# HG changeset patch # User Alain Mazy # Date 1780385433 -7200 # Node ID d5da42a82e4a3bc688a9d4abe577cd8f1f6bdb71 # Parent b67b233343bdd3a0262755ce0d0e359f63ad8ada cve number diff -r b67b233343bd -r d5da42a82e4a NEWS --- a/NEWS Tue Jun 02 07:49:12 2026 +0200 +++ b/NEWS Tue Jun 02 09:30:33 2026 +0200 @@ -48,7 +48,7 @@ https://github.com/orthanc-server/orthanc-builder/issues/36 * Fix slow ingest of files containing huge arrays of float/double values in their DICOM tags: https://discourse.orthanc-server.org/t/orthanc-1-12-11-performance-issues-with-deformable-registrations/6448) -* Fix a Denial of Service via Deeply Nested DICOM Sequences: +* Fix a Denial of Service via Deeply Nested DICOM Sequences (CVE-2026-10528): https://orthanc.uclouvain.be/bugs/show_bug.cgi?id=258 Security issue reported by Jose Lopez Martinez (aka elpe_pinillo) from Deloitte. * Fixed various OOB read/write (TODO: finalize release notes)