Remote code execution vulnerability in ImageMagick

Re:Remote code execution vulnerability in ImageMagick by networked on Wednesday May 04, 2016 @07:49AM (#11627662)

To elaborate on the above a bit, for me the choice between Jim Tcl and the "big" Tcl 8.x comes down to choosing between vendoring the dependencies and embedding the runtime (Jim Tcl) vs. using the distribution libraries and extending the runtime (Tcl 8).

Either way you get a very fine C library that prevents you from succumbing to Greenspun's tenth rule, so I can only recommend it for most C programs and libraries of sufficient size and complexity.

[ Parent | on HN ]

Re:Remote code execution vulnerability in ImageMagick by ashitlerferad on Wednesday May 04, 2016 @11:42PM (#11633890)

Jim Tcl is available in the distros; at least Debian, Ubuntu, OpenBSD, FreeBSD, NetBSD, openSUSE, Source Mage, Fedora and Gentoo have it.

[ Parent | on HN ]

Re:Remote code execution vulnerability in ImageMagick by networked on Friday May 06, 2016 @05:00AM (#11642600)

Oh yes, it is pretty widely available. What I meant was that it was smaller and easier to vendor: for example, you can produce an SQLite-style amalgamation file for it.

[ Parent | on HN ]