Re: Bug#1122926: dcmtk: CVE-2025-14607 and CVE-2025-14841

Étienne Mollier <[email protected]> Mon, 16 Feb 2026 22:30:17 +0100

Newsgroups	gmane.linux.debian.devel.medical
Message-ID	<[email protected]>

Greetings,

In #1127756, Adrian Bunk spotted a build failure of dcmtk on
s390x.  I have spent a bit of time trying to check whether
addressing the issue was manageable.  After determining I would
get nowhere, I have contacted upstream via their contact mail
address dedicated to bug report ; see their CONTRIBUTING.md
file.  If the calendar plays well, dcmtk 3.7.0 may be sprint
material for the upcoming weekend.  If not, well, at least I
woule have tried.

There is still going to be passing through New and the
d/copyright file is somewhat massive, so I don't exclude the
round trip may take some time.  I updated the "master" branch,
in case people wish to help with the review.  "debian/unstable"
on the other hand stores the current 3.7.0+really3.6.9-1, in
case there are needs to further iterate on top of the 3.6.9
version while 3.7.0 is not ready.  For the moment, I won't do
much more until tomorrow evening UTC.

For information and coordination,
-- 
  .''`.  Étienne Mollier <[email protected]>
 : :' :  pgp: 8f91 b227 c7d6 f2b1 948c  8236 793c f67e 8f0d 11da
 `. `'   sent from /dev/pts/3, please excuse my verbosity
   `-    on air: Poulenc - 3 Mouvements perpétuels

signature.asc (application/pgp-signature, 833 B)