Re: [Dicom] Re: Bug#1122926: dcmtk: CVE-2025-14607 and CVE-2025-14841

Étienne Mollier <[email protected]> Thu, 19 Feb 2026 19:23:46 +0100
Newsgroups gmane.linux.debian.devel.medical
Message-ID <[email protected]>
--v51CeoJf0nYcLn+v
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi Marco,

DCMTK Team, on 2026-02-19:
> Hi =C3=89tienne,
>=20
> > Everything went fine and the Debian experimental upload of dcmtk
> > 3.7.0+really3.7.0-0+exp1 should be on her way to New.
>=20
> Just out of curiosity: What is the meaning of version number
> "3.7.0+really3.7.0-0+exp1"? To me, this looks like: "This is
> not only DCMTK 3.7.0, this is Really! DCMTK 3.7.0, experimental package 1=
=2E"
> But I guess this means something different :-)

I forgot to reflect the soversion bump in the libdcmtkXY package
name in upload 3.7.0-1 to unstable, so had to rapidly rollback
to 3.6.9 using the version scheme 3.7.0+really3.6.9-1, as
otherwise the package manager would fail to capture the upgrade
due to dropping the strict monotony of version numbers.  Follow
up upload needed to upgrade on top of 3.7.0+really3.6.9-1, so
3.7.0+really3.7.0=E2=80=A6 that was.  The situation is temporary and
will be sorted after dcmtk 3.7.1 release and upload to unstable.

In hope this clarifies things,
Have a nice day,  :)
--=20
  .''`.  =C3=89tienne Mollier <[email protected]>
 : :' :  pgp: 8f91 b227 c7d6 f2b1 948c  8236 793c f67e 8f0d 11da
 `. `'   sent from /dev/pts/5, please excuse my verbosity
   `-

--v51CeoJf0nYcLn+v
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=KRDy
-----END PGP SIGNATURE-----

--v51CeoJf0nYcLn+v--