kritik
openSUSE-SU-2023:0108-1
Security update for dcmtk
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for dcmtk fixes the following issues: - CVE-2022-43272: Fixed memory leak via the T_ASC_Association object (boo#1206070) - Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637, CVE-2022-2121, CVE-2022-2120, CVE-2022-2119) - CVE-2022-2121: Fixed possible DoS via NULL pointer dereference - CVE-2022-2120: Fixed relative path traversal vulnerability - CVE-2022-2119: Fixed path traversal vulnerability See DOCS/CHANGES.367 for the full list of changes * Updated code definitions for DICOM 2022b * Fixed possible NULL pointer dereference
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.4 | dcmtk, dcmtk-devel, libdcmtk17 | 3.6.7-bp154.2.3.1 |
1 kaynaktaki 3 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.4 | dcmtk | 3.6.7-bp154.2.3.1 |
| openSUSE Leap 15.4 | dcmtk-devel | 3.6.7-bp154.2.3.1 |
| openSUSE Leap 15.4 | libdcmtk17 | 3.6.7-bp154.2.3.1 |
Referanslar
- https://bugzilla.suse.com/1206070
- https://bugzilla.suse.com/1208637
- https://bugzilla.suse.com/1208638
- https://bugzilla.suse.com/1208639
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MKL5XGJX4U2PD4XAVAZG2YAU2LYKLQIH/
- https://www.suse.com/security/cve/CVE-2022-2119/
- https://www.suse.com/security/cve/CVE-2022-2120/
- https://www.suse.com/security/cve/CVE-2022-2121/