- updated to 6.9.4-5:

* Most OpenCL operations are now executed asynchronous.
  * Security improvements to TEXT coder broke it (reference
    https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=29754).
  * Fix stroke offset problem for -annotate (reference
    https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=29626).
  * Add additional checks to DCM reader to prevent data-driven faults (bug
    report from Hanno Böck).
  * Fixed proper placement of text annotation for east / west gravity.
2016-05-15  6.9.4-3 Cristy  <quetzlzacatenango@image...>
  * Fix pixel cache on disk regression (reference
    https://github.com/ImageMagick/ImageMagick/issues/202).
  * Quote passwords when passed to a delegate program.
  * Can read geo-related EXIF metdata once-again (reference
    https://github.com/ImageMagick/ImageMagick/issues/198).
  * Sanitize all delegate emedded formatting characters.
  * Don't sync pixel cache in AcquireAuthenticCacheView() (bug report from
    Hanno Böck).
    + ImageMagick-CVE-2016-5118.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=257

ImageMagick-6.8.8-1-disable-insecure-coders.patch

@@ -1,11 +1,11 @@
-Index: ImageMagick-6.9.4-1/config/policy.xml
+Index: ImageMagick-6.9.4-5/config/policy.xml
 ===================================================================
---- ImageMagick-6.9.4-1.orig/config/policy.xml	2016-05-09 19:28:58.000000000 +0200
+--- ImageMagick-6.9.4-5.orig/config/policy.xml	2016-05-31 10:30:53.221396378 +0200
-+++ ImageMagick-6.9.4-1/config/policy.xml	2016-05-17 11:09:37.470928022 +0200
++++ ImageMagick-6.9.4-5/config/policy.xml	2016-05-31 10:31:24.605900830 +0200
-@@ -64,4 +64,15 @@
+@@ -66,4 +66,15 @@
-   <!-- <policy domain="coder" rights="none" pattern="HTTPS" /> -->
+ 	<!-- <policy domain="path" rights="none" pattern="@*" /> -->
-   <!-- <policy domain="path" rights="none" pattern="@*" /> -->
+   <!-- <policy domain="path" rights="none" pattern="|*" /> -->
-   <policy domain="cache" name="shared-secret" value="passphrase"/>
+   <policy domain="cache" name="shared-secret" value="passphrase" stealth="true"/>
 +  <!-- Disable insecure coders by default -->
 +  <!-- https://bugzilla.suse.com/show_bug.cgi?id=978061 -->
 +  <policy domain="coder" rights="none" pattern="EPHEMERAL" />

ImageMagick-6.9.4-1.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2ea0fef839cd5d6f134502b7cf7ee0e57a3f230b19771515d4aa44354f4c6b3b
-size 8789688

ImageMagick-6.9.4-1.tar.xz.asc

@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iQIcBAABAgAGBQJXMTreAAoJEImrY9SCdzd6H30P/RG55RDq9x9co7ff6DVcVIqh
-6/zgKm1cvhgk3ssaaqXuQMlqITfDEo4vKfYFapJMYlSPY8o3p+6WWwGSVGurZiLR
-smhlqPLPIyaRmnwoBpiTb+LgzeLfauxznaXI1uh0T2oFPu3UkFay9ChIh1gI2whk
-8HU3fB3EMo8E6Zykb3qsBf4tL59/QJeVyJBa/C1byq1kqZDGaDOhsSalupeIWNSp
-FWpRLp7Gw77r4zyrr6TIjEayY+tgm6zvVJPl2ipvGZ/o+1HkOozhUJp3ni+tWDA4
-UkhJBZIqwc2BETIIl9u3hXI/m8UJ69198b1X0XMpcH7K81iEpOp9kYAfqZfXJjBp
-9Krc0fXLaeaDkSVc70xzXyJwbKJst61gJcCp017+Am+ZLOpxqFuJSOJS6Ua2Fjec
-p/6YuIaxNbI+if8E3Yy34DZh0AojPJ0+GoZk8ZChZL8q9X70eX8Vw04MrUKExS3M
-IK5at4Fk/HRTvfj9gOG+TxChjWcnfpJDr3g+VTIsTFmBqZ4fBkHyFCMPxFTUkCif
-TF6AoGrZxdSOdpDstk6nNDJfzI/n/mipnORRxxivLswrA8gabt04AZJT+fww7Y4x
-rRaBglb7W+GgZSo4yS/Ve+wYLQf8Rhwi2JayJicJ2RnaAyRb4v0eHcHrua4yF5eM
-o6IQM3HqSMPUrXs3uiSp
-=UZ1q
------END PGP SIGNATURE-----

ImageMagick-6.9.4-5.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:39a65b8e2371db36cb63709dea0b15f08a6870f8ce6103432f068112d9513c5a
+size 8784244

ImageMagick-6.9.4-5.tar.xz.asc

@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+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+=Y14c
+-----END PGP SIGNATURE-----

ImageMagick.changes

@@ -1,9 +1,31 @@
+-------------------------------------------------------------------
+Tue May 31 08:32:29 UTC 2016 - pgajdos@suse.com
+
+- updated to 6.9.4-5:
+  * Most OpenCL operations are now executed asynchronous.
+  * Security improvements to TEXT coder broke it (reference
+    https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=29754).
+  * Fix stroke offset problem for -annotate (reference
+    https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=29626).
+  * Add additional checks to DCM reader to prevent data-driven faults (bug
+    report from Hanno Böck).
+  * Fixed proper placement of text annotation for east / west gravity.
+2016-05-15  6.9.4-3 Cristy  <quetzlzacatenango@image...>
+  * Fix pixel cache on disk regression (reference
+    https://github.com/ImageMagick/ImageMagick/issues/202).
+  * Quote passwords when passed to a delegate program.
+  * Can read geo-related EXIF metdata once-again (reference
+    https://github.com/ImageMagick/ImageMagick/issues/198).
+  * Sanitize all delegate emedded formatting characters.
+  * Don't sync pixel cache in AcquireAuthenticCacheView() (bug report from
+    Hanno Böck).
+
 -------------------------------------------------------------------
 Tue May 31 07:23:22 UTC 2016 - pgajdos@suse.com
 
 - security update:
   * CVE-2016-5118 [bsc#982178]
-    + GraphicsMagick-CVE-2016-5118.patch
+    + ImageMagick-CVE-2016-5118.patch
 
 -------------------------------------------------------------------
 Tue May 17 09:10:23 UTC 2016 - pgajdos@suse.com

ImageMagick.spec

@@ -63,7 +63,7 @@ BuildRequires:  zip
 
 %define maj           6
 %define mfr_version   %{maj}.9.4
-%define mfr_revision  1
+%define mfr_revision  5
 %define quantum_depth 16
 %define source_version %{mfr_version}-%{mfr_revision}
 %define clibver   2