Re: Bug#1122926: dcmtk: CVE-2025-14607 and CVE-2025-14841
Étienne,
Le lun. 16 févr. 2026 à 22:30, Étienne Mollier <emollier@debian.org> a écrit :
>
> Greetings,
>
> In #1127756, Adrian Bunk spotted a build failure of dcmtk on
> s390x. I have spent a bit of time trying to check whether
> addressing the issue was manageable. After determining I would
> get nowhere, I have contacted upstream via their contact mail
> address dedicated to bug report ; see their CONTRIBUTING.md
> file. If the calendar plays well, dcmtk 3.7.0 may be sprint
> material for the upcoming weekend. If not, well, at least I
> woule have tried.
I am pretty sure this is just a false positive. The code base of DCMTK
is compatible with big-endian. I suspect you'll get an answer from the
team real time soon. In case they are busy I suggest you go ahead with
the experimental upload with the test disabled.
Thanks for your help with DCMTK 3.7.0 !
> There is still going to be passing through New and the
> d/copyright file is somewhat massive, so I don't exclude the
> round trip may take some time. I updated the "master" branch,
> in case people wish to help with the review. "debian/unstable"
> on the other hand stores the current 3.7.0+really3.6.9-1, in
> case there are needs to further iterate on top of the 3.6.9
> version while 3.7.0 is not ready. For the moment, I won't do
> much more until tomorrow evening UTC.
>
> For information and coordination,
> --
> .''`. Étienne Mollier <emollier@debian.org>
> : :' : pgp: 8f91 b227 c7d6 f2b1 948c 8236 793c f67e 8f0d 11da
> `. `' sent from /dev/pts/3, please excuse my verbosity
> `- on air: Poulenc - 3 Mouvements perpétuels
Reply to: