Hello, Moritz Mühlenhoff, le mer. 07 nov. 2018 23:04:55 +0100, a ecrit: > In this specific case other, more promising hardening options would be: > - IM is only used for the braille support, so this could be split into > a separate binary package, reducing the attack footprint for the non-braille > installations of cups-filters
Mmm, actually it's even a very specific case of braille embossing, which is really not common, and most probably really never used in networked situations. Perhaps we could just demote to "Suggests" or even drop it. If the user tries to emboss an image, she'll get an error message hinting to install imagemagick anyway. Samuel