Re: how can I disable Ghostscript support in Graphicsmagick

On Thu, 23 Aug 2018, yzh卯帽潞锚 wrote:

> On August 21st, taviso@google reported a remote code execution bugs in things like ImageMagick, Evince, GIMP, and most other PDF/PS tools using ghostscript.
> https://bugs.chromium.org/p/project-zero/issues/detail?id=1640
> I test it use graphicsmagick and encounter same bug problem.
> Ghostscript has not officially fixed this bug until now. Temporary measure is disabling PS/EPS/PDF/XPS coder support.
> So how to do it in graphicsmagick? Imagemagick has a policy.xml to do this thing.

We made a post about this to the GraphicsMagick announcements list 
yesterday.

The solution is to either edit the installed delegates.mgk file to 
comment/remove the lines mentioning Ghostscript or else add a 
replacement delegates.mgk with these modifications to a directory in 
MAGICK_CONFIGURE_PATH.  On Unix-type systems, files placed in 
$HOME/.magick are in this path or you can set MAGICK_CONFIGURE_PATH in 
the environment with the path to use.

The only sure-fire way to fix the problem (at a system level) is to 
uninstall Ghostscript entirely or change its permissions so it can not 
be executed.

Bob
-- 
Bob Friesenhahn
[email protected], http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Graphicsmagick-help mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/graphicsmagick-help