GraphicsMagick shell exploit
Bob Friesenhahn <[email protected]> Sun, 29 May 2016 15:52:32 -0500 (CDT)
| Newsgroups | gmane.comp.video.graphicsmagick.announce |
|---|---|
| Message-ID | <[email protected]> |
This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. ---559023410-268741084-1464555152=:4552 Content-Type: text/plain; format=flowed; charset=US-ASCII Previously I announced some issues related to the "ImageTragick" exploits and provided a set of proposed patches. At the time only one shell exploit was found, which vectored though gnuplot's system() command. Today I discovered a new shell exploit vulnerability which impacts virtually all ImageMagick and GraphicsMagick versions. The problem is due to a feature in which a filename prefixed with the '|' character is treated as a shell command to read from or write to. It is possible to deliver such file names via SVG or MVG, but this vulnerability is already blocked by the patches I sent to this list previously. There are almost certainly other ways to cause particular filenames to be read/written and so this feature creates elevated risk. I have attached an updated set of tiny patches which should apply to any Graphicsmagick 1.3.X release. The patch file "disable-popen-filename.patch" disables the popen() functionality triggered by filenames. The patch file image-sanity-check-v2.patch is an updated version of the image-sanity-check.patch file sent earlier, and fixes a memory leak in the error path. I plan to make a new release of GraphicsMagick available within a week. Many GraphicsMagick users are blocked from using current GraphicsMagick releases (other than building from source themselves) by OS distribution policies which prevent offering updated software or (apparently) even simple security fixes. Such users are provided software more than three years old. If you are impacted by this, then please lobby your OS distribution maintainer to actively maintain the software, or change to a different OS distribution. Bob -- Bob Friesenhahn [email protected], http://www.simplesystems.org/users/bfriesen/ GraphicsMagick Maintainer, http://www.GraphicsMagick.org/ ---559023410-268741084-1464555152=:4552 Content-Type: text/plain; charset=US-ASCII; name=delegates-safer.patch Content-Transfer-Encoding: BASE64 Content-ID: <[email protected]> Content-Description: Content-Disposition: attachment; filename=delegates-safer.patch ZGlmZiAtciAzMzIwMGZjNjQ1ZjYgY29uZmlnL2RlbGVnYXRlcy5tZ2suaW4N Ci0tLSBhL2NvbmZpZy9kZWxlZ2F0ZXMubWdrLmluCVNhdCBOb3YgMDcgMTQ6 NDk6MTYgMjAxNSAtMDYwMA0KKysrIGIvY29uZmlnL2RlbGVnYXRlcy5tZ2su aW4JU3VuIE1heSAwOCAxODoyMzowNCAyMDE2IC0wNTAwDQpAQCAtNzgsMjgg Kzc4LDI3IEBADQogICA8ZGVsZWdhdGUgZGVjb2RlPSJkdmkiIGNvbW1hbmQ9 JyJARFZJRGVjb2RlRGVsZWdhdGVAIiAtcSAtbyAiJW8iICIlaSInIC8+DQog ICA8ZGVsZWdhdGUgZGVjb2RlPSJlZGl0IiBzdGVhbHRoPSJUcnVlIiBjb21t YW5kPSciQEVkaXRvckRlbGVnYXRlQCIgLXRpdGxlICJFZGl0IEltYWdlIENv bW1lbnQiIC1lIHZpICIlbyInIC8+DQogICA8ZGVsZWdhdGUgZGVjb2RlPSJl bWYiIGNvbW1hbmQ9JyJAV01GRGVjb2RlRGVsZWdhdGVAIiAtbyAiJW8iICIl aSInIC8+DQotICA8ZGVsZWdhdGUgZGVjb2RlPSJlcHMiIGVuY29kZT0icGRm IiBtb2RlPSJiaSIgY29tbWFuZD0nIkBQU0RlbGVnYXRlQCIgLXEgLWRCQVRD SCAtZE1heEJpdG1hcD01MDAwMDAwMCAtZE5PUEFVU0UgLXNERVZJQ0U9QEdT UERGRGV2aWNlQCAiLXNPdXRwdXRGaWxlPSVvIiAtLSAiJWkiIC1jIHF1aXQn IC8+DQotICA8ZGVsZWdhdGUgZGVjb2RlPSJlcHMiIGVuY29kZT0icHMiIG1v ZGU9ImJpIiBjb21tYW5kPSciQFBTRGVsZWdhdGVAIiAtcSAtZEJBVENIIC1k TWF4Qml0bWFwPTUwMDAwMDAwIC1kTk9QQVVTRSAtc0RFVklDRT1AR1NQU0Rl dmljZUAgIi1zT3V0cHV0RmlsZT0lbyIgLS0gIiVpIiAtYyBxdWl0JyAvPg0K KyAgPGRlbGVnYXRlIGRlY29kZT0iZXBzIiBlbmNvZGU9InBkZiIgbW9kZT0i YmkiIGNvbW1hbmQ9JyJAUFNEZWxlZ2F0ZUAiIC1xIC1kQkFUQ0ggLWRTQUZF UiAtZE1heEJpdG1hcD01MDAwMDAwMCAtZE5PUEFVU0UgLXNERVZJQ0U9QEdT UERGRGV2aWNlQCAiLXNPdXRwdXRGaWxlPSVvIiAtLSAiJWkiIC1jIHF1aXQn IC8+DQorICA8ZGVsZWdhdGUgZGVjb2RlPSJlcHMiIGVuY29kZT0icHMiIG1v ZGU9ImJpIiBjb21tYW5kPSciQFBTRGVsZWdhdGVAIiAtcSAtZEJBVENIIC1k U0FGRVIgLWRNYXhCaXRtYXA9NTAwMDAwMDAgLWROT1BBVVNFIC1zREVWSUNF PUBHU1BTRGV2aWNlQCAiLXNPdXRwdXRGaWxlPSVvIiAtLSAiJWkiIC1jIHF1 aXQnIC8+DQogICA8ZGVsZWdhdGUgZGVjb2RlPSJmaWciIGNvbW1hbmQ9JyJA RklHRGVjb2RlRGVsZWdhdGVAIiAtTCBwcyAiJWkiICIlbyInIC8+DQotICA8 ZGVsZWdhdGUgZGVjb2RlPSJncGx0IiBjb21tYW5kPSciQEVjaG9EZWxlZ2F0 ZUAiICJzZXQgc2l6ZSAxLjI1LDAuNjI7IHNldCB0ZXJtaW5hbCBwb3N0c2Ny aXB0IHBvcnRyYWl0IGNvbG9yIHNvbGlkOyBzZXQgb3V0cHV0IFwiJW9cIjsg bG9hZCBcIiVpXCIiID4gIiV1IjsgIkBHbnVwbG90RGVjb2RlRGVsZWdhdGVA IiAiJXUiJyAvPg0KIA0KICAgPCEtLSBSZWFkIG1vbm9jaHJvbWUgUG9zdHNj cmlwdCwgRVBTLCBhbmQgUERGICAtLT4NCi0gIDxkZWxlZ2F0ZSBkZWNvZGU9 ImdzLW1vbm8iIHN0ZWFsdGg9IlRydWUiIGNvbW1hbmQ9JyJAUFNEZWxlZ2F0 ZUAiIC1xIC1kQkFUQ0ggLWRNYXhCaXRtYXA9NTAwMDAwMDAgLWROT1BBVVNF IC1zREVWSUNFPUBHU01vbm9EZXZpY2VAIC1kVGV4dEFscGhhQml0cz0ldSAt ZEdyYXBoaWNzQWxwaGFCaXRzPSV1IC1yJXMgJXMgIi1zT3V0cHV0RmlsZT0l cyIgLS0gIiVzIiAtYyBxdWl0JyAvPg0KKyAgPGRlbGVnYXRlIGRlY29kZT0i Z3MtbW9ubyIgc3RlYWx0aD0iVHJ1ZSIgY29tbWFuZD0nIkBQU0RlbGVnYXRl QCIgLXEgLWRCQVRDSCAtZFNBRkVSIC1kTWF4Qml0bWFwPTUwMDAwMDAwIC1k Tk9QQVVTRSAtc0RFVklDRT1AR1NNb25vRGV2aWNlQCAtZFRleHRBbHBoYUJp dHM9JXUgLWRHcmFwaGljc0FscGhhQml0cz0ldSAtciVzICVzICItc091dHB1 dEZpbGU9JXMiIC0tICIlcyIgLWMgcXVpdCcgLz4NCiANCiAgIDwhLS0gUmVh ZCBncmF5c2NhbGUgUG9zdHNjcmlwdCwgRVBTLCBhbmQgUERGICAtLT4NCi0g IDxkZWxlZ2F0ZSBkZWNvZGU9ImdzLWdyYXkiIHN0ZWFsdGg9IlRydWUiIGNv bW1hbmQ9JyJAUFNEZWxlZ2F0ZUAiIC1xIC1kQkFUQ0ggLWRNYXhCaXRtYXA9 NTAwMDAwMDAgLWROT1BBVVNFIC1zREVWSUNFPUBHU0dyYXlEZXZpY2VAIC1k VGV4dEFscGhhQml0cz0ldSAtZEdyYXBoaWNzQWxwaGFCaXRzPSV1IC1yJXMg JXMgIi1zT3V0cHV0RmlsZT0lcyIgLS0gIiVzIiAtYyBxdWl0JyAvPg0KKyAg PGRlbGVnYXRlIGRlY29kZT0iZ3MtZ3JheSIgc3RlYWx0aD0iVHJ1ZSIgY29t bWFuZD0nIkBQU0RlbGVnYXRlQCIgLXEgLWRCQVRDSCAtZFNBRkVSIC1kTWF4 Qml0bWFwPTUwMDAwMDAwIC1kTk9QQVVTRSAtc0RFVklDRT1AR1NHcmF5RGV2 aWNlQCAtZFRleHRBbHBoYUJpdHM9JXUgLWRHcmFwaGljc0FscGhhQml0cz0l dSAtciVzICVzICItc091dHB1dEZpbGU9JXMiIC0tICIlcyIgLWMgcXVpdCcg Lz4NCiANCiAgIDwhLS0gUmVhZCBjb2xvcm1hcHBlZCBQb3N0c2NyaXB0LCBF UFMsIGFuZCBQREYgIC0tPg0KLSAgPGRlbGVnYXRlIGRlY29kZT0iZ3MtcGFs ZXR0ZSIgc3RlYWx0aD0iVHJ1ZSIgY29tbWFuZD0nIkBQU0RlbGVnYXRlQCIg LXEgLWRCQVRDSCAtZE1heEJpdG1hcD01MDAwMDAwMCAtZE5PUEFVU0UgLXNE RVZJQ0U9QEdTUGFsZXR0ZURldmljZUAgLWRUZXh0QWxwaGFCaXRzPSV1IC1k R3JhcGhpY3NBbHBoYUJpdHM9JXUgLXIlcyAlcyAiLXNPdXRwdXRGaWxlPSVz IiAtLSAiJXMiIC1jIHF1aXQnIC8+DQorICA8ZGVsZWdhdGUgZGVjb2RlPSJn cy1wYWxldHRlIiBzdGVhbHRoPSJUcnVlIiBjb21tYW5kPSciQFBTRGVsZWdh dGVAIiAtcSAtZEJBVENIIC1kU0FGRVIgLWRNYXhCaXRtYXA9NTAwMDAwMDAg LWROT1BBVVNFIC1zREVWSUNFPUBHU1BhbGV0dGVEZXZpY2VAIC1kVGV4dEFs cGhhQml0cz0ldSAtZEdyYXBoaWNzQWxwaGFCaXRzPSV1IC1yJXMgJXMgIi1z T3V0cHV0RmlsZT0lcyIgLS0gIiVzIiAtYyBxdWl0JyAvPg0KIA0KICAgPCEt LSBSZWFkIGNvbG9yIFBvc3RzY3JpcHQsIEVQUywgYW5kIFBERiAgLS0+DQot ICA8ZGVsZWdhdGUgZGVjb2RlPSJncy1jb2xvciIgc3RlYWx0aD0iVHJ1ZSIg Y29tbWFuZD0nIkBQU0RlbGVnYXRlQCIgLXEgLWRCQVRDSCAtZE1heEJpdG1h cD01MDAwMDAwMCAtZE5PUEFVU0UgLXNERVZJQ0U9QEdTQ29sb3JEZXZpY2VA IC1kVGV4dEFscGhhQml0cz0ldSAtZEdyYXBoaWNzQWxwaGFCaXRzPSV1IC1y JXMgJXMgIi1zT3V0cHV0RmlsZT0lcyIgLS0gIiVzIiAtYyBxdWl0JyAvPg0K KyAgPGRlbGVnYXRlIGRlY29kZT0iZ3MtY29sb3IiIHN0ZWFsdGg9IlRydWUi IGNvbW1hbmQ9JyJAUFNEZWxlZ2F0ZUAiIC1xIC1kQkFUQ0ggLWRTQUZFUiAt ZE1heEJpdG1hcD01MDAwMDAwMCAtZE5PUEFVU0UgLXNERVZJQ0U9QEdTQ29s b3JEZXZpY2VAIC1kVGV4dEFscGhhQml0cz0ldSAtZEdyYXBoaWNzQWxwaGFC aXRzPSV1IC1yJXMgJXMgIi1zT3V0cHV0RmlsZT0lcyIgLS0gIiVzIiAtYyBx dWl0JyAvPg0KIA0KICAgPCEtLSBSZWFkIGNvbG9yK2FscGhhIFBvc3RzY3Jp cHQsIEVQUywgYW5kIFBERiAgLS0+DQotICA8ZGVsZWdhdGUgZGVjb2RlPSJn cy1jb2xvcithbHBoYSIgc3RlYWx0aD0iVHJ1ZSIgY29tbWFuZD0nIkBQU0Rl bGVnYXRlQCIgLXEgLWRCQVRDSCAtZE1heEJpdG1hcD01MDAwMDAwMCAtZE5P UEFVU0UgLXNERVZJQ0U9QEdTQ29sb3JBbHBoYURldmljZUAgLWRUZXh0QWxw aGFCaXRzPSV1IC1kR3JhcGhpY3NBbHBoYUJpdHM9JXUgLXIlcyAlcyAiLXNP dXRwdXRGaWxlPSVzIiAtLSAiJXMiIC1jIHF1aXQnIC8+DQorICA8ZGVsZWdh dGUgZGVjb2RlPSJncy1jb2xvcithbHBoYSIgc3RlYWx0aD0iVHJ1ZSIgY29t bWFuZD0nIkBQU0RlbGVnYXRlQCIgLXEgLWRCQVRDSCAtZFNBRkVSIC1kTWF4 Qml0bWFwPTUwMDAwMDAwIC1kTk9QQVVTRSAtc0RFVklDRT1AR1NDb2xvckFs cGhhRGV2aWNlQCAtZFRleHRBbHBoYUJpdHM9JXUgLWRHcmFwaGljc0FscGhh Qml0cz0ldSAtciVzICVzICItc091dHB1dEZpbGU9JXMiIC0tICIlcyIgLWMg cXVpdCcgLz4NCiANCiAgIDwhLS0gUmVhZCBDTVlLIFBvc3RzY3JpcHQsIEVQ UywgYW5kIFBERiAgLS0+DQotICA8ZGVsZWdhdGUgZGVjb2RlPSJncy1jbXlr IiBzdGVhbHRoPSJUcnVlIiBjb21tYW5kPSciQFBTRGVsZWdhdGVAIiAtcSAt ZEJBVENIIC1kTWF4Qml0bWFwPTUwMDAwMDAwIC1kTk9QQVVTRSAtc0RFVklD RT1AR1NDTVlLRGV2aWNlQCAtZFRleHRBbHBoYUJpdHM9JXUgLWRHcmFwaGlj c0FscGhhQml0cz0ldSAtciVzICVzICItc091dHB1dEZpbGU9JXMiIC0tICIl cyIgLWMgcXVpdCcgLz4NCisgIDxkZWxlZ2F0ZSBkZWNvZGU9ImdzLWNteWsi IHN0ZWFsdGg9IlRydWUiIGNvbW1hbmQ9JyJAUFNEZWxlZ2F0ZUAiIC1xIC1k QkFUQ0ggLWRTQUZFUiAtZE1heEJpdG1hcD01MDAwMDAwMCAtZE5PUEFVU0Ug LXNERVZJQ0U9QEdTQ01ZS0RldmljZUAgLWRUZXh0QWxwaGFCaXRzPSV1IC1k R3JhcGhpY3NBbHBoYUJpdHM9JXUgLXIlcyAlcyAiLXNPdXRwdXRGaWxlPSVz IiAtLSAiJXMiIC1jIHF1aXQnIC8+DQogDQogICA8ZGVsZWdhdGUgZGVjb2Rl PSJocGciIGNvbW1hbmQ9JyJASFBHTERlY29kZURlbGVnYXRlQCIgLXEgLW0g ZXBzIC1mIGBiYXNlbmFtZSAiJW8iYCAiJWkiICYmIG12IC1mIGBiYXNlbmFt ZSAiJW8iYCAiJW8iJyAvPg0KICAgPGRlbGVnYXRlIGRlY29kZT0iaHBnbCIg Y29tbWFuZD0nIkBIUEdMRGVjb2RlRGVsZWdhdGVAIiAtcSAtbSBlcHMgLWYg YGJhc2VuYW1lICIlbyJgICIlaSIgJiYgbXYgLWYgYGJhc2VuYW1lICIlbyJg ICIlbyInIC8+DQpAQCAtMTA4LDE2ICsxMDcsMTQgQEANCiAgIDwhLS0gUmVh ZCBIVE1MIGZpbGUgIC0tPg0KICAgPGRlbGVnYXRlIGRlY29kZT0iaHRtbCIg Y29tbWFuZD0nIkBIVE1MRGVjb2RlRGVsZWdhdGVAIiAtVSAtbyAiJW8iICIl aSInIC8+DQogICA8ZGVsZWdhdGUgZGVjb2RlPSJpbGJtIiBjb21tYW5kPSci QElMQk1EZWNvZGVEZWxlZ2F0ZUAiICIlaSIgPiAiJW8iJyAvPg0KLSAgPCEt LSBSZWFkIFVOSVggbWFudWFsIHBhZ2UgIC0tPg0KLSAgPGRlbGVnYXRlIGRl Y29kZT0ibWFuIiBjb21tYW5kPSciQE1BTkRlbGVnYXRlQCIgLW1hbiAtVHBz ICIlaSIgPiAiJW8iJyAvPg0KICAgPCEtLSBSZWFkIE1QRUcgZmlsZSB1c2lu ZyBtcGVnMmRlY29kZSAgLS0+DQogICA8ZGVsZWdhdGUgZGVjb2RlPSJtcGVn IiBjb21tYW5kPSciQE1QRUdEZWNvZGVEZWxlZ2F0ZUAiIC1xIC1iICIlaSIg LWYgLW8zICIldSUlMDVkIjsgQEdNRGVsZWdhdGVAIGNvbnZlcnQgLXRlbXBv cmFyeSAiJXUqLnBwbSIgIm1pZmY6JW8iIDsgcm0gLWYgIiV1IioucHBtICcg Lz4NCiAgIDwhLS0gV3JpdGUgTVBFRyBmaWxlIHVzaW5nIG1wZWcyZW5jb2Rl IC0tPg0KICAgPGRlbGVnYXRlIGVuY29kZT0ibXBlZy1lbmNvZGUiIHN0ZWFs dGg9IlRydWUiIGNvbW1hbmQ9JyJATVBFR0VuY29kZURlbGVnYXRlQCIgIiVp IiAiJW8iJyAvPg0KICAgPCEtLSBDb252ZXJ0IFBERiB0byBFbmNhcHN1bGF0 ZWQgUG9zY3JpcHQgdXNpbmcgR2hvc3RzY3JpcHQgLS0+DQotICA8ZGVsZWdh dGUgZGVjb2RlPSJwZGYiIGVuY29kZT0iZXBzIiBtb2RlPSJiaSIgY29tbWFu ZD0nIkBQU0RlbGVnYXRlQCIgLXEgLWRCQVRDSCAtZE1heEJpdG1hcD01MDAw MDAwMCAtZE5PUEFVU0UgLXNERVZJQ0U9QEdTRVBTRGV2aWNlQCAiLXNPdXRw dXRGaWxlPSVvIiAtLSAiJWkiIC1jIHF1aXQnIC8+DQorICA8ZGVsZWdhdGUg ZGVjb2RlPSJwZGYiIGVuY29kZT0iZXBzIiBtb2RlPSJiaSIgY29tbWFuZD0n IkBQU0RlbGVnYXRlQCIgLXEgLWRCQVRDSCAtZFNBRkVSIC1kTWF4Qml0bWFw PTUwMDAwMDAwIC1kTk9QQVVTRSAtc0RFVklDRT1AR1NFUFNEZXZpY2VAICIt c091dHB1dEZpbGU9JW8iIC0tICIlaSIgLWMgcXVpdCcgLz4NCiAgIDwhLS0g Q29udmVydCBQREYgdG8gUG9zdGNyaXB0IHVzaW5nIEdob3N0c2NyaXB0IC0t Pg0KLSAgPGRlbGVnYXRlIGRlY29kZT0icGRmIiBlbmNvZGU9InBzIiBtb2Rl PSJiaSIgY29tbWFuZD0nIkBQU0RlbGVnYXRlQCIgLXEgLWRCQVRDSCAtZE1h eEJpdG1hcD01MDAwMDAwMCAtZE5PUEFVU0UgLXNERVZJQ0U9QEdTUFNEZXZp Y2VAICItc091dHB1dEZpbGU9JW8iIC0tICIlaSIgLWMgcXVpdCcgLz4NCisg IDxkZWxlZ2F0ZSBkZWNvZGU9InBkZiIgZW5jb2RlPSJwcyIgbW9kZT0iYmki IGNvbW1hbmQ9JyJAUFNEZWxlZ2F0ZUAiIC1xIC1kQkFUQ0ggLWRTQUZFUiAt ZE1heEJpdG1hcD01MDAwMDAwMCAtZE5PUEFVU0UgLXNERVZJQ0U9QEdTUFNE ZXZpY2VAICItc091dHB1dEZpbGU9JW8iIC0tICIlaSIgLWMgcXVpdCcgLz4N CiAgIDwhLS0gQ29udmVydCBQTk0gZmlsZSB0byBJTEJNIGZvcm1hdCB1c2lu ZyBwcG10b2lsYm0gLS0+DQogICA8ZGVsZWdhdGUgZGVjb2RlPSJwbm0iIGVu Y29kZT0iaWxibSIgbW9kZT0iZW5jb2RlIiBjb21tYW5kPSciQElMQk1FbmNv ZGVEZWxlZ2F0ZUAiIC0yNGlmICIlaSIgPiAiJW8iJyAvPg0KICAgPGRlbGVn YXRlIGRlY29kZT0icG5tIiBlbmNvZGU9ImxhdW5jaCIgbW9kZT0iZW5jb2Rl IiBjb21tYW5kPSciQExhdW5jaERlbGVnYXRlQCIgIiVpIicgLz4NCkBAIC0x MjUsOCArMTIyLDggQEANCiAgIDwhLS0gUmVhZCBQZXJzaXN0YW5jZSBPZiBW aXNpb24gZmlsZSB1c2luZyBwb3ZyYXkgIC0tPg0KICAgPGRlbGVnYXRlIGRl Y29kZT0icG92IiBjb21tYW5kPSdAUE9WRGVsZWdhdGVAICIraSIlaSIiICtv IiVvIiArZm4lcSArdyV3ICtoJWggK2EgLXE5IC1rZmkiJXMiIC1rZmYiJW4i DQogICAgICJAR01EZWxlZ2F0ZUAiIGNvbnZlcnQgLWFkam9pbiAiJW8qLnBu ZyIgIiVvIicgLz4NCi0gIDxkZWxlZ2F0ZSBkZWNvZGU9InBzIiBlbmNvZGU9 ImVwcyIgbW9kZT0iYmkiIGNvbW1hbmQ9JyJAUFNEZWxlZ2F0ZUAiIC1xIC1k QkFUQ0ggLWRNYXhCaXRtYXA9NTAwMDAwMDAgLWROT1BBVVNFIC1zREVWSUNF PUBHU0VQU0RldmljZUAgIi1zT3V0cHV0RmlsZT0lbyIgLS0gIiVpIiAtYyBx dWl0JyAvPg0KLSAgPGRlbGVnYXRlIGRlY29kZT0icHMiIGVuY29kZT0icGRm IiBtb2RlPSJiaSIgY29tbWFuZD0nIkBQU0RlbGVnYXRlQCIgLXEgLWRCQVRD SCAtZE1heEJpdG1hcD01MDAwMDAwMCAtZE5PUEFVU0UgLXNERVZJQ0U9QEdT UERGRGV2aWNlQCAiLXNPdXRwdXRGaWxlPSVvIiAtLSAiJWkiIC1jIHF1aXQn IC8+DQorICA8ZGVsZWdhdGUgZGVjb2RlPSJwcyIgZW5jb2RlPSJlcHMiIG1v ZGU9ImJpIiBjb21tYW5kPSciQFBTRGVsZWdhdGVAIiAtcSAtZEJBVENIIC1k U0FGRVIgLWRNYXhCaXRtYXA9NTAwMDAwMDAgLWROT1BBVVNFIC1zREVWSUNF PUBHU0VQU0RldmljZUAgIi1zT3V0cHV0RmlsZT0lbyIgLS0gIiVpIiAtYyBx dWl0JyAvPg0KKyAgPGRlbGVnYXRlIGRlY29kZT0icHMiIGVuY29kZT0icGRm IiBtb2RlPSJiaSIgY29tbWFuZD0nIkBQU0RlbGVnYXRlQCIgLXEgLWRCQVRD SCAtZFNBRkVSIC1kTWF4Qml0bWFwPTUwMDAwMDAwIC1kTk9QQVVTRSAtc0RF VklDRT1AR1NQREZEZXZpY2VAICItc091dHB1dEZpbGU9JW8iIC0tICIlaSIg LWMgcXVpdCcgLz4NCiAgIDxkZWxlZ2F0ZSBkZWNvZGU9InBzIiBlbmNvZGU9 InByaW50IiBtb2RlPSJlbmNvZGUiIGNvbW1hbmQ9JyJAUHJpbnREZWxlZ2F0 ZUAiICIlaSInIC8+DQogICA8IS0tIFJlYWQgUmFkaWFuY2UgZmlsZSB1c2lu ZyByYV9wcG0gLS0+DQogICA8ZGVsZWdhdGUgZGVjb2RlPSJyYWQiIGNvbW1h bmQ9JyJAUkFERGVjb2RlRGVsZWdhdGVAIiAtZyAxLjAgIiVpIiAiJW8iJyAv Pg0KQEAgLTE0MSw1ICsxMzgsNSBAQA0KICAgPGRlbGVnYXRlIGRlY29kZT0i dHh0IiBlbmNvZGU9InBzIiBtb2RlPSJiaSIgY29tbWFuZD0nIkBUWFREZWxl Z2F0ZUAiIC1vICIlbyIgIiVpIicgLz4NCiAgIDwhLS0gUmVuZGVyIFdNRiBm aWxlIHVzaW5nIHdtZjJlcHMgKGZhbGxiYWNrIGluIGNhc2UgbGlid21mIG5v dCBhdmFpbGFibGUpIC0tPg0KICAgPGRlbGVnYXRlIGRlY29kZT0id21mIiBj b21tYW5kPSciQFdNRkRlY29kZURlbGVnYXRlQCIgLW8gIiVvIiAiJWkiJyAv Pg0KLSAgPGRlbGVnYXRlIGVuY29kZT0ic2hvdyIgc3RlYWx0aD0iVHJ1ZSIg Y29tbWFuZD0nIkBHTURlbGVnYXRlQCIgZGlzcGxheSAtaW1tdXRhYmxlIC1k ZWxheSAwIC13aW5kb3dfZ3JvdXAgJWcgLXRpdGxlICIlbCBvZiAlZiIgInRt cDolbyIgJicgLz4NCisgIDxkZWxlZ2F0ZSBlbmNvZGU9InNob3ciIHN0ZWFs dGg9IlRydWUiIGNvbW1hbmQ9JyJAR01EZWxlZ2F0ZUAiIGRpc3BsYXkgLWlt bXV0YWJsZSAtZGVsYXkgMCAtd2luZG93X2dyb3VwICVnIC10aXRsZSAiJWwg b2YgJWYiICIlbyIgJicgLz4NCiA8L2RlbGVnYXRlbWFwPg0K ---559023410-268741084-1464555152=:4552 Content-Type: text/plain; charset=US-ASCII; name=disable-mvg-ext.patch Content-Transfer-Encoding: BASE64 Content-ID: <[email protected]> Content-Description: Content-Disposition: attachment; filename=disable-mvg-ext.patch ZGlmZiAtciAzMzIwMGZjNjQ1ZjYgY29kZXJzL212Zy5jDQotLS0gYS9jb2Rl cnMvbXZnLmMJU2F0IE5vdiAwNyAxNDo0OToxNiAyMDE1IC0wNjAwDQorKysg Yi9jb2RlcnMvbXZnLmMJU2F0IE1heSAwNyAyMDoxMTo1NCAyMDE2IC0wNTAw DQpAQCAtMjM0LDYgKzIzNCw3IEBADQogICBlbnRyeS0+c2Vla2FibGVfc3Ry ZWFtPVRydWU7DQogICBlbnRyeS0+ZGVzY3JpcHRpb249Ik1hZ2ljayBWZWN0 b3IgR3JhcGhpY3MiOw0KICAgZW50cnktPm1vZHVsZT0iTVZHIjsNCisgIGVu dHJ5LT5leHRlbnNpb25fdHJlYXRtZW50PUlnbm9yZUV4dGVuc2lvblRyZWF0 bWVudDsNCiAgICh2b2lkKSBSZWdpc3Rlck1hZ2lja0luZm8oZW50cnkpOw0K IH0NCiAMDQo= ---559023410-268741084-1464555152=:4552 Content-Type: text/plain; charset=US-ASCII; name=disable-popen-filename.patch Content-Transfer-Encoding: BASE64 Content-ID: <[email protected]> Content-Description: Content-Disposition: attachment; filename=disable-popen-filename.patch ZGlmZiAtciAzMzIwMGZjNjQ1ZjYgbWFnaWNrL2Jsb2IuYw0KLS0tIGEvbWFn aWNrL2Jsb2IuYwlTYXQgTm92IDA3IDE0OjQ5OjE2IDIwMTUgLTA2MDANCisr KyBiL21hZ2ljay9ibG9iLmMJU3VuIE1heSAyOSAxNDoxMjo1NyAyMDE2IC0w NTAwDQpAQCAtNjgsNiArNjgsNyBAQA0KICovDQogI2RlZmluZSBEZWZhdWx0 QmxvYlF1YW50dW0gIDY1NTQxDQogDQorI3VuZGVmIEhBVkVfUE9QRU4NCiAN CiAvKg0KICAgRW51bSBkZWNsYXJhdGlvbnMuDQo= ---559023410-268741084-1464555152=:4552 Content-Type: text/plain; charset=US-ASCII; name=disable-tmp-magick-prefix.patch Content-Transfer-Encoding: BASE64 Content-ID: <[email protected]> Content-Description: Content-Disposition: attachment; filename=disable-tmp-magick-prefix.patch ZGlmZiAtciAzMzIwMGZjNjQ1ZjYgbWFnaWNrL2ltYWdlLmMNCi0tLSBhL21h Z2ljay9pbWFnZS5jCVNhdCBOb3YgMDcgMTQ6NDk6MTYgMjAxNSAtMDYwMA0K KysrIGIvbWFnaWNrL2ltYWdlLmMJU2F0IE1heSAwNyAyMDoxMjo1NyAyMDE2 IC0wNTAwDQpAQCAtMjc4MCw5ICsyNzgwLDYgQEANCiAgICAgICAgICAgICAg ICh2b2lkKSBzdHJsY3B5KGltYWdlX2luZm8tPm1hZ2ljayxtYWdpYyxNYXhU ZXh0RXh0ZW50KTsNCiAgICAgICAgICAgICAgIGlmIChMb2NhbGVDb21wYXJl KG1hZ2ljLCJUTVAiKSAhPSAwKQ0KICAgICAgICAgICAgICAgICBpbWFnZV9p bmZvLT5hZmZpcm09TWFnaWNrVHJ1ZTsNCi0gICAgICAgICAgICAgIGVsc2UN Ci0gICAgICAgICAgICAgICAgLyogaW5wdXQgZmlsZSB3aWxsIGJlIGF1dG9t YXRpY2FsbHkgcmVtb3ZlZCAqLw0KLSAgICAgICAgICAgICAgICBpbWFnZV9p bmZvLT50ZW1wb3Jhcnk9TWFnaWNrVHJ1ZTsNCiAgICAgICAgICAgICB9DQog ICAgICAgICB9DQogICAgIH0NCg== ---559023410-268741084-1464555152=:4552 Content-Type: text/plain; charset=US-ASCII; name=image-sanity-check-v2.patch Content-Transfer-Encoding: BASE64 Content-ID: <[email protected]> Content-Description: Content-Disposition: attachment; filename=image-sanity-check-v2.patch ZGlmZiAtciAzMzIwMGZjNjQ1ZjYgbWFnaWNrL3JlbmRlci5jDQotLS0gYS9t YWdpY2svcmVuZGVyLmMJU2F0IE5vdiAwNyAxNDo0OToxNiAyMDE1IC0wNjAw DQorKysgYi9tYWdpY2svcmVuZGVyLmMJU3VuIE1heSAyOSAxNDoxMjoyOCAy MDE2IC0wNTAwDQpAQCAtNDA4Myw3ICs0MDgzLDcgQEANCiAgICAgICAgIGFm ZmluZTsNCiANCiAgICAgICBJbWFnZQ0KLSAgICAgICAgKmNvbXBvc2l0ZV9p bWFnZTsNCisgICAgICAgICpjb21wb3NpdGVfaW1hZ2U9KEltYWdlICopIE5V TEw7DQogDQogICAgICAgSW1hZ2VJbmZvDQogICAgICAgICAqY2xvbmVfaW5m bzsNCkBAIC00MDk2LDkgKzQwOTYsMjkgQEANCiAgICAgICAgICAgJmltYWdl LT5leGNlcHRpb24pOw0KICAgICAgIGVsc2UNCiAgICAgICAgIHsNCi0gICAg ICAgICAgKHZvaWQpIHN0cmxjcHkoY2xvbmVfaW5mby0+ZmlsZW5hbWUscHJp bWl0aXZlX2luZm8tPnRleHQsDQotICAgICAgICAgICAgTWF4VGV4dEV4dGVu dCk7DQotICAgICAgICAgIGNvbXBvc2l0ZV9pbWFnZT1SZWFkSW1hZ2UoY2xv bmVfaW5mbywmaW1hZ2UtPmV4Y2VwdGlvbik7DQorICAgICAgICAgIC8qDQor ICAgICAgICAgICAgU2FuaXR5IGNoZWNrIFVSTC9wYXRoIGJlZm9yZSBwYXNz aW5nIGl0IHRvIFJlYWRJbWFnZSgpDQorDQorICAgICAgICAgICAgVGhpcyBp cyBhIHRlbXBvcmFyeSBmaXggdW50aWwgc3VpdGFibGUgZmxhZ3MgY2FuIGJl IHBhc3NlZA0KKyAgICAgICAgICAgIHRvIGtlZXAgU2V0SW1hZ2VJbmZvKCkg ZnJvbSBkb2luZyBwb3RlbnRpYWxseSBkYW5nZXJvdXMNCisgICAgICAgICAg ICBtYWdpY2sgdGhpbmdzLg0KKyAgICAgICAgICAqLw0KKyNkZWZpbmUgVkFM SURfUFJFRklYKHN0cix1cmwpIChMb2NhbGVOQ29tcGFyZShzdHIsdXJsLHNp emVvZihzdHIpLTEpID09IDApDQorICAgICAgICAgIGlmICghVkFMSURfUFJF RklYKCJodHRwOi8vIiwgcHJpbWl0aXZlX2luZm8tPnRleHQpICYmDQorICAg ICAgICAgICAgICAhVkFMSURfUFJFRklYKCJodHRwczovLyIsIHByaW1pdGl2 ZV9pbmZvLT50ZXh0KSAmJg0KKyAgICAgICAgICAgICAgIVZBTElEX1BSRUZJ WCgiZnRwOi8vIiwgcHJpbWl0aXZlX2luZm8tPnRleHQpICAmJg0KKyAgICAg ICAgICAgICAgIShJc0FjY2Vzc2libGVOb0xvZ2dpbmcocHJpbWl0aXZlX2lu Zm8tPnRleHQpKQ0KKyAgICAgICAgICAgICAgKQ0KKyAgICAgICAgICAgIHsN CisgICAgICAgICAgICAgIFRocm93RXhjZXB0aW9uKCZpbWFnZS0+ZXhjZXB0 aW9uLEZpbGVPcGVuRXJyb3IsVW5hYmxlVG9PcGVuRmlsZSxwcmltaXRpdmVf aW5mby0+dGV4dCk7DQorICAgICAgICAgICAgICBzdGF0dXM9TWFnaWNrRmFp bDsNCisgICAgICAgICAgICB9DQorICAgICAgICAgIGVsc2UNCisgICAgICAg ICAgICB7DQorICAgICAgICAgICAgICAodm9pZCkgc3RybGNweShjbG9uZV9p bmZvLT5maWxlbmFtZSxwcmltaXRpdmVfaW5mby0+dGV4dCwNCisgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIE1heFRleHRFeHRlbnQpOw0KKyAgICAg ICAgICAgICAgY29tcG9zaXRlX2ltYWdlPVJlYWRJbWFnZShjbG9uZV9pbmZv LCZpbWFnZS0+ZXhjZXB0aW9uKTsNCisgICAgICAgICAgICB9DQogICAgICAg ICB9DQogICAgICAgaWYgKGltYWdlLT5leGNlcHRpb24uc2V2ZXJpdHkgIT0g VW5kZWZpbmVkRXhjZXB0aW9uKQ0KICAgICAgICAgTWFnaWNrRXJyb3IyKGlt YWdlLT5leGNlcHRpb24uc2V2ZXJpdHksaW1hZ2UtPmV4Y2VwdGlvbi5yZWFz b24sDQo= ---559023410-268741084-1464555152=:4552 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e ---559023410-268741084-1464555152=:4552 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Graphicsmagick-announce mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/graphicsmagick-announce ---559023410-268741084-1464555152=:4552--