dcm4che/dcm4chee-arc-light 5.35.2

on GitHub

Fixed Security Advisories:

• Mass Deletion of Stored Objects via Unrestricted Storage Status Change
• Denial of Service via Infinite Loop in JPEGParser
• Denial of Service via Infinite Loop in MP4Parser
• Denial of Service via Inefficient Boundary Scanning in MultipartInputStream

Enhancements

• UI Navigation - Study / Series tabs : Provide function to invoke restoring purged instance records of Study / Series #4665
• UPS-RS : Extend REST Forwarding for Create UPS / Update UPS / Change UPS State #5038
• Prevent to change location status to TO_DELETE of location records still associated to an instance record by RESTfull service #5043
• Refactor REST forwarding interface for PAM-RS APIs #5047
• UI Navigation - Workitems - Create UPS widget : Enable Scheduled Procedure Step Start DateTime as mandatory field #5048
• Store Service : Add log statements to indicate removal of instance / marking location with status #5053
• S3 (AWS / JClouds) Storage : Enable throwing Upload failed on global exception level #5060
• Update patient demographics and attributes of associated studies / series on MWLs created / updated by MWL Import Rules #5063
• CloudStorage and AWSS3Storage Storage Providers: add DEBUG system log messages on upload of objects #5064
• Validate Hostname or IP Address of Sending HL7 Application #5066
• Extend mwl2series / mwl2study XSLs to include Requested Procedure Comments (0040,1400) in Request Attributes Sequence (0040,0275) #5068
• Extend UPSOnStore rule to include Requested Procedure Comments (0040,1400) in Referenced Request Sequence (0040,A370) #5069
• Optionally explicitly verify storage of individual objects to a storage system after the completion of the write operation #5070
• HL7 Orders to DICOM MWL : Extend transformation to support multiple NTE segments #5074

Bug Fixes

• Duplicate named query error when deploying the archive on Wildfly 40.0.x+ #4982
• UI Navigation - Upload non DICOM file : Upload of image files specifying Rows (0028,0010), Columns (0028,0011) fails #5007
• Changing patient identifier broken, if HL7 Track Changed Patient ID enabled and if triggered via archive UI
• Merge from MWL coercion processor - Query local MWLs : Returns incorrect no. of same MWL item record if there are multiple trusted patient identifiers for a patient #5042
• Create MWL REST API : Worklist Label (*) applied in MWL attributes if not sent in request payload #5044
• UPSOnStore : Encoding on UPS attributes is incorrect if stored DICOM object has non-ASCII characters #5045
• WADO-RS / C-MOVE triggered DICOM objects retrieve of PURGED Series does not reflect attributes from DB #5049
• UI Configuration - Duration widget : Configured no. of days set as part of Duration fields do not show up correctly when the widget is opened #5055
• WADO-RS REST APIs : Retrieve Study / Series - thumbnail / rendered fails for series records with purged instances #5056
• UI: Navigation: When the user switches the tab from Study to another Tab part of Navigation page, the filters doesn't respond #5058
• UI: Navigation - > Work Items: User should be able to create a new UPS Workitem without having to specify the DICOM attribut 'Scheduled Procedure Step Start DateTime', if only creating a template is intended #5059
• Outgoing HL7 Procedure Status Update notifications do not contain additional OBX segment with report content if 0040A730.0040A040 = TEXT #5071
• Failures storing received objects to S3 (AWS / JClouds) Storage may get ignored #5073

Dependencies

• ldap docker image: upgrade alpine to 3.24.2 and slapd to 2.6.15 #5057

Binary Distribution Packages

https://sourceforge.net/projects/dcm4che/files/dcm4chee-arc-light5/5.35.2

Docker images

requires one of

and

Keycloak Docker image