# HG changeset patch # User Alain Mazy # Date 1700225773 -3600 # Node ID d40ac28b97021c91d98b4ece9e9dfa931f8e51bc # Parent 8174e45f48d891f0ebacc3092a7dd1e6e00c8d87 News: thanks to James Addison diff -r 8174e45f48d8 -r d40ac28b9702 NEWS --- a/NEWS Fri Nov 17 08:58:40 2023 +0100 +++ b/NEWS Fri Nov 17 13:56:13 2023 +0100 @@ -63,6 +63,7 @@ - boost 1.83.0 * Upgraded minizip library to stay away from CVE-2023-45853 although Orthanc is likely not affected since zip filenames are based on DICOM Tag values whose length is limited in size. + Great thanks to James Addison for notifying us about the vulnerability and patch to apply ! Version 1.12.1 (2023-07-04)