Re: GraphicsMagick Security Alert
Bob Friesenhahn <[email protected]> Thu, 5 Nov 2009 19:46:29 -0600 (CST)
| Newsgroups | gmane.comp.video.graphicsmagick.announce |
|---|---|
| Message-ID | <[email protected]> |
It seems that the test I posted to verify a secure GraphicsMagick was wrong. Use gm -version | grep with-modules | grep -v disable-static instead. The key here is that if --with-modules was specified, that --disable-static should also be specified. This only applies to GraphicsMagick 1.3.7 and earlier. Later versions will use a different method to assure security. Bob -- Bob Friesenhahn [email protected], http://www.simplesystems.org/users/bfriesen/ GraphicsMagick Maintainer, http://www.GraphicsMagick.org/ ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july