Re: GraphicsMagick Security Alert

Bob Friesenhahn <[email protected]> Thu, 5 Nov 2009 19:46:29 -0600 (CST)
Newsgroups gmane.comp.video.graphicsmagick.announce
Message-ID <[email protected]>
It seems that the test I posted to verify a secure GraphicsMagick was 
wrong.  Use

   gm -version | grep with-modules | grep -v disable-static

instead.  The key here is that if --with-modules was specified, that 
--disable-static should also be specified.

This only applies to GraphicsMagick 1.3.7 and earlier.  Later versions 
will use a different method to assure security.

Bob
--
Bob Friesenhahn
[email protected], http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july