Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b772e7b7 by Moritz Muehlenhoff at 2026-10-13T15:19:09+02:00
bugnums
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -685,7 +685,7 @@ CVE-2020-37280 (cbor-sync through 1.0.4 contains a resource
exhaustion vulnerabi
CVE-2020-37279 (easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command
injection vu ...)
TODO: check
CVE-2026-103658 (GNU Aspell 0.60.8.2 (first vulnerable version is not known)
contains a ...)
- - aspell <unfixed>
+ - aspell <unfixed> (bug #1150801)
[trixie] - aspell <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2550001
NOTE:
https://github.com/GNUAspell/aspell/security/advisories/GHSA-p35p-2mw5-fj5j
@@ -1055,121 +1055,121 @@ CVE-2026-109284 (Open WebUI from 0.11.0 before 0.11.4
contains an improper autho
CVE-2026-109283 (Open WebUI from 0.11.1 before 0.11.4 contains an
authorization bypass ...)
NOT-FOR-US: Open WebUI
CVE-2026-109282 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a type c ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/af7b85012e62fa65393277790b96c56a98d882b6
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/a17cfd15af1038e3ef179016b41ad88e936b4487
(6.9.13-57)
CVE-2026-109281 (ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer
over-read ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvgp-q487-j22w
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/0e82a4d0b294581186ed7b3e1dce59c858a73dba
(7.1.2-32)
CVE-2026-109280 (ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after
free vulnera ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/fb743d60700c9bc350c3d2a0b48b998bdabc466c
(7.1.2-32)
CVE-2026-109279 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks
proper sync ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/12db6f04e895deae4537ead10c771a244607794a
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/9ddc71abea5cbe7d18164fa0f0077a105cab514f
(6.9.13-57)
CVE-2026-109278 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/15892fc0dc050a3693e28a214478a8d8488d648c
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/0d2544e641848462e8b469c06cde69d7d77c35c6
(6.9.13-57)
CVE-2026-109277 (ImageMagick before 7.1.2-32 contains a policy bypass
vulnerability in ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/ce92ae07c2ca2c20c131eaf6da6da734c1cafce0
(7.1.2-32)
CVE-2026-109276 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an incom ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4r
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/b2d579d20cc503185b6e8b0bc2dfb520b7bce58a
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/3875281ca0c5aa67b2bf0454725abf177c706b3b
(6.9.13-57)
CVE-2026-109275 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a code i ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-233r-2p53-wqf5
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/6cfb8d8c65bb0aba49903589b444f45ea074a226
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/c9e9c3a84945d698e8c4e849ec858dc914397181
(6.9.13-57)
CVE-2026-109274 (ImageMagick before 7.1.2-32 contains a time-of-check
time-of-use symli ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7q74-r26w-fwcx
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/9e789499e67dbf5c4ee9fe1b72690738c799ec73
(7.1.2-32)
CVE-2026-109273 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an infor ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/5a5c2e51948fcc5d85b8d832938e2c1b4db4a699
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/a32215ba7a193f2bc896ba6ed4be4013cc06e22b
(6.9.13-57)
CVE-2026-109272 (ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer
dereferen ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/d98509b23a547d9ccd0a8af8650d03c5c01c3722
(7.1.2-32)
CVE-2026-109271 (ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after
free vulnera ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/48c49d0cc2b72970b762e0d3263f6c35ab35a7b4
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/2ed1b96b9bc71434f0c4e82e3c63fec029c684c6
(7.1.2-32)
CVE-2026-109270 (ImageMagick before 7.1.2-32 contains a memory leak
vulnerability in th ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f32c-2v6j-wvh5
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/da4cfd78a2ceea4cf54207834f9d60c1b9c38797
(7.1.2-32)
CVE-2026-109269 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an infor ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxrx-rjp3-27rj
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/aa104ff2e408bea23828e7a7a346f9080da4104b
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/acf52477cf05c5ff9c8315d44043589a5190a408
(6.9.13-57)
CVE-2026-109268 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a use af ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/3285d692ebf200e9cbeff59d1ccc00caab99ad54
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/966e227a1a8b520ea1652e2eb3ca78b08d3206f5
(6.9.13-57)
CVE-2026-109267 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a stack ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-462x-739v-qvq2
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/507aee2308046b25e251d0be1a5371327bb79683
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/c10823904b251d07fe79346a7136b0af295d451b
(6.9.13-57)
CVE-2026-109266 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an XML i ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3429-f84m-8qhw
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/45bb7328b36c163234f5ccb7f1d494b7c4c8c775
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/30499e67801ee8a0e70817d28b861b8616d72555
(6.9.13-57)
CVE-2026-109265 (ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer
over-read v ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jph3-37cg-79wg
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/7605c7619da77a5ff1ccf4ec159f3ec782c6bda7
(7.1.2-32)
CVE-2026-109264 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
uncontro ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmqj-84pr-qc7c
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/6ff963c14ccb5fefb4eb8654c8b0219033df2b20
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/d4f06dcca7ad99d639af85bc347ad9fdfdcec8e2
(6.9.13-57)
CVE-2026-109263 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/3e2075fe4a148ce33e7d749a99898e55a6cad7b5
(6.9.13-57)
CVE-2026-109262 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/a568d698ffb3dd57134fef8e9b64b61f1154a1df
(6.9.13-57)
CVE-2026-109261 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/93aa075f0fa5a6ae6a83a63acc7c84283aa6d31b
(6.9.13-57)
CVE-2026-109260 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/fd1b9c85f2634e34034d39016ed7542ac0a19930
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/55346382cebdf5c5fa6c544a7df7ae4910ffb090
(6.9.13-57)
CVE-2026-109259 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an unini ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/df199b79f0a1c87ca009e431f03cb387af160f77
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8e809498fd328256612ee9c0ff7941bd452a0285
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/9c7c5f9f5fcc9e23f0a8fda830cecfbb3310fbd9
(6.9.13-57)
CVE-2026-109258 (ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid
memory free v ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8caa6a0c62a3ac1f81b19a2ee929fbfe46ee0323
(7.1.2-32)
CVE-2026-109239 (Crawl4AI before 0.9.4 contains a blind server-side request
forgery vul ...)
@@ -1780,7 +1780,7 @@ CVE-2026-108981 (ngx_cache_purge before 3.0.4 can allow
file deletion via a syml
CVE-2026-108980 (Blinko through 1.8.8 allows directory traversal, overwriting
startup f ...)
NOT-FOR-US: Blinko
CVE-2026-108978 (Heap-based buffer overflow vulnerability in Samsung
Opensource rlottie ...)
- - rlottie <unfixed>
+ - rlottie <unfixed> (bug #1150772)
[trixie] - rlottie <no-dsa> (Minor issue)
NOTE: https://github.com/Samsung/rlottie/pull/609/
CVE-2026-108976 (GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS
command inje ...)
@@ -3549,7 +3549,7 @@ CVE-2026-108125 (Improper neutralization of special
elements used in an SQL comm
CVE-2026-108124 (Improper neutralization of special elements used in an SQL
command ('S ...)
NOT-FOR-US: wp-post-author
CVE-2026-108119 (A flaw was found in busybox. The tar applet's deferred
link-creation h ...)
- - busybox <unfixed>
+ - busybox <unfixed> (bug #1150771)
[trixie] - busybox <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2548611
CVE-2026-108113 (ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted
file uploa ...)
@@ -14812,7 +14812,7 @@ CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't
require the server_hostname arg
- python3.13 <unfixed>
[trixie] - python3.13 <no-dsa> (Minor issue)
- python3.11 <removed>
- - pypy3 <unfixed>
+ - pypy3 <unfixed> (bug #1150803)
[trixie] - pypy3 <no-dsa> (Minor issue)
[bookworm] - pypy3 <postponed> (Minor issue)
NOTE: https://github.com/python/cpython/issues/156793
@@ -15126,7 +15126,7 @@ CVE-2026-19445 (A remote, unauthenticated TLS client
can make a server crash or
- python3.13 <unfixed>
[trixie] - python3.13 <no-dsa> (Minor issue)
- python3.11 <removed>
- - pypy3 <unfixed>
+ - pypy3 <unfixed> (bug #1150805)
[trixie] - pypy3 <no-dsa> (Minor issue)
[bookworm] - pypy3 <postponed> (Minor issue)
NOTE: https://github.com/python/cpython/issues/156293
@@ -15519,12 +15519,12 @@ CVE-2026-102843 (A security flaw has been discovered
in gedelumbung HospitalMana
CVE-2026-102842 (A vulnerability was identified in gedelumbung
HospitalManagement up to ...)
NOT-FOR-US: gedelumbung HospitalManagement
CVE-2026-102805 (A flaw has been found in Nothings stb up to 1.16. This
affects the fun ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #1150800)
[trixie] - libstb <postponed> (Minor issue, revisit when fixed upstream)
[bookworm] - libstb <postponed> (Minor issue, revisit when fixed
upstream)
NOTE: https://github.com/nothings/stb/issues/1964
CVE-2026-102804 (A vulnerability was detected in Nothings stb up to
2c980bb59875b0d3214 ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #1150773)
[trixie] - libstb <postponed> (Minor issue, revisit when fixed upstream)
[bookworm] - libstb <postponed> (Minor issue, revisit when fixed
upstream)
NOTE: https://github.com/nothings/stb/issues/1961
@@ -15931,7 +15931,7 @@ CVE-2026-12345 (The cleanup of
tempfile.TemporaryDirectory is vulnerable to a ra
- python3.13 <unfixed>
[trixie] - python3.13 <no-dsa> (Minor issue)
- python3.11 <removed>
- - pypy3 <unfixed>
+ - pypy3 <unfixed> (bug #1150804)
[trixie] - pypy3 <no-dsa> (Minor issue)
[bookworm] - pypy3 <postponed> (Minor issue)
NOTE: https://github.com/python/cpython/issues/157579
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b772e7b7bcdd9abf60f3424dc0bebc52d6983737
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b772e7b7bcdd9abf60f3424dc0bebc52d6983737
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
