-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 21:16:40 +0200 Source: dcmtk Binary: dcmtk dcmtk-dbgsym libdcmtk-dev libdcmtk17 libdcmtk17-dbgsym Architecture: arm64 Version: 3.6.7-9~deb12u4 Distribution: bookworm Urgency: medium Maintainer: arm64 Build Daemon (arm-ubc-05) Changed-By: Étienne Mollier Description: dcmtk - OFFIS DICOM toolkit command line utilities libdcmtk-dev - OFFIS DICOM toolkit development libraries and headers libdcmtk17 - OFFIS DICOM toolkit runtime libraries Closes: 1100724 1113993 1122926 1123584 1133001 1139181 1140562 Changes: dcmtk (3.6.7-9~deb12u4) bookworm; urgency=medium . * Team upload. * 0012-CVE-2022-4981.patch: new: fix CVE-2022-4981. * 0013-CVE-2025-2357.patch: new: fix CVE-2025-2357. (Closes: #1100724) * *CVE-2025-9732*.patch: new. These two patches fix CVE-2025-9732. (Closes: #1113993) * 0016-CVE-2025-14607.patch: new: fix CVE-2025-14607. (Closes: #1122926) * 0017-CVE-2025-14841.patch: new: fix CVE-2025-14841. (Closes: #1123584) * 0018-CVE-2026-5663.patch: new: fix CVE-2026-5663. This patch required some rework from upstream due to little changes in the logic and the coding style. (Closes: #1133001) * 0019-CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) * 0020-CVE-2026-12805.patch: new: fix CVE-2026-12805. This patch fixes a risk of buffer overflow by ensuring negative error codes in XMLNode::parseFile are properly handled, as well a NULL values. (Closes: #1140562) Checksums-Sha1: 2d3674e15f8607877d904432bf2451c84f56d71b 5084656 dcmtk-dbgsym_3.6.7-9~deb12u4_arm64.deb 6a1d6ea51e500df57094f5c45bd5586089baf163 9328 dcmtk_3.6.7-9~deb12u4_arm64-buildd.buildinfo 42ceb9d4228da44a89fbec05b9c0149610e164ee 783900 dcmtk_3.6.7-9~deb12u4_arm64.deb 4c3e25a6093141b92d6d22df90cec813341f5bec 1013800 libdcmtk-dev_3.6.7-9~deb12u4_arm64.deb c5f3ac63ccebcc442dff6e9def091fb3aaabed75 61411624 libdcmtk17-dbgsym_3.6.7-9~deb12u4_arm64.deb 9d63148809bccd6d1aadef9bff31cddee7209bf0 4240812 libdcmtk17_3.6.7-9~deb12u4_arm64.deb Checksums-Sha256: d7e352bd6dbf1c4822c0c80e4866e8b51546bdf193c983084fb2fadd7413228b 5084656 dcmtk-dbgsym_3.6.7-9~deb12u4_arm64.deb f1a6355a52bd7c8c0a857aee177202d15f2b91865d1c387356d284be5d9c9708 9328 dcmtk_3.6.7-9~deb12u4_arm64-buildd.buildinfo bad201ef8d6e0a2f5b1f49a19a1b327b77fe45fd447c4a8fe6de09f241cae816 783900 dcmtk_3.6.7-9~deb12u4_arm64.deb 9e5a5cf1c5c83b655c681e682faf04b7ef6b12ccb54368e8026484391865fab0 1013800 libdcmtk-dev_3.6.7-9~deb12u4_arm64.deb 906e7028e33888fe0e1fb90ab7f75946dbf56bd73b6753eb8557b421caadcd50 61411624 libdcmtk17-dbgsym_3.6.7-9~deb12u4_arm64.deb 91232c61252a795f878adb1c7a5a929ed5b10f4036cd76705d6f6e62e52fc9fd 4240812 libdcmtk17_3.6.7-9~deb12u4_arm64.deb Files: 885d6b2b64487d204732732cfd9aadc5 5084656 debug optional dcmtk-dbgsym_3.6.7-9~deb12u4_arm64.deb dcfb1ea5587d5a6f2020be408a456de4 9328 science optional dcmtk_3.6.7-9~deb12u4_arm64-buildd.buildinfo c4ac1666b44408486b8958638bc94bc9 783900 science optional dcmtk_3.6.7-9~deb12u4_arm64.deb cb31a962c8b1dd9811c82b16af0a9048 1013800 libdevel optional libdcmtk-dev_3.6.7-9~deb12u4_arm64.deb d764871cc109e78125bc9735a97abfdc 61411624 debug optional libdcmtk17-dbgsym_3.6.7-9~deb12u4_arm64.deb bc43a3fa3a188640bd35c0b9b73364f4 4240812 libs optional libdcmtk17_3.6.7-9~deb12u4_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmpEDOsACgkQnwznazfj XTpQ5xAA5EW3xWKVqpistry9iSNCiHUcNpgLzN3YDm4vcCAyY/j3yOnx/mLMJr04 r8TKKgvsTb7VqNTRBa/oDlk77/Fivd1fmGstf9oi6/CkI8s+I6Ms1VBhCBevLw7/ oZmTEtla9eOrkd4fZOcQiyeavgV/CtAj/uTwTSrHaMuTclIgXb4dC6pNEcwaQoVe xYj7GDgyZdKpKsJ7ERgbHQx2s+1TdKanoO/H95QUVCLb1Ze3zUv2A+H1qzhHvo7B u9L0WCQ3Dxet9qZWzErIeNI9mwF8UkfXQQLQ9Qq+f31FefKJDgWZsLlu1wtPYtat 31+TGcPySlFEZ3/xRxQ/pTocNk5WYiaFq5W7H41Bj+s3vn/LKLpArbUZhn4MpbcN bjndbJG3QaUxyxPhiIfTxZJE7bfaAVDDC9cBhz0zDBjnu0I2256jXvKEBNjcshqS d7pylcWkO3heiDJlkEKeupsx69Z14lbML3/4mI1/eZT6dCF42I7Kh5Hqf4+1ZGG4 Uyf1H47jpeA11rBbv6W/IbTpvKYpBeP9KFUMoTS0okW6TFHdDVcyfUvbvl2jJBF7 GYao7OqBHp/JPHLXLc4boCkurpFtZXhu5im/EHIzuNf2nlySF14VPPBvmAgvdoQZ ofUclSKr8WA2NH5U5ibtPBMAXwsORluMY0Wv7IHCyuL2BI4jmjk= =Yiu2 -----END PGP SIGNATURE-----