[Bug 1836067] Re: Consider reenabling png to eps conversion in ImageMagick in disco

Sebastien Bacher seb128 at ubuntu.com
Wed Jul 10 19:08:22 UTC 2019


Thank you for your bug report.

Security team, do you have an opinion on that?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to imagemagick in Ubuntu.
https://bugs.launchpad.net/bugs/1836067

Title:
  Consider reenabling png to eps conversion in ImageMagick in disco

Status in imagemagick package in Ubuntu:
  Won't Fix

Bug description:
  $ lsb_release -d
  Description:    Ubuntu 19.04

  $ convert file.png file.eps
  convert-im6.q16: attempt to perform an operation not allowed by the security policy `EPS' @ error/constitute.c/IsCoderAuthorized/408.

  $ aptitude show imagemagick | egrep -i "(Version)|(Instal)"
  Version: 8:6.9.10.14+dfsg-7ubuntu2.2
  Zustand: Installiert

  $ grep "EPS" /etc/ImageMagick-6/policy.xml
    <policy domain="coder" rights="none" pattern="EPS" />

  $ aptitude show ghostscript | egrep -i "(Version)|(Instal)"
  Version: 9.26~dfsg+0-0ubuntu7.1
  Zustand: Installiert

  However, the bug https://www.kb.cert.org/vuls/id/332928/ has been
  closed in ghostscript version 9.24 already, whereas disco has
  ghostscript 9.26.  So please consider reenabling file conversion in
  ImageMagick.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1836067/+subscriptions



More information about the foundations-bugs mailing list