That’s good to know.   I will ask IT.
Thanks.
   --- Steve

From: Dave Allured - NOAA Affiliate <[email protected]>
Date: Wednesday, February 25, 2026 at 1:26 AM
To: Langer, Stephen A. (Fed) <[email protected]>
Cc: [email protected] <[email protected]>
Subject: Re: tex, imagemagick, and pstoedit

You don't often get email from [email protected]. Learn why this is 
important<https://aka.ms/LearnAboutSenderIdentification>
Steve, there is an ImageMagick-6 update pending, including security fixes.  
Will this satisfy your IT security department?  If so, this would defer the 
need to solve the ImageMagick-7 link issue.

https://github.com/macports/macports-ports/pull/29326#issuecomment-3956540188


On Fri, Feb 20, 2026 at 11:31 AM Langer, Stephen A. (Fed) via macports-users 
<[email protected]<mailto:[email protected]>> 
wrote:
Hi ---

I’ve been informed by our IT security department that ImageMagick 6 (the 
ImageMagick port) has dangerous flaws and I need to remove it from my systems 
by the end of next week.  ImageMagick 7 is ok.  The problem is that texlive 
indirectly depends on pstoedit and pstoedit depends on ImageMagic.

As an experiment, I changed “ImageMagick” to “ImageMagick7” in the pstoedit 
Portfile.  The modified pstoedit port builds successfully and LaTeX appears to 
run, but I have no faith that the change is safe.  Is there a way to test that 
pstoedit and texlive are actually working correctly?   Is there a better way of 
avoiding the ImageMagick issue?

I can submit a patched Portfile for pstoedit that adds variants for selecting 
the ImageMagick version, but I’m reluctant to do that without knowing that the 
changes are correct.

Thanks.
    --- Steve

Reply via email to