wok diff imagemagick/receipt @ rev 19706

audit: disable some preinstalled packages
author Pascal Bellard <pascal.bellard@slitaz.org>
date Tue Feb 14 22:13:07 2017 +0100 (2017-02-14)
parents 6f05c710673c
children 93d872f4b7a7
line diff
     1.1 --- a/imagemagick/receipt	Mon Dec 08 14:44:54 2014 +0100
     1.2 +++ b/imagemagick/receipt	Tue Feb 14 22:13:07 2017 +0100
     1.3 @@ -48,5 +48,18 @@
     1.4  	cp -a $install/usr/lib/*.so* $fs/usr/lib
     1.5  	cp -a $install/usr/lib/$SOURCE-$SHORT_VERSION $fs/usr/lib
     1.6  	cp -a $install/usr/share/$SOURCE-* $fs/usr/share
     1.7 +
     1.8 +	# CVE-2016-3714 work around v5
     1.9 +	sed -i '/<policymap>/r/dev/stdin' $fs/etc/ImageMagick-6/policy.xml <<EOT
    1.10 +  <policy domain="coder" rights="none" pattern="EPHEMERAL" />
    1.11 +  <policy domain="coder" rights="none" pattern="URL" />
    1.12 +  <policy domain="coder" rights="none" pattern="HTTPS" />
    1.13 +  <policy domain="coder" rights="none" pattern="MVG" />
    1.14 +  <policy domain="coder" rights="none" pattern="MSL" />
    1.15 +  <policy domain="coder" rights="none" pattern="TEXT" />
    1.16 +  <policy domain="coder" rights="none" pattern="SHOW" />
    1.17 +  <policy domain="coder" rights="none" pattern="WIN" />
    1.18 +  <policy domain="coder" rights="none" pattern="PLT" />
    1.19 +EOT
    1.20  }
    1.21