From: apo@debian.org   
      
   Hi Étienne,   
      
   Am Dienstag, dem 10.02.2026 um 23:27 +0100 schrieb Étienne Mollier:   
   > Hi Markus,   
   >    
   > > I have prepared security updates for bookworm and trixie and could also fix   
   > > unstable via targeted patches. I would rather not package a new upstream   
   > > release though. I believe the release team would be in favor of addressing   
   > > these issues in unstable and testing first before I am going to fix   
   > > bookworm   
   > > and trixie. What do you think?    
   >    
   > I rediscovered work in progress staging in a directory on my   
   > machine to proceed to a dcmtk upstream upgrade in unstable.   
   > I've never finished, probably due to running into other duties   
   > AFK.  I'm not sure how much work is left to have the package   
   > into an uploadable state.  I'm okay with rebasing my work on top   
   > of your NMU/Team upload with targeted changes, so that getting   
   > the newer upstream release does not go in the way of shipping   
   > the necessary security patches.   
      
   If you have already started to work on a new upstream release, then I suggest   
   to continue this path because I assume users prefer that anyway in unstable or   
   testing. Version 3.7.0 includes the fixes for these two CVE. If you won't have   
   the time to upload a new upstream version in February then I can prepare a NMU   
   with two targeted patches based on the current version in unstable. We don't   
   need to rebase your work though because, like I said, the new upstream version   
   will fix the problem anyway.   
      
   >    
   > Thanks for your help with fixing the security issues of dcmtk in   
   > stable release!   
   >    
   > Have a nice day,  :)   
      
   Cheers,   
      
   Markus   
      
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQKTBAABCgB9FiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmmLtcFfFIAAAAAALgAo   
   aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD   
   RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQACgkQ2a0UuVE7   
   UeRXkw//eHbePV6CuwZeQm0402gkTVLxLsbtfB3/yDFKGb56YVHbi3jz+4R1D5iN   
   rmAKmTphMs8Fk+AVDhpuA2vbMIm/DYfLui+FsIAm9l9ynvt7QSginL//wtIPCjQT   
   eHL461+cNFZTzs/nPUh5fyIgROixPXTeukrBRmiDqOBcbDYqbl+lj7Xm6b041stB   
   qUt6tspO2qRa7FkPiVtwNrK8wkdgyuQe232kWkCOe+q3uSlrN3MIalK3vmXUpA6O   
   ROKbMTkcd4nU9wz1ISUoE/sCqfA+Ayr1VkwWaGMoEuQ4DI7PQHr1BwoAmOFs4G+E   
   2H7XKsFg3i/MQ7qtgKFdgQqH21/HvsNdCUY1Mz9Mq0KadRrGpf0wXs5I42tpw3uF   
   mw5VEj17CTUBlQoDX+n7ufQHzJkKMqwJwx3ZN2MP/kcji13kDqsjNjGFlOatRkps   
   NUVkw3OaFn441zl4gOGV2mNvUOTEZuYKzjcgIa7sD7GlPBKCIpj1Ip5Udu94jg/V   
   gT73te03Ftj7HyDxXXIHv/CokpLdtIvCU0/vJyIhONNuaBTQ2G9vncO19QPrrMvq   
   dmsG33aVN1bgfQHlOAu8KjZPUpZ34aftcazpbfxztqfSXrmeNcmeti2JqZ8qJ1ce   
   9VdE/0zVQtr/fqTkXtYXr0LV0R0x5upmg1vv+ul98+fL4eQhBHY=   
   =DPop   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)