-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 21:16:40 +0200 Source: dcmtk Binary: dcmtk dcmtk-dbgsym libdcmtk-dev libdcmtk17 libdcmtk17-dbgsym Architecture: mipsel Version: 3.6.7-9~deb12u4 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Étienne Mollier Description: dcmtk - OFFIS DICOM toolkit command line utilities libdcmtk-dev - OFFIS DICOM toolkit development libraries and headers libdcmtk17 - OFFIS DICOM toolkit runtime libraries Closes: 1100724 1113993 1122926 1123584 1133001 1139181 1140562 Changes: dcmtk (3.6.7-9~deb12u4) bookworm; urgency=medium . * Team upload. * 0012-CVE-2022-4981.patch: new: fix CVE-2022-4981. * 0013-CVE-2025-2357.patch: new: fix CVE-2025-2357. (Closes: #1100724) * *CVE-2025-9732*.patch: new. These two patches fix CVE-2025-9732. (Closes: #1113993) * 0016-CVE-2025-14607.patch: new: fix CVE-2025-14607. (Closes: #1122926) * 0017-CVE-2025-14841.patch: new: fix CVE-2025-14841. (Closes: #1123584) * 0018-CVE-2026-5663.patch: new: fix CVE-2026-5663. This patch required some rework from upstream due to little changes in the logic and the coding style. (Closes: #1133001) * 0019-CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) * 0020-CVE-2026-12805.patch: new: fix CVE-2026-12805. This patch fixes a risk of buffer overflow by ensuring negative error codes in XMLNode::parseFile are properly handled, as well a NULL values. (Closes: #1140562) Checksums-Sha1: 516e76b455869a9eea429ed594365f55934e700a 4951424 dcmtk-dbgsym_3.6.7-9~deb12u4_mipsel.deb 6e8f7b0b7a45ea3088212a746b51e854a2588f22 9103 dcmtk_3.6.7-9~deb12u4_mipsel-buildd.buildinfo f559f6d43e44b40b0e1109bc9bdd255c32fd21ee 790952 dcmtk_3.6.7-9~deb12u4_mipsel.deb d03dcf26bc5f241b53eb03fe0b4520913e9f7ca3 1013676 libdcmtk-dev_3.6.7-9~deb12u4_mipsel.deb 7c1d04c84f0f3e549c11f1c57cc6517c1663d94a 63549908 libdcmtk17-dbgsym_3.6.7-9~deb12u4_mipsel.deb 50459b6878739e9ece2ad75f085013c60fcf6af8 3706832 libdcmtk17_3.6.7-9~deb12u4_mipsel.deb Checksums-Sha256: 0a31e7cc2d3c9ed7e5075a23ed59b979266d3a5a35cd10432a45935d19f045d1 4951424 dcmtk-dbgsym_3.6.7-9~deb12u4_mipsel.deb 3f3e42455f76cd17b965ffc5da00ab9eb44c1f8137d7f3d00b539af47454d596 9103 dcmtk_3.6.7-9~deb12u4_mipsel-buildd.buildinfo def6b139f731513f4ff4d897a3fb902c1941c3b9c789d4c02121d5cde0569227 790952 dcmtk_3.6.7-9~deb12u4_mipsel.deb 8b2ae8e2e43c6c1977da2d4f18393019253b13bab5a2cd6db93202c62189c878 1013676 libdcmtk-dev_3.6.7-9~deb12u4_mipsel.deb 61ca249a5931ffe3f49cdfdb7821dc78de9664a1baa3cb4a6efc673283db7190 63549908 libdcmtk17-dbgsym_3.6.7-9~deb12u4_mipsel.deb 7c5788800a2dafb472893202d39a3044ace16395594dc31ac07fb372d33029db 3706832 libdcmtk17_3.6.7-9~deb12u4_mipsel.deb Files: 8d4b3c38ab8848cc030b77668c71a75c 4951424 debug optional dcmtk-dbgsym_3.6.7-9~deb12u4_mipsel.deb a68a0205556cd55f5d62eb55a4aa0c36 9103 science optional dcmtk_3.6.7-9~deb12u4_mipsel-buildd.buildinfo f13a82fe73b098fff7a5647fbecc704e 790952 science optional dcmtk_3.6.7-9~deb12u4_mipsel.deb 5a2a9866fc2e3cd35377e3ad48b5c4bd 1013676 libdevel optional libdcmtk-dev_3.6.7-9~deb12u4_mipsel.deb 6433d5bf92dfb4f61d7e8ec4c3fa0e40 63549908 debug optional libdcmtk17-dbgsym_3.6.7-9~deb12u4_mipsel.deb 720227e73742697cf6c76f46e1269b54 3706832 libs optional libdcmtk17_3.6.7-9~deb12u4_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEyYUQCyzsgu940OiVpwP2OD8jZaoFAmpEFxIACgkQpwP2OD8j ZarfeBAA5q7VAcDqNwUGlgIE+hPOJmChXvTgM31EbXuT6r8euA91KvuC6LYCcmf3 OyxLIB/sw64NcdgZ/d++0X+RzDirQrFPwuB3K4NELmO3rM7LC8ICYFcVtF/hmKFO dcovKeOCB3/0sdxeXkBzluWJ8JfsXQIHws0bbNedSLDjZ1UhjTfxtI9s3KrQfTki EM+SWIwQmAYO9sX2RoaRRrggZT8wSiKgxhtiNTi6XpduqIF7YSck9nTALJ0nhMIN Ty2h3+uY9XUJS495jvMKGXe24K0XA1gFpYRxii+izYg9flRUFnfznBha16fjIOr/ yrhgnSzKMGOdfspRtaQh+V5MGGhHG/z5vqZf1dbCe81TYQj9xRUNBDfFnWHhGUtr 2Eo/aNWK8VbYjY/1sMyOqTdDay3n31igu4RQPNpEOCb9NGqK4Qxw7aD4negemGBD yn8XeuiRGL++gGVVl+31slN2321vnUsZA+nyBQqtzcHKCHQm+F4HhnZVqunk8Lzx FKyypUcgMIh1varWA11qNfm3iwWJ0Br00nB7ivMcIuETBad341D5LFPon/w2rU31 ld/DMOO6AFqMLve40PgECG3hD5lpz9CuTs2rIDHMTh04MofhyQxPSUq+ykiwZrxJ BqmExumVufv38LAFpu0UW+NV1XCXLp8hsV1/BB7TrvujZtgz4x0= =C4A4 -----END PGP SIGNATURE-----