-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 19 Jul 2023 16:48:56 +0200
Source: orthanc
Binary: liborthancframework-dev liborthancframework1 liborthancframework1-dbgsym orthanc orthanc-dbgsym orthanc-dev orthanc-doc
Architecture: source amd64 all
Version: 1.9.2+really1.9.1+dfsg-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>
Changed-By: Étienne Mollier <emollier@debian.org>
Description:
 liborthancframework-dev - Orthanc Framework development files
 liborthancframework1 - Orthanc Framework library
 orthanc    - Lightweight, RESTful DICOM server for medical imaging
 orthanc-dev - Orthanc development files
 orthanc-doc - Documentation of Orthanc
Closes: 1040597
Changes:
 orthanc (1.9.2+really1.9.1+dfsg-1+deb11u1) bullseye-security; urgency=high
 .
   * Team upload.
   * cve-2023-33466.patch: disable file system writes.
     This patch backports the option RestApiWriteToFileSystemEnabled to
     Orthanc in Debian bullseye.  This allows delivering Orthanc without
     being vulnerable to arbitrary writes to the file system by
     authenticated users, referenced as CVE-2023-33466.  The legacy and
     vulnerable behaviour can be restored by setting the variable
     RestApiWriteToFileSystemEnabled to true in /etc/orthanc/orthanc.json.
     (Closes: #1040597)
Checksums-Sha1:
 f9162b92ba680dbe6197070a479428108ef0efd7 2697 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.dsc
 f243a74d69921fc53a46cb3a8fed2183802bbd56 937120 orthanc_1.9.2+really1.9.1+dfsg.orig.tar.xz
 195dc199348a6982433e44bd69432e4476222ede 229684 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.debian.tar.xz
 3f37435e78d6b543458d7af4316f990a4c174a3b 104172 liborthancframework-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 fc36e45737a30b4c6763b475b171e28f3e81e4b6 15011616 liborthancframework1-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 499d36501efb54e555d333755213d31d279c18bc 1674232 liborthancframework1_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 d77515b6bc0ce1619f5ab4aada989b961deaf11c 36744660 orthanc-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 36bea04c53e0f90100836624e20805cbf471c90e 75080 orthanc-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 49e02239782f914b67823164f92544c7c8982c3f 228172 orthanc-doc_1.9.2+really1.9.1+dfsg-1+deb11u1_all.deb
 48d1fe40b15a19a89b07ee515cf7327705c019ca 17808 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.buildinfo
 6763cb2a95abab934c4a16253801de50c241a6ec 1578308 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
Checksums-Sha256:
 3ee657e706e5b33b76d1715ad425aa347ae2daec6c7776b48e3cfa94c7c04c97 2697 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.dsc
 6ced3ded4daf35a8a5621ff4abffba04966e259dc089eed293043379b0d48c91 937120 orthanc_1.9.2+really1.9.1+dfsg.orig.tar.xz
 426e98e34d1fbd14150217f4df0bf61d75a797adb2a3d3d94976eae985b518bc 229684 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.debian.tar.xz
 5806f3e43c8f8b96d79775ed344f63fb22da9008b345dfbbe06686a768775432 104172 liborthancframework-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 e4b05d713834a5eb452926fe3c0733f5882b4a6e11e2a31dc84a4076e14924e7 15011616 liborthancframework1-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 c05f5c1c7213298f3cf5b66da39ecfca1e671e7c123c2d21e04f7176db68adaf 1674232 liborthancframework1_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 0313862d0cec6f65a41142524027b09d19b99692256a4fe8fcae2616d28ec852 36744660 orthanc-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 4b713966085056ae0984ef2415cbf81aa0bcbc518bdb006e63746ae86e829127 75080 orthanc-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 8c79e228920bf721d0ba17a12c8da6b49a8ce070c2c63bba11ce6524679231f9 228172 orthanc-doc_1.9.2+really1.9.1+dfsg-1+deb11u1_all.deb
 51c76e6c9863354654328f97aa60af5150c599305587bc6de657880f4d37590d 17808 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.buildinfo
 fbb0023495ebf78178c9a8d5ec240f5603e2b843350c3ad17d66985819d201c4 1578308 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
Files:
 1ab9394eca6f125658d22a60618f88d0 2697 science optional orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.dsc
 be899b1793a8d012882b8bccdfb1997b 937120 science optional orthanc_1.9.2+really1.9.1+dfsg.orig.tar.xz
 1aa63e1372adb9be0a7dbee252ecdfde 229684 science optional orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.debian.tar.xz
 9c0358463a980fa6bc43878247a05cfb 104172 libdevel optional liborthancframework-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 71371213c0da8ae9b3226c3dfc93ffe7 15011616 debug optional liborthancframework1-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 be84c9114ac884457bf59a70af5ce59d 1674232 libs optional liborthancframework1_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 f5397efd3b164fa3e2e2fccdfd200e21 36744660 debug optional orthanc-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 8aacfa0533f8d02e4fe38e009e619f0f 75080 libdevel optional orthanc-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
 302f3a71032e6767027f510bdd30064f 228172 doc optional orthanc-doc_1.9.2+really1.9.1+dfsg-1+deb11u1_all.deb
 6ba72c33ccbd11358a23d2b86f8d0b2f 17808 science optional orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.buildinfo
 1a4dc812d44a67be82e5ed89e33caacc 1578308 science optional orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=u4WK
-----END PGP SIGNATURE-----