Still getting this error in 2022, despite the bug having been closed years ago, and having never existed in debian stable.
34710,4> mogrify -format pdf -- *png mogrify-im6.q16: attempt to perform an operation not allowed by the security policy `PDF' @ error/constitute.c/IsCoderAuthorized/421. This makes the package rather useless for the vast majority of uses, which is converting trusted data. We're not all running public facing webservers accepting unsanitised data from the public. Some of us use our computers to do useful things too. -- Tim Connors