7bcbe2dd4cc9b3b5 1013736 libdevel optional libdcmtk-dev_3.6.7-9~deb12u4_armel.deb 9f5b67aefc39afadf1cb949dfd82c4bf 62188660 debug optional libdcmtk17-dbgsym_3.6.7-9~deb12u4_armel.deb 1084eb6d8dbc9aba60b535d9be2436c3 4135596 libs optional libdcmtk17_3.6.7-9~deb12u4_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmpEDUsACgkQxqCFmsOW goaWdBAAmg4nfZ3YPz8TKbxcVj0p+A8HVZ1W4AL8BwywuNBJKdzTga9pmO0OBu0F 4zdEJvWa2kVgAtw6Jdvpyko9VTmS7rt5N34+YKZD53CgL5BCDA4sntPyvO2iPTAE PPiwghYACfjBsaHKVyVlMKfWNnIOscCYwvbXFIRzl7dfRAnDcNTmV6pRALC9ZYeg vy2KkWrqVtCWOT6w0VXtuxX1CMQXKhYf+PvzHDgwdgWgwrlSa8qCAU9GKvJ8jr6W ecBsMP3B21Uf4tB21RsKezP1dsAK1ysNrPURQMR74NAn6XbBf2wmGxZ6CfiY4xKQ Ls4C15Rx8XyBZjzG6olsOwT4fN3Zh/pbH5cUSrA2YzAg7OOqcCg5bgIGXxFtSnLd AMz1tDF6f0Gc7JJnfoG7pyXHmpNhCO7YJwXaf4bf0NJICN8INt7lci4e0xnYtP1j wBTNQTr72way1b+qVPw8hpSlqqXPDffNftU8B1I+nG+X71LaE1DfOWMbx2jSMwV0 x7vJOo9HF5H4UpnSfgWxBDuYGJwRuVEcvKmQrAUxbwk7kkvBU9FDBfBf9xe6ZOQE GGPWBSYQ3QuIoegMG52GeYka8jPiVAsbCKD566ylK0M5vRXr/hlpgj3btxL9D2yB HgUvVHJVqj8RROje0Mm0pK9vf2ovu+c5A78bB1fiztiXjIycelE= =kcsE -----END PGP SIGNATURE-----