SUSE · Security update for orthanc, orthanc-authorization, orthanc-postgresql, orthanc-dicomweb
Affects SUSESource GCVE Database
Rated by Threat Radar
Data as of 26 Oct 2026, 16:19 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| SUSE Product Security Team SUSE | Affected
| Fixed in– |
AI-suggested
Apply the security update to all affected Orthanc components as detailed in the release notes. The update includes official fixes for multiple security and robustness issues. No additional vendor advisory indicates that further action is required beyond applying the update. Patch status is confirmed by the release of new versions with fixes.
Description
This security update addresses multiple issues in the Orthanc ecosystem, including orthanc, orthanc-authorization, orthanc-postgresql, and orthanc-dicomweb components. The update includes a major rewrite of DICOM file handling, REST API upgrades, security and robustness improvements, and fixes for several bugs and vulnerabilities. Specific fixes include permission enhancements, audit logging improvements, and error handling corrections. The update does not specify exact CVEs or detailed vulnerability descriptions but indicates medium severity based on the nature of the fixes.