diff options
| author |   Thomas Deutschmann <whissi@gentoo.org> | 2018-08-22 02:37:22 +0200 |
|---|---|---|
| committer | Thomas Deutschmann <whissi@gentoo.org> | 2018-08-22 02:41:20 +0200 |
| commit | 02765dfc333e578af9e3fd525fc0067dc47d6528 (patch) | |
| tree | 60afa04b2787f71f9c48c97a5f816d24edbe6eba /media-gfx/imagemagick/files | |
| parent | x11-libs/wxGTK: arm stable wrt bug #662526 (diff) | |
| download | gentoo-02765dfc333e578af9e3fd525fc0067dc47d6528.tar.gz gentoo-02765dfc333e578af9e3fd525fc0067dc47d6528.tar.bz2 gentoo-02765dfc333e578af9e3fd525fc0067dc47d6528.zip | |
media-gfx/imagemagick: rev bump to address VU#332928
Link: https://www.kb.cert.org/vuls/id/332928
Package-Manager: Portage-2.3.48, Repoman-2.3.10
Diffstat (limited to 'media-gfx/imagemagick/files')
| -rw-r--r-- | media-gfx/imagemagick/files/policy-hardening.patch | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/media-gfx/imagemagick/files/policy-hardening.patch b/media-gfx/imagemagick/files/policy-hardening.patch new file mode 100644 index 000000000000..9bb8529d191a --- /dev/null +++ b/media-gfx/imagemagick/files/policy-hardening.patch @@ -0,0 +1,15 @@ +--- a/config/policy.xml ++++ b/config/policy.xml +@@ -52,6 +52,12 @@ + <policy domain="coder" rights="read|write" pattern="{GIF,JPEG,PNG,WEBP}" /> + --> + <policymap> ++ <!-- https://www.kb.cert.org/vuls/id/332928 mitigation --> ++ <policy domain="coder" rights="none" pattern="PS" /> ++ <policy domain="coder" rights="none" pattern="EPS" /> ++ <policy domain="coder" rights="none" pattern="PDF" /> ++ <policy domain="coder" rights="none" pattern="XPS" /> ++ + <!-- <policy domain="system" name="shred" value="2"/> --> + <!-- <policy domain="system" name="precision" value="6"/> --> + <!-- <policy domain="system" name="memory-map" value="anonymous"/> --> |