[From nobody Tue Jun 30 19:19:20 2026 Received: (at 1139181-close) by bugs.debian.org; 30 Jun 2026 18:17:28 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-111.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,MEDS2,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 4; hammy, 150; neutral, 297; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:47486) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wed1U-006nBa-1X for 1139181-close@bugs.debian.org; Tue, 30 Jun 2026 18:17:28 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wed1S-00FxrF-2o for 1139181-close@bugs.debian.org; Tue, 30 Jun 2026 18:17:26 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=HYWWZqXCdcd4z4NcQW/12P99pz0I/OuhaSMyr5sIXyA=; b=JeQG+bkvdWySPx6v9nZB/zHGNC MlO3L8ZalGW57O6AhHoZejkyvDbhFKvAQXBAhqMF2HKRea6lwEPDYtWtUu8ju1VYGyFFEPbxVUXK4 rV0sivZMYYhwoHRzuJnS1eFeGFSG5A0VDs/KNUL4S0zyTLGWvoOATREws0oTXHnJxhK4lCOWCAT5i UmD15KKmMIWdwWFBNhj1VF0ykUjApXmIq470+lyFPKr95E+w1D4KcSW5gdG1ptvwFXXUuyA44Tjif 7HSMsQWwx4/7/4CC8vNAQ45ZxnwAdSJUM1444zKIuzfbnvqhDRdi9aYQeI2oP0w2q/SLdVbvwpn5X RFVeyMwA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wed1R-00000009bjF-2ll6; Tue, 30 Jun 2026 18:17:25 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?=C3=89tienne_Mollier?= <emollier@debian.org> To: 1139181-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: dcmtk Debian: DAK Debian-Changes: dcmtk_3.6.7-9~deb12u4_source.changes Debian-Source: dcmtk Debian-Version: 3.6.7-9~deb12u4 Debian-Architecture: source Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1139181: fixed in dcmtk 3.6.7-9~deb12u4 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============6519004672843259153==" Message-Id: <E1wed1R-00000009bjF-2ll6@fasolo.debian.org> Date: Tue, 30 Jun 2026 18:17:25 +0000 X-CrossAssassin-Score: 7 --===============6519004672843259153== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: dcmtk Source-Version: 3.6.7-9~deb12u4 Done: =C3=89tienne Mollier <emollier@debian.org> We believe that the bug you reported is fixed in the latest version of dcmtk, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1139181@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. =C3=89tienne Mollier <emollier@debian.org> (supplier of updated dcmtk package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 21:16:40 +0200 Source: dcmtk Architecture: source Version: 3.6.7-9~deb12u4 Distribution: bookworm Urgency: medium Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debi= an.org> Changed-By: =C3=89tienne Mollier <emollier@debian.org> Closes: 1100724 1113993 1122926 1123584 1133001 1139181 1140562 Changes: dcmtk (3.6.7-9~deb12u4) bookworm; urgency=3Dmedium . * Team upload. * 0012-CVE-2022-4981.patch: new: fix CVE-2022-4981. * 0013-CVE-2025-2357.patch: new: fix CVE-2025-2357. (Closes: #1100724) * *CVE-2025-9732*.patch: new. These two patches fix CVE-2025-9732. (Closes: #1113993) * 0016-CVE-2025-14607.patch: new: fix CVE-2025-14607. (Closes: #1122926) * 0017-CVE-2025-14841.patch: new: fix CVE-2025-14841. (Closes: #1123584) * 0018-CVE-2026-5663.patch: new: fix CVE-2026-5663. This patch required some rework from upstream due to little changes in the logic and the coding style. (Closes: #1133001) * 0019-CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) * 0020-CVE-2026-12805.patch: new: fix CVE-2026-12805. This patch fixes a risk of buffer overflow by ensuring negative error codes in XMLNode::parseFile are properly handled, as well a NULL values. (Closes: #1140562) Checksums-Sha1: 5fd1c338f4b714440fdd8a9607397762b25db3a3 2353 dcmtk_3.6.7-9~deb12u4.dsc 85e0f685bd6e5f0a4ce7cb592b0354adbea7703b 70296 dcmtk_3.6.7-9~deb12u4.debian.= tar.xz 558019ab5aa114688d8d5750f81872ea697a632c 11959 dcmtk_3.6.7-9~deb12u4_amd64.b= uildinfo Checksums-Sha256: 67ebf387308cf7039ed49b78ab8ff395e375b970899778d19531512eec6831ed 2353 dcmtk_= 3.6.7-9~deb12u4.dsc 45a0d81621531bd54f2b492bafaccf49d5143f1bbb401121af5a5332fba09c82 70296 dcmtk= _3.6.7-9~deb12u4.debian.tar.xz dee79755ce7f6bb4dfbbd9bf25f1520e11a4e26f1fa436f387955823eaf7d01b 11959 dcmtk= _3.6.7-9~deb12u4_amd64.buildinfo Files: 690f5101a6d9d7c5d22690903deacb27 2353 science optional dcmtk_3.6.7-9~deb12u4= .dsc cf1ad6922c13975b3b20c2cb941b6f21 70296 science optional dcmtk_3.6.7-9~deb12u= 4.debian.tar.xz b71756667b537e072e45ec90bcf02743 11959 science optional dcmtk_3.6.7-9~deb12u= 4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEj5GyJ8fW8rGUjII2eTz2fo8NEdoFAmpDcPkUHGVtb2xsaWVy QGRlYmlhbi5vcmcACgkQeTz2fo8NEdrr5A/+NHP4utL3Ep6vd/bS5MbHWUnqh5AX G8YvyL2evb/SaeTdxFfCQmTHht+NSB5q6lB2sOzCPWRGSTHyaBj+BJL4C7GL6MVV 8pQ96OtGAv0BXhXajviULyTGfV9A2J/NNfdNmQ+UGE0d8qD4G09ByUWSUMUfKOOR JkPtJWA68B/MqFiZjp+kKLOfEm2P2W3DBhH39oNjHFoVRBCKfHLV4eVGo4JzkC95 cprfCwqSc7hcH6Bx8urZHZOO81cDE6IRFuObbs4PNEsMU8g1RKJlPWxFiz0TSV9E NiHrxYtSwx6Nw3NM4v4v5tA1Lpf3YkfQdGFkrZ0cqZ2PgoDaiytVhj9vz+q3f828 wFN9JGZyT9A56L37AN9nZLHt/0TVqa0hoK7D+pLtc9I1dLj3MXw1lg9C60EkKUcy CgquCAfkfLCp01XHOLHkJXOlxo9ifcVt9DfAZtfEaKJvNjKrlRl701LmcNKxpFVD 9ras6X4JR6jhBdhY7kQYcEXYFC7aiTHtIuRCEqMYi6JpN7KcHd8ayt310kklo535 WtjETmUJTy5W9vR0UFZZRI2nSsZs0Yueex/RtCKe9dhBFpCDrVOxDm8StDKdptm0 LGksOushcVEtiU7KyRzbULwafEgO8SLyEGZXrOehOsM818g6g6iZ1hPWBTWk9HYG T61QaKPpavOtjsA=3D =3DETP2 -----END PGP SIGNATURE----- --===============6519004672843259153== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakQINQAKCRCb9qggYcy5 ITT7AQCbfOU8JXO0G3vVnCk/pW1r5oFd00vVFac+AsBPRVph9QD9Hr+Le+TrMTgX x0gTSRw0CcYD32qBywZvunAsel39yAI= =ap9p -----END PGP SIGNATURE----- --===============6519004672843259153==-- ]