Package: dcmtk / 3.6.9-6

Metadata

Package Version Patches format
dcmtk 3.6.9-6 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
01_dcmtk_3.6.0 1.patch | (download)

dcmqrdb/docs/dcmqrcnf.txt | 4 2 + 2 - 0 !
dcmqrdb/etc/dcmqrscp.cfg | 33 20 + 13 - 0 !
2 files changed, 22 insertions(+), 15 deletions(-)

 the original maintainer jrgen salk applied
 a set of patches to the original code.  This file contains
 changes to C++ code
07_dont_export_all_executables.patch | (download)

CMake/dcmtkMacros.cmake | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 don't add executables to cmake exports
 CMake exports are used by other packages that compile
 and link against dcmtk. Because Debian moves some of
 these executables and also dosn't install the test
 executables, this import may fail leading to failure
 to configure the according package. 
Bug-Debian: https://bugs.debian.org/803304
remove_version.patch | (download)

CMake/GenerateDCMTKConfigure.cmake | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 remove version
0007 CVE 2024 47796.patch | (download)

dcmimgle/include/dcmtk/dcmimgle/dimoipxt.h | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

  fixed issue rendering invalid monochrome image.
 Fixed issue when rendering an invalid monochrome DICOM image where the
 number of pixels stored does not match the expected number of pixels.
 If the stored number is less than the expected number, the rest of the
 pixel matrix for the intermediate representation was always filled with
 the value 0. Under certain, very rare conditions, this could result in
 memory problems reported by an Address Sanitizer (ASAN). Now, the rest
 of the matrix is filled with the smallest possible value for the image.
 .
 Thanks to Emmanuel Tacheau from the Cisco Talos team
 <vulndiscovery@external.cisco.com> for the original report, the sample
 file (PoC) and further details. See TALOS-2024-2122 and CVE-2024-47796.


0008 CVE 2024 52333.patch | (download)

dcmimgle/libsrc/diimage.cc | 16 11 + 5 - 0 !
1 file changed, 11 insertions(+), 5 deletions(-)

  added check to make sure: highbit < bitsallocated.
 Added check to the image preprocessing to make sure that the value of
 HighBit is always less than the value of BitsAllocated. Before, this
 missing check could lead to memory corruption if an invalid combination
 of values was retrieved from a malformed DICOM dataset.
 .
 Thanks to Emmanuel Tacheau from the Cisco Talos team
 <vulndiscovery@external.cisco.com> for the report, sample file (PoC)
 and detailed analysis. See TALOS-2024-2121 and CVE-2024-52333.


0009 CVE 2025 25475.patch | (download)

dcmdata/libsrc/dcrleccd.cc | 8 7 + 1 - 0 !
1 file changed, 7 insertions(+), 1 deletion(-)

---
0010 CVE 2025 25474.patch | (download)

dcmimgle/include/dcmtk/dcmimgle/diinpxt.h | 7 7 + 0 - 0 !
1 file changed, 7 insertions(+)

---
0011 CVE 2025 25472.patch | (download)

dcmimgle/include/dcmtk/dcmimgle/dimoipxt.h | 12 10 + 2 - 0 !
1 file changed, 10 insertions(+), 2 deletions(-)

---
0012 CVE 2025 2357.patch | (download)

dcmjpls/libcharls/scan.h | 164 87 + 77 - 0 !
1 file changed, 87 insertions(+), 77 deletions(-)

 fixed segfault in jpeg-ls decoder.
0013 CVE 2025 9732.patch | (download)

dcmimage/include/dcmtk/dcmimage/dicopxt.h | 6 5 + 1 - 0 !
dcmimage/include/dcmtk/dcmimage/diybrpxt.h | 295 153 + 142 - 0 !
dcmimgle/libsrc/dcmimage.cc | 3 2 + 1 - 0 !
3 files changed, 160 insertions(+), 144 deletions(-)

 fixed issue with invalid "ybr_full" dicom images.
 Fixed an issue when processing an invalid DICOM image with a Photometric
 Interpretation of "YBR_FULL" and a Planar Configuration of "1" where
 the number of pixels stored does not match the expected number of pixels
 (much too less). Now, the pixel data of such an image is not processed
 at all, but an empty image (black pixels) is created instead. The user
 is warned about this by an appropriate log message.
 .
 Thanks to Ding zhengzheng <xiaozheng.ding399@gmail.com> for the report
 and the sample file (PoC).
0014 CVE 2025 9732.patch | (download)

dcmimage/include/dcmtk/dcmimage/diybrpxt.h | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fixed issue with commit 7ad81d69b.
 Fixed an issue with recently committed changes that fix a problem with
 invalid YBR_FULL images