Commit e02461b31 for imagemagick.org
commit e02461b314238215c47248dc2d6fa2f4a31da549
Author: Cristy <urban-warrior@imagemagick.org>
Date: Wed Nov 11 16:33:40 2026 -0500
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f965-fvcw-9vhf
diff --git a/MagickCore/annotate.c b/MagickCore/annotate.c
index 829430545..e6d8862fe 100644
--- a/MagickCore/annotate.c
+++ b/MagickCore/annotate.c
@@ -1642,8 +1642,8 @@ static MagickBooleanType RenderFreetype(Image *image,const DrawInfo *draw_info,
/*
Initialize Truetype library.
*/
- if ((draw_info->font != (char *) NULL) && (*draw_info->font == '@') &&
- (IsRightsAuthorized(PathPolicyDomain,ReadPolicyRights,draw_info->font) == MagickFalse))
+ if ((draw_info->font != (char *) NULL) &&
+ (IsRightsAuthorized(PathPolicyDomain,ReadPolicyRights,*draw_info->font == '@' ? draw_info->font+1 : draw_info->font) == MagickFalse))
ThrowPolicyException(draw_info->font,MagickFalse);
memory=FreetypeAcquireMemoryManager();
if (memory == (FT_Memory) NULL)
diff --git a/coders/svg.c b/coders/svg.c
index 2e2c07aa6..90fa98f88 100644
--- a/coders/svg.c
+++ b/coders/svg.c
@@ -1171,7 +1171,7 @@ static void SVGProcessStyleElement(SVGInfo *svg_info,const xmlChar *name,
}
if (LocaleCompare(keyword,"stroke-dasharray") == 0)
{
- (void) FormatLocaleFile(svg_info->file,"stroke-dasharray %s\n",
+ (void) FormatLocaleFile(svg_info->file,"stroke-dasharray \"%s\"\n",
value);
break;
}
@@ -2209,7 +2209,7 @@ static void SVGStartElement(void *context,const xmlChar *name,
}
if (LocaleCompare(keyword,"stroke-dasharray") == 0)
{
- (void) FormatLocaleFile(svg_info->file,"stroke-dasharray %s\n",
+ (void) FormatLocaleFile(svg_info->file,"stroke-dasharray \"%s\"\n",
value);
break;
}