[Pkg-gmagick-im-team] Would a backport of imagemagick be possible?

Moritz Mühlenhoff jmm at inutil.org
Mon Mar 11 22:08:27 GMT 2019


On Fri, Mar 08, 2019 at 10:56:23PM -0500, Roberto C. Sánchez wrote:
> Security Team,
> 
> I have been working on imagemagick updates for jessie LTS.  According to
> the Security Tracker it looks like there are more than 60 issues that
> have been marked ignored or postponed for imagemagick both in jessie and
> in stretch.

There's a stream of fairly pointless CVE assignments for imagemagick,
but the handful of issues actually worth fixing in stable is actually quite
low and manageable.

I don't think there's a strong reason to rebase imagemagick in stretch.

Cheers,
        Moritz



More information about the Pkg-gmagick-im-team mailing list