pool/ImageMagick
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
ImageMagick/ImageMagick-disable-insecure-coders.patch

27 lines
1.5 KiB
Diff
Raw Normal View History

- also disable EPS coder in default policy.xml [bsc#1105592] [bsc#1109976#c7] OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=387
2018-10-01 11:41:06 +00:00
Index: ImageMagick-7.0.8-12/config/policy.xml
- Updated to 6.9.6-5 * Web pages were broken when we moved to HTTPS protocol. * Restore -sharpen / -convolve options to work with CMYK (reference https://github.com/ImageMagick/ImageMagick/issues/299). * Off by one memory allocation (reference https://github.com/ImageMagick/ImageMagick/issues/296). * Prevent fault in MSL interpreter (reference https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=30797). * Added layer ZIP compression to the PSD encoder. * Unit test pass again after small SUN image patch. * Fixed incorrect RLE decoding when reading a DCM image that contains multiple segments. * Fixed incorrect RLE decoding when reading an SGI image (reference https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=30514) OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=268
2016-11-22 09:45:21 +00:00
===================================================================
- also disable EPS coder in default policy.xml [bsc#1105592] [bsc#1109976#c7] OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=387
2018-10-01 11:41:06 +00:00
--- ImageMagick-7.0.8-12.orig/config/policy.xml 2018-10-01 13:13:51.008702622 +0200
+++ ImageMagick-7.0.8-12/config/policy.xml 2018-10-01 13:22:06.174722426 +0200
@@ -75,4 +75,21 @@
- updated to 6.8.8-2 * Support namespaces for the security policy. * Respect throttle policy. * Support the -authenticate option for PDF. * Fix Spurious memory allocation message. * Identical images should return inf for PSNR. * Fixed fd leak for webp coder. * Prevent random pixel data for corrupt JPEG image. * Support pixel-cache and shred security policies. * Fixed memory leak when creating nested exceptions in Magick++. * Eliminate bogus assertion. * Unbreak build without JPEG support. OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=276
2017-03-20 14:29:08 +00:00
<!-- <policy domain="cache" name="memory-map" value="anonymous"/> -->
<!-- <policy domain="cache" name="synchronize" value="True"/> -->
- updated to 7.0.6-0 * coders/png.c: Accept exIf chunks whose data segment erroneously begins with "Exif\0\0". * Introduce SetMagickSecurityPolicy() (MagickCore) and MagickSetSecurityPolicy() (MagickWand) to set the ImageMagick security policy (reference https://github.com/ImageMagick/ImageMagick/issues/407). * Removed experimental PNG zxIF chunk support; the proposal is dead. * Fix choppy bitmap font rendering (reference https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32071). * The +opaque option is not longer a noop (reference https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32081). * Add support for 'hex:' property. * Transient error validating the JPEG-2000 image format (reference https://github.com/ImageMagick/ImageMagick/issues/501). * Properly allocate DCM image colormap (reference https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32063). * Improper allocation of memory for IM instances without threads (reference https://github.com/ImageMagick/ImageMagick/issues/497). * Delete corrupt image from list (reference https://github.com/ImageMagick/ImageMagick/issues/500). * Support various image operators for the compare utility (reference https://www.imagemagick.org/discourse-server/viewtopic.php?f=2&t=31938). OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=289
2017-06-28 07:44:52 +00:00
<!-- <policy domain="cache" name="shared-secret" value="passphrase" stealth="true"/> -->
Accepting request 393905 from home:vitezslav_cizek:branches:graphics - Disable insecure coders [bnc#978061] * ImageMagick-6.8.8-1-disable-insecure-coders.patch * CVE-2016-3714 * CVE-2016-3715 * CVE-2016-3716 * CVE-2016-3717 * CVE-2016-3718 OBS-URL: https://build.opensuse.org/request/show/393905 OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=251
2016-05-05 14:05:14 +00:00
+ <!-- Disable insecure coders by default -->
+ <!-- https://bugzilla.suse.com/show_bug.cgi?id=978061 -->
+ <policy domain="coder" rights="none" pattern="EPHEMERAL" />
+ <policy domain="coder" rights="none" pattern="URL" />
+ <policy domain="coder" rights="none" pattern="HTTPS" />
+ <policy domain="coder" rights="none" pattern="MVG" />
+ <policy domain="coder" rights="none" pattern="MSL" />
Accepting request 394840 from home:computersalat:devel:graphics rework ImageMagick-6.8.8-1-disable-insecure-coders.patch, rebase patches OBS-URL: https://build.opensuse.org/request/show/394840 OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=253
2016-05-13 19:31:18 +00:00
+ <policy domain="coder" rights="none" pattern="TEXT" />
+ <policy domain="coder" rights="none" pattern="SHOW" />
+ <policy domain="coder" rights="none" pattern="WIN" />
+ <policy domain="coder" rights="none" pattern="PLT" />
- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading only [bsc#1105592c#32] OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=388
2018-10-03 08:10:50 +00:00
+ <policy domain="coder" rights="write" pattern="PS" />
+ <policy domain="coder" rights="write" pattern="PS2" />
+ <policy domain="coder" rights="write" pattern="PS3" />
+ <policy domain="coder" rights="write" pattern="PDF" />
+ <policy domain="coder" rights="write" pattern="XPS" />
+ <policy domain="coder" rights="write" pattern="EPS" />
Accepting request 393905 from home:vitezslav_cizek:branches:graphics - Disable insecure coders [bnc#978061] * ImageMagick-6.8.8-1-disable-insecure-coders.patch * CVE-2016-3714 * CVE-2016-3715 * CVE-2016-3716 * CVE-2016-3717 * CVE-2016-3718 OBS-URL: https://build.opensuse.org/request/show/393905 OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=251
2016-05-05 14:05:14 +00:00
</policymap>
Reference in New Issue Copy Permalink