Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

openSUSE: dcmtk Moderate Memory Issues Segmentation Faults 2026:0005-1

opensuse
Calendar Grey January 9, 2026
Dist Opensuse Esm H88
An openSUSE Security Update for dcmtk addressing two vulnerabilities that could lead to memory issues and crashes.
An update that solves two vulnerabilities and has one errata is now available.

Description

This update for dcmtk fixes the following issues:

- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes

* CVE-2025-14841: invalid messages may trigger a segmentation fault due

to a NULL pointer dereference (boo#1255292).

* CVE-2025-14607: manipulation to component dcmdata could lead to memory

corruption (boo#1255464).

- Avoid unnecessary dependencies (boo#1254123):

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP7:

zypper in -t patch openSUSE-2026-5=1

- openSUSE Backports SLE-15-SP6:

zypper in -t patch openSUSE-2026-5=1

Package List

- openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64):

dcmtk-3.7.0-bp157.3.6.1

dcmtk-debuginfo-3.7.0-bp157.3.6.1

dcmtk-debugsource-3.7.0-bp157.3.6.1

dcmtk-devel-3.7.0-bp157.3.6.1

libdcmtk20-3.7.0-bp157.3.6.1

libdcmtk20-debuginfo-3.7.0-bp157.3.6.1

- openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64):

dcmtk-3.7.0-bp156.4.15.1

dcmtk-devel-3.7.0-bp156.4.15.1

libdcmtk20-3.7.0-bp156.4.15.1

References

https://www.suse.com/security/cve/CVE-2025-14607.html

https://www.suse.com/security/cve/CVE-2025-14841.html

https://bugzilla.suse.com/1254123

https://bugzilla.suse.com/1255292

https://bugzilla.suse.com/1255464

Announcement ID: openSUSE-SU-2026:0005-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP6 openSUSE Backports SLE-15-SP7 le.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here