Hello community, here is the log from the commit of package ImageMagick for openSUSE:Factory checked in at 2018-10-04 18:58:48 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ImageMagick (Old) and /work/SRC/openSUSE:Factory/.ImageMagick.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ImageMagick" Thu Oct 4 18:58:48 2018 rev:169 rq:639725 version:7.0.8.12 Changes: -------- --- /work/SRC/openSUSE:Factory/ImageMagick/ImageMagick.changes 2018-10-01 09:05:40.411879552 +0200 +++ /work/SRC/openSUSE:Factory/.ImageMagick.new/ImageMagick.changes 2018-10-04 18:59:12.799346569 +0200 @@ -1,0 +2,12 @@ +Wed Oct 3 08:07:50 UTC 2018 - Petr Gajdos <[email protected]> + +- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading + only by default security policy [bsc#1105592c#32] + +------------------------------------------------------------------- +Mon Oct 1 11:14:23 UTC 2018 - Petr Gajdos <[email protected]> + +- also disable EPS coder in default policy.xml [bsc#1105592] + [bsc#1109976#c7] + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ImageMagick-disable-insecure-coders.patch ++++++ --- /var/tmp/diff_new_pack.olOZvm/_old 2018-10-04 18:59:13.311346035 +0200 +++ /var/tmp/diff_new_pack.olOZvm/_new 2018-10-04 18:59:13.311346035 +0200 @@ -1,8 +1,8 @@ -Index: ImageMagick-7.0.8-10/config/policy.xml +Index: ImageMagick-7.0.8-12/config/policy.xml =================================================================== ---- ImageMagick-7.0.8-10.orig/config/policy.xml 2018-08-13 13:05:28.000000000 +0200 -+++ ImageMagick-7.0.8-10/config/policy.xml 2018-08-22 12:24:40.219828953 +0200 -@@ -74,4 +74,20 @@ +--- ImageMagick-7.0.8-12.orig/config/policy.xml 2018-10-01 13:13:51.008702622 +0200 ++++ ImageMagick-7.0.8-12/config/policy.xml 2018-10-01 13:22:06.174722426 +0200 +@@ -75,4 +75,21 @@ <!-- <policy domain="cache" name="memory-map" value="anonymous"/> --> <!-- <policy domain="cache" name="synchronize" value="True"/> --> <!-- <policy domain="cache" name="shared-secret" value="passphrase" stealth="true"/> --> @@ -17,9 +17,10 @@ + <policy domain="coder" rights="none" pattern="SHOW" /> + <policy domain="coder" rights="none" pattern="WIN" /> + <policy domain="coder" rights="none" pattern="PLT" /> -+ <policy domain="coder" rights="none" pattern="PS" /> -+ <policy domain="coder" rights="none" pattern="PS2" /> -+ <policy domain="coder" rights="none" pattern="PS3" /> -+ <policy domain="coder" rights="none" pattern="PDF" /> -+ <policy domain="coder" rights="none" pattern="XPS" /> ++ <policy domain="coder" rights="write" pattern="PS" /> ++ <policy domain="coder" rights="write" pattern="PS2" /> ++ <policy domain="coder" rights="write" pattern="PS3" /> ++ <policy domain="coder" rights="write" pattern="PDF" /> ++ <policy domain="coder" rights="write" pattern="XPS" /> ++ <policy domain="coder" rights="write" pattern="EPS" /> </policymap>
