SUSE Package Hub - openSUSE-2025-68

Update Info

openSUSE-2025-68

Security update for dcmtk

Type: security

Severity: important

Issued: 2025-02-20

Description:

This update for dcmtk fixes the following issues:

- CVE-2025-25472: Fixed a denial of service via a crafted DCM file (boo#1237369).
- CVE-2025-25474: Fixed a denial of service via a crafted DICOM file (boo#1237365).
- CVE-2025-25475: Fixed a buffer overflow via the component /dcmimgle/diinpxt.h (boo#1237355).

References

CVE: CVE-2025-25475
CVE: CVE-2025-25474
CVE: CVE-2025-25472
Bugzilla: 1237369 VUL-0: CVE-2025-25472: dcmtk: Denial of Service (DoS) via a crafted DCM file.
Bugzilla: 1237365 VUL-0: CVE-2025-25474: dcmtk: Buffer overflow via the component /dcmimgle/diinpxt.h.
Bugzilla: 1237355 VUL-0: CVE-2025-25475: dcmtk: Denial of Service (DoS) via a crafted DICOM file.

Packages

dcmtk-3.6.9-bp156.4.6.1