Package: dcmtk / 3.6.9-6
Metadata
| Package | Version | Patches format |
|---|---|---|
| dcmtk | 3.6.9-6 | 3.0 (quilt) |
Patch series
view the series file| Patch | File delta | Description |
|---|---|---|
| 01_dcmtk_3.6.0 1.patch | (download) |
dcmqrdb/docs/dcmqrcnf.txt |
4 2 + 2 - 0 ! |
the original maintainer jrgen salk applied a set of patches to the original code. This file contains changes to C++ code |
| 07_dont_export_all_executables.patch | (download) |
CMake/dcmtkMacros.cmake |
4 2 + 2 - 0 ! |
don't add executables to cmake exports CMake exports are used by other packages that compile and link against dcmtk. Because Debian moves some of these executables and also dosn't install the test executables, this import may fail leading to failure to configure the according package. Bug-Debian: https://bugs.debian.org/803304 |
| remove_version.patch | (download) |
CMake/GenerateDCMTKConfigure.cmake |
4 2 + 2 - 0 ! |
remove version |
| 0007 CVE 2024 47796.patch | (download) |
dcmimgle/include/dcmtk/dcmimgle/dimoipxt.h |
4 2 + 2 - 0 ! |
fixed issue rendering invalid monochrome image. Fixed issue when rendering an invalid monochrome DICOM image where the number of pixels stored does not match the expected number of pixels. If the stored number is less than the expected number, the rest of the pixel matrix for the intermediate representation was always filled with the value 0. Under certain, very rare conditions, this could result in memory problems reported by an Address Sanitizer (ASAN). Now, the rest of the matrix is filled with the smallest possible value for the image. . Thanks to Emmanuel Tacheau from the Cisco Talos team <vulndiscovery@external.cisco.com> for the original report, the sample file (PoC) and further details. See TALOS-2024-2122 and CVE-2024-47796. |
| 0008 CVE 2024 52333.patch | (download) |
dcmimgle/libsrc/diimage.cc |
16 11 + 5 - 0 ! |
added check to make sure: highbit < bitsallocated. Added check to the image preprocessing to make sure that the value of HighBit is always less than the value of BitsAllocated. Before, this missing check could lead to memory corruption if an invalid combination of values was retrieved from a malformed DICOM dataset. . Thanks to Emmanuel Tacheau from the Cisco Talos team <vulndiscovery@external.cisco.com> for the report, sample file (PoC) and detailed analysis. See TALOS-2024-2121 and CVE-2024-52333. |
| 0009 CVE 2025 25475.patch | (download) |
dcmdata/libsrc/dcrleccd.cc |
8 7 + 1 - 0 ! |
--- |
| 0010 CVE 2025 25474.patch | (download) |
dcmimgle/include/dcmtk/dcmimgle/diinpxt.h |
7 7 + 0 - 0 ! |
--- |
| 0011 CVE 2025 25472.patch | (download) |
dcmimgle/include/dcmtk/dcmimgle/dimoipxt.h |
12 10 + 2 - 0 ! |
--- |
| 0012 CVE 2025 2357.patch | (download) |
dcmjpls/libcharls/scan.h |
164 87 + 77 - 0 ! |
fixed segfault in jpeg-ls decoder. |
| 0013 CVE 2025 9732.patch | (download) |
dcmimage/include/dcmtk/dcmimage/dicopxt.h |
6 5 + 1 - 0 ! |
fixed issue with invalid "ybr_full" dicom images. Fixed an issue when processing an invalid DICOM image with a Photometric Interpretation of "YBR_FULL" and a Planar Configuration of "1" where the number of pixels stored does not match the expected number of pixels (much too less). Now, the pixel data of such an image is not processed at all, but an empty image (black pixels) is created instead. The user is warned about this by an appropriate log message. . Thanks to Ding zhengzheng <xiaozheng.ding399@gmail.com> for the report and the sample file (PoC). |
| 0014 CVE 2025 9732.patch | (download) |
dcmimage/include/dcmtk/dcmimage/diybrpxt.h |
2 1 + 1 - 0 ! |
fixed issue with commit 7ad81d69b. Fixed an issue with recently committed changes that fix a problem with invalid YBR_FULL images |
