| <<<Back 1 day (to 2018/03/01) | 20180302 |
deekej | hey guys - this just arrived to our BZ, and I'm not sure if it has reached you yet, so I'm posting it here | 15:00.31 |
| https://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate | 15:00.32 |
| I'm not sure if this should be fixed in Ghostscript or ImageMagick | 15:00.51 |
| It's supposed to be related to CVE-2016-7976 | 15:01.15 |
chrisl_laptop | deekej: That is fixed in Ghostscript - the fix is linked in the CVE record | 15:04.38 |
deekej | chrisl_laptop: okay, sorry for the buzz :) | 15:05.49 |
chrisl_laptop | deekej: It's always possible I'm missing something.... | 15:06.19 |
deekej | I knew you were fixing it. The report I received today said that there's another exploit related to this, so I just wanted to make sure. | 15:06.50 |
chrisl_laptop | deekej: if you get an example exploit I can run on Ghostscript, I'll look at it | 15:08.47 |
deekej | chrisl_laptop: I'm not on security team, so I might not get my hands on it soon :-/ but I'll keep you in the loop if I get more info | 15:09.44 |
chrisl_laptop | Thanks | 15:10.21 |
| Forward 1 day (to 2018/03/03)>>> | |