Search found 9 matches

by mjmj
2018-07-09T12:49:54-07:00
Forum: Users
Topic: Is 6.7.7-10 with only png parser vulnerable to exploits?
Replies: 6
Views: 3592

Re: Is 6.7.7-10 with only png parser vulnerable to exploits?

Thanks fmw42, saved my day.
by mjmj
2018-07-06T14:56:35-07:00
Forum: Users
Topic: Is 6.7.7-10 with only png parser vulnerable to exploits?
Replies: 6
Views: 3592

Re: Is 6.7.7-10 with only png parser vulnerable to exploits?

Your IM versions is ancient. But Linux distributions don't change version numbers when they add patches. So you last patch was 6/11/2018, so just a fe days ago. Good to know! That makes me feel much better since we build and update the base OS frequently. How can I see the latest patches that are b...
by mjmj
2018-07-06T14:45:33-07:00
Forum: Developers
Topic: Copying over binaries which shared libraries are needed?
Replies: 4
Views: 9537

Re: Copying over binaries which shared libraries are needed?

Yeah I'm still trying to understand all the options. I really want just a png parser, resize and transparency, nothing else. As a binary if possible. I see '--disable-installed' option saying 'less secure' but with no details as to what security I'm giving up. So far I'm using ./configure --prefix /...
by mjmj
2018-07-06T14:37:18-07:00
Forum: Users
Topic: Is 6.7.7-10 with only png parser vulnerable to exploits?
Replies: 6
Views: 3592

Re: Is 6.7.7-10 with only png parser vulnerable to exploits?

That's helpful thanks, we also accept jpeg but rename the suffix to png and use the png parser. Does that help avoid jpeg parser vulnerabilities? Or not really change anything. I tried reading through cve issues but it's overwhelming and still not clear if this version is safe with png only parser. ...
by mjmj
2018-07-06T13:57:49-07:00
Forum: Users
Topic: Is 6.7.7-10 with only png parser vulnerable to exploits?
Replies: 6
Views: 3592

Is 6.7.7-10 with only png parser vulnerable to exploits?

I'm running ImageMagick 6.7.7-10 on Ubuntu Trusty with only the png parser being used (jpeg being renamed to png, or png's) Am I vulnerable to any known exploits? I can't easily upgrade from this version at this time. Version: ImageMagick 6.7.7-10 2018-06-11 Q16 http://www.imagemagick.org Copyright:...
by mjmj
2018-07-06T11:20:59-07:00
Forum: Developers
Topic: Copying over binaries which shared libraries are needed?
Replies: 4
Views: 9537

Re: Copying over binaries which shared libraries are needed?

What I'm trying to do is:
A) Install in imagemagick in modular way on Ubuntu 14.04. I only need magick to support jpg & png resizing and transparency options. But there are a lot of flags to understand for a newbie.

or B) uninstall all the build-dep that aren't needed after I install from source.
by mjmj
2018-07-06T07:31:02-07:00
Forum: Developers
Topic: Copying over binaries which shared libraries are needed?
Replies: 4
Views: 9537

Copying over binaries which shared libraries are needed?

I'm doing a multistage docker build where I build the latest imagemagick and all it's build dependencies for ubuntu 14.04 (there are a lot) and I want to copy over just the 'convert' binary and whatever shared libraries it needs to work so I don't have all the build dep cruft on my production system...
by mjmj
2018-07-05T15:07:44-07:00
Forum: Users
Topic: Install latest version on Ubuntu 14.04 Trusty
Replies: 2
Views: 2374

Re: Install latest version on Ubuntu 14.04 Trusty

Thanks , I was able to get 7.0.8-5 installed using these instructions: https://askubuntu.com/questions/745660/imagemagick-png-delegate-install-problems/746195#746195 My problem now is that build-dep installs an INSANE amount of packages and I want to remove those once imagemagick is installed. Do I ...
by mjmj
2018-07-05T11:53:00-07:00
Forum: Users
Topic: Install latest version on Ubuntu 14.04 Trusty
Replies: 2
Views: 2374

Install latest version on Ubuntu 14.04 Trusty

Hi,

How do I go about installing the latest ImageMagick version on Ubuntu 14.04 Trusty?
apt-get install installs Version: ImageMagick 6.7.7-10 2018-06-11 Q16

Is there a safe PPA or other method, maybe from source to install the latest?

Thanks.