checkin

OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=811

ImageMagick.spec

@@ -22,7 +22,7 @@
 %define debug_build    0
 %define asan_build     0
 %define mfr_version    7.1.2
-%define mfr_revision   15
+%define mfr_revision   16
 %define quantum_depth  16
 %define source_version %{mfr_version}-%{mfr_revision}
 %define clibver        10

ImageMagick-configuration-SUSE.patch

@@ -1,6 +1,7 @@
-diff -ur ImageMagick-7.1.2-15.orig/config/policy-SUSE.xml ImageMagick-7.1.2-15/config/policy-SUSE
---- ImageMagick-7.1.2-15.orig/config/policy-SUSE.xml	2026-02-23 22:24:51.662615465 +0100
-+++ ImageMagick-7.1.2-15/config/policy-SUSE.xml	2026-02-23 22:39:43.613341024 +0100
+Index: ImageMagick-7.1.2-16/config/policy-SUSE.xml
+===================================================================
+--- ImageMagick-7.1.2-16.orig/config/policy-SUSE.xml
++++ ImageMagick-7.1.2-16/config/policy-SUSE.xml
 @@ -62,7 +62,7 @@
    <policy domain="resource" name="disk" value="2GiB"/>
    <!-- Set the maximum length of an image sequence.  When this limit is
@@ -25,9 +26,9 @@ diff -ur ImageMagick-7.1.2-15.orig/config/policy-SUSE.xml ImageMagick-7.1.2-15/c
    <!-- Sensitive paths are not permitted. -->
    <policy domain="path" rights="none" pattern="/etc/*"/>
 @@ -110,4 +110,20 @@
-   <!-- Set the maximum amount of memory in bytes that are permitted for
-        allocation requests. -->
    <policy domain="system" name="max-memory-request" value="256MiB"/>
+   <!-- If the basename of path is a symbolic link, the open fails -->
+   <policy domain="system" name="symlink" rights="none" pattern="follow"/>
 +  <!-- Disable insecure coders by default -->
 +  <policy domain="coder" rights="none" pattern="EPHEMERAL" />
 +  <policy domain="coder" rights="none" pattern="URL" />