Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 512
Alerts This Week
Warning Icon 1 512

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Chromium Important Buffer Overflow Input Issues 2026-acf674bc6a

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 python-django5 Low Risk Data Exposure Bugs 2026-fbb9501b22

Calendar White Jul 24, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 43 dotnet10.0 Critical CVE Fixes Update 2026-d9817786d6

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 mupdf Critical Out-of-Bounds Read Fix Advisory 2026-8870088088

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 wget1 Critical Memory Corruption DoS Fix 2026-7bbb52b49d

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mbedtls 3.6.7 Important Fixes for Multiple CVEs

Calendar White Jul 24, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 sssd Critical Use-After-Free and GPO Cache Issues 2026-9ab663dcd4

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 Chromium Significant Buffer Overflow and Input Validation Issues

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Skopeo Critical DoS Fix CVE-2026-27145 Advisory 2026-9b2e56edf5

Calendar White Jul 24, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
197
Ls Advisories Debianlts Esm H240
Price Tag%201security advisorybuffer overflowDoS

Debian 11 gdcm Critical Buffer Overflow Denial-of-Service DLA-4652-1

Multiple vulnerabilities were discovered in gdcm, a C++ library for working with DICOM medical files: CVE-2024-22373 An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality. A specially crafted. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4652-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Emmanuel Arias June 26, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : gdcm Version : 3.0.8-2+deb11u1 CVE ID : CVE-2024-22373 CVE-2024-22391 CVE-2024-25569 CVE-2025-11266 CVE-2025-48429 CVE-2025-52582 CVE-2025-53618 CVE-2025-53619 CVE-2026-3650 Debian Bug : 1070387 1122862 1123576 1123587 1123589 1132042 Multiple vulnerabilities were discovered in gdcm, a C++ library for working with DICOM medical files: CVE-2024-22373 An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. CVE-2024-22391 A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. CVE-2024-25569 An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality. A specially crafted DICOM file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability. CVE-2025-11266 An out-of-bounds write vulnerability exists in the parsing of a malformed DICOM file containing encapsulated PixelData fragments (compressed image data stored as multiple fragments). Thisvulnerability leads to a segmentation fault caused by an out-of-bounds memory access due to an unsigned integer underflow in buffer indexing. It is exploitable via file input: simply opening a crafted malicious DICOM file is sufficient to trigger the crash, resulting in a denial-of-service condition. CVE-2025-48429 An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability. CVE-2025-52582 An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability. CVE-2025-53618 An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability. The function grayscale_convert is called based on the value of the malicious DICOM file specifying the intended interpretation of the image pixel data. CVE-2025-53619 An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability. The function null_convert is called based on the value of the malicious DICOM file specifying the intended interpretation of the image pixel data. CVE-2026-3650 A memory leak exists when parsing malformed DICOM files with non-standard VR types in file meta information. The vulnerability leads to vast memory allocations and resource depletion, triggering a denial-of-service condition. A maliciously crafted file can fill the heap in a single read operation without properly releasingit. For Debian 11 bullseye, these problems have been fixed in version 3.0.8-2+deb11u1. We recommend that you upgrade your gdcm packages. For the detailed security status of gdcm please refer to its security tracker page at: https://security-tracker.debian.org/tracker/gdcm Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Security update for gdcm addresses multiple out-of-bounds vulnerabilities leading to potential buffer overflows and memory corruption.. gdcm security update bug fixes buffer overflow memory corruption. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 26, 2026 •Critical Debian LTS
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryissueimportant

openSUSE: 2024:0168-1 Important: GDCM Out-Of-Bounds Write Issue

An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for gdcm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0168-1 Rating: important References: #1223398 Cross-References: CVE-2024-22373 CVSS scores: CVE-2024-22373 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gdcm fixes the following issues: - CVE-2024-22373: Fixed out-of-bounds write vulnerability in JPEG2000Codec::DecodeByStreamsCommon (boo#1223398). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-168=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 ppc64le s390x x86_64): gdcm-3.0.24-bp156.2.4.1 gdcm-applications-3.0.24-bp156.2.4.1 gdcm-devel-3.0.24-bp156.2.4.1 gdcm-examples-3.0.24-bp156.2.4.1 libgdcm3_0-3.0.24-bp156.2.4.1 libsocketxx1_2-3.0.24-bp156.2.4.1 python3-gdcm-3.0.24-bp156.2.4.1 References: https://www.suse.com/security/cve/CVE-2024-22373.html https://bugzilla.suse.com/1223398 . A security patch for GDCM addresses an out-of-bounds write flaw in openSUSE backports 15.6.. openSUSE Security Update,gdcm Advisory 2024,important security fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 23, 2024 •Important OpenSUSE
Banner 1 1028x280 1708121660 1771599717
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracritical threat

Fedora 38: FEDORA-2024-7a57842ec3 Critical: GDCM Issues

Security fixes TALOS-2024-1924, CVE-2024-22391: heap overflow TALOS-2024-1935, CVE-2024-22373: out-of-bounds write TALOS-2024-1944, CVE-2024-25569: out-of-bounds read Bug fixes. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-7a57842ec3 2024-05-05 01:39:03.580095 -------------------------------------------------------------------------------- Name : gdcm Product : Fedora 38 Version : 3.0.21 Release : 4.fc38 URL : Summary : Grassroots DiCoM is a C++ library to parse DICOM medical files Description : Grassroots DiCoM (GDCM) is a C++ library for DICOM medical files. It supports ACR-NEMA version 1 and 2 (huffman compression is not supported), RAW, JPEG, JPEG 2000, JPEG-LS, RLE and deflated transfer syntax. It comes with a super fast scanner implementation to quickly scan hundreds of DICOM files. It supports SCU network operations (C-ECHO, C-FIND, C-STORE, C-MOVE). PS 3.3 & 3.6 are distributed as XML files. It also provides PS 3.15 certificates and password based mechanism to anonymize and de-identify DICOM datasets. -------------------------------------------------------------------------------- Update Information: Security fixes TALOS-2024-1924, CVE-2024-22391: heap overflow TALOS-2024-1935, CVE-2024-22373: out-of-bounds write TALOS-2024-1944, CVE-2024-25569: out-of-bounds read Bug fixes Replace deprecated PyEval_CallObject for compatibility with Python 3.13 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 26 2024 Sandro - 3.0.21-3 - Apply security patches - Fix TALOS-2024-1924, CVE-2024-22391 (RHBZ#2277288) - Fix TALOS-2024-1935, CVE-2024-22373 (RHBZ#2277292) - Fix TALOS-2024-1944, CVE-2024-25569 (RHBZ#2277296) * Fri Apr 26 2024 Sandro - 3.0.21-2 - Replace deprecated PyEval_CallObject() (RHBZ#2245816) * Fri Apr 26 2024 Sandro - 3.0.21-1 - Revert "Update to 3.0.22" * Fri Apr 26 2024 Sandro - 3.0.22-1 -Revert "Update to 3.0.23" * Wed Mar 6 2024 Sandro - 3.0.23-2 - Migrate to SPDX license * Wed Mar 6 2024 Sandro - 3.0.23-1 - Update to 3.0.23 (RHBZ#2257639) - Drop `157.patch` (merged upstream) - Bump soname * Wed Mar 6 2024 Orion Poplawski - 3.0.22-1 - Update to 3.0.22 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2277284 - CVE-2024-22391 gdcm: crafted malformed file can lead to memory corruption due to heap overflow https://bugzilla.redhat.com/show_bug.cgi?id=2277284 [ 2 ] Bug #2277289 - CVE-2024-22373 gdcm: out-of-bounds write vulnerability lead to a heap buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=2277289 [ 3 ] Bug #2277293 - CVE-2024-25569 gdcm: out-of-bounds read vulnerability in the RAWCodec::DecodeBytes https://bugzilla.redhat.com/show_bug.cgi?id=2277293 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-7a57842ec3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it:https://pagure.io/fedora-infrastructure/new_issue . Fedora 38 security advisories detail critical vulnerabilities in the GDCM library, including heap overflow and out-of-bounds access affecting application integrity. Fedora 38 Update, GDCM Security Advisory, Heap Overflow Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 05, 2024 •Critical Fedora
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorysoftware updateimportant

openSUSE: 2022:10144-1 Important: GDCM and Orthanc Security Update

An update that fixes two vulnerabilities is now available. . openSUSE Security Update: Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10144-1 Rating: important References: #1181400 Cross-References: CVE-2022-2119 CVE-2022-2120 CVSS scores: CVE-2022-2119 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-2120 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer fixes the following issues: Changes in gdcm: - Provides/obsoletes moved to lbgdcm-package (Thx DimStar) - rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Br??ns) - version 3.0.18 no changelog - version 3.0.12 * support for poppler 22.03 added - version 3.0.11 * Fix for a significant issue with JPEG-LS and RGB color space * tons of small bug fixes - version 3.0.10 (no changelog) Changes in orthanc-gdcm: - changed dependency gdcm-libgdcm3_0 -> libgdcm3_0 - Version 1.5 * Take the configuration option "RestrictTransferSyntaxes" into account not only for decoding, but also for transcoding * Upgrade to GDCM 3.0.10 for static builds- Changes in orthanc: - version 1.11.2 * Added support for RGBA64 images in tools/create-dicom and /preview * New configuration "MaximumStorageMode" to choose between recyling of old patients (default behavior) and rejection of new incoming data when the MaximumStorageSize has been reached. * New sample plugin: "DelayedDeletion" that will delete files from disk asynchronously to speed up deletion oflarge studies. * Lua: new "SetHttpTimeout" function * Lua: new "OnHeartBeat" callback called at regular interval provided that you have configured "LuaHeartBeatPeriod" > 0. * "ExtraMainDicomTags" configuration now accepts Dicom Sequences. Sequences are stored in a dedicated new metadata "MainDicomSequences". This should improve DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when accessing series : 0040,0275". Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags". * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing files (bug introduced in 1.11.0). * Fix the Storage Cache for compressed files (bug introduced in 1.11.1). * Fix the storage cache that was not used by the Plugin SDK. This fixes the DicomWeb plugin "/rendered" route performance issues. * DelayedDeletion plugin: Fix leaking of symbols * SQLite now closes and deletes WAL and SHM files on exit. This should improve handling of SQLite DB over network drives. * Fix static compilation of boost 1.69 on Ubuntu 22.04 * Upgraded dependencies for static builds: - boost 1.80.0 - dcmtk 3.6.7 (fixes CVE-2022-2119 and CVE-2022-2120) - openssl 3.0.5 * Housekeeper plugin: Fix resume of previous processing * Added missing MOVEPatientRootQueryRetrieveInformationModel in DicomControlUserConnection::SetupPresentationContexts() * Improved HttpClient error logging (add method + url) * API version upgraded to 18 * /system is now reporting "DatabaseServerIdentifier" * Added an Asynchronous mode to /modalities/../move. * "RequestedTags" option can now include DICOM sequences. * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier" * DicomMap::ParseMainDicomTags has been deprecated -> retrieve "full" tags and use DicomMap::FromDicomAsJson instead - version 1.11.0 * new APIversion 1.7 * new configuration parameter * for detailed changelog see NEWS - version 1.10.1 * for detailed changelog see NEWS - Version 1.9.7 * New configuration option "DicomAlwaysAllowMove" to disable verification of the remote modality in C-MOVE SCP * API version upgraded to 15 * Added "Level" option to POST /tools/bulk-modify * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize" * Added file CITATION.cff * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins * Fix upload of ZIP archives containing a DICOMDIR file * Fix computation of the estimated time of arrival in jobs * Support detection of windowing and rescale in Philips multiframe images Changes in orthanc-webviewer: - version 2.8 * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart Kurutac, NCC Group) * framework190.diff removed (covered in actual version) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10144=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): gdcm-3.0.19-bp153.2.8.1 gdcm-applications-3.0.19-bp153.2.8.1 gdcm-applications-debuginfo-3.0.19-bp153.2.8.1 gdcm-debuginfo-3.0.19-bp153.2.8.1 gdcm-debugsource-3.0.19-bp153.2.8.1 gdcm-devel-3.0.19-bp153.2.8.1 gdcm-examples-3.0.19-bp153.2.8.1 libgdcm3_0-3.0.19-bp153.2.8.1 libgdcm3_0-debuginfo-3.0.19-bp153.2.8.1 libsocketxx1_2-3.0.19-bp153.2.8.1 libsocketxx1_2-debuginfo-3.0.19-bp153.2.8.1 orthanc-gdcm-1.5-bp153.2.6.1 orthanc-gdcm-debuginfo-1.5-bp153.2.6.1 orthanc-gdcm-debugsource-1.5-bp153.2.6.1 orthanc-webviewer-2.8-bp153.2.3.1 orthanc-webviewer-debuginfo-2.8-bp153.2.3.1 orthanc-webviewer-debugsource-2.8-bp153.2.3.1 python3-gdcm-3.0.19-bp153.2.8.1 python3-gdcm-debuginfo-3.0.19-bp153.2.8.1 - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le x86_64): orthanc-1.11.2-bp153.2.13.1 orthanc-debuginfo-1.11.2-bp153.2.13.1 orthanc-debugsource-1.11.2-bp153.2.13.1 orthanc-devel-1.11.2-bp153.2.13.1 orthanc-source-1.11.2-bp153.2.13.1 - openSUSE Backports SLE-15-SP3 (noarch): orthanc-doc-1.11.2-bp153.2.13.1 References: https://www.suse.com/security/cve/CVE-2022-2119.html https://www.suse.com/security/cve/CVE-2022-2120.html https://bugzilla.suse.com/1181400 . The latest Fedora release tackles significant vulnerabilities in gstreamer and flask frameworks to improve overall performance and reliability.. openSUSE Security Update, GDcm Patch, Orthanc Fixes, Threat Remediation. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 12, 2022 •Important OpenSUSE
Banner 1 1028x280 1708121660 1771599717
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorysecurity issuecritical update

openSUSE: 2022:10145-1 Critical: GDCM And Orthanc Security Issues

An update that fixes two vulnerabilities is now available. . openSUSE Security Update: Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10145-1 Rating: important References: Cross-References: CVE-2022-2119 CVE-2022-2120 CVSS scores: CVE-2022-2119 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-2120 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer fixes the following issues: Changes in gdcm: - rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Br??ns) - version 3.0.18 no changelog - version 3.0.12 * support for poppler 22.03 added Changes in orthanc-gdcm: - changed dependency gdcm-libgdcm3_0 -> libgdcm3_0 Changes in orthanc: - version 1.11.2 * Added support for RGBA64 images in tools/create-dicom and /preview * New configuration "MaximumStorageMode" to choose between recyling of old patients (default behavior) and rejection of new incoming data when the MaximumStorageSize has been reached. * New sample plugin: "DelayedDeletion" that will delete files from disk asynchronously to speed up deletion of large studies. * Lua: new "SetHttpTimeout" function * Lua: new "OnHeartBeat" callback called at regular interval provided that you have configured "LuaHeartBeatPeriod" > 0. * "ExtraMainDicomTags" configuration now accepts Dicom Sequences. Sequences are stored in a dedicated new metadata "MainDicomSequences". This should improve DicomWeb QIDO-RS and avoid warnings like"Accessing Dicom tags from storage when accessing series : 0040,0275". Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags". * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing files (bug introduced in 1.11.0). * Fix the Storage Cache for compressed files (bug introduced in 1.11.1). * Fix the storage cache that was not used by the Plugin SDK. This fixes the DicomWeb plugin "/rendered" route performance issues. * DelayedDeletion plugin: Fix leaking of symbols * SQLite now closes and deletes WAL and SHM files on exit. This should improve handling of SQLite DB over network drives. * Fix static compilation of boost 1.69 on Ubuntu 22.04 * Upgraded dependencies for static builds: - boost 1.80.0 - dcmtk 3.6.7 (fixes CVE-2022-2119 and CVE-2022-2120) - openssl 3.0.5 * Housekeeper plugin: Fix resume of previous processing * Added missing MOVEPatientRootQueryRetrieveInformationModel in DicomControlUserConnection::SetupPresentationContexts() * Improved HttpClient error logging (add method + url) * API version upgraded to 18 * /system is now reporting "DatabaseServerIdentifier" * Added an Asynchronous mode to /modalities/../move. * "RequestedTags" option can now include DICOM sequences. * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier" * DicomMap::ParseMainDicomTags has been deprecated -> retrieve "full" tags and use DicomMap::FromDicomAsJson instead Changes in orthanc-webviewer: - version 2.8 * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart Kurutac, NCC Group) * framework190.diff removed (covered in actual version) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSEBackports SLE-15-SP4: zypper in -t patch openSUSE-2022-10145=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le s390x x86_64): gdcm-3.0.19-bp154.2.5.1 gdcm-applications-3.0.19-bp154.2.5.1 gdcm-applications-debuginfo-3.0.19-bp154.2.5.1 gdcm-debuginfo-3.0.19-bp154.2.5.1 gdcm-debugsource-3.0.19-bp154.2.5.1 gdcm-devel-3.0.19-bp154.2.5.1 gdcm-examples-3.0.19-bp154.2.5.1 libgdcm3_0-3.0.19-bp154.2.5.1 libgdcm3_0-debuginfo-3.0.19-bp154.2.5.1 libsocketxx1_2-3.0.19-bp154.2.5.1 libsocketxx1_2-debuginfo-3.0.19-bp154.2.5.1 orthanc-gdcm-1.5-bp154.2.3.1 orthanc-gdcm-debuginfo-1.5-bp154.2.3.1 orthanc-gdcm-debugsource-1.5-bp154.2.3.1 orthanc-webviewer-2.8-bp154.2.3.1 orthanc-webviewer-debuginfo-2.8-bp154.2.3.1 orthanc-webviewer-debugsource-2.8-bp154.2.3.1 python3-gdcm-3.0.19-bp154.2.5.1 python3-gdcm-debuginfo-3.0.19-bp154.2.5.1 - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le x86_64): orthanc-1.11.2-bp154.2.3.1 orthanc-debuginfo-1.11.2-bp154.2.3.1 orthanc-debugsource-1.11.2-bp154.2.3.1 orthanc-devel-1.11.2-bp154.2.3.1 orthanc-source-1.11.2-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): orthanc-doc-1.11.2-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-2119.html https://www.suse.com/security/cve/CVE-2022-2120.html . Tackling pressing concerns in gdcm, orthanc, and associated tools through this vital openSUSE security patch.. OpenSUSE Security Patch, GDCM Update, Orthanc Issues Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 12, 2022 •Important OpenSUSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics