[From nobody Mon Jun 22 23:07:06 2026 Received: (at 1140562-close) by bugs.debian.org; 22 Jun 2026 22:04:36 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-111.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,MEDS2,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 95; hammy, 150; neutral, 143; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:49050) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wbmku-00GUQ2-1w for 1140562-close@bugs.debian.org; Mon, 22 Jun 2026 22:04:36 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wbmks-007pVO-1g for 1140562-close@bugs.debian.org; Mon, 22 Jun 2026 22:04:34 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=Yfax275MpZlNdkf6mG3eEs/J8mX30rnTtGeC4B05Kgs=; b=LMJxUgqIHablA7mwpm5QAreJ0B IlNsIs4kskYzOCnQY1b3H/M1dPTvN8PU+nnBh9KfvhQwe6pchUk/ZbcEA8Gm9wL7oqQTgQE3VMt9n zirya/mcueAkYhM5F8IwL3vCqTymtaIq6Pp9CLO75EXlGzVhc80eqyjn7N4WE0RZwyOFALPVhKo3P 8aInpC/yRywDjinX1fHgWCzENXNQqt4QB65PR+Zpyt7M2qXSersdCq3cXMUrZeQexppLSi9zrqisy 5BzGGfyNZADp7ndMgpktZpaFDbRnlBIvefthYEjFml+JsrSId8o2dcLfoOsVgB+/Eor921ysj3kAM 0eqCLscg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wbmkr-00000009wTJ-1MiZ; Mon, 22 Jun 2026 22:04:33 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?=C3=89tienne_Mollier?= <emollier@debian.org> To: 1140562-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: dcmtk Debian: DAK Debian-Changes: dcmtk_3.7.0+really3.7.0-6_source.changes Debian-Source: dcmtk Debian-Version: 3.7.0+really3.7.0-6 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1140562: fixed in dcmtk 3.7.0+really3.7.0-6 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1811829878041100131==" Message-Id: <E1wbmkr-00000009wTJ-1MiZ@fasolo.debian.org> Date: Mon, 22 Jun 2026 22:04:33 +0000 --===============1811829878041100131== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: dcmtk Source-Version: 3.7.0+really3.7.0-6 Done: =C3=89tienne Mollier <emollier@debian.org> We believe that the bug you reported is fixed in the latest version of dcmtk, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1140562@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. =C3=89tienne Mollier <emollier@debian.org> (supplier of updated dcmtk package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 22 Jun 2026 22:22:11 +0200 Source: dcmtk Architecture: source Version: 3.7.0+really3.7.0-6 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debi= an.org> Changed-By: =C3=89tienne Mollier <emollier@debian.org> Closes: 1140562 Changes: dcmtk (3.7.0+really3.7.0-6) unstable; urgency=3Dmedium . * CVE-2026-12805.patch: new: fix CVE-2026-12805. This patch fixes a risk of buffer overflow by ensuring negative error codes in XMLNode::parseFile are properly handled, as well a NULL values. (Closes: #1140562) Checksums-Sha1: 7b870dcbbec5cf8d8629f1090d71f8aa068d3127 2709 dcmtk_3.7.0+really3.7.0-6.dsc 970ebe2981579f861efd94981342c35e56165507 34032 dcmtk_3.7.0+really3.7.0-6.deb= ian.tar.xz Checksums-Sha256: 8bc9051256f77ce918e05ff4206214512859d12961f528c596795a70555a584b 2709 dcmtk_= 3.7.0+really3.7.0-6.dsc 89721128877f1e0c59c1bdf8641b749c48c3e3d0bd6d87a25393b88ae1ba8690 34032 dcmtk= _3.7.0+really3.7.0-6.debian.tar.xz Files: 938ecfb5b8ef3442a19ee7a8a052f4ff 2709 science optional dcmtk_3.7.0+really3.7= .0-6.dsc 91b96d32ac6b898e7a963be219f86613 34032 science optional dcmtk_3.7.0+really3.= 7.0-6.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEj5GyJ8fW8rGUjII2eTz2fo8NEdoFAmo5ql8UHGVtb2xsaWVy QGRlYmlhbi5vcmcACgkQeTz2fo8NEdq7vg/+IWtqhGCZckHP4nKJzC54fwYCxq6z /uVDlJ8TtVSuRmkp949JeKjSKGHn3fTBxVlAsRSmxKo/nKetkzjeQFqf81EQ+M+e h0wZxETYdY3i0k639WQzOvD9ElxWfI9A5U15UZOU0NgYZxCDvpp5Iq7Xtv2+nEP4 vFN98FlqLDavtqJF0jdPWmUogJY57ST5F2+jrJ+HpRNGJZrX/8PNpZKZb9r4oUx0 pcCC4/yZfr8Y9ZGndawgi2coXs/SE0kRSQCUKK7h/sDenlb8yPn81qfBdlMpnCDE BFCcSjNklIgRwRj+4Obh0hra4QLhT29goJHzTOml2+2Ck1fOJsck5IF/ZNDL/LJG JDnM0IJwgmdvw64O3W32Uyn4TsYRzu8o6/G4ZmSmbGwx7bP53kFil7QSdIWEtTW8 UwNw6N6vG7hRCTf6UqMydfVpIC9lP9JT4LnzK0upubue/NQ0XYeNQ9ngemKTXStw ODBtQI+w1k7kCw5kaOi/52IncRN8bgNQOUBJQIbDibfinVXp+D/pUUpDK2+B4eXb 2ZWHFiV1QnLMP/uAGFBYItxHHN6t42d+KBGj0+g8ckGPziqYk61UdvX4ay7dFKx/ fwqFIon2a+f1YVtm0zE6UkKowRquJc6nlCw8UlA60d0NV4PRmx0MNZXLnYv2V3ch 5s/G2AAkjXsu7/E=3D =3DdQuH -----END PGP SIGNATURE----- --===============1811829878041100131== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCajmxcQAKCRCb9qggYcy5 ISPgAQCJSF2Vv97ZoEH/Y2coQT6QL+tkMH6b0RAfr5lmJzmIqAEA2KDoh1FZnsnV 1GvRFYRUNNEn3NCUYSBWf9n3pc6ZJg8= =2NBJ -----END PGP SIGNATURE----- --===============1811829878041100131==-- ]