On вівторок 29 квітень 2008, Henrik Brix Andersen wrote:
= > Update to 1.1.12, which (partially) fixes some potential security
= > flaws...
=
= The flaws are only partially fixed? Or the update is only partially a
= security update?
My understanding -- from the author's description (CC-ed) -- is that the flaws
are inherent and can not be /fully/ fixed. ImageMagick and GraphicsMagick
both look at the filename for the "special characters" and extensions. By
carefully crafting those, it may be possible to cause them to launch other
executables...
There should be more in the ChangeLog...
-mi
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
