[Pkg-gmagick-im-team] Would a backport of imagemagick be possible?
Moritz Mühlenhoff
jmm at inutil.org
Mon Mar 11 22:08:27 GMT 2019
On Fri, Mar 08, 2019 at 10:56:23PM -0500, Roberto C. Sánchez wrote:
> Security Team,
>
> I have been working on imagemagick updates for jessie LTS. According to
> the Security Tracker it looks like there are more than 60 issues that
> have been marked ignored or postponed for imagemagick both in jessie and
> in stretch.
There's a stream of fairly pointless CVE assignments for imagemagick,
but the handful of issues actually worth fixing in stable is actually quite
low and manageable.
I don't think there's a strong reason to rebase imagemagick in stretch.
Cheers,
Moritz
More information about the Pkg-gmagick-im-team
mailing list