ImageMagick: Update to 7.0.8.10 and disable ghostscript coders by default in policy.xml Disable ghostscript coders in policy.xml as a workaround for VU#332928 (). Please note that apart commenting/removing lines added in policy.xml, the ghostscript coders can be enabled per-user by copying policy.xml to ~/.config/ImageMagick/policy.xml and adjusting it with the following lines: | [...] | | | | | | | [...] Changes: 2018-08-13 7.0.8-10 Cristy * Release ImageMagick version 7.0.8-10, GIT revision 14646:48fba3256:20180813 2018-08-12 7.0.8-10 Dirk Lemstra * Added dcraw coder (dcraw:img.cr2) that can be used to force the use of the dcraw delegate when libraw is the default raw delegate. * Restored thread support for the HEIC coder. 2018-08-08 7.0.8-10 Cristy * ThumbnailImage function no longer reveals sensitive information (reference https://github.com/ImageMagick/ImageMagick/issues/1243). 2018-08-06 7.0.8-9 Cristy * Release ImageMagick version 7.0.8-9, GIT revision 14618:a3663c3dc:20180805. 2018-07-24 7.0.8-9 Cristy * XBM coder leaves the hex image data uninitialized if hex value of the pixel is negative. * More improvements to SVG text handling. * New -range threshold option that combines hard and soft thresholding. 2018-07-23 7.0.8-8 Cristy * Release ImageMagick version 7.0.8-8, GIT revision 14583:300fdbcfd:20180723. 2018-07-20 7.0.8-8 Cristy * Non-HDRI ScaleLongToQuantum() private method no longer adds a half interval. * Fixed memset() negative-size-param (reference https://github.com/ImageMagick/ImageMagick/issues/1217). 2018-07-16 7.0.8-7 Cristy * Release ImageMagick version 7.0.8-7, GIT revision 14561:f85c23180:20180716. 2018-07-15 7.0.8-7 Cristy * Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts (credit to OSS Fuzz). 2018-07-08 7.0.8-6 Cristy * Release ImageMagick version 7.0.8-6, GIT revision 14541:db940ccd2:20180708. 2018-07-06 7.0.8-6 Cristy * Improve SVG support for tspan element. * Add support for -fx image.extent. 2018-07-04 7.0.8-5 Cristy * Release ImageMagick version 7.0.8-5, GIT revision 14514:bba545bbb:20180704. 2018-07-04 7.0.8-5 Cristy * Fixed a few potential memory leaks https://github.com/ImageMagick/ImageMagick/issues). 2018-07-02 7.0.8-4 Cristy * Release ImageMagick version 7.0.8-4, GIT revision 14505:4613eed4a:20180702. 2018-06-28 7.0.8-4 Cristy * Small tweaks to compile under Cygwin. * Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts (credit to OSS Fuzz). * Support %B property, the image file size without any decorations. 2018-06-24 7.0.8-3 Cristy * Release ImageMagick version 7.0.8-3, GIT revision 14489:c63c504e8:20180624. 2018-06-24 7.0.8-3 Cristy * Apply translate component of SVG transform rotate. Index: Makefile =================================================================== RCS file: /cvsroot/pkgsrc/graphics/ImageMagick/Makefile,v retrieving revision 1.244 retrieving revision 1.247 diff -u -p -r1.244 -r1.247 --- Makefile 27 May 2018 06:49:00 -0000 1.244 +++ Makefile 23 Aug 2018 14:52:22 -0000 1.247 @@ -1,5 +1,6 @@ -# $NetBSD: Makefile,v 1.244 2018/05/27 06:49:00 wiz Exp $ +# $NetBSD: Makefile,v 1.247 2018/08/23 14:52:22 leot Exp $ +PKGREVISION= 3 .include "Makefile.common" PKGNAME= ImageMagick-${DISTVERSION} Index: Makefile.common =================================================================== RCS file: /cvsroot/pkgsrc/graphics/ImageMagick/Makefile.common,v retrieving revision 1.174 retrieving revision 1.175 diff -u -p -r1.174 -r1.175 --- Makefile.common 19 Jun 2018 22:57:05 -0000 1.174 +++ Makefile.common 16 Aug 2018 08:23:16 -0000 1.175 @@ -1,4 +1,4 @@ -# $NetBSD: Makefile.common,v 1.174 2018/06/19 22:57:05 ryoon Exp $ +# $NetBSD: Makefile.common,v 1.175 2018/08/16 08:23:16 wiz Exp $ # # When updating this package, please upload the distfile # since they disappear immediately when new releases happen, @@ -7,7 +7,7 @@ # used by graphics/p5-PerlMagick/Makefile IM_MAJOR_VER= 7.0.8 -IM_MINOR_VER= 2 +IM_MINOR_VER= 10 IM_MAJOR_LIB_VER= 7 .if (${IM_MINOR_VER} != NONE) Index: distinfo =================================================================== RCS file: /cvsroot/pkgsrc/graphics/ImageMagick/distinfo,v retrieving revision 1.189 retrieving revision 1.192 diff -u -p -r1.189 -r1.192 --- distinfo 19 Jun 2018 22:57:05 -0000 1.189 +++ distinfo 23 Aug 2018 14:52:22 -0000 1.192 @@ -1,6 +1,7 @@ -$NetBSD: distinfo,v 1.189 2018/06/19 22:57:05 ryoon Exp $ +$NetBSD: distinfo,v 1.192 2018/08/23 14:52:22 leot Exp $ -SHA1 (ImageMagick-7.0.8-2.tar.xz) = 45b18033646f688a01bd14136a3666c95a74bc7e -RMD160 (ImageMagick-7.0.8-2.tar.xz) = 08395e4250451102f7c4142a8a7c369c58137ac6 -SHA512 (ImageMagick-7.0.8-2.tar.xz) = 1a0694dddbe12117341fc82e8f8c023e438f38c9cfb65bdfc4d7f9d31299df77796b4b87df641abc9a8a6670d45785d487d141e2bfbd625cd37aeab6b3a85615 -Size (ImageMagick-7.0.8-2.tar.xz) = 8617868 bytes +SHA1 (ImageMagick-7.0.8-10.tar.xz) = c69fb5b1ec2d04711a98df8762926a37e3f13bc5 +RMD160 (ImageMagick-7.0.8-10.tar.xz) = 9e5339d7e4f2dbc42090cd8394bca5b97dc485ba +SHA512 (ImageMagick-7.0.8-10.tar.xz) = a4869e0a9be5e04c04fcd1fce5c4141d63968ee7f1dd78d84724921f2f088bdcea8c3b3799e1ff555a2a04dec32a1fb7c4a1e6053a6185e9a36c6ae0f1b9c6ed +Size (ImageMagick-7.0.8-10.tar.xz) = 8635496 bytes +SHA1 (patch-config_policy.xml) = 2c446a00fc00f85ab33eae0691d4d8989a46289f Index: patches/patch-config_policy.xml =================================================================== RCS file: patches/patch-config_policy.xml diff -N patches/patch-config_policy.xml --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ patches/patch-config_policy.xml 23 Aug 2018 14:52:22 -0000 1.2 @@ -0,0 +1,24 @@ +$NetBSD: patch-config_policy.xml,v 1.2 2018/08/23 14:52:22 leot Exp $ + +Disable ghostscript coders by default to workaround VU#332928: + + +--- config/policy.xml.orig 2018-08-13 11:05:28.000000000 +0000 ++++ config/policy.xml +@@ -74,4 +74,16 @@ + + + ++ ++ ++ ++ ++ ++ ++ ++ ++ +