Skip to content

Instantly share code, notes, and snippets.

@jtuberville

jtuberville/policy.xml

Last active May 11, 2016 20:45
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jtuberville/30eda837114065c0a357172364829273 to your computer and use it in GitHub Desktop.
Save jtuberville/30eda837114065c0a357172364829273 to your computer and use it in GitHub Desktop.
Download ZIP
Recommended ImageMagick file to patch vulnerability
Raw
policy.xml
<policymap>
<policy domain="coder" rights="none" pattern="EPHEMERAL" />
<policy domain="coder" rights="none" pattern="HTTPS" />
<policy domain="coder" rights="none" pattern="MVG" />
<policy domain="coder" rights="none" pattern="MSL" />
<policy domain="coder" rights="none" pattern="TEXT" />
<policy domain="coder" rights="none" pattern="SHOW" />
<policy domain="coder" rights="none" pattern="WIN" />
<policy domain="coder" rights="none" pattern="PLT" />
</policymap>
@steve-vtourist
Copy link

The recommendation at https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588 is:

<policy domain="coder" rights="none" pattern="EPHEMERAL" />
<policy domain="coder" rights="none" pattern="HTTPS" />
<policy domain="coder" rights="none" pattern="MVG" />
<policy domain="coder" rights="none" pattern="MSL" />
<policy domain="coder" rights="none" pattern="TEXT" />
<policy domain="coder" rights="none" pattern="SHOW" />
<policy domain="coder" rights="none" pattern="WIN" />
<policy domain="coder" rights="none" pattern="PLT" />

Should they be merged?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment