Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5e04fb4e by Moritz Muehlenhoff at 2026-10-14T14:15:23+02:00
new imagemagick issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4253,7 +4253,10 @@ CVE-2026-109966 (yt-dlp-web-ui through 4.0.0 contains an
argument injection vuln
CVE-2026-109965 (Serena before 2.0.0 contains an improper link resolution
vulnerability ...)
NOT-FOR-US: Serena
CVE-2026-109964 (ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap
buffer under ...)
- TODO: check
+ - imagemagick 8:7.1.2.33+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w
+ NOTE:
https://github.com/ImageMagick/ImageMagick/commit/63dde0cf281383ab69432b88305f7dcd6a8ce900
(7.1.2-33)
+ NOTE:
https://github.com/ImageMagick/ImageMagick6/commit/c18c5d5fb7f1d87ddbe0a02e9d1207c89b24588c
(6.9.13-58)
CVE-2026-109963 (Froxlor before 2.3.14 contains an insecure direct object
reference vul ...)
- froxlor <itp> (bug #581792)
CVE-2026-109962 (Froxlor 0.10.0 before 2.3.14 contains a missing authorization
vulnerab ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e04fb4e069206065fd0dbd39e540fd66bd34f58
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e04fb4e069206065fd0dbd39e540fd66bd34f58
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
