openSUSE has issued an advisory on March 18: https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/4KKPT4TUWSBKUZJOLDBLHRTKHRBW4RIQ/ Upstream fix: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=3239a791542e1ea433d23aaa9e0a05a532ffabff
CVE: (none) => CVE-2025-2357Status comment: (none) => Patch available from upstream and openSUSEWhiteboard: (none) => MGA9TOOSource RPM: (none) => dcmtk-3.6.9-3.mga10.src.rpm, dcmtk-3.6.7-4.4.mga9.src.rpm
Thank you for the patch ref. I think this is the actual patch: https://git.dcmtk.org/?p=dcmtk.git;a=patch;h=3239a791542e1ea433d23aaa9e0a05a532ffabff Another SRPM clearly done by DavidG, so assigning thus. Another patch was applied quite recently.
Assignee: bugsquad => geiger.david68210
Suggested advisory: ======================== The updated packages fix a security vulnerability: DCMTK dcmjpls JPEG-LS Decoder memory corruption. (CVE-2025-2357) References: https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/4KKPT4TUWSBKUZJOLDBLHRTKHRBW4RIQ/ ======================== Updated packages in core/updates_testing: ======================== dcmtk-3.6.7-4.5.mga9 lib(64)dcmtk17-3.6.7-4.5.mga9 lib(64)dcmtk-devel-3.6.7-4.5.mga9 from SRPM: dcmtk-3.6.7-4.5.mga9.src.rpm
Assignee: geiger.david68210 => qa-bugsStatus: NEW => ASSIGNEDVersion: Cauldron => 9Source RPM: dcmtk-3.6.9-3.mga10.src.rpm, dcmtk-3.6.7-4.4.mga9.src.rpm => dcmtk-3.6.7-4.4.mga9.src.rpmWhiteboard: MGA9TOO => (none)Status comment: Patch available from upstream and openSUSE => (none)
Keywords: (none) => advisory
MGA9-64 Plasma Wayland on Compaq H000SB No installation issues Ref bug 33930 Using olive-editor to import an .mpg and an .avi file and use these in the Sequence Viewer. Both work OK. Good to go.
CC: (none) => herman.viaeneWhiteboard: (none) => MGA9-64-OK
Validating.
CC: (none) => andrewsfarm, sysadmin-bugsKeywords: (none) => validated_update
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2025-0117.html
Status: ASSIGNED => RESOLVEDResolution: (none) => FIXED