AW: update pydicom

Schöke, Karsten <[email protected]> Fri, 8 May 2026 06:07:20 +0000
Newsgroups gmane.linux.debian.devel.medical
Message-ID <[email protected]>
Hi,

> I admit I'm also no real expert if its about reproducible builds.  If we
> are lucky we might once get a patch.  Otherwise you have to make yourself
> comfortable with diffoscope.

The reason for the failed job in reproducible-builds  is that the runtime o=
f the Sphinx documentation generation is embedded within the final HTML doc=
umentation.
Naturally, diffoscope detects a difference in the package hash because of t=
his.
I need to take a closer look at this to figure out how to patch or resolve =
it.
For now, I am uploading the new package, and I will release a new version i=
n the coming days.

Best regards,
Karsten

-----Urspr=FCngliche Nachricht-----
Von: Andreas Tille <[email protected]>=20
Gesendet: Donnerstag, 7. Mai 2026 16:36
An: Sch=F6ke, Karsten <[email protected]>
Cc: [email protected]
Betreff: Re: update pydicom

Hi Karsten,

Am Thu, May 07, 2026 at 12:43:45PM +0000 schrieb Sch=F6ke, Karsten:
> I updated pydicom to the latest version due to CVE-2026-32711.

Thank you for doing so.
=20
> Unfortunately, the upstream developer made quite a few changes, requiring=
 a lot of adjustments.
> I uploaded everything to Salsa:
> https://salsa.debian.org/med-team/pydicom/-/tree/master
> Locally, it only builds with a few warnings, but the job has problems in =
the Salsa CI:
> https://salsa.debian.org/med-team/pydicom/-/jobs/9554086
> Unfortunately, I can't figure out why.

I admit I'm also no real expert if its about reproducible builds.  If we
are lucky we might once get a patch.  Otherwise you have to make yourself
comfortable with diffoscope.

> Who has time to look at the changes?

LGTM.

> If it's okay, please finalize the release and upload it, or give me DM up=
load rights so I can finalize it myself.

DM permissions granted (by accident I also granted permissions for
pyensembl - I don't mind if you feel any need to upload this as well)
=20
> Thanks and best regards,
> Karsten
>=20
> PS: I'm also preparing a PU for stable to fix the CVE.

Nice.

I've seen your name tag here in Hamburg.  Will you show up at the weekend?

Thank you for your contribution
    Andreas.

--=20
https://fam-tille.de