-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 21:16:40 +0200 Source: dcmtk Binary: dcmtk dcmtk-dbgsym libdcmtk-dev libdcmtk17 libdcmtk17-dbgsym Architecture: s390x Version: 3.6.7-9~deb12u4 Distribution: bookworm Urgency: medium Maintainer: s390x Build Daemon (ziehrer) Changed-By: Étienne Mollier Description: dcmtk - OFFIS DICOM toolkit command line utilities libdcmtk-dev - OFFIS DICOM toolkit development libraries and headers libdcmtk17 - OFFIS DICOM toolkit runtime libraries Closes: 1100724 1113993 1122926 1123584 1133001 1139181 1140562 Changes: dcmtk (3.6.7-9~deb12u4) bookworm; urgency=medium . * Team upload. * 0012-CVE-2022-4981.patch: new: fix CVE-2022-4981. * 0013-CVE-2025-2357.patch: new: fix CVE-2025-2357. (Closes: #1100724) * *CVE-2025-9732*.patch: new. These two patches fix CVE-2025-9732. (Closes: #1113993) * 0016-CVE-2025-14607.patch: new: fix CVE-2025-14607. (Closes: #1122926) * 0017-CVE-2025-14841.patch: new: fix CVE-2025-14841. (Closes: #1123584) * 0018-CVE-2026-5663.patch: new: fix CVE-2026-5663. This patch required some rework from upstream due to little changes in the logic and the coding style. (Closes: #1133001) * 0019-CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) * 0020-CVE-2026-12805.patch: new: fix CVE-2026-12805. This patch fixes a risk of buffer overflow by ensuring negative error codes in XMLNode::parseFile are properly handled, as well a NULL values. (Closes: #1140562) Checksums-Sha1: ed9de4781596fb34960ba798a1ee573ba746102e 4877716 dcmtk-dbgsym_3.6.7-9~deb12u4_s390x.deb 04ebaf46a917eb4b2921bd5f7dacd291ca67fecc 9145 dcmtk_3.6.7-9~deb12u4_s390x-buildd.buildinfo 724ba962bc03666a5e91d5413022a9f237f96ad2 804908 dcmtk_3.6.7-9~deb12u4_s390x.deb 416f3bba109ff99196ce64d24322ae3333a6f0ed 1013648 libdcmtk-dev_3.6.7-9~deb12u4_s390x.deb f88f5418c2f62cf9a5ed6654ad1ea36b1fc00a43 63564832 libdcmtk17-dbgsym_3.6.7-9~deb12u4_s390x.deb edeff2c5f56b163efb85da03c4f23d9f31d83bd0 4315424 libdcmtk17_3.6.7-9~deb12u4_s390x.deb Checksums-Sha256: 8c36c123d3cf295bf84c3ab360729532650d735f176e4d726817803d367737d9 4877716 dcmtk-dbgsym_3.6.7-9~deb12u4_s390x.deb dc9d6034572e8f5995ee34ba08e51cd1f35371e0aadf2ec15d78dcb7fd2563b2 9145 dcmtk_3.6.7-9~deb12u4_s390x-buildd.buildinfo c558890d3fed0a49f2a37aa277bd1f3c42685a8a56b2936f4736419d8755a1d2 804908 dcmtk_3.6.7-9~deb12u4_s390x.deb f8da1d41e8d4e8f26945109e286dc01def27802d1a562c1a62ff2b9c92da21cf 1013648 libdcmtk-dev_3.6.7-9~deb12u4_s390x.deb c35cb4d5c89332a8c1419ef6761a9dceede484a37ca60c6040e697e4081e6e6e 63564832 libdcmtk17-dbgsym_3.6.7-9~deb12u4_s390x.deb e9fae503279da76e9543a1f3b142547845a3d10b2725309c21cef8f80e433079 4315424 libdcmtk17_3.6.7-9~deb12u4_s390x.deb Files: 2f13f20e357d2debc1a2403826619797 4877716 debug optional dcmtk-dbgsym_3.6.7-9~deb12u4_s390x.deb 39c330679d539a3b2f0045427fa27830 9145 science optional dcmtk_3.6.7-9~deb12u4_s390x-buildd.buildinfo bee86cd25ace6feac97e6b04ed75af4a 804908 science optional dcmtk_3.6.7-9~deb12u4_s390x.deb 5af72bdcfac4665e21e6f2edbcad133e 1013648 libdevel optional libdcmtk-dev_3.6.7-9~deb12u4_s390x.deb 8217fa82fabb690624554a58d787108d 63564832 debug optional libdcmtk17-dbgsym_3.6.7-9~deb12u4_s390x.deb c555f39956c2a2d545683b4b85ae3b9c 4315424 libs optional libdcmtk17_3.6.7-9~deb12u4_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmpEH9oACgkQMWUFebkH noS8XQ//XzfU59j6lCPspWrA1hl+GqwnJaIm+7ercoL/lOwkq4nUmuDNDkjKU4le Fo3KA7rasN4qmb5/5lcQ4FoAke43HPsIWYEoAIN2gGVTZUZFXheaWmjfu6sMIn4b tO0wFBsMyDGx5I//3ONO95rKmu4BoYul+BclH/WEBauHd5vxjwhbaumXwCWzWE2X xZ3qHVR9JysA3LOBr0gJ9gvWC1g+JblT9N+kdtOKHwD2oLyTLODOIVp2QfJsfqT/ 1yhAmEJWw/cVUUC1d59YHVyMRLBHh85U8pt0h56tfw7/Yh8oBwYxQHqGiOtxxFSf vjxz7q0jn1maMjPwyykyzMZVT/ZGKPGRaDdLXxp8gqWzAbQA6aM0dywlPtk7Jpxh PAEmcMW1pqEUJmcYnucpCyW/yZ0Di0XKW2cZjmreFQwrVnXND4kAkQEh2RvaBXLT ZlamEMtI7BtdxQii4WkIkXkLcBTczb3cprgvRWn0uTd8u9La9GdAsyQNr5oBlTas rPAekdKAHyfBIc4Wk2f2nGQIkiztFxMdwMEzOA2cR7OMhD5BgRij6WibxKQii2so Kf1hy3pUFePrRYOonse8Y7uAH5a1yEBx8AwCWBmYDWKXBoaE7YBU7eLo0h8h27bm r7BzWS+T3+x72epQ6z3HSSkV7yYKgNpcQ6di39Zx76B6btRIEeg= =C80o -----END PGP SIGNATURE-----