Hi ---
I’ve been informed by our IT security department that ImageMagick 6 (the
ImageMagick port) has dangerous flaws and I need to remove it from my systems
by the end of next week. ImageMagick 7 is ok. The problem is that texlive
indirectly depends on pstoedit and pstoedit depends on ImageMagic.
As an experiment, I changed “ImageMagick” to “ImageMagick7” in the pstoedit
Portfile. The modified pstoedit port builds successfully and LaTeX appears to
run, but I have no faith that the change is safe. Is there a way to test that
pstoedit and texlive are actually working correctly? Is there a better way of
avoiding the ImageMagick issue?
I can submit a patched Portfile for pstoedit that adds variants for selecting
the ImageMagick version, but I’m reluctant to do that without knowing that the
changes are correct.
Thanks.
--- Steve
