[Bug 1836067] Re: Consider reenabling png to eps conversion in ImageMagick in disco

[Marc Deslauriers]

We will not be re-enabling this. Parsing arbitrary postscript is too
dangerous to leave it enabled by default. Newer versions of ImageMagick
have disabled it by default also.

In environments where this functionality is required, it can be turned
back on by locally modifying the /etc/ImageMagick-6/policy.xml file.

** Changed in: imagemagick (Ubuntu)
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to imagemagick in Ubuntu.
https://bugs.launchpad.net/bugs/1836067

Title:
  Consider reenabling png to eps conversion in ImageMagick in disco

Status in imagemagick package in Ubuntu:
  Won't Fix

Bug description:
  $ lsb_release -d
  Description:    Ubuntu 19.04

  $ convert file.png file.eps
  convert-im6.q16: attempt to perform an operation not allowed by the security policy `EPS' @ error/constitute.c/IsCoderAuthorized/408.

  $ aptitude show imagemagick | egrep -i "(Version)|(Instal)"
  Version: 8:6.9.10.14+dfsg-7ubuntu2.2
  Zustand: Installiert

  $ grep "EPS" /etc/ImageMagick-6/policy.xml
    <policy domain="coder" rights="none" pattern="EPS" />

  $ aptitude show ghostscript | egrep -i "(Version)|(Instal)"
  Version: 9.26~dfsg+0-0ubuntu7.1
  Zustand: Installiert

  However, the bug https://www.kb.cert.org/vuls/id/332928/ has been
  closed in ghostscript version 9.24 already, whereas disco has
  ghostscript 9.26.  So please consider reenabling file conversion in
  ImageMagick.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1836067/+subscriptions