Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a080f0cc by Salvatore Bonaccorso at 2026-10-07T22:18:25+02:00
Add another batch of imagemagick issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -333,17 +333,34 @@ CVE-2026-106570 (ImageMagick is free and open-source
software used for editing a
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44
(7.1.2-32)
CVE-2026-106569 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwj6-pm7x-3r63
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/0691546106f4c7e8857da9f21a0e4a8f41915388
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/5ecd5b047cee7ccfe4e14a733a0755c7b2a90c7d
(7.1.2-32)
CVE-2026-106568 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/e4f7ad983df6c831832eba3689f96b75f8b67051
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/27e36ca5cb446664bfc284d28d91fced8887b025
(6.9.13-57)
CVE-2026-106567 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473
(6.9.13-57)
CVE-2026-106566 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/48e5ce1779fc640a389f0020fd7d965d0c08236e
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/11d2af00a948e9ca2919d9a8684d335a48484094
(6.9.13-57)
CVE-2026-106565 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/82f752927a552cbba1213b1d023b85e76845774c
(6.9.13-57)
CVE-2026-106564 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54rx-5x9g-g465
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/f7437ebafcd92d6959eca4086d80b150d52bdb7c
(7.1.2-32)
CVE-2026-106563 (Backstage is an open framework for building developer
portals. Prior t ...)
NOT-FOR-US: Backstage
CVE-2026-106562 (Backstage is an open framework for building developer
portals. Prior t ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a080f0cce7ffc9ab3711416d686e106b55b18f98
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a080f0cce7ffc9ab3711416d686e106b55b18f98
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
