Commit c0d67d194 for imagemagick.org
commit c0d67d194d2e0cbce4c264965cd079c39564edaf
Author: Cristy <urban-warrior@imagemagick.org>
Date: Tue May 12 11:56:05 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rvp-mpr5-qjm9
diff --git a/coders/video.c b/coders/video.c
index 0652e30e9..869cf7a5a 100644
--- a/coders/video.c
+++ b/coders/video.c
@@ -210,6 +210,8 @@ static Image *ReadVIDEOImage(const ImageInfo *image_info,
images=(Image *) NULL;
read_info=CloneImageInfo(image_info);
delegate_info=GetDelegateInfo("video:decode",(char *) NULL,exception);
+ if (delegate_info == (const DelegateInfo *) NULL)
+ delegate_info=GetDelegateInfo("mpeg:decode",(char *) NULL,exception); /* legacy */
if (delegate_info != (const DelegateInfo *) NULL)
{
char
@@ -688,6 +690,8 @@ static MagickBooleanType WriteVIDEOImage(const ImageInfo *image_info,
Convert PAM to VIDEO.
*/
delegate_info=GetDelegateInfo((char *) NULL,"video:encode",exception);
+ if (delegate_info == (const DelegateInfo *) NULL)
+ delegate_info=GetDelegateInfo((char *) NULL,"mpeg:encode",exception); /* legacy */
if (delegate_info != (const DelegateInfo *) NULL)
{
char
diff --git a/config/policy-open.xml b/config/policy-open.xml
index d1f1230de..12ae35b01 100644
--- a/config/policy-open.xml
+++ b/config/policy-open.xml
@@ -42,7 +42,7 @@
Suppose we do not want users to process MPEG video images, use this policy:
- <policy domain="delegate" rights="none" pattern="mpeg:decode" />
+ <policy domain="delegate" rights="none" pattern="video:decode" />
Here we do not want users reading images from HTTP: