pool/ImageMagick
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
ImageMagick/ImageMagick-configuration-SUSE.patch

30 lines
1.5 KiB
Diff
Raw Normal View History

Accepting request 988361 from home:dirkmueller:Factory - update to 7.1.0.42: * incorrect pointer update when computing median @ ImageMagick/ImageMagick#5298 * Added extra check because the flag was removed in 0.21-Beta1. * the -transparent-color option accepts colornames @ ImageMagick/ImageMagick#5297 * fix MVG stroke-opacity issues * map channel parameter to pixel channel offset @ ImageMagick/ImageMagick#5308 * beta release * preserve input depth @ ImageMagick/ImageMagick6#188 * update to latest automake/autoconf release * recognize SVG file if it starts with whitespace @ ImageMagick/ImageMagick#5294 * Removed unused stealth flag. * Removed used path field. * Removed unused target field. * Removed unused exempt field. * Added extra option to the skip spaces to the MagicInfo. * Always start at the start of the string when comparing the magic value. * cosmetic * avoid OMP deadlock @ ImageMagick/ImageMagick#5301 * prevent undefined shift * prevent possible buffer overflow * correct copy/paste error * We need to free the stream ourselves when the call to FT_Open_Face fails. * Added missing call to DestroyString. * MVG requires seekable stream * Added extra malloc method to avoid early calls to the policy checks on Windows. * Removed defines. * Only check for dll's in non static build. * Set the client name and path earlier. * fix background opacity rounding @ ImageMagick/ImageMagick#5264 * empty result on conversion from tiff to pdf @ ImageMagick/ImageMagick#5256 OBS-URL: https://build.opensuse.org/request/show/988361 OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=606
2022-07-18 07:32:05 +00:00
--- ImageMagick-7.1.0-43/config/policy.xml
+++ ImageMagick-7.1.0-43/config/policy.xml
@@ -79,5 +79,26 @@
<!-- <policy domain="cache" name="synchronize" value="true"/> -->
<!-- <policy domain="system" name="shred" value="1"/> -->
- version update to 7.0.10.53 * CSS colors no longer require commas. * eliminate possible arthimetic overflow (reference https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28849) * support display-p3, Adobe-98, and Pro-photo colorspaces * read/write 1024 colors Sixel images (reference https://github.com/ImageMagick/ImageMagick/discussions/3018). * return alpha bytes with stream utility (reference https://github.com/ImageMagick/ImageMagick/discussions/2862). * percentage -border in x no longer adds one pixel border in y (reference https://github.com/ImageMagick/ImageMagick/issues/2978). * reduce time to identify PDF/PS/XPS/PCL image width/height (reference https://github.com/ImageMagick/ImageMagick/discussions/2993). * revert patch to ready gray alpha TIFF image. - modified patches % ImageMagick-configuration-SUSE.patch (refreshed) OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=540
2020-12-28 14:35:20 +00:00
<!-- <policy domain="system" name="font" value="/path/to/unicode-font.ttf"/> -->
Accepting request 988361 from home:dirkmueller:Factory - update to 7.1.0.42: * incorrect pointer update when computing median @ ImageMagick/ImageMagick#5298 * Added extra check because the flag was removed in 0.21-Beta1. * the -transparent-color option accepts colornames @ ImageMagick/ImageMagick#5297 * fix MVG stroke-opacity issues * map channel parameter to pixel channel offset @ ImageMagick/ImageMagick#5308 * beta release * preserve input depth @ ImageMagick/ImageMagick6#188 * update to latest automake/autoconf release * recognize SVG file if it starts with whitespace @ ImageMagick/ImageMagick#5294 * Removed unused stealth flag. * Removed used path field. * Removed unused target field. * Removed unused exempt field. * Added extra option to the skip spaces to the MagicInfo. * Always start at the start of the string when comparing the magic value. * cosmetic * avoid OMP deadlock @ ImageMagick/ImageMagick#5301 * prevent undefined shift * prevent possible buffer overflow * correct copy/paste error * We need to free the stream ourselves when the call to FT_Open_Face fails. * Added missing call to DestroyString. * MVG requires seekable stream * Added extra malloc method to avoid early calls to the policy checks on Windows. * Removed defines. * Only check for dll's in non static build. * Set the client name and path earlier. * fix background opacity rounding @ ImageMagick/ImageMagick#5264 * empty result on conversion from tiff to pdf @ ImageMagick/ImageMagick#5256 OBS-URL: https://build.opensuse.org/request/show/988361 OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=606
2022-07-18 07:32:05 +00:00
+
Accepting request 393905 from home:vitezslav_cizek:branches:graphics - Disable insecure coders [bnc#978061] * ImageMagick-6.8.8-1-disable-insecure-coders.patch * CVE-2016-3714 * CVE-2016-3715 * CVE-2016-3716 * CVE-2016-3717 * CVE-2016-3718 OBS-URL: https://build.opensuse.org/request/show/393905 OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=251
2016-05-05 14:05:14 +00:00
+ <!-- Disable insecure coders by default -->
+ <!-- https://bugzilla.suse.com/show_bug.cgi?id=978061 -->
+ <policy domain="coder" rights="none" pattern="EPHEMERAL" />
+ <policy domain="coder" rights="none" pattern="URL" />
+ <policy domain="coder" rights="none" pattern="HTTPS" />
+ <policy domain="coder" rights="none" pattern="MVG" />
+ <policy domain="coder" rights="none" pattern="MSL" />
Accepting request 394840 from home:computersalat:devel:graphics rework ImageMagick-6.8.8-1-disable-insecure-coders.patch, rebase patches OBS-URL: https://build.opensuse.org/request/show/394840 OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=253
2016-05-13 19:31:18 +00:00
+ <policy domain="coder" rights="none" pattern="TEXT" />
+ <policy domain="coder" rights="none" pattern="SHOW" />
+ <policy domain="coder" rights="none" pattern="WIN" />
+ <policy domain="coder" rights="none" pattern="PLT" />
- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading only [bsc#1105592c#32] OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=388
2018-10-03 08:10:50 +00:00
+ <policy domain="coder" rights="write" pattern="PS" />
+ <policy domain="coder" rights="write" pattern="PS2" />
+ <policy domain="coder" rights="write" pattern="PS3" />
+ <policy domain="coder" rights="write" pattern="PDF" />
+ <policy domain="coder" rights="write" pattern="XPS" />
Accepting request 943180 from home:dirkmueller:Factory - update to 7.1.0.19: * support -integral option. * possible DoS for certain SVG constructs (reference https://github.com/ImageMagick/ImageMagick/issues/4626). - update to 7.1.0.18: * support face index for font collections, e.g. msgothic.ttc[1]. * Improved adjustment of page offset when resizing an image. OBS-URL: https://build.opensuse.org/request/show/943180 OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=585
2022-01-03 07:59:25 +00:00
+ <policy domain="coder" rights="write" pattern="EPI" />
- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading only [bsc#1105592c#32] OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=388
2018-10-03 08:10:50 +00:00
+ <policy domain="coder" rights="write" pattern="EPS" />
- version update to 7.0.8.47 - modified patches disable also PCL [bsc#1136183] % ImageMagick-configuration-SUSE.patch - added patches https://github.com/ImageMagick/ImageMagick/issues/1580 + ImageMagick-montage.t-failing.patch OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=439
2019-05-28 08:39:03 +00:00
+ <policy domain="coder" rights="write" pattern="PCL" />
- version update to 7.0.10.53 * CSS colors no longer require commas. * eliminate possible arthimetic overflow (reference https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28849) * support display-p3, Adobe-98, and Pro-photo colorspaces * read/write 1024 colors Sixel images (reference https://github.com/ImageMagick/ImageMagick/discussions/3018). * return alpha bytes with stream utility (reference https://github.com/ImageMagick/ImageMagick/discussions/2862). * percentage -border in x no longer adds one pixel border in y (reference https://github.com/ImageMagick/ImageMagick/issues/2978). * reduce time to identify PDF/PS/XPS/PCL image width/height (reference https://github.com/ImageMagick/ImageMagick/discussions/2993). * revert patch to ready gray alpha TIFF image. - modified patches % ImageMagick-configuration-SUSE.patch (refreshed) OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=540
2020-12-28 14:35:20 +00:00
+ <policy domain="path" rights="none" pattern="@*"/>
Accepting request 988361 from home:dirkmueller:Factory - update to 7.1.0.42: * incorrect pointer update when computing median @ ImageMagick/ImageMagick#5298 * Added extra check because the flag was removed in 0.21-Beta1. * the -transparent-color option accepts colornames @ ImageMagick/ImageMagick#5297 * fix MVG stroke-opacity issues * map channel parameter to pixel channel offset @ ImageMagick/ImageMagick#5308 * beta release * preserve input depth @ ImageMagick/ImageMagick6#188 * update to latest automake/autoconf release * recognize SVG file if it starts with whitespace @ ImageMagick/ImageMagick#5294 * Removed unused stealth flag. * Removed used path field. * Removed unused target field. * Removed unused exempt field. * Added extra option to the skip spaces to the MagicInfo. * Always start at the start of the string when comparing the magic value. * cosmetic * avoid OMP deadlock @ ImageMagick/ImageMagick#5301 * prevent undefined shift * prevent possible buffer overflow * correct copy/paste error * We need to free the stream ourselves when the call to FT_Open_Face fails. * Added missing call to DestroyString. * MVG requires seekable stream * Added extra malloc method to avoid early calls to the policy checks on Windows. * Removed defines. * Only check for dll's in non static build. * Set the client name and path earlier. * fix background opacity rounding @ ImageMagick/ImageMagick#5264 * empty result on conversion from tiff to pdf @ ImageMagick/ImageMagick#5256 OBS-URL: https://build.opensuse.org/request/show/988361 OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=606
2022-07-18 07:32:05 +00:00
<policy domain="Undefined" rights="none"/>
Accepting request 393905 from home:vitezslav_cizek:branches:graphics - Disable insecure coders [bnc#978061] * ImageMagick-6.8.8-1-disable-insecure-coders.patch * CVE-2016-3714 * CVE-2016-3715 * CVE-2016-3716 * CVE-2016-3717 * CVE-2016-3718 OBS-URL: https://build.opensuse.org/request/show/393905 OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=251
2016-05-05 14:05:14 +00:00
</policymap>
Reference in New Issue Copy Permalink