Accepted orthanc 1.5.6+dfsg-1+deb10u1 (source) into oldoldstable
- To: debian-lts-changes@lists.debian.org, dispatch@tracker.debian.org
- Subject: Accepted orthanc 1.5.6+dfsg-1+deb10u1 (source) into oldoldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Tue, 12 Sep 2023 04:50:21 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: orthanc_1.5.6+dfsg-1+deb10u1_source.changes
- Debian-source: orthanc
- Debian-suite: oldoldstable
- Debian-version: 1.5.6+dfsg-1+deb10u1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=KMwxO49lHV8k+etM3Rvtw7E9Vs74jxqte3NMW6MnAP0=; b=GXOHwUEuJNaZ5w517d0SvW2De8 I7b0EIXxOuxoHRm5HjDJtp5TWoWXM66K6ZfRcDrUsp1wu4knZU6o8N1F+Sm6i7w225kfKhZwD1Qpn 1dW+G1kkzOoNw0gwI0/eB7l5kZIB3Eds8kQ4s6ag4Y2CgpUkmA38ZkQfpWbOSW9bmdOPricQY47Ne l4Pp4aMcUdW3GHZ/tBI6yNJMwwPXm/c7hFoLRqNyjANzWoXg+JrmNR8mN6tvRURQzEvkVX0sMCIah rn4ojNzFQSaNuFOW3pNeSCdJDt5/DjH6Y1p/YSAg6yoefxZtBNO5sBoijFuHXPyZ/rYYm2wzi2Qtc Pf1GNYbQ==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1qfvLx-00C0yT-RC@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 12 Sep 2023 06:11:09 +0200
Source: orthanc
Architecture: source
Version: 1.5.6+dfsg-1+deb10u1
Distribution: buster-security
Urgency: medium
Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>
Changed-By: Anton Gladky <gladk@debian.org>
Closes: 1040597
Changes:
orthanc (1.5.6+dfsg-1+deb10u1) buster-security; urgency=medium
.
* Non-maintainer upload by the LTS Security Team.
* CVE-2023-33466.patch: Implementation of File System Write Protection
This patch introduces a critical security enhancement by backporting
the RestApiWriteToFileSystemEnabled option to Orthanc in Debian Buster.
With this update, Orthanc is now safeguarded against potential arbitrary
file system writes by authenticated users, as indicated by CVE-2023-33466.
.
The previous behavior, which posed a security risk, can still be reinstated
by configuring the RestApiWriteToFileSystemEnabled variable to "true"
within the /etc/orthanc/orthanc.json file. (Closes: #1040597)
Checksums-Sha1:
681d75bb917af032a84b2db878b9bcb8f5266d16 2408 orthanc_1.5.6+dfsg-1+deb10u1.dsc
203da85868cea3ec5e6f0878546921f9bb79c048 761152 orthanc_1.5.6+dfsg.orig.tar.xz
3c8e80cf582fc275c066c69e5b7da2d0f25ce9f6 1798592 orthanc_1.5.6+dfsg-1+deb10u1.debian.tar.xz
d5eda372a499b380bf7198c3ac558ef7688dd9f4 7751 orthanc_1.5.6+dfsg-1+deb10u1_source.buildinfo
Checksums-Sha256:
b763f95d500a7995b749ab081e375acd68deacf2d6df5b93b0b1a6f011dfe345 2408 orthanc_1.5.6+dfsg-1+deb10u1.dsc
a9eca22af6623b763ff9434132b80d44ee0fc0ae2baa8f59ce16bf1164441561 761152 orthanc_1.5.6+dfsg.orig.tar.xz
829f6c01bfbc8b795ee815044e966bc09eb9a542ccf833aed63b57dba755f83f 1798592 orthanc_1.5.6+dfsg-1+deb10u1.debian.tar.xz
5263f52d37fe28d2228306174b7fffa1e9106496dd1f41f729781bd4bba2e617 7751 orthanc_1.5.6+dfsg-1+deb10u1_source.buildinfo
Files:
cd604d901d916793995f93d34e673323 2408 science optional orthanc_1.5.6+dfsg-1+deb10u1.dsc
f521d24c1c80a2ca980be3b9f227a8e4 761152 science optional orthanc_1.5.6+dfsg.orig.tar.xz
4a1fe0f67ea6112395508c21b598b03b 1798592 science optional orthanc_1.5.6+dfsg-1+deb10u1.debian.tar.xz
f62783b2fe42a8fe04ea094637cd751f 7751 science optional orthanc_1.5.6+dfsg-1+deb10u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ePVQ
-----END PGP SIGNATURE-----