-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 19 Jul 2023 16:00:04 +0200
Source: orthanc
Binary: liborthancframework-dev liborthancframework1 liborthancframework1-dbgsym orthanc orthanc-dbgsym orthanc-dev
Architecture: ppc64el
Version: 1.10.1+dfsg-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) <buildd_ppc64el-ppc64el-osuosl-01@buildd.debian.org>
Changed-By: Étienne Mollier <emollier@debian.org>
Description:
 liborthancframework-dev - Orthanc Framework development files
 liborthancframework1 - Orthanc Framework library
 orthanc    - Lightweight, RESTful DICOM server for medical imaging
 orthanc-dev - Orthanc development files
Closes: 1040597
Changes:
 orthanc (1.10.1+dfsg-2+deb12u1) bookworm-security; urgency=high
 .
   * Team upload.
   * cve-2023-33466.patch: disable file system writes.
     This patch backports the option RestApiWriteToFileSystemEnabled to
     Orthanc in Debian bookworm.  This allows delivering Orthanc without
     being vulnerable to arbitrary writes to the file system by
     authenticated users, referenced as CVE-2023-33466.  The legacy and
     vulnerable behaviour can be restored by setting the variable
     RestApiWriteToFileSystemEnabled to true in /etc/orthanc/orthanc.json.
     (Closes: #1040597)
Checksums-Sha1:
 dd3daf6c0aa51816f7d40fe5cff3b5463e1c8da4 113056 liborthancframework-dev_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 7c42c869976af7ad582029c13b9c9157d580adfa 16444820 liborthancframework1-dbgsym_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 193b92a2fc31a4a2539b0eb406ab4f0c4789f614 1793880 liborthancframework1_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 5a95df3e5c915c82c93e20d0f9a8a78be57811a5 39930500 orthanc-dbgsym_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 7f790d14e5a9b116aac073895f45f9192499bfc5 79444 orthanc-dev_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 7c05e95ceaea208bc6a77e677fc00b473c7121a1 16934 orthanc_1.10.1+dfsg-2+deb12u1_ppc64el-buildd.buildinfo
 e6078f2a74b85e32838808e454d45242956740f7 1621912 orthanc_1.10.1+dfsg-2+deb12u1_ppc64el.deb
Checksums-Sha256:
 c9736df45957a688303cf3f6c15e9fe32611319ae760ccf34bb3ccd7289c9b57 113056 liborthancframework-dev_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 0889c2334473688004ac1c59b11f9735692eff9b46c6ef0b1134f5f8b3281846 16444820 liborthancframework1-dbgsym_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 74796163ec02a7a12a16ba77ccfdf9bf4f4c58d435c6f5b7b389b392c6101d88 1793880 liborthancframework1_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 bc9979fe40271e452aef88df53a61253b83be3105808e11989606bbe05d0f975 39930500 orthanc-dbgsym_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 7d1db861999e838868e4cb36654d2fd1b44077c70b0b470d777f32ee416c2fef 79444 orthanc-dev_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 b50d51f6ecb6e42ff80a5cf133bcc999357519ee155c4084a8bffca0ba76c28b 16934 orthanc_1.10.1+dfsg-2+deb12u1_ppc64el-buildd.buildinfo
 f981b99f58168f520c8c390a91c90a6f1b3f2b3f582ae2aba60ecbcadc1ec392 1621912 orthanc_1.10.1+dfsg-2+deb12u1_ppc64el.deb
Files:
 1144c6117f7bd50dd8849c81654de8ad 113056 libdevel optional liborthancframework-dev_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 57687804cacd1c9f78402c612aff20ba 16444820 debug optional liborthancframework1-dbgsym_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 38e787f1d5890aca609572e57db5400e 1793880 libs optional liborthancframework1_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 cccf2a5c468dca4e84556228dc6478e6 39930500 debug optional orthanc-dbgsym_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 37e2ab2173827ba49df6b853a52b9a60 79444 libdevel optional orthanc-dev_1.10.1+dfsg-2+deb12u1_ppc64el.deb
 6c9dbba54ed0ae9f2440efafb3f665e5 16934 science optional orthanc_1.10.1+dfsg-2+deb12u1_ppc64el-buildd.buildinfo
 9506ada8b26ca4831ecdb1f298b4d340 1621912 science optional orthanc_1.10.1+dfsg-2+deb12u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=Metw
-----END PGP SIGNATURE-----