Subject: CVS commit: pkgsrc/graphics/ImageMagick
From: Leonardo Taccari
Date: 2018-08-22 15:39:24
Message id: 20180822133924.62139FBEC@cvs.NetBSD.org

Log Message:
ImageMagick: Disable ghostscript coders by default in policy.xml

Disable ghostscript coders in policy.xml as a workaround for
VU#332928 (<https://www.kb.cert.org/vuls/id/332928>).

Please note that apart commenting/removing lines added in policy.xml,
the ghostscript coders can be enabled per-user by copying policy.xml
to ~/.config/ImageMagick/policy.xml and adjusting it with the
following lines:

  | [...]
  | <policy domain="coder" rights="read|write" \ 
pattern="PS" />
  | <policy domain="coder" rights="read|write" \ 
pattern="EPS" />
  | <policy domain="coder" rights="read|write" \ 
pattern="PDF" />
  | <policy domain="coder" rights="read|write" \ 
pattern="XPS" />
  | [...]

Bump PKGREVISION

Files:
RevisionActionfile
1.246modifypkgsrc/graphics/ImageMagick/Makefile
1.191modifypkgsrc/graphics/ImageMagick/distinfo
1.1addpkgsrc/graphics/ImageMagick/patches/patch-config_policy.xml