Perhaps it has to do with:
http://www.openwall.com/lists/oss-secur ... 8/08/23/13
that was mentioned in the original issue thread.
Search found 7 matches
- 2018-08-24T11:07:57-07:00
- Forum: Users
- Topic: Disabling Ghostscript in IM
- Replies: 9
- Views: 10469
- 2018-08-23T08:53:28-07:00
- Forum: Users
- Topic: FYI: ImageMagick Exploit
- Replies: 2
- Views: 3900
Re: FYI: ImageMagick Exploit
One additional note if just the GS related coders are disabled: It appears that PS2 and PS3 coders need to be disabled as well per:
https://www.kb.cert.org/vuls/id/332928
https://www.kb.cert.org/vuls/id/332928
- 2018-08-23T08:52:09-07:00
- Forum: Users
- Topic: Disabling Ghostscript in IM
- Replies: 9
- Views: 10469
Re: Disabling Ghostscript in IM
One additional note: It appears that PS2 and PS3 coders need to be disabled as well per:
https://www.kb.cert.org/vuls/id/332928
https://www.kb.cert.org/vuls/id/332928
- 2018-08-21T13:26:12-07:00
- Forum: Users
- Topic: Disabling Ghostscript in IM
- Replies: 9
- Views: 10469
Re: Disabling Ghostscript in IM
Great, thank you for the clarification.
- 2018-08-21T13:07:45-07:00
- Forum: Users
- Topic: Disabling Ghostscript in IM
- Replies: 9
- Views: 10469
Re: Disabling Ghostscript in IM
Thank you for the update. Uninstalling isn't an option for us since ghostscript is a dependency for our rpm based IM installation. Just to make sure, does the above disabling of just the specific coders (versus disabling ghostscript), also preclude any nested image issues? From a post about the GS ...
- 2018-08-21T12:58:40-07:00
- Forum: Users
- Topic: Disabling Ghostscript in IM
- Replies: 9
- Views: 10469
Re: Disabling Ghostscript in IM
Thanks for the response. That appears to disable all delegates. We are only interested in disabling Ghostscript support. How would we do that specifically?
- 2018-08-21T12:25:11-07:00
- Forum: Users
- Topic: Disabling Ghostscript in IM
- Replies: 9
- Views: 10469
Disabling Ghostscript in IM
We'd like to disable Ghostscript support for our ImageMagick install (using a rpm so not able to uninstall ghostscript since it is a dependency). As best we can see, it appears that policy.xml would be the place to disable it. We aren't sure of the exact syntax though. Could someone please post an ...