From: Raspbian automatic forward porter Date: Sat, 4 Jul 2026 01:18:03 +0000 (+0100) Subject: Merge version 3.7.0+really3.7.0-2+rpi1 and 3.7.0+really3.7.0-6 to produce 3.7.0+reall... X-Git-Tag: archive/raspbian/3.7.0+really3.7.0-6+rpi1^0 X-Git-Url: https://dgit.raspbian.org/%22http:/www.example.com/cgi//%22https:/www.google.com/search/%22http:/www.example.com/cgi/%22https:/www.google.com/search?a=commitdiff_plain;h=d341ccdbc6ca457a42e19ac7c68759ac6d62e786;p=dcmtk.git Merge version 3.7.0+really3.7.0-2+rpi1 and 3.7.0+really3.7.0-6 to produce 3.7.0+really3.7.0-6+rpi1 --- d341ccdbc6ca457a42e19ac7c68759ac6d62e786 diff --cc debian/changelog index ca58e2e5,49510d53..596e6c9e --- a/debian/changelog +++ b/debian/changelog @@@ -1,9 -1,47 +1,54 @@@ - dcmtk (3.7.0+really3.7.0-2+rpi1) forky-staging; urgency=medium ++dcmtk (3.7.0+really3.7.0-6+rpi1) forky-staging; urgency=medium + + [changes brought forward from 3.6.7-13+rpi1 by Peter Michael Green at Wed, 19 Jun 2024 20:44:47 +0000] + * Disable stack clash protection, it causes assembler errors on raspbian. + - -- Raspbian forward porter Sun, 31 May 2026 03:00:58 +0000 ++ -- Raspbian forward porter Sat, 04 Jul 2026 01:18:02 +0000 ++ + dcmtk (3.7.0+really3.7.0-6) unstable; urgency=medium + + * CVE-2026-12805.patch: new: fix CVE-2026-12805. + This patch fixes a risk of buffer overflow by ensuring negative error + codes in XMLNode::parseFile are properly handled, as well a NULL + values. (Closes: #1140562) + + -- Étienne Mollier Mon, 22 Jun 2026 22:22:11 +0200 + + dcmtk (3.7.0+really3.7.0-5) unstable; urgency=high + + * CVE-2026-10194.patch: new: fix CVE-2026-10194. (Closes: #1139181) + * d/control: add myself to uploaders. + + -- Étienne Mollier Mon, 08 Jun 2026 19:14:40 +0200 + + dcmtk (3.7.0+really3.7.0-4) unstable; urgency=medium + + * Team upload. + * Revert "CVE-2026-10528-partial.patch: new: fix needed by orthanc." + The change is causing an ABI breakage that is going to require a + transition. It is probably more appropriate to wait for the 3.7.1 + release and coordinate the transition on a sane basis. In the + meantime the change is undone. + + -- Étienne Mollier Thu, 04 Jun 2026 22:13:25 +0200 + + dcmtk (3.7.0+really3.7.0-3) unstable; urgency=medium + + * Team upload. + + [ Pino Toscano ] + * d/patches/hurd.patch: new, fix the build on GNU/Hurd. + + [ Étienne Mollier ] + * CVE-2026-5663.patch: new: fix CVE-2026-5663. + This change introduces guardrails to prevent risks of shell code + injection. (Closes: #1133001) + * CVE-2026-10528-partial.patch: new: fix needed by orthanc. + This patch introduce the part of the mitigation against CVE-2026-10528 + affecting orthanc that needs to be applied on the side of dcmtk. See + also Debian bug #1138713. + + -- Étienne Mollier Wed, 03 Jun 2026 21:54:21 +0200 dcmtk (3.7.0+really3.7.0-2) unstable; urgency=medium