Demote CVE-2018-5709 to unimportant

Although the potential integer overlfow issue is there, it's not a
security sensitive issue as respective codepaths are only run on trusted
input. Still the CVE was not rejected, tus demote severity to
unimportant.