-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 19 Jul 2023 16:00:04 +0200
Source: orthanc
Binary: liborthancframework-dev liborthancframework1 liborthancframework1-dbgsym orthanc orthanc-dbgsym orthanc-dev
Architecture: armel
Version: 1.10.1+dfsg-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-06) <buildd_armhf-arm-ubc-06@buildd.debian.org>
Changed-By: Étienne Mollier <emollier@debian.org>
Description:
 liborthancframework-dev - Orthanc Framework development files
 liborthancframework1 - Orthanc Framework library
 orthanc    - Lightweight, RESTful DICOM server for medical imaging
 orthanc-dev - Orthanc development files
Closes: 1040597
Changes:
 orthanc (1.10.1+dfsg-2+deb12u1) bookworm-security; urgency=high
 .
   * Team upload.
   * cve-2023-33466.patch: disable file system writes.
     This patch backports the option RestApiWriteToFileSystemEnabled to
     Orthanc in Debian bookworm.  This allows delivering Orthanc without
     being vulnerable to arbitrary writes to the file system by
     authenticated users, referenced as CVE-2023-33466.  The legacy and
     vulnerable behaviour can be restored by setting the variable
     RestApiWriteToFileSystemEnabled to true in /etc/orthanc/orthanc.json.
     (Closes: #1040597)
Checksums-Sha1:
 ce399e73831c7594d084fe2778aaf5cebf80ef80 113056 liborthancframework-dev_1.10.1+dfsg-2+deb12u1_armel.deb
 c5b5d081a786042c69503a65e453bcc131759ce8 14340208 liborthancframework1-dbgsym_1.10.1+dfsg-2+deb12u1_armel.deb
 f46f5c8ca7990ce643edcd306120187880277b1f 1300140 liborthancframework1_1.10.1+dfsg-2+deb12u1_armel.deb
 6fc3b2d3c000fa5b7f57387b02850463b549454d 36262348 orthanc-dbgsym_1.10.1+dfsg-2+deb12u1_armel.deb
 ddafb803d53129965c229ff809e84f36c7bf9b64 79444 orthanc-dev_1.10.1+dfsg-2+deb12u1_armel.deb
 e7bc8499b60de8087445e5390720d1da8d04bb8f 16764 orthanc_1.10.1+dfsg-2+deb12u1_armel-buildd.buildinfo
 b632de89d8f581979a71591df5550426147b6893 1391628 orthanc_1.10.1+dfsg-2+deb12u1_armel.deb
Checksums-Sha256:
 068a284844e2962f9dff1e801a7e9178c5b38a66256bc07d08175677133c6506 113056 liborthancframework-dev_1.10.1+dfsg-2+deb12u1_armel.deb
 7fa8af40206be3cc33c9310b3304dabdbbc63dc215a43d78ab729fb7da2d3eea 14340208 liborthancframework1-dbgsym_1.10.1+dfsg-2+deb12u1_armel.deb
 ca2533e4a37607c7d91d45811d25816fae72fb984ed80414a6e8885be437363e 1300140 liborthancframework1_1.10.1+dfsg-2+deb12u1_armel.deb
 666d9e1e07130afe4476d517b490eb24363310d4ec1121d3b8225b172a20f761 36262348 orthanc-dbgsym_1.10.1+dfsg-2+deb12u1_armel.deb
 24349ff15faf7927e3b75c1f4f94bb5c5b46db7bf013c45f24d7087279fde371 79444 orthanc-dev_1.10.1+dfsg-2+deb12u1_armel.deb
 4a63529b4b73e98e400bf48d479abc7c6929ad35146bd39fac739f0748ac47d8 16764 orthanc_1.10.1+dfsg-2+deb12u1_armel-buildd.buildinfo
 02352f46c186834af1108ca349681f9e9b9340894df829d9ee045c2264684913 1391628 orthanc_1.10.1+dfsg-2+deb12u1_armel.deb
Files:
 d854215e6189f0698f515590c7e8fc7e 113056 libdevel optional liborthancframework-dev_1.10.1+dfsg-2+deb12u1_armel.deb
 8311fdcdafe73a9ceb57f769ed9b68bf 14340208 debug optional liborthancframework1-dbgsym_1.10.1+dfsg-2+deb12u1_armel.deb
 480aa6b056335a2a84e9c9cfd2aa797f 1300140 libs optional liborthancframework1_1.10.1+dfsg-2+deb12u1_armel.deb
 c38a691fe03ba32534e990d24fa2e15e 36262348 debug optional orthanc-dbgsym_1.10.1+dfsg-2+deb12u1_armel.deb
 44f5830fc11af8ca3e489effaafaa907 79444 libdevel optional orthanc-dev_1.10.1+dfsg-2+deb12u1_armel.deb
 284c062567a61ea8d6d0d84ba566e350 16764 science optional orthanc_1.10.1+dfsg-2+deb12u1_armel-buildd.buildinfo
 3701bf649e74f890ec0e934fc6cb8c64 1391628 science optional orthanc_1.10.1+dfsg-2+deb12u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=xW23
-----END PGP SIGNATURE-----