[med-svn] [Git][med-team/dcmtk][master] 5 commits: d/rules: guard against accidental ABI breakages.

[Étienne Mollier (@emollier)]

Étienne Mollier pushed to branch master at Debian Med / dcmtk


Commits:
8df4b1f3 by Étienne Mollier at 2026-02-12T19:43:30+01:00
d/rules: guard against accidental ABI breakages.

- - - - -
8114f7b3 by Étienne Mollier at 2026-02-12T20:00:38+01:00
d/*: soname bump to libdcmtk20.

- - - - -
04af53f8 by Étienne Mollier at 2026-02-12T21:15:27+01:00
d/changelog: initialize for experimental upload.

- - - - -
06e23dfb by Étienne Mollier at 2026-02-12T22:07:32+01:00
d/control: libdcmtk20 replaces libdcmtk19.

- - - - -
9fa2764a by Étienne Mollier at 2026-02-16T22:25:13+01:00
d/changelog: update the changelog.

- - - - -


5 changed files:

- debian/changelog
- debian/control
- debian/libdcmtk19.install → debian/libdcmtk20.install
- debian/libdcmtk19.lintian-overrides → debian/libdcmtk20.lintian-overrides
- debian/rules


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,24 @@
+dcmtk (3.7.0+really3.7.0-0+exp1) UNRELEASED; urgency=medium
+
+  * Team upload
+  * d/rules: guard against accidental ABI breakages.
+  * New upstream version 3.7.0: fixes CVE-2025-14607 and CVE-2025-14841.
+    (Closes: #1122926, #1123584, #1060677)
+  * d/*: soname bump to libdcmtk20.
+  * d/control: libdcmtk20 replaces libdcmtk19.
+
+ -- Étienne Mollier <emollier at debian.org>  Thu, 12 Feb 2026 22:07:42 +0100
+
+dcmtk (3.7.0+really3.6.9-1) unstable; urgency=medium
+
+  * Team upload.
+  * Undo upload of version 3.7.0 that caused ABI breakage by rolling
+    back to the state of 3.6.9-6.  Note this undoes mitigations against
+    CVE-2025-14607 and CVE-2025-14841 (and reopens #1122926, #1123584,
+    #1060677) (Closes: #1127756)
+
+ -- Étienne Mollier <emollier at debian.org>  Thu, 12 Feb 2026 19:47:48 +0100
+
 dcmtk (3.7.0-1) unstable; urgency=medium
 
   * Team upload.


=====================================
debian/control
=====================================
@@ -47,10 +47,12 @@ Description: OFFIS DICOM toolkit data files
  .
  This package contains the DCMTK data files.
 
-Package: libdcmtk19
+Package: libdcmtk20
 Architecture: any
 Section: libs
 Depends: dcmtk-data (>= ${source:Version}), ${misc:Depends}, ${shlibs:Depends}
+Breaks: libdcmtk19
+Replaces: libdcmtk19
 Multi-Arch: same
 Description: OFFIS DICOM toolkit runtime libraries
  DCMTK includes a collection of libraries and applications for examining,
@@ -66,14 +68,14 @@ Description: OFFIS DICOM toolkit runtime libraries
 Package: libdcmtk-dev
 Architecture: any
 Section: libdevel
-Depends: libdcmtk19 (= ${binary:Version}),
+Depends: libdcmtk20 (= ${binary:Version}),
          libnsl-dev,
          libwrap0-dev,
          libxml2-dev,
          libz-dev,
          ${misc:Depends}
 Suggests: dcmtk-doc
-Provides: libdcmtk19-dev
+Provides: libdcmtk20-dev
 Description: OFFIS DICOM toolkit development libraries and headers
  DCMTK includes a collection of libraries and applications for examining,
  constructing and converting DICOM image files, handling offline media,


=====================================
debian/libdcmtk19.install → debian/libdcmtk20.install
=====================================


=====================================
debian/libdcmtk19.lintian-overrides → debian/libdcmtk20.lintian-overrides
=====================================
@@ -1,5 +1,5 @@
 # There is more than one library in one package bundles which makes perfectly
 # sense in this application but does not enable naming the library package appropriately
-libdcmtk19: package-name-doesnt-match-sonames
-libdcmtk19: embedded-library
-libdcmtk19: no-symbols-control-file
+libdcmtk20: package-name-doesnt-match-sonames
+libdcmtk20: embedded-library
+libdcmtk20: no-symbols-control-file


=====================================
debian/rules
=====================================
@@ -59,6 +59,20 @@ ifneq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
   CMAKE_EXTRA_FLAGS += -DBUILD_TESTING:BOOL=OFF
 endif
 
+# Guard against accidental ABI breakages.
+DCMTK_SOVERSION != sed -n 's/set(DCMTK_ABI_VERSION \([0-9]\+\))/\1/p' CMake/dcmtkPrepare.cmake
+DEB_SOVERSION != sed -n 's/Package: libdcmtk\([0-9]\+\)/\1/p' debian/control
+execute_before_dh_autoreconf:
+	@ if [ $(DCMTK_SOVERSION) != $(DEB_SOVERSION) ] \
+	; then \
+		printf 'E: libdcmtk%s package mismatches dcmtk soversion %s.\n' \
+			$(DEB_SOVERSION) $(DCMTK_SOVERSION) \
+	;	printf 'E: Please bump the package soversion to libdcmtk%s\n' \
+			$(DCMTK_SOVERSION) \
+	;	printf 'E: and coordinate a transition.\n' \
+	;	exit 1 \
+	; fi
+
 override_dh_auto_configure:
 	dh_auto_configure -- $(CMAKE_EXTRA_FLAGS)
 



View it on GitLab: https://salsa.debian.org/med-team/dcmtk/-/compare/4964d44b1ac11c3aeed2444a5858b4c61411136c...9fa2764af5b2da650d00c8d913a710627c5d2226

-- 
View it on GitLab: https://salsa.debian.org/med-team/dcmtk/-/compare/4964d44b1ac11c3aeed2444a5858b4c61411136c...9fa2764af5b2da650d00c8d913a710627c5d2226
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-med-commit/attachments/20260216/aebbf644/attachment-0001.htm>