From: Raspbian automatic forward porter Date: Tue, 21 Jul 2026 11:23:02 +0000 (+0100) Subject: Merge version 3.6.9-5+rpi1 and 3.6.9-5+deb13u2 to produce 3.6.9-5+rpi1+deb13u2 X-Git-Tag: archive/raspbian/3.6.9-5+rpi1+deb13u2^0 X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/%22/%22http:/www.example.com/cgi/%22?a=commitdiff_plain;h=89f90689b9e4e341b6f2c452685725f079e6aef1;p=dcmtk.git Merge version 3.6.9-5+rpi1 and 3.6.9-5+deb13u2 to produce 3.6.9-5+rpi1+deb13u2 --- 89f90689b9e4e341b6f2c452685725f079e6aef1 diff --cc debian/changelog index 2444a27c,3db0b630..5dcd455e --- a/debian/changelog +++ b/debian/changelog @@@ -1,9 -1,25 +1,32 @@@ - dcmtk (3.6.9-5+rpi1) trixie-staging; urgency=medium ++dcmtk (3.6.9-5+rpi1+deb13u2) trixie-staging; urgency=medium + + [changes brought forward from 3.6.7-13+rpi1 by Peter Michael Green at Wed, 19 Jun 2024 20:44:47 +0000] + * Disable stack clash protection, it causes assembler errors on raspbian. + - -- Raspbian forward porter Thu, 01 May 2025 02:35:22 +0000 ++ -- Raspbian forward porter Tue, 21 Jul 2026 11:23:02 +0000 ++ + dcmtk (3.6.9-5+deb13u2) trixie; urgency=medium + + * Team upload. + * CVE-2026-12805.patch: new: fix CVE-2026-12805. + This patch fixes a risk of buffer overflow by ensuring negative error + codes in XMLNode::parseFile are properly handled, as well a NULL + values. (Closes: #1140562) + + -- Étienne Mollier Tue, 23 Jun 2026 21:44:21 +0200 + + dcmtk (3.6.9-5+deb13u1) trixie; urgency=medium + + * Team upload + * d/patches/*-CVE-2025-9732.patch: new. + These changes pulled from dcmtk upstream address CVE-2025-9732. + (Closes: #1113993) + * 0015-CVE-2025-14607.patch: new: fix CVE-2025-14607. (Closes: #1122926) + * 0016-CVE-2026-5663.patch: new: fix CVE-2026-5663. (Closes: #1133001) + * 0017-CVE-2025-14841.patch: new: fix CVE-2025-14841. (Closes: #1123584) + * 0018-CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) + + -- Étienne Mollier Thu, 11 Jun 2026 20:54:58 +0200 dcmtk (3.6.9-5) unstable; urgency=medium