Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f19d2f37 by Bastien Roucariès at 2026-05-30T23:46:33+02:00
Reserve DLA-4609-1 for imagemagick
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -19459,7 +19459,6 @@ CVE-2025-12993
CVE-2026-42050 (ImageMagick is free and open-source software used for editing
and mani ...)
{DSA-6310-1 DSA-6298-1}
- imagemagick 8:7.1.2.21+dfsg1-1
- [bullseye] - imagemagick <postponed> (Minor issue; can be fixed in next
update)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7mxf-ff4f-jj7p
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/25980041f145afc621233a1c050291231b627c48
(7.1.2-20)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/2b4a06cdb9b5b4b8e51247be8b38ea4cbfdfb07c
(6.9.13-45)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[30 May 2026] DLA-4609-1 imagemagick - security update
+ {CVE-2026-33901 CVE-2026-42050 CVE-2026-42326 CVE-2026-45031
CVE-2026-45358 CVE-2026-45359 CVE-2026-45624 CVE-2026-45664 CVE-2026-46520
CVE-2026-46521 CVE-2026-46522 CVE-2026-46523 CVE-2026-46559 CVE-2026-46692
CVE-2026-46693 CVE-2026-47165 CVE-2026-47166}
+ [bullseye] - imagemagick 8:6.9.11.60+dfsg-1.3+deb11u13
[30 May 2026] DLA-4608-1 corosync - security update
{CVE-2026-35091 CVE-2026-35092}
[bullseye] - corosync 3.1.2-2+deb11u2
=====================================
data/dla-needed.txt
=====================================
@@ -241,10 +241,6 @@ haveged
hplip (Thorsten Alteholz)
NOTE: 20260523: Added by maintainer (ta)
--
-imagemagick (rouca)
- NOTE: 20260522: Added by Front-Desk (Beuc)
- NOTE: 20260522: Another batch of CVEs, upcoming DSA (Beuc/front-desk)
---
jackson-core (Markus Koschany)
NOTE: 20250707: Added by Front-Desk (apo)
NOTE: 20251016: A single patch is not possible to apply to fix the CVE. I'm
working on backporting more than one.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f19d2f37b47db6a617760f3856ff0d98502cdc73
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f19d2f37b47db6a617760f3856ff0d98502cdc73
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
