Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3f846018 by Salvatore Bonaccorso at 2026-10-07T21:53:12+02:00
Add new imagemagick issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -213,11 +213,20 @@ CVE-2026-107212 (Excelize is a Go language library for
reading and writing Micro
CVE-2026-107211 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
TODO: check
CVE-2026-107210 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/ae2ed8c81d8fad1f186e7f2bc0837b46a1c7be61
(7.1.2-30)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/7d8e0eb11804a5ce5322ea317dfd3557cded4e7b
(6.9.13-55)
CVE-2026-107209 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/326451aae51ac2dabc99fe66e063de6ec14cf8c8
(7.1.2-30)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/04a4c5b89c034cf2c93bb0a10044332d941b4fa5
(6.9.13-55)
CVE-2026-107208 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick 8:7.1.2.31+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-27m9-54jx-fgvq
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/907b74817836b4f88e7453f0e95c849a1c5311aa
(7.1.2-30)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/6ba345f88a14fcce35c723c231914ae054c4281a
(6.9.13-55)
CVE-2026-107207 (LMCache through 0.5.5 contains a server-side request forgery
vulnerabi ...)
TODO: check
CVE-2026-107206 (LMCache through 0.5.5 contains a missing authentication
vulnerability ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f846018fc247a43cd4d017b6b5d2f80021a8b0a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f846018fc247a43cd4d017b6b5d2f80021a8b0a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
