Search found 7 matches

by Imaging
2018-08-24T11:07:57-07:00
Forum: Users
Topic: Disabling Ghostscript in IM
Replies: 9
Views: 8554

Re: Disabling Ghostscript in IM

Perhaps it has to do with:

http://www.openwall.com/lists/oss-secur ... 8/08/23/13

that was mentioned in the original issue thread.
by Imaging
2018-08-23T08:53:28-07:00
Forum: Users
Topic: FYI: ImageMagick Exploit
Replies: 2
Views: 3536

Re: FYI: ImageMagick Exploit

One additional note if just the GS related coders are disabled: It appears that PS2 and PS3 coders need to be disabled as well per:

https://www.kb.cert.org/vuls/id/332928
by Imaging
2018-08-23T08:52:09-07:00
Forum: Users
Topic: Disabling Ghostscript in IM
Replies: 9
Views: 8554

Re: Disabling Ghostscript in IM

One additional note: It appears that PS2 and PS3 coders need to be disabled as well per:

https://www.kb.cert.org/vuls/id/332928
by Imaging
2018-08-21T13:26:12-07:00
Forum: Users
Topic: Disabling Ghostscript in IM
Replies: 9
Views: 8554

Re: Disabling Ghostscript in IM

Great, thank you for the clarification.
by Imaging
2018-08-21T13:07:45-07:00
Forum: Users
Topic: Disabling Ghostscript in IM
Replies: 9
Views: 8554

Re: Disabling Ghostscript in IM

Thank you for the update. Uninstalling isn't an option for us since ghostscript is a dependency for our rpm based IM installation. Just to make sure, does the above disabling of just the specific coders (versus disabling ghostscript), also preclude any nested image issues? From a post about the GS e...
by Imaging
2018-08-21T12:58:40-07:00
Forum: Users
Topic: Disabling Ghostscript in IM
Replies: 9
Views: 8554

Re: Disabling Ghostscript in IM

Thanks for the response. That appears to disable all delegates. We are only interested in disabling Ghostscript support. How would we do that specifically?
by Imaging
2018-08-21T12:25:11-07:00
Forum: Users
Topic: Disabling Ghostscript in IM
Replies: 9
Views: 8554

Disabling Ghostscript in IM

We'd like to disable Ghostscript support for our ImageMagick install (using a rpm so not able to uninstall ghostscript since it is a dependency). As best we can see, it appears that policy.xml would be the place to disable it. We aren't sure of the exact syntax though. Could someone please post an e...