-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 19 Jul 2023 16:00:04 +0200
Source: orthanc
Binary: liborthancframework-dev liborthancframework1
liborthancframework1-dbgsym orthanc orthanc-dbgsym orthanc-dev orthanc-doc
Architecture: source amd64 all
Version: 1.10.1+dfsg-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Med Packaging Team
<debian-med-packag...@lists.alioth.debian.org>
Changed-By: Étienne Mollier <emoll...@debian.org>
Description:
liborthancframework-dev - Orthanc Framework development files
liborthancframework1 - Orthanc Framework library
orthanc - Lightweight, RESTful DICOM server for medical imaging
orthanc-dev - Orthanc development files
orthanc-doc - Documentation of Orthanc
Closes: 1040597
Changes:
orthanc (1.10.1+dfsg-2+deb12u1) bookworm-security; urgency=high
.
* Team upload.
* cve-2023-33466.patch: disable file system writes.
This patch backports the option RestApiWriteToFileSystemEnabled to
Orthanc in Debian bookworm. This allows delivering Orthanc without
being vulnerable to arbitrary writes to the file system by
authenticated users, referenced as CVE-2023-33466. The legacy and
vulnerable behaviour can be restored by setting the variable
RestApiWriteToFileSystemEnabled to true in /etc/orthanc/orthanc.json.
(Closes: #1040597)
Checksums-Sha1:
a6d64cc1a23a6ebbb1aaeb148ac1114fb2319b15 2623 orthanc_1.10.1+dfsg-2+deb12u1.dsc
17ee4d3278d38bfdf42765282f06b475fce08a97 1002712
orthanc_1.10.1+dfsg.orig.tar.xz
7ab860e973ed855db31c44df0374cc0e4e692798 231996
orthanc_1.10.1+dfsg-2+deb12u1.debian.tar.xz
570fb1d581c2f8d77264ffec221f9f137b817368 113056
liborthancframework-dev_1.10.1+dfsg-2+deb12u1_amd64.deb
a14d1946d0cab76bca6a839d3029b515fa580522 16513988
liborthancframework1-dbgsym_1.10.1+dfsg-2+deb12u1_amd64.deb
1d49482899208293eac7d99c9f8b0c89f0fcd2e0 1760916
liborthancframework1_1.10.1+dfsg-2+deb12u1_amd64.deb
91dcbcd8f777c5cecc7f219402a2400e68d5daa4 40215780
orthanc-dbgsym_1.10.1+dfsg-2+deb12u1_amd64.deb
72c7b686018bc770897aaeabb2dfb9a525c5ebbf 79444
orthanc-dev_1.10.1+dfsg-2+deb12u1_amd64.deb
0fa61bf6307d344fd9ed42ea7b82640ccac79e5f 250064
orthanc-doc_1.10.1+dfsg-2+deb12u1_all.deb
3bbe5da6d986a64e78d1d371e6fe7734a68a631f 17463
orthanc_1.10.1+dfsg-2+deb12u1_amd64.buildinfo
36628cef68fa759e7393840ec363dfc844972b16 1686548
orthanc_1.10.1+dfsg-2+deb12u1_amd64.deb
Checksums-Sha256:
75aa3c689c71ed2156921dd083ed50bc947eb3e67e9217002b1f293da7935594 2623
orthanc_1.10.1+dfsg-2+deb12u1.dsc
93408467befd64bd867ad82adf2ca6e7fa272b7ee62c9b18186f661e8bf0e399 1002712
orthanc_1.10.1+dfsg.orig.tar.xz
8c1f64c408bc5c4fde7d653f1a9386440765ac1d0d0d4e191d04fac25238fb79 231996
orthanc_1.10.1+dfsg-2+deb12u1.debian.tar.xz
5cef94739f7f9b37682ce864e1f7db53cabdf13bb92a7d980fcbd16ba99ee4b2 113056
liborthancframework-dev_1.10.1+dfsg-2+deb12u1_amd64.deb
721e3f5bb5353dfd597c3ae117f379636325806895b9f5cf460ae88c27d4b14d 16513988
liborthancframework1-dbgsym_1.10.1+dfsg-2+deb12u1_amd64.deb
34c5f0f32d0c2b6f082c6f4039f4fe0ee14a1dd67ab12e63603092f9c0cfd053 1760916
liborthancframework1_1.10.1+dfsg-2+deb12u1_amd64.deb
097bba30eef5f47c13c28d70e1ffe699aae659d4920a6731fb594199184826ff 40215780
orthanc-dbgsym_1.10.1+dfsg-2+deb12u1_amd64.deb
54fb6c7fb85e048887f68dc946c48b2aa1279e87e13e893110f5c9ed789fa84e 79444
orthanc-dev_1.10.1+dfsg-2+deb12u1_amd64.deb
fd6b0a4caec05cc480d89d4a2d35bcbeac4df75dacb2fbd8d83e6b6d812acb9d 250064
orthanc-doc_1.10.1+dfsg-2+deb12u1_all.deb
87a6479e98a1bd83e31fe5b13dd668a62b095bb87e3a34ca49ad37f32e5b4cc4 17463
orthanc_1.10.1+dfsg-2+deb12u1_amd64.buildinfo
1879b47e9328b02042821d0f8d22ef19dcc0482d0c913cbd5da343dfb58aa327 1686548
orthanc_1.10.1+dfsg-2+deb12u1_amd64.deb
Files:
139a9ddcb26c9ea02b9f98d497a44a1b 2623 science optional
orthanc_1.10.1+dfsg-2+deb12u1.dsc
e5156b83cbc82559353dc0016e996ad7 1002712 science optional
orthanc_1.10.1+dfsg.orig.tar.xz
359d900f8bb7acd911879d192543cdc7 231996 science optional
orthanc_1.10.1+dfsg-2+deb12u1.debian.tar.xz
6aa236f20bc246dfca077036210e7105 113056 libdevel optional
liborthancframework-dev_1.10.1+dfsg-2+deb12u1_amd64.deb
8b5203c286cb55f02d350ae9df3487fc 16513988 debug optional
liborthancframework1-dbgsym_1.10.1+dfsg-2+deb12u1_amd64.deb
8b6f195144c402f2744183c5ce5469dd 1760916 libs optional
liborthancframework1_1.10.1+dfsg-2+deb12u1_amd64.deb
7fc7ba37a35bcab197f6502024994af9 40215780 debug optional
orthanc-dbgsym_1.10.1+dfsg-2+deb12u1_amd64.deb
5aa07970fbfe85c1aea066c99487fa1d 79444 libdevel optional
orthanc-dev_1.10.1+dfsg-2+deb12u1_amd64.deb
6c16001a8d6a13cb8f463fbd60c5f352 250064 doc optional
orthanc-doc_1.10.1+dfsg-2+deb12u1_all.deb
fd49fd92abc294d814906f60dcce8560 17463 science optional
orthanc_1.10.1+dfsg-2+deb12u1_amd64.buildinfo
a2ec60efcca377e2b7b6c770e4939a89 1686548 science optional
orthanc_1.10.1+dfsg-2+deb12u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=ZI9I
-----END PGP SIGNATURE-----
