-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 19 Jan 2026 15:16:21 CET Source: dcmtk Architecture: source Version: 3.6.5-1+deb11u6 Distribution: bullseye-security Urgency: high Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Checksums-Sha1: e4649d59dc27ee27c6bea9e63827a96027ad850a 2451 dcmtk_3.6.5-1+deb11u6.dsc 491f7c206f1ed746634af3062b6b791519b13dab 6483626 dcmtk_3.6.5.orig.tar.gz 360d416efdfe41bb51a7f1d54034a46f0ddda5f8 58432 dcmtk_3.6.5-1+deb11u6.debian.tar.xz 8c42bc3acfff35c260cb451369bbd99a23930405 11342 dcmtk_3.6.5-1+deb11u6_amd64.buildinfo Checksums-Sha256: a12bb2d023ae375a4282d774ee7530f158980d21e3e6a115902733561c518940 2451 dcmtk_3.6.5-1+deb11u6.dsc a05178665f21896dbb0974106dba1ad144975414abd760b4cf8f5cc979f9beb9 6483626 dcmtk_3.6.5.orig.tar.gz 458dd1bb9abb6789ca163f5d3888beb284548faa6b60ca58bb21e05dc8ade5f3 58432 dcmtk_3.6.5-1+deb11u6.debian.tar.xz 1fb9042bcee9ba3e8e36983569add58065b532544c4fb3dd0fd102eece89c6fc 11342 dcmtk_3.6.5-1+deb11u6_amd64.buildinfo Changes: dcmtk (3.6.5-1+deb11u6) bullseye-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2025-14607: Possible memory corruption caused by illegal attributes in datasets which are processed by DcmByteString functions. * Fix CVE-2025-14841: Invalid messages may trigger a segmentation fault due to a NULL pointer being de-referenced. Files: df40a338368d7c42374663b46cdcdd3d 2451 science optional dcmtk_3.6.5-1+deb11u6.dsc e19707f64ee5695c496b9c1e48e39d07 6483626 science optional dcmtk_3.6.5.orig.tar.gz f3b67cbe8318e37b9bfedc984300e0da 58432 science optional dcmtk_3.6.5-1+deb11u6.debian.tar.xz 3b42a462a29e365b4274bbea4f7227ff 11342 science optional dcmtk_3.6.5-1+deb11u6_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmluPYxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hkx/AP/2SOg5NAGRyqMe6ekXCiMBn3DFcAucc3RotI qCS9Glp7N+3RiH6JufXMwBmZvpomz7aHzwOJ7RUvLd8J/NWuazwLDTeRtI1WGWuO f7TTwFes29GeF10xPYYJoOGD99E7a2A2lTpHtyU2Abf8vpFEFuA8alflI9klVF64 xyadGgLMEzQ87ERjIQhElCo3NLjJew9Ag3O8OCncMm6hfohFQq8Y7AFx8ol9RMSQ 5DmWIPWrl/uo4Kijvfk1oGqD46vZ/57akzB4+mbC5GPGdmS0pUmwJecXnITlW9r4 yvgpd/b1tVUoSt8hf58VHpViY70FH5DoV63579VjASRBjZT3+y9MJ7HbqLqWq8sM gUoIb0VZkBB02JK93LFOPjT1oKRUHoYPLMxrNRodjbIZ70/lYcdOfJfDvBCXG1xq vFqsTS2KnFghg3ggOlPKF6uqK1JYVFAPa4bSQiJVptgBleDm84qfmaGPqapX+SYL QC1OC7YmA4vJx3eUYoHqQbvUDt4RD4TcSyYbkeRBFdE5JX/nUTXRficaILoqRzJF wtpEsxFLwl4LU4iJfXfSzY5G/+m1L18WduZr1d8DeLu5m7fj0UsUVOAhcGAwfN+s IssbY6Fi/7YcL0lbHdpdxIJ6HOFlZlIEdrBSgJX+wnCi/g9Dq83MYrbodQPdnr6b 4t3uZKsf =pz9G -----END PGP SIGNATURE-----
