[From nobody Thu Jun  4 05:07:05 2026
Received: (at 1133001-close) by bugs.debian.org; 4 Jun 2026 04:04:06 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-111.1 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,
 MD5_SHA1_SUM,MEDS2,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,
 SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 87; hammy, 150; neutral, 161; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload,
 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo.
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from mitropoulos.debian.org
 ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:35524)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wUzJO-00Eb1W-11 for 1133001-close@bugs.debian.org;
 Thu, 04 Jun 2026 04:04:06 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by mitropoulos.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wUzJL-005pLp-1g for 1133001-close@bugs.debian.org;
 Thu, 04 Jun 2026 04:04:04 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=YUjyWP/tcU1K4tE+fPpeP8JBIJISIJ8fIhjXbTejsek=; b=ZueHvArsBUPpAQ34//13w3fZud
 vU0u8l5CFgnKKJ/AflUgV1EjddLe439VznfYxUC/nIVAmvXDtpaEfg4P//VUolC3fsB7228W/Bv+v
 SODC+WfR5lDzgty5AGnl0gusWPcu5ixoMhCRopGrLHvviCnPMfAcZE6hKdKob9QN8t5MwIzT4YuPu
 QTPW9Y9a0/xASuib82K45q1SJoei9gAv+5mKCraYoy4qXt6RKvjI1E1aOlmxfcLqeV7LA8AWBoied
 ErPZZib1ACQkyFyhlkdBmFT/+kgMrSkUOlZX+nk2QBb92VwPbM5dPMCRNDNsPq+Q9R6dk+VAJwnk7
 Jp0WrEWA==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wUzJK-0000000Cd0T-1V7C; Thu, 04 Jun 2026 04:04:02 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: =?utf-8?q?=C3=89tienne_Mollier?= &lt;emollier@debian.org&gt;
To: 1133001-close@bugs.debian.org
X-DAK: dak process-upload
X-Debian: DAK
X-Debian-Package: dcmtk
Debian: DAK
Debian-Changes: dcmtk_3.7.0+really3.7.0-3_source.changes
Debian-Source: dcmtk
Debian-Version: 3.7.0+really3.7.0-3
Debian-Architecture: source
Debian-Suite: unstable
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1133001: fixed in dcmtk 3.7.0+really3.7.0-3
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============4967382395023347841==&quot;
Message-Id: &lt;E1wUzJK-0000000Cd0T-1V7C@fasolo.debian.org&gt;
Date: Thu, 04 Jun 2026 04:04:02 +0000

--===============4967382395023347841==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: dcmtk
Source-Version: 3.7.0+really3.7.0-3
Done: =C3=89tienne Mollier &lt;emollier@debian.org&gt;

We believe that the bug you reported is fixed in the latest version of
dcmtk, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1133001@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
=C3=89tienne Mollier &lt;emollier@debian.org&gt; (supplier of updated dcmtk package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 03 Jun 2026 21:54:21 +0200
Source: dcmtk
Architecture: source
Version: 3.7.0+really3.7.0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Med Packaging Team &lt;debian-med-packaging@lists.alioth.debi=
an.org&gt;
Changed-By: =C3=89tienne Mollier &lt;emollier@debian.org&gt;
Closes: 1133001
Changes:
 dcmtk (3.7.0+really3.7.0-3) unstable; urgency=3Dmedium
 .
   * Team upload.
 .
   [ Pino Toscano ]
   * d/patches/hurd.patch: new, fix the build on GNU/Hurd.
 .
   [ =C3=89tienne Mollier ]
   * CVE-2026-5663.patch: new: fix CVE-2026-5663.
     This change introduces guardrails to prevent risks of shell code
     injection. (Closes: #1133001)
   * CVE-2026-10528-partial.patch: new: fix needed by orthanc.
     This patch introduce the part of the mitigation against CVE-2026-10528
     affecting orthanc that needs to be applied on the side of dcmtk.  See
     also Debian bug #1138713.
Checksums-Sha1:
 a912ac97babd6d3be9b5583bf02bbfee1740a77a 2669 dcmtk_3.7.0+really3.7.0-3.dsc
 2a944aa00856f2c78c720844f89f33106929a361 41284 dcmtk_3.7.0+really3.7.0-3.deb=
ian.tar.xz
Checksums-Sha256:
 c84feadadfd8dad5e57395ee3ed7dde4a06b057eca09ec3d87e6dded5712d7e2 2669 dcmtk_=
3.7.0+really3.7.0-3.dsc
 1af665a84c05b1132e7362e17fbc0c291d9bc6ce8c52e90a7d9acb9d1d0bb7d2 41284 dcmtk=
_3.7.0+really3.7.0-3.debian.tar.xz
Files:
 22cfb8b218efbfd5b91887bcd62ebdd1 2669 science optional dcmtk_3.7.0+really3.7=
.0-3.dsc
 aff3c2e783fb0b392614c9a6bb2cd5e9 41284 science optional dcmtk_3.7.0+really3.=
7.0-3.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQJIBAEBCgAyFiEEj5GyJ8fW8rGUjII2eTz2fo8NEdoFAmog83UUHGVtb2xsaWVy
QGRlYmlhbi5vcmcACgkQeTz2fo8NEdo3KQ//S46tKck2mpDmxhUALq78EHnJtFwJ
GdY0SvLZ/qLp39NDVYuhOWDKl8wiEzvRIrwkanLKHYXcCtWPzY50aas9E9tYhXzi
L84eJJeredAq5zYIIYjogVPjOonQRr2F3FAyWMLOXLDu5khdXULdr1yqF0NzVRhI
n+QbeK3uOsAHl9uz/H2IlaFLbJYuJeaFMwZmqKN+9DLdGMllNeIODwtqaHMayaoB
naE6Q7u+In9A4GtoNpjnQZY1fAj9EMeHoCJljcUdJ0hahLuVtS7Rwzf/fYwNt0NW
LTtCk0Q4XwZXEe4pgpmV/L/BsECyC6lKPxQXTg7NDGFUGIoMEWdQn0TUBPWnEcR/
p5z0GmZ2RW8fud/Yj1BnlGVrh05VbFxremew14CkRmInZnWc8roDUuBbnnOSkoX6
fhiKkKXHM4vORQ29626Cae6SG/QU61uP8PIEvnEIiDTpjbbji69TZh+869J399ld
QZO/4Qw0Ewu9amJEsxDzOd1zrL2cYMaW+v6JB15oSRe5WGJMUZIV8sC0Eiv5W4am
tj591iYMpJtDd6vvHoAEy7vJ43IAMKq65zT4T0Zg34tN2EtEJZYGcvD3J/ymTwU4
wn0hFKx+juZiu9kTJGq2Pzd+61Wz4iztEn/FfK2G+DQIpsYdPnKW/iNPUMyLJkEe
5LtmNgYPKQ3L6pk=3D
=3D5cEv
-----END PGP SIGNATURE-----


--===============4967382395023347841==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaiD5MgAKCRCb9qggYcy5
IVVpAP0Q6KBeX3twV1FvBzp6vddalHzfjOGLvNjXY1DcuB/DTQEAp7Ppghf4+kXB
Kz30MrssjW8JuYxlS1B9VOZ3UE0F/w4=
=wS+C
-----END PGP SIGNATURE-----

--===============4967382395023347841==--
]