[From nobody Tue Jun 30 19:19:08 2026 Received: (at 1122926-close) by bugs.debian.org; 30 Jun 2026 18:17:09 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-112.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,MEDS2,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 4; hammy, 150; neutral, 270; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:60682) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wed1B-006n5Q-2F for 1122926-close@bugs.debian.org; Tue, 30 Jun 2026 18:17:09 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wed1A-00G5Ea-1O for 1122926-close@bugs.debian.org; Tue, 30 Jun 2026 18:17:08 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=ozHZnAuxXBe764kuxupAVpt0gvRpQXaGFOgyQGcvsbc=; b=L3G1WEnTk227V14E00xaBK7V29 9boaR5OwNSe5Z5XKo/GZ54PdvKYfJj5pHI7zQC82uR41y2W1pYxH1rHUKsBF1WTGWIt6GZKApQIEP XAYvgjxAcOVjtJ5CtHCjr3Pc+o2+zysDIvGT4u/3hd4+HoFl/cI/m1yYa2psComKWN4pUO2D/Sx8t FijSsDXmomL00WlvCBgza4of3mRRouN1WQ9Jsjam32JpAxjRB/2jw8YCIq6Wt28pJ+1Usb75Y3aya lct7p6nuwOAXDeIx8SWRsP117mfSLtAj5P6p4+ww3QK7L4fJq/w8RxZa5PttmZuTA0AzxAz8Ggng4 vK4hTQ+g==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wed19-00000009bap-2Akl; Tue, 30 Jun 2026 18:17:07 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?=C3=89tienne_Mollier?= <emollier@debian.org> To: 1122926-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: dcmtk Debian: DAK Debian-Changes: dcmtk_3.6.9-5+deb13u2_source.changes Debian-Source: dcmtk Debian-Version: 3.6.9-5+deb13u2 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1122926: fixed in dcmtk 3.6.9-5+deb13u2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1746944797393155020==" Message-Id: <E1wed19-00000009bap-2Akl@fasolo.debian.org> Date: Tue, 30 Jun 2026 18:17:07 +0000 --===============1746944797393155020== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: dcmtk Source-Version: 3.6.9-5+deb13u2 Done: =C3=89tienne Mollier <emollier@debian.org> We believe that the bug you reported is fixed in the latest version of dcmtk, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1122926@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. =C3=89tienne Mollier <emollier@debian.org> (supplier of updated dcmtk package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jun 2026 21:44:21 +0200 Source: dcmtk Architecture: source Version: 3.6.9-5+deb13u2 Distribution: trixie Urgency: medium Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debi= an.org> Changed-By: =C3=89tienne Mollier <emollier@debian.org> Closes: 1113993 1122926 1123584 1133001 1139181 1140562 Changes: dcmtk (3.6.9-5+deb13u2) trixie; urgency=3Dmedium . * Team upload. * CVE-2026-12805.patch: new: fix CVE-2026-12805. This patch fixes a risk of buffer overflow by ensuring negative error codes in XMLNode::parseFile are properly handled, as well a NULL values. (Closes: #1140562) . dcmtk (3.6.9-5+deb13u1) trixie; urgency=3Dmedium . * Team upload * d/patches/*-CVE-2025-9732.patch: new. These changes pulled from dcmtk upstream address CVE-2025-9732. (Closes: #1113993) * 0015-CVE-2025-14607.patch: new: fix CVE-2025-14607. (Closes: #1122926) * 0016-CVE-2026-5663.patch: new: fix CVE-2026-5663. (Closes: #1133001) * 0017-CVE-2025-14841.patch: new: fix CVE-2025-14841. (Closes: #1123584) * 0018-CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) Checksums-Sha1: 1f975701c3c8e0f9c74dc1de2f58c777751a7d4c 2565 dcmtk_3.6.9-5+deb13u2.dsc 9691f8fab87370c8f55bb4a3ab9437fa7d335bcd 39648 dcmtk_3.6.9-5+deb13u2.debian.= tar.xz Checksums-Sha256: a70995acc262f47434117d2d1264176003e1a8cf67d352f595cfa470e2e1c091 2565 dcmtk_= 3.6.9-5+deb13u2.dsc 87027ffc6f18eb11c75957e0c7d9488c6cd69c920b7f020c35909b9e64388814 39648 dcmtk= _3.6.9-5+deb13u2.debian.tar.xz Files: 5598d5fb7c2016a0a34bfbc7cf27c6ef 2565 science optional dcmtk_3.6.9-5+deb13u2= .dsc 92826d816857511f4e3667927e368058 39648 science optional dcmtk_3.6.9-5+deb13u= 2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEj5GyJ8fW8rGUjII2eTz2fo8NEdoFAmpDao4UHGVtb2xsaWVy QGRlYmlhbi5vcmcACgkQeTz2fo8NEdpTNxAAxwoOwajdp5Z/n5GgP1D6twii+CBs RBd5mbdxekkHNA4IBfdlrnvFhsRjLUQroF7D0xjOuFe0cL2dg04Qh2gD+VoDeKKb 40mC41FahTMABA5NT4Je/59KgTKpZce5RkgbIKVnHwcpCShWlG99bYzxc11FzPVt fR6pDM2vRRaP/Z1a0UGpi4YP1iOYYR3cpdM6Ym1hjcfVTqP+J81lWOvkIn7I+Jt2 hoVnQvkpoRHFn2TicW07EQCQVlVQ5Yy8KsgVsiGh6Og9GEv4rU1b0cFkDlPJ3sNv lcbpz3hLOe0J9NfOtkI9103Vi05aaRWOXTp5x1v9AB/3mth1td8rjFNqUlQ0tBaA 4xjj3ke4LehO4RmSkLuYfkKrQkV/4+veuMQXtsA7BnNc0ZwziDXHINjliXcdCFdG TVJQkyD9T8/nue89Zt91uMhksX44tbi3+vD+DkUlCocJIxC5UqxlG75VU5T0m7dw +nEtodtEmqNY5Nb6IwgcFfgpHsCW+WSob9kelhuHfkGE4WI+Gt4KCcsA/w1TBw62 XORPCeGxmFPnSQaHb6JW+i92VYtDug65mpPFsjJejDka5gsc0F8SUWJAvVP9Vx/J WtH1+Xfk9Bob96GasIdrBmco6UdoraZB0gB5MTBLnGJw3BL9U7qNTplH9PEwuFhL wiovk98EWwvZ4NQ=3D =3DdBgP -----END PGP SIGNATURE----- --===============1746944797393155020== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakQIIwAKCRCb9qggYcy5 IW3bAQD16hDyktYOsuIwCLSxVqgXGp12PrDXMPpJbta+65nVXQD+MexIXg2hNHdq zt1cdN0ONkcGYvXXTv1janfw5cxBfAw= =ENMw -----END PGP SIGNATURE----- --===============1746944797393155020==-- ]