Accepted orthanc 1.9.2+really1.9.1+dfsg-1+deb11u1 (source amd64 all) into oldstable-proposed-updates
- To: debian-changes@lists.debian.org
- Subject: Accepted orthanc 1.9.2+really1.9.1+dfsg-1+deb11u1 (source amd64 all) into oldstable-proposed-updates
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Sat, 12 Aug 2023 11:08:19 +0000
- Debian: DAK
- Debian-architecture: source amd64 all
- Debian-archive-action: accept
- Debian-changes: orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.changes
- Debian-source: orthanc
- Debian-suite: oldstable-proposed-updates
- Debian-version: 1.9.2+really1.9.1+dfsg-1+deb11u1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=4aiZdyp3R0EqhxX0vXRBUSmkNo0o0ORsIoSG8hhihoI=; b=jkWkVdY9YbqY4tAG68M/j44Khd P2tMgYndgzFDDGdg+HSpwB1AjEmVa/AmOXF6zGzaVn0QH6VZGUeFbwnHeGc2465x+1TK9NJH5kkx0 VseuoCNoDQRk5HHui3fQ5s0Csz2ZU9luXhtmgwu59NHmaw6RaepGbjAWcNOfsSY0v6u5wiVT6mGpX c8YMyBTWNTshGXBNdZ762TCkzUFAVdynTaLOE+pMuxkuydxWXhBn8wx+33tTFiZocIi3TOhYp+wmB fz5tQOZgUTXUOqhlhiY2BMCLZAPSUdikee2ecsVJuunjuzMquDaGVtVXxAucwka2rWawxLXdPZwn0 XRzH81/g==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1qUmTj-00Cz2X-2Z@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 19 Jul 2023 16:48:56 +0200
Source: orthanc
Binary: liborthancframework-dev liborthancframework1 liborthancframework1-dbgsym orthanc orthanc-dbgsym orthanc-dev orthanc-doc
Architecture: source amd64 all
Version: 1.9.2+really1.9.1+dfsg-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>
Changed-By: Étienne Mollier <emollier@debian.org>
Description:
liborthancframework-dev - Orthanc Framework development files
liborthancframework1 - Orthanc Framework library
orthanc - Lightweight, RESTful DICOM server for medical imaging
orthanc-dev - Orthanc development files
orthanc-doc - Documentation of Orthanc
Closes: 1040597
Changes:
orthanc (1.9.2+really1.9.1+dfsg-1+deb11u1) bullseye-security; urgency=high
.
* Team upload.
* cve-2023-33466.patch: disable file system writes.
This patch backports the option RestApiWriteToFileSystemEnabled to
Orthanc in Debian bullseye. This allows delivering Orthanc without
being vulnerable to arbitrary writes to the file system by
authenticated users, referenced as CVE-2023-33466. The legacy and
vulnerable behaviour can be restored by setting the variable
RestApiWriteToFileSystemEnabled to true in /etc/orthanc/orthanc.json.
(Closes: #1040597)
Checksums-Sha1:
f9162b92ba680dbe6197070a479428108ef0efd7 2697 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.dsc
f243a74d69921fc53a46cb3a8fed2183802bbd56 937120 orthanc_1.9.2+really1.9.1+dfsg.orig.tar.xz
195dc199348a6982433e44bd69432e4476222ede 229684 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.debian.tar.xz
3f37435e78d6b543458d7af4316f990a4c174a3b 104172 liborthancframework-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
fc36e45737a30b4c6763b475b171e28f3e81e4b6 15011616 liborthancframework1-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
499d36501efb54e555d333755213d31d279c18bc 1674232 liborthancframework1_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
d77515b6bc0ce1619f5ab4aada989b961deaf11c 36744660 orthanc-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
36bea04c53e0f90100836624e20805cbf471c90e 75080 orthanc-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
49e02239782f914b67823164f92544c7c8982c3f 228172 orthanc-doc_1.9.2+really1.9.1+dfsg-1+deb11u1_all.deb
48d1fe40b15a19a89b07ee515cf7327705c019ca 17808 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.buildinfo
6763cb2a95abab934c4a16253801de50c241a6ec 1578308 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
Checksums-Sha256:
3ee657e706e5b33b76d1715ad425aa347ae2daec6c7776b48e3cfa94c7c04c97 2697 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.dsc
6ced3ded4daf35a8a5621ff4abffba04966e259dc089eed293043379b0d48c91 937120 orthanc_1.9.2+really1.9.1+dfsg.orig.tar.xz
426e98e34d1fbd14150217f4df0bf61d75a797adb2a3d3d94976eae985b518bc 229684 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.debian.tar.xz
5806f3e43c8f8b96d79775ed344f63fb22da9008b345dfbbe06686a768775432 104172 liborthancframework-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
e4b05d713834a5eb452926fe3c0733f5882b4a6e11e2a31dc84a4076e14924e7 15011616 liborthancframework1-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
c05f5c1c7213298f3cf5b66da39ecfca1e671e7c123c2d21e04f7176db68adaf 1674232 liborthancframework1_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
0313862d0cec6f65a41142524027b09d19b99692256a4fe8fcae2616d28ec852 36744660 orthanc-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
4b713966085056ae0984ef2415cbf81aa0bcbc518bdb006e63746ae86e829127 75080 orthanc-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
8c79e228920bf721d0ba17a12c8da6b49a8ce070c2c63bba11ce6524679231f9 228172 orthanc-doc_1.9.2+really1.9.1+dfsg-1+deb11u1_all.deb
51c76e6c9863354654328f97aa60af5150c599305587bc6de657880f4d37590d 17808 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.buildinfo
fbb0023495ebf78178c9a8d5ec240f5603e2b843350c3ad17d66985819d201c4 1578308 orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
Files:
1ab9394eca6f125658d22a60618f88d0 2697 science optional orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.dsc
be899b1793a8d012882b8bccdfb1997b 937120 science optional orthanc_1.9.2+really1.9.1+dfsg.orig.tar.xz
1aa63e1372adb9be0a7dbee252ecdfde 229684 science optional orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1.debian.tar.xz
9c0358463a980fa6bc43878247a05cfb 104172 libdevel optional liborthancframework-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
71371213c0da8ae9b3226c3dfc93ffe7 15011616 debug optional liborthancframework1-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
be84c9114ac884457bf59a70af5ce59d 1674232 libs optional liborthancframework1_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
f5397efd3b164fa3e2e2fccdfd200e21 36744660 debug optional orthanc-dbgsym_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
8aacfa0533f8d02e4fe38e009e619f0f 75080 libdevel optional orthanc-dev_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
302f3a71032e6767027f510bdd30064f 228172 doc optional orthanc-doc_1.9.2+really1.9.1+dfsg-1+deb11u1_all.deb
6ba72c33ccbd11358a23d2b86f8d0b2f 17808 science optional orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.buildinfo
1a4dc812d44a67be82e5ed89e33caacc 1578308 science optional orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=u4WK
-----END PGP SIGNATURE-----