Re: ImageMagick vulnerability
| From: | Jan Ehrhardt | Date: | Sat, 07 May 2016 21:58:11 +0000 |
| Subject: | Re: ImageMagick vulnerability | ||
| References: | 1 | Groups: | php.pecl.dev |
| Request: | Send a blank email to pecl-dev+get-13740@lists.php.net to get a copy of this message | ||
Hi Dan,
Dan Ackroyd in php.pecl.dev (Tue, 3 May 2016 23:33:17 +0100):
>Sorry for being off-topic, but as the maintainer for the Imagick
>extension I feel it necessary to do my best impression of Paul Revere*
>and warn people of an alleged vulnerability in the underlying
>ImageMagick library.
The ImageMagick maintainers are trying to mitigate the vulnerabilities,
but did not succeed fully yet. Ref, for instance:
https://github.com/ImageMagick/ImageMagick/issues/190
I tried to update php_imagick.dll on Windows to 7.0.1-1, but could not get
it compiled. ImageMagick 7 does not use a CORE_RL_wand_.lib and a
CORE_RL_magick_.lib anymore, so compilation on Windows is not possible
yet. There is some work for you to do as well...
Jan