Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fcd62063 by Salvatore Bonaccorso at 2026-10-25T21:21:02+01:00
Add more imagemagick issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -135,17 +135,34 @@ CVE-2026-116156 (ImageMagick before 6.9.13-58 and 7.x
before 7.1.2-33 contains a
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7r5g-p7ff-jgcp
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/9108482a07ca08620021853a14133b9bc6e77054
(7.1.2-33)
CVE-2026-116155 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
- TODO: check
+ - imagemagick 8:7.1.2.33+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5jf2-9gcp-q234
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/d8d635ecc52aec6553d96dcf5ca34cab81293a17
(7.1.2-33)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/29876f3e3febec4a9806ed5936a66f18971ce319
(6.9.13-58)
CVE-2026-116154 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
- TODO: check
+ - imagemagick 8:7.1.2.33+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8ghq-p369-g395
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/33d16f3cf4e0439bba4a874e14c5a3168726ed68
(7.1.2-33)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/41bce657a379675706039b97dffc313806b39d23
(6.9.13-58)
CVE-2026-116153 (ImageMagick before 7.1.2-33 contains a heap buffer overflow
vulnerabil ...)
- TODO: check
+ - imagemagick 8:7.1.2.33+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7438-vh5v-v52h
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/3882fd7116e0794a05457f78da80cd39f83b52c3
(7.1.2-33)
CVE-2026-116152 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in th ...)
- TODO: check
+ - imagemagick 8:7.1.2.33+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-83w9-w85j-h9jc
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/62c7876c37347dee0be1872e623650ba59f8a541
(7.1.2-33)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/af510e976301c2516aaa26ea8f88318450eeece2
(7.1.2-33)
CVE-2026-116151 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
- TODO: check
+ - imagemagick 8:7.1.2.33+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v9q4-cm37-q2jm
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/b41a6bc92ac778e0459ce500e9d64fb361e29fd5
(7.1.2-33)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/25166220935dc564e7b98f418e3c417a70063a26
(6.9.13-58)
CVE-2026-116150 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in th ...)
- TODO: check
+ - imagemagick 8:7.1.2.33+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8w9c-hj38-8pf9
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/a63bdd29ebe8439d1bfa51ca4e7890b8b4742560
(7.1.2-33)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/f4454af87ec1be4d6a7f4590c55c1accab779b92
(6.9.13-58)
CVE-2026-116149 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a stack- ...)
TODO: check
CVE-2026-116148 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
an injec ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fcd62063f77cedcde4239bb60e323f498d8c1474
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fcd62063f77cedcde4239bb60e323f498d8c1474
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
