Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9ee7f92c by Salvatore Bonaccorso at 2026-10-07T22:12:18+02:00
Add more imagemagick issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -278,27 +278,60 @@ CVE-2026-107103 (This vulnerability exists in the ERP
system due to insufficient
CVE-2026-107102 (This vulnerability exists in the ERP system due to improper
validation ...)
TODO: check
CVE-2026-106580 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/768bdd0dbb9a9ad743b6a6e557126b788b325970
(7.1.2-31)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/ad178e41fce2afa6be2b91fb4e7f41c4c5448117
(6.9.13-56)
CVE-2026-106579 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/82f373fedb3425c83a239103ab86f4fa86fd49ac
(7.1.2-31)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/dcdbbf4278fab20a32a4ad80e64cb95c368ca8dd
(7.1.2-31)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/ac85c8e0a319b1eaf4c3d05d326605f5bae723d6
(6.9.13-56)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/c54667bfe605ebdc17c23cb70a26dbe00b338222
(6.9.13-56)
CVE-2026-106578 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xf5-c3jx-rp39
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/5d29c094020612dc8fb471b10fc1d1cc6e9e4378
(7.1.2-31)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/bfe0117fd9742b3970383e000978d64e5e04372d
(6.9.13-56)
CVE-2026-106577 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5rg6-j44q-q892
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/2ba2edfd04a1ab3d45af4a0dc1e640dde7020192
(7.1.2-31)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/78378cd623468760bee82a5930cb3011725916f8
(7.1.2-31)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/879489740daa44dd72e9405b26c845e8aa3d2f53
(6.9.13-56)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/d5750d7309ef5a8cd561430d932a183e4168f484
(6.9.13-56)
CVE-2026-106576 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v45j-x8p4-3mh4
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/f491576297141ff685dc4460d811986f5b6b6cec
(7.1.2-31)
CVE-2026-106575 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2w4h-697j-4vrm
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/86672a16cedbf5a06d64e629e058310d683bb48e
(7.1.2-31)
CVE-2026-106574 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/c69f54e1c8660e45f2ff83c354bf924a946d9356
(7.1.2-31)
CVE-2026-106573 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/c311471c4e4978494834c707b417bc033d95cc48
(7.1.2-31)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/49560a1641f72a127e413b9861eca0997fde2b96
(6.9.13-56)
CVE-2026-106572 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wxw6-98rj-hjfr
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/19bce64e3667ff0348d559e2526c850f8fbe2b5a
(7.1.2-30)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/0ca580238abba18910cfee0fcc3159621fec0dee
(6.9.13-55)
CVE-2026-106571 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8f3a15e60b723bfe3e80bd1b5e4bee88397467f7
(7.1.2-31)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/91f4ed74a1fd8326ade11a1153de110f22d89aa1
(6.9.13-56)
CVE-2026-106570 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44
(7.1.2-32)
CVE-2026-106569 (ImageMagick is free and open-source software used for editing
and mani ...)
TODO: check
CVE-2026-106568 (ImageMagick is free and open-source software used for editing
and mani ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ee7f92c82a5473f2bb9f731095822f5a45df453
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ee7f92c82a5473f2bb9f731095822f5a45df453
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
