[SECURITY] Fedora 45 Update: gdcm-3.0.24-24.fc45

Grassroots DiCoM GDCM is a C++ library for DICOM medical files. It supports ACR-NEMA version 1 and 2 huffman compression is not supported, RAW, JPEG, JPEG 2000, JPEG-LS, RLE and deflated transfer syntax. It comes with a super fast scanner implementation to quickly scan hundreds of DICOM files. It...

[SECURITY] Fedora 45 Update: dicomanonymizer-1-0.22.20210920gitf076264.fc45

A multi-threaded anonymizer for DICOM files implementing most of DICOM PS 3.15 AnnexE. Entries such as uid entries are replaced with hash values. This ensur es that partial runs of a studies DICOM files can be merged afterwards. This project is written in C++ using the gdcm library and multiple...

gdcm-security-poc

GDCM findings 1-6: 再現パッケージ GDCM における6件のパーサー/コーデック欠陥を、v3.2.6 上でサニタイザー障害または有界な伝播チェックとして再現したもの。各自動トリガーには、脆弱なシグナルを発生させないほぼ有効なコントロールが付属する。Finding 1 には計装された制御フロープリミティブも含まれる。 メンテナーおよび脆弱性コーディネーターのレビューを目的とする。何かを実行する前に SAFETY.md を読むこと。 固定ターゲット manifest/targets.env: 名前| リビジョン| 内容 ---|---|--- vulnerable|...

Debian dla-4652 : gdcm-doc - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4652 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4652-1 [email protected]...

CVE-2026-3650: Missing Release of Memory after Effective Lifetime

A memory leak exists in the Grassroots DICOM library GDCM. The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta information. The vulnerability leads to vast memory allocations and resource depletion, triggering a denial-of-service condition. A maliciously...

openSUSE 16 Security Update : orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc (openSUSE-SU-2026:20193-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20193-1 advisory. Changes in orthanc: - dcmtk 370 breaks TW build - switch to lua 5.4 - patch out boost component system from framework - version 1.12.10 ' long...

OPENSUSE-SU-2026:20193-1 Security update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc

This update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc fixes the following issues: Changes in orthanc: - dcmtk 370 breaks TW...

CVE-2025-11266: Out-of-bounds Write

An out-of-bounds write vulnerability exists in the Grassroots DICOM library GDCM. The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments compressed image data stored as multiple fragments. This vulnerability leads to a segmentation fault caused...

orthanc-gdcm-1.7-1.1 on GA media (moderate)

orthanc-gdcm-1.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15546-1 Rating: moderate Cross-References: CVE-2024-22373 CVE-2024-22391 CVE-2024-25569 CVSS scores: CVE-2024-22373 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-22391 SUSE : 7.7...

OPENSUSE-SU-2025:15546-1 orthanc-gdcm-1.7-1.1 on GA media

These are all security issues fixed in the orthanc-gdcm-1.7-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora: Security Advisory (FEDORA-2024-c5909efa5c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: gdcm-3.0.24-8.fc42

Grassroots DiCoM GDCM is a C++ library for DICOM medical files. It supports ACR-NEMA version 1 and 2 huffman compression is not supported, RAW, JPEG, JPEG 2000, JPEG-LS, RLE and deflated transfer syntax. It comes with a super fast scanner implementation to quickly scan hundreds of DICOM files. It...

openSUSE Security Advisory (openSUSE-SU-2024:0168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : gdcm (2024-c5909efa5c)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c5909efa5c advisory. Automatic update for gdcm-3.0.23-5.fc41. Changelog Fri Apr 26 2024 Sandro - 3.0.23-5 - Apply security patches - Fix TALOS-2024-1924, CVE-2024-22391...

Security update for gdcm (important)

openSUSE Security Update: Security update for gdcm Announcement ID: openSUSE-SU-2024:0168-1 Rating: important References: 1223398 Cross-References: CVE-2024-22373 CVSS scores: CVE-2024-22373 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP6 An...

openSUSE Security Advisory (openSUSE-SU-2024:0167-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : gdcm (openSUSE-SU-2024:0167-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0167-1 advisory. - CVE-2024-22373: Fixed out-of-bounds write vulnerability in JPEG2000Codec::DecodeByStreamsCommon boo1223398. Tenable has extracted the preceding...

OPENSUSE-SU-2024:0168-1 Security update for gdcm

This update for gdcm fixes the following issues: - CVE-2024-22373: Fixed out-of-bounds write vulnerability in JPEG2000Codec::DecodeByStreamsCommon boo1223398...

OPENSUSE-SU-2024:0167-1 Security update for gdcm

This update for gdcm fixes the following issues: - CVE-2024-22373: Fixed out-of-bounds write vulnerability in JPEG2000Codec::DecodeByStreamsCommon boo1223398...

Security update for gdcm (important)

openSUSE Security Update: Security update for gdcm Announcement ID: openSUSE-SU-2024:0167-1 Rating: important References: 1223398 Cross-References: CVE-2024-22373 CVSS scores: CVE-2024-22373 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 An...