-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 20 Feb 2025 21:59:03 +0100 Source: dcmtk Binary: dcmtk dcmtk-dbgsym libdcmtk-dev libdcmtk17 libdcmtk17-dbgsym Architecture: mipsel Version: 3.6.7-9~deb12u3 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Étienne Mollier Description: dcmtk - OFFIS DICOM toolkit command line utilities libdcmtk-dev - OFFIS DICOM toolkit development libraries and headers libdcmtk17 - OFFIS DICOM toolkit runtime libraries Closes: 1070207 1098373 1098374 Changes: dcmtk (3.6.7-9~deb12u3) bookworm; urgency=medium . * Team upload. * Introduce patch series to fix CVE-2024-28130. This change introduces the patches: * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch * 0003-Fixed-wrong-error-handling-previous-commit.patch mapping to upstream commits: * dc6a2446dc03c9db90f82ce17a597f2cd53776c5 * 601b227eecaab33a3a3a11dc256d84b1a62f63af * 7d54f8efec995e5601d089fa17b0625c2b41af23 with the nuance that upstream check functions are inlined, in order to avoid an ABI breakage. Thanks to Adrian Bunk (Closes: #1070207) * 0009-CVE-2025-25475.patch: new: fix CVE-2025-25475. (Closes: #1098373) * 0010-CVE-2025-25474.patch: new: fix CVE-2025-25474. (Closes: #1098374) * 0011-CVE-2025-25472.patch: new: fix CVE-2025-25472. Checksums-Sha1: 2612e86c4a3c8f6361df8c45dd71d9915b89475e 4930764 dcmtk-dbgsym_3.6.7-9~deb12u3_mipsel.deb 16abb83348ba09c1bf0e4972b7c50c37d0244c8f 8915 dcmtk_3.6.7-9~deb12u3_mipsel-buildd.buildinfo 9058d15dc6c370798f3f026843605a0fd9943764 789976 dcmtk_3.6.7-9~deb12u3_mipsel.deb 09c1801eba75cceb83b665a82856f956a2a35cc8 1013216 libdcmtk-dev_3.6.7-9~deb12u3_mipsel.deb 4e7e9b45793673f0565c1a9f32056693b14e20d4 63400140 libdcmtk17-dbgsym_3.6.7-9~deb12u3_mipsel.deb 3665288812ecc4da427e9dd7b768dd4e45dced19 3706672 libdcmtk17_3.6.7-9~deb12u3_mipsel.deb Checksums-Sha256: 3e066fecad05681ac3ab1ee1e18dc10ce9d7bece7a154adf570eec9e52b72b73 4930764 dcmtk-dbgsym_3.6.7-9~deb12u3_mipsel.deb 53b88666e02ec57d664150f19b8fe99029cbb5acf23ea8de19b47f6d6f11340d 8915 dcmtk_3.6.7-9~deb12u3_mipsel-buildd.buildinfo 83d87e04c6e93409472dba766d2d21eb0a9c001c73346f50c18d38f28cad259c 789976 dcmtk_3.6.7-9~deb12u3_mipsel.deb 8ec9444d01b9c59c5b7441c827cf25f468c0ba8246be71d592547757e19165aa 1013216 libdcmtk-dev_3.6.7-9~deb12u3_mipsel.deb c1de59293501c1c8ae276340af3885df5b2a8787e2285042352e345301e893a9 63400140 libdcmtk17-dbgsym_3.6.7-9~deb12u3_mipsel.deb b9fb56c47bcc2cf10f767de4512a37ab6b180e2f2fcc4455eef129f149b9572f 3706672 libdcmtk17_3.6.7-9~deb12u3_mipsel.deb Files: 5dad18beab7d5dc0c6659f4668f039a5 4930764 debug optional dcmtk-dbgsym_3.6.7-9~deb12u3_mipsel.deb eb84ed1d643cb73dc03c47ec221f1963 8915 science optional dcmtk_3.6.7-9~deb12u3_mipsel-buildd.buildinfo 05c7fe69129feff7bf298028d27caf4b 789976 science optional dcmtk_3.6.7-9~deb12u3_mipsel.deb 7bf99c421e50ddfcb21f3554071ea56f 1013216 libdevel optional libdcmtk-dev_3.6.7-9~deb12u3_mipsel.deb 587db4638940748dc37e70638531da69 63400140 debug optional libdcmtk17-dbgsym_3.6.7-9~deb12u3_mipsel.deb f4a1b7b156318d80b43b068f52cded45 3706672 libs optional libdcmtk17_3.6.7-9~deb12u3_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERbXMbY9VMQqnSaVEV4aVsMglzVcFAmfMtwgACgkQV4aVsMgl zVcNWRAAiJmvHKLl6oxOQpQU54og21lpRHeevKaF/96h92lDRMsDqXIotCQsFA8h +FG230beXAYxkKofoeWM2ueoQbTJu6dxPA3pHcTovImzSKKAD0lzN/tfRjyvT6mF FmliB9M8F0A1sRJDiN/8D8NsGFm1YQMbDMLZh6qlHZyCuWSX9Gk8z9Eps2G+Ggh1 CTlT4+/NwuoGZvNC64NPx4khDf/B7YaHT2ApdZbvnU7hJuNdNl0A7MvZ2mk659DF En4mqpspjQsWLpMxjlHEeIYp7WXdwC9wz8Vpk61gnVILHPsnqeZfThQ4KXOFth5R zC6g/usuU3hVk6njeL73itaa9emENlj4+GzGCBh+33S/aRmlhxusrDXNY3H0dZf8 2yAqjvF/pcj3eDff2ybBYdJ9eXXoKr5C4H+5ey4gaY+lNKIXE8BA4Ngd8xaHEL10 pzq0Ha+fGkIYn0ir8I4KzckygoPk8D9ceQDAnHZEJDeEIoXN0UlZkEVaPDqvl3dm Yw8+0opa2SCoIdfohKteGHgy4SOrUaapC4zqKDtejLMqMYw/gX3s/Jibd141mDGn wkSYOHtvCtj49E4e2iwZeZ7Ju9znXufrEugdU7V7njvI9+BPUIUQyY7SGdnGqog1 yZ2iQTOa+YPSisuhv+6P3TWVa9BF10Y8G51V/EOViKciEMwzm+8= =pf9m -----END PGP SIGNATURE-----