From: mhoellein <mario@hoellein.online>
Date: Mon, 3 Apr 2023 06:52:02 +0000 (+0200)
Subject: committing changes in /etc made by "apt-get upgrade"
X-Git-Url: https://git.hoellein.online/?a=commitdiff_plain;h=bcac6be2269f637e0eae4bda32232616ee140f02;p=vserver

committing changes in /etc made by "apt-get upgrade"

Package changes:
-imagemagick-6-common 8:6.9.10.23+dfsg-2.1ubuntu11.6 all
+imagemagick-6-common 8:6.9.10.23+dfsg-2.1ubuntu11.7 all
-libmagickcore-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.6 amd64
-libmagickcore-6.q16-6-extra 8:6.9.10.23+dfsg-2.1ubuntu11.6 amd64
-libmagickwand-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.6 amd64
+libmagickcore-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.7 amd64
+libmagickcore-6.q16-6-extra 8:6.9.10.23+dfsg-2.1ubuntu11.7 amd64
+libmagickwand-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.7 amd64
---

diff --git a/ImageMagick-6/policy.xml b/ImageMagick-6/policy.xml
index ae5d39144..82a3d0b60 100644
--- a/ImageMagick-6/policy.xml
+++ b/ImageMagick-6/policy.xml
@@ -86,8 +86,6 @@
   <policy domain="delegate" rights="none" pattern="HTTP" />
   <!-- in order to avoid to get image with password text -->
   <policy domain="path" rights="none" pattern="@*"/>
-  <!-- forbid access to /etc mitigate again CVE-2022-44267 and CVE-2022-44268 -->
-  <policy domain="path" rights="none" pattern="/etc/*" />
   <!-- disable ghostscript format types -->
   <policy domain="coder" rights="none" pattern="PS" />
   <policy domain="coder" rights="none" pattern="PS2" />