# HG changeset patch
# User Pascal Bellard <pascal.bellard@slitaz.org>
# Date 1462475950 -7200
# Node ID 18bbc96124a768733525792ef8793e48d55d81fc
# Parent  e96b9982c405151458360e23c0e62820144c21f7
imagemagick: CVE-2016-3714 workaround

diff -r e96b9982c405 -r 18bbc96124a7 imagemagick/receipt
--- a/imagemagick/receipt	Thu May 05 13:16:00 2016 +0200
+++ b/imagemagick/receipt	Thu May 05 21:19:10 2016 +0200
@@ -48,5 +48,18 @@
 	cp -a $install/usr/lib/*.so* $fs/usr/lib
 	cp -a $install/usr/lib/$SOURCE-$SHORT_VERSION $fs/usr/lib
 	cp -a $install/usr/share/$SOURCE-* $fs/usr/share
+
+	# CVE-2016-3714 work around v5
+	sed -i '/<policymap>/r/dev/stdin' $fs/etc/ImageMagick-6/policy.xml <<EOT
+  <policy domain="coder" rights="none" pattern="EPHEMERAL" />
+  <policy domain="coder" rights="none" pattern="URL" />
+  <policy domain="coder" rights="none" pattern="HTTPS" />
+  <policy domain="coder" rights="none" pattern="MVG" />
+  <policy domain="coder" rights="none" pattern="MSL" />
+  <policy domain="coder" rights="none" pattern="TEXT" />
+  <policy domain="coder" rights="none" pattern="SHOW" />
+  <policy domain="coder" rights="none" pattern="WIN" />
+  <policy domain="coder" rights="none" pattern="PLT" />
+EOT
 }