Re: ImageMagick Mogrify: Apply vs. Convert to Profile
Re: ImageMagick Mogrify: Apply vs. Convert to Profile
- Subject: Re: ImageMagick Mogrify: Apply vs. Convert to Profile
- From: Graeme Gill <email@hidden>
- Date: Mon, 23 Jan 2017 09:48:46 +1100
Rick Gordon wrote:
> I have installed ImageMagick on a Linux server hosting a WordPress site.
>
> If I run the command
> mogrify -profile PATH/TO/sRGB.icm MY_TARGET_IMAGE
> ...will that apply the profile or convert the image to that profile?
Beware that ImageMagick has had (and may still have) flaws that allow an attacker
to take over a server, if they are able to get it to process a specially crafted
image file. ImageMagick has had a lot of work done on it recently to fix these
sorts of bugs, but there are still issues being reported, and any program
that tries to support dozens of different image formats is highly prone to these
sorts of problems.
See <https://lwn.net/Articles/710797/> and <https://imagetragick.com/> for instance.
If you are just running it yourself manually on known image files, this
is probably not an issue for you.
> Color me confused. I'm looking for a way to apply an sRGB profile to untagged images, via
> the command line, in Linux. And I apparently can't install Argyll, since I don't have
> admin privileges: It's a shared server.
You can certainly use things like ArgyllCMS cctiff and other utilities without admin
privileges - it isn't needed unless you want to connect an instrument
and the systems USB isn't configured in a sympathetic way. But also be aware that
cctiff has not been tested or hardened with a hostile environment in mind,
although its attack surface is probably a bit smaller than ImageMagick, since
it only supports three binary file formats (ICC, TIFF and JPEG).
Cheers,
Graeme Gill.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Colorsync-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden