Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c7b4a466 by Salvatore Bonaccorso at 2026-10-12T22:06:40+02:00
Process more imagemagick issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -351,21 +351,43 @@ CVE-2026-109272 (ImageMagick 7.1.1-31 before 7.1.2-32
contains a NULL pointer de
CVE-2026-109271 (ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after
free vulnera ...)
TODO: check
CVE-2026-109270 (ImageMagick before 7.1.2-32 contains a memory leak
vulnerability in th ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f32c-2v6j-wvh5
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/da4cfd78a2ceea4cf54207834f9d60c1b9c38797
(7.1.2-32)
CVE-2026-109269 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an infor ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxrx-rjp3-27rj
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/aa104ff2e408bea23828e7a7a346f9080da4104b
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/acf52477cf05c5ff9c8315d44043589a5190a408
(6.9.13-57)
CVE-2026-109268 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a use af ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/3285d692ebf200e9cbeff59d1ccc00caab99ad54
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/966e227a1a8b520ea1652e2eb3ca78b08d3206f5
(6.9.13-57)
CVE-2026-109267 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a stack ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-462x-739v-qvq2
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/507aee2308046b25e251d0be1a5371327bb79683
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/c10823904b251d07fe79346a7136b0af295d451b
(6.9.13-57)
CVE-2026-109266 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an XML i ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3429-f84m-8qhw
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/45bb7328b36c163234f5ccb7f1d494b7c4c8c775
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/30499e67801ee8a0e70817d28b861b8616d72555
(6.9.13-57)
CVE-2026-109265 (ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer
over-read v ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jph3-37cg-79wg
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/7605c7619da77a5ff1ccf4ec159f3ec782c6bda7
(7.1.2-32)
CVE-2026-109264 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
uncontro ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmqj-84pr-qc7c
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/6ff963c14ccb5fefb4eb8654c8b0219033df2b20
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/d4f06dcca7ad99d639af85bc347ad9fdfdcec8e2
(6.9.13-57)
CVE-2026-109263 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2
(7.1.2-32)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/3e2075fe4a148ce33e7d749a99898e55a6cad7b5
(6.9.13-57)
CVE-2026-109262 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- imagemagick <unfixed>
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c7b4a4668139c3151a6bb0cf9a41c6606bc7235e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c7b4a4668139c3151a6bb0cf9a41c6606bc7235e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
