On Wed, Jul 03, 2019 at 03:43:06PM +0200, Cor Blom wrote:
> Dear LyX devs,
>
> Because of the following bug
>
> https://bugzilla.opensuse.org/show_bug.cgi?id=1139928
>
> I have become aware of the strict security settings in openSUSE which 
> limits capabilities of ImageMagick. There is an alternative setting that 
> the user can activate, but most users will not know this.

Is this security measure sideeffect of ghostscript problems from last september?

As far as I understood the total ban of conversions was just temporary measure
which should be lifted once the individual CVEs were resolved. I believe both
upstream and other distros already lifted it.

> I am just writing this, so you are aware of this. I don't know a solution.

In decreasing order:
- Can't you just file suse-related bug to remove the ban?
- Can't you pull/set different IM config iff lyx is installed?
- Can't you trigger some message if lyx is installed so user is at least know
  how to fix it.

If nothing of this work, we could add some note to our release notes
that users of open suse need to fix IM settings.

Pavel

Reply via email to