-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 19 Jul 2023 16:48:56 +0200 Source: orthanc Binary: liborthancframework-dev liborthancframework1 liborthancframework1-dbgsym orthanc orthanc-dbgsym orthanc-dev Architecture: ppc64el Version: 1.9.2+really1.9.1+dfsg-1+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Étienne Mollier Description: liborthancframework-dev - Orthanc Framework development files liborthancframework1 - Orthanc Framework library orthanc - Lightweight, RESTful DICOM server for medical imaging orthanc-dev - Orthanc development files Closes: 1040597 Changes: orthanc (1.9.2+really1.9.1+dfsg-1+deb11u1) bullseye-security; urgency=high . * Team upload. * cve-2023-33466.patch: disable file system writes. This patch backports the option RestApiWriteToFileSystemEnabled to Orthanc in Debian bullseye. This allows delivering Orthanc without being vulnerable to arbitrary writes to the file system by authenticated users, referenced as CVE-2023-33466. The legacy and vulnerable behaviour can be restored by setting the variable RestApiWriteToFileSystemEnabled to true in /etc/orthanc/orthanc.json. (Closes: #1040597) Checksums-Sha1: 11f6d182294e831e5d33f1f8f807c57fff0d2612 104176 liborthancframework-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 67a50b17deb6f327523a9bc408c86dfe7c9b52b2 14917216 liborthancframework1-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 8b5ec08f03017600aa8daaabaf8cbdf93a8e2f3a 1723096 liborthancframework1_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb be544db56d3208696e92e3e38f17c6070f897eac 36700212 orthanc-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 1d9956ead4dd6d82407724fb23121ebed1b88867 75084 orthanc-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 7e304a8165dc860db44a564395d3bfbf236965e6 17051 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el-buildd.buildinfo 468e6bf569ee618a85e4a8dd5b636979a5f038d0 1523884 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb Checksums-Sha256: afc64e183e7fd0ca534c568635e357eaae07760d13db1e03f3e31264e8213f8d 104176 liborthancframework-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb e87a5064d513b21889cdabf150069a2bf24b83c0c346b1818e4923f138baf413 14917216 liborthancframework1-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 93b362176b692ba398c7647370a5e1f6ac5d120b24f48fa65a34a286fc7ad37d 1723096 liborthancframework1_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb e28e936900eb979ddf8152797ed1ca9e588dfc0d3259c4e63f1c22e597cb3559 36700212 orthanc-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 9d2e60fb86198267158bc00b4ef0e2246487e2077c13b6baef2f8272de12c426 75084 orthanc-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 735117aa5478f499492bd4159b0585e6afe0444501b0e0cf84862c17c248c2b1 17051 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el-buildd.buildinfo a99c3e888dfc6533ec775d6cb3f2e388473b3b17840533500643ef1c8cb4aad5 1523884 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb Files: 6a9d054e57be7cd3795eeee63615a848 104176 libdevel optional liborthancframework-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb d49711cab6f6e52fa83bc44e5b2ba00e 14917216 debug optional liborthancframework1-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 8ed545dda1779bc2df2f93bce27f3f64 1723096 libs optional liborthancframework1_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 6c006a7de29f599f4f0a0f3e9d365de1 36700212 debug optional orthanc-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 946ea59092a95425db5657a2f6bcc182 75084 libdevel optional orthanc-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb 8a8390aed360881a8385c6e6553e216c 17051 science optional orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el-buildd.buildinfo 089b4df22450842cc4fd70f4912bee66 1523884 science optional orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5hbnFkJlczvLwwS0Y7DdE4sWZ/UFAmS6uXgACgkQY7DdE4sW Z/UAKw//RPlQ3sD4ALv5FKK3nCDQYl3BPB6+i1Nfjc3fOmu+AloZgpnldtHH+CsG pu/wEvxL7xyFs8zjk6uDN2Zm9dvayEexgXoCQSj2h1FoUrjQiNVnyRL1fRzG/RKG 1eRE4+R9C3siGG5zGpbzCfzfstqvIPh7ZeP4vBIMi1HWsPtkSL8p/iPN9A/Y3yGX SIovacYuLEqbO1vf4cJa8+gC8viyjacowK6OhyJPXeU0g2TsfHE4qisUmhghwzpr MTmMsUq5LS7C8TKlVN0ln4qLw2F4hEfGWG+UGhhjHC291epEfpx87CpxliqmSSnm EYyCgE7R2kFX653AwvJqsNnqwmI9SOgL/p6rrxaM/uBkim/sFRisZ3ImoOUYCF4h XLNA8L+ub+I0CcCFTH2QLRiEreUKLC76SJDF1BlQnTKCT4M6qhXDW6r0fhGNhiFL SAlcSHYP26DMXAqKgKJR2N7UFNe9nzrIeJW5V8VFJ9vyehcY9E7n78qobIUtFFsW 5trmSDdQTcxEOlGNzYaXhn+q9T+86YlfV0KeCHG2o3u+uFw3ipmuysHS5u/8/j8N mNM1edO5KcRImY4SY7xN4XejbxBYKYqaN93eMWB45udktGwfk6KCb2WlFQaMQSpW cle2A0SpXofrxM6Z89YvADPXezsonEWzInVadxOqMjPu+xaBzRY= =Wccv -----END PGP SIGNATURE-----